last executing test programs: 4.702655985s ago: executing program 3 (id=4865): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @broadcast}, {0x2, 0x0, @rand_addr=0x64010101}, {0x2, 0x4e23, @empty}, 0x8, 0x0, 0x0, 0x0, 0x76, &(0x7f0000000000)='tunl0\x00', 0x7, 0x5, 0x7}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x200}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000c00}, 0x0) r5 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x891c, &(0x7f0000000140)={@mcast2}) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r6, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x7}], 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000180)={r7, @in6={{0xa, 0x4e21, 0x0, @private1, 0x80}}, 0x2, 0x5b}, 0x90) 3.029826429s ago: executing program 3 (id=4869): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f00000011c0)=""/4082, &(0x7f0000000040)=0xff2) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000a40)={0x14, 0x56, 0x601, 0x0, 0x0, "", [@generic="f4"]}, 0x14}], 0x1}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000180001000101000000000000020000000000000900000000060015000400000014001680100008800c00028008000180"], 0x38}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r7 = openat$cgroup_devices(r2, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x6}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x6}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) (async) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r9, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)={0x788, r6, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x9}]}, @NL80211_ATTR_NAN_FUNC={0x75c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x37c, 0xd, 0x0, 0x1, [{0x4}, {0x99, 0x0, "bc3fa6783d921fdd62a2b5acfe33f5d9b751b0303456db9229deec169a2ecf9c5270df6be1c747e68fb26a7e13c3958ff5d11a94f497c6430ffc0657ef38e1eabda94aad9ceb92e3e8239de8503df59dcfd445bfd12dc8ce258d03d33ce52a600417a2f9a0af6f82d5d0a526041004685efec5841b353bf1faa98a41e1e038ee06859dedc60e8ed5b35f9e6319a3f3b18f2f8c67d8"}, {0xb3, 0x0, "071d7a6a0e60756d0593b3ca2e91a66c9f6f5aadca13d4c912a03b88961c6d8923913a7ff140204fe99f7a314809431e0325b8e4323b64ef864308a5117686112509abc55cfd4d4fe49455fb4537bf42383951b04ce77743c7450b5a1c95c946c5fcfbd409dd0d34d5f69a07202c6b3ad6cb221edce06d1088e8d41b4507d9372317d96be15cc8b57d228629c82f048d5f1b69ded9f40df0e34c9d04f21adce8fcb09cb01a6892a267b6263a9af2e9"}, {0x6b, 0x0, "63f977472846c90226b3409c8842e19b00b4d6cea7e65435d775ba1fdc9bf0a34d240d846f7cf5a5a71083a307f0ad61efeee9d757eafb0ea11228186037009db62b52a305d8be9e91325a909a479b3572c214628b24ede969ea62c81b01d94eba6c51b9ba5368"}, {0xad, 0x0, "6944363ed88911bd89ba256c008600fd11478fa92528135f914b038935a353838ddcafec589b7b9720a2009e783d0659c1537204ccd636d1bf41fbde9eaa49c8470b90e586d2e48271b0adc74cc15f978fbbe65989db272bccb985261c526735357c225bf08e9bdcb236a68cf9014f8176212113fd1cc324df0dcabde3f99d419f755092fcbe90e565c3d0a8fc8c5967467d9bc318bb121c2712d928b7f49791f31223d4fc1f391ebf"}, {0x8c, 0x0, "55f5488676d674b70687ffdc3d2fc70054a63576c9bf3f9f95edef51443c8c36c3ee221bb342f1e5c0046b4c81c152b10f2e6f4f70e28774d49c50a2c350817956f879ea8490d341965a225c51b6b78f78669c58e703aebe84f3b35b03d7e661e2e3cf6d553aa73687d642a5ef605dfb2f8b3ff328c8972baeb04c575a925fe902f1e6a77fa39ee8"}, {0xd, 0x0, "e5892ded0e763bbd81"}, {0x69, 0x0, "720b2a6f4517e938a1b85af85a9cf722ac3844e3ba4a8229ca3ad899aa2b10cb47eacd2f60716b5aed615496547e2120badbb8037f12748b21e77d114a6ba7b935080ff4a23cd57bf1269d797401572b711eec3ec5d31f634152a4a126f0e813c11afa5522"}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x5af63062}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x3a8, 0xd, 0x0, 0x1, [{0x5b, 0x0, "333d6c84a98505055fcb8eb3c19e54a3b44c8f783a8d553657681fbf9ebecbcdab838727ba91861cb43cc595ece6b7d3dbffbbfce319a4e903c216de3a5a868545aa103d407692282c71ae54028cfb3428bc43f470a800"}, {0xee, 0x0, "d37ccf4529900edec03db4917385148fc23f90def3e9cfb3880af5ebc4b97a9c3882dcf165b34b562cede272d0ecf6090f508978edb6fcfe90cdd6973cadee802d6ee090e30a1825b1481839cae4b75ccab8736000ac09bc5cced0207083e3fe470ad9b9ef12ec9ec3215954f60ad9d4c8fd26b353471c2ae9b514a7ba3d6b83e00bd6ad6f5ef67207d8386bae9d5d63da4a9adb80c851bca198e7374dbd5863eb7f72218e4f46e2f7ae207a20403b36992e36f073f6624c917342e9fffc0d2d28123051624432f53c0a3651c3b0cf653d3a81e389bea0af3a94ba3e104ccdb9a710bbb3f2151e7b62bb"}, {0xbc, 0x0, "5e65b031fa3c4c310f1a7ea659298018e3cacc4c3bd3bdaa3345b4e58de2ab58260586bfc02ae9947a2a42ff064282b483df32211853c7861f564c5b77651bb1f387bd13b033fc0d6db37ea3990149529261f754383672aaaf5993a5bdf81f90beee83a987c76be15acaa0a97635f970f74ff3800b8cae5c5514b6612f097374caa5c7ad77a2ba1bec98cc07e282e3184f10857e8bf69783819df5df83ecd126a3259966cf080b56191f401d1c25f920862d15223386acd9"}, {0x1b, 0x0, "98be28b2514dd309750c71679dd36624f932b5c65880ab"}, {0x1f, 0x0, "829a83378b3cd1881e4fafaac5649b5d675af7741796cf33a68fdf"}, {0xb7, 0x0, "70558e10613ebb2acfd8106f1d22d6250fe3daf43e32d1c58058086438a9d0db951f840525b733da811f6f00886336e4c19beb3cf6016af7e4d1546a43b1114e0bb15eb4430718a1699606fd180fc36939fa355f397bf9ec4d0e42595a433a4ee445a6d00baf9d551e5c2b7cf47a661b575a3f8d27fd0a633bbdc8d318d549a2987e321cfc49883336e0d274f45b62e4600aa225e98310ad4d82b8122aed1147d97a3fd7cf78ec28a09afd6c42f295144f748c"}, {0x58, 0x0, "12062a49d9203007613779e701dd55eb3ea07523e08f6835ebd4acd79b7cbc70bc2a06c31b62ab3588f6275d2ed3077dc47f34ff8e570a87d096423e75f6c0b294f5fd1e09bcd6a2369fc6a51274f9aa7e406b5f"}, {0x50, 0x0, "588ddccdb9a1a7a941f99fbf6405ced3305dfa3579696af4b6487c5a9af5624fd709840132e55cecb270d244ba5873eff7ecaeedc566a83166b4de28e4614be2c6f06e0010c0c0b12549f812"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x10}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xfffffff9}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "3a9eadaccf3d"}, @NL80211_NAN_FUNC_TYPE={0x5}]}]}, 0x788}, 0x1, 0x0, 0x0, 0x10008010}, 0x40000) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r11) sendmsg$IEEE802154_START_REQ(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r13, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x4008104) (async) writev(r8, &(0x7f0000000300)=[{&(0x7f0000000240)="580000001400192340834b80040d8c560a117436c379000000400000000058000b4824ca945f6400940f6a03250100000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e000000000000d203ac969b9245022ca50489b720772a188d897ffb1c653a205db464a4f94ac2bf39ffd3a19463a9adecf94e981c6767faad8058d9fb04f8a101cd364a865ddfea8079592576f36cd7371d", 0xa3}], 0x1) ioctl$AUTOFS_IOC_ASKUMOUNT(r7, 0x80049370, &(0x7f0000000180)) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="ab001100", @ANYRES8=r0, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x2000c000) (async) r14 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r14, &(0x7f0000000340), 0x9) 2.145897483s ago: executing program 3 (id=4873): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000004000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYBLOB="0000000000000000000000000000000000000000000000000000000038b5fb7e6914dfc09323"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000040a01040600000000000000020000020900010073797a30"], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x1, &(0x7f0000000080)=0x4, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r4, r3, 0x0, 0xe25) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x8b) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611177000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 2.030549253s ago: executing program 4 (id=4876): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xffffffffffffffff, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000014002101000000000000000023000000", @ANYRES32=0x0, @ANYBLOB="040002"], 0x2c}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}]]}, 0x2c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000006, 0x80010, r0, 0x6914f000) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 1.946830905s ago: executing program 3 (id=4877): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x18) (async, rerun: 64) poll(0x0, 0x0, 0x7f) (async, rerun: 64) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x44, r4, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x10}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x4}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc000) 1.715087626s ago: executing program 4 (id=4879): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000400)={0x1f, @none}, 0x8) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0x13, 0x0, 0x13) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="4000a2000e0002"], 0x30}}, 0x0) 1.713997964s ago: executing program 1 (id=4880): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0xff85}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x6) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x2}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x20000000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x2}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x20000000) 1.665094472s ago: executing program 3 (id=4881): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0) 1.510938366s ago: executing program 4 (id=4883): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB="38020000844c458a26fbc59d19e599538cf1ba23f34bf48d1fda6baa336b46767bb5d5ac287ad73a2b521b72b93d31112a203303f0fa7b8a6138c1fed71b3e78195663e4a738c45fa590e82a1103700c921d3feca7b1b47e8c84817b667edbfe88d0cdcd0496d994235bb9a059a4fcc230d7a7a33cdbf206cf0ab8df605addb4a8d22cdb29201db55b02f7443b390a1b3db8203551f0e86a2e69ee760491c75749a93e4641595782b54e7732757eb84ee9bc3aaba820586332328101cadda1af9d9cd77d45c576d04bc6359f8a88e9e8a3161bc76d9662e52fb1c1a0c6b7918a9277b296cecd224b1a15f38d", @ANYRES16=r6, @ANYBLOB="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"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(r2, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(anubis)\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x3}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80004, {0x0, 0x0, 0x0, r10, {0x0, 0x5}, {0xd, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x8}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0xd}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008065}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080)=0x81, 0x4) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500240012800b00010062726964676500001418028005001900020000000500170100000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.469238248s ago: executing program 3 (id=4884): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000c7910a800000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r4, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x44}}, 0x0) r5 = socket(0xa, 0x3, 0x9) getsockopt$nfc_llcp(r5, 0x3a, 0x0, 0x0, 0x2000005d) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0xcc, r4, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff8}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xf31}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x100}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10000}, 0x1) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) getsockopt(r2, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0x0) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r8, 0x80044944, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r9, 0x89e3, &(0x7f0000000000)={0x70, 0x0, 0xc, 0xc, 0x0, 0xf9e78fc95245f17b}) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000040)={'caif0\x00'}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x3c, r6, 0x1, 0x10000, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x3c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x321) 1.32335618s ago: executing program 0 (id=4885): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@getchain={0x2c, 0x66, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xffe0, 0xfff7}, {0xfff2, 0xd}, {0x9, 0xfff3}}, [{0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @empty}]}}]}, 0x5c}}, 0x4040004) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/32, 0x602000, 0x1000}, 0x20) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) 1.322512183s ago: executing program 1 (id=4886): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061114c000000000085000000090000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x48) r1 = accept(r0, 0x0, &(0x7f00000000c0)) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000280)={0x4, &(0x7f0000000340)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}]}) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f00000001c0)) r2 = socket(0x400000000010, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711235000000000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0xfcc8) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$can_j1939(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)="1227b7c5cf5284ad780a71dd9f7f081a671467b173b8f12e474982d1520e39dcb1dbd1f478a78d055145c16b5b573a67436fc4aed99b19cae0674ba9ea4914760fd68f52651982ff66215b99610584b69a69032b9652c33ac2cf4d4eab2d4f54c2048dbcb73f466e9b1d22316c3de46137f94c518153593c7a64727e2ed709eeb96729a480c1d64f7d7f3c9b83bf10f7df40f6a84c235498", 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r8, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000600)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) read(r10, &(0x7f00000003c0)=""/132, 0x84) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000200)) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000040000000400000001000000", @ANYRES32, @ANYBLOB="0400000000000000000f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r12}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r12}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=@newchain={0x38c, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x8, 0xfff3}, {0xfff3, 0xffe0}, {0xffff, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0x9}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xb}}]}}, @TCA_CHAIN={0x8, 0xb, 0xd}, @filter_kind_options=@f_basic={{0xa}, {0x300, 0x2, [@TCA_BASIC_POLICE={0x4}, @TCA_BASIC_ACT={0x2f8, 0x3, [@m_ctinfo={0xa4, 0x8, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}]}, {0x68, 0x6, "499d122949e6e19b473b3cc3a0c36559a26f70c40bfda35b214149214ec4e15bdc1b59515fc1675f9e7febfa33f153affee3aef0668012fe5f1edb10b44467c6151c43d5a7135ab31986ea039b863f32dcfa09f9136a0bdefcba0cbb9dee105c27624ed4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x198, 0x5, 0x0, 0x0, {{0x7}, {0x84, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x1}, @TCA_CT_LABELS={0x14, 0x7, "4af1d236602b03fc4c43494a975964c0"}, @TCA_CT_PARMS={0x18, 0x1, {0xffff3887, 0x0, 0x1, 0x2, 0x5}}, @TCA_CT_ACTION={0x6, 0x3, 0xc}, @TCA_CT_ZONE={0x6, 0x4, 0x101}, @TCA_CT_ZONE={0x6}, @TCA_CT_MARK={0x8, 0x5, 0x6f}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ff8f8c0863691215a8df72d401f44fe9"}, @TCA_CT_PARMS={0x18, 0x1, {0x5, 0x6, 0x0, 0xd, 0x6}}]}, {0xef, 0x6, "fde0819c228ecf1538f89b46f93fa1404eed19de7c14d1dad1d0df606b7446543ac22a0338a3a4046c838364c248ab2685bc720e9dd718b4544c5ea3406b2da5a167468e7fb3481e05b637ab3858324026c54a433ebd941d7112578f87a719cf0809252bd99729f605eaef1ce2328cc511b8c9531cb218d37b874edbf0285c9c14ebf3a713c5d4cb0329480619c5f39d00d3a79d3f4f7045770ccda4a4f354baa1c5d56b5b66a91be998931c463ebea770d57e1903c4174935c2a59d40390d41262d1a0b194e72833b7086986b6d9579df56d409a0b7bc00f801d04920d720866ed0a7c61d638987a5fd08"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0xb8, 0x11, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @dev={0xac, 0x14, 0x14, 0x25}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010100}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x101}]}, {0x2d, 0x6, "e2e4f916f59d97a40e73d50ebaa12930a2ea9cb0f729abc02dd442cc68aa4be35744f687cf2f5aac8c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0xa5}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xd0}]}}, @TCA_RATE={0x6, 0x5, {0x6}}, @TCA_CHAIN={0x8}]}, 0x38c}}, 0x4000) 1.266860384s ago: executing program 2 (id=4887): syz_emit_ethernet(0x16, &(0x7f0000000500)={@remote, @empty, @val={@val={0x88a8, 0x6, 0x1, 0x3}, {0x8100, 0x3, 0x0, 0x2}}, {@mpls_mc}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000580)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r1, 0x0, 0x30, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x8000, 0x0, 0x4}, 0xc) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r5, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x64b4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000000) (async) write(r0, &(0x7f00000000c0)="0d19e9b8063599aa8ee1c61b2f29008077597d3d6221ca0c38e04e0cdc0e10f9d3e41f0d89e38fa600b57ac56914b436a9d709d0368e51f5ef2bfc2fa17a3800cf6ed3248c750ab098ee372b512752de568c7fe35c1ef82b9da248223d32446a405194157e83f4c255845efb220e2d3562df057a8ca9bd21b9c75046110cc61e87f8d1f028c8676b5b4cde4d832ae06bb90e3ac762859def0e2e3c6792df35054d76c95721515671090031821155caddc7a4f1f22819266edf6673f2322ecd4870112b9a7cb9c8acff46", 0xca) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 1.08596974s ago: executing program 2 (id=4888): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00002b00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) splice(r7, 0x0, r5, 0x0, 0x7ffff040, 0x1200000000000000) r8 = openat$cgroup_ro(r4, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r8, &(0x7f00000001c0)="50b5ed987db51dee945ddca4650a1bc200ed54eaa3abb1b3879e86a76cd49ee417cb8e1ac2203e851177884f4b3229c442287506c54b", &(0x7f00000002c0)=""/64}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.016689507s ago: executing program 4 (id=4889): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x80000000, 0x1}}, 0x20) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000030404000000fedbff2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800900010069706970000000001400028008000100", @ANYRES32=r1, @ANYBLOB="08000300ec"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 886.851632ms ago: executing program 0 (id=4890): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = accept(0xffffffffffffffff, &(0x7f0000000900)=@isdn, &(0x7f0000000980)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'batadv_slave_1\x00', 0x0}) connect$packet(r1, &(0x7f0000000a00)={0x11, 0x17, r2, 0x1, 0x9, 0x6, @remote}, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000500)="e0d6bb4ee2dbd89da573425576ea", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r3, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000280)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0xc3, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4) mmap(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x1000002, 0x28011, r6, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x6, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x12}, @jmp={0x5, 0x1, 0x5, 0x6, 0xa, 0xfffffffffffffff8, 0xffffffffffffffff}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000000c0)='GPL\x00', 0x0, 0x5b, &(0x7f0000000100)=""/91, 0x41100, 0xe, '\x00', r4, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x3, 0x8, 0xc0, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000007c0)=[r6, r7], &(0x7f0000000800)=[{0x3, 0x4, 0xf, 0x6}, {0x1, 0x3, 0x4, 0x4}, {0x0, 0x2, 0x0, 0x96d64fb7b9c6e2eb}], 0x10, 0x4}, 0x94) 801.372731ms ago: executing program 0 (id=4891): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 792.3618ms ago: executing program 1 (id=4892): r0 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000f14010000000000000000000c002e0072646d615f636d"], 0x1c}}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, r6, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000808}, 