last executing test programs: 4.199426592s ago: executing program 4 (id=7105): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "781f468565a05eeb", "cd0398a02aa04f90ed8395db905731dfea69932ae08057cc4d0a35f6861146f9", "ebeb2c0a", "f4ad3605d27a01e0"}, 0x38) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c80)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000100000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100e0000001000000000000000000000000000000000000000000000000000000000a01010000000000000000000000000064010100000000000000eb09000000003c000000000000000a000a"], 0xbc}}, 0x0) 3.815529182s ago: executing program 4 (id=7111): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010467bd7000000622d82bcb020413424db644881eb7b5543e96dff271f6192345bf36327018180ef9056c898b08018337a13116daa341a0d7925adb723bc3aeb6c60067b20f1448c707f13620d0305d178c78909fa1d16c0ce731d544286a21b185f2f41b92057862", @ANYRES32=0x0, @ANYBLOB="01480000195301001c00128009000100626f6e64000000000c00028005001100b3000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) bind(r2, &(0x7f00000002c0)=@ax25={{0x3, @bcast, 0x2}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r1, 0x40109441, &(0x7f0000000340)={0x81, 0x0, 0xfffffffa}) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0900000004000000080000000810000000000000", @ANYRES32, @ANYBLOB="00000000000000000000007a62a801f2ebbc2bf40b9392661ff0c5c9ead108a1db8976001961bdb66452b916e50631be5ec5768fbcc9a9c130ffc5be68155a33665cbc7d146ee3542782385834c9bba51130d4423ad7778600f9ed6f55aead", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x38) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000180)=0xfffffffa, 0x4) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r10, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="3abb87518784cda676", 0x9}], 0x1}}], 0x400015b, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r10, 0x0, {0x1, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r10, {0x4, 0xffeb}, {0xf, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) sendmsg$can_j1939(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x1d, r10, 0x2, {0x2, 0x1, 0x1}, 0xff}, 0x18, &(0x7f0000000600)={&(0x7f0000000540)="e86a466dc69ef53e43c0fbe1e79e834e1267d7a97e379ca8a26b5ab6d8b566a1e5fd2ad4e288ba632dd4b8d747961fe2894fc7ac7d3df4a848508df3d1031e50df623fc25f2156ba9ecd27eb229520b7086f0e828b04ab1796ef56da823b25917f55c53ee6051d67e2678bc14f18abf009c6d5a727298e3538822b696d9a25e3f8468bfcb27d40dd60de2a65478dc6bbbd451e20b732bebd0ceb3d8cb981503a4b21bbf4785f", 0xa6}, 0x1, 0x0, 0x0, 0x4800}, 0x20000010) sendmsg$can_raw(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@canfd={{0x1}, 0x3b, 0x3, 0x0, 0x0, "3385f6d49fcccc94009a717992a7cb824c5b01c20a953cfdb37077fe80a26d12878d38df1e7bf8f1fd97348e57d75e4a8286e81a307052b2b49613fcd7a4bc05"}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4004011) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000280)={r7}, &(0x7f0000000380)=0x8) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000b0086dd600a843500142f00fe8000000000000000000000000000a1fe80000000120000000000dacf822f947d713eeb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="6d00000010000104000000000000008ae912c59b4ef978c4d90d35f7d335000c000000", @ANYRES32=0x0, @ANYBLOB="4700000000000000300012800b000100627269646765000002080000000c002e00030000000300000006002700fdff005b69e6135d9ca66bb42b051c342ae8f09c5b0000000000000000"], 0x50}}, 0x800) 3.25699935s ago: executing program 1 (id=7117): syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@can_delroute={0x14c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x47, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "56e89243dad36ae9dc7283425f986bbfe5349c4e"}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "80deae486c1a0221"}, 0x6}}]}, 0x14c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x24, 0x0, 0xe000, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x24, 0x0, @val=0x80}}}}}}}, 0x0) 3.109142702s ago: executing program 4 (id=7118): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x49) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x6}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000009c0)="270502001600140005000000000000000600070088a800a88800f90ecf7b704fb64a52390000", 0x26}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x15, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x34, 0x0, 0x1, 0x0, 0x10000}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0xff, 0x0, 'hsr0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec", 0xef}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c180", 0xdb}], 0x1}}], 0x2, 0x2090) sendto(r4, &(0x7f0000001180)="205055ddf0c8311af320f7f8f083e0ddeb4d40961ddfae27e243814d76a97200f43e27961ecebef9fb5368a47ce6d0662223d0732483c5649324a914fb1387f279c0e25c1d608ab1a5663cb3819e4e0cb43b061da03658c22d735fb05cafb1212323665a95999e6dbcbb05d9411ee3a74059d2eaf67bda7c0cdcbe8cee811d9a17122ccdd22c14787b46f2d4e0953ce8d858416123c973a7821038dbe7cb6b37772c471ff36526f5ee91413b1ace06504fda", 0xb2, 0x4048810, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) getsockopt(r1, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711095000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000003"], 0x14}], 0x1}, 0x0) 2.979615201s ago: executing program 1 (id=7119): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) r1 = socket$inet(0x2, 0x3, 0xa) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d000400000000000e000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}]}, 0x3c}}, 0x20) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000b000000080026000816"], 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000940)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf250600000008000300", @ANYRES32=r6, @ANYBLOB="08000503030300000a00180003030303030300001c0017800400010004000600040003000400040004000500040002001c00e700a48cc7d4acdde664621112c3d34c24b07c140beacdb40e9a1800178004000300040002000400e51104000500040006001c00e700b97cab4a9ca9c213d9ce34accbf42745e612aea9dc436f650d0053000100"/148], 0xb0}, 0x1, 0x0, 0x0, 0x20000040}, 0xd0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[@ANYBLOB="040100001a000100000000000000000000000000000000000000ffff00000000ac141400"/64, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0200001000004d33c000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000088"], 0x104}}, 0x0) r7 = socket(0x23, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x23}, 0x10, &(0x7f0000000100)={0x0, 0x64}, 0x2}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000000)='.\x00', 0x2000, &(0x7f0000000040)={@align=0x97c, {0x8, 0x9, 0x3ff, 0x6}}, 0x3, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x5}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x2}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r12 = socket(0x10, 0x803, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002d40)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x50, 0x4}, {0x6, 0x2, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x3c7, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0x6, 0x7, 0x1, 0x4, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00#\x00', @ANYRES16=r11, @ANYBLOB="040029bd7000fcdbdf25010000000800040080ffffff48000180080006000600000008000700", @ANYRES32=r14, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r15, @ANYBLOB="060001000a00000014000400fe8000000000000000000000000000aa08000300ffffffff060005004e220000"], 0x64}, 0x1, 0x0, 0x0, 0x2000c800}, 0x4000000) 2.181227582s ago: executing program 1 (id=7123): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="410000001000c3634d5ce2f1ddf2005fdfc1e900", @ANYRES32=0x0, @ANYBLOB="04000000000000001800128008000100767469000c00028008000500ac1414bb08001f0005000000"], 0x40}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xf, 0x1}}}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40818d0}, 0x20008840) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x4040810) 2.097788626s ago: executing program 2 (id=7125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0xc8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x14, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xc8}}, 0x0) 1.968963331s ago: executing program 1 (id=7126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e0000000000000007004000"], 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tr'], 0xa) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x0, 0x6, 0x588}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0x0, 0x6, 0x588}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c000000100009040000000000000065aaaa09bb71404cbc3f9b887d3f3817a3ce", @ANYRES64=r1, @ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) 1.941592506s ago: executing program 4 (id=7128): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x10002, 0x0, 0x1}, 0x48) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0, 0x80}}, 0x2000c001) (async) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000000)=""/31, &(0x7f0000000040)=0x1f) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000001740)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000004000000000000000100000d00000000030000000300000000000000000000e43aff002300"/76], 0x0, 0x4c, 0x0, 0x3}, 0x28) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x13, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.813376481s ago: executing program 2 (id=7129): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) ppoll(&(0x7f0000000040)=[{r2, 0x140}], 0x1, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x2, 0xff, 0x2, 0x8, 0xf}, 0x20) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) connect$unix(r2, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) (async) ppoll(&(0x7f0000000040)=[{r2, 0x140}], 0x1, 0x0, 0x0, 0x0) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @local}, 0x10) (async) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x2, 0xff, 0x2, 0x8, 0xf}, 0x20) (async) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) (async) 1.656227467s ago: executing program 3 (id=7130): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) bind$unix(r1, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x97, 0x7, 0x0, 0xfffffffe, 0x44, 0x31b, 0x5}, 0x9c) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000040)=0xca, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="61a000fe0000000069108500e3d55a0fec21599f00000000cb55aded65e1a53144a194fb25409d07a389dfd0f164d47bf2b93f2ef8d231be8e2332e4e01925c7d9aafe1fe0ef162621046185995c9a1b42e0a295fd04894b552bc1a5d988a35dc74c8ed69c47d2eea3038c4fac0e85f863122c4eef2028aadd496c37f87fb450feaffe9260715766a8316662973028913fe7ca9b1d49d6892719d1623c68a20857fd0b23cf9faefb71a97bedf64bf2ecb16bedcf0eff67402f4fe925a274f8f7577483d320f1b63765500a108fb42739d9f6d9e873737d258f0ecd5300"/233], &(0x7f0000000000)='syzkaller\x00'}, 0x90) 1.569374596s ago: executing program 0 (id=7131): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="660a00000000000061119d0000000000850000006300000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001813070125bd7000000000004b7c3f000400ba80"], 0x18}, 0x1, 0x0, 0x0, 0x40811}, 0xc000) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1807000000000000000000000000001ad9231447f21afef4f44c212a0b6900851000000200000046000000000000009500007b0000000085"], &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) 1.453439102s ago: executing program 0 (id=7132): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r0, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8, 0x3e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0xc1}, 0x4008801) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r2, 0xe82e2000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000002c0)={r2, &(0x7f00000001c0)='nl80211\x00', 0x2000, &(0x7f0000000200)={@_ha_fsid={[0x2, 0x1]}, {0x2, 0x8, 0x3, 0x5}}, 0x8, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x800}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x0, 0x40, 0x7, 0x7, {{0x15, 0x4, 0x2, 0x35, 0x54, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@noop, @timestamp_addr={0x44, 0x3c, 0x28, 0x1, 0x3, [{@multicast1, 0x5}, {@local, 0x6}, {@local, 0xfffff801}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x4}, {@private=0xa010102, 0x80}, {@dev={0xac, 0x14, 0x14, 0x15}, 0xfffffffa}, {@multicast2, 0x1}]}, @noop]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0x1, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000580)={@private, @dev, 0x0}, &(0x7f00000005c0)=0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x4) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xdc, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4004008}, 0x8000) sendmsg$nl_route(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)=@bridge_newneigh={0x78, 0x1c, 0x20, 0x70bd2a, 0x25dfdbfc, {0x1c, 0x0, 0x0, r8, 0x4, 0x84, 0x1}, [@NDA_SRC_VNI={0x8, 0xb, 0x1}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_FLAGS_EXT={0x8}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_FDB_EXT_ATTRS={0x2c, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x3}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xfd}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_DST_IPV4={0x8, 0x1, @remote}]}, 0x78}, 0x1, 0x0, 0x0, 0x2080}, 0x20000080) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000980), r3) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000a80)={&(0x7f0000000940), 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, r10, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x98, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x1f}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "daf37247eea511754568e7ca6ed95e4b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "039c89833a5e47a054546c1dcb2918cc"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "721b7388870304b56cf60ad102db23a6"}, @NL80211_ATTR_PMK={0x14, 0xfe, "e46145e100def44d07607cfe5527bb59"}, @NL80211_ATTR_PMK={0x14, 0xfe, "4d901aa123f89feb67f262863bba6ab3"}]}, 0x98}, 0x1, 0x0, 0x0, 0x40880}, 0x8000) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000c40)=0x4, 0x4) accept4$nfc_llcp(r3, &(0x7f0000000c80), &(0x7f0000000d00)=0x60, 0x80800) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000d40)={'ipvs\x00'}, &(0x7f0000000d80)=0x1e) r11 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ifreq(r11, 0x891f, &(0x7f0000000dc0)={'geneve0\x00', @ifru_mtu=0xb987}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e00)) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80), r3) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000f40)={'ip6_vti0\x00', &(0x7f0000000ec0)={'ip6tnl0\x00', r6, 0x29, 0xeb, 0x0, 0x100, 0x0, @local, @mcast1, 0x7800, 0x20, 0x5, 0x7ff}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000001280)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000f80)={0x28c, r12, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f00000012c0)={0xffffffffffffffff}) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), r3) sendmsg$IPVS_CMD_GET_DAEMON(r14, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000010}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x20, r15, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40851}, 0x8040) syz_genetlink_get_family_id$nl802154(&(0x7f0000001480), 0xffffffffffffffff) 1.452579289s ago: executing program 2 (id=7133): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000540)={r0, &(0x7f00000000c0)='}\x00', 0x8a00, &(0x7f0000000100)={@align=0x58d, {0x0, 0x90df, 0x7fff, 0x2}}, 0x61, &(0x7f0000000400), &(0x7f0000000500)=0x57}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000c80)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000900)={0x318, 0x12, 0x808, 0x70bd2c, 0x25dfdbfc, {0x1e, 0x6, 0xff, 0x9, {0x4e23, 0x4e21, [0x49c, 0x6, 0xfffffffc, 0x9], [0x3, 0x5, 0x3ff, 0x9], r2, [0x88, 0x9]}, 0x7, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "751009a329cdc92816ada0c12fe40dfcf146c751cd88cf3c44105c4b91b81867c4ad8840efa2b627fe25b9eff809bac0868b4910d5e74072c92a568d1b76081259e49457006dffd9f2b5fc1da5dad30c7cef4dea9658716b46faff9e75d7d863b5b038e1ce57cee21b92122def6ba6a1e0e05906fc7deaada0141368b285eb9dd154d717d4af1b746c5632ed718cabbcbc9dd31e6c77e4a33e149c79d623b8bcf732b847959d100f04a11446"}, @INET_DIAG_REQ_BYTECODE={0x5b, 0x1, "2bb23234836929e3d92d3a2a0c8a5bc696bb613600e407b7ba30dbfc823e47fcc396461a0cccb086c9dd2d3a68d5461f0cb28f33c7c98a11f60f663d679c74bccd646dbec9e166b5399a1a65f5b5bab29ab87f67eed4c8"}, @INET_DIAG_REQ_BYTECODE={0x26, 0x1, "a2b374e0473f7168321d13bd5350ddd64e316ac7bea20ac23b78e74d6b3c7fe65ebd"}, @INET_DIAG_REQ_BYTECODE={0x5e, 0x1, "94b3fd44ab60a8643539f270dee374ff99221043d400fb0d836ab036eaa14b2ab30c95b566679527bec0bd02ac71cd12ccd94cc4bda799686c805865b3014ec2f32aa8aeb28e0ff9ddbf7dcfd18cb20f27aedece3d6f7acbbad6"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "d3acdb9c683653da3c6a4b792de988f43cf59e1444f9f47be0e3e47f9a1576069d8d359e936b15e2b1c07cd04b75988100a2ee4f5d6d5493829b29d0051569e54a7c"}, @INET_DIAG_REQ_BYTECODE={0xef, 0x1, "0d97f565dba02499bfcf65a063d9688e082e70beab40bce4dba8b9070f6b8f275a86df67227d3dba3041b42ac1e59ccc6317f592a549662edfec265bdf2952b8bcbc00387c9764a89a2ceff3e58db48a562a34fa29137d53cdf67e48c5c6b107e97f8ff41dc8aec9692ab5e637862287382b3429b5463478dbb27b55c5d9f1a8839373545fb76b734061ad57e54a74921904880fd035400956dd35975576bf012c1909995455b775c118e397a6bc48d08069088ea5b9cd25d851056ce9b3788d259e6aee39cf1d963489a8f942420a5f572cb7360f865bf43a37f53c891cd25731901cc54df2e3582230a0"}]}, 0x318}, 0x1, 0x0, 0x0, 0x80}, 0x44080) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f00000008c0)=""/54, 0x36}, {&(0x7f0000005780)=""/4093, 0xffd}, {&(0x7f0000000340)=""/152, 0x98}, {&(0x7f0000000040)=""/109, 0x6d}, {&(0x7f0000000440)=""/127, 0x7f}, {&(0x7f0000000180)=""/98, 0x62}], 0x7}, 0x1}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000005740)=[{&(0x7f0000001940)=""/4110, 0x100e}, {&(0x7f0000004740)=""/4084, 0xff4}], 0x2}, 0x900000}], 0x7, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000003d00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)="aa6a13d25384c7d7d36bde77879124853be7b7544851cbe87cbd00c7d5fe0f77b2b191995701a7e3131be265ecf126282aadb0f4db4a4b3696a75737dcab9000b87f967f96a4315821f5cc211ff58ad07636e68a5ddb46dedfec8dae032e4e7ba64df362dc92902f1e644f019c7cd742ebc6eca81d34084180a2088c88fb945bf874ba94d1209d91541f00a8c221c3c383cc46b1dbf77c823e2aa1d4d55c1ebf867d542704b04c29", 0xa8}], 0x1, &(0x7f0000002980)=[{0x30, 0x10f, 0x5, "b86647e895d96ce4c1fcf7d6d5549085fad1a2c93e0f60d76a"}, {0x98, 0x112, 0xfffffffb, "fcb2e422843ed88af6cfc79cb4d682cade52f19cf9ef774061ec0f7fd887f500e3f3c77cad13c8fc10d56062f704892e3d17dd306999cdf32498fc5a47c1bd75e8afd86b0372086aba81ccca4eef581d1b506cddb8b0d0f482fd0732d8024ad263784fba7f74c252fab2c65dc194c7ef02aa08dec7b828f51e5b37a32f6300bec159a689aefdb9"}, {0xf8, 0x3a, 0x1, "fbf83d2a88d45b0d7071a096c2d2e44926359e69dfef377e6b360e4c13f467dc8231df41b8505c30f052f979bbca8048048d5c4d78eef77ef55a2e2fc4720087f06786dc469d4e7b9b1cd6cd1a76dea594141ad659a93d9c8f2da5929318c33e5ab35e8d45906b2a340cfbf93a325021235ad56983cda823ff99e8e7ef04031f5128a424b158e1244a257e1276ee6562840e396d79597fce06a5dca4b0d9fa6ccda63f0ad3b233eb49a47df82b8e32278059e790c0c5852a341e584f82f8b2b271cbaac33402242f0774b023711ff980a94f7e947b43ea774fc66779f9170029655aa9ade44a"}, {0xa8, 0x10b, 0x5, "df39654070639308f0aebb6b06376b9d38e038ae3339a0f88a2a79122a33ac98aed0f74da23b86eca7c772487ad6edc6af1227c592099ce87347805a82aa9bbf145edc704171d0f3b087f62ad2dcbf4d692483e71dee24dd095335750da45f8e36f396d458eceb41dd77af67fd38db2ea63191f21844702a44ad62add313bbcbcae2aff2e83d0426bf052c998a8f5251c9e67b992c07"}, {0x1010, 0x101, 0x10, "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"}, {0x90, 0x29, 0x4, "d51c68836c4251a019fcd2048a6f732c3ae2d25a60a465cbc7d044d115a6bca1545dc27fca0896b5a0b6836fe4e793b0a4a62b8d8baa3368f326cd7d8bc0a345b7e47c4d3389d4d77a88b400e39078c79455b405c2d21d3196f50c9b07384020b71e86ddf8609bc4b9917b15c1fbed13f6a36b976ab68bd68af21f13e1"}, {0x78, 0x113, 0x0, "c96e877ffb0a279dcb6ab120ffc397bc5581748179d80ecbd2c9108ae42acd4c6552c35f5ffd77e5dd57a7ba2c747d5cca401df92dd39c17afff595ad39c0e8715b4dcbce71ae05047533b5511a27cf1d2b66400b4906cf06fa3beb0d20d510a79afa9cdde"}], 0x1380}, 0x4080) 1.452248557s ago: executing program 4 (id=7134): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r2, 0x4, 0x70bd67, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x20008018) 1.44578899s ago: executing program 1 (id=7135): r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x2) shutdown(r0, 0x2) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000440)="9eb1d91a92dc7c8fff658bb539e2ffb332c9d223a7dfe52c1f51218206f5abfd2a", 0x21}], 0x2}, 0x20008b88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x168, 0x9, 0x140, 0xb, 0x368, 0x250, 0x250, 0x368, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0x0, 0xffffffff], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xf8, 0x140, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x8, 0x8727aef2dab6f0c4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@private0, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, [0xffffffff, 0xffffff00], @ipv4=@multicast2, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r3, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r5 = socket(0x2, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=@newlink={0x5c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_IFLAGS={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x40}]}}}]}, 0x5c}}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x4e21, @broadcast}, 0xd1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x9, 