last executing test programs: 1.996658413s ago: executing program 1 (id=7922): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x6, @loopback, 0x7ff}], 0x2c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2}, 0xe) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x40010000, 0x0) setsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000000700)=0x8f, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000000700)=0x8f, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r3], 0x4c}}, 0x0) 1.677185958s ago: executing program 1 (id=7932): r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000040)={0x6, 'veth0_macvtap\x00', {0x81}, 0x2}) (async) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160009000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x20}, 0x10) (async) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c000900580020010a0000000d0085a168216b46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160005000a0024a40423e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac5500000000030006000000000002008e34000000000000000000000000020001000000000000000a1600000000030005000000000002", @ANYBLOB="e8e403a9b86797f5e8f5a3bd4ef9f45297e72625cce6fe745c53fb40672d29d6d3d711523f51fc1556bda23e536f8545fa7c9b4de08a0f58d9ac88d9f5", @ANYRESHEX=r1, @ANYRESDEC=r0], 0x78}, 0x1, 0x7}, 0x0) 1.619567831s ago: executing program 1 (id=7933): syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fc000000000000000000000000000000ff02000000000000000000f7ffffff0000004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRESHEX=0x0], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x60, r1, 0x5, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {0x5}, @device_b}, 0x0, @random=0x6, 0x2000, @void, @void, @void, @val={0x4, 0x6, {0x7, 0x3, 0xfff, 0xf32}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x60}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x1, 0x0, 0x103, 0x0, 0x1}, 0x48) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x301, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x7) ioctl$PPPIOCSMAXCID(r4, 0x4004743c, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f00000002c0)=@framed={{}, [@generic={0x40}]}, &(0x7f0000000300)='syzkaller\x00', 0x9, 0xd0, &(0x7f0000000340)=""/208}, 0x90) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r6, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008000600"], 0xac}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r10}, 0x14) sendmmsg$inet6(r8, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRESOCT=r9], 0x28}}], 0x1, 0x0) pwritev(r8, &(0x7f0000000140)=[{}], 0x1, 0x3, 0x1) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 1.460737417s ago: executing program 4 (id=7936): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x7ff}], 0x1c) listen(r0, 0x3) (async) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000", @ANYRES32, @ANYBLOB="08001f0004"], 0x44}}, 0x0) sendto$inet(r1, &(0x7f0000000040)="f0494ea9", 0x4, 0x75a3c241a9bb6b21, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) 1.414217752s ago: executing program 3 (id=7938): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="80420000000000001400030076657468305f746f5f626f6e6400000008003a00", @ANYRES32=0x0, @ANYBLOB='\b\x00('], 0x44}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x12, r0, 0x110f7000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10080008}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getaddr={0x28, 0x16, 0x200, 0x70bd2a, 0x25dfdbfc, {0x2, 0x18, 0x2, 0xff}, [@IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_BROADCAST={0x8, 0x4, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c000) 1.150222457s ago: executing program 4 (id=7941): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="080005"], 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x8c0, 0xfffffffffffffffd, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r4, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r6], 0x34}}, 0x4008000) 1.127284965s ago: executing program 1 (id=7942): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x48) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x16ec7077c8c871d9}, 0x38) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb6}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000}}, 0xe8) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipv4_getnexthop={0x20, 0x6a, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f0000002140)=""/4085, 0xff5}, {&(0x7f0000004680)=""/4085, 0xff5}], 0x3}, 0x0) recvmmsg(r3, &(0x7f000000b9c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2029}, {{0x0, 0x0, 0x0}, 0xe68d}, {{0x0, 0x0, 0x0}, 0x810}, {{0x0, 0x0, 0x0}, 0xda02}], 0x5, 0x2002, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r2, @ANYBLOB="04"], 0xc4}}, 0x0) 1.069172773s ago: executing program 3 (id=7943): pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) r3 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x61d0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES8=r1], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000380)={@none, 0x10000}) r4 = socket(0x26, 0x80000, 0x1) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e26, 0x3ff, @remote}, 0x1c) listen(r4, 0x3d9) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r8 = socket(0x20, 0x5, 0x3) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) write$nci(r0, &(0x7f00000003c0)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x7f, {0x6, 0x4a, "4e1b8cf9f7339162940aadf68a5cf7cc49f727452880d1b23d7bbcbd98dc42bb410e0de01b06ca4f7b58a81a2281b65342ab66515e817595ae53d72b9736c1433963353768dbcaa0ae5caabdac19367ddec08579482aa358a636e826d1ecb2f97633968a006e7bc86e8ffb5e2580511be707c330d8e234dcfda5c2cccb7cb0e8370315cc87247a731c5b7a9ffdc2a04b20c6f8e6307cba9e9955b49b164d279d9fe7e560214f11b44f625aa107c00ffddb9378f599"}}, 0xba) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x840) sendmsg$nfc_llcp(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x27, r7, 0x0, 0x2, 0x4, 0xd, "2eaec1bfa13aef1b981cbef34fb5d6a20c09d4894f6034c65342b143582001c7ba1806e3f89cbb5dae318bc81f9093a8aa6b0a4a3a1ee5db9397a34aaaa427", 0x7}, 0x60, &(0x7f0000000240)=[{&(0x7f00000000c0)="e3745f6691dab985c027e9fcc4c83b95ce14887909b39d", 0x17}, {&(0x7f0000000140)="a96cc1dff58c33f849a7d674f787d24c1f10b53c8b67c72cf240610eff89aef2311607d61f581c8c05ade774653c18bd066f11a492b3578784547e359c42dd11332f1038261951af6e6c43444d371dc598b90e7da0bfd97f67cc234539d6ee5b5fe2da2fa83e4d10b8a19867bc04085035a37a5e7428302fc1f5a82f6bcd7b6df551e5d2abd6ec870759d0e76a752e5fd7c57476f17d46a95b271dde421beaf58d37b42ea8ce2bbb0107480bfba5eda8d6f0027130bb7755a02ba77879f5167afeef7e6e9dc33de216cbbed2e499bb7047e43cc52d1d6629", 0xd8}], 0x2, 0x0, 0x0, 0x8851}, 0x4000000) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00e5ff68703667726500001c000280060003dd7f000000080004000300000006000e0002000000"], 0x4c}}, 0x0) 1.063697396s ago: executing program 0 (id=7944): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x3c, &(0x7f0000000100), 0x4) sendmsg(r0, &(0x7f0000003040)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x1, 0x2}, 0x80, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r3, 0x101, 0x1, &(0x7f0000000040)=0x2, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x8, 0x1, 'SET\x00'}, @NFTA_TARGET_INFO={0xc, 0x3, "02b51112d439c592"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xfea1}}, 0x800) 949.74591ms ago: executing program 0 (id=7945): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x200008c0}, 0xcc00) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x4}, {0x8}}]}, 0x20}}, 0x0) 884.514736ms ago: executing program 2 (id=7946): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x5, 0x8, 0x3}) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000040)=0x3) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r2, 0x5}, &(0x7f0000000140)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x7, 0x8, 0x53, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x10, 0x700, 0x6}}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x20, 0x10, 0x8001, 0x1, {{0x48, 0x4, 0x2, 0x3, 0x120, 0x68, 0x0, 0x1, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@timestamp_prespec={0x44, 0x14, 0xc, 0x3, 0x2, [{@private=0xa010100, 0x1}, {@broadcast}]}, @rr={0x7, 0x27, 0x8e, [@multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast1, @rand_addr=0x64010101, @loopback, @multicast2, @empty, @private=0xa010101]}, @timestamp={0x44, 0x18, 0x7f, 0x0, 0x7, [0x6, 0xd3d0, 0x80000000, 0xc94, 0x9]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x44, 0xd7, 0x1, 0xe, [{@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4}, {@multicast1, 0x9}, {@multicast2, 0x7}, {@multicast2, 0x5}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x401}, {@remote, 0x8}]}, @cipso={0x86, 0x16, 0x3, [{0x7, 0x3, "91"}, {0x5, 0xd, "010668996cd9aa9a93f50a"}]}, @timestamp={0x44, 0x28, 0xf, 0x0, 0x8, [0xfffffffe, 0x8, 0x8, 0x2, 0x3, 0x3, 0x1, 0xc47, 0x7c3]}, @rr={0x7, 0x13, 0x9a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x40}]}, @end, @cipso={0x86, 0x1e, 0x2, [{0x2, 0x8, "db86937f8d9f"}, {0x6, 0x3, '<'}, {0x7, 0xd, "edeb1c820c818a71bf0d55"}]}]}}}}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x7, 0x80, 0x7c12e382, 0xd, {{0x8, 0x4, 0x3, 0x9, 0x20, 0x65, 0x0, 0x3, 0x4, 0x0, @loopback, @private=0xa010100, {[@timestamp_prespec={0x44, 0xc, 0x2e, 0x3, 0x1, [{@broadcast, 0x7}]}]}}}}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x4, 0x20, 0x5, 0xdc, 0x54, @loopback, @local, 0x10, 0x8, 0x6, 0x10}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000b00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000680)={0x408, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7d3}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8fb2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}]}}, {{0x8, 0x1, r7}, {0x140, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x66b80cc2}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe6f1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x101, 0x8, 0x9, 0x3}]}}}]}}]}, 0x408}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000041) (async) bind$rose(r0, &(0x7f0000000b40)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x1, @null}, 0x1c) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r12, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x78, r13, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffff7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff7}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_crypto(r0, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)=@alg={0xf8, 0x10, 0x800, 0x70bd27, 0x25dfdbfe, {{'drbg_nopr_sha384\x00'}, '\x00', '\x00', 0x400, 0x2000}, [{0x8, 0x1, 0xfffffffc}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0x9}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20040814}, 0x40804) (async) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r12) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000001040)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xd8, 0x1403, 0x2, 0x70bd2b, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_macvtap\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x2000c000) (async, rerun: 64) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r12) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001100)={'wlan0\x00', 0x0}) r16 = gettid() (async, rerun: 64) r17 = getpid() (rerun: 64) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001140)=0x0) (async) r19 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0x8c, r14, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x20}, @val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x5, 0x16}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r16}, @NL80211_ATTR_PID={0x8, 0x52, r17}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x4e}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_PID={0x8, 0x52, r18}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x36}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r19}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1a}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x53}}, @NL80211_ATTR_PID={0x8}]}, 0x8c}}, 0x1) 871.093885ms ago: executing program 4 (id=7947): r0 = socket(0x10, 0x80002, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012"], 0x48}}, 0x400400c0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012"], 0x48}}, 0x400400c0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0x0, 0x15}, {0xb, 0xa}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0xc}, {0x0, 0x15}, {0xb, 0xa}}}, 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 857.011511ms ago: executing program 3 (id=7948): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), r2) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) (rerun: 64) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r8, &(0x7f00000029c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002980)={&(0x7f0000002a00)={0x171c, r6, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5f}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x2}, @device_a, @from_mac=@device_b}}, @NL80211_ATTR_FRAME={0x264, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3}, @device_a, @broadcast, @initial, {0x3, 0x40}, @value=@ver_80211n={0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xffffffffffffffff, @random=0x401, 0x20c8, @void, @val, @val={0x3, 0x1, 0x95}, @void, @val={0x6, 0x2, 0xff}, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x3, 0x1, 0x1, 0x0, 0x9, 0x1}}, [{0xdd, 0xbd, "12427f986fc28a2eb0700934c4e51a157222dd9c49444d62c12544fd0d872658f62149ab09d79aa84956446227c987a8a43a597b39f30d6a3971eea3043f5e99293cd9b5f1b8abd9988371f629d3b88e9a2b86e02ff4632025a0e30e0ea8fcf05f0f8293755af8a74da6b364b0ef1a3508f52ac6ef11fe1f61d4453d8a147564a464e576a071f04fbdacc3b8ddd48fcb1af1ba83315b6a33e38a5b992fe557bd08b339968002219f1edfdefd14341fa159f4e6d3aff9ed61d0f4d44201"}, {0xdd, 0x79, "55d04f8ad65abcf6b7c4b382c8acd3fe126d0a6c39641fd98d2f70e1b0a87001915758cb766c134e67d939c4eef26d4182a65612631e359b808f917151787a7d2d4da0cecd772cb94c962c36a0b9cd921be39c2d6f0feb1b40422f69237e776c82aed80e7c932ca9bb4b96757a0aa3617a517346ca1435863d"}, {0xdd, 0x35, "c9e9d2a0a49bb7bff1bb8db0e85f0bdff5fba67fc987a35677bc9dd8eb7b4f45755424b0dd174c43a0eaa3c2456dba0db307722128"}, {0xdd, 0x46, "8a60baca117dbb4dd0f1e0623f43765e12c8f0ece0cb4c47781e2c9162af2f917ebb3aeaa62718accbc0746ec1c821e02bfe5549fc53999057e3a4fc8e5b9b23146efd78d243"}, {0xdd, 0x6b, "635d93cfe273554bd3673adaf7ebce3f8d42783750eb1dffce1d135a4e774d5a02490119d99c09f9f5731c67ace2c885cf6a36c59514f90a1e69976e4c41ac62608a29f10404d9335148868052e64ed6d6f7854b9d4a987ce803c84957ccc50cd4ec4f3e1df0bf0abeefa8"}]}}, @NL80211_ATTR_FRAME={0x1482, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x67}, @broadcast, @broadcast, @random="094a9ccd4379", {0x4, 0xff}, "", @value={0x7, 0x0, 0x3, 0x0, 0x9}}, @a_msdu=[{@device_b, @device_a, 0xd3, "bab39688ed4c64e8896bc795d960694271f5a2492409032155e0e3175899859d99beb05120332a5dce6e5087d7b855cd3c65204a2995d26e181e417f834f0f9948a950d58f1e7beadf62a73854d4030c10ee117e0c164b1e86a801d93b996689faa9626649f2c90e203475e2b5f1e7dd1dc68b8ff01edabf1e065421eacd64f2d45dce64632857a6c24611addc8d72e9ff2c95fc2cbd87774c4a56e08202e31ed8d7b3d321b3197a5594e7b442004d559b2720f238deba8dfcda9572e0d3febc488929242a977dd7e3118341c96e12953faa55"}, {@broadcast, @device_b, 0x2a, "37ee5616bc6e094ce6532eac46d15dad699d4ab35e12cf7caab932074a2464fa36813d87110c309c5e76"}, {@device_a, @device_a, 0x1c, "2c90785fd392a2fcec45abc93029b49607b07fffe5d2383bdabab5b8"}, {@device_a, @device_b, 0xaa, "46f74073a9cceaf83e205559b06bdfd01c8969ae644c2d5681dc7192dcdde702814dbd5d9396a4332c26e68b493b785163e8a4ed15aeab75fc4da583787138d727c8dad379f3b99ed9aa0059bb2b5735d2955b67ad940f4754970cae4447c9dbc502d7cad11596588f2d14b489ccbaad25ab40529df451d91bce84234004faa490cbc8366cba3e16d2c5912d22863a5c8e106523d375f7bb389e40b826ef104b3908044a3597bce1ecd7"}, {@device_a, @device_a, 0x1f, "9846fe2ab9ab9752abff33a7aa39b473aab0f11a6ce451b7a1e55f0d51c087"}, {@device_b, @broadcast, 0xaf, "94b87321abe35d6cc642351a0a136dbbc6fc8e1173604a4e8c1e804d11ad8e5c6311b74012e0e3cb247fce648e06953118a34d1258decb1b8543c9f6949e8272f07b573e6d18022985e4771a8342d9672636f2dd61e518cafb84abddc9354b77fdd08824003b06e7da7c133787dc39ed536c82ee0e14b86e4348cc9c7b3cf87da8bdead18c3f3c7369b0aadc5f8192a103acee844c641490fc2df96edc9b49dd2119495564a6f2d7d7658a18eb3597"}, {@device_a, @device_b, 0x8b, "f2c854e52cbd95a14d1a45c21674ca0fa753a49fcc6ef4946c79046aae45db068966df985564cb47170deb0a580f586c1f6521d4c13528b6e648f0edc170cb5873e01ee933d34035e13032273d64c3c4d3b9840338e40493a9330e47a7437c6cb622f838f894e7356df9c5a06a965c6e6ee4721d92d8b642aae58f85716ee65281af2476227579c0e7e75b"}, {@broadcast, @device_b, 0xba, "0a80612bb26fb3f00fc8f14cec103a2eb5513d95ace2b8ebc13fe73c0fe863bd03ea928276408ba6b0f9f5c5c3d6d1622a20ec81b2b10aa6c8ce8f8db809000000000000002703ff4c46c23339f05289d4c9ca5f91cc191b8aac7b0bfc4f68f81cdbce418622d90ae0705ee9073bb5afed8991ccd86320a002694f1e3cf123953668c5a28baf3507d924420e9ce9edbdc9462c4e9f252a20eba14c99c615f27015d0ba76a404a91211f3d3eee222e16e0377f44ee876bef57093"}, {@device_a, @device_b, 0x1000, "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"}]}}]}, 0x171c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r9, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xa) (async) bind$bt_l2cap(r7, &(0x7f0000000000), 0xe) (async) listen(r7, 0x1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$NFT_MSG_GETRULE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000190a01040000000000000000020000000c00034020000000000000020900020073797a32000000000900010073797a30"], 0x38}, 0x1, 0x0, 0x0, 0x44044}, 0x4004) (async) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) connect$rose(r11, &(0x7f0000000200)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x5, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x20, r5, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x708, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4044) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000003a33fa00010325bd7000fcffffff10000000"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=@delnexthop={0x40, 0x69, 0x800, 0x70bd27, 0x25dfdbfc, {}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) ioctl$SIOCX25SDTEFACILITIES(r8, 0x89eb, &(0x7f0000000580)={0x1, 0x9, 0x5, 0x0, 0x7, 0x25, 0xd, "6e9043b079e919bd59c190798747d2df3ff7a95b", "48d5d74894fc89b16067ecc41d9b90b48a74b3a3"}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) 789.221777ms ago: executing program 1 (id=7949): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x7, 0x6, 0x4, 0x0, 0xa2, 0xeff, 0x6, 0x1, r1}, 0x20) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f0000000100)='@%%\x00', 0x40000, &(0x7f0000000140)={@_ha_fsid={[0x5, 0xf]}, {0x8d, 0x401, 0x0, 0x6}}, 0x0, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0xb41}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000240)={0x2, [0x0, 0x0]}, &(0x7f0000000280)=0xc) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0xc, 0x80000001, @vifc_lcl_ifindex, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) socket$igmp(0x2, 0x3, 0x2) write$nci(r2, &(0x7f00000003c0)=@DATA={0x4, 0x0, 0x0, 0x0, 0x6, "94a7de00705cfac73a89bdc2a261f283232cba684287376675909cb3e6b29eb81714006da70c0351092abc3aeeb7024924327bc89a68937f1a615cf0b7870c67939f6ab6cf95f77987a53968eb5108769187f266ec725fe3f8ff57c05bf2ffaccedfb5e8ecde279bebe7d2743b0dc72f102f9046808c1e4b7647f8f8c19dfacab9f563373910ad18e9b9699b5a13a79921965b098e6669fadfbde8b5520a87dccce85ec73ff8ba3b374dd3ffaf3f32927932fa057b3b97ef449b0ebb2a0476f88e7e37314f8772c9916dc969235096717f2ce37485d8da5d55357637b923da63"}, 0xe3) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000004c0)=0x11a400, 0x4) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000500)={0x0, r3, 0x7fffffff, 0x0, 0xfffffffffffffffc, 0x8}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001680)={{r2, &(0x7f0000000580)='wlan0\x00', 0x0, &(0x7f00000005c0)={@align=0x1, {0x1, 0x0, 0x3, 0x9}}, 0x6, &(0x7f0000000600)={@_ha_fsid}, &(0x7f0000000640)=0xee1c}, {[0x8, 0x5, 0x7, 0x10000]}, 0x7, 0x1000, &(0x7f0000000680)=""/4096}) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000001700)=0x40) r6 = epoll_create1(0x0) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000001740)={0x0, r4, 0x4, 0x2, 0x2, 0x9}) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000001780), 0x4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f00000017c0)) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000001800)={r6, 0x6}) getsockopt(r3, 0x94, 0x9, &(0x7f0000001840)=""/90, &(0x7f00000018c0)=0x5a) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000001900)={r5}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000001940)=0x1, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001980), r8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001a40)={'ip6gre0\x00', &(0x7f00000019c0)={'syztnl0\x00', 0x0, 0x29, 0x9c, 0x9, 0x1ef, 0x71, @dev={0xfe, 0x80, '\x00', 0x22}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x7800, 0x9, 0xffffffff}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000001b40)={'gretap0\x00', &(0x7f0000001a80)={'tunl0\x00', r9, 0x700, 0x20, 0xfffff7ea, 0x8, {{0x20, 0x4, 0x0, 0x15, 0x80, 0x68, 0x0, 0x7, 0x2f, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x34, 0x61, 0x1, 0x4, [{@empty, 0x109}, {@private=0xa010102, 0xb}, {@multicast2, 0x4}, {@multicast1, 0x7f7e69a6}, {@rand_addr=0x64010101, 0x7}, {@private=0xa010101, 0xc}]}, @generic={0x86, 0x10, "4bbc1f2df2cb6b73349c2c063b8f"}, @timestamp_addr={0x44, 0x14, 0x3d, 0x1, 0x7, [{@rand_addr=0x64010101, 0x6}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x3}]}, @end, @ssrr={0x89, 0x7, 0x6a, [@private=0xa010102]}, @timestamp_addr={0x44, 0xc, 0x25, 0x1, 0x8, [{@multicast1, 0x4}]}]}}}}}) 741.423933ms ago: executing program 2 (id=7950): getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000000c0)={0x3, {{0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6ce376f}}, {{0xa, 0x4e23, 0x1000, @mcast2, 0x5}}}, 0x108) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000200)={0x2, [0xffff, 0x1]}, &(0x7f0000000240)=0x8) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x8847}, @void, @arp=@generic={0x5, 0xf5, 0x6, 0x5, 0x8, @remote, "af71dcb5ac", @remote, "cf4ba9efeb3a8f770b2ef4c61f"}}, 