last executing test programs: 4.556528965s ago: executing program 4 (id=4281): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000500)="b958945d8ae49c4f19be14f06558", 0x0, 0x1cb0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x80, r0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112b9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f00000002c0)={0x2, 0x1000, "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"}) 4.328700048s ago: executing program 4 (id=4283): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1a0, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xfff2, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x174, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xfff1}}, @TCA_BPF_ACT={0x168, 0x1, [@m_ctinfo={0x164, 0x1b, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x4, 0x8, 0x8, 0x40}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0xdd, 0x6, "2bc35728923701721aa3c1206907dcc9d8b543e2dff0e6c1f1c72f4bbe95b4d012071a9cd3a52c916baa192f13d49bd561d5cb8659385439830e75fb270a20c9e3cb09000067e8ad8dad5ee238c14d852e875544791bf401256a485ce63d670b94d0c0e72e83ff493f9f7832c0ac62b9be5206ab85931897350a76185eaa0a086f3f9c723ed1f1ae47fadcce83f0df3ec18ad73df9e2dbbf597a81169d561156ddae652f19d529a52ec8bce706bc317ce6d5d0dd605c256dbe2d08b90e595b41e88386bdd18542dd8b689a7975b590b240426a577bd91c6427"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f00000003c0)="1c0000001a009b8a140000003b9b30e6c9dc7c64d5524a1f009d9503", 0x1c) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) 4.056126375s ago: executing program 4 (id=4289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000840), 0x80000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000880)={0x4, 0x6, 0x5, 0x400}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021692500000000002020207b1a00fe00000000bfa100000000000047010000f8ffffffb702000008000000b703000000000000850000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) (async, rerun: 32) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x2e, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9fe, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@jmp={0x5, 0x1, 0x0, 0x7, 0x3, 0x1, 0xffffffffffffffff}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xffff}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x286a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x6, 0xfc, &(0x7f0000000500)=""/252, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0xa, 0xc, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0xffffffffffffffff, r2, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x3, 0x1, 0x3, 0x9}, {0x5, 0x2, 0xd, 0x2}, {0x3, 0x4, 0x3, 0xa}, {0x4, 0x4, 0xa, 0x6}], 0x10, 0x101}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000180)='rxrpc_rx_data\x00', r6, 0x0, 0x8}, 0x18) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r5}, 0x4) (async, rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) (async) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async, rerun: 64) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x16, 0x0, &(0x7f00000000c0)=0x55) close(r3) (async, rerun: 32) unshare(0x22020400) (rerun: 32) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000180)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000200)="27050200340f14000600002fb96dbcf706060000170008005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600004000000000802cee2b225c44be2c36bc3139708914e4bbf22a3d8e955873244aac068d5ba57d9ed8cb84d1aa276733deb5e75693512de68fdab7beab6c17ef087e54cc5db5dca4126d4e47f22b26f7507b5413c0c6af5370e1c5ccf9f4aaddfbde233790a7c2be99933afde1dd30ec6f9ff28828d317dcd0e34e06d883613faca01c6f0ea092885a5f4544cf918138227fad427048752053685d8153f97836f68b3ed4424d35c577c2e51925e906c79af4", 0xf3}, {&(0x7f0000001280)="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", 0xe9e}], 0x2}, 0x8010) (async, rerun: 64) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) setsockopt$inet_int(r11, 0x0, 0x1, 0x0, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="b40500000000000061107a0000000000070000000000000095000044c51cb05200000000008ef3a960a080406dee7b83fe63afe8b0ba84dfbf4d2758f39602b5a8b6d6a0da46e5e4878057e43acf9d2457b5bd451ddc28a4d7f38da84e44ea72c7c7fc08cacd88abf1d63c85d98dd4f95eb30ae722f6ec83f9332c88d6de56dec585d98f09c03c3ecb29732284bd8539ed4b844eed8340d9f6db0cb60200000087ad14d45ce0b33785fb4cc1e014734133907b009ec7c9bda01c25edec69771acead61e0e7"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 3.604649963s ago: executing program 4 (id=4297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20050800) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000040)=0x93, &(0x7f0000000080)=0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="120088a8"], 0xfce) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r4, 0xa17, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20050800) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000040)=0x93, &(0x7f0000000080)=0x4) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="120088a8"], 0xfce) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r4, 0xa17, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) (async) 2.856590688s ago: executing program 4 (id=4305): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) (async) sendto$inet(r0, 0x0, 0x0, 0x4080, &(0x7f0000e68000)={0x2, 0x4e23, @broadcast}, 0x10) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async, rerun: 64) r2 = accept4(r1, 0x0, 0x0, 0x0) (rerun: 64) sendmmsg$inet6(r2, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c00)="ffbc0ed6a4ccb5ff43a27de09406698b25f68adfbbf7b90f84d372d9ad715334ce", 0x21}], 0x1}}], 0x1, 0x40000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) (async) recvmmsg$unix(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/192, 0xc0}], 0x1}}], 0x1, 0x2000, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}, &(0x7f0000000140)=0x20) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={r9, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x6, 0xfff8}, 0x90) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000240)=0x4) 2.039740409s ago: executing program 1 (id=4327): r0 = socket$inet(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000002020200090001007f"], 0x34}, 0x1, 0x40030000000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7f}}]}, 0x38}}, 0x4048010) 1.932319624s ago: executing program 2 (id=4330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x9, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) 1.684109961s ago: executing program 1 (id=4332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x8c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xffffffff) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0xf29e, @empty, 0x5}}, 