0x6}) recvmsg$can_raw(r0, &(0x7f0000000800)={&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000540)=""/1, 0x1}, {&(0x7f0000000580)=""/160, 0xa0}, {&(0x7f0000000640)=""/245, 0xf5}], 0x3, &(0x7f0000000780)=""/81, 0x51}, 0x140) 1.26339012s ago: executing program 3 (id=7136): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) unshare(0x20000400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000980)='io.stat\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) close(r0) 1.201809568s ago: executing program 0 (id=7137): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="07000000010006", 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4044) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0000000290001"], 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x170, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x152, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_b, @random="9b1a67f2c136", {0x8, 0x1e9}}, 0x585, @default, 0x100, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x60, 0x1}, {0x2cf47acb8d7b3aa0, 0x1}, {0x6}, {0x6}, {0x3, 0x1}, {0xc, 0x1}, {0x1b, 0x1}, {0x48}]}, @val={0x3, 0x1, 0x74}, @void, @val={0x6, 0x2, 0xfd}, @val={0x5, 0x8, {0x39, 0xd2, 0x10, "d95f43eebd"}}, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x10008, 0x2, 0x4, 0x0, {0xcc2d, 0x0, 0x0, 0x3fa, 0x0, 0x1}, 0x6, 0x8, 0x80}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5c, 0x78}}, @val={0x76, 0x6, {0xaf, 0x37, 0x24, 0x3}}, [{0xdd, 0x27, "4c5fa9b2d62c9d1bcc147f26591006f4ec7a50371801b5d0289e89edba45ff6405dd620e3aaaf3"}, {0xdd, 0xa4, "60352cdf708d0be8a640ac400cde82955887899a086a3b8cd18e11fe50b408fc739a68d24f9d1bd88fb60dc79afe994e21fdabad96b70f9c4890824c9ca5c63083cfb0febf859bc04592cd559b43cff797dd736abda462362fb5bdfa0e305dac7a2559699aa193bfdfe86ced865303c6a5bd926c36a903da818c6f0d9affd882392a5c9fad96fd147fa3ee32fff6366f5ee8654821282688a48bc91a27608c20ded62a70"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x8040001}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000ad4400080024bd70028b4fde3611000000"], 0x14}, 0x1, 0x0, 0x0, 0x2060080}, 0x4000000) 1.110240338s ago: executing program 4 (id=7138): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008094}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001900)=@newtfilter={0xd0c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xcdc, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}, @TCA_BASIC_EMATCHES={0x46c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x250, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x7, 0x2, 0x8}, {0x1, 0x3, 0x2, "f79a11"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0x6}, {0x0, 0x0, 0x4}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xed, 0x2, 0xea}, {0x1c7, 0x1, 0x0, "99"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x80, 0x3, 0x6be1}, {0x0, 0x8001, 0x10000, 0x7ff}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0x1}, {{0x2, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x74, 0x2, 0x0, 0x0, {{0x1ff, 0x0, 0x3}, "d0703fbeae011c5e9106c1b748fe0738de2f4676ab1a9b9ee91bba2b3421a1e16d45e2f6de0a0dcc064d863869a78942225a2c6dcf73b39b17fb06ba22f493049801acb616b70f955579ba1a524cad63be175f1bea60b33d0b13cb10c8b7f428f06dccce00"}}, @TCF_EM_IPT={0x14c, 0x2, 0x0, 0x0, {{0x3, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x17}, @TCA_EM_IPT_MATCH_DATA={0xfd, 0x5, "10c86bb3a3d1c73f849f8802d60232f1eb573b8102046e55f01ac83256b55e208fafe376c96b93876159c8e8b870e48276e29d762fc9de64dbdc111752ade23cf34caee7e5ebdbf6f8bee335c18f59b7d3466dc79e6473af7c47ee0efeb51f0866449df1c67e216d1e6b60751591d59b8a6ce6fa2ceb465a3b165bf7a902fa3e39f0b289e69d01d95598eb695c0f37f3a23e1757ccbc2bfbff04391ed0ef7489c6a71e8a4b44ace8fa9a78e3e4a5910937384f8cea98ea41c2a3b0ce2625c64edc7a256bfb41c2f5a14f8b34b23f2912278da02dec8364f887c0ff6be5f3f9366cdfec8fe4822f8a125306ad4cc41f32f0a1c464c3a61b675d"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xc1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}]}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x4, 0x2, 0x9}, {0x8, 0x3, 0x0, "53751a"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x0, 0x8, 0xb}, {0x2, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x1fc, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x104, 0x1, 0x0, 0x0, {{0xb94, 0x9, 0x3ff}, [@TCA_EM_IPT_MATCH_DATA={0x6, 0x5, "3296"}, @TCA_EM_IPT_MATCH_DATA={0xde, 0x5, "1378af5283725326a62d457f373c819f365d336072c3a131a5b1f4a438be65004d1a195c5850a5b048c28c7e57d401b0e3d721e007fac28bf5368e9a29268859d2c8b75997893bea1e59589d39bbc88a6c7fb3b2f5210dc6613e1962bdf79db0897c104abcad378ee77a5f5d7038185fbd166d18df20302fc90835703e318b2aca5e32fc784ffd7cb381e2016e037120da34a18da9cc68dbc194763ef62034f18a2c45a19dddf640e8f959f0e0429482041117dad1606e44cd2739d34ca4b4aa69657ac6a90c9add2ddefc50590c951005b35f91a2729d81b10e"}, @TCA_EM_IPT_MATCH_DATA={0x8, 0x5, "1b211183"}, @TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xffff, 0x8, 0xfffa}, {0x3, 0x6, 0x2}}}, @TCF_EM_IPT={0xc8, 0x2, 0x0, 0x0, {{0x1}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x9c, 0x5, "73dec09770f50578f4866c84edd0c510814f28e638ed093c49988317892ea153c8971eb3aeea5bd002a180b91de70545f67ea5835adc39724d206caebe302a8f278fda0f822f5b86d61862f4a1f98ec062122e7363cedaa3647c9c7f4c4fe9a11572d89a1d54a4e8afe962ce4277fc9175cd884fb34fe11999234b8b7d16c30105601362a00e3cdcb6e6839474065544c42c2204ee23378e"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xff}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8e}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x23b, 0x3, 0x7}, {0x4, 0x4, 0x5, 0x10001}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x2, 0x2, 0x7}, {0x4, 0x7, 0x0, "fd93bbebd703e3"}}}]}]}, @TCA_BASIC_ACT={0x47c, 0x3, [@m_connmark={0xb8, 0x14, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x9, 0x7, 0x7, 0x7}, 0x80}}]}, {0x69, 0x6, "934416d7c546486c15ad80e878483df8e5f355cc14eac2065521a12b91315b6b8a2ce08ce73cfa8677898fd1360a566c03a6c6577aad63a72b5b7e03f98de5da0ce3f7564804cc1340b4864215d0a47f5cb7ea87113d416f300658a360fa0f582819155331"}, {0xc}, {0xc, 0x8, {0x5, 0x1}}}}, @m_skbmod={0x60, 0xf, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x1d, 0x6, "5b5f9292f355369159b8d32dbce23a77012a16c3f7b813d687"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0xac, 0x14, 0x0, 0x0, {{0xb}, {0x4}, {0x7d, 0x6, "893ae1e0f36e18596e4eb5ec6c5fdab9e4b0d288a54987637f3a97b522aff81616de4e4f0fa742802066266fa427807461b2a89eaa01015ed5c757282c4fa615792e5b3acf8f96c4442b2b557519df280bcc01d14234cc062fd5b2bca4b694a080d96f5dcda3769b48df0581c7205605017cb7feb4854032ee"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0xd8, 0x17, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x2, 0x6, 0xffffffff, 0x7f}, @private=0xa010100, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x2, 0x0, 0xb15, 0x7f}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x1}}]}, {0x5e, 0x6, "d2432119d48e68f0e930ebda32444d030c72da4a6788418d0b44e3cbb641aedf3a5a9b3f0315ec5de64309bbb807de023c111eab412dc9eb122122726ec5fd619b60de9d319dd19a0750f8ed9fd981f1b4e2ab471e9b0368a9a8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0xbc, 0x18, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x4, 0xd2f6, 0x5}, 0x6c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x8, 0x8, 0x5}, 0x56}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x8, 0x3, 0x3}, 0x40}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7e948cdb, 0x6, 0x7, 0x7fff, 0x400}, 0x5e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x168831a7, 0x10000000, 0x8, 0x2078}, 0x78}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0x120, 0xe, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x8, 0x2}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x7, 0x7, 0x80000000, 0x7}, 0xa}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000, 0x7, 0x20000000, 0x4, 0x9}, 0x3e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x686, 0x8, 0x4, 0x8, 0x6}, 0x64}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe8, 0x1, 0x8, 0xfffffffe, 0x7f}, 0x63}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfff, 0x9, 0x8, 0x2, 0xd2}, 0x3f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x5, 0x2, 0x9}, 0x45}}]}, {0x30, 0x6, "f58ef10b319db19f97bdcad5b5602c9243ed7e8d047433dd643ae36a23868ab3900466daad4a845e7eff6021"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BASIC_ACT={0x310, 0x3, [@m_skbmod={0xc4, 0x18, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xd, 0xba86fb7356034ed5, 0x40, 0x101}, 0xc}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x42, 0x9, 0x5, 0x4, 0xdcfc}, 0x5}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, {0x21, 0x6, "941e7b9712793e4beed499afa0c737dd3c5e476fac07e29ea81192f5f4"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_gact={0x11c, 0xe, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0xb42, 0x20000000, 0x5, 0x80000001}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xeb, 0x8}}]}, {0xc9, 0x6, "0d60aca4251da9fc9803cbe682f4e077128c30f75bf1793b4a3c36815a4b74987374c8c966a7d4e2d2eecaa56060a5d4769070ea693ea659eb6f1485edc71dfeec42e3fb76cb13f5a895e402ca52ec34ea5dfc3c06f40f5c496d6de6376e506ce133af4f19df73273b9166dec08cbe75ca86b6934f8d17c9ce82d5fb12e756effaf4ed99ed76c9b30632eacf40540f27b51626a974e84b1e3cdbe73bb5feb20dd6dbaddc99aaa6eccca3f0c1ac59d7e000fb258e4134cc5075448bfcdf187da1b6e2d3af78"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x12c, 0x1d, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3b}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0xb}}]}, {0xf0, 0x6, "25b0eadbe245d947520d5391256ae7d60d531788cf4c023ac7f2d15a6817feba5d5268da085e00cdbf87ccc440d52b8451be53f015cc489ab2813f7a0223ce226576013b99026d1bad5dbc750fee048809ea200eb9fdbbd663e37e1db8ed722de33be15badc7e659733413f184ebd6ec5638c014e0d4755564c56ad5f8868b045df2e2c4e4b2d25425100404cfbd0f45802209de4f510cd5f1ecdac72b8f2bc481ea1f87d3269823cfd495d42f096ca98dd48bfaa9e7fb1b49c775c9a371f766ca57223fab9ed52f99e183aeab9e6b4bb0e57bee703d9225070e73df5c4710ed957338826ea3685ea08fcf6e"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_BASIC_EMATCHES={0xd4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x80, 0x3, 0x8001}, {0x40, 0x3, 0x3, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x98, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3, 0x7, 0x2}, {{0x2, 0x0, 0x1}, {0x3}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x9}, {0x0, 0x5, 0xad, 0x5, 0x1, 0x2, 0x2}}}, @TCF_EM_IPT={0x58, 0x1, 0x0, 0x0, {{0x6, 0x9, 0x800}, [@TCA_EM_IPT_MATCH_DATA={0x4a, 0x5, "83685ac51e10a31522c20ea6a13c7dab0839da4d2d618e4ebc1f05d271aacb7c6ba61d4f5768828a19ad55d27209dbb3d8cb3b5f0c6cf8f42e04fbb2e883b7423d1a76d393c8"}]}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x0, 0x2, 0x1000}, {0x7f, 0x0, 0x1}}}]}]}]}}]}, 0xd0c}}, 0x20000000) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a000000160000f7ff0000007700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117300000000008510000002000000eaec4d720000000000000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) (async) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000380)=0x2, 0x4) (async) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="6802000000050104000000000000000003000006540201000200000000020000800904000100160073797a31000000000000000000000000000000000000000000000000000000009f95cf5a03ab4df3f0f3d0941074d2f18faf184d23b6cf52e8c676c218b39b335a19d528faa003da54c821603e499a3e11b3efe2be7aafa9680b20"], 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) bind(r5, &(0x7f00000002c0)=@in={0x2, 0x4e20, @loopback}, 0x80) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x4010, r9, 0x952de000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) accept$unix(r7, &(0x7f00000000c0)=@abs, &(0x7f0000000340)=0x6e) 1.097393753s ago: executing program 3 (id=7139): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={r1, 0x9, 0xc, 0x1}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000100)="37786c1f7afc15f18f942b706cd23ff4e4b8d07a3910321b172e420734395afb0e08d5a8a9a434530387a0d0e7c963aefbdaac2674506d9ea3f3f9551020be94294681473467c24b0a841a0ebd2fc7e6f8f274916abe2e9eb94b5a6fa77060f803f9c52ba656616ed91793869a", 0x6d, 0x800, &(0x7f0000000180)={0xa, 0x4e22, 0x1, @empty, 0x3}, 0x1c) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f00000001c0)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200)={0x401, 0x0, 0x53b, 0x9, r1}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000280)=r4, 0x4) sendmsg$inet6(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="c8e10d040858a86f6214d5538310c3817c9bfcc7271c8692433f0255015df425d7416a361085cfbdb6944acb4885b1a605564c7c553277781a1791e0a53ddf2d73cfc4f025aff803d2e5b8d6d56cd609e50e70f426294c0ff04ada9d688110c22d613ecd82896515d25fe43cd846380724d3d93e16ef0f589cdcb3cb0ad36020018397b74648d9ba85ffacaf0c2a710b99ac2b2fb0dd2b4c57f92ef2c1c2424cdad14e675766292716b92428669be02c20d0656b8000b8f3b8963b20f56017cc758309dc8a771729b8b15e685b2efa87e0ee65951da7dffa863ac74bc7c09307152501d9", 0xe4}, {&(0x7f00000003c0)="cf3e135307ff558a5b8f34e2ad437615fced594bf2c7b9da00c67e8673dde0f30cb6d7883fc85c68552d2c386cd0200e4e6958daceb9b312b14f3049fb6527f1eb25fbc065411549144b53ae425c87aa84aa63d247db55a468180239cf6c27b7e97394b895cf6b9b37701230bb675a271c9ffdc0312597", 0x77}, {&(0x7f0000000440)="2471d3824cd8d9454ddae66f54ad21ac454626cb85b5836364aba8aa10bea5269ed0ee2fa6833bc808aff2bf", 0x2c}, {&(0x7f0000000480)="9b3a94cad25e761cc2b93906aa1b3347b343515f82b465cb1d3ec291a0bc9cef724e22bc05fa5a237c26d9e2bc90e26174", 0x31}, {&(0x7f00000004c0)="b68b84d30275c50207ed528b5edf42387b44c372995f21be615f27bfb28645c603f6bf72802145", 0x27}, {&(0x7f0000000500)="ecc1f4b62753207ce8b4b57733e29c3ea5a20ba890d1347d5b603765f5f4f0c1aee4", 0x22}, {&(0x7f0000000540)="510fc8fae6ee55075b5c6a15865d3dcd6a6a56703703465a7b2c6a047ad9cd81d95071b7313222972db15e7c4dee46d0277a3a1794d074e4f16e911e3d94672a14ee9ae1d2dd447c5bdcd44f64187e1739140fca893174504342e918a87628eb98ef08de1c1948a2dc4463798562167b57ac9a426c18ad30f42d5bb7c4fb721a2621a61e9d5259e954309f1cff015f2bb97aca6249017a900e738025195523387888cfc35516f7dc2b13b17fca50b11ca4456b102d826163b228f59706354d924e16c6e320afb640d0d6670e530ff697898054fe49", 0xd5}, {&(0x7f0000000640)="2ee9d26ac16cddb6f5a42f43166cae", 0xf}], 0x8}, 0x8000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000740)={r3}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r6, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x400, @media='udp\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4008014) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x20001, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000940)={'macvlan1\x00', @remote}) r8 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000980)={r4, 0xd7, "e729fbef73922e090dc2e79abda4063bc2f49a01ac295fa900bf6298a98ea3c16ae7f771c002ab4cb94a1c191d05bd3d38aa09fb60542f40b4c3d1cde115b5ff237a146d212547bc5d2960dedf1aac98ca9b56c07389bc758dd8a793ec03aae414a48c988c12b90b1ec2b116a47cba88d7e1d0bcd018b73d2e43288066d0c72dc6da057cf66e7769c6d628dec5b312a22891faef6e6ae410586d592d34a1916cead0f0c895ecb1c0dfafcccc87ba5dbb553eca5a617a3c877074fbce73355a9a73c278122626b0075f436ddb660ba938d212f6ebf062b4"}, &(0x7f0000000a80)=0xdf) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000ac0)={r9, 0x1}, 0x8) setsockopt$llc_int(r5, 0x10c, 0x2, &(0x7f0000000b00), 0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000b40)={r4, 0x381, 0x8}, 0x10) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000b80)={'vxcan1\x00', 0x0}) sendmsg$can_j1939(r10, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x1d, r11, 0x2, {0x2, 0xd206c46dab6c80ff, 0x1}, 0x1}, 0x18, &(0x7f0000000c80)={&(0x7f0000000c00)="448e8a41ef8388f9e452c166142dadfbae917f77702aca8d4bf5e7fba3e39a346569a3d50bd221e8f5f12c73838232b02c0624e7287f2bbe720db2ef13a9ee46e7107e04e9cf0e10e74341ee5236c7237415020ee6e0f0ce65", 0x59}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x20004090) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), r5) sendmsg$BATADV_CMD_TP_METER(r12, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r13, 0x208, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) r14 = getpid() sendmsg$nl_generic(r5, &(0x7f0000001380)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x231d0000}, 0xc, &(0x7f0000001340)={&(0x7f0000000e80)={0x488, 0x3a, 0x400, 0x70bd29, 0x6, {0xa}, [@nested={0x1fe, 0x6f, 0x0, 0x1, [@typed={0x4, 0xa5}, @generic="9404c8a811c0fb7e9f29308c6b3a47222108fece91bfcad57698a3557ea70cf4e87f40c54e95c1aa4fb519eec9d7fb4d463efbd264299d5b5fd9846a3ba2ecb04ce5367aa292bcb7f9dcce16161eb37ac22c70d9274dd152b765be1c21cce1dc62ee5de1fec92edb5db3069439a3eade3f461efb4d4f8fad638c4aab2a16f911ad5b7a2c103d97dadece46a25e6d2d8d8dc9c87f6c75c3c792bcebcf7b69d41a87816313a466a9e1677b18c4c25a83d666769d3753ee4f0a35c21e3bd5e81ea6683b9c951ebb9ea573c847d05b2bd35b6eaf34a2ef9aefa7862095", @generic="367883afca47c5d90380e731b383ad6a290f289942a4e039659d4e9e6b70de16a2477a8bb6778673c79512de6cb21446c3def8273622eda04b3c6d22b22a71befbae374eb5f97c233e4146a06331a1738e0797cb1a752ab73897b521d601e3ba046ed1c970acff6b4e8484df0442dc4954dcc4f5d47c61b311c0a1c9ebdffd5a5fa1ccf8f4934d3c50e03997558c8282c85e7242284f16108dd13b405d1bde7046ac1f89d467c8ecde507a9099a86f5afc0e80fb3733e34c4106318b1f8d2df96aa6eac5c88557cebebea19e854a57299721e7fb945c52b72e6f353bd50ce2d4121097a66eaffda6f06118597dbf39182244c6fad817b5e673453b0fc7718f", @nested={0x4, 0x10c}, @nested={0x4, 0xe3}, @typed={0x14, 0x44, 0x0, 0x0, @ipv6=@empty}]}, @nested={0x10, 0x22, 0x0, 0x1, [@nested={0x4, 0x9a}, @nested={0x4, 0xf7}, @nested={0x4, 0x10b}]}, @nested={0x111, 0xd0, 0x0, 0x1, [@nested={0x4, 0x144}, @nested={0x4, 0x149}, @typed={0x8, 0x158, 0x0, 0x0, @uid=0xee01}, @nested={0x4, 0xc7}, @generic="348e76b0deb30777e5d8badc87542e26f2dabd8cea1b5b399166473e29fffad54a5b0b48f4b675dac59f033ae3ffa136ace0732cd35b9ff0d3292075235fbaa7173805f90f45dc922681938b223ccf0eb0ccb35257b6a2bbff8c5353ee6205a8d5322ad0a04027e9554dc0521481b225debd99e05b4335b50c3391ce06c947b2cd80e9b5004d61c6776bdc3a23020be9d97c2a460a212c107d65c98b7342bf5b9ceee315a05745e26a10529807dee570145f85eee0bd5081e995d5a46aa6cc74481cb52e2a84997dfeed459e9b96992298a85e29", @typed={0x8, 0xe2, 0x0, 0x0, @pid=r14}, @generic="1116af8b86899a9fd39dfcc61515f3b3cf5fc443a9915a5867dc0e8e47"]}, @nested={0x146, 0x7, 0x0, 0x1, [@generic="12e1f7488f555ac75ba4e0ebcc1d2e42d71e9f37cf3ec833d78ed660a404cedf9f900c823f25c7efed2d230a5a0d79ec3d2adf97773c3894f3a3b353cfcb8057ad7ef678d2dc2b1d6aa7deddcee3880b7402d241aacb", @generic="359653f2dd330fdf1f49", @generic="24c88d83caf1336d8c149fdb64a2d0b095aab47ea5da1275f80fedbdec8cc1ed79d129b66dc7e1e5f102f974bf33a910796efbc8dd558da7ce4f757d67f1ffa42954c04c26dfb41da1097943769ca07c4c945c78d0952fe4c2159176783ce21e7561980faea74964c18ead5c753bf7ef9d4bfcbc730d6194c7161addaab887caa36555b9a5d3aa2b83e6e304c190ad058784ae095ffb3d6edc0a8ddd48e227edeb17b8b9c0ba", @typed={0x3a, 0x5d, 0x0, 0x0, @binary="ce9010b4aba7bd1306f74289185dddae7134bf874a765a25f9e40c8d2c0aec4d420640ea8337fb4d21cba090752a43af7acc5d90da24"}]}, @typed={0x8, 0xd7, 0x0, 0x0, @uid=0xee00}]}, 0x488}, 0x1, 0x0, 0x0, 0x20000800}, 0x24000001) 1.07784103s ago: executing program 2 (id=7140): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) (async) shutdown(r2, 0x0) (async) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x38, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}}, 0x20400e0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000480)={r3, 0x8}, &(0x7f00000004c0)=0x8) (async) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) (async) bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000001500)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x20}}], 0x48}, 0x4000000) 929.383613ms ago: executing program 0 (id=7141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa00}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003b000100000019831ab3fa4312"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) 788.314234ms ago: executing program 2 (id=7142): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2, 0x3, 0x8}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x0, 0x0, 0x200}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={0x30, 0x41, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x47}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x4, 0x0, 0x1, [@generic="f3"]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r2, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf61000000000000070100000400000085000000a0000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r6}, @CGW_SRC_IF={0x8, 0x9, r6}]}, 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0x8, 0x4) 614.160545ms ago: executing program 0 (id=7143): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000680)={0x1a, 0x28, 0xac, 0x4, 0x3, 0x4, @multicast}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffe}]}}}]}, 0x3c}}, 0x0) 242.086689ms ago: executing program 2 (id=7144): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="1154f101d7027a0af55b2225fcb52dd9185ff2ddc4941bf5a8a692aa84fbd7a21181bef524b86d2a38ff77b13680af279f8e267fcd0703c8ff0ece97ae2cecfa3f16bf73928d80", 0x47, 0x2005c844, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @local, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="8211", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {0x0, 0xfff1}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x2204409c}, 0x40004) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYRES16=r1], &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8c30}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0xe}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 240.93129ms ago: executing program 3 (id=7145): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000ac141400000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00150000000000010400000c000800080008000000e0"], 0xd8}, 0x1, 0x0, 0x0, 0x44400}, 0x0) 232.308486ms ago: executing program 1 (id=7146): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000010000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006000000000002004374ffffffff000000000000000008001900000000000a00", @ANYRESDEC], 0xc0}}, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_emit_ethernet(0x2f, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff08004500003100000000002f90780000000000000000000088be002d90786b8b836832"], 0x0) (async) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x80080, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x437, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000480)={'vlan0\x00', @remote}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000007fffffff0000000200100000e9000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) (async) r5 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f00000001c0), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x28}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a00000000000061118400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b40000000000000069105d000000000004000000000000009500000000000000697ad38f7ba536ceff57000000000000000530278a99551bc11dd7c740ccd0d282c1cbc673d7dbe613ff96716a505c62d25a88ca97237fe935982ed95383c6525bd5c94966be2e1bf5f00550cfe98b8bece9c7152008"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe1b, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd81}, 0x48) (async) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x2d, 0x2, 0x0) connect$netlink(r8, &(0x7f0000000140)=@unspec={0x2d}, 0xc) (async) r9 = socket$netlink(0x10, 0x3, 0x15) writev(r9, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000280)={r1, r1, 0xc, 0xa1, &(0x7f0000000380)="002f67e6adf5295fb3555c3a8dbf94689a9c171857bfbbd3a3b29dd3c74e1894b893c4edacb7ee8db098f940b355a39f36fcaefa8aa288bdcb1bda55abd8aa7421b94e2e6e71db229587ba32bdcf522ccf16181af13999a8536cd060fdb037af735f568538e27223b9838d27ca159fd32bcb7d4193b5bfebd3b0761d41a17c95ce551bcd49eece63e28b47328931050a7b68ad868a863a628c9d21000000000000", 0xb, 0x1, 0x4c4a, 0x4ff, 0x9, 0x1, 0x1, 'syz1\x00'}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00', r6}, 0x18) (async) r10 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000040)=0x10, 0x80800) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000000c0)=@ethtool_eeprom={0xb, 0x5, 0xa, 0x89, "fd6ed4b07a5dea16a0fc59154c504368c30766fab110206bd1e3ec5a0cd69ce3ee32916579515b27dfe7ed6b3c71f98860b200710afb391547fe229f85b45423b4bca8e4a6e9b1628448fc6061954f5b24399a2b548c1873f3cbc28f689cf39fa2587468b883d884d0e2328c33b9ac9c1945805f2239dc9210b8bf9baf9cc87deaa67dff5bc494e717"}}) 113.01107ms ago: executing program 0 (id=7147): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="5402000017000100000000000040523ee83c00000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) (async) ioctl$sock_SIOCSIFBR(r1, 0x8941, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) read(0xffffffffffffffff, 0x0, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0xffff}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100230100003402000003000000400001800d0001007564703a73797a30000000002c0004001400010002007530ac1414aa00000000000000001434020002007530ac1414bb0000000000000000"], 0x54}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 111.844263ms ago: executing program 3 (id=7148): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x50}, 0x1, 0x7}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x80040}, 0x24000040) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x5c, 0x3, 0x0, 0x4, 0x0, 0xf0}) 0s ago: executing program 3 (id=7149): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') read(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@deltaction={0x0, 0x31, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'ife\x00'}}, {0x0, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x7fffffff}}, {0x0, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xb1}}, {0x0, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x3}}, {0x0, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x6}}, {0x0, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xffffffff}}, {0x0, 0x9, 0x0, 0x0, @TCA_ACT_INDEX}, {0x0, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'xt\x00'}}, {0x0, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'police\x00'}}, {0x0, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xec}}, {0x0, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x6}}, {0x0, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'csum\x00'}}, {0x0, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x3}}, {0x0, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x80000041}}, {0x0, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xf}}, {0x0, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}, {0x0, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'tunnel_key\x00'}}, {0x0, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'csum\x00'}}, {0x0, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd29, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01000000000000000000010000000900010073797a3000000000a40000001f0a01000000000000000000010000000900010073797a3000030000090002003f20000000000000780003"], 0x11c}}, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x34, r10, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x1a, 0xf3, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x4000000) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r11, 0x84, 0x10, &(0x7f0000019080)=@assoc_value={r12, 0x7f}, &(0x7f00000190c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={r12, @in={{0x2, 0x4e22, @multicast2}}, 0x3ba2, 0xfffc, 0xfffffffb, 0x101, 0x22, 0x1, 0x6}, &(0x7f00000003c0)=0x9c) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r13, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) syz_emit_ethernet(0x28, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1f810042000011d4fc951727ec0e7b11dfbfd13b139d3e51debee296b2"], &(0x7f0000000180)={0x0, 0x1, [0x756, 0x9f, 0x783, 0xef1]}) kernel console output (not intermixed with test programs): VQ 0x0 after dequeue, screwing up backlog [ 660.467537][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.467949][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.468372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.468791][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.592563][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 660.602741][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 660.604079][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 660.621604][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 660.622337][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 661.527540][ T5756] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.527577][ T5756] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.760028][ T5756] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.761272][ T5756] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.918265][ T5756] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.918300][ T5756] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.110623][ T5756] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 662.110657][ T5756] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.227911][T28781] bond8: Removing last arp target with arp_interval on [ 662.709353][ T5616] Bluetooth: hci0: command tx timeout [ 662.766092][T20755] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.947903][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.949188][ T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.951248][T28710] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.953495][T28710] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.953658][T28710] bridge_slave_0: entered allmulticast mode [ 662.962229][T28710] bridge_slave_0: entered promiscuous mode [ 662.989777][T28710] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.989945][T28710] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.990116][T28710] bridge_slave_1: entered allmulticast mode [ 662.997612][T28710] bridge_slave_1: entered promiscuous mode [ 663.056644][ T5756] veth1_to_bridge: left allmulticast mode [ 663.056670][ T5756] veth1_to_bridge: left promiscuous mode [ 663.056839][ T5756] bridge0: port 5(veth1_to_bridge) entered disabled state [ 663.063881][ T5756] bond7: left allmulticast mode [ 663.093909][ T5756] bond7: left promiscuous mode [ 663.104297][ T5756] bridge0: port 4(bond7) entered disabled state [ 663.118789][T28841] __nla_validate_parse: 6 callbacks suppressed [ 663.118808][T28841] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5831'. [ 663.121377][ T5756] vlan3: left allmulticast mode [ 663.121393][ T5756] geneve0: left allmulticast mode [ 663.121408][ T5756] vlan3: left promiscuous mode [ 663.121419][ T5756] geneve0: left promiscuous mode [ 663.121748][ T5756] bridge0: port 3(vlan3) entered disabled state [ 663.179039][ T5756] bridge_slave_1: left allmulticast mode [ 663.179063][ T5756] bridge_slave_1: left promiscuous mode [ 663.179231][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.183170][ T5756] bridge_slave_0: left allmulticast mode [ 663.183191][ T5756] bridge_slave_0: left promiscuous mode [ 663.183365][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.235368][ T5756] erspan0: left allmulticast mode [ 663.235392][ T5756] erspan0: left promiscuous mode [ 663.235714][ T5756] bridge2: port 1(erspan0) entered disabled state [ 663.266551][ T5756] batadv_slave_1: left allmulticast mode [ 663.329686][T28854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5834'. [ 663.381210][T28851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5834'. [ 663.381241][T28851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5834'. [ 663.550564][ T5756] bond11 (unregistering): (slave ip6gretap1): Releasing active interface [ 663.740555][ T5756] bond2 (unregistering): (slave geneve2): Releasing active interface [ 663.791819][ T5756] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 663.791846][ T5756] bridge1 (unregistering): left promiscuous mode [ 663.819810][ T5756] bond13 (unregistering): (slave bridge3): Releasing active interface [ 663.860722][ T5756] bond1 (unregistering): Released all slaves [ 663.905330][ T5756] bond2 (unregistering): Released all slaves [ 663.923631][ T5756] bond0 (unregistering): (slave bond5): Releasing active interface [ 663.924711][ T5756] bond0 (unregistering): (slave bond6): Releasing active interface [ 663.947291][ T5756] bond0 (unregistering): Released all slaves [ 663.954672][ T5756] bond3 (unregistering): Released all slaves [ 663.974491][ T5756] bond4 (unregistering): Released all slaves [ 663.993104][ T5756] bond5 (unregistering): Released all slaves [ 664.012148][ T5756] bond6 (unregistering): Released all slaves [ 664.026170][ T5756] bond7 (unregistering): Released all slaves [ 664.033560][ T5756] bond8 (unregistering): Released all slaves [ 664.054293][ T5756] bond9 (unregistering): Released all slaves [ 664.080733][ T5756] bond10 (unregistering): Released all slaves [ 664.094538][ T5756] bond11 (unregistering): Released all slaves [ 664.109478][ T5756] bond12 (unregistering): Released all slaves [ 664.135506][ T5756] bond13 (unregistering): Released all slaves [ 664.142450][ T5756] bond14 (unregistering): Released all slaves [ 664.197613][T20768] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.223926][T28710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.331376][T28854] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5834'. [ 664.374098][T28710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.569447][T28870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5837'. [ 664.569632][T28710] team0: Port device team_slave_0 added [ 664.570539][ T5756] : left promiscuous mode [ 664.684289][T28710] team0: Port device team_slave_1 added [ 664.794451][ T5616] Bluetooth: hci0: command tx timeout [ 664.809427][T28710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.809444][T28710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.809465][T28710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.811944][ T5756] tipc: Disabling bearer [ 664.812092][ T5756] tipc: Left network mode [ 664.819980][T28710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.819994][T28710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.820016][T28710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.884606][T28886] net_ratelimit: 53 callbacks suppressed [ 664.884624][T28886] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 664.968290][T28710] hsr_slave_0: entered promiscuous mode [ 664.968902][T28710] hsr_slave_1: entered promiscuous mode [ 664.969536][T28886] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5840'. [ 664.969554][T28886] netlink: 21 bytes leftover after parsing attributes in process `syz.1.5840'. [ 664.969568][T28886] netlink: 21 bytes leftover after parsing attributes in process `syz.1.5840'. [ 665.401560][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 665.633319][T28910] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 665.633353][T28910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 665.784409][T28710] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.859779][T28924] validate_nla: 59 callbacks suppressed [ 665.859797][T28924] netlink: 'syz.4.5849': attribute type 11 has an invalid length. [ 665.937491][ T5756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.937516][ T5756] batadv0: mtu less than device minimum [ 665.940705][ T5756] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 665.942247][ T5756] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 665.943768][ T5756] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 665.945418][ T5756] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 665.948052][ T5756] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 665.949591][ T5756] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 666.078634][ T5756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.081269][ T5756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.118087][ T5756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.120934][ T5756] batman_adv: batadv0: Interface deactivated: dummy0 [ 666.120956][ T5756] batman_adv: batadv0: Removing interface: dummy0 [ 666.190608][ T5756] veth1_macvtap: left promiscuous mode [ 666.190664][ T5756] veth0_macvtap: left promiscuous mode [ 666.190787][ T5756] veth1_vlan: left promiscuous mode [ 666.190851][ T5756] vD$“`: left promiscuous mode [ 666.876567][ T5616] Bluetooth: hci0: command tx timeout [ 667.111977][T28710] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.173344][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 667.223007][T20824] batadv4: left promiscuous mode [ 667.476142][T28710] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.523709][T28973] IPVS: Unknown mcast interface: macvlan1 [ 667.541792][T28979] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 667.551713][T28973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5858'. [ 667.551745][T28973] netlink: 'syz.3.5858': attribute type 10 has an invalid length. [ 667.868357][T28710] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.193034][ T5756] IPVS: stop unused estimator thread 0... [ 668.301778][T29018] netlink: 'syz.4.5868': attribute type 10 has an invalid length. [ 668.302118][T29018] veth1_macvtap: left promiscuous mode [ 668.362978][T29018] : (slave macsec0): Error -34 calling dev_set_mtu [ 668.858680][T28710] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 668.871493][T28710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 668.873861][T28710] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 668.899718][T28710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 668.945836][ T5616] Bluetooth: hci0: command tx timeout [ 668.952901][T28710] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 668.972628][T28710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 668.980428][T28710] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 668.996353][T29046] __nla_validate_parse: 2 callbacks suppressed [ 668.996371][T29046] netlink: 13 bytes leftover after parsing attributes in process `syz.3.5872'. [ 668.997148][T28710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 669.143207][T28710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.173811][T28710] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.192434][T20824] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.192522][T20824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.219501][T20824] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.219616][T20824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.666864][T29081] team0 (unregistering): Port device team_slave_0 removed [ 669.701917][T29081] team0 (unregistering): Port device team_slave_1 removed [ 669.756794][T29081] team0 (unregistering): Port device dummy0 removed [ 670.046631][T29102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5884'. [ 670.046652][T29102] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5884'. [ 670.579600][T29133] sctp: [Deprecated]: syz.1.5887 (pid 29133) Use of struct sctp_assoc_value in delayed_ack socket option. [ 670.579600][T29133] Use struct sctp_sack_info instead [ 670.625241][ C0] net_ratelimit: 43 callbacks suppressed [ 670.625262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.625848][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.626299][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.626804][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.627245][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.627669][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.628107][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.628588][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.930960][T28710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.082388][T28710] veth0_vlan: entered promiscuous mode [ 671.106733][T28710] veth1_vlan: entered promiscuous mode [ 671.199159][T28710] veth0_macvtap: entered promiscuous mode [ 671.218336][T28710] veth1_macvtap: entered promiscuous mode [ 671.242892][T28710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.272630][T28710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.366251][T20741] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.435839][T20741] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.436752][T20741] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.436808][T20741] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.487188][T20768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.487209][T20768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.542634][T20741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.542654][T20741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.999914][T29194] tun0: tun_chr_ioctl cmd 1074025675 [ 671.999934][T29194] tun0: persist enabled [ 672.017314][T29195] netlink: Invalid conntrack helper [ 672.017360][T29195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 672.032955][T29184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5900'. [ 672.296253][T29216] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5905'. [ 672.357706][T29216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.375697][T29216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.399475][T29216] bond0 (unregistering): Released all slaves [ 672.475643][T29221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5908'. [ 672.615846][T29236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5910'. [ 672.661785][T29236] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 672.662000][T29239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5909'. [ 672.663021][T29239] xt_hashlimit: size too large, truncated to 1048576 [ 672.663262][T29239] xt_hashlimit: max too large, truncated to 1048576 [ 672.663383][T29239] xt_hashlimit: invalid rate [ 672.757817][T29236] bond0 (unregistering): Released all slaves [ 673.163651][T29254] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5916'. [ 673.223201][T29267] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5917'. [ 673.516605][T29278] hsr0: entered allmulticast mode [ 673.516628][T29278] hsr_slave_0: entered allmulticast mode [ 673.516644][T29278] hsr_slave_1: entered allmulticast mode [ 673.523923][T29278] hsr_slave_0: left promiscuous mode [ 673.556884][T29278] hsr_slave_1: left promiscuous mode [ 673.598493][T29278] hsr0 (unregistering): left allmulticast mode [ 673.947155][T29309] Bluetooth: MGMT ver 1.23 [ 673.947190][T29309] Bluetooth: hci0: unsupported parameter 5161 [ 673.947203][T29309] Bluetooth: hci0: unsupported parameter 8192 [ 673.947214][T29309] Bluetooth: hci0: unsupported parameter 5161 [ 673.947225][T29309] Bluetooth: hci0: unsupported parameter 8192 [ 674.050729][T29311] virt_wifi0: entered promiscuous mode [ 674.239373][T29319] __nla_validate_parse: 2 callbacks suppressed [ 674.239388][T29319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5935'. [ 674.443704][T29322] geneve3: entered promiscuous mode [ 674.443728][T29322] geneve3: entered allmulticast mode [ 674.495791][ T49] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 19999 - 0 [ 674.503624][ T49] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 19999 - 0 [ 674.503756][ T49] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 