0x2a) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00'}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000340)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000480)=0xe8) r5 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={r2, r4, r5}, 0xc) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000b80)=0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x40, 0x0) sendmmsg$unix(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)="a3e3f5d711a2d53f621426137dac6599dbcb6796ecfd007bda9797a868a8f8d0e7e88262b4949a8a245bb5bb04db7a6dd6a0d3154b101fe914fa4819", 0x3c}, {&(0x7f0000000540)="25df7f1b6cddfcd9acb90bc4686e6422332dd2815359ba5e04a991f058fcfb60c49549b32b433d3601a08c758a553f7896409a57e8df296e8771b707aba392959e0a41825ab5fb00ed46f9c03b570566e5ba9cd3884c74d47de5d38bee4fd5bbad79efbba0aa20961ee31044925e630ac659b2b1033e52aa129bc6ead4bda838e39e03459b4755567cae62", 0x8b}], 0x2, 0x0, 0x0, 0xc000}}, {{&(0x7f0000000640)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000b00)=[{&(0x7f00000006c0)="70126e5fa459c80d70bd8fab7a741d4a76dff022552f913268156d507578406f75a3440d6db57dcc4b35ebb6915fe5df5cabb936fded041a854fb8e3c53f9bebe11103fd40cffe4fb2eff5efc26b592cc5babf6c1f9abee7ac2f5b282a6dbbf0287da40fad97a0b7d7a4021a465a02cd1aade4cf5afe2134f704fe7a305bd8099c49978e756a96660489e51cd0422c5e27c3a9e12c14210b17a1d9b63697ae7bf1f87b96d7890a3fb11e1fb198e47cf487ba3c21418e943487a2f6f57aee44bde8df9660d61d77e896c13db89179a347011afa3ffc68c74b586c271ca5768a49949b5ce7a52dc501aa57b20c854ad6", 0xef}, {&(0x7f00000007c0)="02b85128e3d89bf0ade3fbe576d6d8f83eeb4146a89eae2fe4034f1717e19c0252b5248c2913b75fa8c93bf27f4b3e3dff72e77ebbf104d02dc13f023ae8ac84120a876b640bb94c6344da143248a76f6415b3808287e8537235e1c589339e4408dbe087292c8e9c14e8508d9d4dc098289c5607be4a2304156603d8e21d2c2e929e1e50d3449acd7c13bd1c9964e140c0617bc097fcff5f9beb7831d7b3a133f100376e3b7e4f87eb9ab16bcc51b9dd7eaebca682f7abebb725c75580c2763a122bf662aee9becd8bfcae719135004c22aa8663c1c20609f54fb0d8f3ed4ed838935b37e10d3249ec80f5c87a44d4", 0xef}, {&(0x7f00000008c0)="7f75fe07e6af54074614fefb009b4600793bcccf432db1680785381d94b92b5abeb70e9e756f79fa57d0625ba964e78dc1fdf4218d6acf8e24e636fbf2e095b1182e5283c56863e61ce5051b122911bd", 0x50}, {&(0x7f0000000940)="5af54a6c7417957ee84abff730999356556a953ed58e1d822e256633c930eed952376ff3196f0db5fa450da4ac35a89499e91d478f5d6dd8142db1bb7dcbe739265f91548ade434758c1713b00549b1d1e7a86830d73a2fbf60f9a77be4f7fdb1d4c", 0x62}, {&(0x7f00000009c0)="2a131cb8c5a53031cf35bded6d4476ae050a97910b794a9e497a8e2f270714e2928346a8401a49bfc29619858dc0e8d157b03eabe3e41b7da9a798b9c7048326ab89e28f36e567adfef19de6961866bdc32226a2077e57d164a08016a9bf668b", 0x60}, {&(0x7f0000000a40)="eff47c321d89837a7eee62de4a4d837ac0d7d1db6ce852eb95416b64f3e99b8e4a3a40c4bdab38e68ae3cb226108c72e3715ec209119e07aabefed85095da62e99b66f10b7ebe0210cb1a856f2beee3178d84d7749597d6cf24518793abb04f45b2763517410d88c88811b73433087ef51fc98c2c8385ebb4cf992e68382dcb916522c23a2fc87d93ef78c52948d18", 0x8f}], 0x6, &(0x7f0000000c00)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r6, r5}}}, @rights={{0x20, 0x1, 0x1, [r7, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r4, r5}}}], 0x78, 0x84001}}], 0x2, 0x20000840) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e80)={{r0, 0xffffffffffffffff}, &(0x7f0000000e00), &(0x7f0000000e40)=r0}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000ec0)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000fc0)=0xe8) r11 = getgid() sendmsg$netlink(r0, &(0x7f00000010c0)={&(0x7f0000000d00)=@kern={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)=[{&(0x7f0000000d40)={0x80, 0x10, 0x800, 0x70bd2c, 0x25dfdbfd, "", [@typed={0xc, 0x102, 0x0, 0x0, @u64=0x800}, @typed={0x62, 0x88, 0x0, 0x0, @binary="77f60bc63103a73500671ce161bf12d00a1d609ebf0ff1137104fa1af251a997296782e1329249dbf78be181b55c79036887f7cb3f64ea3ec25ee1cf8864006a2a0c0176b3d4041556c20e116ca9b2587ba5d41009983de01918233e3463"}]}, 0x80}], 0x1, &(0x7f0000001000)=[@rights={{0x20, 0x1, 0x1, [r7, r0, r7, r8]}}, @rights={{0x24, 0x1, 0x1, [r7, r7, r1, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r2, r10, r11}}}], 0x88, 0x4001}, 0x20000010) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000001100)={0x1, 0x0, 0x1, 0x7f, @vifc_lcl_ifindex=r3, @multicast1}, 0x10) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000001240)={&(0x7f0000001140)=[{0xe, 0x2, 0x0, {0x3, 0x7fffffff}}, {0x1b, 0x0, 0x0, {0xffffffffffffff81, 0x504}}, {0x80000001, 0x1, 0x0, {0x7, 0x4, 0x1}}, {0xabb, 0x0, 0x0, {0xe34, 0xffff}}, {0x2, 0x1, 0x0, {0x0, 0x964}}, {0x617, 0x2, 0x0, {0x7, 0xfff, 0x1}}, {0x400, 0x2, 0x0, {0x9, 0x8}}], 0x7, 0x20, 0x4}) ioctl$XFS_IOC_PATH_TO_HANDLE(r8, 0xc0385869, &(0x7f0000001380)={0xffffffffffffffff, &(0x7f0000001280)='\x00', 0x400000, &(0x7f00000012c0)={@_ha_fsid={[0xfffffffd, 0x9]}, {0x7, 0x800, 0x5, 0x4}}, 0x4, &(0x7f0000001300), &(0x7f0000001340)=0x2}) ioctl$TUNSETGROUP(r12, 0x400454ce, r11) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r7, 0x4048587b, &(0x7f0000002540)={{r1, &(0x7f00000013c0)='\'.!./^g-\x00', 0x400000, &(0x7f0000001400)={@align=0x4, {0x4, 0x401, 0x6, 0x1}}, 0x5, &(0x7f0000001440)={@_ha_fsid}, &(0x7f0000001480)=0x60}, 0x1, &(0x7f0000002500)=[{0x2, 0x5, &(0x7f00000014c0)='/dev/net/tun\x00', &(0x7f0000001500)="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", 0x1000, 0x2}]}) setsockopt$inet6_tcp_int(r13, 0x6, 0x1e, &(0x7f00000025c0), 0x4) getpid() ioctl$XFS_IOC_GETBMAPA(r8, 0xc020582c, &(0x7f0000002600)={0x2, 0x671a, 0xe, 0xca1b, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003980)={0x18, 0xc, &(0x7f0000002700)=@raw=[@ringbuf_output, @generic={0x92, 0xb, 0x8, 0x100, 0x7}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}], &(0x7f0000002780)='GPL\x00', 0x7, 0x1000, &(0x7f00000027c0)=""/4096, 0x40f00, 0x0, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000037c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000003800)={0x0, 0x2, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000038c0)=[r12, r0, 0xffffffffffffffff, r12, r13, r12, r13, r0], &(0x7f0000003900)=[{0x0, 0x5, 0x8, 0x1}, {0x5, 0x2, 0x2, 0x2}, {0x2, 0x2, 0x3, 0x7}, {0x1, 0x2, 0x8, 0xb}, {0x5, 0x3, 0xf, 0x31fb9c79eb727dc0}, {0x3, 0x1, 0x0, 0x9}], 0x10, 0x6}, 0x94) 695.211354ms ago: executing program 0 (id=7951): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r3, 0x11, 0x64, 0x0, &(0x7f0000000100)) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x1) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x4) (rerun: 64) syz_emit_ethernet(0x32, &(0x7f0000000340)={@random="5bb65d3f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1e, 0x24, 0x65, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x100}}}}}}}, 0x0) (async, rerun: 64) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000080)) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 640.786763ms ago: executing program 1 (id=7952): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc858}, 0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) writev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)="c800b6", 0x3}], 0x1) readv(r5, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0xff1}], 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newae={0x5c, 0x1e, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00', 0x4d6, 0x2, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x70bd2a, 0x70bd28, 0x70bd2c, 0x5}}]}, 0x5c}}, 0x0) r8 = socket$inet6(0xa, 0x5, 0x2) getsockopt$IP_SET_OP_GET_BYNAME(r8, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000080)=0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40500000000000079108100000000000500000000000000950004000000000060a633a45c6314764f8f0d80197bcfaae5c754979187bfd9a21bb0d7209bb7a0807413d4926746aa34"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 620.842316ms ago: executing program 2 (id=7953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)={0x44, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x44}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) 619.996925ms ago: executing program 3 (id=7954): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x4}]}, 0x34}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x2004c085) (async, rerun: 32) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000000)=""/31, &(0x7f0000000040)=0x1f) (async, rerun: 32) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r4, 0x80047453, &(0x7f00000000c0)={0x18, 0x0, {0x1, @empty, 'sit0\x00'}}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x800, 0x2, 0x4, 0x10000, 0x40}, 0x8, 0x5}, [{0x7, 0x8, 0x2, 0x5, 0x2, 0x200}, {0xff, 0x7, 0x101, 0x8, 0x810, 0xffffffff}, {0x80005, 0x8, 0xfff, 0x2, 0xffffffff, 0xb93}, {0x6, 0x4, 0x3, 0x1, 0x4, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0xbeca, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x1, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xe42, 0xf3, 0xfffffffc, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x4}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x6, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x7, 0x9, 0x4, 0x3, 0x1}, {0x3, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0xff}, {0x1, 0x71, 0x800000, 0xcf55, 0x3, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x37, 0x0, 0x6, 0xed, 0x80000000}, {0xce, 0xae, 0x4, 0x2, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x5, 0x9, 0x7}, {0x8, 0xdd8, 0x8, 0x8, 0x5}, {0x3, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x3, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0x5, 0x101, 0x5, 0xfffffc01}, {0x4, 0x5, 0x1, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffff9, 0x1, 0xfffffffc, 0x2}, {0x8, 0x2, 0x7, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x20000009, 0xe756}, {0xfff, 0xc, 0x4, 0x208, 0x2, 0xe}, {0x6, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x4}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x6, 0x4, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x0, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x8}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0xa}, {0xad, 0x8, 0x4, 0x5, 0xfffffffd, 0xfff}, {0x6, 0x6, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x5, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x9}, {0x6, 0x7, 0x2, 0xdb60, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x0, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x2001ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0x7, 0x6, 0x3909, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x4006, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xc5, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x5ce, 0x3, 0x0, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x9, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x1, 0xa4e}, {0xffffffff, 0x7, 0xa, 0x80000000, 0x0, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x21, 0xb, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x7ff}, {0x1000007, 0x12, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x6, 0x0, 0x7a, 0x5, 0x4, 0x1000}, {0xb06, 0x7, 0x7ff, 0x400009, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x6, 0x5, 0x6}, {0x7, 0x2, 0xf, 0x64, 0x4, 0x7}, {0x1, 0x2, 0x4010, 0xffffffb1, 0x0, 0x751e}, {0xffed, 0x2, 0x4, 0x3, 0x3, 0x105}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x100002, 0x0, 0x400, 0x765, 0x7f, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x10, 0x3, 0x9, 0x5, 0x8, 0xffffffff}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x1, 0x8007, 0x3, 0x4a, 0x8, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {0x4}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x4}, {}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}], 0x4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000b00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000700)=@newtaction={0x3ac, 0x30, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{0x31c, 0x1, [@m_simple={0x40, 0x6, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'erspan\x00'}]}, {0x7, 0x6, "cae251"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0xe0, 0x11, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7ff}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x7d, 0x6, "85225af326e5cc9f7888ed9e14b0a95c266f433be4b6212fcdc80ff44d17a0f2de36c4617b78f675323da001bc837e5f6029f93b85fdc264a34ccf912c85ea776522b15abdca56393c6430e296b25adfc49db924987d2e75e9e655a2eef8869d0252a13fc8de9c127a15bd565e3f5cd0936b8f2cc5c2574469"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x7c, 0x1e, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}]}, {0x47, 0x6, "7d153376d4b4804ffb1f2addd2a056a02e31761cc649eefeadc40b472dbad85dffdf55b837b2842db28b507de88d30b9d6ebb0cac6939ce03888c368bf818008e3c9b8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x17c, 0x8, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7e5, 0x4, 0x0, 0x211, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x6, 0x8, 0x2, 0x1000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xeb41, 0xfffff5df, 0x8, 0x80000000, 0x3c1e}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x5, 0x10000000, 0x3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x12e}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x13d3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x1, 0x6, 0x1, 0xbc}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffffe, 0xb, 0x6, 0x1, 0x1000}}]}, {0xa8, 0x6, "9ba2bccd7a494e35bb2f993d734d5c7c0c4970e6cf2f81b0a22f80d8b73278717ec913aaf32c277d2da7e0df735c0b27f12f9ac0324d7a7648bed9e9714ee094aae1b332c28b92beb43a70bfb371b0ce20a9dccd04fdcb802544306fad08089427f241fa0878ebb4bdda18c32641cd7873afd5d97e8c601ed1c50944af870b8b8ddd52da1127dcb6ff426e10b7432e66d5bdf9c98b800886bf2d308f601eb1e78e995a6b"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0x7c, 0x1, [@m_mpls={0x78, 0x0, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xfb}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x76}, @TCA_MPLS_TC={0x5, 0x6, 0x2}]}, {0x29, 0x6, "d0afe1184b4621a531253689104164cb8a265d83601891f78abeb342ac834e62075161f989"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x3ac}}, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1c, r10, 0x1, 0x3, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c880}, 0x840) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6}]}}}]}, 0x40}}, 0x0) (async) write$tun(r3, &(0x7f0000000180)={@val={0x0, 0x200}, @void, @eth={@multicast, @remote, @void, {@llc_tr={0x11, {@llc={0x80, 0x42, "d1", "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"}}}}}}, 0x113) (async) r13 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f00000013c0)={'erspan0\x00', &(0x7f0000001380)=@ethtool_cmd={0xa, 0x8, 0x800, 0x8, 0x6, 0x3, 0xc0, 0x4, 0xca, 0x2, 0x0, 0x4, 0x3, 0x3, 0x7, 0x8, [0x1000008, 0x34]}}) 542.269251ms ago: executing program 4 (id=7955): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ALPHA={0x1, 0x5, 0xd}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffff8}]}}]}, 0x44}}, 0x20008000) syz_emit_ethernet(0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="aaaa0800"/14], 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) 481.192081ms ago: executing program 0 (id=7956): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) (async) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000140)={0x0, 0xdec, 0x833c, 0x7, 0x0, 0x8d, 0x2b, "839bf939b57362abfaad53cb00", "b6f6c857a33c218fa92e44589f8115fc47110400"}) (async) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000140)={0x0, 0xdec, 0x833c, 0x7, 0x0, 0x8d, 0x2b, "839bf939b57362abfaad53cb00", "b6f6c857a33c218fa92e44589f8115fc47110400"}) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0xa, 0x3, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c8", 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x74}]}, 0x0, 0x4}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x0) getsockname$tipc(r6, &(0x7f0000000380)=@name, &(0x7f00000003c0)=0x10) (async) getsockname$tipc(r6, &(0x7f0000000380)=@name, &(0x7f00000003c0)=0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x541b, &(0x7f00000002c0)) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}], 0x1}}], 0x1, 0x11, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000014c0)=ANY=[@ANYBLOB="300b000003030103000000000a0800034000000009000000e000000000800108000340ffffff1b0000c4c4af9afccd207978431d65460a4561b2066d2fe10dc28e459ba2eceaaa8e1a5ba86c5aa882de49b8db2bcd90f30727476ce7a175bb87f8a8548e19b3e2da07043e78cde1cc36fed24e6dfeeadb9d3d042b145dfe19d8360f51ab320113b5184900ce98b4a5685601b333ddaa2cf8fe8163595decda99a5ee2ddb465bba8f1f99dab42c64dd745ca373ea0ff33100000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4004050}, 0x80) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') (async) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r3], 0xdc}, 0x1, 0x0, 0x0, 0x808}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071100000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe5}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071100000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe5}, 0x94) splice(r4, &(0x7f0000000400)=0xbf, r3, &(0x7f0000000440)=0x2, 0x7, 0x2) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) 390.937259ms ago: executing program 0 (id=7957): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4010, r0}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvmmsg(r2, &(0x7f00000098c0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x10002, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0xfffffffe}, 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) (async) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) (async) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "c172f5", 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0xffbf, {0x5, 0x6, "54d03a", 0x400, 0x88, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00'}}}}}}}, 0x0) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5, 0x4}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r8, 0x0, &(0x7f0000001780)=""/4096}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x30, 0x3, 0x7fffffff, 0x60232, r0, 0x5, '\x00', 0x0, r3, 0x5, 0x0, 0x1}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000f7ffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b70200001fffffff7b9af8ff00000000d60900001fffffff7baaf0ff00000000bf2700000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000004d080000000000008558020005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 390.369332ms ago: executing program 2 (id=7958): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}}}}}]}, 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x9, 0x1, 0x3, 0x8, 0x4}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'team_slave_1\x00', 0x1000}) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x5, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000080095"], &(0x7f0000000040)='GPL\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="1100000000000000", @ANYRES32, @ANYBLOB="721d6d3fc065a00621f0db85e600000000000000003480d662a3661b00079211cf60644828d2b3b46bec7e73750974d02d5b323e9fe88fe93de4a3c88c2d74f0a1a25913e3cde5782c65b05818b162a672f4e94fa70d6f16b5411690daef9567a62b9530731bb88798df5d92a0fba4e214b1251ea276fd19010911dbedfbd06073", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x14) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'lo\x00', 0x2}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000e8d774dde8a68c7f511efce203b72d6daf7518e9677499efde8757f6ae24b7ea10e6ac711635ebffcc81", @ANYRES16=r7, @ANYBLOB="9b0f2abd7000ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x60c5}, 0x90) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000380)={{r9}, 0x0, &(0x7f0000000300), 0xf2e, 0xa}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r11, 0x5411, &(0x7f0000000280)) sendmsg$NFNL_MSG_CTHELPER_NEW(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_getnetconf={0x14, 0x6a, 0x800}, 0x14}}, 0x0) 381.978873ms ago: executing program 4 (id=7959): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'wg0\x00', 0x1000}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'wg0\x00', 0x1000}) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) connect$nfc_raw(r0, &(0x7f0000000040)={0x27, r2, 0x1, 0x1}, 0x10) close(r1) (async) close(r1) 288.733946ms ago: executing program 3 (id=7960): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x1c, r2, 0x221, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44801) r4 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="372ccf749d0e53b573a58b14ffcc58344bec4e0ae461f492a40b880f42ae5a5c1d86add37df7880d0f88355ae865cd202ce370fc97416283c70aade256b631538230c0ce1ed3678aa97c882af0c4ae4b497a3b11bfe65a3d651deaf569c98eaf424e37779d81a1fb072404f205f6527e32575d9717af51fe0ff59369fe5cbe05f895350052149909f90ab902981727a072dc7e49a18bd03a53b8a08c6a322b737cae1968485b70832812a134d8afa0ce721f5ec3897a1cfb1727c51e1487c1d12d6ad117dd9709", 0xc7}, {&(0x7f0000000100)="bdd63f5db09ac99a86f994bd7827265fdc71d2f14ffc60a3340350e07605c88b77747efb31643a97d7de06", 0x2b}, {&(0x7f0000000140)="c0ed27008c2713ebf1e719f12b8195ae0fbdc79d1150aeaada4f9a381a7459143de968eaf758", 0x26}, {&(0x7f0000000180)="68219de33f5dff7f9db6df97e1cdf3909eb5b4d73d1f635c9d0b62f93c9c0b6acdcab2a7b719189b673d820d4b1be0de066c0a782dc51f18aca7a3e8c6d967049d35c893d79da7f669f4e28163a2857f6ce26c1991a1c5a02a6587dc3ef62e98691f737d58482b54957a6d2dbcf3d1e3c96cec449228d73cdd90241d23552228fdd9436a646a1489449adbc49063e7c0df5cab5e9e466c5f32a297014f60551dd730a48c2ef9405744a9f8763bb90955c394f69a67ee53cd664bf009050dae4854962c79cb77cdec4a5a36c94251", 0xce}, {&(0x7f0000000280)="86e70298a27810f8e6a4aa3d2b4b01f9d6b55d413e4bfce5beb76c7b1a4c071cdc525a7e40987ca68cf2e0c5eceb8b4d8425a2be0e348d9703190776ba7bd41fa97555d5a843e7c68b0f921c2bc3bb8592a0956649b125c774820233b53e27200cdf51796b5e40daa674f02012530dae7a0a19cbe338c5a3c0a66f40fb255453a71929876a41b37e793791dbc0c00b2d406064a29fb14dd6844eecaa5e22110966b6b5dfdb0f360178d1245e107501a4988bc0ac1cd153c5", 0xb8}, {&(0x7f0000000340)="cb6f9f9d630f9929c4a1cf31733a04a45240a635f856f92dff994d906424a88d53ce92ac7a6e4753dd2c0836ebaea7553440b29e8ac4e70a3370e85d8669e30830a5808ac79d38b74905ca868dd6c468f4b6ce87db21ce43731ccb8ab22cbf534a0b9d6b60bd5f2f7a3c5573c204d23f2e4d47b6d933baea64bd2cc4397ccc4f905fb685124718e21be535946909d50a56721b1f0822fa56cbda71cf5e3b0a0bc381665b936398db198d0a9e4cc800a9161ea72541113761e6287b1c0777b7c59fcaeda2a8e6957e72e020212d8eb8ff7903c98e75f18a598787e9df695e11185ecf515fc0e1179e", 