0xfff7, 0x9}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @empty}, @in6={0xa, 0x4e24, 0x0, @empty}], 0x38) 1.597950195s ago: executing program 1 (id=4335): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) unshare(0x20000400) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000308010100000000000000000000000005000300ff0000000600024088ca00002c0004"], 0x50}}, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, 0x0, 0x48) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(fcrypt)\x00'}, 0x58) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@private1, 0x0}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched_retired(r1, &(0x7f0000002300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000022c0)={&(0x7f00000001c0)=@newtfilter={0x20f8, 0x2c, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x7, 0x4}, {0x2, 0x4}, {0x1, 0x10}}, [@f_tcindex={{0xc}, {0x20c8, 0x2, [@TCA_TCINDEX_ACT={0x20bc, 0x7, [@m_gact={0x158, 0x1a, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x9, 0x10000000, 0x5, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x4, 0xffffffffffffffff, 0x8, 0x9}}]}, {0xfa, 0x6, "c01054697fd879b7134f3106d23369d95ab2c2b5c387a8f16e6f0cb5d6a09a44c3063400d85cf78991c8cfe6d84c085a0ef4519d244f6011e16150555d7c9ec59ea925df649f3ad0fbbaf1093eff55843bdb892fe52d06a4c573c6df12a7b3b1a73ae7728595bfa88452f0195e7297c6c8b8a9fda15f8ab86f49a841e9e87c7ae208f9b7ef3134eeb189a4f5e97fc0c2bbb48756bd7509d098ae7b14b78547f17c70abfcb4838a3a68c0b9dffcb725765189e2ac534e52576e7ca2a6f6111c583900e6a671e4b8d3623dfe4a965157d4836effa8e79abac944fbd49d3f641e7670aa945c18d736061ea7769712f6a582633cc4def132"}, {0xc}, {0xc, 0x8, {0x2, 0x6}}}}, @m_pedit={0x1e68, 0x2, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0xeb, 0x100, 0x10000000, 0x8, 0xfffffff9}, 0x74, 0x2, [{0xe000, 0x4, 0x8, 0x9, 0x5, 0x2}]}, [{0x841, 0x2a, 0x9, 0x3, 0x400, 0x7}, {0x1, 0x0, 0xfffffff8, 0x2, 0x81, 0x7}, {0xfffffffd, 0x10000, 0xfff, 0xd, 0x9, 0x1}, {0xe3b5, 0x8, 0x80000000, 0x2, 0x7f, 0x2}, {0x5, 0xa1e, 0x7fffffff, 0xc64d, 0x5, 0x8}, {0x2, 0x6, 0x6, 0x1, 0xffffffff, 0x7f}, {0xd7, 0x10001, 0x6, 0x7, 0x6, 0x1}, {0x0, 0x9, 0x9, 0xffffffff, 0x1dec0000, 0xb252}, {0x1000, 0x80000000, 0xffffffff, 0x7, 0x1, 0x81}, {0x3, 0x49cc, 0x4, 0xb1, 0x55, 0x800}, {0x40, 0x44, 0x9, 0xff, 0x0, 0x7ff}, {0x89, 0x2, 0x1, 0x4, 0x8000, 0x9}, {0x1, 0x0, 0x4, 0xfffffff7, 0x4, 0xf}, {0x3, 0x6127, 0x8a, 0x401, 0xffffffff, 0x8}, {0x1, 0x5, 0x7, 0x5, 0x4316, 0x2}, {0xfffffff8, 0xfffffee2, 0x6, 0x4, 0x8, 0x5}, {0x4b5, 0x2, 0x1, 0xe, 0xfe, 0x80000001}, {0x8e, 0x1000000, 0x4, 0x42, 0x2}, {0x800, 0x80000001, 0x1, 0x6, 0x7, 0x4}, {0x10001, 0x4, 0x2, 0xfffffffc, 0x6, 0x401}, {0x2, 0x8, 0x0, 0x8, 0x3, 0x9}, {0x0, 0x80000000, 0x7f, 0xa0, 0x6b6}, {0x8001, 0x3, 0x1ff, 0x751e, 0x6, 0xc0000000}, {0x8, 0x6, 0x7b, 0x8, 0x7, 0x400}, {0x6, 0x5, 0x2, 0x4a2743fe, 0x0, 0x9}, {0x65, 0xfff, 0x8, 0x3, 0x9, 0x571}, {0xffffffff, 0x7, 0x10, 0x0, 0x200, 0x6}, {0x7, 0x36, 0x2, 0x1, 0x10000, 0x2}, {0x661, 0x7, 0x8, 0x8, 0xfffffff7, 0x98}, {0x2, 0x9, 0x7fff, 0x1, 0x8, 0x4}, {0x10, 0x800, 0xff, 0x5, 0x6, 0xec64}, {0xc, 0x81, 0x7, 0x1, 0x5, 0xffffffff}, {0x2, 0x6, 0xe5f6a2b, 0xfff, 0x4, 0x4}, {0x9a44, 0x10, 0x1, 0x6, 0x8, 0xaf5}, {0x0, 0xea, 0x0, 0x8, 0x15200000, 0x8}, {0x1, 0x5, 0x1, 0x7, 0x9, 0x5}, {0x7, 0x7, 0xa, 0x7, 0x8, 0x9}, {0x1, 0xe0, 0x7, 0x7275, 0x8000, 0x120}, {0x7, 0x8, 