19999 - 0 [ 674.543009][T29329] lo: left promiscuous mode [ 674.558172][ T49] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 19999 - 0 [ 674.976595][T29354] tipc: Enabling of bearer rejected, failed to enable media [ 675.261736][T29390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5953'. [ 675.296373][ T5616] block nbd2: Receive control failed (result -107) [ 675.335364][T29393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5955'. [ 675.657080][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 675.669589][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 675.673788][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 675.676262][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 675.690713][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 676.427502][T29443] netlink: 'syz.0.5965': attribute type 2 has an invalid length. [ 676.492605][T29408] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.494088][T29408] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.494580][T29408] bridge_slave_0: entered allmulticast mode [ 676.498138][T29408] bridge_slave_0: entered promiscuous mode [ 676.501355][T29408] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.501519][T29408] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.501662][T29408] bridge_slave_1: entered allmulticast mode [ 676.503434][T29408] bridge_slave_1: entered promiscuous mode [ 676.547495][ C0] net_ratelimit: 14 callbacks suppressed [ 676.547516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.555820][T29408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.563424][T29408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.654436][T29408] team0: Port device team_slave_0 added [ 676.659574][T29408] team0: Port device team_slave_1 added [ 676.698846][T29408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.698863][T29408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.698884][T29408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.700055][T29408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.700068][T29408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.700088][T29408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.735842][T20772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.736249][T20772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.737229][ T8742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.737917][ T8742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.804458][T29408] hsr_slave_0: entered promiscuous mode [ 676.809233][T29408] hsr_slave_1: entered promiscuous mode [ 676.811838][T29408] debugfs: 'hsr0' already exists in 'hsr' [ 676.811858][T29408] Cannot create hsr debugfs directory [ 677.087387][T29408] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.087422][T29408] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.198495][T29408] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.198517][T29408] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.275064][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.275559][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.276069][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.276545][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.276986][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.293079][T29408] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.293111][T29408] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.405430][T29408] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 677.405464][T29408] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.755246][ T5616] Bluetooth: hci5: command tx timeout [ 678.323862][T29396] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 678.362519][T29408] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 678.437381][T29408] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 678.438590][T29408] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 678.497090][T29408] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 678.500242][T29408] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 678.543763][T29408] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 678.562935][T29408] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 678.573446][T29408] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 678.843515][T29489] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5975'. [ 678.851398][T29408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.900661][T29408] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.920319][T20772] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.920446][T20772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.957289][T20741] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.957425][T20741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.154219][T29501] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5979'. [ 679.372585][T29513] ±ÿ: renamed from lo (while UP) [ 679.660014][T29524] syz.3.5985 (29524) used greatest stack depth: 18048 bytes left [ 679.709840][T29408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.835664][ T5616] Bluetooth: hci5: command tx timeout [ 679.871762][T29408] veth0_vlan: entered promiscuous mode [ 679.897310][T29408] veth1_vlan: entered promiscuous mode [ 679.941175][T29537] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5988'. [ 679.941210][T29537] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5988'. [ 679.983666][T29408] veth0_macvtap: entered promiscuous mode [ 680.001445][T29408] veth1_macvtap: entered promiscuous mode [ 680.051647][T29408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.080849][T29408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.136977][T20741] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.206916][T20741] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.207392][T20741] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.207438][T20741] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.239646][T29544] netlink: 'syz.4.5991': attribute type 58 has an invalid length. [ 680.239666][T29544] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5991'. [ 680.252548][T29543] gretap0: entered promiscuous mode [ 680.398222][T20772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.398243][T20772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.458243][ T5756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.458263][ T5756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.544994][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 680.814696][T29566] batman_adv: batadv0: Adding interface: syzkaller0 [ 680.814713][T29566] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.856325][T29566] batman_adv: batadv0: Interface activated: syzkaller0 [ 680.862429][T29563] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 680.913998][T29572] netlink: 180 bytes leftover after parsing attributes in process `syz.1.6001'. [ 680.918485][T29562] netlink: 'syz.0.5996': attribute type 1 has an invalid length. [ 680.936271][T29575] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 680.949923][T29563] batman_adv: batadv0: Removing interface: syzkaller0 [ 681.044216][T29562] bond10: entered promiscuous mode [ 681.047642][T29562] 8021q: adding VLAN 0 to HW filter on device bond10 [ 681.602773][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 681.614967][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 681.618886][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 681.622194][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 681.626286][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 681.828488][T20772] net_ratelimit: 19 callbacks suppressed [ 681.828506][T20772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.844594][ T8742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.845590][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.854082][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.884087][T29166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.907107][ T5623] Bluetooth: hci5: command tx timeout [ 682.472779][T29629] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6015'. [ 682.688491][T29642] netlink: 'syz.0.6020': attribute type 9 has an invalid length. [ 682.773464][T29647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6021'. [ 682.774203][T20741] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.879901][T29616] Bluetooth: MGMT ver 1.23 [ 682.955439][T29166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.030205][T20741] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.030238][T20741] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.030260][T20741] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 683.098301][T29663] netlink: 'syz.0.6022': attribute type 1 has an invalid length. [ 683.107451][ T8742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.231224][T29646] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 683.329810][T29663] bond11: entered promiscuous mode [ 683.330171][T29663] 8021q: adding VLAN 0 to HW filter on device bond11 [ 683.425150][T29675] 8021q: adding VLAN 0 to HW filter on device bond11 [ 683.425536][T29675] bond11: (slave ip6gre6): The slave device specified does not support setting the MAC address [ 683.425553][T29675] bond11: (slave ip6gre6): Setting fail_over_mac to active for active-backup mode [ 683.478485][T29675] bond11: (slave ip6gre6): making interface the new active one [ 683.478508][T29675] ip6gre6: entered promiscuous mode [ 683.483957][T29675] bond11: (slave ip6gre6): Enslaving as an active interface with an up link [ 683.551312][T20741] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.551347][T20741] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.551371][T20741] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 683.745666][ T8741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.750470][ T8742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.750562][ T5623] Bluetooth: hci3: command tx timeout [ 683.838518][T20741] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.840540][T20741] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.840571][T20741] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 683.941525][T29694] netlink: 'syz.2.6027': attribute type 15 has an invalid length. [ 683.986023][ T5623] Bluetooth: hci5: command tx timeout [ 683.995441][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.001236][T20824] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 684.001438][T20824] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 684.001488][T20824] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 684.005147][T20819] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 684.008170][T29694] netlink: 'syz.2.6027': attribute type 15 has an invalid length. [ 684.130075][T29703] tipc: Enabling of bearer rejected, already enabled [ 684.179072][T29705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6030'. [ 684.195927][ T5756] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.196019][ T5756] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.651511][T20741] dvmrp0: left allmulticast mode [ 684.672018][T20741] tipc: Resetting bearer [ 684.737400][T29730] xt_MASQUERADE: bad MAP_IPS. [ 685.055930][T20741] bond12 (unregistering): (slave ip6gre1): Releasing backup interface [ 685.055955][T20741] ip6gre1 (unregistering): left promiscuous mode [ 685.367742][T20741] bond0 (unregistering): (slave geneve3): Releasing active interface [ 685.446997][T20741] tipc: Disabling bearer [ 685.452871][T20741] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 685.452896][T20741] bridge1 (unregistering): left promiscuous mode [ 685.452915][T20741] bridge1 (unregistering): left allmulticast mode [ 685.471649][T20741] bond4 (unregistering): (slave bridge2): Releasing backup interface [ 685.508020][T20741]  (unregistering): Released all slaves [ 685.513054][T20741] bond1 (unregistering): (slave bond2): Releasing backup interface [ 685.513617][T20741] bond1 (unregistering): Released all slaves [ 685.528579][T20741] bond2 (unregistering): Released all slaves [ 685.551903][T20741] bond3 (unregistering): Released all slaves [ 685.569721][T20741] bond4 (unregistering): Released all slaves [ 685.581896][T20741] bond5 (unregistering): (slave veth3): Releasing active interface [ 685.581926][T20741] batadv1: entered promiscuous mode [ 685.603281][T20741] bond5 (unregistering): (slave batadv1): Releasing active interface [ 685.603310][T20741] batadv1: left promiscuous mode [ 685.621001][T20741] bond5 (unregistering): Released all slaves [ 685.636399][T20741] bond6 (unregistering): Released all slaves [ 685.643898][T20741] bond7 (unregistering): Released all slaves [ 685.674168][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.685731][T20741] bond8 (unregistering): Released all slaves [ 685.693013][T20741] bond9 (unregistering): Released all slaves [ 685.713519][T20741] bond10 (unregistering): Released all slaves [ 685.738404][T20741] bond0 (unregistering): Released all slaves [ 685.751398][T20741] bond11 (unregistering): Released all slaves [ 685.764298][T20741] bond12 (unregistering): Released all slaves [ 685.776514][T20741] bond13 (unregistering): (slave veth5): Releasing active interface [ 685.776541][T20741] batadv4: entered promiscuous mode [ 685.778818][T20741] bond13 (unregistering): (slave batadv4): Releasing active interface [ 685.778842][T20741] batadv4: left promiscuous mode [ 685.780455][T20741] bond13 (unregistering): Released all slaves [ 685.824851][ T5623] Bluetooth: hci3: command tx timeout [ 685.844936][T20768] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.844990][T20768] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.001248][T29763] xt_MASQUERADE: bad MAP_IPS. [ 686.012512][ T5275] 8021q: adding VLAN 0 to HW filter on device eth1 [ 686.022387][T29596] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.022448][T29596] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.022561][T29596] bridge_slave_0: entered allmulticast mode [ 686.023583][T29596] bridge_slave_0: entered promiscuous mode [ 686.036603][T29596] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.036705][T29596] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.036834][T29596] bridge_slave_1: entered allmulticast mode [ 686.038569][T29596] bridge_slave_1: entered promiscuous mode [ 686.180510][T29596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.206776][T29769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6045'. [ 686.220588][T20741] : left promiscuous mode [ 686.233678][T29772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6044'. [ 686.323933][T29596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.489317][T20741] tipc: Left network mode [ 686.517577][T29596] team0: Port device team_slave_0 added [ 686.539837][T29596] team0: Port device team_slave_1 added [ 686.623473][T29787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6048'. [ 686.729006][T29596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.729024][T29596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.729043][T29596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.736917][T29596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.736934][T29596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.736956][T29596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.739303][T29789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6049'. [ 687.018229][T29797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6051'. [ 687.088908][T29596] hsr_slave_0: entered promiscuous mode [ 687.111968][T29596] hsr_slave_1: entered promiscuous mode [ 687.112468][T29596] debugfs: 'hsr0' already exists in 'hsr' [ 687.112486][T29596] Cannot create hsr debugfs directory [ 687.113424][ T5706] net_ratelimit: 14 callbacks suppressed [ 687.113438][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.505127][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.600822][T29826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6056'. [ 687.753523][T29832] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6058'. [ 687.828210][T29836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6058'. [ 687.908601][ T5623] Bluetooth: hci3: command tx timeout [ 687.910637][T29830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.039205][T29844] IPVS: set_ctl: invalid protocol: 135 172.30.0.4:20004 [ 688.148295][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.464506][ T5275] 8021q: adding VLAN 0 to HW filter on device eth2 [ 688.497020][T20741] hsr_slave_0: left promiscuous mode [ 688.497835][T20741] hsr_slave_1: left promiscuous mode [ 688.532447][T20741] vlan0: left allmulticast mode [ 688.532462][T20741] veth0_vlan: left allmulticast mode [ 688.533209][T20741] vlan0: left promiscuous mode [ 688.533554][T20741] veth0_macvtap: left promiscuous mode [ 688.533980][T20741] veth1_vlan: left promiscuous mode [ 688.533999][T20741] veth0_vlan: left promiscuous mode [ 689.186135][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.827633][T29547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.928755][T29883] netlink: 288 bytes leftover after parsing attributes in process `syz.0.6065'. [ 689.985414][ T5623] Bluetooth: hci3: command tx timeout [ 690.134573][T29904] IPVS: length: 69 != 8 [ 690.180049][T29596] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.225261][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.308044][T20819] IPVS: starting estimator thread 0... [ 690.366948][T29916] IPVS: Scheduler module ip_vs_mh not found [ 690.405326][T29918] IPVS: using max 36 ests per chain, 86400 per kthread [ 690.902884][T29596] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.148616][T29925] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6070'. [ 691.269559][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.453135][T29954] __nla_validate_parse: 1 callbacks suppressed [ 691.453156][T29954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6075'. [ 691.453276][T29954] openvswitch: netlink: Message has 8 unknown bytes. [ 691.486511][T29954] netlink: 'syz.3.6075': attribute type 2 has an invalid length. [ 691.528706][T29596] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.559107][T29954] netlink: 8183 bytes leftover after parsing attributes in process `syz.3.6075'. [ 691.787226][T29968] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6079'. [ 691.810046][T29596] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.876048][T20741] IPVS: stop unused estimator thread 0... [ 692.043273][T29975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6080'. [ 692.266023][T29979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6081'. [ 692.310337][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.638092][T30006] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6088'. [ 692.642883][T30008] netlink: 576 bytes leftover after parsing attributes in process `syz.1.6087'. [ 692.683612][T29596] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 692.698652][T29596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 692.701056][T29596] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 692.741888][T29596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 692.744297][T30010] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6088'. [ 692.762587][T30006] xt_LOG: level 8 >= 8 [ 692.824874][T29596] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 692.832253][T29596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 692.850167][T29596] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 692.864481][T29596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 692.865543][ T8741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.918704][T30013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6089'. [ 693.069127][T30024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6091'. [ 693.392912][T29596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.461591][T30040] netlink: 'syz.1.6095': attribute type 11 has an invalid length. [ 693.492206][T29596] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.532851][T30042] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component [ 693.534010][T20819] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.534151][T20819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.554681][T20819] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.554837][T20819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.356702][T29596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.703713][T29596] veth0_vlan: entered promiscuous mode [ 694.721898][T29596] veth1_vlan: entered promiscuous mode [ 694.763164][T29596] veth0_macvtap: entered promiscuous mode [ 694.769298][T29596] veth1_macvtap: entered promiscuous mode [ 694.793425][T29596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.803498][T29596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.889627][T20768] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.916680][T20741] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.916833][T20741] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.916891][T20741] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.530475][T30042] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 696.673211][T20755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.673232][T20755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.751290][T20741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.751311][T20741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.858094][T30127] netlink: 