0xe8}], 0x6, &(0x7f0000000680)=[{0xf0, 0x111, 0x5, "bc0d6ecef876767383851c403fef7c6eae11b985cc347efa68f046c233733cd32ba270c76c97392656bb6847d7bf1318656f8bcfc43a78f6eb01e6838167fccbeeeba09c09819db159db644806247b0b770879320badc5edaa86075d53cd7d640a079c225d8f0f20699a55ccdc76ade4877f6d89df7bfd2c4a2e0fb49f28749c05498e28bb939a1cbb7a0df837a30b4bcfce21d8b78a930f2a85d15d3fa80a1c3fc0e35ae8d17fee9fd2185c2f34d3a5f02593f944eb69b502e547360f83603148c1d91a658aef5c03347cc36225c302936cb6a17fa422a9f9587db2"}, {0xa0, 0x0, 0x9, "a76eb72547962eb9f5d7e938eb466002cb6fb06b78f02e43228bd6f160777ee7352ac2c3da3bb140c7dde8fdbb0d87da2d38501de874a62f944d9df779c7dd9cbe91d83fa1d83141e887c6e4ed552ada081f16b35de7972807e2ed5479ca112a811210fd44d7ab44a693716382a4cb7bac3f8215837d3975be08c8149638b495045e72cd6e935276fcf1318dfd"}, {0x100, 0x101, 0x0, "9572116e04deb57e07d770df22d5d781de474ca3e3e45927ba31f17f48c410af4eaad62ecf32da0291c01511fcf332b677ddc96fa854f709e9246e5f55b208c7ce2bb70ff4743399afc4ce9e9675562f53d47be41d91773b166fd84cf32f4262ca0b19fff7bc7dd073ce43dd9e7549e9dc6811698140b0a438c23bd7c1fb52eda0d414e00b3241123b739aceeb7583b4b0aa7d1e3a8a3c900cf1d4768bc48452cfe7ed1efa341cf4af55493fc8d5ad13711c37f5838cf83abebce0bf67f7a052340b76fdb76f47ddb1c4e88874c47645677966a2ce6c174e1726d06a497bcf60600c976f2e70f072c3f223b2"}, {0x38, 0x6, 0x1, "50bd80ca8259dbbdb55686e939c45d306efb38d52cb659058d54c455862ad473698443424f"}, {0xa8, 0x88, 0x6, "cf84f5303ccfa3d8232859b57226e1a6d7ab0d0d3f8603bc83fa9009455b2e79aff1196779338fc8f008d4a345d89b9773e1bd782bc2fbe8c4840bcf7c4817e9661fa0f6aa09f4076d3d3b9a6d1664cfc6de5688fe6252082447a62884732ea941230a8c0a4129769313ae1cd5a8bad131c53a5626dd4fd1d0bcb9c4330aaf66fc6356f596e1317abf4148b5f5abf0b266eb"}], 0x370}, 0x20000010) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000580), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000640)=ANY=[@ANYBLOB="20010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800020001000000080001"], 0x120}}, 0x0) 180.664763ms ago: executing program 0 (id=7961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x64}}, 0xc080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000980)={0x40, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x100}, 0x24000000) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 133.045617ms ago: executing program 4 (id=7962): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000100)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x94b03, 0x0) write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x6005}, @val={0x2, 0x4, 0x0, 0x2, 0x6, 0xfffe}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x8, @local, @private1, @local, @loopback}}, 0x42) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r8, 0x891a, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e24, @empty}}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x84, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x84}, 0x1, 0x0, 0x0, 0x2400c044}, 0x4040810) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000011c0)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000500000000060015000700000018001680bd"], 0x3c}}, 0x0) 36.643521ms ago: executing program 2 (id=7963): r0 = socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x34, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c944", 0x0, 0x2b, 0x0, @empty, @remote, [], "d4a3fb00"}}}}}}}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}]}, 0x20}, 0x1, 0x7}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x2, 0xcb) 4.865839ms ago: executing program 2 (id=7964): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'veth1_virt_wifi\x00', {0x2, 0x4e23, @local}}) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xfff3}, {0xffe0, 0xd064db0e491fa98f}}, [@TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x7, 0x7, 0xd08a, 0x7, 0x0, 0xfffffff8, 0x6}}, {0x0, 0x2, [0x5, 0x1, 0x9, 0x3, 0x6]}}, {{0x0, 0x1, {0xb, 0x0, 0x8001, 0x0, 0x2, 0xac98, 0xc9}}, {0x0, 0x2, [0x58, 0x5, 0x1]}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 0s ago: executing program 3 (id=7965): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd70027100c1582c00000018000180140002006970766c616e3100"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000", @ANYBLOB="d5d36749aa8c73d522e1167817a0aff4a0f773ba881bcc9a09aae32c2922bc33687f843551a13ffe53038e7d4d50d452014dd2afcf70c4f5a65b82b21b976bce1ff95ce3a432304f727aece6cd673e6342d4c035e453c3623ccd940f0273294b", @ANYRESHEX=0x0, @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) kernel console output (not intermixed with test programs): T1147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.663834][T28603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6123'. [ 622.668864][T28605] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6124'. [ 622.689957][ T1147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.698892][ T1147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.710677][T28606] netlink: 'syz.4.6123': attribute type 1 has an invalid length. [ 622.770439][T28603] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6123'. [ 622.801487][T28606] 8021q: adding VLAN 0 to HW filter on device bond2 [ 622.859077][T28614] syzkaller0: entered promiscuous mode [ 622.865337][T28614] syzkaller0: entered allmulticast mode [ 622.897206][T28603] bond2: (slave geneve2): making interface the new active one [ 622.907939][T28603] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 623.034682][T28624] netlink: 'syz.4.6126': attribute type 12 has an invalid length. [ 623.065142][T28624] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.6126'. [ 623.246549][T28637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 623.504351][T28648] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6128'. [ 624.273887][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 624.658067][ T5838] Bluetooth: hci5: command tx timeout [ 625.224068][T15320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.262584][T15320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.342849][T25024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.380432][T25024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.397165][T28669] netlink: 'syz.0.6132': attribute type 10 has an invalid length. [ 625.561400][T28679] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6136'. [ 625.972492][T27613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 625.984649][T27613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 625.998606][T27613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 626.012821][T27613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 626.021074][T27613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 626.082463][T28704] wlan1 speed is unknown, defaulting to 1000 [ 626.136611][T28704] lo speed is unknown, defaulting to 1000 [ 626.858637][T28704] chnl_net:caif_netlink_parms(): no params data found [ 626.960828][T28704] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.968171][T28704] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.975496][T28704] bridge_slave_0: entered allmulticast mode [ 626.987992][T28704] bridge_slave_0: entered promiscuous mode [ 627.035696][T28704] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.045020][T28704] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.053030][T28704] bridge_slave_1: entered allmulticast mode [ 627.061207][T28704] bridge_slave_1: entered promiscuous mode [ 627.107252][T28704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.116596][T15320] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 52773 - 0 [ 627.129508][T28704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.165459][ T9168] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 52773 - 0 [ 627.196921][T15320] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 52773 - 0 [ 627.211452][T28704] team0: Port device team_slave_0 added [ 627.220953][T28704] team0: Port device team_slave_1 added [ 627.248147][T25029] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 52773 - 0 [ 627.342254][ T1147] bond12 (unregistering): (slave ip6gretap1): Releasing active interface [ 627.460969][ T1147] dvmrp0 (unregistering): left allmulticast mode [ 627.480337][ T1147] bond3 (unregistering): (slave geneve2): Releasing active interface [ 627.910563][ T1147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.921044][ T1147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.932092][ T1147] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 627.942939][ T1147] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 627.953228][ T1147] bond0 (unregistering): Released all slaves [ 627.962892][ T1147] bond1 (unregistering): Released all slaves [ 627.975563][ T1147] bond2 (unregistering): Released all slaves [ 627.989233][ T1147] bond3 (unregistering): Released all slaves [ 628.001738][ T1147] bond4 (unregistering): Released all slaves [ 628.023959][ T1147] bond5 (unregistering): Released all slaves [ 628.037463][ T1147] bond6 (unregistering): Released all slaves [ 628.050094][ T1147] bond7 (unregistering): Released all slaves [ 628.065234][ T1147] bond8 (unregistering): Released all slaves [ 628.080632][ T1147] bond9 (unregistering): (slave veth3): Releasing active interface [ 628.090285][ T1147] bond9 (unregistering): Released all slaves [ 628.106467][T27613] Bluetooth: hci0: command tx timeout [ 628.113499][ T1147] bond10 (unregistering): Released all slaves [ 628.127058][ T1147] bond11 (unregistering): Released all slaves [ 628.140534][ T1147] bond12 (unregistering): Released all slaves [ 628.153181][T28704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.161330][T28704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.187970][T28704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.201146][T28704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.208562][T28704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.237483][T28704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.304955][ T1147] : left promiscuous mode [ 628.375440][T28704] hsr_slave_0: entered promiscuous mode [ 628.383160][T28704] hsr_slave_1: entered promiscuous mode [ 628.391895][T28704] debugfs: 'hsr0' already exists in 'hsr' [ 628.398156][T28704] Cannot create hsr debugfs directory [ 628.673772][T28704] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 52773 - 0 [ 628.744317][T28704] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 52773 - 0 [ 628.848787][T28704] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 52773 - 0 [ 628.938057][T28704] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 52773 - 0 [ 629.034651][ T1147] hsr_slave_0: left promiscuous mode [ 629.040845][ T1147] hsr_slave_1: left promiscuous mode [ 629.048773][ T1147] vlan0: left allmulticast mode [ 629.053662][ T1147] veth0_vlan: left allmulticast mode [ 629.059967][ T1147] vlan0: left promiscuous mode [ 629.207982][T28722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 629.776115][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms [ 629.784324][ C1] lec:lec_tx_timeout: lec0 [ 630.087521][T28774] bridge0: port 3(ipvlan2) entered blocking state [ 630.094573][T28774] bridge0: port 3(ipvlan2) entered disabled state [ 630.102249][T28774] ipvlan2: entered allmulticast mode [ 630.112125][T28774] bridge0: entered allmulticast mode [ 630.127884][T28774] ipvlan2: left allmulticast mode [ 630.133115][T28774] bridge0: left allmulticast mode [ 630.178676][T27613] Bluetooth: hci0: command tx timeout [ 630.358997][T28788] netlink: 'syz.2.6162': attribute type 4 has an invalid length. [ 630.388174][T28788] netlink: 'syz.2.6162': attribute type 1 has an invalid length. [ 630.397040][T28788] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6162'. [ 630.478533][T28793] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6162'. [ 630.589848][T28704] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 630.610466][T28704] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 632.257601][T27613] Bluetooth: hci0: command tx timeout [ 632.573424][T28704] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 632.587686][T28704] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 632.590425][ T1147] IPVS: stop unused estimator thread 0... [ 632.657095][T28824] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 632.885549][T28704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.959106][T28704] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.982234][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.989452][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.049547][T25029] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.056743][T25029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.209089][T28872] netlink: 'syz.1.6180': attribute type 3 has an invalid length. [ 633.392733][T28885] netlink: 'syz.1.6182': attribute type 10 has an invalid length. [ 633.424088][T28885] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 633.442674][ T10] wlan1 speed is unknown, defaulting to 1000 [ 633.450440][ T5902] wlan1 speed is unknown, defaulting to 1000 [ 633.575470][T28704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.690953][T28897] wlan1 speed is unknown, defaulting to 1000 [ 633.731654][T28704] veth0_vlan: entered promiscuous mode [ 633.747124][T28897] lo speed is unknown, defaulting to 1000 [ 633.808222][T28704] veth1_vlan: entered promiscuous mode [ 633.928180][T28704] veth0_macvtap: entered promiscuous mode [ 633.943773][T28704] veth1_macvtap: entered promiscuous mode [ 633.991857][T28704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.006514][T28704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.029169][T28913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6188'. [ 634.038920][T28913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6188'. [ 634.052601][T25029] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.181721][T25029] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.232659][T25029] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.331861][ T1057] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.347039][T27613] Bluetooth: hci0: command tx timeout [ 634.469475][T28934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6193'. [ 634.538198][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.563893][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.687147][T25024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.710694][T28949] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6196'. [ 634.716391][T25024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.967053][T28957] netlink: 178396 bytes leftover after parsing attributes in process `syz.3.6141'. [ 634.996858][T28958] netlink: 388 bytes leftover after parsing attributes in process `syz.2.6198'. [ 635.271451][T28972] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.6202'. [ 635.364805][T28978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6205'. [ 635.459052][T28978] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 635.461028][T28982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6205'. [ 635.498460][T28978] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 635.513065][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 635.522984][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 635.531722][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 635.541673][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 635.550282][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 635.562467][T28978] gretap1: entered promiscuous mode [ 635.582904][T28978] gretap1: entered allmulticast mode [ 635.754484][T28985] wlan1 speed is unknown, defaulting to 1000 [ 635.794370][T28985] lo speed is unknown, defaulting to 1000 [ 636.162147][T28985] chnl_net:caif_netlink_parms(): no params data found [ 636.270601][T28985] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.278702][T28985] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.286229][T28985] bridge_slave_0: entered allmulticast mode [ 636.294371][T28985] bridge_slave_0: entered promiscuous mode [ 636.304330][T28985] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.312119][T28985] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.319829][T28985] bridge_slave_1: entered allmulticast mode [ 636.328284][T28985] bridge_slave_1: entered promiscuous mode [ 636.367648][T28985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.380421][T28985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.433274][T28985] team0: Port device team_slave_0 added [ 636.442802][T28985] team0: Port device team_slave_1 added [ 636.478632][T28985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.486019][T28985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.512464][T28985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.525193][T28985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.532575][T28985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.559137][T28985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.614735][T28985] hsr_slave_0: entered promiscuous mode [ 636.621572][T28985] hsr_slave_1: entered promiscuous mode [ 636.627940][T28985] debugfs: 'hsr0' already exists in 'hsr' [ 636.633672][T28985] Cannot create hsr debugfs directory [ 636.727364][T28985] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 636.739140][T28985] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.761859][T29027] netlink: 'syz.4.6214': attribute type 11 has an invalid length. [ 636.770469][T29027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6214'. [ 636.797663][T28985] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 636.801152][T29027] netlink: 'syz.4.6214': attribute type 11 has an invalid length. [ 636.807553][T28985] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.820241][T29027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6214'. [ 636.835642][ T1057] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.844696][ T1057] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.854621][ T1057] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.863775][ T1057] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.875213][T28985] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 636.886146][T28985] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.923034][T28985] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 636.933173][T28985] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.616248][T27613] Bluetooth: hci3: command tx timeout [ 638.272650][T28972] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 638.322586][T28985] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 638.405234][T28985] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 638.427251][T29030] netlink: 'syz.3.6215': attribute type 3 has an invalid length. [ 638.451999][T28985] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 638.521434][T28985] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 638.770636][T29051] syzkaller0: entered promiscuous mode [ 638.807217][T29051] 0: reclassify loop, rule prio 0, protocol 800 [ 638.825180][T29049] IPVS: ip_vs_edit_dest(): server weight less than zero [ 638.832878][T29049] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6220'. [ 638.849890][T10595] IPVS: starting estimator thread 0... [ 638.930174][T28985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.962271][T29060] IPVS: using max 36 ests per chain, 86400 per kthread [ 639.021404][T28985] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.024917][T29069] Cannot find add_set index 65532 as target [ 639.094276][ T9168] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.101524][ T9168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.106211][T29075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6224'. [ 639.183051][ T9163] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.190299][ T9163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.214237][T29083] sock: sock_set_timeout: `syz.3.6225' (pid 29083) tries to set negative timeout [ 639.287513][T29092] x_tables: duplicate underflow at hook 2 [ 639.327497][T29085] bond1: invalid ARP target 0.0.0.0 specified for addition [ 639.416104][T29085] bond1: option arp_ip_target: invalid value (0) [ 639.444337][T29085] bond1 (unregistering): Released all slaves [ 639.707292][T27613] Bluetooth: hci3: command tx timeout [ 639.926312][T29117] netlink: 'syz.3.6233': attribute type 12 has an invalid length. [ 639.956204][T29117] netlink: 'syz.3.6233': attribute type 29 has an invalid length. [ 639.964062][T29117] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6233'. [ 640.008787][T29117] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6233'. [ 640.062385][T29124] netlink: 'syz.4.6235': attribute type 1 has an invalid length. [ 640.185446][T28985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 640.228739][T29124] bond3: (slave bridge3): Enslaving as a backup interface with an up link [ 640.295434][T29137] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6238'. [ 640.380816][T28985] veth0_vlan: entered promiscuous mode [ 640.447418][T28985] veth1_vlan: entered promiscuous mode [ 640.529988][T28985] veth0_macvtap: entered promiscuous mode [ 640.568138][T28985] veth1_macvtap: entered promiscuous mode [ 640.660318][T28985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.688430][T28985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.724779][T29147] can: request_module (can-proto-0) failed. [ 640.776872][ T9163] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.806066][ T9163] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.867347][ T9163] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.887064][ T9163] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.990335][T29157] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6246'. [ 641.046036][T29167] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6249'. [ 641.130675][ T9163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.160499][ T9163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.219197][ T9168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.245810][ T9168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.332695][T29181] netlink: 'syz.3.6253': attribute type 1 has an invalid length. [ 641.347666][T29184] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6254'. [ 