0x2) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 698.911581ms ago: executing program 2 (id=4893): r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) (async, rerun: 64) r1 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) (async) sendto$inet6(r2, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x4c) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000640)={0x1d, r4, 0xffffffffffffffff, {0x0, 0x1}}, 0x18) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003900000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, r4, {0x1, 0x10}, {0xa, 0x10}, {0xc, 0x10}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1000}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (rerun: 32) 655.584964ms ago: executing program 4 (id=4894): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000006480)={0x40, 0x0, 0x7, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_FILTER={0x4}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24040004) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r6, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xf}, 0xa) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', r5, 0x29, 0x80, 0xd0, 0x7ff, 0x41, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x700, 0x700, 0x125, 0x7}}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001d0001002abdd65f0d983acac7b50300f7a6b60b7e3cef7dcfa6f4a97c06000000100279f9a77f20cbb40423c3fa6c2f7a33ec73e1a5aad2", @ANYRES32=0x0, @ANYBLOB="080008090a000100ffffffffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x3120000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x78, r8, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r9}, 0x10) 625.69431ms ago: executing program 1 (id=4895): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x85}, 0x0) 582.575275ms ago: executing program 0 (id=4896): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x6, 0xcbf2, 0x0, 0x4, 0xb81e}, 0x14) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x2, 0x6, 0x6, 0x1}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "db9f8dea0f111e40", "8f36b732900b2b97f43924aadbfcf5ce", "4742872c", "df7950df5105d1a3"}, 0x28) getsockopt$inet6_opts(r0, 0x29, 0x25f4c65badba4ffe, &(0x7f00000000c0)=""/208, &(0x7f00000001c0)=0xd0) (async) ioctl$sock_proto_private(r0, 0x89ef, &(0x7f0000000200)="36204bf8e00001952af8b64228e8e4f0f4b6e1e0d56fb7f0c8cfedfb7246b2362661802b52662c572ccb20e25c2dcc5c37fe2bb8694601307b11f240bd9ec675ed12ea69f69925c161249a21652ef7c658546b0496912107cccb8bcb5912236455d624b21f1edc50fca7680f639411b7") (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@ipv4_deladdr={0x78, 0x15, 0x800, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x71, 0xc8, r1}, [@IFA_LABEL={0x14, 0x3, 'veth1_vlan\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7ff}, @IFA_FLAGS={0x8, 0x8, 0x108}, @IFA_TARGET_NETNSID={0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_LABEL={0x14, 0x3, 'team0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20044842}, 0x20000000) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000480)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) (async) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r5, &(0x7f0000000640)=""/219, 0xdb, 0x40010040, &(0x7f0000000740)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) bpf$ENABLE_STATS(0x20, &(0x7f0000000780), 0x4) (async, rerun: 64) ioctl$sock_rose_SIOCDELRT(r5, 0x890c, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, @default, @netrom={'nr', 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) (async, rerun: 64) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000840)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000c40)=0x1a71, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x4c, r7, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44004}, 0x40) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000e80)={0x2, {{0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}}}, 0x88) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000f40)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000001340)={r8, "1bd1c83302668f173b3acb9b2cc2355f"}) (async) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000002340)=0xf, 0x4) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r9, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002440)={&(0x7f00000023c0)={0x44, r7, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0xc004850) (async) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000002640)) 505.597447ms ago: executing program 1 (id=4897): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xd}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffff8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)=@RTM_GETMDB={0x18, 0x56, 0x10, 0x70bd28, 0x25dfdbfc, {0x7, r2}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x40801) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getanyicast={0x14, 0x3e, 0x536511c7e10367d, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48094}, 0x240400c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r6 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r7 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10, 0x80800) accept4$vsock_stream(r7, &(0x7f0000000440)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x800) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f00000001c0)={'nat\x00', 0xe4, "fc211ba042e73c940f55c86916a557af7c94b7aa30349a5d7c42d309417d33580c29e2403aa0dce0cfdd421697acd1754616d1c90909d3459945900c4530b5809e07686e797b6314f049d7f67503f6264006878aa8cd4ce07e89e2a7a21c15e711895ffd70114c7c48fceee309b76a6e1ad7a6917d697bad3f6cc6770dc6e9e1845c01c0f8051528683e326ec6b562b2e8d1d90db1e42e65682e61a4dce0cebbb07da0f9071ece18f0cdfb10cbd3e2a089c5fe8ad1ab516802338b024d751ca1049e314bb393bd945fc5dd79d38454dfbac8e36e31586a064cb4a744859762ae03c6f1ff"}, &(0x7f00000000c0)=0x108) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x2c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000804}, 0x0) 409.972474ms ago: executing program 2 (id=4898): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7800000010000104000006000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c000100ff01000000000000070001007f000000000000000c000100ffff0000000000000c000100ff0100000000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x78}}, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0xfffffffffffffff1) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="079ee8bc", @ANYRES16=r8, @ANYBLOB="010000000000000000002c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800580000000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000006a00050128bd7000fcdbdf250a000000000000000400090008000500", @ANYRES32=r5, @ANYBLOB="08000a000200000004000b0008000a000200000008000500", @ANYRES32, @ANYBLOB="e4d8293c2493bae8262fd96f212f05044708e1e5c4eaac4e103bee4ae365269e27c46f8758dc294511cc8a5f9f0ba0a30ed9b1ea4fb820157e130970de8dd4eb1357d8e698f0a8afab97f2a062049de96482a2908cebf5a3d7fa93fff340400ff87326d6f8064f09df550bdd187dad5343cb6dea1ddb3be94dce3a0da942f6b403f500000000000000"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7800000010000104000006000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c000100ff01000000000000070001007f000000000000000c000100ffff0000000000000c000100ff0100000000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x78}}, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0xfffffffffffffff1) (async) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) socket$packet(0x11, 0x3, 0x300) (async) sendto$packet(r6, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="079ee8bc", @ANYRES16=r8, @ANYBLOB="010000000000000000002c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800580000000000"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000006a00050128bd7000fcdbdf250a000000000000000400090008000500", @ANYRES32=r5, @ANYBLOB="08000a000200000004000b0008000a000200000008000500", @ANYRES32, @ANYBLOB="e4d8293c2493bae8262fd96f212f05044708e1e5c4eaac4e103bee4ae365269e27c46f8758dc294511cc8a5f9f0ba0a30ed9b1ea4fb820157e130970de8dd4eb1357d8e698f0a8afab97f2a062049de96482a2908cebf5a3d7fa93fff340400ff87326d6f8064f09df550bdd187dad5343cb6dea1ddb3be94dce3a0da942f6b403f500000000000000"], 0x44}}, 0x0) (async) 281.675868ms ago: executing program 4 (id=4899): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1822fb83de4ea4225011aa207d8751"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x421}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000007c0)=""/206, 0xce}, {&(0x7f00000006c0)=""/75, 0x4b}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) 281.223024ms ago: executing program 0 (id=4900): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4080106, r2}) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r6, 0xc1dc2f86a1e4f805, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x44804) bind$bt_l2cap(r4, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, r9, 0x200, 0x0, 0xfffffffd, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000040}, 0x400801d) sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 201.980543ms ago: executing program 2 (id=4901): r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x37, &(0x7f0000000040)={@random="390aa7d7223b", @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x1, 0x84, 0x0, @empty, @local, {[], "bd"}}}}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x84) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x800) recvmsg(r5, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000600)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x81}, 0xc000) poll(&(0x7f0000000740)=[{r5, 0xa403}], 0x1, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c006ca30000ffff27c870a0f2bd98231a084b16", @ANYRES32=0x0, @ANYBLOB="fda65f05000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000640)={{{@in=@multicast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000540)=0xffffffffffffffdf) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@loopback, 0x4e22, 0x0, 0x4e23, 0x4, 0x2, 0x20, 0x20, 0x33, r7, r9}, {0x3, 0x1, 0x7, 0xffffffffffff2a8f, 0xb, 0xff, 0xffffffffffffffff}, {0x80, 0x37b, 0x411f89bd, 0xcd}, 0x7, 0x6e6bc0, 0x0, 0x0, 0x3, 0x2}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0xff}, 0x2, @in=@private=0xa010102, 0x3503, 0x4, 0x0, 0x1, 0x2, 0x5, 0x6}}, 0xe8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x1404, 0x1, 0x70bd2d}, 0x10}}, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)={0x10, 0x1405, 0x1}, 0x10}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) 150.118574ms ago: executing program 1 (id=4902): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xff, 0x2, 0x0, 0x2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001300)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x1, 0x4, 0x7, 0x1, 0x5, 0x81}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009b80)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="d35931b821b7ac86a814acf8e12ce2260c96", 0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061115c000000000006000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) 11.061257ms ago: executing program 2 (id=4903): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x400, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0xa5a342242dba8db4) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4088, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x44}, {&(0x7f0000000200)=""/63, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) mmap$xdp(&(0x7f0000339000/0x3000)=nil, 0x3000, 0x0, 0x40010, r1, 0x2000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) 0s ago: executing program 0 (id=4904): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) (async, rerun: 32) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x180000) (rerun: 32) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) kernel console output (not intermixed with test programs): layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.638190][T16220] netlink: 'syz.3.2988': attribute type 10 has an invalid length. [ 314.714516][T16114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.741101][T16220] veth0_macvtap: left promiscuous mode [ 314.745982][T16226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2992'. [ 314.755904][T16226] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2992'. [ 314.760441][T16224] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2991'. [ 314.765149][T16226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2992'. [ 314.786203][ T5881] Bluetooth: hci0: command tx timeout [ 314.818355][T16114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.835602][T16114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.870766][T16114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.988920][T16114] hsr_slave_0: entered promiscuous mode [ 315.004655][T16114] hsr_slave_1: entered promiscuous mode [ 315.012374][T16114] debugfs: 'hsr0' already exists in 'hsr' [ 315.018278][T16114] Cannot create hsr debugfs directory [ 315.032466][T16232] ip6gre2: entered allmulticast mode [ 315.180671][T16238] netlink: 'syz.0.2996': attribute type 4 has an invalid length. [ 315.191850][T16238] openvswitch: netlink: Actions may not be safe on all matching packets [ 315.255026][T16247] netlink: 'syz.0.2999': attribute type 6 has an invalid length. [ 315.485040][T16114] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.530828][T16260] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3004'. [ 315.535429][T16262] wg1: entered promiscuous mode [ 315.545237][T16262] wg1: entered allmulticast mode [ 315.592134][T16114] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.681191][T16114] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.741984][T16114] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.031629][T16114] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 316.096590][T16114] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 316.141591][T16114] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 316.174899][T16114] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 316.390977][T16280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3009'. [ 316.417464][T16276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3009'. [ 316.583906][T16292] syzkaller1: entered allmulticast mode [ 316.760512][T16114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.869698][ T5881] Bluetooth: hci0: command tx timeout [ 316.883565][T16114] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.905618][ T6990] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.913944][ T6990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.941974][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.949208][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.427016][ T94] block nbd0: Possible stuck request ffff8880257e5080: control (read@0,1024B). Runtime 180 seconds [ 317.438161][ T94] block nbd0: Possible stuck request ffff8880257e5240: control (read@1024,1024B). Runtime 180 seconds [ 317.449859][ T94] block nbd0: Possible stuck request ffff8880257e5400: control (read@2048,1024B). Runtime 180 seconds [ 317.461199][ T94] block nbd0: Possible stuck request ffff8880257e55c0: control (read@3072,1024B). Runtime 180 seconds [ 317.664812][T16114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.861213][T16114] veth0_vlan: entered promiscuous mode [ 317.884785][T16114] veth1_vlan: entered promiscuous mode [ 318.010015][T16114] veth0_macvtap: entered promiscuous mode [ 318.057581][T16114] veth1_macvtap: entered promiscuous mode [ 318.211860][T16114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.225431][T16114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.281981][ T6991] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.307081][ T6991] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.336016][T16375] tipc: Enabled bearer , priority 0 [ 318.348690][ T6991] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.370130][ T6991] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.389633][T16381] netlink: 'syz.3.3034': attribute type 3 has an invalid length. [ 318.411576][T16375] syzkaller0: entered promiscuous mode [ 318.420060][T16375] syzkaller0: entered allmulticast mode [ 318.441552][T16383] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 318.469309][T16375] tipc: Resetting bearer [ 318.559334][T16370] tipc: Resetting bearer [ 318.624260][T16370] tipc: Disabling bearer [ 318.662882][T16392] veth1_macvtap: left promiscuous mode [ 318.674057][T16392] macsec0: entered promiscuous mode [ 318.679925][T16392] macsec0: entered allmulticast mode [ 318.751646][T16392] tipc: Enabled bearer , priority 0 [ 318.797311][T16392] syzkaller0: entered promiscuous mode [ 318.802851][T16392] syzkaller0: entered allmulticast mode [ 318.858486][T16402] netlink: 'syz.2.3042': attribute type 39 has an invalid length. [ 318.899178][T16392] tipc: Resetting bearer [ 318.933286][T16394] veth1_macvtap: entered promiscuous mode [ 318.946964][ T5881] Bluetooth: hci0: command tx timeout [ 318.952589][T16394] veth1_macvtap: entered allmulticast mode [ 318.971926][T16394] macsec0: left promiscuous mode [ 318.978453][T16394] macsec0: left allmulticast mode [ 318.983711][T16394] veth1_macvtap: left allmulticast mode [ 319.036443][T16390] tipc: Resetting bearer [ 319.072520][T16390] tipc: Disabling bearer [ 319.093581][ T6990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.106273][ T6990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.220005][ T6987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.244935][ T6987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.376955][T16413] netlink: 'syz.0.3045': attribute type 64 has an invalid length. [ 319.563271][T16428] syz.1.2953 uses old SIOCAX25GETINFO [ 319.885947][T16440] __nla_validate_parse: 16 callbacks suppressed [ 319.885968][T16440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3053'. [ 320.094911][T16446] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3055'. [ 320.106632][T16447] netlink: 'syz.0.3054': attribute type 10 has an invalid length. [ 320.368648][ T6985] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.389234][ T6985] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.396722][ T5183] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 320.409326][ T5183] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 320.419751][T16460] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 320.428964][ T5183] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 320.449545][ T5183] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 320.460769][ T5183] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 320.486190][ T6985] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.512589][ T6985] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.609508][ T6985] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.619610][ T6985] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.651307][T16457] lo speed is unknown, defaulting to 1000 [ 320.665098][T16467] openvswitch: netlink: Flow key attr not present in new flow. [ 320.726104][ T6985] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.744110][ T6985] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.020571][T16487] netlink: 'syz.1.3064': attribute type 8 has an invalid length. [ 321.033657][ T5867] Bluetooth: hci0: command tx timeout [ 321.095271][T16489] netlink: 'syz.2.3063': attribute type 4 has an invalid length. [ 321.201618][T16457] chnl_net:caif_netlink_parms(): no params data found [ 321.646955][T16516] netlink: 'syz.1.3068': attribute type 21 has an invalid