'syz.2.6100': attribute type 2 has an invalid length. [ 696.932664][T30129] __nla_validate_parse: 1 callbacks suppressed [ 696.932685][T30129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6103'. [ 697.132744][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 697.150430][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 697.153381][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 697.154360][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 697.173010][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 697.558098][T30162] netlink: 'syz.2.6110': attribute type 3 has an invalid length. [ 697.558119][T30162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6110'. [ 697.876316][T18551] bridge0: port 4(syz_tun) entered disabled state [ 697.927183][T18551] syz_tun (unregistering): left allmulticast mode [ 697.927207][T18551] syz_tun (unregistering): left promiscuous mode [ 697.927287][T18551] bridge0: port 4(syz_tun) entered disabled state [ 697.958156][T30179] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6112'. [ 698.018281][T30181] openvswitch: netlink: Multiple metadata blocks provided [ 698.094534][T30184] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6115'. [ 698.317692][T30140] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.317863][T30140] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.318016][T30140] bridge_slave_0: entered allmulticast mode [ 698.319819][T30140] bridge_slave_0: entered promiscuous mode [ 698.353291][T30140] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.355356][T30140] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.355543][T30140] bridge_slave_1: entered allmulticast mode [ 698.357366][T30140] bridge_slave_1: entered promiscuous mode [ 698.439122][T30140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.442216][T30140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.531149][T30140] team0: Port device team_slave_0 added [ 698.544554][T30140] team0: Port device team_slave_1 added [ 698.589538][T30140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.589555][T30140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.589577][T30140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.590794][T30140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.590807][T30140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.590829][T30140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.705910][T30204] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20004 [ 698.706909][ T5616] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 698.715367][T30140] hsr_slave_0: entered promiscuous mode [ 698.718928][T30140] hsr_slave_1: entered promiscuous mode [ 698.720287][T30140] debugfs: 'hsr0' already exists in 'hsr' [ 698.720306][T30140] Cannot create hsr debugfs directory [ 698.753573][T30210] geneve2: entered allmulticast mode [ 699.049686][T30221] bond0: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 699.053917][T30221] bond0 (unregistering): Released all slaves [ 699.112997][T30218] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6122'. [ 699.163830][T30140] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.163863][T30140] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.163885][T30140] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 699.163908][T30140] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 699.195848][T30222] syzkaller1: entered promiscuous mode [ 699.195871][T30222] syzkaller1: entered allmulticast mode [ 699.276848][ T5616] Bluetooth: hci1: command tx timeout [ 699.331276][T30140] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.333910][T30140] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.333941][T30140] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 699.333965][T30140] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 699.455209][T30140] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.455259][T30140] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.455283][T30140] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 699.455306][T30140] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 699.551137][T30244] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6125'. [ 699.618181][T30140] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.618216][T30140] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.618239][T30140] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 699.618262][T30140] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 699.673394][T30246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6126'. [ 699.686958][T30247] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6126'. [ 700.127147][T30268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6133'. [ 700.129061][T30140] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 700.156751][T30140] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 700.159215][T30140] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 700.169155][T30140] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 700.219849][T30140] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 700.228868][T30140] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 700.233429][T30140] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 700.262782][T30140] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 700.347216][T30286] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 700.347243][T30286] bond1: option packets_per_slave: allowed values 0 - 65535 [ 700.382409][T30286] bond1 (unregistering): Released all slaves [ 700.453558][T30302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6140'. [ 700.632136][T30310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 700.663804][T30140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.801841][ T5756] veth1_to_bridge: left allmulticast mode [ 700.801868][ T5756] veth1_to_bridge: left promiscuous mode [ 700.802090][ T5756] bridge0: port 1(veth1_to_bridge) entered disabled state [ 700.839118][ T5756] dvmrp8: left allmulticast mode [ 700.934388][T30322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.950105][T30322] ip_tables: iptables: counters copy to user failed while replacing table [ 701.296642][ T5756] bond11 (unregistering): (slave ip6gretap1): Releasing active interface [ 701.345552][ T5616] Bluetooth: hci1: command tx timeout [ 701.856448][ T5756] bond3 (unregistering): (slave geneve2): Releasing active interface [ 701.860408][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035e06400: rx timeout, send abort [ 701.971656][ T5756] bond12 (unregistering): (slave bridge0): Releasing backup interface [ 701.992498][ T5756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.005246][ T5756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.008791][ T5756] bond0 (unregistering): Released all slaves [ 702.017411][ T5756] bond1 (unregistering): Released all slaves [ 702.031250][ T5756] bond2 (unregistering): Released all slaves [ 702.044165][ T5756] bond3 (unregistering): Released all slaves [ 702.060556][ T5756] bond4 (unregistering): Released all slaves [ 702.072135][ T5756] bond5 (unregistering): Released all slaves [ 702.088821][ T5756] bond6 (unregistering): Released all slaves [ 702.102935][ T5756] bond7 (unregistering): Released all slaves [ 702.113545][ T5756] bond8 (unregistering): Released all slaves [ 702.127377][ T5756] bond9 (unregistering): Released all slaves [ 702.143221][ T5756] bond10 (unregistering): Released all slaves [ 702.154491][ T5756] bond11 (unregistering): Released all slaves [ 702.172266][ T5756] bond12 (unregistering): Released all slaves [ 702.190443][ T5756] bond13 (unregistering): Released all slaves [ 702.205295][ T5756] bond14 (unregistering): Released all slaves [ 702.235782][T30322] __nla_validate_parse: 5 callbacks suppressed [ 702.235803][T30322] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6143'. [ 702.289645][T30140] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.327776][T20824] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.327879][T20824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.360464][ C0] vcan0: j1939_tp_rxtimer: 0xffff888035e06400: abort rx timeout. Force session deactivation [ 702.369745][T20772] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.369846][T20772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.526437][ T5756] tipc: Disabling bearer [ 702.526688][ T5756] tipc: Left network mode [ 702.561304][T30140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 702.783966][T30382] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6154'. [ 702.791309][T30384] openvswitch: netlink: Multiple metadata blocks provided [ 702.814301][T30386] netlink: 'syz.1.6157': attribute type 1 has an invalid length. [ 702.814323][T30386] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6157'. [ 702.814337][T30386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6157'. [ 702.879478][T30381] team0: entered promiscuous mode [ 702.879502][T30381] team_slave_0: entered promiscuous mode [ 702.879808][T30381] team_slave_1: entered promiscuous mode [ 702.904195][T30382] 8021q: VLANs not supported on gre0 [ 703.098767][ T5756] team0: Port device wlan0 removed [ 703.190889][T30398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6160'. [ 703.378318][T30405] ip6t_frag: unknown flags 6 [ 703.386719][ T5756] hsr_slave_0: left promiscuous mode [ 703.406059][ T5756] hsr_slave_1: left promiscuous mode [ 703.407856][ T5756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 703.407877][ T5756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.434968][ T5616] Bluetooth: hci1: command tx timeout [ 703.511384][ T5756] veth1_macvtap: left promiscuous mode [ 703.511432][ T5756] veth0_macvtap: left promiscuous mode [ 703.511581][ T5756] veth1_vlan: left promiscuous mode [ 703.632122][T30421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.634270][T30422] netlink: 'syz.3.6165': attribute type 9 has an invalid length. [ 704.317254][T20755] IPVS: starting estimator thread 0... [ 704.405879][T30429] IPVS: using max 30 ests per chain, 72000 per kthread [ 705.516329][ T5616] Bluetooth: hci1: command tx timeout [ 706.211844][ T5756] team0 (unregistering): Port device team_slave_1 removed [ 706.229912][ T5756] team0 (unregistering): Port device team_slave_0 removed [ 706.517687][T30433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6168'. [ 706.652518][T30439] xt_IDLETIMER: timeout value is zero [ 707.070622][ T5756] IPVS: stop unused estimator thread 0... [ 707.341273][T30140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 707.510674][T30140] veth0_vlan: entered promiscuous mode [ 707.557564][T30140] veth1_vlan: entered promiscuous mode [ 707.564330][T30482] tipc: Enabled bearer , priority 11 [ 707.573273][T30484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6175'. [ 707.573303][T30484] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 707.657627][T30140] veth0_macvtap: entered promiscuous mode [ 707.683075][T30140] veth1_macvtap: entered promiscuous mode [ 707.683949][T30488] No such timeout policy "s" [ 707.683964][T30488] netlink: Failed to associated timeout policy 's' [ 707.748605][T30140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.759057][T30492] openvswitch: netlink: Missing valid actions attribute. [ 707.782015][T30140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.825878][T20741] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.827193][T20741] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.827235][T20741] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.829755][T30500] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6179'. [ 707.836014][ T7115] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.133383][T20746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.133405][T20746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.202590][T20824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.202612][T20824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.214472][T30509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6182'. [ 708.214499][T30509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6182'. [ 708.214539][T30509] netlink: 'syz.1.6182': attribute type 15 has an invalid length. [ 708.241801][T30509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6182'. [ 708.241821][T30509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6182'. [ 708.241844][T30509] netlink: 'syz.1.6182': attribute type 15 has an invalid length. [ 708.255352][T20824] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 708.255408][T20824] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 708.255441][T20824] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 708.255481][T20824] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 708.368485][ T31] audit: type=1107 audit(1790916424.531:5): pid=30510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 708.415983][ T31] audit: type=1107 audit(1790916424.581:6): pid=30510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 708.484278][T30522] netlink: 'syz.1.6185': attribute type 12 has an invalid length. [ 708.490656][T30522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6185'. [ 708.645061][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 708.647660][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 708.648476][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 708.649362][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 708.649971][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 708.784406][T30535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6188'. [ 708.784427][T30535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6188'. [ 708.872306][T30542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6188'. [ 709.553267][T30578] syzkaller1: entered allmulticast mode [ 709.654111][T30583] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 709.671288][T30580] veth3: entered promiscuous mode [ 709.941164][T30596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.979404][T30598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 710.188540][T30605] xt_CT: You must specify a L4 protocol and not use inversions on it [ 710.388107][T30527] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.388373][T30527] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.388553][T30527] bridge_slave_0: entered allmulticast mode [ 710.390881][T30527] bridge_slave_0: entered promiscuous mode [ 710.394237][T30527] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.394392][T30527] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.394922][T30527] bridge_slave_1: entered allmulticast mode [ 710.396837][T30527] bridge_slave_1: entered promiscuous mode [ 710.436681][T30527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.440472][T30527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.475814][T30527] team0: Port device team_slave_0 added [ 710.487338][T30527] team0: Port device team_slave_1 added [ 710.587996][T30527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.588014][T30527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.588034][T30527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.593180][T30527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.593198][T30527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.593221][T30527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.679893][T30621] openvswitch: netlink: Tunnel attr 13 has unexpected len 4 expected 16 [ 710.706546][ T5623] Bluetooth: hci4: command tx timeout [ 710.727531][T30527] hsr_slave_0: entered promiscuous mode [ 710.729807][T30527] hsr_slave_1: entered promiscuous mode [ 710.730232][T30527] debugfs: 'hsr0' already exists in 'hsr' [ 710.730250][T30527] Cannot create hsr debugfs directory [ 710.992785][T30632] ip6_vti0: mtu less than device minimum [ 710.993148][T30632] ip6_vti0: mtu less than device minimum [ 711.251524][T30527] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.251561][T30527] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 711.286188][T30527] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.286226][T30527] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 711.477622][T30527] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.477656][T30527] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 711.477681][T30527] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.477704][T30527] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 711.714044][T30527] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.714080][T30527] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 711.714105][T30527] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.714129][T30527] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 711.863921][T30677] netlink: 'syz.1.6223': attribute type 1 has an invalid length. [ 711.913211][T30527] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.913247][T30527] netdevsim netdevsim3  (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 711.913269][T30527] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.913291][T30527] netdevsim netdevsim3  (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 712.047632][T30677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 712.149635][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.211179][T30687] nbd: must specify an index to disconnect [ 712.363243][T30698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.364526][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.387707][T29547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.408188][T30696] gtp0: entered promiscuous mode [ 712.408203][T30696] gtp0: entered allmulticast mode [ 712.478136][T30698] netlink: 'syz.2.6230': attribute type 4 has an invalid length. [ 712.564294][T30527] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 712.577285][T30527] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 712.578835][T30527] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 712.588599][T30527] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 712.591049][T30527] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 712.602565][T30527] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 712.606755][T30527] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 712.630536][T30527] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 712.763899][T30527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.785616][ T5623] Bluetooth: hci4: command tx timeout [ 712.799394][T30527] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.820778][T20741] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.820841][T20741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.847860][T20741] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.847921][T20741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 712.969427][T30725] __nla_validate_parse: 6 callbacks suppressed [ 712.969447][T30725] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6236'. [ 712.972414][T30717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.187421][T30727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.469766][T30747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6241'. [ 713.601031][T30752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6242'. [ 713.601054][T30752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6242'. [ 713.738004][T30760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6243'. [ 713.738037][T30760] netlink: 'syz.0.6243': attribute type 5 has an invalid length. [ 713.738051][T30760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6243'. [ 713.848485][T30527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.901120][T30527] veth0_vlan: entered promiscuous mode [ 713.926560][T30527] veth1_vlan: entered promiscuous mode [ 714.001490][T30527] veth0_macvtap: entered promiscuous mode [ 714.019017][T30527] veth1_macvtap: entered promiscuous mode [ 714.046097][T30527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.066328][T30527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.086944][T20824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.087009][T20824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.087121][T20824] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.237609][T29166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.331855][T20768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.331876][T20768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.357043][T20819] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.411309][T20768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.411330][T20768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.524291][T30784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6250'. [ 714.524541][T30784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6250'. [ 714.588897][T30789] bridge1: entered promiscuous mode [ 714.588952][T30789] bridge1: entered allmulticast mode [ 714.703317][T30793] x_tables: duplicate underflow at hook 1 [ 714.876333][ T5623] Bluetooth: hci4: command tx timeout [ 714.897183][ T5756] IPVS: starting estimator thread 0... [ 714.900767][T30801] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6254'. [ 714.916729][T30808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6255'. [ 714.996394][T30809] IPVS: using max 31 ests per chain, 74400 per kthread [ 715.138529][T30820] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 715.281287][T30727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.455817][ T8741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.503892][T30830] netlink: 