641.358816][T29181] netlink: 2108 bytes leftover after parsing attributes in process `syz.3.6253'. [ 641.543377][T29196] netlink: 'syz.1.6200': attribute type 10 has an invalid length. [ 641.613580][T29196] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 641.642132][T29205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6261'. [ 641.786428][T27613] Bluetooth: hci3: command tx timeout [ 641.865719][T29222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6265'. [ 641.915238][T29222] bond1: Invalid ad_actor_system MAC address. [ 641.922340][T29222] bond1: option ad_actor_system: invalid value (1) [ 641.935495][T29222] bond1 (unregistering): Released all slaves [ 642.506969][T29252] sit1: entered promiscuous mode [ 642.517942][T29252] sit1: entered allmulticast mode [ 642.790689][T29269] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6282'. [ 642.859937][T29269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6282'. [ 643.040270][T29286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6289'. [ 643.068835][T29290] netlink: 'syz.1.6289': attribute type 9 has an invalid length. [ 643.089103][T29284] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.6287'. [ 643.157709][T29292] netlink: 'syz.2.6291': attribute type 10 has an invalid length. [ 643.187037][T29292] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.195081][T29292] bridge_slave_1: left allmulticast mode [ 643.217133][T29292] bridge_slave_1: left promiscuous mode [ 643.222950][T29292] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.257202][T29292] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 643.578287][T29302] bond11: (slave gre0): Device is not bonding slave [ 643.597633][T29302] bond11: option active_slave: invalid value (gre0) [ 643.623403][T29302] bond11 (unregistering): Released all slaves [ 643.782732][ T9168] wlan1: Trigger new scan to find an IBSS to join [ 643.859355][T27613] Bluetooth: hci3: command tx timeout [ 644.016212][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.024705][T10595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.262950][T29363] Cannot find del_set index 4 as target [ 644.337580][T29372] netlink: 'syz.2.6314': attribute type 10 has an invalid length. [ 644.361295][T29372] team0: Device ipvlan1 failed to register rx_handler [ 644.438879][T29376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.448125][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.458861][T29376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.500570][T29375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.510249][T10592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.516470][T29380] can: request_module (can-proto-0) failed. [ 644.525472][T29375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.532057][T29383] can: request_module (can-proto-0) failed. [ 644.537727][T29375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.657491][T10592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.780418][T29391] bond4 (unregistering): Released all slaves [ 644.993166][T29407] syzkaller0: entered promiscuous mode [ 645.001996][T29407] syzkaller0: entered allmulticast mode [ 645.207084][T29434] x_tables: duplicate underflow at hook 3 [ 645.401176][T29443] delete_channel: no stack [ 645.541417][T29461] gre1: entered promiscuous mode [ 645.547080][T29461] gre1: entered allmulticast mode [ 645.820385][T29479] netlink: 'syz.2.6352': attribute type 1 has an invalid length. [ 645.987097][T29479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 646.001679][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 646.017283][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 646.026878][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 646.037108][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 646.052025][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 646.151309][T29497] __nla_validate_parse: 18 callbacks suppressed [ 646.151327][T29497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6358'. [ 646.246587][T29485] wlan1 speed is unknown, defaulting to 1000 [ 646.254303][T29485] lo speed is unknown, defaulting to 1000 [ 646.339475][T29500] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 646.438525][T29513] netlink: 'syz.1.6364': attribute type 29 has an invalid length. [ 646.455706][T29513] netlink: 'syz.1.6364': attribute type 29 has an invalid length. [ 646.654607][T29521] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6368'. [ 646.787712][T29529] IPv6: sit1: Disabled Multicast RS [ 646.804274][T29529] sit1: entered allmulticast mode [ 646.844141][T29485] chnl_net:caif_netlink_parms(): no params data found [ 647.021195][T29545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6372'. [ 647.032113][T29545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6372'. [ 647.036045][T29485] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.051277][T29485] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.061982][T29485] bridge_slave_0: entered allmulticast mode [ 647.082111][T29485] bridge_slave_0: entered promiscuous mode [ 647.098182][T29545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6372'. [ 647.123075][T29485] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.156192][T29485] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.164842][T29485] bridge_slave_1: entered allmulticast mode [ 647.176482][T29485] bridge_slave_1: entered promiscuous mode [ 647.239140][T29485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.249712][T29557] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6376'. [ 647.263954][T29485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.321137][T29485] team0: Port device team_slave_0 added [ 647.330932][T29485] team0: Port device team_slave_1 added [ 647.392307][T29485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.401850][T29485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.441002][T29485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.454543][T29485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.463398][T29485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.490654][T29485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.602280][T29485] hsr_slave_0: entered promiscuous mode [ 647.618539][T29485] hsr_slave_1: entered promiscuous mode [ 647.624989][T29485] debugfs: 'hsr0' already exists in 'hsr' [ 647.634862][T29485] Cannot create hsr debugfs directory [ 647.667249][T29563] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 647.677037][T29571] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6381'. [ 647.818889][T29576] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6382'. [ 647.844749][T29578] netlink: 'syz.4.6383': attribute type 11 has an invalid length. [ 647.855667][T29578] netlink: 'syz.4.6383': attribute type 11 has an invalid length. [ 647.874889][T29578] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6383'. [ 647.922929][T29582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6384'. [ 648.097503][T27613] Bluetooth: hci1: command tx timeout [ 648.118354][T29590] Bluetooth: MGMT ver 1.23 [ 648.219037][T29485] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.240825][T29600] netlink: 'syz.2.6387': attribute type 39 has an invalid length. [ 648.347173][T29597] bond1: entered promiscuous mode [ 648.392042][T29602] bond1: entered promiscuous mode [ 648.399806][T29602] bond1: entered allmulticast mode [ 648.426694][T29602] 8021q: adding VLAN 0 to HW filter on device bond1 [ 648.492399][T29485] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.541983][T29613] sctp: [Deprecated]: syz.1.6390 (pid 29613) Use of struct sctp_assoc_value in delayed_ack socket option. [ 648.541983][T29613] Use struct sctp_sack_info instead [ 648.661581][T29485] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.810832][T29485] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.015221][T29630] netem: invalid attributes len -24 [ 649.046123][T29630] netem: change failed [ 649.425345][T29485] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 649.498725][T29485] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 649.544734][T29485] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 649.575167][T29485] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 649.909601][T29485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.959451][T29485] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.992364][T15320] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.999573][T15320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.090757][T15320] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.098082][T15320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.189544][T27613] Bluetooth: hci1: command tx timeout [ 650.218565][T29687] tipc: Started in network mode [ 650.223664][T29687] tipc: Node identity f2466cd4f86e, cluster identity 4711 [ 650.231245][T29687] tipc: Enabled bearer , priority 0 [ 650.248882][T29687] syzkaller0: MTU too low for tipc bearer [ 650.254676][T29687] tipc: Disabling bearer [ 650.614218][T29695] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.621999][T29695] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.709202][T29705] netlink: 'syz.2.6410': attribute type 10 has an invalid length. [ 650.764023][T29695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.781125][T29695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.890253][T29715] x_tables: duplicate underflow at hook 1 [ 650.948765][T29705] team0 (unregistering): Port device team_slave_0 removed [ 650.961808][T29705] team0 (unregistering): Port device team_slave_1 removed [ 650.981089][ T9168] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.001608][ T9168] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.052718][ T9168] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.104958][ T7402] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.228334][T29485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.435088][T29485] veth0_vlan: entered promiscuous mode [ 651.483266][T29485] veth1_vlan: entered promiscuous mode [ 651.611065][T29485] veth0_macvtap: entered promiscuous mode [ 651.647740][T29485] veth1_macvtap: entered promiscuous mode [ 651.709585][T29485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.729906][T29485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.792200][T25024] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.792757][T29755] __nla_validate_parse: 8 callbacks suppressed [ 651.792773][T29755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6422'. [ 651.814575][T25024] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.827542][T29755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6422'. [ 651.848183][T25024] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.865221][T25024] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.052646][ T9168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.087925][ T9168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.124409][T29771] netlink: 'syz.2.6425': attribute type 8 has an invalid length. [ 652.139405][T29772] syzkaller1: entered promiscuous mode [ 652.144918][T29772] syzkaller1: entered allmulticast mode [ 652.175252][T29771] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 652.256258][T27613] Bluetooth: hci1: command tx timeout [ 652.278654][T25024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.291014][T25024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.301078][T29774] netlink: 'syz.2.6426': attribute type 16 has an invalid length. [ 652.361156][T29774] netlink: 'syz.2.6426': attribute type 17 has an invalid length. [ 652.476697][T29777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6427'. [ 652.494749][T29774] net_ratelimit: 11 callbacks suppressed [ 652.494761][T29774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 652.755400][T29790] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 653.212668][T29814] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6436'. [ 653.291779][T29821] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6440'. [ 653.777788][T29850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6449'. [ 653.804732][T29851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6449'. [ 653.851686][T29862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6448'. [ 653.964868][T29874] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6448'. [ 654.127731][T29882] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 654.309204][T29898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6456'. [ 654.349216][T27613] Bluetooth: hci1: command tx timeout [ 654.564212][T29898] bond0: Device is already in use. [ 654.763948][T29926] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 654.771280][T29926] IPv6: NLM_F_CREATE should be set when creating new route [ 654.884760][T29926] lo: entered allmulticast mode [ 654.896504][T29926] tunl0: entered allmulticast mode [ 654.904909][T29926] gre0: entered allmulticast mode [ 654.931854][T29926] gretap0: entered allmulticast mode [ 654.941658][T29926] erspan0: entered allmulticast mode [ 654.951120][T29926] ip_vti0: entered allmulticast mode [ 654.960179][T29926] ip6_vti0: entered allmulticast mode [ 654.970396][T29926] sit0: entered allmulticast mode [ 654.984344][T29926] ip6tnl0: entered allmulticast mode [ 654.994575][T29926] ip6gre0: entered allmulticast mode [ 655.010611][T29926] syz_tun: entered allmulticast mode [ 655.021318][T29926] ip6gretap0: entered allmulticast mode [ 655.031307][T29926] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.039168][T29926] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.049847][T29926] bridge0: entered allmulticast mode [ 655.063035][T29926] bond0: entered allmulticast mode [ 655.069830][T29926] bond_slave_0: entered allmulticast mode [ 655.076142][T29926] bond_slave_1: entered allmulticast mode [ 655.086887][T29926] team0: entered allmulticast mode [ 655.092679][T29926] team_slave_0: entered allmulticast mode [ 655.098738][T29926] team_slave_1: entered allmulticast mode [ 655.108080][T29926] dummy0: entered allmulticast mode [ 655.115575][T29926] nlmon0: entered allmulticast mode [ 655.123951][T29926] caif0: entered allmulticast mode [ 655.130068][T29926] batadv0: entered allmulticast mode [ 655.139779][T29926] vxcan0: entered allmulticast mode [ 655.147775][T29926] vxcan1: entered allmulticast mode [ 655.154588][T29926] veth0: entered allmulticast mode [ 655.162469][T29926] veth1: entered allmulticast mode [ 655.171859][T29926] wg0: entered allmulticast mode [ 655.179310][T29926] wg1: entered allmulticast mode [ 655.187371][T29926] wg2: entered allmulticast mode [ 655.194042][T29926] veth0_to_bridge: entered allmulticast mode [ 655.206675][T29926] veth1_to_bridge: entered allmulticast mode [ 655.218488][T29926] veth0_to_bond: entered allmulticast mode [ 655.230710][T29926] veth1_to_bond: entered allmulticast mode [ 655.239742][T29926] veth0_to_team: entered allmulticast mode [ 655.250975][T29926] veth1_to_team: entered allmulticast mode [ 655.260988][T29926] veth0_to_batadv: entered allmulticast mode [ 655.270289][T29926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.277826][T29926] batadv_slave_0: entered allmulticast mode [ 655.288384][T29926] veth1_to_batadv: entered allmulticast mode [ 655.297636][T29926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.305073][T29926] batadv_slave_1: entered allmulticast mode [ 655.314702][T29926] xfrm0: entered allmulticast mode [ 655.323070][T29926] veth0_to_hsr: entered allmulticast mode [ 655.331496][T29926] hsr_slave_0: entered allmulticast mode [ 655.340019][T29926] veth1_to_hsr: entered allmulticast mode [ 655.349667][T29926] hsr_slave_1: entered allmulticast mode [ 655.358172][T29926] hsr0: entered allmulticast mode [ 655.365199][T29926] veth1_virt_wifi: entered allmulticast mode [ 655.374075][T29926] veth0_virt_wifi: entered allmulticast mode [ 655.383685][T29926] virt_wifi0: entered allmulticast mode [ 655.389893][T29926] veth1_vlan: entered allmulticast mode [ 655.400589][T29926] veth0_vlan: entered allmulticast mode [ 655.414709][T29926] vlan0: entered allmulticast mode [ 655.420134][T29926] vlan1: entered allmulticast mode [ 655.427426][T29926] macvlan0: entered allmulticast mode [ 655.435328][T29926] macvlan1: entered allmulticast mode [ 655.442971][T29926] ipvlan0: entered allmulticast mode [ 655.449819][T29926] ipvlan1: entered allmulticast mode [ 655.455385][T29926] veth1_macvtap: entered allmulticast mode [ 655.464711][T29926] veth0_macvtap: entered allmulticast mode [ 655.473937][T29926] macvtap0: entered allmulticast mode [ 655.481802][T29926] macsec0: entered allmulticast mode [ 655.489667][T29926] geneve0: entered allmulticast mode [ 655.498057][T29926] geneve1: entered allmulticast mode [ 655.506885][T29926] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 655.518779][T29926] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 655.528999][T29926] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 655.539200][T29926] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 655.554334][T29926] mac80211_hwsim hwsim68 wlan0: entered allmulticast mode [ 655.575303][T29926] mac80211_hwsim hwsim69 wlan1: entered allmulticast mode [ 655.584966][T29926] bond1: left promiscuous mode [ 655.590837][T29926] geneve2: entered allmulticast mode [ 655.596946][T29926] ipvlan2: entered allmulticast mode [ 655.692005][ T1147] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.747616][ T1147] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.798560][ T1147] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.815461][ T1147] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.871231][T29960] bridge0: port 2(ipvlan2) entered blocking state [ 655.878443][T29960] bridge0: port 2(ipvlan2) entered disabled state [ 655.885136][T29960] ipvlan2: entered allmulticast mode [ 655.892126][T29960] bridge0: entered allmulticast mode [ 655.909295][T29960] ipvlan2: left allmulticast mode [ 655.914495][T29960] bridge0: left allmulticast mode [ 656.418687][T30002] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:3 [ 656.518218][T30002] wlan1 speed is unknown, defaulting to 1000 [ 656.542023][T30002] lo speed is unknown, defaulting to 1000 [ 656.590708][T30023] netlink: 'syz.2.6488': attribute type 1 has an invalid length. [ 656.685152][T30024] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 656.726799][T30024] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 656.735307][T30024] gretap2: entered promiscuous mode [ 656.748731][T30024] gretap2: entered allmulticast mode [ 656.798687][T30030] macsec0: left allmulticast mode [ 656.827823][T30041] __nla_validate_parse: 10 callbacks suppressed [ 656.827841][T30041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6494'. [ 657.252690][T30070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6502'. [ 657.276958][T30070] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6502'. [ 657.305562][T30070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6502'. [ 657.323289][T30070] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6502'. [ 657.334819][T30070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6502'. [ 657.348659][T30072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6503'. [ 657.367423][T30070] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6502'. [ 657.373292][T30072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6503'. [ 657.379172][T30075] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6501'. [ 657.596690][T30088] netlink: 'syz.4.6509': attribute type 1 has an invalid length. [ 657.703646][T30088] syzkaller0: entered promiscuous mode [ 657.710434][T30088] syzkaller0: entered allmulticast mode [ 657.748140][T30097] openvswitch: netlink: Key 10 has unexpected len 12 expected 4 [ 660.007495][T30135] netlink: 'syz.0.6522': attribute type 6 has an invalid length. [ 660.041714][ T9168] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.041871][T30135] netlink: 'syz.0.6522': attribute type 6 has an invalid length. [ 660.051420][ T9168] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.104602][ T9163] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.146873][T30145] IPVS: set_ctl: invalid protocol: 126 255.255.255.255:20002 [ 660.155136][ T9163] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.269043][T25024] bridge_slave_1: left allmulticast mode [ 660.274933][T25024] bridge_slave_1: left promiscuous mode [ 660.306732][T25024] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.368631][T25024] bridge_slave_0: left allmulticast mode [ 660.379356][T25024] bridge_slave_0: left promiscuous mode [ 660.395581][T25024] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.437919][T30165] Cannot find set identified by id 3 to match [ 660.564820][T30171] can: request_module (can-proto-0) failed. [ 660.659589][T25024] bond7 (unregistering): (slave ip6erspan0): Releasing active interface [ 660.839158][T25024] bond0 (unregistering): (slave gretap1): Releasing active interface [ 660.873040][T25024] bond6 (unregistering): (slave geneve3): Releasing active interface [ 661.001251][T25024] bond5 (unregistering): (slave bridge2): Releasing backup interface [ 661.012291][T25024] bridge2 (unregistering): left promiscuous mode [ 661.210769][T25024]  (unregistering): Released all slaves [ 661.223470][T25024] bond1 (unregistering): Released all slaves [ 661.237782][T25024] bond2 (unregistering): (slave vcan1): Releasing backup interface [ 661.245712][T25024] vcan1: left promiscuous mode [ 661.253048][T25024] bond2 (unregistering): Released all slaves [ 661.267771][T25024] bond3 (unregistering): Released all slaves [ 661.283001][T25024] bond4 (unregistering): Released all slaves [ 661.303914][T25024] bond5 (unregistering): Released all slaves [ 661.324249][T25024] bond6 (unregistering): Released all slaves [ 661.338278][T25024] bond7 (unregistering): Released all slaves [ 661.352253][T25024] bond8 (unregistering): Released all slaves [ 661.367530][T25024] bond0 (unregistering): Released all slaves [ 661.392669][T25024] bond9 (unregistering): Released all slaves [ 661.410701][T25024] bond10 (unregistering): Released all slaves [ 661.426707][T30155] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 