length. [ 321.739158][T16525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3072'. [ 321.753038][T16525] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3072'. [ 322.551935][ T5867] Bluetooth: hci3: command tx timeout [ 322.810660][ T6985] bond0 (unregistering): (slave gretap0): Releasing active interface [ 323.106331][ T5867] Bluetooth: hci0: command 0x0405 tx timeout [ 323.381001][ T6985] bond1 (unregistering): Released all slaves [ 323.485120][ T6985] bond2 (unregistering): Released all slaves [ 323.499666][ T6985] bond3 (unregistering): Released all slaves [ 323.517575][ T6985] bond0 (unregistering): Released all slaves [ 323.534142][ T6985] bond4 (unregistering): Released all slaves [ 323.646368][ T6985] bond5 (unregistering): Released all slaves [ 323.687997][T16516] netlink: 'syz.1.3068': attribute type 6 has an invalid length. [ 323.696479][T16516] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3068'. [ 323.733353][T16525] gretap2: entered promiscuous mode [ 323.752217][T16525] gretap2: entered allmulticast mode [ 323.966739][ T6985] tipc: Disabling bearer [ 324.002590][ T6985] tipc: Left network mode [ 324.110340][ T6985] IPVS: stopping master sync thread 15679 ... [ 324.293066][T16457] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.305000][T16457] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.326586][T16457] bridge_slave_0: entered allmulticast mode [ 324.362954][T16457] bridge_slave_0: entered promiscuous mode [ 324.390275][T16457] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.410322][T16457] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.446966][T16457] bridge_slave_1: entered allmulticast mode [ 324.472090][T16457] bridge_slave_1: entered promiscuous mode [ 324.626301][ T5881] Bluetooth: hci3: command tx timeout [ 324.724736][T16571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.956668][T16457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.012121][T16457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.058295][T16594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3085'. [ 325.293676][T16579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3084'. [ 325.752139][ T6985] hsr_slave_0: left promiscuous mode [ 325.848185][ T6985] veth0_macvtap: left promiscuous mode [ 325.869127][ T6985] veth1_vlan: left promiscuous mode [ 325.883739][ T6985] veth0_vlan: left promiscuous mode [ 325.892389][T16620] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3091'. [ 326.093644][ T6985] pim6reg (unregistering): left allmulticast mode [ 326.167091][T16634] nbd: must specify at least one socket [ 326.254172][T16636] netlink: 'syz.3.3095': attribute type 10 has an invalid length. [ 326.722869][ T5881] Bluetooth: hci3: command tx timeout [ 326.859717][ T6985] lo (unregistering): left allmulticast mode [ 326.874972][T16457] team0: Port device team_slave_0 added [ 326.888928][T16457] team0: Port device team_slave_1 added [ 326.944230][T16636] bridge_slave_1: left allmulticast mode [ 326.950539][T16636] bridge_slave_1: left promiscuous mode [ 326.970307][T16636] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.009873][T16636] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 327.050017][T16644] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3096'. [ 327.131713][T16457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.153595][T16457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.211529][T16457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.229485][T16457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.258047][T16457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.292791][T16457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.320634][T16649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.414615][T16654] netlink: 'syz.1.3101': attribute type 1 has an invalid length. [ 327.423216][T16654] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3101'. [ 327.490161][T16457] hsr_slave_0: entered promiscuous mode [ 327.505141][T16457] hsr_slave_1: entered promiscuous mode [ 327.672387][T16663] sock: sock_set_timeout: `syz.3.3103' (pid 16663) tries to set negative timeout [ 327.702169][ T6985] IPVS: stop unused estimator thread 0... [ 328.025508][T16676] netlink: 'syz.3.3107': attribute type 2 has an invalid length. [ 328.055115][T16676] netlink: 1184 bytes leftover after parsing attributes in process `syz.3.3107'. [ 328.088961][T16676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3107'. [ 328.112018][T16676] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3107'. [ 328.135908][T16676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3107'. [ 328.450415][T16682] lo speed is unknown, defaulting to 1000 [ 328.785935][ T5881] Bluetooth: hci3: command tx timeout [ 328.794468][T16701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3115'. [ 328.876899][T16701] geneve2: entered promiscuous mode [ 328.882367][T16701] geneve2: entered allmulticast mode [ 329.102624][T16457] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 329.136587][T16714] netlink: 'syz.0.3119': attribute type 6 has an invalid length. [ 329.139700][T16457] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 329.198220][T16457] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 329.234806][T16457] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 329.478425][T16457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.531545][T16457] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.562786][ T6969] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.570084][ T6969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.606799][ T6987] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.614090][ T6987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.962387][T16752] Bluetooth: MGMT ver 1.23 [ 330.177660][T16457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.709550][T16457] veth0_vlan: entered promiscuous mode [ 330.735569][T16457] veth1_vlan: entered promiscuous mode [ 330.773742][T16457] veth0_macvtap: entered promiscuous mode [ 330.800756][T16457] veth1_macvtap: entered promiscuous mode [ 330.874122][T16457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.916659][T16457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.955134][T16800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.974247][ T6987] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.996427][ T6987] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.024869][ T6987] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.044657][ T6987] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.144500][T16806] netlink: 'syz.1.3146': attribute type 1 has an invalid length. [ 331.157791][T16806] netlink: 'syz.1.3146': attribute type 1 has an invalid length. [ 331.315431][ T6987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.323003][T16812] __nla_validate_parse: 2 callbacks suppressed [ 331.323029][T16812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3148'. [ 331.337461][ T6987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.348333][T16812] openvswitch: netlink: Unknown nsh attribute 0 [ 331.359632][T16812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.433660][ T6987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.457314][ T6987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.484166][T16814] lo speed is unknown, defaulting to 1000 [ 331.986137][ T5881] Bluetooth: hci0: command 0x0405 tx timeout [ 332.087238][T16844] netlink: 'syz.3.3154': attribute type 7 has an invalid length. [ 332.637565][T16860] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3159'. [ 332.798637][T16865] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3161'. [ 333.179478][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 333.197302][ T5867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.206350][ T5867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.215146][ T5867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.226983][ T5867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.441628][T16886] lo speed is unknown, defaulting to 1000 [ 333.912570][T16916] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3175'. [ 333.941643][T16915] netlink: 'syz.4.3177': attribute type 3 has an invalid length. [ 333.961862][T16918] tipc: Enabling of bearer rejected, failed to enable media [ 333.971530][T16918] tipc: Enabling of bearer rejected, failed to enable media [ 334.032434][T16918] tipc: Enabling of bearer rejected, failed to enable media [ 334.077445][T16918] tipc: Enabling of bearer rejected, failed to enable media [ 334.089104][T16918] tipc: Enabling of bearer rejected, failed to enable media [ 334.089813][T16925] openvswitch: netlink: Actions may not be safe on all matching packets [ 334.110619][T16918] tipc: Enabling of bearer rejected, failed to enable media [ 334.124771][T16918] tipc: Enabling of bearer rejected, failed to enable media [ 334.170387][T16918] tipc: Enabling of bearer rejected, failed to enable media [ 334.208237][T16918] tipc: Enabling of bearer rejected, failed to enable media [ 334.300147][T16918] tipc: Enabling of bearer rejected, failed to enable media [ 334.331261][T16918] tipc: Enabling of bearer rejected, failed to enable media [ 334.364690][T16918] tipc: Enabling of bearer rejected, failed to enable media [ 334.374714][T16886] chnl_net:caif_netlink_parms(): no params data found [ 334.408085][T16918] tipc: Enabling of bearer rejected, failed to enable media [ 334.441459][T16918] tipc: Enabling of bearer rejected, failed to enable media [ 334.482852][T16918] tipc: Enabling of bearer rejected, failed to enable media [ 334.501311][T16918] tipc: Enabling of bearer rejected, failed to enable media [ 334.555953][T16918] tipc: Enabling of bearer rejected, failed to enable media [ 334.603016][T16918] tipc: Enabling of bearer rejected, failed to enable media [ 334.668874][T16918] tipc: Enabling of bearer rejected, failed to enable media [ 334.687409][T16940] netlink: 'syz.1.3182': attribute type 4 has an invalid length. [ 334.710051][T16918] tipc: Enabling of bearer rejected, failed to enable media [ 334.719635][T16940] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 334.729331][T16949] netlink: 'syz.3.3184': attribute type 23 has an invalid length. [ 334.752460][T16886] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.763717][T16886] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.771607][T16886] bridge_slave_0: entered allmulticast mode [ 334.780102][T16886] bridge_slave_0: entered promiscuous mode [ 334.827143][T16918] tipc: Enabling of bearer rejected, failed to enable media [ 334.871287][T16886] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.896866][T16886] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.904203][T16886] bridge_slave_1: entered allmulticast mode [ 334.921152][T16955] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3186'. [ 334.948834][T16955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3186'. [ 334.956331][T16886] bridge_slave_1: entered promiscuous mode [ 334.974480][T16955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3186'. [ 335.118733][T16963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3191'. [ 335.150134][T16959] veth5: entered allmulticast mode [ 335.172335][T16886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.207367][T16886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.253370][T16967] veth1_to_bond: entered allmulticast mode [ 335.266151][ T5881] Bluetooth: hci1: command tx timeout [ 335.269481][T16967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3189'. [ 335.384299][T16967] bond0: (slave bond_slave_1): Releasing backup interface [ 335.443158][T16967] veth1_to_bond (unregistering): left allmulticast mode [ 335.444869][T16979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3193'. [ 335.514047][T16886] team0: Port device team_slave_0 added [ 335.524440][T16886] team0: Port device team_slave_1 added [ 335.575094][T16886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.582753][T16886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.612656][T16886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.632104][T16886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.639573][T16886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.673419][T16886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.752550][T16987] macvlan2: entered allmulticast mode [ 335.760830][T16987] bond0: (slave macvlan2): Opening slave failed [ 335.780477][T16886] hsr_slave_0: entered promiscuous mode [ 335.787711][T16886] hsr_slave_1: entered promiscuous mode [ 335.794066][T16886] debugfs: 'hsr0' already exists in 'hsr' [ 335.800017][T16886] Cannot create hsr debugfs directory [ 335.894285][T16990] netlink: 'syz.0.3198': attribute type 1 has an invalid length. [ 335.934871][T16990] 8021q: adding VLAN 0 to HW filter on device bond8 [ 335.984604][T16990] bond8: (slave gretap2): making interface the new active one [ 335.994205][T16990] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 336.055535][T16993] netlink: 'syz.1.3199': attribute type 1 has an invalid length. [ 336.122742][T16886] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 336.134672][T16886] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.147191][T16886] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 336.264294][T16886] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 336.303265][T16886] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.326014][T16886] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 336.392719][T17000] geneve3: entered promiscuous mode [ 336.539603][T17005] __nla_validate_parse: 4 callbacks suppressed [ 336.539624][T17005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3202'. [ 336.578248][T16886] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 336.591277][T16886] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.626302][T16886] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 336.829089][T16886] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 336.859707][T16886] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.888283][T16886] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 336.926850][T17024] netlink: 'syz.0.3208': attribute type 4 has an invalid length. [ 337.219661][T17042] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3213'. [ 337.247916][T16886] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 337.295970][T16886] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 337.346017][ T5881] Bluetooth: hci1: command tx timeout [ 337.364370][T16886] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 337.383291][T17048] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3215'. [ 337.429169][T16886] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 337.439709][T17048] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3215'. [ 337.828250][T16886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.856234][T16886] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.928175][ T6990] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.935434][ T6990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.938905][T17084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3223'. [ 337.962143][T17078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3221'. [ 337.980246][ T6990] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.987569][ T6990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.180975][T17090] gtp1: entered promiscuous mode [ 338.191941][T17090] gtp1: entered allmulticast mode [ 338.347039][T17098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3228'. [ 338.375402][T17098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3228'. [ 338.411370][T17101] netlink: 'syz.1.3229': attribute type 11 has an invalid length. [ 338.571678][T16886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.725375][T16886] veth0_vlan: entered promiscuous mode [ 338.758002][T16886] veth1_vlan: entered promiscuous mode [ 338.851854][T16886] veth0_macvtap: entered promiscuous mode [ 338.874492][T17119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.889102][T16886] veth1_macvtap: entered promiscuous mode [ 338.919240][T17119] netlink: 'syz.3.3236': attribute type 12 has an invalid length. [ 338.947476][T16886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.961733][T17123] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3238'. [ 338.978069][T16886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.003400][T17119] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 339.041222][ T6986] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.053810][ T6986] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.064751][ T6986] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.089831][ T6986] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.173454][T17128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3241'. [ 339.202418][T17128] xfrm1: entered promiscuous mode [ 339.208933][T17128] xfrm1: entered allmulticast mode [ 339.247117][T17128] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 339.258949][ T6986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.275578][ T6986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.372849][ T6983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.386491][T17133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.395557][ T6983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.427113][ T5881] Bluetooth: hci1: command tx timeout [ 339.467853][T17133] block nbd2: server does not support multiple connections per device. [ 339.491509][T17133] block nbd2: shutting down sockets [ 339.492114][T17136] vlan4: entered promiscuous mode [ 339.503653][T17136] team0: entered promiscuous mode [ 339.510121][T17136] team_slave_0: entered promiscuous mode [ 339.517670][T17136] team_slave_1: entered promiscuous mode [ 339.699866][T17149] netlink: 'syz.4.3247': attribute type 1 has an invalid length. [ 340.061979][T17147] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.069744][T17147] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.453661][T17147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.484371][T17147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.675583][T17186] netlink: 'syz.0.3255': attribute type 1 has an invalid length. [ 340.713686][ T5867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.724825][ T5867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.734127][ T5867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.748853][ T5867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.759786][ T5867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.849164][T17145] vlan2: entered allmulticast mode [ 340.854690][T17145] gretap0: entered allmulticast mode [ 340.963480][ T6983] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.004440][ T6983] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 341.024910][ T6983] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.045880][ T6983] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 341.087186][ T6983] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.111045][ T6983] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 341.139768][ T6983] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.175753][ T6983] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 341.247790][T17188] lo speed is unknown, defaulting to 1000 [ 341.506140][ T5867] Bluetooth: hci1: command tx timeout [ 341.793788][T17231] __nla_validate_parse: 8 callbacks suppressed [ 341.793811][T17231] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3269'. [ 341.821504][T17232] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3268'. [ 341.855368][T17231] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3269'. [ 341.865304][T17188] chnl_net:caif_netlink_parms(): no params data found [ 341.905234][T17231] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 341.920068][T17234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3270'. [ 342.179410][T17188] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.189949][T17188] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.207088][T17188] bridge_slave_0: entered allmulticast mode [ 342.215064][T17188] bridge_slave_0: entered promiscuous mode [ 342.253144][T17252] tipc: Enabled bearer , priority 0 [ 342.279188][T17255] openvswitch: netlink: Key type 29 is not supported [ 342.295545][T17188] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.315757][T17188] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.337456][T17188] bridge_slave_1: entered allmulticast mode [ 342.356602][T17188] bridge_slave_1: entered promiscuous mode [ 342.372955][T17252] syzkaller0: entered promiscuous mode [ 342.387386][T17252] syzkaller0: entered allmulticast mode [ 342.494059][T17264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3278'. [ 342.504731][T17258] tipc: Resetting bearer [ 342.614560][T17271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.660769][T17251] tipc: Resetting bearer [ 342.719147][T17251] tipc: Disabling bearer [ 342.754176][T17188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.786814][ T5867] Bluetooth: hci4: command tx timeout [ 342.828346][T17188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.924232][T17188] team0: Port device team_slave_0 added [ 342.942355][T17188] team0: Port device team_slave_1 added [ 342.996813][T17283] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3281'. [ 343.029479][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.304208][T17188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.335799][T17188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.399150][T17188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.424408][T17188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.447571][T17188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.514844][T17188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.710553][T17296] ip6gre1: entered allmulticast mode [ 343.849646][T17307] netlink: 'syz.4.3290': attribute type 16 has an invalid length. [ 343.864087][T17307] netlink: 'syz.4.3290': attribute type 17 has an invalid length. [ 343.874696][T17188] hsr_slave_0: entered promiscuous mode [ 343.881949][T17188] hsr_slave_1: entered promiscuous mode [ 343.890973][T17188] debugfs: 'hsr0' already exists in 'hsr' [ 343.896906][T17188] Cannot create hsr debugfs directory [ 343.979715][T17307] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.999084][T17312] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3290'. [ 344.234540][T17316] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3293'. [ 344.413022][T17321] netlink: 'syz.2.3295': attribute type 13 has an invalid length. [ 344.502500][T17321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.686073][T17188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 344.778287][T17188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 344.813605][T17188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 344.865987][ T5867] Bluetooth: hci4: command tx timeout [ 344.890020][T17188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 345.315059][T17359] nftables ruleset with unbound chain [ 345.318409][T17188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.376979][T17188] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.416895][ T6998] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.424170][ T6998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.469069][ T6990] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.476344][ T6990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.676777][T17372] netlink: 'syz.1.3307': attribute type 1 has an invalid length. [ 345.757474][T17372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 345.956777][T17386] netlink: 'syz.0.3310': attribute type 58 has an invalid length. [ 345.965394][T17386] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3310'. [ 346.064721][T17188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.108649][T17386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3310'. [ 346.286273][T17188] veth0_vlan: entered promiscuous mode [ 346.333627][T17188] veth1_vlan: entered promiscuous mode [ 346.438098][T17188] veth0_macvtap: entered promiscuous mode [ 346.461547][T17188] veth1_macvtap: entered promiscuous mode [ 346.554132][T17188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.613055][T17188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.652568][ T6985] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.664611][ T6985] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.690661][ T6985] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.724973][ T6985] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.811598][T17425] __nla_validate_parse: 2 callbacks suppressed [ 346.811620][T17425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3319'. [ 346.859610][ T30] audit: type=1800 audit(1755644709.752:3): pid=17424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3320" name="memory.events" dev="tmpfs" ino=3464 res=0 errno=0 [ 346.934900][ T6969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.947942][ T5867] Bluetooth: hci4: command tx timeout [ 346.969585][ T6969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.031098][ T6969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.040450][ T6969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.139597][T17430] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3321'. [ 347.162574][T17430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3321'. [ 347.274683][T17438] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3324'. [ 347.287209][T17436] netlink: 'syz.3.3248': attribute type 10 has an invalid length. [ 347.341612][T17436] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 347.341759][T17442] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3326'. [ 347.507051][ T94] block nbd0: Possible stuck request ffff8880257e5080: control (read@0,1024B). Runtime 210 seconds [ 347.521378][ T94] block nbd0: Possible stuck request ffff8880257e5240: control (read@1024,1024B). Runtime 210 seconds [ 347.532827][ T94] block nbd0: Possible stuck request ffff8880257e5400: control (read@2048,1024B). Runtime 210 seconds [ 347.545353][ T94] block nbd0: Possible stuck request ffff8880257e55c0: control (read@3072,1024B). Runtime 210 seconds [ 347.729869][T17455] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.750632][T17455] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.775585][T17457] netlink: 'syz.4.3331': attribute type 16 has an invalid length. [ 347.824731][T17457] netlink: 'syz.4.3331': attribute type 17 has an invalid length. [ 348.056154][T17457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 348.411603][ T5881] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.436942][ T5881] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.445807][ T5881] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.496218][ T5881] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.504775][ T5881] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 348.619287][T17484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3339'. [ 348.629679][T17484] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3339'. [ 348.936136][ T6998] dvmrp1 (unregistering): left allmulticast mode [ 349.026134][ T5881] Bluetooth: hci4: command tx timeout [ 349.193769][ T6998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.209424][ T6998] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 349.220087][ T6998] bond0 (unregistering): Released all slaves [ 349.340397][ T6998] bond1 (unregistering): Released all slaves [ 349.361329][ T6998] bond2 (unregistering): Released all slaves [ 349.380769][ T6998] bond3 (unregistering): Released all slaves [ 349.498259][ T6998] bond4 (unregistering): Released all slaves [ 349.718985][T17495] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3341'. [ 349.732046][ T6998] : left promiscuous mode [ 349.737032][T17495] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3341'. [ 349.795994][T17495] netlink: 'syz.4.3341': attribute type 6 has an invalid length. [ 349.816821][T17472] lo speed is unknown, defaulting to 1000 [ 349.845896][T17495] netlink: 'syz.4.3341': attribute type 5 has an invalid length. [ 349.853700][T17495] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3341'. [ 349.951213][ T6998] tipc: Left network mode [ 350.146647][T17512] IPVS: set_ctl: invalid protocol: 3 0.0.0.0:0 [ 350.148434][T17511] netlink: 'syz.4.3345': attribute type 7 has an invalid length. [ 350.181788][T17511] netlink: 'syz.4.3345': attribute type 8 has an invalid length. [ 350.548557][ T5881] Bluetooth: hci5: command tx timeout [ 350.611588][T17538] vlan3: entered promiscuous mode [ 350.631276][T17538] vlan3: entered allmulticast mode [ 350.677581][T17538] hsr_slave_1: entered allmulticast mode [ 350.861203][T17472] chnl_net:caif_netlink_parms(): no params data found [ 350.902882][T17556] netlink: 'syz.4.3358': attribute type 1 has an invalid length. [ 351.011506][T17556] netlink: 'syz.4.3358': attribute type 7 has an invalid length. [ 351.331137][T17575] tipc: Started in network mode [ 351.355854][T17575] tipc: Node identity , cluster identity 4711 [ 351.362141][T17575] tipc: Failed to obtain node identity [ 351.381746][T17575] tipc: Enabling of bearer rejected, failed to enable media [ 351.517874][T17472] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.536390][T17472] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.553053][T17472] bridge_slave_0: entered allmulticast mode [ 351.572257][T17472] bridge_slave_0: entered promiscuous mode [ 351.605077][T17595] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 351.695842][T17586] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 351.719442][T17590] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.762442][T17472] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.782545][T17472] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.795823][T17472] bridge_slave_1: entered allmulticast mode [ 351.814715][T17472] bridge_slave_1: entered promiscuous mode [ 351.841552][T17603] __nla_validate_parse: 9 callbacks suppressed [ 351.841578][T17603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3371'. [ 352.017693][T17612] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 352.057813][ T6998] hsr_slave_0: left promiscuous mode [ 352.089235][ T6998] hsr_slave_1: left promiscuous mode [ 352.147021][T17619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3375'. [ 352.156385][T17619] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3375'. [ 352.268487][ T6998] pim6reg527 (unregistering): left allmulticast mode [ 352.625222][T17638] netlink: 'syz.4.3382': attribute type 10 has an invalid length. [ 352.635341][ T5881] Bluetooth: hci5: command tx timeout [ 353.171472][T17612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3373'. [ 353.206776][T17638] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 353.328608][T17472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.380370][T17472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.432478][T17649] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3384'. [ 353.614574][T17472] team0: Port device team_slave_0 added [ 353.655445][T17472] team0: Port device team_slave_1 added [ 353.825539][T17472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.847607][T17472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.880254][T17472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.895040][T17472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.949600][T17472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.980339][T17472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.011462][T17683] sch_fq: defrate 0 ignored. [ 354.162859][ T6998] IPVS: stop unused estimator thread 0... [ 354.215918][T17688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3395'. [ 354.279215][T17472] hsr_slave_0: entered promiscuous mode [ 354.309068][T17472] hsr_slave_1: entered promiscuous mode [ 354.315612][T17472] debugfs: 'hsr0' already exists in 'hsr' [ 354.323628][T17472] Cannot create hsr debugfs directory [ 354.357280][T17696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3398'. [ 354.456429][T17697] : renamed from hsr0 (while UP) [ 354.503397][ T6969] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.526367][T17697] netlink: 'syz.4.3400': attribute type 1 has an invalid length. [ 354.542811][ T6969] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.560374][T17705] netlink: 'syz.3.3403': attribute type 10 has an invalid length. [ 354.705775][ T5881] Bluetooth: hci5: command tx timeout [ 354.747861][T17697] bond2: entered promiscuous mode [ 354.753584][T17697] 8021q: adding VLAN 0 to HW filter on device bond2 [ 354.792691][T17703] 8021q: adding VLAN 0 to HW filter on device bond2 [ 354.800255][T17703] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 354.811050][T17703] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 354.832260][T17703] bond2: (slave wireguard0): making interface the new active one [ 354.843036][T17703] wireguard0: entered promiscuous mode [ 354.854598][T17703] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 354.880146][T17705] team0: Device ipvlan1 failed to register rx_handler [ 354.962378][T17715] C: renamed from lo [ 355.021208][ T6969] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.059154][ T6969] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.178077][ T6969] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.222952][ T6969] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.365291][ T6969] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.402477][ T6969] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.406197][T17731] block nbd2: server does not support multiple connections per device. [ 355.421786][T17731] block nbd2: shutting down sockets [ 355.695950][T17752] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 355.727398][T17752] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3415'. [ 355.756285][T17752] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3415'. [ 355.796436][T17752] netlink: 'syz.1.3415': attribute type 5 has an invalid length. [ 355.822262][T17752] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3415'. [ 356.175307][ T6969] tipc: Disabling bearer [ 356.312984][ T6969] bond8 (unregistering): (slave gretap2): Releasing active interface [ 356.697055][ T6969] bond0 (unregistering): Released all slaves [ 356.786048][ T5881] Bluetooth: hci5: command tx timeout [ 356.840619][ T6969] bond1 (unregistering): Released all slaves [ 356.959280][ T6969] bond2 (unregistering): Released all slaves [ 357.080035][ T6969] bond3 (unregistering): Released all slaves [ 357.202633][ T6969] bond4 (unregistering): Released all slaves [ 357.311251][ T6969] bond5 (unregistering): Released all slaves [ 357.329506][ T6969] bond6 (unregistering): Released all slaves [ 357.348098][ T6969] bond7 (unregistering): Released all slaves [ 357.484934][ T6969] bond8 (unregistering): Released all slaves [ 357.534719][T17761] veth0: entered promiscuous mode [ 357.731897][T17779] __nla_validate_parse: 1 callbacks suppressed [ 357.732295][ T6969] tipc: Left network mode [ 357.743197][T17779] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3422'. [ 357.749219][T17764] veth0: left promiscuous mode [ 357.998510][T17791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3428'. [ 358.034044][T17791] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3428'. [ 358.236231][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.255879][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.353364][ T6998] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.380711][T17812] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 358.399788][ T6998] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.423399][T17812] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3432'. [ 358.462610][T17812] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3432'. [ 358.487110][T17812] netlink: 'syz.4.3432': attribute type 5 has an invalid length. [ 358.507849][T17814] sctp: [Deprecated]: syz.3.3433 (pid 17814) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.507849][T17814] Use struct sctp_sack_info instead [ 358.535449][T17812] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3432'. [ 358.545281][ T6969] dummy0: left promiscuous mode [ 358.599078][ T6969] veth1_macvtap: left promiscuous mode [ 358.606127][ T6969] veth1_vlan: left promiscuous mode [ 358.614057][ T6969] veth0_vlan: left promiscuous mode [ 358.881989][T17819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3434'. [ 358.890085][T17831] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 358.995255][ T6969] pim6reg (unregistering): left allmulticast mode [ 359.021606][ T6969] pimreg (unregistering): left allmulticast mode [ 359.073930][T17837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3437'. [ 359.320421][ T6969] vlan1 (unregistering): left allmulticast mode [ 359.334130][ T6969] veth0_vlan (unregistering): left allmulticast mode [ 360.038066][T17837] xfrm1: entered promiscuous mode [ 360.043193][T17837] xfrm1: entered allmulticast mode [ 360.127038][T17834] netlink: 'syz.3.3435': attribute type 1 has an invalid length. [ 360.151714][T17834] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3435'. [ 360.180939][T17472] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 360.220630][T17472] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 360.313923][T17472] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 360.370367][T17847] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3440'. [ 360.374333][T17472] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 360.443665][T17848] netlink: 'syz.2.3443': attribute type 8 has an invalid length. [ 360.522503][ T6969] IPVS: stop unused estimator thread 0... [ 360.711467][T17867] IPv6: Can't replace route, no match found [ 361.048798][T17874] netlink: 'syz.1.3450': attribute type 12 has an invalid length. [ 361.069746][T17874] netlink: 'syz.1.3450': attribute type 29 has an invalid length. [ 361.090955][T17875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.185604][T17472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.227310][T17893] netlink: zone id is out of range [ 361.251534][T17472] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.260250][T17893] netlink: zone id is out of range [ 361.269021][T17893] netlink: zone id is out of range [ 361.274265][T17893] netlink: zone id is out of range [ 361.278163][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.286629][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.306626][T17893] netlink: zone id is out of range [ 361.311818][T17893] netlink: zone id is out of range [ 361.330949][T17893] netlink: zone id is out of range [ 361.339121][T17893] netlink: zone id is out of range [ 