'syz.4.6260': attribute type 2 has an invalid length. [ 715.517235][T30830] syzkaller0: entered promiscuous mode [ 715.517256][T30830] syzkaller0: entered allmulticast mode [ 716.181695][T30843] netlink: 'syz.3.6266': attribute type 1 has an invalid length. [ 716.309990][T30852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.310235][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.310691][T30727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.456613][T30859] openvswitch: netlink: Duplicate key (type 0). [ 716.932248][T30880] bond1: Unable to set down delay as MII monitoring is disabled [ 716.945753][ T5623] Bluetooth: hci4: command tx timeout [ 716.962868][T30880] bond1 (unregistering): Released all slaves [ 717.346147][T30307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.643879][T30911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 717.650157][T30911] bond0: (slave bond1): Enslaving as an active interface with an up link [ 717.712668][T30917] bond0: entered promiscuous mode [ 717.712693][T30917] bond_slave_0: entered promiscuous mode [ 717.712890][T30917] bond_slave_1: entered promiscuous mode [ 717.714700][T30917] bond0: entered allmulticast mode [ 717.737389][T30917] bond_slave_0: entered allmulticast mode [ 717.737414][T30917] bond_slave_1: entered allmulticast mode [ 717.926692][T30927] Bluetooth: MGMT ver 1.23 [ 717.926746][T30927] Bluetooth: hci1: too big key_count value 32778 [ 718.307383][T30945] __nla_validate_parse: 11 callbacks suppressed [ 718.307403][T30945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6292'. [ 718.352216][T30949] netlink: 'syz.3.6294': attribute type 1 has an invalid length. [ 718.386132][T30727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.406566][T30952] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6293'. [ 718.439037][T30951] netlink: 'syz.1.6295': attribute type 21 has an invalid length. [ 718.439118][T30951] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6295'. [ 718.467777][T29547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.914494][T30979] netlink: 'syz.0.6304': attribute type 12 has an invalid length. [ 718.914517][T30979] netlink: 'syz.0.6304': attribute type 29 has an invalid length. [ 718.914530][T30979] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6304'. [ 718.914547][T30979] netlink: 59 bytes leftover after parsing attributes in process `syz.0.6304'. [ 718.951448][T30979] netlink: 'syz.0.6304': attribute type 12 has an invalid length. [ 718.951468][T30979] netlink: 'syz.0.6304': attribute type 29 has an invalid length. [ 718.951480][T30979] netlink: 'syz.0.6304': attribute type 2 has an invalid length. [ 718.951491][T30979] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6304'. [ 719.139555][T30990] sctp: [Deprecated]: syz.3.6309 (pid 30990) Use of int in max_burst socket option. [ 719.139555][T30990] Use struct sctp_assoc_value instead [ 719.276194][T30999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6313'. [ 719.299172][T31002] netlink: 'syz.1.6314': attribute type 12 has an invalid length. [ 719.392118][T31008] netlink: 'syz.3.6315': attribute type 29 has an invalid length. [ 719.393322][T31008] netlink: 'syz.3.6315': attribute type 29 has an invalid length. [ 719.395733][T31011] netlink: 'syz.3.6315': attribute type 29 has an invalid length. [ 719.425583][T30307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.594005][ T8736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.653378][T31027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6322'. [ 719.656779][T31027] netlink: 'syz.3.6322': attribute type 11 has an invalid length. [ 719.877641][T31038] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6325'. [ 720.041499][T31046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6328'. [ 720.293041][T31063] netlink: 'syz.2.6333': attribute type 15 has an invalid length. [ 720.293903][T31062] bridge: RTM_NEWNEIGH with invalid ether address [ 720.295174][T31062] bridge: RTM_NEWNEIGH with invalid ether address [ 720.465716][T30307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.656135][T31087] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.953628][T31090] tipc: Started in network mode [ 720.953659][T31090] tipc: Node identity 4a1443455799, cluster identity 4711 [ 720.953851][T31090] tipc: Enabled bearer , priority 10 [ 721.046452][T31099] Bluetooth: hci0: unsupported parameter 5135 [ 721.046473][T31099] Bluetooth: hci0: unsupported parameter 8192 [ 721.046485][T31099] Bluetooth: hci0: unsupported parameter 5135 [ 721.046496][T31099] Bluetooth: hci0: unsupported parameter 8192 [ 721.247418][T31089] tipc: Resetting bearer [ 721.294140][T31089] tipc: Disabling bearer [ 721.453877][T31117] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20001 [ 721.507299][ T8741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.526279][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.584465][T31112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.101168][T31149] openvswitch: netlink: Invalid VLAN frame [ 722.162736][T31149] 8021q: adding VLAN 0 to HW filter on device bond2 [ 722.228099][T31153] bond2: (slave veth3): Enslaving as an active interface with a down link [ 722.281251][T31149] bond2: (slave dummy0): making interface the new active one [ 722.282104][T31149] dummy0: entered promiscuous mode [ 722.282540][T31149] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 722.641075][T31172] xt_ecn: cannot match TCP bits for non-tcp packets [ 722.812694][T31186] nbd: nbd1 already in use [ 722.813379][T31186] block nbd1: NBD_DISCONNECT [ 722.813402][T31186] block nbd1: Send disconnect failed -32 [ 722.813420][T31186] block nbd1: Send disconnect failed -32 [ 722.813531][T31186] block nbd1: shutting down sockets [ 722.853983][T31184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 722.974556][T31184] bond1: (slave geneve2): making interface the new active one [ 722.986837][T31184] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 723.004043][T31202] veth0: entered promiscuous mode [ 723.039148][T31201] veth0: left promiscuous mode [ 723.586912][T29169] net_ratelimit: 1 callbacks suppressed [ 723.586931][T29169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.593984][T20741] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 723.651880][T31245] netlink: zone id is out of range [ 723.652183][T31245] netlink: set zone limit has 4 unknown bytes [ 723.695714][T31250] __nla_validate_parse: 23 callbacks suppressed [ 723.695742][T31250] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6385'. [ 723.757272][T31252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 723.776007][T31254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 724.548569][T31124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.625241][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.666330][ T5706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.464775][T31233] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 726.468850][T31258] netlink: 236 bytes leftover after parsing attributes in process `syz.0.6388'. [ 726.471634][T31260] netlink: 236 bytes leftover after parsing attributes in process `syz.0.6388'. [ 726.705365][T29169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.796218][T31281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6395'. [ 726.877818][T31286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6397'. [ 727.174142][T31314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6401'. [ 727.586134][T31124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.915397][T31357] validate_nla: 6 callbacks suppressed [ 727.915412][T31357] netlink: 'syz.3.6415': attribute type 1 has an invalid length. [ 727.944573][T31357] bond3: entered promiscuous mode [ 727.946796][T31357] 8021q: adding VLAN 0 to HW filter on device bond3 [ 727.964107][T31357] ipvlan2: entered allmulticast mode [ 727.964128][T31357] bond3: entered allmulticast mode [ 727.990825][T31357] ipvlan3: entered allmulticast mode [ 728.119694][T31364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6418'. [ 728.497094][T31389] bond1 (unregistering): Released all slaves [ 728.796655][T29169] net_ratelimit: 4 callbacks suppressed [ 728.796674][T29169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.852525][T31417] --map-set only usable from mangle table [ 728.880549][T31417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6432'. [ 728.960415][T31427] netlink: 'syz.2.6434': attribute type 10 has an invalid length. [ 729.007173][T31427] syzkaller1: entered promiscuous mode [ 729.007194][T31427] syzkaller1: entered allmulticast mode [ 729.077447][T31432] macsec1: entered promiscuous mode [ 729.192941][ T8741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.284479][T31449] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 729.284514][T31449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 729.654087][T31464] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6443'. [ 729.693761][T31464] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6443'. [ 729.826335][T29169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.826791][ T5623] block nbd1: Receive control failed (result -32) [ 730.012314][T31487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 730.078367][T31488] netlink: 'syz.4.6448': attribute type 17 has an invalid length. [ 730.078390][T31488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6448'. [ 730.078426][T31488] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6448'. [ 730.103399][T31488] erspan0: entered promiscuous mode [ 730.122531][T31488] erspan0: left promiscuous mode [ 730.168537][T31491] netlink: 'syz.1.6450': attribute type 32 has an invalid length. [ 730.168553][T31491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6450'. [ 730.208797][T31487] netlink: 'syz.3.6449': attribute type 3 has an invalid length. [ 730.208817][T31487] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6449'. [ 730.269273][T31491] bond2: option coupled_control: invalid value (192) [ 730.283924][T31491] bond2 (unregistering): Released all slaves [ 730.307858][T31503] ip_tables: iptables: counters copy to user failed while replacing table [ 730.335169][T31499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.439886][T20768] IPVS: starting estimator thread 0... [ 730.511093][T31505] xt_TCPMSS: Only works on TCP SYN packets [ 730.527283][T31515] IPVS: using max 35 ests per chain, 84000 per kthread [ 730.657701][T31526] netlink: Unknown nat attribute (0) [ 730.657737][T31526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.865779][T29169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.982310][T31540] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6459'. [ 730.982768][T31540] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6459'. [ 730.983117][T31540] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6459'. [ 731.377354][T31558] netlink: 'syz.2.6463': attribute type 4 has an invalid length. [ 731.517434][T31564] gretap0: entered promiscuous mode [ 731.529166][T31564] 0ªî{X¹¦: renamed from gretap0 [ 731.547792][T31564] 0ªî{X¹¦: left promiscuous mode [ 731.547814][T31564] 0ªî{X¹¦: entered allmulticast mode [ 731.640836][T31576] netlink: 'syz.2.6468': attribute type 6 has an invalid length. [ 732.247258][T31618] sctp: [Deprecated]: syz.2.6476 (pid 31618) Use of int in maxseg socket option. [ 732.247258][T31618] Use struct sctp_assoc_value instead [ 733.351962][T31677] veth0_macvtap: entered allmulticast mode [ 733.464437][T31676] team0: Port device team_slave_0 removed [ 733.498585][T31654] x_tables: duplicate underflow at hook 2 [ 733.629282][T20819] dummy0: left promiscuous mode [ 734.001641][T31722] net_ratelimit: 70 callbacks suppressed [ 734.001661][T31722] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 734.035922][T31724] __nla_validate_parse: 115 callbacks suppressed [ 734.035941][T31724] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6504'. [ 734.035959][T31724] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6504'. [ 734.091671][T31725] netlink: 'syz.3.6507': attribute type 2 has an invalid length. [ 734.258381][T31737] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6510'. [ 734.610777][T31763] team0: Device xfrm0 is of different type [ 734.648934][T31764] netlink: 'syz.1.6517': attribute type 64 has an invalid length. [ 734.648958][T31764] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6517'. [ 734.668484][T31765] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6515'. [ 734.715613][T31767] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6518'. [ 734.736942][T31767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6518'. [ 734.855617][T31769] xt_ecn: cannot match TCP bits for non-tcp packets [ 734.921476][T31773] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 734.921521][T31773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.923303][T31773] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 734.923334][T31773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 735.077404][T31781] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 735.137753][T31783] syzkaller1: entered promiscuous mode [ 735.137775][T31783] syzkaller1: entered allmulticast mode [ 735.209391][T31792] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 735.366797][T31800] syzkaller0: entered promiscuous mode [ 735.366819][T31800] syzkaller0: entered allmulticast mode [ 735.372880][T31800] tipc: Started in network mode [ 735.372911][T31800] tipc: Node identity ca3e174cec3a, cluster identity 4711 [ 735.373213][T31800] tipc: Enabled bearer , priority 0 [ 735.406202][T31798] tipc: Resetting bearer [ 735.454035][T31798] tipc: Disabling bearer [ 735.939373][T31841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6545'. [ 736.085086][T31851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6550'. [ 736.097516][T31852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6550'. [ 736.110850][T31851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.116161][T31851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.149544][T31845] syzkaller0: entered promiscuous mode [ 736.149568][T31845] syzkaller0: entered allmulticast mode [ 736.297874][T31861] netlink: 'syz.0.6552': attribute type 3 has an invalid length. [ 738.948558][T31886] xt_HMARK: proto mask must be zero with L3 mode [ 739.252798][T31908] __nla_validate_parse: 6 callbacks suppressed [ 739.252817][T31908] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6568'. [ 739.252851][T31908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6568'. [ 739.459184][T31920] Bluetooth: hci0: unsupported parameter 5134 [ 739.459204][T31920] Bluetooth: hci0: unsupported parameter 8192 [ 739.459216][T31920] Bluetooth: hci0: unsupported parameter 5134 [ 739.459227][T31920] Bluetooth: hci0: unsupported parameter 8192 [ 739.505691][T31918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6570'. [ 739.505915][T31918] team0: left promiscuous mode [ 739.505932][T31918] team_slave_0: left promiscuous mode [ 739.506120][T31918] team_slave_1: left promiscuous mode [ 739.508352][T31918] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.682575][T31936] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 740.207261][T31978] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6582'. [ 740.547912][T31993] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 740.550000][T31993] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6586'. [ 740.618713][T31993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6586'. [ 740.758017][T32008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6585'. [ 740.758686][T32008] netlink: 'syz.2.6585': attribute type 9 has an invalid length. [ 740.758703][T32008] netlink: 'syz.2.6585': attribute type 4 has an invalid length. [ 740.781686][T32008] batman_adv: batadv0: Adding interface: syzkaller0 [ 740.781704][T32008] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.781732][T32008] batman_adv: batadv0: Interface activated: syzkaller0 [ 740.828803][T32007] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 740.928046][T20814] IPVS: starting estimator thread 0... [ 740.932502][T32012] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 740.942354][T32007] batman_adv: batadv0: Removing interface: syzkaller0 [ 741.035208][T32013] IPVS: using max 41 ests per chain, 98400 per kthread [ 741.336896][T32037] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6594'. [ 741.608605][T32049] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20000 [ 741.727104][T32062] netlink: 'syz.3.6600': attribute type 1 has an invalid length. [ 741.790648][T32062] veth5: entered allmulticast mode [ 741.807026][T32062] bond4: (slave veth5): Enslaving as an active interface with a down link [ 741.841055][T32062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6600'. [ 741.880135][T32067] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 742.090769][T32083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6608'. [ 742.104481][T32083] vlan0: entered promiscuous mode [ 742.376592][T32089] tipc: Enabled bearer , priority 0 [ 742.413870][T32094] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 742.795915][T32112] netlink: 'syz.2.6618': attribute type 1 has an invalid length. [ 742.922127][T32112] 8021q: adding VLAN 0 to HW filter on device bond2 [ 742.967115][T32113] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 743.036390][T32125] netlink: 'syz.3.6623': attribute type 10 has an invalid length. [ 743.063386][T32125] geneve2: entered promiscuous mode [ 743.063410][T32125] geneve2: entered allmulticast mode [ 743.145787][T32135] ip6t_frag: unknown flags 6 [ 743.209565][T32142] netlink: zone id is out of range [ 743.209580][T32142] netlink: zone id is out of range [ 743.209587][T32142] netlink: zone id is out of range [ 743.209595][T32142] netlink: zone id is out of range [ 743.209603][T32142] netlink: get zone limit has 4 unknown bytes [ 743.270619][T32145] netlink: 'syz.4.6629': attribute type 16 has an invalid length. [ 743.270639][T32145] netlink: 'syz.4.6629': attribute type 17 has an invalid length. [ 743.414598][T32156] netlink: 'syz.0.6634': attribute type 1 has an invalid length. [ 743.414621][T32156] netlink: 'syz.0.6634': attribute type 2 has an invalid length. [ 743.640524][T32145] geneve2: left allmulticast mode [ 743.729853][ T5706] tipc: Node number set to 495797061 [ 743.888151][ T31] audit: type=1800 audit(1790916460.051:7): pid=32179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6639" name=680B20 dev="tmpfs" ino=788 res=0 errno=0 [ 743.908899][T32182] netlink: NAT attribute has 4 unknown bytes [ 743.908932][T32182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.950663][T32161] syzkaller0: entered promiscuous mode [ 743.950684][T32161] syzkaller0: entered allmulticast mode [ 744.384701][T32203] bridge_slave_0: left allmulticast mode [ 744.388672][T32203] bridge_slave_0: left promiscuous mode [ 744.388918][T32203] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.393871][T32203] bridge_slave_1: left allmulticast mode [ 744.393894][T32203] bridge_slave_1: left promiscuous mode [ 744.394100][T32203] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.462142][T32203] bond0: (slave bond_slave_0): Releasing backup interface [ 744.589078][T32203] bond0: (slave bond_slave_1): Releasing backup interface [ 744.609207][T32203] team0: Port device team_slave_0 removed [ 744.645359][T32203] team0: Port device team_slave_1 removed [ 744.647519][T32203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.647540][T32203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.650732][T32203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.650753][T32203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.680990][T32204] team0: Port device xfrm0 added [ 744.688108][T32209] tipc: Started in network mode [ 744.688137][T32209] tipc: Node identity 4ab4814baff8, cluster identity 4711 [ 744.688318][T32209] tipc: Enabled bearer , priority 0 [ 744.877505][T32224] ieee802154 phy1 wpan1: encryption failed: -22 [ 744.951652][T32223] veth0: entered promiscuous mode [ 744.970257][T32223] veth0: left promiscuous mode [ 745.172052][T32240] __nla_validate_parse: 15 callbacks suppressed [ 745.172932][T32240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6659'. [ 745.172955][T32240] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6659'. [ 745.526117][T32249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6662'. [ 745.527090][T32249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6662'. [ 745.543131][T32249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6662'. [ 745.544040][T32249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6662'. [ 745.551051][T32249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6662'. [ 745.551733][T32249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6662'. [ 745.560851][T32249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6662'. [ 745.562595][T32249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6662'. [ 745.759840][ T5801] tipc: Node number set to 3846996299 [ 746.193005][T32280] netlink: 'syz.4.6667': attribute type 3 has an invalid length. [ 746.239184][T32280] netlink: 'syz.4.6667': attribute type 3 has an invalid length. [ 746.357479][T32285] netlink: 'syz.4.6667': attribute type 3 has an invalid length. [ 746.357653][T32285] netlink: 'syz.4.6667': attribute type 3 has an invalid length. [ 746.910687][T32328] lo: entered promiscuous mode [ 746.915609][T32328] net_ratelimit: 