661.453802][T30178] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 662.030373][T30222] __nla_validate_parse: 15 callbacks suppressed [ 662.030395][T30222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6550'. [ 662.075272][T30222] openvswitch: netlink: Unknown nsh attribute 0 [ 662.099315][T30232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6550'. [ 662.109146][T30232] openvswitch: netlink: Unknown nsh attribute 0 [ 662.251452][T30243] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6553'. [ 662.285619][T30237] bridge1: entered promiscuous mode [ 662.292171][T30243] netlink: 'syz.4.6553': attribute type 1 has an invalid length. [ 662.326044][T30237] bridge1: entered allmulticast mode [ 662.866023][T30289] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 662.960986][T25024] hsr_slave_0: left promiscuous mode [ 662.997999][T25024] hsr_slave_1: left promiscuous mode [ 663.035202][T25024] veth1_vlan: left allmulticast mode [ 663.074353][T13318] lec:lec_start_xmit: lec0:No lecd attached [ 663.082672][T25024] veth1_macvtap: left promiscuous mode [ 663.102552][T25024] veth0_macvtap: left promiscuous mode [ 663.116292][T25024] veth1_vlan: left promiscuous mode [ 663.319074][T30319] netlink: 4752 bytes leftover after parsing attributes in process `syz.3.6570'. [ 663.328626][T30319] openvswitch: netlink: Flow key attr not present in new flow. [ 663.493312][T25024] team0 (unregistering): Port device team_slave_1 removed [ 663.510221][T25024] team0 (unregistering): Port device team_slave_0 removed [ 663.637335][T30306] pimreg: entered allmulticast mode [ 663.913292][T30330] : renamed from bond0 (while UP) [ 664.025324][T30338] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6576'. [ 664.258717][T25024] IPVS: stop unused estimator thread 0... [ 664.311070][T30353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6581'. [ 664.338373][T30353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6581'. [ 664.349138][T30353] netlink: 'syz.3.6581': attribute type 3 has an invalid length. [ 664.361089][T30353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6581'. [ 664.386778][T30353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6581'. [ 664.400288][T30353] netlink: 160 bytes leftover after parsing attributes in process `syz.3.6581'. [ 664.431542][T30324] netlink: 'syz.1.6574': attribute type 126 has an invalid length. [ 664.790092][T30378] bridge0: port 3(ipvlan2) entered blocking state [ 664.819176][T30378] bridge0: port 3(ipvlan2) entered disabled state [ 664.856076][T30378] ipvlan2: entered allmulticast mode [ 664.862792][T30384] openvswitch: netlink: Tunnel attr 16 has unexpected len 8 expected 0 [ 664.886320][T30378] bridge0: entered allmulticast mode [ 664.925918][T30378] ipvlan2: left allmulticast mode [ 664.931014][T30378] bridge0: left allmulticast mode [ 665.070232][T30392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 665.087876][T30392] sock: sock_timestamping_bind_phc: sock not bind to device [ 665.439016][T30414] netlink: 'syz.1.6599': attribute type 1 has an invalid length. [ 665.483806][T30420] netlink: 'syz.3.6602': attribute type 5 has an invalid length. [ 665.593249][T30414] bond2: (slave bridge1): Enslaving as a backup interface with an up link [ 665.688783][T30421] bond2: (slave bridge2): Enslaving as a backup interface with a down link [ 665.747978][T30434] vlan2: entered promiscuous mode [ 665.757426][T30434] vlan2: entered allmulticast mode [ 665.820520][T30439] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.975484][T30450] netlink: 'syz.2.6611': attribute type 1 has an invalid length. [ 666.082729][T30458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.387039][T30475] netlink: 'syz.3.6618': attribute type 2 has an invalid length. [ 666.436688][T30481] syzkaller0: entered promiscuous mode [ 666.442300][T30481] syzkaller0: entered allmulticast mode [ 666.590354][T30494] netlink: 'syz.1.6623': attribute type 11 has an invalid length. [ 667.331642][T30515] __nla_validate_parse: 13 callbacks suppressed [ 667.331665][T30515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6630'. [ 667.399202][T30520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6633'. [ 667.421815][ T9163] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.431974][T30520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6633'. [ 667.442329][ T9163] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.452277][ T9163] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.473454][ T9163] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.589004][T30527] syzkaller0: entered promiscuous mode [ 667.595041][T30527] syzkaller0: entered allmulticast mode [ 667.608134][T30527] tipc: Started in network mode [ 667.613288][T30527] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 667.623052][T30527] tipc: Enabled bearer , priority 24 [ 667.629620][T30499] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 667.663217][T30527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6635'. [ 667.831872][T30537] netlink: 'syz.1.6638': attribute type 1 has an invalid length. [ 667.895165][T30539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6637'. [ 667.932519][T30544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6640'. [ 668.064407][T30550] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6641'. [ 668.106973][T30550] netlink: 'syz.0.6641': attribute type 7 has an invalid length. [ 668.137367][T30559] netlink: 'syz.1.6644': attribute type 9 has an invalid length. [ 668.145184][T30559] netlink: 'syz.1.6644': attribute type 11 has an invalid length. [ 668.156592][T30550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6641'. [ 668.202969][T30559] netlink: 'syz.1.6644': attribute type 12 has an invalid length. [ 668.239402][T30559] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.6644'. [ 668.343940][T30559] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.6644'. [ 668.426943][T30572] syzkaller1: entered promiscuous mode [ 668.434033][T30572] syzkaller1: entered allmulticast mode [ 668.735946][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 668.744046][ C1] lec:lec_tx_timeout: lec0 [ 668.749227][T10595] tipc: Node number set to 10005162 [ 668.816245][T27613] Bluetooth: hci0: command 0x080f tx timeout [ 668.899818][T30610] netlink: 'syz.0.6654': attribute type 83 has an invalid length. [ 669.209097][T30643] netlink: 'syz.3.6663': attribute type 11 has an invalid length. [ 669.360569][T30651] netlink: 'syz.2.6668': attribute type 21 has an invalid length. [ 669.850316][T30699] openvswitch: netlink: IP tunnel attribute has 19 unknown bytes. [ 669.977489][T30701] xfrm1: entered promiscuous mode [ 669.982586][T30701] xfrm1: entered allmulticast mode [ 670.036619][T30710] netlink: 'syz.1.6686': attribute type 1 has an invalid length. [ 670.121414][T30710] 8021q: adding VLAN 0 to HW filter on device bond3 [ 670.166755][T30720] bond3: entered allmulticast mode [ 670.489475][T30738] xt_hashlimit: size too large, truncated to 1048576 [ 670.739418][T30764] netlink: 'syz.4.6699': attribute type 1 has an invalid length. [ 670.766308][T30764] netlink: 'syz.4.6699': attribute type 4 has an invalid length. [ 671.051788][ T1147] tipc: Subscription rejected, illegal request [ 671.114161][ T29] audit: type=1800 audit(1775248437.582:8): pid=30782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6705" name="memory.events" dev="tmpfs" ino=582 res=0 errno=0 [ 672.348281][T30849] __nla_validate_parse: 18 callbacks suppressed [ 672.348303][T30849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6723'. [ 672.430688][T30856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.598356][T30866] netlink: 'syz.0.6729': attribute type 11 has an invalid length. [ 672.923441][T30902] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6738'. [ 672.939220][T30902] validate_nla: 3 callbacks suppressed [ 672.939241][T30902] netlink: 'syz.3.6738': attribute type 17 has an invalid length. [ 672.953286][T30902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6738'. [ 672.962818][T30902] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6738'. [ 672.982959][T30907] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 673.058709][T30914] netlink: 'syz.1.6742': attribute type 5 has an invalid length. [ 673.080512][T30914] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6742'. [ 673.156079][T30928] netlink: zone id is out of range [ 673.161264][T30928] netlink: zone id is out of range [ 673.167024][T30928] netlink: zone id is out of range [ 673.172170][T30928] netlink: zone id is out of range [ 673.173691][T30929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6745'. [ 673.180617][T30928] netlink: zone id is out of range [ 673.193239][T30928] netlink: zone id is out of range [ 673.199306][T30928] netlink: zone id is out of range [ 673.205077][T30928] netlink: zone id is out of range [ 673.314569][T30939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6747'. [ 673.528206][T30951] wlan1 speed is unknown, defaulting to 1000 [ 673.561956][T30951] lo speed is unknown, defaulting to 1000 [ 673.958877][T30978] delete_channel: no stack [ 673.973877][T30978] : entered promiscuous mode [ 673.982777][T30978] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6758'. [ 674.286743][T31002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6765'. [ 674.305612][T31002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6765'. [ 674.342203][T31006] netlink: 'syz.3.6767': attribute type 1 has an invalid length. [ 674.375560][T31006] bond2: entered promiscuous mode [ 674.394523][T31006] 8021q: adding VLAN 0 to HW filter on device bond2 [ 674.475257][T31006] bond2: (slave bridge1): making interface the new active one [ 674.483119][T31006] bridge1: entered promiscuous mode [ 674.491024][T31006] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 674.511087][T31006] netlink: 'syz.3.6767': attribute type 1 has an invalid length. [ 674.711262][T31025] pimreg: entered allmulticast mode [ 674.765148][T31034] wg1: entered promiscuous mode [ 674.772360][T31034] wg1: entered allmulticast mode [ 675.857546][T31088] net_ratelimit: 4 callbacks suppressed [ 675.857566][T31088] openvswitch: netlink: Duplicate key (type 2). [ 675.867022][T31086] sit2: entered promiscuous mode [ 675.874498][T31086] sit2: entered allmulticast mode [ 676.127652][T31103] tc_dump_action: action bad kind [ 676.222278][T31112] netlink: 'syz.0.6800': attribute type 12 has an invalid length. [ 676.490468][T31130] netlink: 'syz.1.6805': attribute type 32 has an invalid length. [ 677.122937][T31175] netlink: 'syz.2.6817': attribute type 1 has an invalid length. [ 677.152393][T31175] netlink: 'syz.2.6817': attribute type 7 has an invalid length. [ 677.162927][T31175] netlink: 'syz.2.6817': attribute type 8 has an invalid length. [ 677.190078][T31175] NCSI netlink: No device for ifindex 65584 [ 677.210768][T31176] netlink: 'syz.2.6817': attribute type 1 has an invalid length. [ 677.219265][T31176] NCSI netlink: No device for ifindex 65584 [ 677.292502][T31174] wlan1 speed is unknown, defaulting to 1000 [ 677.332102][T31174] lo speed is unknown, defaulting to 1000 [ 677.373708][T31190] __nla_validate_parse: 13 callbacks suppressed [ 677.373729][T31190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6820'. [ 677.697267][T31202] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 677.712105][T31200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 677.895304][T31224] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6830'. [ 677.980562][T31229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6832'. [ 677.991415][T31229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 678.011286][T31233] vcan0: tx address claim with dlc 0 [ 678.024664][T31235] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6835'. [ 678.282869][T31254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6838'. [ 678.391859][T31254] 8021q: adding VLAN 0 to HW filter on device bond3 [ 678.446194][T10595] IPVS: starting estimator thread 0... [ 678.460780][T31266] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6840'. [ 678.535879][T31270] IPVS: using max 40 ests per chain, 96000 per kthread [ 678.708817][T31224] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 678.932353][T31290] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6846'. [ 679.074852][T31266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.103163][T31266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.350792][T31266] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 679.414345][T31263] syzkaller1: entered promiscuous mode [ 679.429661][T31263] syzkaller1: entered allmulticast mode [ 679.483496][T31289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6846'. [ 679.512733][T31296] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.6848'. [ 679.533505][T31296] netlink: Unknown conntrack attr (type=2304, max=9) [ 679.575173][ T7402] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.610292][ T7402] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.646682][T31305] validate_nla: 3 callbacks suppressed [ 679.646702][T31305] netlink: 'syz.2.6850': attribute type 11 has an invalid length. [ 679.663925][ T7402] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.681042][ T7402] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.862781][T31322] netlink: 'syz.2.6853': attribute type 1 has an invalid length. [ 679.898484][T31322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6853'. [ 680.018522][T27613] Bluetooth: hci2: command 0x0c1a tx timeout [ 680.138599][T31335] openvswitch: netlink: Missing valid actions attribute. [ 680.146168][T31335] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.351853][T31355] delete_channel: no stack [ 680.437074][T31359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 680.564679][T31367] netlink: 'syz.1.6869': attribute type 1 has an invalid length. [ 681.346902][T31424] sctp: [Deprecated]: syz.4.6889 (pid 31424) Use of int in max_burst socket option. [ 681.346902][T31424] Use struct sctp_assoc_value instead [ 681.397348][T31430] netlink: 'syz.1.6891': attribute type 3 has an invalid length. [ 681.570269][T31439] batadv_slave_0: entered promiscuous mode [ 681.692854][T31444] syzkaller0: entered promiscuous mode [ 681.709061][T31444] syzkaller0: entered allmulticast mode [ 681.769906][T31444] veth5: entered allmulticast mode [ 681.779313][T31438] batadv_slave_0: left promiscuous mode [ 681.920094][T31461] netlink: 'syz.3.6899': attribute type 10 has an invalid length. [ 681.941117][T31461] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 682.119616][T31474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.141230][T31474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.317926][T31493] netlink: 'syz.0.6911': attribute type 29 has an invalid length. [ 682.486501][T31502] __nla_validate_parse: 71 callbacks suppressed [ 682.486523][T31502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6916'. [ 682.520496][T31502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6916'. [ 682.681965][T31519] Cannot find set identified by id 3 to match [ 682.981180][T31534] tipc: Started in network mode [ 682.996193][T31534] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 683.026863][T31534] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 683.046741][T31534] tipc: Enabled bearer , priority 7 [ 683.280673][T31557] netlink: 412 bytes leftover after parsing attributes in process `syz.1.6933'. [ 683.392419][T31566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6935'. [ 683.405241][T31567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6935'. [ 683.489279][T31576] netlink: 'syz.1.6937': attribute type 1 has an invalid length. [ 683.497454][T31576] netlink: 476 bytes leftover after parsing attributes in process `syz.1.6937'. [ 683.516000][T31576] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.6937'. [ 683.692732][T31584] netlink: 'syz.0.6940': attribute type 58 has an invalid length. [ 683.701604][T31584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6940'. [ 684.072634][T31585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6940'. [ 684.093801][T31590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6941'. [ 684.146373][T24218] tipc: Node number set to 1 [ 684.507741][T31627] netlink: 'syz.0.6951': attribute type 75 has an invalid length. [ 684.975119][T31651] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.044389][T31637] netlink: 'syz.3.6952': attribute type 8 has an invalid length. [ 685.405084][T31676] netlink: 'syz.3.6963': attribute type 11 has an invalid length. [ 685.693461][T31693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.716520][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 685.858465][T31711] tipc: Enabled bearer , priority 0 [ 686.003949][T31720] netlink: Conntrack attr has 4 unknown bytes [ 686.029950][T31720] netlink: 'syz.3.6977': attribute type 1 has an invalid length. [ 686.090672][T31720] 8021q: adding VLAN 0 to HW filter on device bond4 [ 686.096455][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.639749][ T1057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.816128][T12439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.990886][T31787] x_tables: duplicate underflow at hook 1 [ 687.045208][T31293] tipc: Node number set to 170421460 [ 687.056777][T31293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.058279][T31789] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 687.136189][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.346005][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.464620][T31826] mac80211_hwsim hwsim69 syzkaller0: entered promiscuous mode [ 687.476160][T31826] mac80211_hwsim hwsim69 syzkaller0: entered allmulticast mode [ 687.516025][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.604321][T31834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.205350][T31862] netlink: 'syz.4.7015': attribute type 1 has an invalid length. [ 688.216190][T31850] netlink: 'syz.2.7012': attribute type 4 has an invalid length. [ 688.283664][T31865] __nla_validate_parse: 23 callbacks suppressed [ 688.283683][T31865] netlink: 168 bytes leftover after parsing attributes in process `syz.1.7016'. [ 688.392747][T31868] veth0_to_team: entered allmulticast mode [ 688.596256][T31878] netlink: 'syz.1.7020': attribute type 1 has an invalid length. [ 688.687178][T31878] 8021q: adding VLAN 0 to HW filter on device bond4 [ 688.752004][T31883] bond4: (slave geneve2): making interface the new active one [ 688.762032][T31883] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 688.789750][T25024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 688.803737][T25024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 688.824228][T25024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 688.843797][T25024] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 688.938696][T31893] netlink: 'syz.1.7023': attribute type 25 has an invalid length. [ 688.966110][T31893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7023'. [ 689.020143][T25024] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.029295][T25024] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.039175][T25024] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.048747][T25024] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.274205][T31912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7027'. [ 689.397539][T31918] netlink: 'syz.1.7030': attribute type 1 has an invalid length. [ 689.433160][T31918] netlink: 'syz.1.7030': attribute type 1 has an invalid length. [ 689.451906][T31918] netlink: 9172 bytes leftover after parsing attributes in process `syz.1.7030'. [ 689.541414][T31918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7030'. [ 689.594131][T31928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7034'. [ 689.616166][T31928] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7034'. [ 689.697947][T31935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7035'. [ 689.756218][T31938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7035'. [ 689.986730][ T9168] net_ratelimit: 9 callbacks suppressed [ 689.986749][ T9168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.096248][T24218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.105560][T31955] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7042'. [ 690.176585][ T9168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.187953][T10595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.200571][T31293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.219564][T31961] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 690.256098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.735811][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 690.743917][ C1] lec:lec_tx_timeout: lec0 [ 690.758294][ T1057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.967916][T31974] syzkaller0: entered promiscuous mode [ 690.988050][ T8762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.995265][T31987] pim6reg: entered allmulticast mode [ 691.127578][T25029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.296190][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.302327][T31987] pim6reg: left allmulticast mode [ 693.469477][T32016] netlink: 'syz.4.7054': attribute type 9 has an invalid length. [ 693.612612][T32030] __nla_validate_parse: 3 callbacks suppressed [ 693.612630][T32030] netlink: 220 bytes leftover after parsing attributes in process `syz.2.7057'. [ 693.724997][T32037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7060'. [ 693.769459][T32042] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7061'. [ 693.778134][T32044] syzkaller0: entered promiscuous mode [ 693.788666][T32043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7062'. [ 693.810671][T32043] bridge_slave_1: left promiscuous mode [ 693.821014][T32043] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.841782][T32043] bridge_slave_0: left promiscuous mode [ 693.848166][T32043] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.085307][T32070] macvlan0: entered promiscuous mode [ 694.106432][T32070] macvtap1: entered promiscuous mode [ 694.112107][T32070] macvtap1: entered allmulticast mode [ 694.119853][T32070] veth1_vlan: entered