361.348666][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.356029][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.051372][T17472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.212477][T17472] veth0_vlan: entered promiscuous mode [ 362.242923][T17472] veth1_vlan: entered promiscuous mode [ 362.332845][T17945] netlink: 'syz.1.3465': attribute type 2 has an invalid length. [ 362.350304][T17945] netlink: 'syz.1.3465': attribute type 2 has an invalid length. [ 362.357324][T17472] veth0_macvtap: entered promiscuous mode [ 362.369176][T17472] veth1_macvtap: entered promiscuous mode [ 362.444115][T17472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.479658][T17472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.524323][ T6998] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.544079][ T6998] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.586515][ T6998] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.822759][ T6998] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.068100][ T6998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.115455][ T6998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.327098][ T6985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.365610][ T6985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.493168][T17992] __nla_validate_parse: 10 callbacks suppressed [ 363.493191][T17992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3476'. [ 363.603627][T17992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3476'. [ 363.825038][T18009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3479'. [ 363.834924][T18009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3479'. [ 363.880249][T18010] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3480'. [ 363.936771][T18010] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3480'. [ 364.530491][T18010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.540621][T18010] bond0 (unregistering): Released all slaves [ 364.863471][T18044] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3486'. [ 365.035994][T18055] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3490'. [ 365.140793][T18059] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3493'. [ 365.178364][T18059] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3493'. [ 365.210035][T18067] mac80211_hwsim hwsim38 : renamed from wlan1 (while UP) [ 365.637794][ T5931] IPVS: starting estimator thread 0... [ 365.726222][T18089] IPVS: using max 26 ests per chain, 62400 per kthread [ 365.969340][T18102] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 366.378157][T18117] 8021q: adding VLAN 0 to HW filter on device bond2 [ 366.498480][T18116] C: renamed from team_slave_0 (while UP) [ 366.514542][T18116] netlink: 'syz.4.3511': attribute type 1 has an invalid length. [ 366.577577][T18116] net_ratelimit: 31 callbacks suppressed [ 366.577599][T18116] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 367.063881][T18145] netlink: 'syz.2.3518': attribute type 75 has an invalid length. [ 367.276356][T18152] netlink: 'syz.4.3522': attribute type 1 has an invalid length. [ 367.389941][T18152] netlink: 'syz.4.3522': attribute type 1 has an invalid length. [ 367.621583][T18175] netlink: ct family unspecified [ 367.637961][T18175] openvswitch: netlink: Actions may not be safe on all matching packets [ 367.856621][T18188] netlink: 'syz.4.3532': attribute type 1 has an invalid length. [ 368.011765][ T5932] IPVS: starting estimator thread 0... [ 368.016476][T18192] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 368.125899][T18197] IPVS: using max 23 ests per chain, 55200 per kthread [ 368.692750][T18234] __nla_validate_parse: 15 callbacks suppressed [ 368.692775][T18234] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3548'. [ 368.879535][T18239] netlink: 'syz.0.3550': attribute type 1 has an invalid length. [ 368.969494][T18247] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3553'. [ 369.004652][T18250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3551'. [ 369.058510][T18249] gretap1: entered promiscuous mode [ 369.334686][T18266] netlink: 'syz.4.3558': attribute type 1 has an invalid length. [ 369.346204][T18266] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3558'. [ 369.411302][T18273] netlink: 'syz.3.3560': attribute type 3 has an invalid length. [ 369.454008][T18276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3559'. [ 369.457406][T18273] netlink: 'syz.3.3560': attribute type 1 has an invalid length. [ 369.569901][T18281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3563'. [ 369.580692][T18282] netlink: 'syz.4.3562': attribute type 10 has an invalid length. [ 369.686856][T18282] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.694427][T18282] bridge_slave_1: left allmulticast mode [ 369.701226][T18282] bridge_slave_1: left promiscuous mode [ 369.707517][T18282] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.753184][T18282] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 369.809490][T18291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3566'. [ 369.918003][T18291] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3566'. [ 370.120974][T18307] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3570'. [ 370.134048][T18307] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 370.204142][T18316] veth0: entered promiscuous mode [ 370.220559][T18316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3573'. [ 370.312703][T18317] bond0: entered promiscuous mode [ 370.348566][T18317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.661846][T18323] 8021q: adding VLAN 0 to HW filter on device bond2 [ 370.672179][T18323] bond0: (slave bond2): making interface the new active one [ 370.681670][T18323] bond2: entered promiscuous mode [ 370.690154][T18323] bond0: (slave bond2): Enslaving as an active interface with an up link [ 371.282406][T18367] pim6reg1: entered promiscuous mode [ 371.292540][T18367] pim6reg1: entered allmulticast mode [ 371.605074][T18385] validate_nla: 1 callbacks suppressed [ 371.605098][T18385] netlink: 'syz.3.3594': attribute type 13 has an invalid length. [ 371.668549][T18385] netlink: 'syz.3.3594': attribute type 13 has an invalid length. [ 371.696448][T18385] netlink: 'syz.3.3594': attribute type 1 has an invalid length. [ 371.915874][T18404] batadv_slave_0: entered promiscuous mode [ 372.089949][T18403] batadv_slave_0: left promiscuous mode [ 372.128324][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056f2ac00: rx timeout, send abort [ 372.138882][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056f2ac00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 372.374348][T18434] netlink: 'syz.2.3610': attribute type 2 has an invalid length. [ 372.409192][T18432] bridge1: entered allmulticast mode [ 372.431396][T18437] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 372.452851][T18434] netlink: 'syz.2.3610': attribute type 1 has an invalid length. [ 372.928228][T18465] netlink: 'syz.4.3616': attribute type 1 has an invalid length. [ 373.101711][T18468] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 373.104451][T18478] netlink: 'syz.2.3620': attribute type 16 has an invalid length. [ 373.121107][T18478] netlink: 'syz.2.3620': attribute type 17 has an invalid length. [ 373.206926][T18478] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 373.370509][T18492] tipc: Started in network mode [ 373.388693][T18492] tipc: Node identity 0600308691c2, cluster identity 4711 [ 373.412683][T18492] tipc: Enabled bearer , priority 0 [ 373.473941][T18495] syzkaller0: entered promiscuous mode [ 373.493778][T18495] syzkaller0: entered allmulticast mode [ 373.531664][T18489] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 373.577828][T18489] tipc: Resetting bearer [ 373.621702][T18484] tipc: Resetting bearer [ 373.681754][T18484] tipc: Disabling bearer [ 373.746937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.011654][T18518] tipc: Enabling of bearer rejected, failed to enable media [ 374.190418][T18544] __nla_validate_parse: 12 callbacks suppressed [ 374.190439][T18544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3638'. [ 374.248340][T18544] netlink: 'syz.0.3638': attribute type 30 has an invalid length. [ 374.452579][T18565] 8021q: VLANs not supported on wg0 [ 374.670117][T18570] ipvlan2: entered promiscuous mode [ 374.692599][T18570] bridge0: port 3(ipvlan2) entered blocking state [ 374.727478][T18570] bridge0: port 3(ipvlan2) entered disabled state [ 374.742667][T18570] ipvlan2: entered allmulticast mode [ 374.750618][T18570] bridge0: entered allmulticast mode [ 374.763603][T18570] ipvlan2: left allmulticast mode [ 374.784439][T18570] bridge0: left allmulticast mode [ 374.916993][T18585] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 375.141158][T18598] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 375.460062][T18619] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3657'. [ 375.534801][T18623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3659'. [ 375.573317][T18623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3659'. [ 375.634659][T18629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3661'. [ 376.035385][T18649] FAULT_INJECTION: forcing a failure. [ 376.035385][T18649] name failslab, interval 1, probability 0, space 0, times 0 [ 376.065304][T18649] CPU: 0 UID: 0 PID: 18649 Comm: syz.3.3669 Not tainted syzkaller #0 PREEMPT(full) [ 376.065335][T18649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 376.065353][T18649] Call Trace: [ 376.065363][T18649] [ 376.065373][T18649] dump_stack_lvl+0x189/0x250 [ 376.065407][T18649] ? __pfx____ratelimit+0x10/0x10 [ 376.065451][T18649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.065478][T18649] ? __pfx__printk+0x10/0x10 [ 376.065516][T18649] ? __pfx___might_resched+0x10/0x10 [ 376.065544][T18649] should_fail_ex+0x414/0x560 [ 376.065580][T18649] should_failslab+0xa8/0x100 [ 376.065613][T18649] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 376.065643][T18649] ? __alloc_skb+0x112/0x2d0 [ 376.065680][T18649] __alloc_skb+0x112/0x2d0 [ 376.065715][T18649] netlink_sendmsg+0x5c6/0xb30 [ 376.065758][T18649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.065793][T18649] ? aa_sock_msg_perm+0xf1/0x1d0 [ 376.065830][T18649] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 376.065853][T18649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.065885][T18649] __sock_sendmsg+0x219/0x270 [ 376.065917][T18649] ____sys_sendmsg+0x505/0x830 [ 376.065944][T18649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.065971][T18649] ? import_iovec+0x74/0xa0 [ 376.065996][T18649] ___sys_sendmsg+0x21f/0x2a0 [ 376.066017][T18649] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.066078][T18649] ? __fget_files+0x2a/0x420 [ 376.066110][T18649] ? __fget_files+0x3a0/0x420 [ 376.066154][T18649] __x64_sys_sendmsg+0x19b/0x260 [ 376.066179][T18649] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 376.066212][T18649] ? __pfx_ksys_write+0x10/0x10 [ 376.066238][T18649] ? rcu_is_watching+0x15/0xb0 [ 376.066266][T18649] ? do_syscall_64+0xbe/0x3b0 [ 376.066302][T18649] do_syscall_64+0xfa/0x3b0 [ 376.066331][T18649] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.066360][T18649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.066382][T18649] ? clear_bhb_loop+0x60/0xb0 [ 376.066409][T18649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.066446][T18649] RIP: 0033:0x7f9a0358ebe9 [ 376.066467][T18649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.066487][T18649] RSP: 002b:00007f9a0438a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.066511][T18649] RAX: ffffffffffffffda RBX: 00007f9a037b5fa0 RCX: 00007f9a0358ebe9 [ 376.066527][T18649] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 376.066540][T18649] RBP: 00007f9a0438a090 R08: 0000000000000000 R09: 0000000000000000 [ 376.066554][T18649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.066567][T18649] R13: 00007f9a037b6038 R14: 00007f9a037b5fa0 R15: 00007ffc58089ba8 [ 376.066603][T18649] [ 376.639010][T18661] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3672'. [ 377.130868][T18678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3679'. [ 377.142628][T18680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3678'. [ 377.314569][T18688] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3682'. [ 377.587186][ T94] block nbd0: Possible stuck request ffff8880257e5080: control (read@0,1024B). Runtime 240 seconds [ 377.598687][ T94] block nbd0: Possible stuck request ffff8880257e5240: control (read@1024,1024B). Runtime 240 seconds [ 377.610958][ T94] block nbd0: Possible stuck request ffff8880257e5400: control (read@2048,1024B). Runtime 240 seconds [ 377.622080][ T94] block nbd0: Possible stuck request ffff8880257e55c0: control (read@3072,1024B). Runtime 240 seconds [ 377.647577][T18703] netlink: 284 bytes leftover after parsing attributes in process `syz.2.3688'. [ 377.729509][T18707] gtp0: entered promiscuous mode [ 378.333488][T18727] team_slave_0: entered promiscuous mode [ 378.339326][T18727] team_slave_1: entered promiscuous mode [ 378.824776][T18752] bond0: (slave rose0): Error: Device can not be enslaved while up [ 379.839018][T18789] __nla_validate_parse: 4 callbacks suppressed [ 379.839043][T18789] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3713'. [ 379.891356][T18790] netlink: 'syz.1.3712': attribute type 39 has an invalid length. [ 380.199630][T18796] netlink: 'syz.0.3716': attribute type 1 has an invalid length. [ 380.348602][T18802] bond2: (slave bridge2): making interface the new active one [ 380.384015][T18802] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 380.582825][T18812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3722'. [ 380.755522][T18817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3724'. [ 380.798363][T18821] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3723'. [ 380.916314][T18823] Dead loop on virtual device ip6_vti0, fix it urgently! [ 381.409971][T18844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3729'. [ 381.567158][T18858] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3732'. [ 381.812526][T18868] netlink: 'syz.1.3734': attribute type 21 has an invalid length. [ 381.838633][T18868] IPv6: NLM_F_CREATE should be specified when creating new route [ 381.854106][T18871] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 381.995130][T18879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3738'. [ 382.347131][T18892] netlink: 'syz.0.3744': attribute type 3 has an invalid length. [ 383.120098][T18945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3760'. [ 383.163474][T18945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.189471][T18945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.449940][T18964] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3765'. [ 383.471299][T18964] FAULT_INJECTION: forcing a failure. [ 383.471299][T18964] name failslab, interval 1, probability 0, space 0, times 0 [ 383.497663][T18964] CPU: 1 UID: 0 PID: 18964 Comm: syz.4.3765 Not tainted syzkaller #0 PREEMPT(full) [ 383.497694][T18964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.497708][T18964] Call Trace: [ 383.497716][T18964] [ 383.497726][T18964] dump_stack_lvl+0x189/0x250 [ 383.497758][T18964] ? __pfx____ratelimit+0x10/0x10 [ 383.497787][T18964] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.497813][T18964] ? __pfx__printk+0x10/0x10 [ 383.497851][T18964] ? __pfx___might_resched+0x10/0x10 [ 383.497871][T18964] ? fs_reclaim_acquire+0x7d/0x100 [ 383.497909][T18964] should_fail_ex+0x414/0x560 [ 383.497944][T18964] should_failslab+0xa8/0x100 [ 383.497978][T18964] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 383.498009][T18964] ? __alloc_skb+0x112/0x2d0 [ 383.498053][T18964] __alloc_skb+0x112/0x2d0 [ 383.498091][T18964] netlink_ack+0x146/0xa50 [ 383.498119][T18964] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 383.498148][T18964] ? ref_tracker_free+0x63a/0x7d0 [ 383.498178][T18964] ? __asan_memcpy+0x40/0x70 [ 383.498201][T18964] ? __pfx_ref_tracker_free+0x10/0x10 [ 383.498229][T18964] ? __skb_clone+0x63/0x7a0 [ 383.498262][T18964] netlink_rcv_skb+0x28c/0x470 [ 383.498294][T18964] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 383.498326][T18964] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 383.498371][T18964] ? netlink_deliver_tap+0x2e/0x1b0 [ 383.498411][T18964] netlink_unicast+0x82c/0x9e0 [ 383.498450][T18964] ? __pfx_netlink_unicast+0x10/0x10 [ 383.498480][T18964] ? netlink_sendmsg+0x642/0xb30 [ 383.498509][T18964] ? skb_put+0x11b/0x210 [ 383.498546][T18964] netlink_sendmsg+0x805/0xb30 [ 383.498589][T18964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.498625][T18964] ? aa_sock_msg_perm+0xf1/0x1d0 [ 383.498662][T18964] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 383.498685][T18964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.498717][T18964] __sock_sendmsg+0x219/0x270 [ 383.498748][T18964] ____sys_sendmsg+0x505/0x830 [ 383.498777][T18964] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.498811][T18964] ? import_iovec+0x74/0xa0 [ 383.498840][T18964] ___sys_sendmsg+0x21f/0x2a0 [ 383.498864][T18964] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.498929][T18964] ? __fget_files+0x2a/0x420 [ 383.498960][T18964] ? __fget_files+0x3a0/0x420 [ 383.499005][T18964] __x64_sys_sendmsg+0x19b/0x260 [ 383.499037][T18964] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.499075][T18964] ? rcu_is_watching+0x15/0xb0 [ 383.499097][T18964] ? trace_sys_enter+0x25/0x100 [ 383.499136][T18964] do_syscall_64+0xfa/0x3b0 [ 383.499165][T18964] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.499193][T18964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.499215][T18964] ? clear_bhb_loop+0x60/0xb0 [ 383.499241][T18964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.499262][T18964] RIP: 0033:0x7fcb4258ebe9 [ 383.499281][T18964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.499299][T18964] RSP: 002b:00007fcb434a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.499321][T18964] RAX: ffffffffffffffda RBX: 00007fcb427b5fa0 RCX: 00007fcb4258ebe9 [ 383.499336][T18964] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 383.499350][T18964] RBP: 00007fcb434a2090 R08: 0000000000000000 R09: 0000000000000000 [ 383.499362][T18964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.499374][T18964] R13: 00007fcb427b6038 R14: 00007fcb427b5fa0 R15: 00007ffcc490f1a8 [ 383.499408][T18964] [ 384.194058][T18981] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 384.410179][T19003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.471722][T19008] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3770'. [ 384.946143][T19032] netlink: 'syz.1.3781': attribute type 11 has an invalid length. [ 384.982886][T19032] netlink: 'syz.1.3781': attribute type 11 has an invalid length. [ 384.991038][T19032] __nla_validate_parse: 2 callbacks suppressed [ 384.991060][T19032] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3781'. [ 385.166311][ T10] IPVS: starting estimator thread 0... [ 385.273816][T19042] IPVS: using max 24 ests per chain, 57600 per kthread [ 385.295604][T19046] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3785'. [ 385.324033][T19050] netlink: 788 bytes leftover after parsing attributes in process `syz.0.3787'. [ 385.364421][T19046] bond0: entered allmulticast mode [ 385.376134][T19046] bond_slave_0: entered allmulticast mode [ 385.382192][T19046] bond_slave_1: entered allmulticast mode [ 385.407459][T19046] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 