1 callbacks suppressed [ 746.915627][T32328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 747.093070][T32338] netlink: 'syz.2.6684': attribute type 1 has an invalid length. [ 747.111739][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.164276][T32339] 8021q: adding VLAN 0 to HW filter on device bond4 [ 747.181014][T32339] bond3: (slave bond4): making interface the new active one [ 747.182194][T32339] bond3: (slave bond4): Enslaving as an active interface with an up link [ 747.227500][T32338] 8021q: adding VLAN 0 to HW filter on device bond5 [ 747.228863][T32338] bond3: (slave bond5): Enslaving as a backup interface with an up link [ 747.559693][T32368] openvswitch: netlink: IP tunnel dst address not specified [ 747.559727][T32368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 747.632424][T31739] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 747.635114][T31739] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 747.656140][T31124] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 747.935283][T27714] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 747.973018][T32391] veth0_to_bond: default FDB implementation only supports local addresses [ 747.983644][T32389] netlink: 'syz.3.6697': attribute type 1 has an invalid length. [ 748.066779][T32389] bond5: entered promiscuous mode [ 748.067552][T32389] 8021q: adding VLAN 0 to HW filter on device bond5 [ 748.190681][T32389] ipvlan4: entered allmulticast mode [ 748.190704][T32389] bond5: entered allmulticast mode [ 748.190973][T32389] bond5: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 748.190990][T32389] bond5: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 748.191004][T32389] bond5: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode [ 748.206217][T32389] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 748.312640][T32402] tc_dump_action: action bad kind [ 748.321899][T32402] Bluetooth: hci0: load_link_keys: too big key_count value 5120 [ 748.387403][T27714] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 748.420310][T32414] netlink: 'syz.1.6706': attribute type 32 has an invalid length. [ 748.450370][T32414] bond2: option coupled_control: invalid value (16) [ 748.682229][T32414] bond2 (unregistering): Released all slaves [ 748.696442][T32429] sctp: [Deprecated]: syz.2.6710 (pid 32429) Use of int in maxseg socket option. [ 748.696442][T32429] Use struct sctp_assoc_value instead [ 749.109548][T32453] netlink: 'syz.4.6718': attribute type 1 has an invalid length. [ 749.273966][T32460] bond1: (slave bridge1): making interface the new active one [ 749.282892][T32460] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 749.326936][T32454] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 749.357138][ T5623] block nbd3: Receive control failed (result -32) [ 749.534380][T32479] netlink: 'syz.1.6727': attribute type 12 has an invalid length. [ 749.562991][T32482] veth0: entered promiscuous mode [ 749.600219][T32478] veth0: left promiscuous mode [ 749.611784][T32479] ip6gretap0: entered allmulticast mode [ 749.749814][T32498] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 750.052133][T32514] x_tables: ip_tables: osf match: only valid for protocol 6 [ 750.698944][T32547] IPVS: Unknown mcast interface: ip6erspan0 [ 751.044439][T32561] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 751.051414][T32561] openvswitch: netlink: VLAN attribute unexpected. [ 751.072230][T32561] pimreg: entered allmulticast mode [ 751.083070][T32561] __nla_validate_parse: 83 callbacks suppressed [ 751.083089][T32561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6751'. [ 751.106465][T32562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6752'. [ 751.115519][T20768] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.115572][T20768] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.115604][T20768] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.115634][T20768] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.260370][T32572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6756'. [ 751.416601][T32584] tipc: Resetting bearer [ 751.712501][T32602] netlink: 59 bytes leftover after parsing attributes in process `syz.2.6762'. [ 751.896331][T32617] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6764'. [ 751.904986][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 752.236448][T32631] tipc: Enabling of bearer rejected, failed to enable media [ 752.404233][T32639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6769'. [ 752.844340][T32656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6775'. [ 752.879908][T32656] macsec1: entered promiscuous mode [ 752.879930][T32656] bridge0: entered promiscuous mode [ 752.880102][T32656] macsec1: entered allmulticast mode [ 752.880115][T32656] bridge0: entered allmulticast mode [ 752.882232][T32656] bridge0: port 1(macsec1) entered blocking state [ 752.882345][T32656] bridge0: port 1(macsec1) entered disabled state [ 752.938472][T32656] bridge0: left allmulticast mode [ 753.043892][ T5706] bridge0: left promiscuous mode [ 753.119933][T32661] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6776'. [ 753.201352][T32676] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 753.303529][T32677] ip6gre2: entered allmulticast mode [ 753.466441][T32693] nft_compat: unsupported protocol 8 [ 753.516141][T32692] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6781'. [ 753.516355][T32692] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6781'. [ 753.591935][T27714] hid-generic 0005:04F3:0002.0002: unknown main item tag 0x0 [ 753.720806][T27714] hid-generic 0005:04F3:0002.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 754.492848][T32736] 0: renamed from hsr0 (while UP) [ 754.502513][T32736] 0: entered allmulticast mode [ 754.502540][T32736] hsr_slave_0: entered allmulticast mode [ 754.502558][T32736] hsr_slave_1: entered allmulticast mode [ 754.502885][T32736] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 754.585194][T32737] IPv6: Can't replace route, no match found [ 754.586366][T32737] netlink: 'syz.1.6792': attribute type 13 has an invalid length. [ 754.621166][T32737] netlink: 'syz.1.6792': attribute type 13 has an invalid length. [ 754.629567][T31734] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 754.629633][T31734] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 754.629664][T31734] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 754.629694][T31734] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 755.233556][ T312] xt_TCPMSS: Only works on TCP SYN packets [ 755.410579][ T319] ip_tables: iptables: counters copy to user failed while replacing table [ 755.675112][ T335] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 755.738731][ T327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 755.897494][ T327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 756.140274][ T371] lo: entered promiscuous mode [ 756.143149][ T371] lo: left promiscuous mode [ 756.181823][ T377] __nla_validate_parse: 46 callbacks suppressed [ 756.181843][ T377] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6817'. [ 758.912230][ T350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 759.180734][ T391] xt_hashlimit: size too large, truncated to 1048576 [ 759.217025][ T394] netlink: 'syz.4.6825': attribute type 1 has an invalid length. [ 759.333541][ T405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6825'. [ 759.346181][ T394] bond2: entered promiscuous mode [ 759.347410][ T394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 759.382527][ T405] 8021q: adding VLAN 0 to HW filter on device bond2 [ 759.382916][ T405] bond2: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 759.382934][ T405] bond2: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 759.420424][ T405] bond2: (slave ip6gre3): making interface the new active one [ 759.432257][ T405] ip6gre3: entered promiscuous mode [ 759.442927][ T405] bond2: (slave ip6gre3): Enslaving as an active interface with an up link [ 759.507546][ T413] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6829'. [ 759.509984][ T413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6829'. [ 759.621471][ T418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6832'. [ 759.621497][ T418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6832'. [ 759.755610][ T425] batman_adv: batadv0: Adding interface: ipvlan2 [ 759.755631][ T425] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 759.816645][ T423] bond2: (slave dummy0): Releasing active interface [ 759.880509][ T423] bridge_slave_0: left allmulticast mode [ 759.880535][ T423] bridge_slave_0: left promiscuous mode [ 759.880778][ T423] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.883926][ T430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6836'. [ 759.916431][ T423] bridge_slave_1: left allmulticast mode [ 759.916486][ T423] bridge_slave_1: left promiscuous mode [ 759.916684][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.958352][ T423] bond0: (slave bond_slave_0): Releasing backup interface [ 759.988843][ T423] bond0: (slave bond_slave_1): Releasing backup interface [ 760.017265][ T423] team0: Port device team_slave_0 removed [ 760.034661][ T423] team0: Port device team_slave_1 removed [ 760.037438][ T423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.037459][ T423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.061721][ T438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6834'. [ 760.062769][ T423] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 760.088985][ T427] team0: Port device xfrm0 added [ 760.162500][ T446] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6839'. [ 760.180386][ T443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6838'. [ 760.308367][ T459] nbd: must specify a device to reconfigure [ 760.545063][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 760.761986][ T496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.815338][ T496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.832331][ T498] bridge_slave_0: left allmulticast mode [ 760.832357][ T498] bridge_slave_0: left promiscuous mode [ 760.832571][ T498] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.843790][ T498] bridge_slave_1: left promiscuous mode [ 760.843978][ T498] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.874264][ T498] bond0: (slave bond_slave_0): Releasing backup interface [ 760.876864][ T499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.896734][ T498] bond0: (slave bond_slave_1): Releasing backup interface [ 760.921201][ T498] team0: Port device team_slave_0 removed [ 760.930813][ T498] team0: Port device team_slave_1 removed [ 760.931764][ T498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.931784][ T498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.938815][ T498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 760.938835][ T498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.957885][ T498] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 761.440847][ T525] __nla_validate_parse: 2 callbacks suppressed [ 761.440866][ T525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6857'. [ 761.649921][ T540] netlink: 'syz.3.6861': attribute type 13 has an invalid length. [ 761.712175][ T544] x_tables: duplicate underflow at hook 2 [ 761.754495][ T546] team0: Port device xfrm0 removed [ 761.762556][ T546] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 761.793352][ T548] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6864'. [ 761.793370][ T548] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6864'. [ 761.906126][ T5623] Bluetooth: hci1: command tx timeout [ 761.921535][ T556] bond2: entered promiscuous mode [ 761.921598][ T556] bond2: entered allmulticast mode [ 761.922152][ T556] 8021q: adding VLAN 0 to HW filter on device bond2 [ 762.515175][ T577] xt_hl: Unknown Hop Limit match mode: 206 [ 762.680678][ T560] infiniband syz1: set down [ 762.680700][ T560] infiniband syz1: added bond_slave_1 [ 762.719341][ T584] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 762.757281][ T560] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 762.757321][ T560] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 762.757392][ T560] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 762.805516][ T560] RDS/IB: syz1: added [ 762.807119][ T560] smc: adding ib device syz1 with port count 1 [ 762.807262][ T560] smc: ib device syz1 port 1 has no pnetid [ 762.920619][ T588] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 763.251016][ T596] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 763.290100][ T602] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6880'. [ 763.485470][ T619] netlink: 'syz.4.6882': attribute type 3 has an invalid length. [ 763.485492][ T619] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6882'. [ 763.543169][ T621] batman_adv: batadv0: Adding interface: syzkaller0 [ 763.543187][ T621] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.543214][ T621] batman_adv: batadv0: Interface activated: syzkaller0 [ 763.612918][ T620] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 763.657713][ T620] batman_adv: batadv0: Removing interface: syzkaller0 [ 763.775589][ T633] bridge_slave_0: left allmulticast mode [ 763.775615][ T633] bridge_slave_0: left promiscuous mode [ 763.775841][ T633] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.783572][ T633] bridge_slave_1: left allmulticast mode [ 763.783597][ T633] bridge_slave_1: left promiscuous mode [ 763.783810][ T633] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.852702][ T633] bond0: (slave bond_slave_0): Releasing backup interface [ 763.866292][ T633] bond_slave_0: left promiscuous mode [ 763.866465][ T633] bond_slave_0: left allmulticast mode [ 763.891158][ T633] bond0: (slave bond_slave_1): Releasing backup interface [ 763.907044][ T633] bond_slave_1: left promiscuous mode [ 763.907298][ T633] bond_slave_1: left allmulticast mode [ 763.931791][ T633] team0: Port device team_slave_1 removed [ 763.932707][ T633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.932728][ T633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.950993][ T633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 763.963531][ T633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.980822][ T633] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 764.496501][ T667] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6895'. [ 764.535851][ T659] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 764.551972][ T669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6895'. [ 764.552179][ T671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6895'. [ 764.646995][ T659] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6894'. [ 764.694404][ T662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6894'. [ 764.809306][ T678] ip_tables: iptables: counters copy to user failed while replacing table [ 764.840997][ T678] C: renamed from lo [ 764.843596][ T678] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 764.877269][ T678] netlink: 'syz.0.6899': attribute type 1 has an invalid length. [ 765.163768][ T687] bridge_slave_0: left allmulticast mode [ 765.163795][ T687] bridge_slave_0: left promiscuous mode [ 765.164006][ T687] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.187163][ T689] ip_tables: iptables: counters copy to user failed while replacing table [ 765.201279][ T687] bridge_slave_1: left allmulticast mode [ 765.201306][ T687] bridge_slave_1: left promiscuous mode [ 765.201526][ T687] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.237596][ T687] bond2: (slave veth0_to_bond): Releasing backup interface [ 765.275313][ T687] team0: Port device team_slave_0 removed [ 765.297762][ T687] team0: Port device team_slave_1 removed [ 765.300296][ T687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.300319][ T687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.304151][ T687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.304172][ T687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.342914][ T687] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 765.389775][ T692] team0: Port device xfrm0 added [ 765.914496][ T711] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 765.914573][ T711] gretap1: entered promiscuous mode [ 765.914588][ T711] gretap1: entered allmulticast mode [ 766.149008][ T717] netlink: 'syz.0.6912': attribute type 1 has an invalid length. [ 766.229878][ T689] netlink: 'syz.4.6904': attribute type 4 has an invalid length. [ 767.123632][ T761] __nla_validate_parse: 4 callbacks suppressed [ 767.123651][ T761] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6921'. [ 768.594285][ T822] netlink: 'syz.2.6938': attribute type 1 has an invalid length. [ 768.674150][ T822] bond6: entered promiscuous mode [ 768.675362][ T822] bond6: entered allmulticast mode [ 768.678995][ T822] 8021q: adding VLAN 0 to HW filter on device bond6 [ 768.722759][ T828] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 768.742808][ T822] erspan2: entered allmulticast mode [ 768.758895][ T833] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 768.759919][ T822] bond6: (slave erspan2): making interface the new active one [ 768.759939][ T822] erspan2: entered promiscuous mode [ 768.780558][ T822] bond6: (slave erspan2): Enslaving as an active interface with an up link [ 768.804568][ T825] tipc: New replicast peer: 172.20.20.187 [ 768.827757][ T825] tipc: Enabled bearer , priority 10 [ 768.914590][ T830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6941'. [ 769.408541][ T869] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6949'. [ 769.637902][ T881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6951'. [ 769.637939][ T881] netlink: 'syz.2.6951': attribute type 5 has an invalid length. [ 769.637952][ T881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6951'. [ 769.905555][ T5623] Bluetooth: hci1: command tx timeout [ 770.359410][ T934] xt_hashlimit: size too large, truncated to 1048576 [ 770.511438][ T949] netlink: 'syz.1.6970': attribute type 17 has an invalid length. [ 770.511485][ T949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6970'. [ 770.511511][ T949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6970'. [ 771.860018][ T1001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6983'. [ 771.945813][ T1011] xt_hashlimit: size too large, truncated to 1048576 [ 772.037153][ T1019] netlink: 'syz.0.6989': attribute type 1 has an invalid length. [ 772.037169][ T1019] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6989'. [ 772.932708][ T1060] batman_adv: batadv0: Adding interface: veth0 [ 772.932726][ T1060] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.934323][ T1060] batman_adv: batadv0: Interface activated: veth0 [ 772.996340][ T1063] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6996'. [ 772.999510][ T1064] netlink: Failed to add %pB helper -22 [ 772.999560][ T1064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.001436][ T1063] batman_adv: batadv0: Interface deactivated: veth0 [ 773.001456][ T1063] batman_adv: batadv0: Removing interface: veth0 [ 773.144373][ T1068] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 773.229742][ T1068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.526828][ T1083] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7002'. [ 773.627418][ T1085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7002'. [ 773.627466][ T1085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7002'. [ 774.062510][ T1101] veth1_to_batadv: entered promiscuous mode [ 774.098120][ T1107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7008'. [ 774.101481][ T1106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7008'. [ 774.103574][ T1107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7008'. [ 774.106412][ T1106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7008'. [ 774.213629][ T1109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7012'. [ 774.358096][ T1117] syzkaller0: entered promiscuous mode [ 774.358116][ T1117] syzkaller0: entered allmulticast mode [ 774.568044][ T1129] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7016'. [ 774.568099][ T1129] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 774.965477][ T1152] 0ªî{X¹¦: left allmulticast mode [ 775.085690][ T1162] bond0: left promiscuous mode [ 775.085714][ T1162] bond0: left allmulticast mode [ 775.517351][ T1171] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 775.640999][ T1180] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 776.132552][ T1193] team0: Port device xfrm0 added [ 776.508424][ T1206] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 776.789761][ T1217] netlink: 'syz.1.7036': attribute type 7 has an invalid length. [ 777.184988][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 777.888367][T31739] bridge_slave_1: left promiscuous mode [ 777.889210][T31739] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.918678][T31739] bridge_slave_0: left allmulticast mode [ 777.919038][T31739] bridge_slave_0: left promiscuous mode [ 777.922056][T31739] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.922623][ T1264] nbd: couldn't find a device at index 0 [ 778.005456][ T1271] ip_tables: iptables: counters copy to user failed while replacing table [ 778.095516][ T1274] __nla_validate_parse: 9 callbacks suppressed [ 778.095535][ T1274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7048'. [ 