allmulticast mode [ 694.137385][T32070] macvtap2: entered promiscuous mode [ 694.142755][T32070] macvtap2: entered allmulticast mode [ 694.185140][T32078] netlink: 'syz.2.7069': attribute type 1 has an invalid length. [ 694.221480][T32073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7070'. [ 694.233774][T32070] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7069'. [ 694.242977][T32070] netlink: 'syz.2.7069': attribute type 1 has an invalid length. [ 694.450143][T32088] netlink: 'syz.1.7074': attribute type 10 has an invalid length. [ 694.467667][T32088] netlink: 228 bytes leftover after parsing attributes in process `syz.1.7074'. [ 694.577240][T32108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7080'. [ 694.654899][T32113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7080'. [ 694.661289][T32115] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7082'. [ 694.677393][T32113] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.685130][T32113] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.885211][T32132] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 695.009769][T32141] netlink: 'syz.0.7089': attribute type 4 has an invalid length. [ 695.032874][T32141] netlink: 'syz.0.7089': attribute type 4 has an invalid length. [ 695.056596][T32142] bridge_slave_1: default FDB implementation only supports local addresses [ 695.146576][ T10] net_ratelimit: 16 callbacks suppressed [ 695.146589][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.427899][T32161] netlink: 'syz.1.7095': attribute type 1 has an invalid length. [ 695.456182][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.600419][T25029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.638697][T32169] ip6gre1: entered allmulticast mode [ 695.652935][T32179] openvswitch: netlink: IPv6 tunnel dst address is zero [ 695.944386][T25029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.245916][ T8762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.291331][T32227] netlink: 'syz.2.7114': attribute type 10 has an invalid length. [ 696.340169][ T8775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.496072][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.527557][T32232] bond5: option all_slaves_active: invalid value (222) [ 696.550314][T32232] bond5 (unregistering): Released all slaves [ 696.659850][T32246] netlink: 'syz.3.7119': attribute type 9 has an invalid length. [ 696.767502][T25029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.823099][T32258] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 696.883158][T32255] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 696.898701][T32255] bond5 (unregistering): Released all slaves [ 697.080473][T32275] netlink: 'syz.1.7126': attribute type 1 has an invalid length. [ 697.147359][T32253] infiniband syz1: set down [ 697.152647][T32253] infiniband syz1: added ipvlan1 [ 697.179704][T32253] RDS/IB: syz1: added [ 697.183925][T32253] smc: adding ib device syz1 with port count 1 [ 697.197040][T32253] smc: ib device syz1 port 1 has no pnetid [ 697.236192][T32271] nbd2: detected capacity change from 0 to 63 [ 697.254485][ T5838] block nbd2: Receive control failed (result -32) [ 697.264120][T32283] block nbd2: Receive control failed (result -32) [ 697.276403][T27623] block nbd2: Dead connection, failed to find a fallback [ 697.303724][T27623] block nbd2: shutting down sockets [ 697.318237][T27623] blk_print_req_error: 138 callbacks suppressed [ 697.318264][T27623] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.373218][T27623] buffer_io_error: 138 callbacks suppressed [ 697.373237][T27623] Buffer I/O error on dev nbd2, logical block 0, async page read [ 697.412506][T27623] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.446190][T27623] Buffer I/O error on dev nbd2, logical block 1, async page read [ 697.472519][T27623] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.502976][T27623] Buffer I/O error on dev nbd2, logical block 2, async page read [ 697.538682][T27623] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.567705][T27623] Buffer I/O error on dev nbd2, logical block 3, async page read [ 697.576629][T27623] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.587199][T27623] Buffer I/O error on dev nbd2, logical block 0, async page read [ 697.595103][T27623] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.607244][T27623] Buffer I/O error on dev nbd2, logical block 1, async page read [ 697.619756][T27623] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.652093][T27623] Buffer I/O error on dev nbd2, logical block 2, async page read [ 697.678844][T27623] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.694122][T27623] Buffer I/O error on dev nbd2, logical block 3, async page read [ 697.702798][T32295] wlan1 speed is unknown, defaulting to 1000 [ 697.711111][T32295] lo speed is unknown, defaulting to 1000 [ 697.718853][T27623] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.731412][T27623] Buffer I/O error on dev nbd2, logical block 0, async page read [ 697.783318][T27623] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.818728][T27623] Buffer I/O error on dev nbd2, logical block 1, async page read [ 697.837582][T27623] ldm_validate_partition_table(): Disk read failed. [ 697.865617][T27623] Dev nbd2: unable to read RDB block 0 [ 697.892339][T27623] nbd2: unable to read partition table [ 697.915570][T27623] ldm_validate_partition_table(): Disk read failed. [ 697.947890][T27623] Dev nbd2: unable to read RDB block 0 [ 697.961139][T27623] nbd2: unable to read partition table [ 698.266934][T32283] Bluetooth: hci1: command 0x0405 tx timeout [ 698.651847][T32344] __nla_validate_parse: 18 callbacks suppressed [ 698.651866][T32344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7143'. [ 698.780397][T32344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7143'. [ 699.103417][T32361] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 699.138269][T32361] bond5 (unregistering): Released all slaves [ 699.234191][T32365] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7147'. [ 699.557390][T32385] xt_hashlimit: size too large, truncated to 1048576 [ 700.443940][ T8762] net_ratelimit: 12 callbacks suppressed [ 700.443959][ T8762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.558443][T32442] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7163'. [ 700.656084][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.684623][T32451] can: request_module (can-proto-0) failed. [ 700.691960][T32454] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7167'. [ 700.975414][T32464] xt_hashlimit: overflow, try lower: 3/0 [ 701.056584][ T9168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.092971][T32474] validate_nla: 3 callbacks suppressed [ 701.092991][T32474] netlink: 'syz.2.7175': attribute type 1 has an invalid length. [ 701.224017][T32471] netlink: 'syz.1.7173': attribute type 1 has an invalid length. [ 701.232403][T32471] nbd: error processing sock list [ 701.266558][T25029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.344409][T32484] netlink: 248 bytes leftover after parsing attributes in process `syz.1.7177'. [ 701.459687][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.533208][T32491] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7179'. [ 701.547421][T27613] Bluetooth: hci0: command 0x080f tx timeout [ 701.560558][T32489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7180'. [ 701.662426][T32494] netlink: 'syz.4.7181': attribute type 2 has an invalid length. [ 701.696097][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.714206][T32505] netlink: 'syz.4.7181': attribute type 2 has an invalid length. [ 701.727162][T32494] !: entered promiscuous mode [ 701.802617][T32505] !: left promiscuous mode [ 702.193265][T32539] wlan1 speed is unknown, defaulting to 1000 [ 702.201922][T32539] lo speed is unknown, defaulting to 1000 [ 702.416757][T10595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.489457][ T9168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.498695][ T8762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.736098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.813648][T32571] netlink: 'syz.4.7203': attribute type 1 has an invalid length. [ 703.410661][T32593] netlink: 'syz.3.7208': attribute type 30 has an invalid length. [ 703.733975][T32619] netlink: 'syz.4.7214': attribute type 1 has an invalid length. [ 703.942820][T32627] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 703.978593][T32627] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 704.015083][T32637] netlink: 'syz.1.7217': attribute type 21 has an invalid length. [ 704.034252][T32627] bond6: (slave ip6gre1): making interface the new active one [ 704.042248][T32637] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7217'. [ 704.052938][T32627] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 704.076156][T32637] netlink: 'syz.1.7217': attribute type 5 has an invalid length. [ 704.084191][T32637] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7217'. [ 704.272482][T32645] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.7221'. [ 704.331689][T32645] ipt_REJECT: ECHOREPLY no longer supported. [ 704.975121][T32694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7234'. [ 705.062339][T32700] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7235'. [ 705.123015][T32704] netlink: 'syz.2.7236': attribute type 10 has an invalid length. [ 705.248351][T32711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7241'. [ 705.272068][T32709] vlan2: entered promiscuous mode [ 705.292904][T32709] geneve1: entered promiscuous mode [ 705.307667][T32709] vlan2: entered allmulticast mode [ 705.313352][T32713] netlink: 388 bytes leftover after parsing attributes in process `syz.3.7242'. [ 705.327849][T32709] geneve1: entered allmulticast mode [ 705.343592][T32721] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7240'. [ 705.369901][T32709] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7239'. [ 705.457389][T10595] net_ratelimit: 9 callbacks suppressed [ 705.457406][T10595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.626298][T12439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.841218][T32752] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7252'. [ 705.856137][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.877197][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.385505][ T327] macvlan0: left promiscuous mode [ 706.571993][ T346] wg1 speed is unknown, defaulting to 1000 [ 706.612715][ T344] syzkaller0: entered promiscuous mode [ 706.618428][ T344] syzkaller0: entered allmulticast mode [ 706.627289][ T346] wg1 speed is unknown, defaulting to 1000 [ 706.633943][ T346] wg1 speed is unknown, defaulting to 1000 [ 706.654928][ T346] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 706.664357][T12439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.896164][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.986931][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.709215][ T8762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.936158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.096103][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.424452][ T346] wg1 speed is unknown, defaulting to 1000 [ 708.431399][ T346] wg1 speed is unknown, defaulting to 1000 [ 708.438403][ T346] wg1 speed is unknown, defaulting to 1000 [ 708.445216][ T346] wg1 speed is unknown, defaulting to 1000 [ 708.452711][ T346] wg1 speed is unknown, defaulting to 1000 [ 708.459758][ T346] wg1 speed is unknown, defaulting to 1000 [ 708.467414][ T346] wg1 speed is unknown, defaulting to 1000 [ 708.474900][ T346] wg1 speed is unknown, defaulting to 1000 [ 710.816283][ T8762] net_ratelimit: 10 callbacks suppressed [ 710.816298][ T8762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.056090][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.436809][T25029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.544041][T31293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.856779][ T8762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.096178][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.536450][T25024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.896187][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.136059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.656648][T25029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.906636][ T7402] net_ratelimit: 6 callbacks suppressed [ 715.906655][ T7402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.016453][ T8762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.256105][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.036125][ T7406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.066851][ T8762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.296145][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.616536][T31293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.106119][ T8762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.156628][ T9168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.336127][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.226142][ T10] net_ratelimit: 7 callbacks suppressed [ 721.226157][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.456220][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.487181][ T7402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.256738][ T8762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.496120][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.586265][ T1057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.297185][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.536029][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.696322][ T1057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.704664][T31293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.416087][ T10] net_ratelimit: 6 callbacks suppressed [ 726.416103][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.656323][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.736592][T31293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.926990][T13318] lec:lec_start_xmit: lec0:No lecd attached [ 727.056586][ T1057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.456903][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.696107][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.177658][ T7406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.496946][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.736124][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.296665][ T7402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.012184][ T354] __nla_validate_parse: 7 callbacks suppressed [ 731.012203][ T354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7271'. [ 731.025309][ T363] netlink: 'syz.2.7272': attribute type 1 has an invalid length. [ 731.037558][ T363] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7272'. [ 731.040603][ T362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7274'. [ 731.062867][ T360] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 731.480932][ T393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7279'. [ 731.504059][ T393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7279'. [ 731.539456][T25029] net_ratelimit: 6 callbacks suppressed [ 731.539476][T25029] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.545284][ T399] netlink: 'syz.4.7284': attribute type 1 has an invalid length. [ 731.592752][ T399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.616312][ T8762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.721776][ T411] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7288'. [ 731.755182][ T409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7287'. [ 731.838179][ T413] PKCS7: Unknown OID: [4] (bad) [ 731.843109][ T413] PKCS7: Only support pkcs7_signedData type [ 731.856051][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.906326][ T416] netlink: 'syz.0.7291': attribute type 30 has an invalid length. [ 731.919083][ T419] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7292'. [ 731.919549][ T417] netlink: 'syz.2.7290': attribute type 30 has an invalid length. [ 731.935992][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 731.944294][ C1] lec:lec_tx_timeout: lec0 [ 732.047599][ T417] bond2: option arp_missed_max: invalid value (0) [ 732.055080][ T417] bond2: option arp_missed_max: allowed values 1 - 255 [ 732.072306][ T417] bond2 (unregistering): Released all slaves [ 732.086572][ T430] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.431497][ T455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 732.597974][ T467] netlink: 'syz.0.7306': attribute type 8 has an invalid length. [ 732.659334][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.668739][ T7402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.669273][ T472] xt_CT: You must specify a L4 protocol and not use inversions on it [ 732.822838][T31293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.882744][ T485] netlink: 332 bytes leftover after parsing attributes in process `syz.3.7312'. [ 732.896069][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.120810][ T512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7321'. [ 733.313895][ T529] x_tables: duplicate underflow at hook 1 [ 736.013967][ T500] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 736.241334][ T546] xt_hashlimit: size too large, truncated to 1048576 [ 736.415411][ T559] veth1_to_batadv: left allmulticast mode [ 736.444814][ T561] netlink: 'syz.2.7334': attribute type 12 has an invalid length. [ 736.560626][ T569] __nla_validate_parse: 5 callbacks suppressed [ 736.560645][ T569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7335'. [ 736.821270][ T593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7338'. [ 736.830863][ T8762] net_ratelimit: 11 callbacks suppressed [ 736.830881][ T8762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.947045][ T599] netlink: 'syz.1.7339': attribute type 2 has an invalid length. [ 736.989820][ T603] netlink: 'syz.1.7339': attribute type 2 has an invalid length. [ 737.056079][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.146755][ T585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.214957][ T619] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7345'. [ 737.431301][ T638] netlink: 'syz.2.7348': attribute type 2 has an invalid length. [ 737.484997][ T638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7348'. [ 737.708503][ T659] IPVS: set_ctl: invalid protocol: 135 172.20.20.33:20004 [ 737.769214][ T669] netlink: 'syz.1.7357': attribute type 1 has an invalid length. [ 737.796285][ T5840] Bluetooth: hci1: link tx timeout [ 737.802420][ T5840] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 737.815679][ T5838] Bluetooth: hci1: link tx timeout [ 737.821085][ T5838] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 737.862988][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.986395][ T669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7357'. [ 737.995392][ T669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7357'. [ 738.026229][ T682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7362'. [ 738.040441][ T687] netlink: 'syz.3.7361': attribute type 1 has an invalid length. [ 738.074262][ T5838] Bluetooth: hci1: link tx timeout [ 738.080911][ T5838] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 738.096161][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.108114][ T5838] Bluetooth: hci1: link tx timeout [ 738.113280][ T5838] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 738.198536][ T5838] Bluetooth: hci1: link tx timeout [ 738.203720][ T5838] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 738.245976][ T696] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7367'. [ 738.287889][ T5838] Bluetooth: hci1: link tx timeout [ 738.293065][ T5838] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 738.296741][ T3555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.383679][ T705] wg1: entered promiscuous mode [ 738.409777][ T705] wg1: entered allmulticast mode [ 738.443265][T10595] wg1 speed is unknown, defaulting to 1000 [ 738.455919][T10595] syz2: Port: 1 Link ACTIVE [ 738.474922][ T716] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7369'. [ 738.578816][ T716] mac80211_hwsim hwsim69 syzkaller0: left allmulticast mode [ 738.593049][ T716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7369'. [ 738.744682][ T732] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 738.896184][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.906397][T10595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.915599][ T5838] Bluetooth: hci1: link tx timeout [ 738.921301][ T5838] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 738.976656][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 738.988220][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 739.136152][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.218951][T32283] Bluetooth: hci1: link tx timeout [ 739.224310][T32283] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 739.529419][ T784] netlink: 'syz.1.7380': attribute type 1 has an invalid length. [ 739.701850][ T793] xt_TCPMSS: Only works on TCP SYN packets [ 739.820530][T32283] Bluetooth: hci1: link tx timeout [ 739.826182][T32283] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 739.856054][T32283] Bluetooth: hci1: command 0x0405 tx timeout [ 739.910873][ T790] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.011227][ T790] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.188333][ T829] IPv6: Can't replace route, no match found [ 740.208437][ T790] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.341063][ T790] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.583058][ T7398] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.705463][ T3555] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.769405][ T3555] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.793199][ T3555] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.912558][ T880] bridge0: entered allmulticast mode [ 741.084777][ T890] syzkaller1: entered promiscuous mode [ 741.094959][ T890] syzkaller1: entered allmulticast