385.445823][T19046] bridge_slave_1: entered allmulticast mode [ 385.663882][T19074] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 385.673170][T19074] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 385.702317][T19076] netlink: 'syz.0.3793': attribute type 2 has an invalid length. [ 386.042297][T19088] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3791'. [ 386.555282][T19093] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3797'. [ 386.615428][T19100] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 386.957984][T19124] Bluetooth: MGMT ver 1.23 [ 387.290438][T19147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3812'. [ 387.451713][T19156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3813'. [ 388.068539][T19159] lo speed is unknown, defaulting to 1000 [ 388.771989][T19210] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20002 [ 388.800144][T19217] netlink: 'syz.4.3827': attribute type 1 has an invalid length. [ 388.829413][T19210] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3826'. [ 388.838282][T19217] netlink: 'syz.4.3827': attribute type 3 has an invalid length. [ 388.849621][T19210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.871031][T19217] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3827'. [ 388.909208][T19217] NCSI netlink: No device for ifindex 131080 [ 388.980643][T19220] netlink: 'syz.0.3828': attribute type 2 has an invalid length. [ 389.016029][T19220] netlink: 'syz.0.3828': attribute type 8 has an invalid length. [ 389.066650][T19220] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3828'. [ 389.175857][T19230] netlink: 'syz.1.3829': attribute type 8 has an invalid length. [ 389.598864][T19239] syz_tun: entered allmulticast mode [ 389.723906][T19241] syz_tun (unregistering): left allmulticast mode [ 390.425409][T19273] netlink: 'syz.2.3838': attribute type 1 has an invalid length. [ 390.571288][T19282] __nla_validate_parse: 3 callbacks suppressed [ 390.571309][T19282] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3841'. [ 391.016060][T19294] netlink: 'syz.2.3843': attribute type 21 has an invalid length. [ 391.024530][T19294] netlink: 'syz.2.3843': attribute type 22 has an invalid length. [ 391.038016][T19294] netlink: 'syz.2.3843': attribute type 23 has an invalid length. [ 391.075962][T19294] netlink: 'syz.2.3843': attribute type 25 has an invalid length. [ 391.110746][T19294] netlink: 'syz.2.3843': attribute type 26 has an invalid length. [ 391.138985][T19294] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3843'. [ 391.182979][T19309] openvswitch: netlink: Flow actions attr not present in new flow. [ 391.329647][T19317] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3850'. [ 391.460626][T19322] netlink: 'syz.4.3853': attribute type 10 has an invalid length. [ 391.500672][T19322] team0: Device veth1_macvtap failed to register rx_handler [ 391.539390][T19330] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3853'. [ 391.632233][T19335] netlink: 'syz.1.3857': attribute type 4 has an invalid length. [ 391.672906][T19335] lo speed is unknown, defaulting to 1000 [ 391.754469][T19337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.913556][T19344] tipc: Enabling of bearer rejected, failed to enable media [ 391.934583][T19346] netlink: 'syz.4.3861': attribute type 2 has an invalid length. [ 391.948460][T19346] netlink: 'syz.4.3861': attribute type 1 has an invalid length. [ 391.983544][T19346] netlink: 'syz.4.3861': attribute type 2 has an invalid length. [ 392.026326][T19348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3863'. [ 392.043167][T19348] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3863'. [ 392.080922][T19352] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3864'. [ 392.303741][T19361] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3866'. [ 392.316785][T19363] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 392.530479][T19374] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3871'. [ 392.544473][T19377] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 392.562058][T19378] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 392.566208][T19374] xt_policy: neither incoming nor outgoing policy selected [ 392.610004][T19382] veth0: entered promiscuous mode [ 392.620379][T19382] veth0: left promiscuous mode [ 392.643706][T19382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3874'. [ 392.888821][T19399] team0: Port device geneve0 added [ 392.894721][ T6987] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.921030][ T6976] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.956002][ T6976] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.964799][ T6976] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.214416][T19411] netlink: 'syz.1.3885': attribute type 11 has an invalid length. [ 393.350501][T19415] bridge_slave_0: left allmulticast mode [ 393.363333][T19415] bridge_slave_0: left promiscuous mode [ 393.373653][T19415] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.403102][T19415] bond0: (slave bridge_slave_1): Releasing backup interface [ 393.422118][T19415] bridge_slave_1: left allmulticast mode [ 393.452515][T19415] bond0: (slave bond_slave_0): Releasing backup interface [ 393.474092][T19415] bond_slave_0: left allmulticast mode [ 393.495858][T19415] bond0: (slave bond_slave_1): Releasing backup interface [ 393.513561][T19415] bond_slave_1: left allmulticast mode [ 393.558761][T19415] team0: Port device C removed [ 393.600009][T19415] team0: Port device team_slave_1 removed [ 393.618030][T19415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.641301][T19415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.685287][T19415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.694162][T19415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.734005][T19415] bond0: (slave netdevsim0): Releasing backup interface [ 393.743695][T19415] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 393.765181][T19415] bond2: (slave wireguard0): Releasing backup interface [ 393.772961][T19415] wireguard0: left promiscuous mode [ 393.787556][T19415] bond3: (slave ip6gretap1): Releasing backup interface [ 393.831646][T19422] gre1: entered promiscuous mode [ 393.858604][T19422] gre1: entered allmulticast mode [ 393.901285][T19426] pimreg: entered allmulticast mode [ 394.454451][T19456] ipvlan0: entered promiscuous mode [ 394.459947][T19456] ipvlan0: entered allmulticast mode [ 394.503415][T19456] veth0_vlan: entered allmulticast mode [ 395.171018][T19479] tipc: Enabling of bearer rejected, media not registered [ 395.774627][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 395.784833][T19508] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 395.989118][T19516] xt_policy: too many policy elements [ 396.014909][T19521] xt_policy: too many policy elements [ 396.339608][T19537] __nla_validate_parse: 10 callbacks suppressed [ 396.339632][T19537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3921'. [ 396.609615][T19553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3924'. [ 397.244778][T19581] tipc: Started in network mode [ 397.261381][T19581] tipc: Node identity ac14140f, cluster identity 4711 [ 397.289872][T19581] tipc: New replicast peer: 255.255.255.255 [ 397.307160][T19581] tipc: Enabled bearer , priority 10 [ 397.335023][T19581] tipc: Cannot configure node identity twice [ 397.439170][T19586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3938'. [ 397.490882][T19590] siw: device registration error -23 [ 397.532943][T19590] Unsupported ieee802154 address type: 0 [ 397.683097][T19598] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3942'. [ 397.686459][T19590] lo speed is unknown, defaulting to 1000 [ 398.025165][T19608] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3944'. [ 398.037044][T19610] validate_nla: 5 callbacks suppressed [ 398.037065][T19610] netlink: 'syz.3.3946': attribute type 1 has an invalid length. [ 398.087586][T19610] netlink: 'syz.3.3946': attribute type 2 has an invalid length. [ 398.425848][ T9] tipc: Node number set to 2886997007 [ 398.507865][T19633] netlink: 'syz.4.3953': attribute type 1 has an invalid length. [ 398.523329][T19630] sctp: [Deprecated]: syz.1.3952 (pid 19630) Use of int in maxseg socket option. [ 398.523329][T19630] Use struct sctp_assoc_value instead [ 398.729297][T19645] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3956'. [ 398.743563][T19646] netlink: 'syz.1.3957': attribute type 1 has an invalid length. [ 398.938117][T19657] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3960'. [ 398.954313][T19659] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3960'. [ 399.005361][T19603] mpoa:mpoad_close: () going down [ 399.374562][T19679] netlink: 'syz.3.3967': attribute type 49 has an invalid length. [ 399.678790][T19701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3974'. [ 399.803829][T19710] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3975'. [ 399.905941][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 400.098497][T19727] bond4: entered promiscuous mode [ 400.103781][T19727] bond4: entered allmulticast mode [ 400.110248][T19727] 8021q: adding VLAN 0 to HW filter on device bond4 [ 400.156715][T19727] tipc: Started in network mode [ 400.179022][T19727] tipc: Node identity 762bf3796bf5, cluster identity 4711 [ 400.194611][T19727] tipc: Enabled bearer , priority 10 [ 400.553972][T19756] sock: sock_timestamping_bind_phc: sock not bind to device [ 400.577165][T19754] netlink: 'syz.2.3987': attribute type 1 has an invalid length. [ 400.923740][ T5881] Bluetooth: hci5: link tx timeout [ 400.987242][ T5881] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 401.266109][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.306055][ T5931] tipc: Node number set to 501150585 [ 401.315181][T19805] wireguard: wg1: Could not create IPv4 socket [ 401.511605][T19812] __nla_validate_parse: 10 callbacks suppressed [ 401.511630][T19812] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4005'. [ 401.642761][T19816] bond5: entered promiscuous mode [ 401.652002][T19816] bond5: entered allmulticast mode [ 401.666734][T19816] 8021q: adding VLAN 0 to HW filter on device bond5 [ 401.954388][T19816] bond5 (unregistering): Released all slaves [ 402.191462][T19841] netlink: 'syz.4.4012': attribute type 1 has an invalid length. [ 402.481755][T19854] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4018'. [ 403.025951][ T5867] Bluetooth: hci5: command 0x0406 tx timeout [ 403.504944][T19903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4033'. [ 403.525832][T19902] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4034'. [ 403.797675][T19923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.826500][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.561202][T19917] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 404.837000][T19948] netlink: 'syz.0.4046': attribute type 30 has an invalid length. [ 404.903808][T19955] openvswitch: netlink: IPv6 tunnel dst address is zero [ 404.934977][T19951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4047'. [ 404.944927][T19948] netlink: 340 bytes leftover after parsing attributes in process `syz.0.4046'. [ 404.977854][T19955] openvswitch: netlink: IPv6 tunnel dst address is zero [ 405.211863][T19965] veth3: entered promiscuous mode [ 405.233742][T19965] team0: Failed to send port change of device veth3 via netlink (err -105) [ 405.277364][T19982] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4053'. [ 405.284213][T19965] team0: Failed to send options change via netlink (err -105) [ 405.286947][T19982] netlink: zone id is out of range [ 405.286993][T19982] netlink: zone id is out of range [ 405.287008][T19982] netlink: get zone limit has 8 unknown bytes [ 405.311997][T19983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4056'. [ 405.330234][T19983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4056'. [ 405.339587][T19965] team0: Port device veth3 added [ 405.504194][T19988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4057'. [ 406.727948][T20049] __nla_validate_parse: 1 callbacks suppressed [ 406.727974][T20049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4081'. [ 406.750210][T20049] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4081'. [ 407.198642][T20068] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 407.301410][T20067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4085'. [ 407.346227][T20067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4085'. [ 407.459478][T20079] : entered promiscuous mode [ 407.623896][T20085] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 407.675981][ T94] block nbd0: Possible stuck request ffff8880257e5080: control (read@0,1024B). Runtime 270 seconds [ 407.697348][ T94] block nbd0: Possible stuck request ffff8880257e5240: control (read@1024,1024B). Runtime 270 seconds [ 407.708739][ T94] block nbd0: Possible stuck request ffff8880257e5400: control (read@2048,1024B). Runtime 270 seconds [ 407.722980][ T94] block nbd0: Possible stuck request ffff8880257e55c0: control (read@3072,1024B). Runtime 270 seconds [ 407.844881][T20112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.998188][T20118] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4098'. [ 408.204599][T20123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4100'. [ 408.462155][T20142] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4106'. [ 408.771786][T20160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4111'. [ 408.945844][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 408.969449][T20170] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4113'. [ 408.993505][T20174] netlink: 'syz.4.4116': attribute type 1 has an invalid length. [ 409.003984][T20174] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4116'. [ 409.022514][T20174] nbd: couldn't find device at index 1048576 [ 409.030327][T20170] vlan0: entered allmulticast mode [ 409.051868][T20170] gretap0: entered allmulticast mode [ 410.333696][T20245] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 410.775479][T20234] netlink: 'syz.2.4132': attribute type 1 has an invalid length. [ 411.144867][T20272] lo speed is unknown, defaulting to 1000 [ 411.726491][T20293] netlink: 'syz.0.4150': attribute type 30 has an invalid length. [ 411.965598][T20313] netlink: 'syz.0.4153': attribute type 1 has an invalid length. [ 411.973883][T20313] __nla_validate_parse: 3 callbacks suppressed [ 411.973902][T20313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4153'. [ 412.240389][T20321] netlink: 'syz.3.4156': attribute type 13 has an invalid length. [ 412.267078][T20321] netlink: 'syz.3.4156': attribute type 58 has an invalid length. [ 412.299084][T20321] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4156'. [ 412.479507][T20337] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4160'. [ 412.558335][T20341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4161'. [ 412.591630][T20341] netlink: 'syz.1.4161': attribute type 5 has an invalid length. [ 412.631278][T20341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4161'. [ 412.663824][ T6969] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.690352][ T6969] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.745033][ T6969] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.799477][ T6969] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.799638][T20350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4163'. [ 412.869577][T20354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4163'. [ 412.904047][T20362] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4166'. [ 412.921656][T20361] netlink: 'syz.1.4167': attribute type 18 has an invalid length. [ 413.108687][T20371] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 413.118662][T20371] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 413.149733][T20372] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4172'. [ 413.314704][T20380] can: request_module (can-proto-0) failed. [ 413.423883][T20390] netlink: 'syz.0.4176': attribute type 4 has an invalid length. [ 413.442569][T20388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4175'. [ 413.534404][T20393] netlink: 'syz.4.4177': attribute type 11 has an invalid length. [ 413.758655][T20397] netlink: 'syz.3.4178': attribute type 12 has an invalid length. [ 413.809650][T20402] netlink: 'syz.4.4180': attribute type 1 has an invalid length. [ 413.915259][T20407] syzkaller0: entered promiscuous mode [ 413.975241][T20407] syzkaller0: entered allmulticast mode [ 414.087448][T20415] sctp: [Deprecated]: syz.1.4185 (pid 20415) Use of int in maxseg socket option. [ 414.087448][T20415] Use struct sctp_assoc_value instead [ 414.543104][T20442] unsupported nla_type 58 [ 414.874027][T20449] bond5 (unregistering): Released all slaves [ 415.347302][T20472] syzkaller0: entered promiscuous mode [ 415.376815][T20472] syzkaller0: entered allmulticast mode [ 415.398257][T20468] tipc: Started in network mode [ 415.403223][T20468] tipc: Node identity aa2eee6cdc4c, cluster identity 4711 [ 415.476636][T20468] tipc: Enabled bearer , priority 0 [ 415.635460][T20468] tipc: Resetting bearer [ 415.757578][T20468] tipc: Disabling bearer [ 417.059472][T20577] validate_nla: 3 callbacks suppressed [ 417.059493][T20577] netlink: 'syz.2.4231': attribute type 1 has an invalid length. [ 417.073912][T20577] netlink: 'syz.2.4231': attribute type 3 has an invalid length. [ 417.084367][T20577] __nla_validate_parse: 15 callbacks suppressed [ 417.084387][T20577] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4231'. [ 417.084750][T20575] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 417.240278][T20593] netlink: 146840 bytes leftover after parsing attributes in process `syz.2.4234'. [ 417.312450][T20596] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 417.366472][T20596] bond0: (slave rose0): Error: Device can not be enslaved while up [ 417.556293][T20608] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4240'. [ 418.075092][T20636] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4249'. [ 418.354450][T20661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4256'. [ 418.392694][T20664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4256'. [ 418.473291][T20667] netlink: 'syz.0.4258': attribute type 1 has an invalid length. [ 418.545206][T20667] bond5 (unregistering): Released all slaves [ 418.623282][T20675] ip6tnl2: entered promiscuous mode [ 418.629279][T20675] ip6tnl2: entered allmulticast mode [ 418.853657][T20692] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 419.002743][T20696] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4267'. [ 419.273071][T20706] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 419.295875][T20706] netlink: 'syz.0.4270': attribute type 8 has an invalid length. [ 419.305420][T20706] x_tables: ip_tables: udp match: only valid for protocol 17 [ 419.478715][T20714] sctp: [Deprecated]: syz.2.4273 (pid 20714) Use of int in max_burst socket option deprecated. [ 419.478715][T20714] Use struct sctp_assoc_value instead [ 419.548062][T20718] netlink: 'syz.3.4275': attribute type 5 has an invalid length. [ 419.588143][T20720] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 419.737090][T20724] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 419.781063][T20731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4278'. [ 419.814366][T20731] netlink: 'syz.4.4278': attribute