0x0, 0x3, 0x2, 0x2}, {0x6, 0x0, 0x8, 0x4, 0x3cf6}, {0x200, 0xcee2, 0xfff, 0x2, 0xc0a, 0x4}, {0xd56, 0x6, 0x2, 0x800, 0x5, 0xe99}, {0x401, 0x7, 0x8, 0x200, 0x7, 0xffff}, {0x486a, 0x1, 0x6, 0x6, 0x4, 0xff}, {0x4, 0x9, 0x9, 0xffffffae, 0x4e07, 0x34b}, {0x9553, 0x1827, 0x9, 0xb8, 0x7, 0x9c59}, {0x6, 0x6, 0x8, 0x3, 0x6, 0xb}, {0x0, 0x7, 0x1, 0x0, 0x1, 0x7}, {0x3, 0x7, 0x6, 0x0, 0x7, 0x5d6cf246}, {0x80, 0xe307, 0x0, 0x2, 0x1}, {0x71d, 0x1af, 0x0, 0x9, 0xb53d, 0x2}, {0x3b73, 0x8, 0x0, 0x9, 0x8}, {0xbb61, 0x1, 0x7, 0xffffffff, 0x1, 0xa}, {0x9, 0x6, 0xfffffffe, 0xe, 0x5, 0x9}, {0x401, 0xda, 0x5, 0x0, 0x4}, {0x1a, 0x7, 0x6, 0x0, 0x5, 0x7}, {0x0, 0x9, 0xf71a, 0x40, 0x2, 0xfffffff9}, {0x1, 0x1, 0xffffffff, 0x6, 0x9, 0x5}, {0x8000, 0x1, 0x509fe939, 0x7, 0xffffffff, 0x5}, {0x53c, 0x0, 0x8, 0x4, 0x8, 0x8}, {0x6, 0x8001, 0x4, 0x34, 0x7, 0x6}, {0x1, 0x6, 0x10000, 0x800, 0x10000, 0x8}, {0x3ff, 0x5, 0x4, 0xa93, 0x1, 0x9}, {0x9, 0x18e97a84, 0x40008, 0x6, 0x3, 0x90000000}, {0x2, 0x100, 0xc, 0xfffffff7, 0x7, 0x10000}, {0x80000001, 0x7, 0x6, 0x6, 0x81, 0x80}, {0x2, 0xfffffe00, 0x4, 0x3, 0x8, 0x2}, {0xa3, 0x0, 0x8b, 0x8, 0x0, 0xb}, {0x3a, 0x4040000, 0x9d, 0x0, 0x9, 0xd}, {0x8, 0x939, 0x3, 0x40, 0x9, 0x3}, {0x101, 0x8, 0x6, 0x0, 0x0, 0x9}, {0x3, 0x7f, 0x40, 0x2, 0x8, 0x800}, {0xc6, 0x8, 0xe, 0x8e, 0xe7, 0x5}, {0x4, 0x3, 0x6, 0x0, 0x8001, 0x1}, {0x4, 0x2, 0x6, 0x226c1e51, 0x8, 0x9}, {0x5, 0x9, 0x9, 0x0, 0x5, 0xfffffe00}, {0x4, 0x8b, 0x3, 0x0, 0x1, 0x7}, {0x4ba5fc4f, 0x8, 0x6af2d04f, 0xa, 0xc790, 0x9}, {0x1, 0x80, 0xed, 0x1004, 0x4, 0x3}, {0x4, 0x80000000, 0x6, 0x5, 0xfca7, 0xc5d}, {0x100, 0x6e, 0x40, 0xe, 0x7}, {0x0, 0x8, 0x8000, 0x0, 0xcc4, 0x5}, {0x6, 0x9, 0xffffffff, 0x2, 0x87, 0xfffffff8}, {0xd, 0x43f, 0x5, 0xfffffffe, 0x10, 0x2}, {0xbd6, 0xc663, 0x8001, 0xb, 0x9, 0x5}, {0x489ac03f, 0x400, 0xa6ca, 0x4, 0x109f412c, 0x4}, {0x81, 0x7, 0xf8, 0x2, 0xffffffff, 0x3}, {0xa, 0x2, 0x3, 0x3bf, 0x2, 0x1}, {0x5, 0xef15, 0x6, 0x0, 0x6, 0x9}, {0x32d, 0xfffffffc, 0xfff, 0x9, 0x721, 0x7}, {0x5, 0x9, 0x8, 0xa, 0x3, 0x1}, {0x7, 0x5, 0x1, 0x2, 0x6}, {0x2, 0x2, 0x3, 0x0, 0x1, 0x3}, {0x1ff, 0xf, 0x8, 0x3, 0x81, 0x1}, {0x1, 0x373d, 0x7, 0x8, 0x7}, {0x101, 0x0, 0x0, 0x7, 0x3, 0x1000}, {0x5, 0x1, 0xd72, 0x19, 0x6, 0x6}, {0x4, 0x1, 0x5, 0xa, 0x2, 0x6293}, {0x5, 0x7fff, 0x1ff, 0x10000, 0xffff, 0x3}, {0x7ff, 0x1, 0x40004, 0x6, 0x7, 0x101}, {0x3, 0x80000001, 0x9, 0xffff8000, 0x8, 0x7fffffff}, {0xfffffff7, 0x0, 0xc, 0x10, 0x101, 0x3}, {0x2, 0x80, 0x8099, 0xe53, 0x5, 0x8}, {0x80000000, 0x8, 0x3, 0x8000, 0xfffff723, 0x9}, {0x7, 0x8, 0x4db, 0x3, 0x7, 0x9}, {0x6, 0x7, 0x1, 0xffff, 0xbd, 0xffffff01}, {0x6, 0x1, 0x5, 0x81, 0x7, 0x1ff}, {0x0, 0xa9, 0x8, 0x9, 0x9, 0x5}, {0x4, 0xdbe, 0x9, 0x6, 0x8, 0xfffffffb}, {0x7a, 0x7ff, 0x3cf9, 0x2, 0x6a, 0x8001}, {0x6, 0x1f1, 0x0, 0x3ff, 0x3ff, 0x2}, {0x2, 0xffff, 0x7, 0x2, 0x9, 0x6}, {0xfffffffe, 0xffffff01, 0x800, 0x5, 0x9}, {0x19, 0x3, 0x0, 0x9, 0x3, 0xa2b}, {0x1, 0x0, 0x3, 0xfffffbff, 0x4, 0x4}, {0x5, 0x5, 0x8001, 0x9, 0x6, 0xe}, {0x40000000, 0x4, 0x2, 0x6, 0xc80, 0x5}, {0x1a, 0x0, 0x40, 0x9, 0x6}, {0x2, 0x6, 0xfffffff8, 0xff, 0xfffff001, 0x7}, {0x9, 0x5, 0xe, 0x6, 0xf, 0xfffffff7}, {0x1, 0x5, 0x14, 0x4, 0x9, 0x5}, {0x1ff, 0xd4f6, 0x8, 0x8, 0xfffffff7, 0x3}, {0x602b, 0x4, 0xffffffff, 0xf, 0x5, 0xff}, {0x2, 0xbfe4, 0x7f, 0x6, 0xff, 0x4}, {0x9, 0x3, 0x3e7a, 0x76, 0x7, 0xded7}, {0x1, 0x200, 0x10a, 0x1, 0x7, 