mode [ 741.651336][ T948] IPVS: set_ctl: invalid protocol: 137 100.1.1.1:20001 [ 741.875320][ T954] x_tables: unsorted entry at hook 3 [ 741.924333][ T956] pimreg: left allmulticast mode [ 741.936637][T31293] net_ratelimit: 8 callbacks suppressed [ 741.936653][T31293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.016164][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.025067][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.035943][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.044097][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.085004][T31293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.132511][ T974] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20003 [ 742.211058][ T980] __nla_validate_parse: 141 callbacks suppressed [ 742.211078][ T980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7429'. [ 742.229009][ T984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7431'. [ 742.256140][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.282591][ T979] netlink: 'syz.4.7429': attribute type 1 has an invalid length. [ 742.298499][ T979] netlink: 'syz.4.7429': attribute type 2 has an invalid length. [ 742.315913][ T979] netlink: 'syz.4.7429': attribute type 1 has an invalid length. [ 742.325999][ T979] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7429'. [ 742.614503][ T1003] netlink: 'syz.0.7435': attribute type 1 has an invalid length. [ 742.777546][ T586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.811670][ T1014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.821506][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.098981][T31293] IPVS: starting estimator thread 0... [ 743.226655][ T1028] IPVS: using max 29 ests per chain, 69600 per kthread [ 743.253554][ T1040] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7444'. [ 743.392725][ T1049] netlink: 'syz.1.7445': attribute type 1 has an invalid length. [ 745.113801][ T1049] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 745.456284][ T1099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7455'. [ 745.479232][ T1095] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7453'. [ 745.488828][ T1095] netlink: 320 bytes leftover after parsing attributes in process `syz.3.7453'. [ 745.505416][ T1098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7454'. [ 745.845858][ T1125] syzkaller0: entered promiscuous mode [ 745.851538][ T1125] syzkaller0: entered allmulticast mode [ 745.944374][ T1132] sctp: [Deprecated]: syz.1.7462 (pid 1132) Use of int in maxseg socket option. [ 745.944374][ T1132] Use struct sctp_assoc_value instead [ 745.969559][ T1132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7462'. [ 746.038471][ T1135] ip6tnl2: entered allmulticast mode [ 746.141911][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.149273][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.156810][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.163932][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.112298][ T1157] : renamed from team_slave_1 (while UP) [ 747.146579][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 747.228948][T12439] net_ratelimit: 13 callbacks suppressed [ 747.228964][T12439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.276553][ T589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.456033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.176193][T10595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.256811][T12439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.388575][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.480819][ T1103] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 748.496046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.837357][ T1195] netlink: 'syz.4.7478': attribute type 3 has an invalid length. [ 748.850402][ T1195] netlink: 'syz.4.7478': attribute type 1 has an invalid length. [ 748.921725][ T1199] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.7479'. [ 749.186545][ T1214] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7485'. [ 749.199833][ T1217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7484'. [ 749.216366][T32283] Bluetooth: hci0: command 0x080f tx timeout [ 749.296151][ T8762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.398935][ T1219] netlink: 'syz.0.7486': attribute type 21 has an invalid length. [ 749.412105][ T1219] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7486'. [ 749.423655][ T1219] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7486'. [ 749.461098][ T1226] syzkaller0: entered promiscuous mode [ 749.466920][ T1226] syzkaller0: entered allmulticast mode [ 749.496056][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.536054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.074188][ T1236] Cannot find del_set index 4 as target [ 751.633671][ T1236] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7491'. [ 751.824164][ T1254] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.7495'. [ 751.865103][ T1255] xt_time: unknown flags 0xf4 [ 751.905544][ T1262] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 752.025014][ T1265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7498'. [ 752.051877][ T1268] netlink: 136 bytes leftover after parsing attributes in process `syz.0.7500'. [ 752.069127][ T1265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7498'. [ 752.426647][ T8762] net_ratelimit: 9 callbacks suppressed [ 752.426665][ T8762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.656111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.735741][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 752.743838][ C1] lec:lec_tx_timeout: lec0 [ 752.826751][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.915201][ T1332] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20001 [ 753.460666][ T8762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.541482][ T1391] netlink: 'syz.3.7531': attribute type 1 has an invalid length. [ 753.578358][ T1391] bond5: entered promiscuous mode [ 753.583601][ T1391] bond5: entered allmulticast mode [ 753.589726][ T1391] 8021q: adding VLAN 0 to HW filter on device bond5 [ 753.636728][ T1391] macvlan3: entered promiscuous mode [ 753.642078][ T1391] macvlan3: entered allmulticast mode [ 753.660351][ T1391] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 753.696065][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.737909][ T1398] netlink: set zone limit has 4 unknown bytes [ 753.770708][ T1400] bond1: entered promiscuous mode [ 753.838213][ T1413] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 753.852950][ T1413] bond7 (unregistering): Released all slaves [ 753.895210][ T1400] netlink: 'syz.0.7537': attribute type 10 has an invalid length. [ 753.913578][ T1408] netlink: 'syz.0.7537': attribute type 10 has an invalid length. [ 753.932269][ T1400] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.939631][ T1400] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.948531][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.983016][ T1400] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.990287][ T1400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.997819][ T1400] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.005078][ T1400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.024404][ T1400] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 754.037458][ T1408] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.044902][ T1408] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.124126][ T1429] vlan2: entered promiscuous mode [ 754.135049][ T1429] bridge0: entered promiscuous mode [ 754.257490][ T8775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.516308][T12439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.590127][ T1464] __nla_validate_parse: 6 callbacks suppressed [ 754.590147][ T1464] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7555'. [ 754.736140][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.771421][ T1473] syzkaller0: entered promiscuous mode [ 754.782977][ T1473] syzkaller0: entered allmulticast mode [ 754.948250][ T1489] tc_dump_action: action bad kind [ 755.325537][ T1495] netlink: 'syz.2.7564': attribute type 10 has an invalid length. [ 755.351448][ T1497] syzkaller1: entered promiscuous mode [ 755.360505][ T1497] syzkaller1: entered allmulticast mode [ 755.450139][ T1501] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7567'. [ 755.518974][ T1501] syzkaller0: entered promiscuous mode [ 755.531533][ T1501] syzkaller0: entered allmulticast mode [ 755.944947][ T1532] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 755.957184][ T1532] team0: Device macvlan3 is already an upper device of the team interface [ 756.262634][ T1550] xt_policy: output policy not valid in PREROUTING and INPUT [ 757.616317][ T10] net_ratelimit: 41 callbacks suppressed [ 757.616333][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.856138][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.436210][ T589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.525407][ T1511] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 758.656323][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.754665][ T1590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7588'. [ 758.830827][ T1593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7588'. [ 758.888471][ T1597] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7593'. [ 758.896055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.942767][ T1597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7593'. [ 759.034403][ T1606] batadv1: entered allmulticast mode [ 759.057970][ T1608] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7595'. [ 759.084387][ T1607] batadv1: entered allmulticast mode [ 759.129394][ T1602] netem: change failed [ 759.202333][ T1623] netlink: 'syz.2.7600': attribute type 11 has an invalid length. [ 759.211093][ T1623] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7600'. [ 759.375537][ T1632] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7601'. [ 759.461086][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 759.556315][ T1649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7610'. [ 759.569650][ T589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.661939][ T1653] syzkaller1: entered promiscuous mode [ 759.667768][ T1653] syzkaller1: entered allmulticast mode [ 759.696696][ T8762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.936091][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.969325][ T1680] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 760.105670][ T1687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7619'. [ 760.161377][ T1691] bond6: option resend_igmp: invalid value (32767) [ 760.168929][ T1691] bond6: option resend_igmp: allowed values 0 - 255 [ 760.181179][ T1691] bond6 (unregistering): Released all slaves [ 760.420449][ T8775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.632740][ T1731] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 760.716713][ T589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.800354][ T1747] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 760.986266][ T1756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7639'. [ 760.995303][ T1756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7639'. [ 761.044369][ T1758] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7640'. [ 761.109586][ T1765] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7643'. [ 761.269330][ T1774] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 761.299088][ T1776] netlink: 92 bytes leftover after parsing attributes in process `syz.3.7647'. [ 761.306559][ T1781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7648'. [ 761.334653][ T1776] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7647'. [ 761.598112][ T1800] netlink: 'syz.3.7650': attribute type 10 has an invalid length. [ 761.612014][ T1797] veth5: entered allmulticast mode [ 761.624248][ T1800] mac80211_hwsim hwsim69 wlan1: left allmulticast mode [ 761.631691][ T1802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7652'. [ 761.637300][ T1800] mac80211_hwsim hwsim69 wlan1: entered allmulticast mode [ 761.660392][ T1803] netlink: 'syz.0.7654': attribute type 4 has an invalid length. [ 761.668533][ T1803] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7654'. [ 761.677885][ T1805] netlink: 'syz.0.7654': attribute type 4 has an invalid length. [ 761.692712][ T1800] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 761.792626][ T1799] syzkaller0: entered promiscuous mode [ 761.798596][ T1799] syzkaller0: entered allmulticast mode [ 762.333514][ T1817] netlink: 'syz.0.7657': attribute type 10 has an invalid length. [ 762.458432][ T1833] netlink: 'syz.3.7662': attribute type 2 has an invalid length. [ 762.477382][ T1835] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 762.633978][ T1848] net_ratelimit: 7 callbacks suppressed [ 762.633997][ T1848] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 762.792400][ T1863] netlink: 'syz.1.7671': attribute type 3 has an invalid length. [ 762.807404][ T1863] netlink: 'syz.1.7671': attribute type 1 has an invalid length. [ 762.819656][ T1865] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 762.825854][ T8762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.831044][ T1864] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 763.019611][ T3555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.044402][ T1877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.056098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.206714][ T1884] ipt_REJECT: TCP_RESET invalid for non-tcp [ 763.210586][ T1881] netlink: 'syz.1.7679': attribute type 5 has an invalid length. [ 763.354715][ T1896] openvswitch: netlink: IP tunnel dst address not specified [ 763.379636][ T1899] xt_limit: Overflow, try lower: 604147548/4200216962 [ 763.442794][ T1909] tipc: Enabled bearer , priority 24 [ 763.557539][ T1911] wlan1 speed is unknown, defaulting to 1000 [ 763.571912][ T1911] lo speed is unknown, defaulting to 1000 [ 763.739212][ T1929] netlink: 'syz.1.7693': attribute type 4 has an invalid length. [ 763.858861][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.923334][ T1937] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 764.025827][ T1911] wg1 speed is unknown, defaulting to 1000 [ 764.095983][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.164339][ T589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.376228][ T1967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.859164][ T1996] netlink: 'syz.2.7711': attribute type 1 has an invalid length. [ 765.139473][ T2020] __nla_validate_parse: 18 callbacks suppressed [ 765.139492][ T2020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7719'. [ 765.293099][ T2026] netlink: 165 bytes leftover after parsing attributes in process `syz.0.7722'. [ 765.921288][ T2067] Cannot find add_set index 2 as target [ 766.048763][ T7398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.057595][ T7398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.156996][ T2090] bridge_slave_1: left allmulticast mode [ 766.165061][ T2090] bridge_slave_1: entered allmulticast mode [ 766.193328][ T2090] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 766.468368][ T2112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7744'. [ 766.634383][T32283] block nbd3: Receive control failed (result -32) [ 767.005216][ T2148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7755'. [ 767.047155][ T2147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7755'. [ 767.077572][ T2148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.158244][ T2148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.217939][ T2161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7759'. [ 767.711831][ T2184] dvmrp1: entered allmulticast mode [ 768.020747][ T8762] net_ratelimit: 17 callbacks suppressed [ 768.020766][ T8762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.166612][ T2204] validate_nla: 1 callbacks suppressed [ 768.166636][ T2204] netlink: 'syz.3.7769': attribute type 39 has an invalid length. [ 768.256057][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.265265][ T2211] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 768.275187][ T2209] netlink: 'syz.2.7772': attribute type 4 has an invalid length. [ 768.294302][ T2212] netlink: 'syz.1.7771': attribute type 1 has an invalid length. [ 768.390988][ T2212] 8021q: adding VLAN 0 to HW filter on device bond5 [ 768.428409][ T2210] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 768.492109][ T2225] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7775'. [ 768.505260][ T2217] 8021q: adding VLAN 0 to HW filter on device bond6 [ 768.518702][ T2217] bond5: (slave bond6): Enslaving as an active interface with a down link [ 768.529019][ T2216] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7773'. [ 768.540422][ T2216] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7773'. [ 768.542302][ T2228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7773'. [ 768.679276][ T586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.759107][ T2244] xt_TCPMSS: Only works on TCP SYN packets [ 768.767124][ T2244] netlink: 'syz.4.7780': attribute type 1 has an invalid length. [ 768.870000][ T2252] bond7: (slave geneve3): making interface the new active one [ 768.920246][ T2252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.980211][ T2252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.989250][ T2252] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 769.026152][ T35] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 769.045530][ T35] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 769.060144][ T2244] 8021q: adding VLAN 0 to HW filter on device bond7 [ 769.067332][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.154845][ T2257] tipc: Resetting bearer [ 769.198084][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.227568][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.247415][ T2252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.287127][ T35] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 769.296572][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.322221][ T35] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 769.533472][ T2287] macvtap1: entered promiscuous mode [ 769.548275][ T2287] macvtap1: entered allmulticast mode [ 769.567330][ T2290] syzkaller0: entered promiscuous mode [ 769.646618][ T2299] netlink: 'syz.1.7797': attribute type 10 has an invalid length. [ 769.985128][ T2327] netlink: 'syz.0.7806': attribute type 3 has an invalid length. [ 769.988776][ T2329] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 770.140717][ T2343] netlink: 'syz.0.7812': attribute type 10 has an invalid length. [ 770.191700][ T2345] __nla_validate_parse: 9 callbacks suppressed [ 770.191717][ T2345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7811'. [ 770.203756][ T2345] netlink: 'syz.2.7811': attribute type 7 has an invalid length. [ 770.214065][ T2341] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 770.218368][ T2345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7811'. [ 770.227411][ T2343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7812'. [ 770.272799][ T2351] netlink: 'syz.3.7813': attribute type 4 has an invalid length. [ 770.436147][ T2365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7817'. [ 770.537765][ T2373] netlink: 204 bytes leftover after parsing attributes in process `syz.3.7816'. [ 770.856268][ T2397] netlink: 'syz.3.7824': attribute type 39 has an invalid length. [ 771.091381][ T2418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7828'. [ 771.406688][ T2440] team0: entered promiscuous mode [ 771.436107][ T2440] team_slave_0: entered promiscuous mode [ 771.441980][ T2440] team_slave_1: entered promiscuous mode [ 771.449746][ T2440] team0: left allmulticast mode [ 771.527954][ T2451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7830'. [ 771.776643][ T35] wlan1: Trigger new scan to find an IBSS to join [ 771.830309][ T2461] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7835'. [ 771.861980][ T2455] 8021q: adding VLAN 0 to HW filter on device bond2 [ 771.905309][ T2476] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.926055][ T2476] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.949687][ T2476] tipc: Resetting bearer [ 771.955340][ T2476] tipc: Resetting bearer [ 771.983985][ T2461] bond2: (slave geneve2): making interface the new active one [ 771.999110][ T2461] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 772.034983][ T2485] netdevsim netdevsim1: Direct firmware load for .. @ failed with error -2 [ 772.048250][ T585] tipc: Resetting bearer [ 772.076676][ T2485] netdevsim netdevsim1: Falling back to sysfs fallback for: .. @ [ 772.106857][ T2488] syzkaller1: entered promiscuous mode [ 772.112733][ T2488] syzkaller1: entered allmulticast mode [ 772.186254][ T2492] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 772.231876][ T2497] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7846'. [ 772.430275][ T2518] s5: renamed from vlan1 [ 772.489509][ T2521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7849'. [ 772.720417][ T2541] bridge: RTM_NEWNEIGH with invalid ether address [ 773.043800][ T2571] bond3: Invalid ad_actor_system MAC address. [ 773.050402][ T2571] bond3: option ad_actor_system: invalid value (1) [ 773.059483][ T2571] bond3 (unregistering): Released all slaves [ 773.176090][ T586] net_ratelimit: 90 callbacks suppressed [ 773.176111][ T586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.221364][ T8762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.232688][T12439] IPVS: starting estimator thread 0... [ 773.298636][ T2598] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 773.333504][ T2589] macvlan0: left allmulticast mode [ 773.387411][ T2594] IPVS: using max 28 ests per chain, 67200 per kthread [ 773.408597][ T586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.456011][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.842441][ T2633] pim6reg1: entered promiscuous mode [ 773.873357][ T2633] pim6reg1: entered allmulticast mode [ 774.027089][ T2645] validate_nla: 1 callbacks suppressed [ 774.027111][ T2645] netlink: 'syz.4.7879': attribute type 1 has an invalid length. [ 774.048862][ T2645] netlink: 'syz.4.7879': attribute type 1 has an invalid length. [ 774.061138][ T2645] netlink: 'syz.4.7879': attribute type 8 has an invalid length. [ 774.219664][T32283] block nbd4: Receive control failed (result -32) [ 774.257957][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.285979][ T2650] nbd4: detected capacity change from 0 to 127 [ 774.293252][ T676] block nbd4: Dead connection, failed to find a fallback [ 774.322381][ T676] block nbd4: shutting down sockets [ 774.336437][ T2659] mac80211_hwsim hwsim69 syzkaller0: entered allmulticast mode [ 774.345093][ T2661] netlink: 'syz.4.7884': attribute type 1 has an invalid length. [ 774.354386][ T676] blk_print_req_error: 138 callbacks suppressed [ 774.354403][ T676] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 774.384364][ T585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.406932][ T676] buffer_io_error: 138 callbacks suppressed [ 774.406955][ T676] Buffer I/O error on dev nbd4, logical block 0, async page read [ 774.439454][ T676] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 774.460398][ T676] Buffer I/O error on dev nbd4, logical block 1, async page read [ 774.496023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.519092][ T676] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 774.546699][ T585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.558134][ T676] Buffer I/O error on dev nbd4, logical block 2, async page read [ 774.636768][ T676] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 774.656674][ T676] Buffer I/O error on dev nbd4, logical block 3, async page read [ 774.664686][ T676] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 774.694621][ T676] Buffer I/O error on dev nbd4, logical block 0, async page read [ 774.714426][ T676] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 774.737224][ T35] wlan1: Trigger new scan to find an IBSS to join [ 774.744487][ T676] Buffer I/O error on dev nbd4, logical block 1, async page read [ 774.776629][ T676] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 774.808137][ T676] Buffer I/O error on dev nbd4, logical block 2, async page read [ 774.832103][ T676] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 774.841822][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.907926][ T676] Buffer I/O error on dev nbd4, logical block 3, async page read [ 774.922614][ T676] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 774.949644][ T676] Buffer I/O error on dev nbd4, logical block 0, async page read [ 774.965302][ T676] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 775.022286][ T2694] netlink: 'syz.4.7893': attribute type 1 has an invalid length. [ 775.035848][ T676] Buffer I/O error on dev nbd4, logical block 1, async page read [ 775.094473][ T676] ldm_validate_partition_table(): Disk read failed. [ 775.110398][ T676] Dev nbd4: unable to read RDB block 0 [ 775.122156][ T676] nbd4: unable to read partition table [ 775.147701][ T676] ldm_validate_partition_table(): Disk read failed. [ 775.167835][ T676] Dev nbd4: unable to read RDB block 0 [ 775.173910][ T676] nbd4: unable to read partition table [ 775.184068][ T2700] team_slave_0: left promiscuous mode [ 775.216971][ T2700] team0 (unregistering): Port device team_slave_0 removed [ 775.236229][ T2700] team_slave_1: left promiscuous mode [ 775.250636][ T2717] netlink: 'syz.2.7899': attribute type 1 has an invalid length. [ 775.261376][ T2700] team0 (unregistering): Port device team_slave_1 removed [ 775.290192][ T2714] 8021q: VLANs not supported on wg1 [ 775.309734][ T2717] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 775.517215][ T2748] __nla_validate_parse: 54 callbacks suppressed [ 775.517233][ T2748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7906'. [ 775.726252][ T2771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7911'. [ 775.814275][ T2778] netlink: 'syz.4.7915': attribute type 8 has an invalid length. [ 775.859506][ T2783] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7916'. [ 775.871616][ T2783] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7916'. [ 775.871636][ T2777] bridge3: port 1(veth9) entered blocking state [ 775.881456][ T2783] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7916'. [ 775.901413][ T2777] bridge3: port 1(veth9) entered disabled state [ 775.908328][ T2777] veth9: entered allmulticast mode [ 775.915665][ T2777] veth9: entered promiscuous mode [ 776.102805][ T2798] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7921'. [ 776.402413][ T2823] syzkaller0: entered promiscuous mode [ 776.404812][ T2828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7929'. [ 776.422745][ T2823] syzkaller0: entered allmulticast mode [ 776.521317][ T2823] x_tables: duplicate underflow at hook 3 [ 776.620359][ T2847] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7933'. [ 776.630138][ T2847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7933'. [ 776.654433][ T2847] netlink: 'syz.1.7933': attribute type 4 has an invalid length. [ 776.703480][ T2859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7936'. [ 776.718154][ T2847] netlink: 'syz.1.7933': attribute type 4 has an invalid length. [ 777.096764][ T2891] Cannot find add_set index 46338 as target [ 777.112995][ T2892] netlink: 'syz.1.7942': attribute type 29 has an invalid length. [ 777.131792][ T2888] ip_vti0: entered promiscuous mode [ 777.776773][ T585] wlan1: Trigger new scan to find an IBSS to join [ 777.953174][ T2966] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 778.131459][ T2973] [ 778.133862][ T2973] ====================================================== [ 778.140960][ T2973] WARNING: possible circular locking dependency detected [ 778.147982][ T2973] syzkaller #0 Not tainted [ 778.152467][ T2973] ------------------------------------------------------ [ 778.159467][ T2973] syz.4.7962/2973 is trying to acquire lock: [ 778.165424][ T2973] ffff8880789d4e18 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x300 [ 778.174302][ T2973] [ 778.174302][ T2973] but task is already holding lock: [ 778.181746][ T2973] ffff88802af40f28 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 778.191150][ T2973] [ 778.191150][ T2973] which lock already depends on the new lock. [ 778.191150][ T2973] [ 778.201723][ T2973] [ 778.201723][ T2973] the existing dependency chain (in reverse order) is: [ 778.210730][ T2973] [ 778.210730][ T2973] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 778.218543][ T2973] __mutex_lock+0x19f/0x1300 [ 778.223654][ T2973] elevator_change+0x1b3/0x450 [ 778.228928][ T2973] elevator_set_none+0xb5/0x140 [ 778.234377][ T2973] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 778.240791][ T2973] nbd_start_device+0x17f/0xb10 [ 778.246159][ T2973] nbd_genl_connect+0x165b/0x1cf0 [ 778.251691][ T2973] genl_family_rcv_msg_doit+0x22a/0x330 [ 778.257752][ T2973] genl_rcv_msg+0x61c/0x7a0 [ 778.262767][ T2973] netlink_rcv_skb+0x232/0x4b0 [ 778.268038][ T2973] genl_rcv+0x28/0x40 [ 778.272531][ T2973] netlink_unicast+0x80f/0x9b0 [ 778.277894][ T2973] netlink_sendmsg+0x813/0xb40 [ 778.283164][ T2973] ____sys_sendmsg+0x972/0x9f0 [ 778.288448][ T2973] ___sys_sendmsg+0x2a5/0x360 [ 778.293695][ T2973] __x64_sys_sendmsg+0x1bd/0x2a0 [ 778.299150][ T2973] do_syscall_64+0x14d/0xf80 [ 778.304252][ T2973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.310669][ T2973] [ 778.310669][ T2973] -> #5 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 778.319265][ T2973] blk_alloc_queue+0x546/0x680 [ 778.324546][ T2973] __blk_mq_alloc_disk+0x197/0x390 [ 778.330170][ T2973] nbd_dev_add+0x499/0xb50 [ 778.335182][ T2973] nbd_init+0x168/0x1f0 [ 778.339848][ T2973] do_one_initcall+0x250/0x8d0 [ 778.345214][ T2973] do_initcall_level+0x104/0x190 [ 778.350680][ T2973] do_initcalls+0x59/0xa0 [ 778.355524][ T2973] kernel_init_freeable+0x2a6/0x3e0 [ 778.361248][ T2973] kernel_init+0x1d/0x1d0 [ 778.366099][ T2973] ret_from_fork+0x51e/0xb90 [ 778.371218][ T2973] ret_from_fork_asm+0x1a/0x30 [ 778.376522][ T2973] [ 778.376522][ T2973] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 778.383736][ T2973] fs_reclaim_acquire+0x71/0x100 [ 778.389194][ T2973] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 778.395690][ T2973] __alloc_skb+0x1d0/0x7d0 [ 778.400626][ T2973] tcp_stream_alloc_skb+0x3f/0x580 [ 778.406254][ T2973] tcp_sendmsg_locked+0x1375/0x5490 [ 778.411971][ T2973] tcp_sendmsg+0x2f/0x50 [ 778.416725][ T2973] sock_write_iter+0x406/0x4f0 [ 778.422001][ T2973] vfs_write+0x61d/0xb90 [ 778.426752][ T2973] ksys_write+0x150/0x270 [ 778.431589][ T2973] do_syscall_64+0x14d/0xf80 [ 778.436698][ T2973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.443107][ T2973] [ 778.443107][ T2973] -> #3 (sk_lock-AF_INET){+.+.}-{0:0}: [ 778.450739][ T2973] lock_sock_nested+0x48/0x100 [ 778.456044][ T2973] inet_shutdown+0x6a/0x390 [ 778.461166][ T2973] nbd_mark_nsock_dead+0x2e9/0x560 [ 778.466789][ T2973] recv_work+0x1c7f/0x1d90 [ 778.471714][ T2973] process_scheduled_works+0xb6e/0x18c0 [ 778.477770][ T2973] worker_thread+0xa53/0xfc0 [ 778.482869][ T2973] kthread+0x388/0x470 [ 778.487441][ T2973] ret_from_fork+0x51e/0xb90 [ 778.492542][ T2973] ret_from_fork_asm+0x1a/0x30 [ 778.497830][ T2973] [ 778.497830][ T2973] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 778.505484][ T2973] __mutex_lock+0x19f/0x1300 [ 778.510616][ T2973] nbd_queue_rq+0x37b/0x1100 [ 778.516269][ T2973] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 778.522435][ T2973] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 778.529301][ T2973] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 778.535895][ T2973] blk_mq_run_hw_queue+0x348/0x4f0 [ 778.541543][ T2973] blk_mq_dispatch_list+0xd16/0xe10 [ 778.547262][ T2973] blk_mq_flush_plug_list+0x48d/0x570 [ 778.553149][ T2973] __blk_flush_plug+0x3ed/0x4d0 [ 778.558514][ T2973] __submit_bio+0x28d/0x580 [ 778.563546][ T2973] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 778.569804][ T2973] block_read_full_folio+0x599/0x830 [ 778.575610][ T2973] filemap_read_folio+0x137/0x3b0 [ 778.581241][ T2973] do_read_cache_folio+0x358/0x590 [ 778.586868][ T2973] read_part_sector+0xb6/0x2b0 [ 778.592148][ T2973] adfspart_check_ICS+0xa5/0xa40 [ 778.597600][ T2973] bdev_disk_changed+0x7ba/0x1550 [ 778.603149][ T2973] blkdev_get_whole+0x380/0x510 [ 778.608535][ T2973] bdev_open+0x31e/0xd30 [ 778.613299][ T2973] blkdev_open+0x470/0x610 [ 778.618242][ T2973] do_dentry_open+0x785/0x14e0 [ 778.623523][ T2973] vfs_open+0x3b/0x340 [ 778.628109][ T2973] path_openat+0x2e08/0x3860 [ 778.633212][ T2973] do_file_open+0x23e/0x4a0 [ 778.638225][ T2973] do_sys_openat2+0x113/0x200 [ 778.643424][ T2973] __x64_sys_openat+0x138/0x170 [ 778.648790][ T2973] do_syscall_64+0x14d/0xf80 [ 778.653901][ T2973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.660303][ T2973] [ 778.660303][ T2973] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 778.667520][ T2973] __mutex_lock+0x19f/0x1300 [ 778.672658][ T2973] nbd_queue_rq+0xc6/0x1100 [ 778.677674][ T2973] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 778.683728][ T2973] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 778.690566][ T2973] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 778.697068][ T2973] blk_mq_run_hw_queue+0x348/0x4f0 [ 778.702712][ T2973] blk_mq_dispatch_list+0xd16/0xe10 [ 778.708433][ T2973] blk_mq_flush_plug_list+0x48d/0x570 [ 778.714316][ T2973] __blk_flush_plug+0x3ed/0x4d0 [ 778.719715][ T2973] __submit_bio+0x28d/0x580 [ 778.724730][ T2973] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 778.730869][ T2973] block_read_full_folio+0x599/0x830 [ 778.736669][ T2973] filemap_read_folio+0x137/0x3b0 [ 778.742210][ T2973] do_read_cache_folio+0x358/0x590 [ 778.747830][ T2973] read_part_sector+0xb6/0x2b0 [ 778.753104][ T2973] adfspart_check_ICS+0xa5/0xa40 [ 778.758639][ T2973] bdev_disk_changed+0x7ba/0x1550 [ 778.764239][ T2973] blkdev_get_whole+0x380/0x510 [ 778.769601][ T2973] bdev_open+0x31e/0xd30 [ 778.774357][ T2973] blkdev_open+0x470/0x610 [ 778.779336][ T2973] do_dentry_open+0x785/0x14e0 [ 778.784611][ T2973] vfs_open+0x3b/0x340 [ 778.789295][ T2973] path_openat+0x2e08/0x3860 [ 778.794401][ T2973] do_file_open+0x23e/0x4a0 [ 778.799498][ T2973] do_sys_openat2+0x113/0x200 [ 778.804688][ T2973] __x64_sys_openat+0x138/0x170 [ 778.810088][ T2973] do_syscall_64+0x14d/0xf80 [ 778.815196][ T2973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.821599][ T2973] [ 778.821599][ T2973] -> #0 (set->srcu){.+.+}-{0:0}: [ 778.828748][ T2973] __lock_acquire+0x15a5/0x2cf0 [ 778.834124][ T2973] lock_sync+0x9d/0x120 [ 778.838792][ T2973] __synchronize_srcu+0xca/0x300 [ 778.844240][ T2973] elevator_switch+0x1e8/0x7a0 [ 778.849512][ T2973] elevator_change+0x2cc/0x450 [ 778.854788][ T2973] elevator_set_default+0x36c/0x430 [ 778.860495][ T2973] blk_register_queue+0x366/0x430 [ 778.866031][ T2973] __add_disk+0x677/0xd50 [ 778.870872][ T2973] add_disk_fwnode+0xfb/0x480 [ 778.876057][ T2973] nbd_dev_add+0x72c/0xb50 [ 778.880979][ T2973] nbd_genl_connect+0x962/0x1cf0 [ 778.886424][ T2973] genl_family_rcv_msg_doit+0x22a/0x330 [ 778.892485][ T2973] genl_rcv_msg+0x61c/0x7a0 [ 778.897500][ T2973] netlink_rcv_skb+0x232/0x4b0 [ 778.902768][ T2973] genl_rcv+0x28/0x40 [ 778.907258][ T2973] netlink_unicast+0x80f/0x9b0 [ 778.912534][ T2973] netlink_sendmsg+0x813/0xb40 [ 778.917803][ T2973] ____sys_sendmsg+0x972/0x9f0 [ 778.923095][ T2973] ___sys_sendmsg+0x2a5/0x360 [ 778.928308][ T2973] __x64_sys_sendmsg+0x1bd/0x2a0 [ 778.933759][ T2973] do_syscall_64+0x14d/0xf80 [ 778.938863][ T2973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.945265][ T2973] [ 778.945265][ T2973] other info that might help us debug this: [ 778.945265][ T2973] [ 778.955475][ T2973] Chain exists of: [ 778.955475][ T2973] set->srcu --> &q->q_usage_counter(io)#51 --> &q->elevator_lock [ 778.955475][ T2973] [ 778.969201][ T2973] Possible unsafe locking scenario: [ 778.969201][ T2973] [ 778.976636][ T2973] CPU0 CPU1 [ 778.981984][ T2973] ---- ---- [ 778.987331][ T2973] lock(&q->elevator_lock); [ 778.991913][ T2973] lock(&q->q_usage_counter(io)#51); [ 778.999798][ T2973] lock(&q->elevator_lock); [ 779.006895][ T2973] sync(set->srcu); [ 779.010780][ T2973] [ 779.010780][ T2973] *** DEADLOCK *** [ 779.010780][ T2973] [ 779.018914][ T2973] 6 locks held by syz.4.7962/2973: [ 779.024005][ T2973] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 779.032195][ T2973] #1: ffffffff8fc3dc88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 779.041151][ T2973] #2: ffff88807ffe61d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x480 [ 779.051507][ T2973] #3: ffff88802af40fb8 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x115/0x430 [ 779.061334][ T2973] #4: ffff88802af40a20 (&q->q_usage_counter(queue)#52){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 779.072206][ T2973] #5: ffff88802af40f28 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 779.082029][ T2973] [ 779.082029][ T2973] stack backtrace: [ 779.087908][ T2973] CPU: 1 UID: 0 PID: 2973 Comm: syz.4.7962 Not tainted syzkaller #0 PREEMPT(full) [ 779.087928][ T2973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 779.087938][ T2973] Call Trace: [ 779.087945][ T2973] [ 779.087952][ T2973] dump_stack_lvl+0xe8/0x150 [ 779.087976][ T2973] print_circular_bug+0x2e1/0x300 [ 779.088001][ T2973] check_noncircular+0x12e/0x150 [ 779.088025][ T2973] __lock_acquire+0x15a5/0x2cf0 [ 779.088046][ T2973] ? check_path+0x21/0x40 [ 779.088069][ T2973] ? lockdep_unlock+0x5d/0xd0 [ 779.088085][ T2973] ? __lock_acquire+0x146e/0x2cf0 [ 779.088106][ T2973] ? __synchronize_srcu+0xb6/0x300 [ 779.088124][ T2973] lock_sync+0x9d/0x120 [ 779.088141][ T2973] ? __synchronize_srcu+0xb6/0x300 [ 779.088161][ T2973] __synchronize_srcu+0xca/0x300 [ 779.088179][ T2973] ? do_raw_spin_lock+0x12b/0x2f0 [ 779.088194][ T2973] ? __pfx___synchronize_srcu+0x10/0x10 [ 779.088215][ T2973] ? read_tsc+0x9/0x20 [ 779.088230][ T2973] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 779.088246][ T2973] ? synchronize_srcu+0x20d/0x270 [ 779.088265][ T2973] elevator_switch+0x1e8/0x7a0 [ 779.088283][ T2973] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 779.088311][ T2973] elevator_change+0x2cc/0x450 [ 779.088329][ T2973] ? do_raw_spin_unlock+0xf5/0x210 [ 779.088345][ T2973] elevator_set_default+0x36c/0x430 [ 779.088364][ T2973] ? __pfx_elevator_set_default+0x10/0x10 [ 779.088386][ T2973] ? disk_register_independent_access_ranges+0x2db/0x380 [ 779.088403][ T2973] ? blk_crypto_sysfs_register+0x11c/0x170 [ 779.088420][ T2973] blk_register_queue+0x366/0x430 [ 779.088444][ T2973] __add_disk+0x677/0xd50 [ 779.088468][ T2973] ? down_read+0x272/0x2e0 [ 779.088490][ T2973] add_disk_fwnode+0xfb/0x480 [ 779.088513][ T2973] nbd_dev_add+0x72c/0xb50 [ 779.088532][ T2973] ? __pfx_nbd_dev_add+0x10/0x10 [ 779.088556][ T2973] ? bpf_lsm_capable+0x9/0x20 [ 779.088578][ T2973] ? security_capable+0x7e/0x2c0 [ 779.088600][ T2973] ? radix_tree_lookup+0x25c/0x290 [ 779.088617][ T2973] nbd_genl_connect+0x962/0x1cf0 [ 779.088638][ T2973] ? __pfx_nbd_genl_connect+0x10/0x10 [ 779.088657][ T2973] ? rcu_is_watching+0x15/0xb0 [ 779.088678][ T2973] ? trace_kmalloc+0x2a/0x110 [ 779.088695][ T2973] ? __nla_parse+0x40/0x60 [ 779.088712][ T2973] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 779.088736][ T2973] genl_family_rcv_msg_doit+0x22a/0x330 [ 779.088758][ T2973] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 779.088781][ T2973] ? __lock_acquire+0x6b5/0x2cf0 [ 779.088802][ T2973] genl_rcv_msg+0x61c/0x7a0 [ 779.088823][ T2973] ? __pfx_genl_rcv_msg+0x10/0x10 [ 779.088841][ T2973] ? __pfx_nbd_genl_connect+0x10/0x10 [ 779.088857][ T2973] ? __lock_acquire+0x6b5/0x2cf0 [ 779.088879][ T2973] netlink_rcv_skb+0x232/0x4b0 [ 779.088894][ T2973] ? __pfx_genl_rcv_msg+0x10/0x10 [ 779.088912][ T2973] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 779.088932][ T2973] ? down_read+0x272/0x2e0 [ 779.088951][ T2973] ? genl_rcv+0xd/0x40 [ 779.088969][ T2973] genl_rcv+0x28/0x40 [ 779.088986][ T2973] netlink_unicast+0x80f/0x9b0 [ 779.089010][ T2973] ? __pfx_netlink_unicast+0x10/0x10 [ 779.089032][ T2973] ? netlink_sendmsg+0x650/0xb40 [ 779.089046][ T2973] ? skb_put+0x11b/0x210 [ 779.089063][ T2973] netlink_sendmsg+0x813/0xb40 [ 779.089082][ T2973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.089097][ T2973] ? aa_sock_msg_perm+0xf1/0x1b0 [ 779.089120][ T2973] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 779.089139][ T2973] ____sys_sendmsg+0x972/0x9f0 [ 779.089156][ T2973] ? futex_unqueue+0x211/0x240 [ 779.089176][ T2973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 779.089197][ T2973] ? import_iovec+0x73/0xa0 [ 779.089215][ T2973] ___sys_sendmsg+0x2a5/0x360 [ 779.089235][ T2973] ? __pfx____sys_sendmsg+0x10/0x10 [ 779.089256][ T2973] ? futex_wait+0x29a/0x380 [ 779.089285][ T2973] ? __fget_files+0x2a/0x420 [ 779.089298][ T2973] ? __fget_files+0x3a0/0x420 [ 779.089319][ T2973] __x64_sys_sendmsg+0x1bd/0x2a0 [ 779.089338][ T2973] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 779.089360][ T2973] ? rcu_is_watching+0x15/0xb0 [ 779.089384][ T2973] do_syscall_64+0x14d/0xf80 [ 779.089403][ T2973] ? trace_irq_disable+0x3b/0x150 [ 779.089416][ T2973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.089431][ T2973] ? clear_bhb_loop+0x40/0x90 [ 779.089447][ T2973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.089463][ T2973] RIP: 0033:0x7f678df9c819 [ 779.089478][ T2973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.089493][ T2973] RSP: 002b:00007f678ef3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 779.089509][ T2973] RAX: ffffffffffffffda RBX: 00007f678e215fa0 RCX: 00007f678df9c819 [ 779.089521][ T2973] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 779.089531][ T2973] RBP: 00007f678e032c91 R08: 0000000000000000 R09: 0000000000000000 [ 779.089541][ T2973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.089551][ T2973] R13: 00007f678e216038 R14: 00007f678e215fa0 R15: 00007ffd30dfecc8 [ 779.089568][ T2973] [ 779.574687][ C1] net_ratelimit: 37 callbacks suppressed [ 779.574709][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.616042][T12439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.702368][ T676] udevd[676]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 779.715275][ T582] udevd[582]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 779.885937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.127002][ T3555] wlan1: Creating new IBSS network, BSSID ea:f8:3d:f0:fe:3e [ 780.134435][ T3555] wlan1: Failed to join IBSS, no channel context [ 780.236008][ T3555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.336585][T15321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.575912][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.657172][T12439] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.895987][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.904912][T31293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.346430][ T585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.735904][ T585] wlan1: Trigger new scan to find an IBSS to join [ 783.625979][ T57] wlan1: Creating new IBSS network, BSSID 46:33:a9:28:79:3b [ 783.633436][ T57] wlan1: Failed to join IBSS, no channel context [ 784.686369][ T35] net_ratelimit: 14 callbacks suppressed [ 784.686389][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.735928][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.817150][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.825454][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.925855][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.775981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.784255][ T585] wlan1: Trigger new scan to find an IBSS to join [ 785.796119][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.856406][ T8762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.936154][ T585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.945869][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.666268][ T585] wlan1: Creating new IBSS network, BSSID 96:c0:76:2a:fa:7e [ 786.673687][ T585] wlan1: Failed to join IBSS, no channel context