type 7 has an invalid length. [ 419.835996][T20731] netlink: 'syz.4.4278': attribute type 8 has an invalid length. [ 419.844698][T20735] sctp: [Deprecated]: syz.1.4281 (pid 20735) Use of int in maxseg socket option. [ 419.844698][T20735] Use struct sctp_assoc_value instead [ 419.872888][T20731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4278'. [ 419.946727][T20731] team0: entered promiscuous mode [ 419.993360][T20731] team0: left promiscuous mode [ 420.051207][T20743] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4280'. [ 420.122881][T20746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.163576][T20750] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 420.226499][T20750] netlink: 'syz.0.4282': attribute type 11 has an invalid length. [ 420.271229][T20750] netlink: 'syz.0.4282': attribute type 11 has an invalid length. [ 420.312262][T20750] netlink: 'syz.0.4282': attribute type 11 has an invalid length. [ 420.348459][T20759] team_slave_0: mtu greater than device maximum [ 420.350765][T20753] netlink: 'syz.3.4285': attribute type 6 has an invalid length. [ 420.901003][T20785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.240574][T20808] vlan2: entered promiscuous mode [ 421.263729][T20808] bridge0: entered promiscuous mode [ 422.407998][T20840] netlink: 'syz.2.4308': attribute type 33 has an invalid length. [ 422.469944][T20842] netlink: 'syz.1.4311': attribute type 1 has an invalid length. [ 422.664345][T20842] 8021q: adding VLAN 0 to HW filter on device bond4 [ 422.808390][T20843] bond4: (slave veth7): Enslaving as an active interface with a down link [ 422.827902][T20855] netlink: 'syz.2.4314': attribute type 10 has an invalid length. [ 422.864282][T20858] netlink: 'syz.2.4314': attribute type 10 has an invalid length. [ 422.894428][T20855] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 422.943152][T20855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.990414][T20863] netlink: 'syz.1.4315': attribute type 1 has an invalid length. [ 423.006372][T20853] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 423.012853][T20858] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 423.025818][T20863] netlink: 'syz.1.4315': attribute type 3 has an invalid length. [ 423.026965][T20858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.043981][T20863] __nla_validate_parse: 11 callbacks suppressed [ 423.044009][T20863] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4315'. [ 423.109172][T20863] NCSI netlink: No device for ifindex 131080 [ 423.197248][T20868] netlink: 'syz.2.4316': attribute type 58 has an invalid length. [ 423.215555][T20868] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4316'. [ 423.279646][T20871] netlink: zone id is out of range [ 423.301466][T20871] netlink: zone id is out of range [ 423.314523][T20871] netlink: zone id is out of range [ 423.323313][T20871] netlink: zone id is out of range [ 423.344367][T20871] netlink: zone id is out of range [ 423.358534][T20871] netlink: zone id is out of range [ 423.364112][T20871] netlink: zone id is out of range [ 423.375209][T20871] netlink: zone id is out of range [ 423.391244][T20874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4317'. [ 423.652871][T20881] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4319'. [ 423.662553][T20882] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4319'. [ 423.734808][T20884] netlink: 'syz.3.4321': attribute type 1 has an invalid length. [ 423.924599][T20892] bond5 (unregistering): Released all slaves [ 424.014806][T20896] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 424.038505][T20896] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 424.062326][T20896] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 424.074918][T20899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4324'. [ 424.145447][T20899] vlan3: entered allmulticast mode [ 424.151344][T20899] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode [ 424.395807][T20916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4327'. [ 424.763270][T20923] lo speed is unknown, defaulting to 1000 [ 425.528501][T20945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4334'. [ 425.612880][T20947] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4335'. [ 425.878379][T20934] lec:lec_atm_close: lec0: Shut down! [ 426.097808][T20967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4339'. [ 426.134129][T20967] netlink: 'syz.3.4339': attribute type 1 has an invalid length. [ 426.256291][T20968] nbd3: detected capacity change from 0 to 127 [ 426.484751][ T5881] block nbd3: Receive control failed (result -32) [ 426.865864][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 427.141191][T21007] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.148490][T21007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.195533][T21002] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.202863][T21002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.687089][T21037] netlink: 'syz.4.4360': attribute type 21 has an invalid length. [ 427.698513][T21037] IPv6: NLM_F_CREATE should be specified when creating new route [ 427.906961][T21041] unknown channel width for channel at 909000KHz? [ 428.031317][T21041] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.039211][T21041] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.046557][T21041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.064726][T21042] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.073983][T21042] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.081265][T21042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.151134][T21052] __nla_validate_parse: 9 callbacks suppressed [ 428.151158][T21052] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4365'. [ 428.189481][T21052] netlink: 'syz.0.4365': attribute type 2 has an invalid length. [ 428.409826][T21059] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4367'. [ 428.546607][T21069] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4368'. [ 428.608348][T21067] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4371'. [ 428.668477][T21067] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4371'. [ 429.365185][T21102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4378'. [ 429.558411][T21107] netlink: 'syz.0.4380': attribute type 2 has an invalid length. [ 429.770441][T21119] netlink: 'syz.4.4385': attribute type 33 has an invalid length. [ 429.794283][T21122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4387'. [ 429.820580][T21119] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4385'. [ 429.822196][T21124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4385'. [ 430.092901][T21137] tipc: Enabled bearer , priority 0 [ 430.227489][T21137] tipc: Disabling bearer [ 430.240065][T21144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4392'. [ 430.442227][T21152] net_ratelimit: 10 callbacks suppressed [ 430.442251][T21152] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.713011][T21130] lec:lec_atm_close: lec0: Shut down! [ 430.759879][T21144] team0 (unregistering): Port device team_slave_0 removed [ 430.789598][T21144] team0 (unregistering): Port device team_slave_1 removed [ 431.237070][T21175] netlink: 'syz.1.4401': attribute type 1 has an invalid length. [ 431.255263][T21175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.773376][T21199] tipc: Enabling of bearer rejected, failed to enable media [ 432.865259][T21252] tipc: Enabled bearer , priority 0 [ 432.894066][T21252] syzkaller0: entered promiscuous mode [ 432.912444][T21252] syzkaller0: entered allmulticast mode [ 432.967806][T21252] tipc: Resetting bearer [ 433.016872][T21251] tipc: Resetting bearer [ 433.088469][T21251] tipc: Disabling bearer [ 433.130332][T21257] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20002 [ 433.320574][T21261] __nla_validate_parse: 6 callbacks suppressed [ 433.320599][T21261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4429'. [ 433.352957][T21261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4429'. [ 433.756978][T21280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4434'. [ 433.774782][T21282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4437'. [ 433.847560][T21285] Unsupported ieee802154 address type: 0 [ 433.933949][T21288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4438'. [ 433.956571][T21288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4438'. [ 433.983966][T21288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4438'. [ 434.058841][T21296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4440'. [ 434.232356][T21309] tipc: Started in network mode [ 434.240091][T21309] tipc: Node identity e0000002, cluster identity 4711 [ 434.250422][T21309] tipc: Enabling of bearer rejected, failed to enable media [ 434.264912][T21306] tipc: Enabling of bearer rejected, failed to enable media [ 434.469621][T21317] ip6gre1: entered allmulticast mode [ 434.506146][T21319] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4449'. [ 434.858193][T21336] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 435.234407][T21347] openvswitch: netlink: Actions may not be safe on all matching packets [ 435.372904][T21353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4460'. [ 436.286197][T21406] netlink: 'syz.1.4474': attribute type 3 has an invalid length. [ 436.517803][T21384] lec:lec_atm_close: lec0: Shut down! [ 436.752617][T21426] openvswitch: netlink: Missing key (keys=40, expected=100) [ 437.096904][ T6969] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.112349][ T6985] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.129910][ T6985] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.144152][T21446] netlink: 'syz.2.4487': attribute type 4 has an invalid length. [ 437.160485][ T6985] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.201500][T21446] netlink: 'syz.2.4487': attribute type 4 has an invalid length. [ 437.272962][ T5881] Bluetooth: hci0: command 0x0405 tx timeout [ 437.409211][T21452] netlink: 'syz.2.4491': attribute type 1 has an invalid length. [ 437.492022][T21452] 8021q: adding VLAN 0 to HW filter on device bond3 [ 437.718763][T21460] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.746831][ T94] block nbd0: Possible stuck request ffff8880257e5080: control (read@0,1024B). Runtime 300 seconds [ 437.759117][ T94] block nbd0: Possible stuck request ffff8880257e5240: control (read@1024,1024B). Runtime 300 seconds [ 437.773026][ T94] block nbd0: Possible stuck request ffff8880257e5400: control (read@2048,1024B). Runtime 300 seconds [ 437.784801][ T94] block nbd0: Possible stuck request ffff8880257e55c0: control (read@3072,1024B). Runtime 300 seconds [ 437.969777][T21460] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.166401][T21460] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.324217][T21460] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.434358][T21491] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 438.521819][T21496] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 438.549939][T21496] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.559708][T21496] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.708430][ T6985] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.808576][ T6998] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.861612][ T6983] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.033436][T21505] bond5: entered promiscuous mode [ 439.043767][T21505] bond5: entered allmulticast mode [ 439.053254][T21505] 8021q: adding VLAN 0 to HW filter on device bond5 [ 439.117646][ T6985] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.490834][T21514] __nla_validate_parse: 12 callbacks suppressed [ 439.490870][T21514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4510'. [ 439.550810][T21531] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4514'. [ 439.797301][T21541] netlink: 212288 bytes leftover after parsing attributes in process `syz.4.4516'. [ 439.844721][T21544] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4517'. [ 440.242584][T21564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4523'. [ 440.278784][T21564] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 440.470316][T21574] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4527'. [ 440.771059][T21591] tipc: Enabled bearer , priority 0 [ 440.863367][T21591] syzkaller0: entered promiscuous mode [ 440.869471][T21591] syzkaller0: entered allmulticast mode [ 440.883941][T21591] tipc: Resetting bearer [ 440.908526][T21590] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 440.918940][T21590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4530'. [ 440.934030][T21585] tipc: Resetting bearer [ 441.739969][T21627] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4540'. [ 441.780502][T21628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4538'. [ 441.869212][T21632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4538'. [ 443.569801][T21585] tipc: Disabling bearer [ 443.602486][T21627] vlan5: entered promiscuous mode [ 443.608839][T21627] bridge0: entered promiscuous mode [ 444.583135][T21678] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 444.635877][T21678] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 444.654383][T21678] gretap2: entered promiscuous mode [ 444.676992][T21678] gretap2: entered allmulticast mode [ 444.767850][T21682] __nla_validate_parse: 1 callbacks suppressed [ 444.767875][T21682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4554'. [ 444.905252][T21684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4555'. [ 444.919861][T21669] netlink: 'syz.2.4549': attribute type 21 has an invalid length. [ 444.929342][T21684] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4555'. [ 445.057979][T21688] netlink: 'syz.4.4556': attribute type 3 has an invalid length. [ 445.124012][T21691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4557'. [ 445.301779][T21703] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4560'. [ 445.544688][T21713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4562'. [ 445.553230][T21711] veth0: entered promiscuous mode [ 445.575510][T21709] veth0: left promiscuous mode [ 445.619310][T21718] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4566'. [ 445.788487][T21732] tipc: Enabled bearer , priority 24 [ 445.938603][T21743] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4574'. [ 445.963329][T21743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4574'. [ 445.981260][T21743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4574'. [ 446.004818][T21746] netlink: 'syz.3.4575': attribute type 5 has an invalid length. [ 446.137147][T21751] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 446.158530][T21751] netlink: 'syz.0.4576': attribute type 2 has an invalid length. [ 446.428459][T21775] netlink: 'syz.3.4579': attribute type 1 has an invalid length. [ 446.436443][T21775] netlink: 'syz.3.4579': attribute type 2 has an invalid length. [ 446.449960][T21772] bond0: (slave rose0): Error: Device can not be enslaved while up [ 446.496685][T21774] tipc: Enabling of bearer rejected, failed to enable media [ 446.555286][T21774] netlink: 'syz.0.4583': attribute type 4 has an invalid length. [ 447.087432][T21805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.175510][T21878] netlink: 'syz.1.4616': attribute type 4 has an invalid length. [ 448.487823][T21892] netlink: 'syz.0.4622': attribute type 21 has an invalid length. [ 449.034446][T21919] IPVS: set_ctl: invalid protocol: 51 10.1.1.2:20002 [ 449.455261][T21944] C: renamed from lo (while UP) [ 449.548931][T21950] bridge4: entered promiscuous mode [ 449.554323][T21950] bridge4: entered allmulticast mode [ 449.915386][T21973] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 450.684185][T21985] __nla_validate_parse: 11 callbacks suppressed [ 450.684206][T21985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4647'. [ 450.870181][T22012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4656'. [ 450.889739][T22012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4656'. [ 450.912389][T22017] netlink: 25 bytes leftover after parsing attributes in process `syz.3.4658'. [ 450.925565][T22012] netlink: 'syz.4.4656': attribute type 14 has an invalid length. [ 450.941770][T22014] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4658'. [ 450.954121][T22012] netlink: 'syz.4.4656': attribute type 13 has an invalid length. [ 450.985939][T22014] 0{X: renamed from gretap0 (while UP) [ 451.009971][T22014] 0{X: entered allmulticast mode [ 451.020942][T22014] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 451.312476][T22037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4664'. [ 451.325098][T22038] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4665'. [ 451.346387][T22037] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4664'. [ 451.880592][T22037] geneve2: entered promiscuous mode [ 451.904994][T22037] geneve2: entered allmulticast mode [ 452.006940][T22050] netlink: 'syz.1.4668': attribute type 4 has an invalid length. [ 452.067215][T22051] netlink: 'syz.1.4668': attribute type 4 has an invalid length. [ 452.102447][T22055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4670'. [ 452.171022][T22062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4670'. [ 452.328237][T22070] netlink: 'syz.2.4673': attribute type 1 has an invalid length. [ 452.366416][T22072] netlink: 'syz.2.4673': attribute type 1 has an invalid length. [ 452.627172][ T5867] Bluetooth: hci3: command 0x0406 tx timeout [ 452.657787][T22085] netlink: 'syz.1.4679': attribute type 1 has an invalid length. [ 452.666936][T22085] netlink: 'syz.1.4679': attribute type 3 has an invalid length. [ 452.813835][T22089] netlink: 'syz.2.4680': attribute type 33 has an invalid length. [ 452.852409][T22089] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 452.956241][T22092] 8021q: adding VLAN 0 to HW filter on device bond5 [ 453.019377][T22092] openvswitch: netlink: IP tunnel dst address not specified [ 453.540217][T22126] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 453.750455][T22141] netlink: 'syz.3.4696': attribute type 21 has an invalid length. [ 454.977333][T22188] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 454.985829][T22185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.003784][T22188] openvswitch: netlink: Duplicate key (type 0). [ 455.088404][T22189] bond6: entered allmulticast mode [ 455.103673][T22189] 8021q: adding VLAN 0 to HW filter on device bond6 [ 455.111897][T22189] bridge0: port 1(bond6) entered blocking state [ 455.123463][T22189] bridge0: port 1(bond6) entered disabled state [ 455.135574][T22189] bond6: entered promiscuous mode [ 455.147303][T22189] bridge0: port 1(bond6) entered blocking state [ 455.153783][T22189] bridge0: port 1(bond6) entered forwarding state [ 455.172268][T22181] lo speed is unknown, defaulting to 1000 [ 455.192480][ T36] bridge0: port 1(bond6) entered disabled state [ 455.557131][T22207] ip6erspan0: entered promiscuous mode [ 455.562738][T22207] ip6erspan0: entered allmulticast mode [ 455.621378][T22216] veth0_macvtap: Device is already in use. [ 455.867948][T22224] __nla_validate_parse: 14 callbacks suppressed [ 455.867970][T22224] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4720'. [ 456.463712][T22242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4727'. [ 456.812054][T22255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4731'. [ 