778.209324][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888055434800: rx timeout, send abort [ 778.365424][T31739] tipc: Resetting bearer [ 778.709365][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888055434800: abort rx timeout. Force session deactivation [ 780.616064][T31739] tipc: Disabling bearer [ 780.823385][T31739] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 780.823413][T31739] bridge1 (unregistering): left promiscuous mode [ 780.960916][T31739] bond7 (unregistering): (slave bridge10): Releasing backup interface [ 780.960940][T31739] bond7 (unregistering): (slave bridge10): the permanent HWaddr of slave - b2:3d:ee:35:eb:db - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 780.960965][T31739] bridge10 (unregistering): left promiscuous mode [ 780.961056][T31739] bond7 (unregistering): (slave bridge11): making interface the new active one [ 780.961072][T31739] bridge11 (unregistering): entered promiscuous mode [ 781.034522][T31739] bond7 (unregistering): (slave bridge11): Releasing backup interface [ 781.034550][T31739] bridge11 (unregistering): left promiscuous mode [ 781.073698][T31739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.093285][T31739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.106327][T31739] bond0 (unregistering): Released all slaves [ 781.114368][T31739] bond1 (unregistering): Released all slaves [ 781.145202][T31739] bond2 (unregistering): Released all slaves [ 781.195144][T31739] bond3 (unregistering): Released all slaves [ 781.215677][T31739] bond4 (unregistering): Released all slaves [ 781.246152][T31739] bond5 (unregistering): Released all slaves [ 781.280589][T31739] bond6 (unregistering): Released all slaves [ 781.302977][T31739] bond7 (unregistering): Released all slaves [ 781.325485][T31739] bond8 (unregistering): Released all slaves [ 781.449556][ T1301] netlink: 'syz.1.7054': attribute type 12 has an invalid length. [ 781.960166][T31739] tipc: Left network mode [ 782.046623][ T1312] netlink: 'syz.2.7057': attribute type 2 has an invalid length. [ 782.509403][ T1332] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7062'. [ 782.812832][ T1346] Bluetooth: hci0: unsupported parameter 5135 [ 782.812855][ T1346] Bluetooth: hci0: unsupported parameter 8192 [ 782.812868][ T1346] Bluetooth: hci0: unsupported parameter 5135 [ 782.812880][ T1346] Bluetooth: hci0: unsupported parameter 8192 [ 782.891116][ T1345] gtp1: entered promiscuous mode [ 782.891140][ T1345] gtp1: entered allmulticast mode [ 782.911223][ T1340] tipc: Started in network mode [ 782.911268][ T1340] tipc: Node identity ac14142f, cluster identity 4711 [ 782.911802][ T1340] tipc: Enabling of bearer rejected, failed to enable media [ 783.413607][ T1361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7070'. [ 783.645737][T20814] tipc: Resetting bearer [ 783.674683][ T1361] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7070'. [ 783.850065][ T1375] IPv6: sit1: Disabled Multicast RS [ 783.921601][ T1370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7072'. [ 783.995888][ T1380] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 784.023982][ T1382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 784.417020][ T1397] netlink: 'syz.1.7079': attribute type 1 has an invalid length. [ 784.642330][ T1397] 8021q: adding VLAN 0 to HW filter on device bond3 [ 784.785384][ T1407] xt_nat: multiple ranges no longer supported [ 784.831954][ T1407] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7082'. [ 784.856736][ T1403] openvswitch: netlink: IP tunnel dst address not specified [ 785.027303][ T5616] Bluetooth: hci0: command 0x0406 tx timeout [ 785.120755][ T1412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7086'. [ 785.333760][ T1416] digital: digital_start_poll: Unknown protocol [ 785.360295][ T1416] xt_hashlimit: size too large, truncated to 1048576 [ 785.360317][ T1416] xt_hashlimit: max too large, truncated to 1048576 [ 785.360544][ T1416] xt_hashlimit: overflow, rate too high: 0 [ 785.400655][ T1416] nbd4: detected capacity change from 0 to 63 [ 785.412674][ T1416] block nbd3: NBD_DISCONNECT [ 785.412699][ T1416] block nbd3: Send disconnect failed -32 [ 785.412716][ T1416] block nbd3: shutting down sockets [ 785.476359][ T1429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7093'. [ 785.565943][ T1422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7090'. [ 785.565989][ T1422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7090'. [ 785.616004][ T1433] IPv6: Can't replace route, no match found [ 785.688506][ T5623] block nbd4: Receive control failed (result -104) [ 786.143585][ T1448] netlink: 'syz.3.7097': attribute type 15 has an invalid length. [ 786.143608][ T1448] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7097'. [ 786.603371][T31739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.603398][T31739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.778774][T31739] veth1_vlan: left allmulticast mode [ 786.779028][T31739] veth1_macvtap: left promiscuous mode [ 786.779057][T31739] veth0_macvtap: left promiscuous mode [ 786.779171][T31739] veth0_vlan: left promiscuous mode [ 786.954542][ T1471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7104'. [ 787.623170][ T1462] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 787.848885][ T1471] 8021q: adding VLAN 0 to HW filter on device team1 [ 788.827590][T31739] IPVS: stop unused estimator thread 0... [ 789.032611][ T1504] __nla_validate_parse: 2 callbacks suppressed [ 789.032633][ T1504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7114'. [ 789.226227][ T1528] netlink: 'syz.1.7119': attribute type 83 has an invalid length. [ 789.226257][ T1528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7119'. [ 789.297132][ T1521] xt_CT: No such helper "snmp_trap" [ 790.136251][ T1547] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7126'. [ 790.159866][ T1553] pimreg: entered allmulticast mode [ 790.254512][ T1559] veth0: entered promiscuous mode [ 790.261275][ T1559] veth0: left promiscuous mode [ 790.285036][ T1561] veth0: entered promiscuous mode [ 790.301417][ T1558] veth0: left promiscuous mode [ 790.327509][ T1555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7128'. [ 790.327535][ T1555] block nbd3: Unsupported socket: should be TCP or UNIX. [ 790.537064][ T1572] mac80211_hwsim hwsim60 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 790.644319][ T1572] xt_addrtype: ipv6 does not support BROADCAST matching [ 790.876792][ T1584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7137'. [ 791.133588][ T1598] ip_tables: iptables: counters copy to user failed while replacing table [ 791.250256][ T1607] openvswitch: netlink: IP tunnel dst address not specified [ 791.375581][ T31] audit: type=1804 audit(1790916507.531:8): pid=1600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7138" name="/newroot/213/memory.events" dev="tmpfs" ino=1105 res=1 errno=0 [ 791.375634][ T31] audit: type=1800 audit(1790916507.531:9): pid=1600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7138" name="memory.events" dev="tmpfs" ino=1105 res=0 errno=0 [ 791.499814][ T1614] bond2: option min_links: invalid value (18446744073709551614) [ 791.499839][ T1614] bond2: option min_links: allowed values 0 - 2147483647 [ 791.523536][ T1614] bond2 (unregistering): Released all slaves [ 791.904692][ T1627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7147'. [ 791.980638][ T1623] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7146'. [ 791.984638][T29546] hid (null): unknown global tag 0xc [ 791.985095][T29546] hid (null): invalid report_size 16669 [ 791.985149][T29546] hid (null): report_id 25146 is invalid [ 792.033013][T29546] hid-generic 0005:4C4A:04FF.0003: unknown main item tag 0x0 [ 792.033412][T29546] hid-generic 0005:4C4A:04FF.0003: reserved main item tag 0xd [ 792.033468][T29546] hid-generic 0005:4C4A:04FF.0003: unknown global tag 0xc [ 792.033483][T29546] hid-generic 0005:4C4A:04FF.0003: item 0 4 1 12 parsing failed [ 792.034197][T29546] hid-generic 0005:4C4A:04FF.0003: probe with driver hid-generic failed with error -22 [ 792.034469][T29546] [ 792.075928][T29546] ====================================================== [ 792.082942][T29546] WARNING: possible circular locking dependency detected [ 792.089971][T29546] syzkaller #0 Not tainted [ 792.094381][T29546] ------------------------------------------------------ [ 792.101382][T29546] kworker/0:6/29546 is trying to acquire lock: [ 792.107529][T29546] ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: __kernfs_remove+0x174/0x8e0 [ 792.117643][T29546] [ 792.117643][T29546] but task is already holding lock: [ 792.125001][T29546] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 792.135253][T29546] [ 792.135253][T29546] which lock already depends on the new lock. [ 792.135253][T29546] [ 792.145650][T29546] [ 792.145650][T29546] the existing dependency chain (in reverse order) is: [ 792.154654][T29546] [ 792.154654][T29546] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 792.162750][T29546] down_write+0x96/0x200 [ 792.167527][T29546] kernfs_add_one+0x41/0x6f0 [ 792.172646][T29546] kernfs_create_dir_ns+0x1a1/0x230 [ 792.178371][T29546] internal_create_group+0x440/0x1180 [ 792.184268][T29546] cpuhp_invoke_callback+0x434/0x810 [ 792.190086][T29546] cpuhp_issue_call+0x3f0/0x750 [ 792.195470][T29546] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 792.202062][T29546] __cpuhp_setup_state+0x3f/0x60 [ 792.207509][T29546] do_one_initcall+0x250/0x870 [ 792.212791][T29546] do_initcall_level+0x10a/0x1a0 [ 792.218246][T29546] do_initcalls+0x59/0xa0 [ 792.223086][T29546] kernel_init_freeable+0x29d/0x3e0 [ 792.228804][T29546] kernel_init+0x22/0x1d0 [ 792.233649][T29546] ret_from_fork+0x514/0xb70 [ 792.238751][T29546] ret_from_fork_asm+0x1a/0x30 [ 792.244049][T29546] [ 792.244049][T29546] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 792.251862][T29546] [ 792.251862][T29546] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 792.259602][T29546] cpus_read_lock+0x42/0x160 [ 792.264729][T29546] static_key_slow_inc+0x12/0x30 [ 792.270189][T29546] setup_udp_tunnel_sock+0x2eb/0x4f0 [ 792.275999][T29546] l2tp_tunnel_register+0xe77/0x1570 [ 792.281807][T29546] pppol2tp_connect+0x8e3/0x18b0 [ 792.287269][T29546] __sys_connect+0x316/0x450 [ 792.292381][T29546] __x64_sys_connect+0x7a/0x90 [ 792.297658][T29546] do_syscall_64+0x166/0x520 [ 792.302779][T29546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.309189][T29546] [ 792.309189][T29546] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 792.316845][T29546] lock_sock_nested+0x41/0x100 [ 792.322134][T29546] inet_shutdown+0x6a/0x390 [ 792.327151][T29546] nbd_mark_nsock_dead+0x2cb/0x550 [ 792.332784][T29546] recv_work+0x1cee/0x1e10 [ 792.337713][T29546] process_scheduled_works+0xc3d/0x1630 [ 792.343772][T29546] worker_thread+0xa47/0xfb0 [ 792.348884][T29546] kthread+0x38b/0x480 [ 792.353462][T29546] ret_from_fork+0x514/0xb70 [ 792.358575][T29546] ret_from_fork_asm+0x1a/0x30 [ 792.363883][T29546] [ 792.363883][T29546] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 792.371533][T29546] __mutex_lock+0x19d/0x1550 [ 792.376656][T29546] nbd_queue_rq+0x373/0xff0 [ 792.381683][T29546] blk_mq_dispatch_rq_list+0x499/0x1990 [ 792.387757][T29546] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 792.394622][T29546] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 792.401137][T29546] blk_mq_run_work_fn+0x16c/0x300 [ 792.406695][T29546] process_scheduled_works+0xc3d/0x1630 [ 792.412770][T29546] worker_thread+0xa47/0xfb0 [ 792.417889][T29546] kthread+0x38b/0x480 [ 792.422571][T29546] ret_from_fork+0x514/0xb70 [ 792.427686][T29546] ret_from_fork_asm+0x1a/0x30 [ 792.432976][T29546] [ 792.432976][T29546] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 792.440175][T29546] __mutex_lock+0x19d/0x1550 [ 792.445292][T29546] nbd_queue_rq+0xc1/0xff0 [ 792.450230][T29546] blk_mq_dispatch_rq_list+0x499/0x1990 [ 792.456298][T29546] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 792.463151][T29546] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 792.469644][T29546] blk_mq_run_work_fn+0x16c/0x300 [ 792.475196][T29546] process_scheduled_works+0xc3d/0x1630 [ 792.481268][T29546] worker_thread+0xa47/0xfb0 [ 792.486388][T29546] kthread+0x38b/0x480 [ 792.490977][T29546] ret_from_fork+0x514/0xb70 [ 792.496087][T29546] ret_from_fork_asm+0x1a/0x30 [ 792.501385][T29546] [ 792.501385][T29546] -> #4 (set->srcu){.+.+}-{0:0}: [ 792.508506][T29546] __synchronize_srcu+0xc9/0x2f0 [ 792.513964][T29546] elevator_switch+0x1e8/0x7b0 [ 792.519244][T29546] elevator_change+0x2fa/0x480 [ 792.524533][T29546] elevator_set_default+0x375/0x440 [ 792.530246][T29546] blk_register_queue+0x3f3/0x4e0 [ 792.535806][T29546] __add_disk+0x6b8/0xdb0 [ 792.540676][T29546] add_disk_fwnode+0x100/0x3a0 [ 792.545977][T29546] nbd_dev_add+0x733/0xb60 [ 792.550926][T29546] nbd_init+0x168/0x1f0 [ 792.555616][T29546] do_one_initcall+0x250/0x870 [ 792.560918][T29546] do_initcall_level+0x10a/0x1a0 [ 792.566383][T29546] do_initcalls+0x59/0xa0 [ 792.571237][T29546] kernel_init_freeable+0x29d/0x3e0 [ 792.576962][T29546] kernel_init+0x22/0x1d0 [ 792.581816][T29546] ret_from_fork+0x514/0xb70 [ 792.586922][T29546] ret_from_fork_asm+0x1a/0x30 [ 792.592216][T29546] [ 792.592216][T29546] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 792.600043][T29546] __mutex_lock+0x19d/0x1550 [ 792.605164][T29546] elevator_change+0x1af/0x480 [ 792.610444][T29546] elevator_set_none+0xb5/0x140 [ 792.615824][T29546] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 792.622147][T29546] nbd_start_device+0x189/0xb30 [ 792.627517][T29546] nbd_genl_connect+0x167d/0x1cd0 [ 792.633067][T29546] genl_family_rcv_msg_doit+0x233/0x340 [ 792.639129][T29546] genl_rcv_msg+0x614/0x7a0 [ 792.644151][T29546] netlink_rcv_skb+0x226/0x4a0 [ 792.649449][T29546] genl_rcv+0x28/0x40 [ 792.653958][T29546] netlink_unicast+0x7bd/0x940 [ 792.659236][T29546] netlink_sendmsg+0x813/0xb40 [ 792.664514][T29546] sock_sendmsg_nosec+0x13a/0x180 [ 792.670057][T29546] ____sys_sendmsg+0x54e/0x850 [ 792.675336][T29546] ___sys_sendmsg+0x2a5/0x360 [ 792.680535][T29546] __x64_sys_sendmsg+0x1b1/0x290 [ 792.686001][T29546] do_syscall_64+0x166/0x520 [ 792.691161][T29546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.697593][T29546] [ 792.697593][T29546] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 792.706202][T29546] blk_alloc_queue+0x544/0x690 [ 792.711500][T29546] __blk_mq_alloc_disk+0x194/0x390 [ 792.717136][T29546] nbd_dev_add+0x494/0xb60 [ 792.722075][T29546] nbd_init+0x168/0x1f0 [ 792.726757][T29546] do_one_initcall+0x250/0x870 [ 792.732051][T29546] do_initcall_level+0x10a/0x1a0 [ 792.737512][T29546] do_initcalls+0x59/0xa0 [ 792.742364][T29546] kernel_init_freeable+0x29d/0x3e0 [ 792.748088][T29546] kernel_init+0x22/0x1d0 [ 792.752940][T29546] ret_from_fork+0x514/0xb70 [ 792.758059][T29546] ret_from_fork_asm+0x1a/0x30 [ 792.763371][T29546] [ 792.763371][T29546] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 792.770587][T29546] fs_reclaim_acquire+0x71/0x100 [ 792.776061][T29546] kmem_cache_alloc_noprof+0x5f/0x600 [ 792.781982][T29546] __kernfs_iattrs+0xdd/0x380 [ 792.787185][T29546] kernfs_iop_setattr+0xe6/0x3f0 [ 792.792660][T29546] notify_change+0xbba/0xea0 [ 792.797773][T29546] do_truncate+0x1c2/0x250 [ 792.802720][T29546] path_openat+0x15b5/0x1d60 [ 792.807831][T29546] do_file_open+0x23e/0x4a0 [ 792.812857][T29546] do_sys_openat2+0x115/0x200 [ 792.818064][T29546] __x64_sys_openat+0x138/0x170 [ 792.823440][T29546] do_syscall_64+0x166/0x520 [ 792.828555][T29546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.834973][T29546] [ 792.834973][T29546] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 792.843489][T29546] __lock_acquire+0x164c/0x2de0 [ 792.848867][T29546] lock_acquire+0x115/0x350 [ 792.853894][T29546] down_write+0x96/0x200 [ 792.858674][T29546] __kernfs_remove+0x174/0x8e0 [ 792.863967][T29546] kernfs_remove_by_name_ns+0xc0/0x140 [ 792.869947][T29546] really_probe+0x36e/0xae0 [ 792.874977][T29546] __driver_probe_device+0x1e8/0x360 [ 792.880788][T29546] driver_probe_device+0x4f/0x240 [ 792.886338][T29546] __device_attach_driver+0x270/0x410 [ 792.892239][T29546] bus_for_each_drv+0x258/0x2f0 [ 792.897622][T29546] __device_attach+0x2c4/0x450 [ 792.902909][T29546] device_initial_probe+0xa1/0xd0 [ 792.908459][T29546] bus_probe_device+0x12a/0x220 [ 792.913841][T29546] device_add+0x7d7/0xb80 [ 792.918694][T29546] hid_add_device+0x272/0x3e0 [ 792.923900][T29546] hidp_session_dev_work+0x45/0x160 [ 792.929636][T29546] process_scheduled_works+0xc3d/0x1630 [ 792.935712][T29546] worker_thread+0xa47/0xfb0 [ 792.940827][T29546] kthread+0x38b/0x480 [ 792.945421][T29546] ret_from_fork+0x514/0xb70 [ 792.950531][T29546] ret_from_fork_asm+0x1a/0x30 [ 792.955828][T29546] [ 792.955828][T29546] other info that might help us debug this: [ 792.955828][T29546] [ 792.966054][T29546] Chain exists of: [ 792.966054][T29546] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 792.966054][T29546] [ 792.980490][T29546] Possible unsafe locking scenario: [ 792.980490][T29546] [ 792.987939][T29546] CPU0 CPU1 [ 792.993301][T29546] ---- ---- [ 792.998662][T29546] lock(&root->kernfs_rwsem); [ 793.003429][T29546] lock(cpuhp_state_mutex); [ 793.010536][T29546] lock(&root->kernfs_rwsem); [ 793.017809][T29546] lock(&root->kernfs_iattr_rwsem); [ 793.023090][T29546] [ 793.023090][T29546] *** DEADLOCK *** [ 793.023090][T29546] [ 793.031267][T29546] locks held by kworker/0:6/29546: 5, last CPU#0: [ 793.037675][T29546] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.048638][T29546] #1: ffffc9000fa57c40 ((work_completion)(&session->dev_init)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.061009][T29546] #2: ffff888031d41a58 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 793.070246][T29546] #3: ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 793.081574][T29546] #4: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 793.092302][T29546] [ 793.092302][T29546] stack backtrace: [ 793.098210][T29546] CPU: 0 UID: 0 PID: 29546 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 793.107668][T29546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 793.117723][T29546] Workqueue: events hidp_session_dev_work [ 793.123461][T29546] Call Trace: [ 793.126747][T29546] [ 793.129675][T29546] dump_stack_lvl+0xe8/0x150 [ 793.134273][T29546] print_circular_bug+0x2e2/0x300 [ 793.139296][T29546] check_noncircular+0x12f/0x150 [ 793.144249][T29546] __lock_acquire+0x164c/0x2de0 [ 793.149107][T29546] ? __lock_acquire+0x747/0x2de0 [ 793.154059][T29546] lock_acquire+0x115/0x350 [ 793.158596][T29546] ? __kernfs_remove+0x174/0x8e0 [ 793.163534][T29546] down_write+0x96/0x200 [ 793.167784][T29546] ? __kernfs_remove+0x174/0x8e0 [ 793.172728][T29546] ? __pfx_down_write+0x10/0x10 [ 793.177585][T29546] ? kernfs_root+0x1c/0x230 [ 793.182089][T29546] ? kernfs_root+0x1c/0x230 [ 793.186595][T29546] ? kernfs_root+0x1ea/0x230 [ 793.191192][T29546] __kernfs_remove+0x174/0x8e0 [ 793.195965][T29546] ? kernfs_find_ns+0x6f8/0x770 [ 793.200821][T29546] kernfs_remove_by_name_ns+0xc0/0x140 [ 793.206282][T29546] really_probe+0x36e/0xae0 [ 793.210777][T29546] __driver_probe_device+0x1e8/0x360 [ 793.216058][T29546] driver_probe_device+0x4f/0x240 [ 793.221091][T29546] __device_attach_driver+0x270/0x410 [ 793.226471][T29546] bus_for_each_drv+0x258/0x2f0 [ 793.231327][T29546] ? __pfx___device_attach_driver+0x10/0x10 [ 793.237223][T29546] ? __pfx_bus_for_each_drv+0x10/0x10 [ 793.242605][T29546] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 793.248422][T29546] __device_attach+0x2c4/0x450 [ 793.253200][T29546] ? __pfx___device_attach+0x10/0x10 [ 793.258490][T29546] ? _raw_spin_unlock+0x28/0x50 [ 793.263348][T29546] device_initial_probe+0xa1/0xd0 [ 793.268366][T29546] bus_probe_device+0x12a/0x220 [ 793.273217][T29546] device_add+0x7d7/0xb80 [ 793.277550][T29546] hid_add_device+0x272/0x3e0 [ 793.282232][T29546] ? hidp_session_dev_work+0x1e/0x160 [ 793.287609][T29546] ? process_scheduled_works+0x97a/0x1630 [ 793.293326][T29546] hidp_session_dev_work+0x45/0x160 [ 793.298520][T29546] process_scheduled_works+0xc3d/0x1630 [ 793.304069][T29546] ? __pfx_process_scheduled_works+0x10/0x10 [ 793.310061][T29546] ? assign_work+0x3cf/0x5d0 [ 793.314667][T29546] worker_thread+0xa47/0xfb0 [ 793.319261][T29546] ? __kthread_parkme+0x71/0x1f0 [ 793.324201][T29546] kthread+0x38b/0x480 [ 793.328265][T29546] ? __pfx_worker_thread+0x10/0x10 [ 793.333384][T29546] ? __pfx_kthread+0x10/0x10 [ 793.337974][T29546] ret_from_fork+0x514/0xb70 [ 793.342560][T29546] ? __pfx_ret_from_fork+0x10/0x10 [ 793.347671][T29546] ? __switch_to+0xc89/0x1420 [ 793.352359][T29546] ? __pfx_kthread+0x10/0x10 [ 793.356945][T29546] ret_from_fork_asm+0x1a/0x30 [ 793.361721][T29546] [ 793.387813][T31739] wlan1: Trigger new scan to find an IBSS to join [ 793.481886][ T1635] netlink: 'syz.3.7149': attribute type 3 has an invalid length. [ 793.483770][ T1635] sctp: [Deprecated]: syz.3.7149 (pid 1635) Use of struct sctp_assoc_value in delayed_ack socket option. [ 793.483770][ T1635] Use struct sctp_sack_info instead [ 793.484223][ T1635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7149'. [ 793.538681][ T1635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7149'. [ 796.785351][T31744] wlan1: Trigger new scan to find an IBSS to join [ 797.666060][T31746] wlan1: Creating new IBSS network, BSSID 5e:21:ca:44:e0:a0 [ 800.385663][ T5616] Bluetooth: hci5: command 0x0406 tx timeout