456.852089][T22259] validate_nla: 3 callbacks suppressed [ 456.852110][T22259] netlink: 'syz.3.4733': attribute type 10 has an invalid length. [ 457.118344][T22276] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4738'. [ 457.197494][T22276] bond6: entered promiscuous mode [ 457.202718][T22276] bond6: entered allmulticast mode [ 457.214366][T22276] 8021q: adding VLAN 0 to HW filter on device bond6 [ 457.262705][T22282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4739'. [ 457.321422][T22282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4739'. [ 457.372213][T22290] bridge4: entered promiscuous mode [ 457.426786][T22290] bridge4: entered allmulticast mode [ 457.462684][T22291] macvlan0: entered promiscuous mode [ 457.492770][T22291] macvlan0: entered allmulticast mode [ 457.747519][T22315] bridge_slave_0: entered promiscuous mode [ 457.774600][T22315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4751'. [ 457.805320][T22315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4751'. [ 458.213798][T22330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4755'. [ 458.298147][T22330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4755'. [ 458.494993][T22337] syzkaller0: entered promiscuous mode [ 458.510981][T22337] syzkaller0: entered allmulticast mode [ 458.793004][T22354] openvswitch: netlink: Multiple metadata blocks provided [ 459.049993][T22368] netlink: 'syz.1.4769': attribute type 8 has an invalid length. [ 459.522739][T22393] netlink: 'syz.2.4778': attribute type 11 has an invalid length. [ 460.097991][T22425] syzkaller1: entered promiscuous mode [ 460.103550][T22425] syzkaller1: entered allmulticast mode [ 460.553244][T22459] tipc: Enabled bearer , priority 0 [ 460.572620][T22459] syzkaller0: entered promiscuous mode [ 460.578939][T22459] syzkaller0: entered allmulticast mode [ 460.596272][T22459] tipc: Resetting bearer [ 460.616254][T22458] tipc: Resetting bearer [ 460.639497][T22458] tipc: Disabling bearer [ 461.001806][T22484] netlink: 'syz.1.4805': attribute type 2 has an invalid length. [ 461.010617][T22484] openvswitch: netlink: Missing key (keys=40, expected=100) [ 461.013696][T22487] openvswitch: netlink: Missing key (keys=40, expected=100) [ 461.283149][T22496] __nla_validate_parse: 8 callbacks suppressed [ 461.283171][T22496] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4810'. [ 461.316219][T22496] openvswitch: netlink: Actions may not be safe on all matching packets [ 461.337455][T22493] tipc: Enabled bearer , priority 0 [ 461.367462][T22493] syzkaller0: entered promiscuous mode [ 461.387539][T22493] syzkaller0: entered allmulticast mode [ 461.463645][T22493] netlink: 21 bytes leftover after parsing attributes in process `syz.0.4807'. [ 461.509594][T22493] tipc: Resetting bearer [ 461.552988][T22492] tipc: Resetting bearer [ 461.581598][T22492] tipc: Disabling bearer [ 461.793267][T22526] netlink: 'syz.3.4820': attribute type 1 has an invalid length. [ 461.816137][T22526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4820'. [ 462.031812][T22534] tipc: Enabling of bearer rejected, failed to enable media [ 462.374401][T22548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4826'. [ 462.444400][T22549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4826'. [ 462.706264][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 462.841599][T22563] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 462.859593][T22567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4830'. [ 462.882500][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 462.882519][ T5183] Bluetooth: hci1: command 0x0406 tx timeout [ 462.891163][T22567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4830'. [ 462.967630][T22576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4830'. [ 463.023593][T22567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4830'. [ 463.058464][T22567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4830'. [ 463.538741][T22610] siw: device registration error -23 [ 463.930879][T22622] lo speed is unknown, defaulting to 1000 [ 464.589400][T22654] syzkaller0: entered promiscuous mode [ 464.595050][T22654] syzkaller0: entered allmulticast mode [ 464.731938][T22671] gtp1: entered promiscuous mode [ 464.741227][T22671] gtp1: entered allmulticast mode [ 464.863083][T22683] vlan0: entered promiscuous mode [ 465.916611][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.105817][ T6985] wlan0: Trigger new scan to find an IBSS to join [ 467.693237][T22734] __nla_validate_parse: 3 callbacks suppressed [ 467.693273][T22734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4873'. [ 467.799391][T22736] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4874'. [ 467.835918][ T94] block nbd0: Possible stuck request ffff8880257e5080: control (read@0,1024B). Runtime 330 seconds [ 467.846803][ T94] block nbd0: Possible stuck request ffff8880257e5240: control (read@1024,1024B). Runtime 330 seconds [ 467.849232][T22741] netlink: 'syz.4.4876': attribute type 2 has an invalid length. [ 467.858331][ T94] block nbd0: Possible stuck request ffff8880257e5400: control (read@2048,1024B). Runtime 330 seconds [ 467.877896][ T94] block nbd0: Possible stuck request ffff8880257e55c0: control (read@3072,1024B). Runtime 330 seconds [ 468.128205][T22758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4879'. [ 468.385699][T22774] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 468.407035][T22773] syzkaller0: entered promiscuous mode [ 468.413214][T22773] syzkaller0: entered allmulticast mode [ 468.516367][T22773] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4883'. [ 468.544273][T22779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4885'. [ 468.680233][T22790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4886'. [ 469.033847][T22800] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 469.040119][T22802] netlink: 'syz.1.4892': attribute type 1 has an invalid length. [ 469.074413][T22802] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 469.293970][T22818] sctp: [Deprecated]: syz.0.4896 (pid 22818) Use of int in max_burst socket option. [ 469.293970][T22818] Use struct sctp_assoc_value instead [ 469.454057][T22827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4898'. [ 469.571461][T22834] netlink: 'syz.0.4900': attribute type 10 has an invalid length. [ 469.643220][T22834] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 470.135040][T22858] netlink: 212404 bytes leftover after parsing attributes in process `syz.1.4908'. [ 470.214745][T12845] IPVS: starting estimator thread 0... [ 470.306936][T22862] IPVS: using max 25 ests per chain, 60000 per kthread [ 470.450484][T22873] netlink: 'syz.2.4912': attribute type 8 has an invalid length. [ 471.106558][ T5881] Bluetooth: hci0: command tx timeout [ 472.146245][ T6998] wlan0: Trigger new scan to find an IBSS to join [ 474.416648][ T6983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.446503][T12845] ------------[ cut here ]------------ [ 474.452633][T12845] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 474.463443][T12845] WARNING: CPU: 0 PID: 12845 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820 [ 474.473621][T12845] Modules linked in: [ 474.477947][T12845] CPU: 0 UID: 0 PID: 12845 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 474.487508][T12845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 474.497663][T12845] Workqueue: mld mld_ifc_work [ 474.502415][T12845] RIP: 0010:__rate_control_send_low+0x5df/0x820 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 474.508738][T12845] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 6d b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 72 69 93 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 474.528773][T12845] RSP: 0018:ffffc900033664d8 EFLAGS: 00010246 [ 474.534892][T12845] RAX: f7b618573bca4a00 RBX: 000000000000000c RCX: ffff888079c93c00 [ 474.542950][T12845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 474.550992][T12845] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 474.559294][T12845] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888020f03668 [ 474.567431][T12845] R13: 0000000000000000 R14: ffff88804f0f0e40 R15: ffff88804f0f30d8 [ 474.575453][T12845] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 474.584466][T12845] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.591122][T12845] CR2: 00007ffe08304d38 CR3: 000000000df36000 CR4: 00000000003526f0 [ 474.599175][T12845] Call Trace: [ 474.602491][T12845] [ 474.605566][T12845] rate_control_send_low+0x194/0x7a0 [ 474.611049][T12845] rate_control_get_rate+0x20b/0x5d0 [ 474.616462][T12845] ieee80211_tx_h_rate_ctrl+0xb32/0x1780 [ 474.622179][T12845] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 474.628521][T12845] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 474.634908][T12845] invoke_tx_handlers_late+0xb6/0x1820 [ 474.640495][T12845] ? ieee80211_tx_h_select_key+0xd1b/0x19f0 [ 474.646484][T12845] ieee80211_tx_dequeue+0x308e/0x4360 [ 474.651985][T12845] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 474.657786][T12845] ? __local_bh_enable_ip+0x12d/0x1c0 [ 474.663233][T12845] ieee80211_handle_wake_tx_queue+0x125/0x2a0 [ 474.669401][T12845] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 474.676060][T12845] ? __local_bh_enable_ip+0x12d/0x1c0 [ 474.681468][T12845] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 474.687263][T12845] ? do_raw_spin_unlock+0x122/0x240 [ 474.692513][T12845] ieee80211_queue_skb+0x1a2e/0x21c0 [ 474.697932][T12845] ieee80211_tx+0x297/0x420 [ 474.702488][T12845] ? __pfx_ieee80211_tx+0x10/0x10 [ 474.707623][T12845] ? ieee80211_xmit+0x315/0x400 [ 474.712544][T12845] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 474.718649][T12845] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 474.724871][T12845] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 474.731441][T12845] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 474.737857][T12845] ieee80211_subif_start_xmit+0xe0/0x510 [ 474.743555][T12845] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 474.749888][T12845] ? __pfx_netif_skb_features+0x10/0x10 [ 474.755479][T12845] ? call_rcu+0x6ff/0x9c0 [ 474.759902][T12845] ? __lock_acquire+0xab9/0xd20 [ 474.764820][T12845] dev_hard_start_xmit+0x2d4/0x830 [ 474.770027][T12845] __dev_queue_xmit+0x1b8d/0x3b50 [ 474.775106][T12845] ? register_lock_class+0x51/0x320 [ 474.780410][T12845] ? __dev_queue_xmit+0x27b/0x3b50 [ 474.785635][T12845] ? __pfx___dev_queue_xmit+0x10/0x10 [ 474.791059][T12845] ? read_seqbegin+0x122/0x250 [ 474.795899][T12845] ? neigh_resolve_output+0x438/0x750 [ 474.801315][T12845] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.806596][T12845] ? read_seqbegin+0x1ac/0x250 [ 474.811408][T12845] ? __pfx_read_seqbegin+0x10/0x10 [ 474.816589][T12845] ? __local_bh_enable_ip+0x12d/0x1c0 [ 474.822007][T12845] ? eth_header+0x11b/0x200 [ 474.826661][T12845] ? __asan_memcpy+0x40/0x70 [ 474.831360][T12845] ip6_finish_output2+0x11fb/0x16a0 [ 474.836632][T12845] ? ip6_finish_output2+0x701/0x16a0 [ 474.841974][T12845] ? ip6_mtu+0x7d/0x3f0 [ 474.846200][T12845] ? __pfx_ip6_finish_output2+0x10/0x10 [ 474.851785][T12845] ? ip6_mtu+0x7d/0x3f0 [ 474.856002][T12845] ? ip6_mtu+0x321/0x3f0 [ 474.860295][T12845] ? ip6_finish_output+0x2ef/0x4e0 [ 474.865449][T12845] NF_HOOK+0x9e/0x380 [ 474.869539][T12845] ? __pfx_NF_HOOK+0x10/0x10 [ 474.874167][T12845] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 474.880039][T12845] ? do_raw_spin_unlock+0x122/0x240 [ 474.885289][T12845] ? icmp6_dst_alloc+0x3a5/0x420 [ 474.890361][T12845] ? icmp6_dst_alloc+0x3a5/0x420 [ 474.895352][T12845] mld_sendpack+0x800/0xd80 [ 474.899965][T12845] ? mld_sendpack+0x1de/0xd80 [ 474.904695][T12845] ? __pfx_mld_sendpack+0x10/0x10 [ 474.909835][T12845] mld_ifc_work+0x83e/0xd60 [ 474.914385][T12845] ? _raw_spin_unlock_irq+0x23/0x50 [ 474.919670][T12845] ? process_scheduled_works+0x9ef/0x17b0 [ 474.925430][T12845] process_scheduled_works+0xae1/0x17b0 [ 474.931150][T12845] ? __pfx_process_scheduled_works+0x10/0x10 [ 474.937267][T12845] worker_thread+0x8a0/0xda0 [ 474.941909][T12845] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 474.948324][T12845] ? __kthread_parkme+0x7b/0x200 [ 474.953319][T12845] kthread+0x711/0x8a0 [ 474.957473][T12845] ? __pfx_worker_thread+0x10/0x10 [ 474.962625][T12845] ? __pfx_kthread+0x10/0x10 [ 474.967298][T12845] ? _raw_spin_unlock_irq+0x23/0x50 [ 474.972538][T12845] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.977848][T12845] ? __pfx_kthread+0x10/0x10 [ 474.982489][T12845] ret_from_fork+0x3f9/0x770 [ 474.987162][T12845] ? __pfx_ret_from_fork+0x10/0x10 [ 474.992323][T12845] ? __switch_to_asm+0x39/0x70 [ 474.997302][T12845] ? __switch_to_asm+0x33/0x70 [ 475.002154][T12845] ? __pfx_kthread+0x10/0x10 [ 475.006820][T12845] ret_from_fork_asm+0x1a/0x30 [ 475.011678][T12845] [ 475.014734][T12845] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 475.022044][T12845] CPU: 0 UID: 0 PID: 12845 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 475.031737][T12845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 475.041836][T12845] Workqueue: mld mld_ifc_work [ 475.046570][T12845] Call Trace: [ 475.049879][T12845] [ 475.052832][T12845] dump_stack_lvl+0x99/0x250 [ 475.057459][T12845] ? __asan_memcpy+0x40/0x70 [ 475.062106][T12845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.067370][T12845] ? __pfx__printk+0x10/0x10 [ 475.072047][T12845] vpanic+0x281/0x750 [ 475.076075][T12845] ? __pfx__printk+0x10/0x10 [ 475.080801][T12845] ? __pfx_vpanic+0x10/0x10 [ 475.085437][T12845] ? is_bpf_text_address+0x292/0x2b0 [ 475.090793][T12845] panic+0xb9/0xc0 [ 475.094787][T12845] ? __pfx_panic+0x10/0x10 [ 475.099366][T12845] __warn+0x31b/0x4b0 [ 475.103543][T12845] ? __rate_control_send_low+0x5df/0x820 [ 475.109348][T12845] ? __rate_control_send_low+0x5df/0x820 [ 475.115132][T12845] report_bug+0x2be/0x4f0 [ 475.119523][T12845] ? __rate_control_send_low+0x5df/0x820 [ 475.125197][T12845] ? __rate_control_send_low+0x5df/0x820 [ 475.130863][T12845] ? __rate_control_send_low+0x5e1/0x820 [ 475.136528][T12845] handle_bug+0x84/0x160 [ 475.140786][T12845] exc_invalid_op+0x1a/0x50 [ 475.145562][T12845] asm_exc_invalid_op+0x1a/0x20 [ 475.150435][T12845] RIP: 0010:__rate_control_send_low+0x5df/0x820 [ 475.156912][T12845] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 6d b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 72 69 93 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 475.176581][T12845] RSP: 0018:ffffc900033664d8 EFLAGS: 00010246 [ 475.182677][T12845] RAX: f7b618573bca4a00 RBX: 000000000000000c RCX: ffff888079c93c00 [ 475.190661][T12845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 475.198667][T12845] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 475.206663][T12845] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888020f03668 [ 475.214652][T12845] R13: 0000000000000000 R14: ffff88804f0f0e40 R15: ffff88804f0f30d8 [ 475.222707][T12845] ? __rate_control_send_low+0x5de/0x820 [ 475.228481][T12845] rate_control_send_low+0x194/0x7a0 [ 475.233821][T12845] rate_control_get_rate+0x20b/0x5d0 [ 475.239146][T12845] ieee80211_tx_h_rate_ctrl+0xb32/0x1780 [ 475.244916][T12845] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 475.251022][T12845] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 475.257307][T12845] invoke_tx_handlers_late+0xb6/0x1820 [ 475.262815][T12845] ? ieee80211_tx_h_select_key+0xd1b/0x19f0 [ 475.269185][T12845] ieee80211_tx_dequeue+0x308e/0x4360 [ 475.274641][T12845] ? __pfx_ieee80211_tx_dequeue+0x10/0x10 [ 475.280385][T12845] ? __local_bh_enable_ip+0x12d/0x1c0 [ 475.285823][T12845] ieee80211_handle_wake_tx_queue+0x125/0x2a0 [ 475.292000][T12845] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 475.298632][T12845] ? __local_bh_enable_ip+0x12d/0x1c0 [ 475.304042][T12845] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 475.309792][T12845] ? do_raw_spin_unlock+0x122/0x240 [ 475.315041][T12845] ieee80211_queue_skb+0x1a2e/0x21c0 [ 475.320423][T12845] ieee80211_tx+0x297/0x420 [ 475.324974][T12845] ? __pfx_ieee80211_tx+0x10/0x10 [ 475.330087][T12845] ? ieee80211_xmit+0x315/0x400 [ 475.334984][T12845] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 475.340989][T12845] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 475.347219][T12845] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 475.353769][T12845] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 475.360112][T12845] ieee80211_subif_start_xmit+0xe0/0x510 [ 475.365783][T12845] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 475.372141][T12845] ? __pfx_netif_skb_features+0x10/0x10 [ 475.377704][T12845] ? call_rcu+0x6ff/0x9c0 [ 475.382051][T12845] ? __lock_acquire+0xab9/0xd20 [ 475.386934][T12845] dev_hard_start_xmit+0x2d4/0x830 [ 475.392252][T12845] __dev_queue_xmit+0x1b8d/0x3b50 [ 475.397297][T12845] ? register_lock_class+0x51/0x320 [ 475.402527][T12845] ? __dev_queue_xmit+0x27b/0x3b50 [ 475.407689][T12845] ? __pfx___dev_queue_xmit+0x10/0x10 [ 475.413090][T12845] ? read_seqbegin+0x122/0x250 [ 475.417900][T12845] ? neigh_resolve_output+0x438/0x750 [ 475.423290][T12845] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.428532][T12845] ? read_seqbegin+0x1ac/0x250 [ 475.433316][T12845] ? __pfx_read_seqbegin+0x10/0x10 [ 475.438444][T12845] ? __local_bh_enable_ip+0x12d/0x1c0 [ 475.443832][T12845] ? eth_header+0x11b/0x200 [ 475.448347][T12845] ? __asan_memcpy+0x40/0x70 [ 475.452996][T12845] ip6_finish_output2+0x11fb/0x16a0 [ 475.458217][T12845] ? ip6_finish_output2+0x701/0x16a0 [ 475.463524][T12845] ? ip6_mtu+0x7d/0x3f0 [ 475.467692][T12845] ? __pfx_ip6_finish_output2+0x10/0x10 [ 475.473256][T12845] ? ip6_mtu+0x7d/0x3f0 [ 475.477432][T12845] ? ip6_mtu+0x321/0x3f0 [ 475.481694][T12845] ? ip6_finish_output+0x2ef/0x4e0 [ 475.486825][T12845] NF_HOOK+0x9e/0x380 [ 475.490830][T12845] ? __pfx_NF_HOOK+0x10/0x10 [ 475.495435][T12845] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 475.501258][T12845] ? do_raw_spin_unlock+0x122/0x240 [ 475.506481][T12845] ? icmp6_dst_alloc+0x3a5/0x420 [ 475.511443][T12845] ? icmp6_dst_alloc+0x3a5/0x420 [ 475.516409][T12845] mld_sendpack+0x800/0xd80 [ 475.520949][T12845] ? mld_sendpack+0x1de/0xd80 [ 475.525646][T12845] ? __pfx_mld_sendpack+0x10/0x10 [ 475.530718][T12845] mld_ifc_work+0x83e/0xd60 [ 475.535241][T12845] ? _raw_spin_unlock_irq+0x23/0x50 [ 475.540456][T12845] ? process_scheduled_works+0x9ef/0x17b0 [ 475.546193][T12845] process_scheduled_works+0xae1/0x17b0 [ 475.551783][T12845] ? __pfx_process_scheduled_works+0x10/0x10 [ 475.557793][T12845] worker_thread+0x8a0/0xda0 [ 475.562407][T12845] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 475.568761][T12845] ? __kthread_parkme+0x7b/0x200 [ 475.573725][T12845] kthread+0x711/0x8a0 [ 475.577818][T12845] ? __pfx_worker_thread+0x10/0x10 [ 475.582946][T12845] ? __pfx_kthread+0x10/0x10 [ 475.587550][T12845] ? _raw_spin_unlock_irq+0x23/0x50 [ 475.592764][T12845] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.597976][T12845] ? __pfx_kthread+0x10/0x10 [ 475.602676][T12845] ret_from_fork+0x3f9/0x770 [ 475.607301][T12845] ? __pfx_ret_from_fork+0x10/0x10 [ 475.612710][T12845] ? __switch_to_asm+0x39/0x70 [ 475.617498][T12845] ? __switch_to_asm+0x33/0x70 [ 475.622322][T12845] ? __pfx_kthread+0x10/0x10 [ 475.627030][T12845] ret_from_fork_asm+0x1a/0x30 [ 475.631828][T12845] [ 475.635208][T12845] Kernel Offset: disabled [ 475.639536][T12845] Rebooting in 86400 seconds..