0x3}, {0x400, 0x7f, 0x4, 0xfffffff8, 0x5, 0x6}, {0x0, 0x2, 0x5, 0x50, 0xfffffff9, 0x26}], [{0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {}, {0x4}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {}, {0x2}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x4}, {}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {}, {0x4, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x5}, {0x4}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x2}, {0x2, 0x1}], 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0xf8, 0x1d, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xe}]}, {0xc7, 0x6, "fb69e79192ffbdb52285841bf49d6edc76ca0fbf42faa5bf7c087e5bef9e84cc1aad37bca44299d389129f66cb3dcf1575ebdcd3deaec6f87684e2ff4e5efb725203f020135805f4708bb2e294a6df84704456719f2faced900a24d6faeda6e3ed031f246a204574df38cfabde4b58377490ed5311e985fafc373d8384da7451b6697e7008ee887f44b63c7a964cb2fe8b773a0a29db94f13416da16d657b70c0e6330ae150dda6e093a87eaa522f56267f58ea98dcae7c4b914e8c161190233af8234"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x81}]}}]}, 0x20f8}, 0x1, 0x0, 0x0, 0x1880}, 0x4) 1.527964626s ago: executing program 2 (id=4337): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x4, 0x7fffffffffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000010c0)={r1, 0x0, 0x65, 0x0, &(0x7f0000000040)="d6ae1d15bf2a91ab084f9c87fd067d258876b1799242367abd21aa395c9d0ffd23e58d408614930f949b35a054cf9d50c6d1e7a390f8d274562671b085105a557b52e0b33602f0224c3ff95f467358cef474b8146a8b4e367761783420da238b2cbe9c1631", 0x0, 0xfffffff8, 0x0, 0x1000, 0x0, &(0x7f00000000c0)="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", 0x0, 0x2, 0x0, 0xc50b}, 0x50) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000002240)={0x0, @multicast1, @empty}, &(0x7f0000002280)=0xc) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000024c0)={r1, 0x20, &(0x7f0000002480)={&(0x7f0000002340)=""/45, 0x2d, 0x0, &(0x7f0000002380)=""/232, 0xe8}}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002580)={{r1, 0xffffffffffffffff}, &(0x7f0000002500), &(0x7f0000002540)=r1}, 0x20) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002640)={{r1, 0xffffffffffffffff}, &(0x7f00000025c0), &(0x7f0000002600)=r1}, 0x20) (rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002700)=@bpf_lsm={0x1d, 0x14, &(0x7f0000001140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001200)='GPL\x00', 0x9, 0x1000, &(0x7f0000001240)=""/4096, 0x40f00, 0x60, '\x00', r2, 0x1b, r1, 0x8, &(0x7f00000022c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000002300)={0x5, 0x6, 0x6, 0x6}, 0x10, r3, 0x0, 0x3, &(0x7f0000002680)=[0x1, r1, r4, r1, r5, 0xffffffffffffffff, r1, r1], &(0x7f00000026c0)=[{0x5, 0x4, 0x1, 0x2}, {0x0, 0x3, 0x0, 0x5}, {0x2, 0x5, 0xc, 0x3}], 0x10, 0x1}, 0x94) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002980)={0x18, 0xe, &(0x7f00000027c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @exit, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @exit]}, &(0x7f0000002840)='GPL\x00', 0x5, 0x6, &(0x7f0000002880)=""/6, 0x41000, 0x1, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000028c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000002900)={0x2, 0xa, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002940)}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000002a40), r1) (async) r7 = accept(r1, 0x0, &(0x7f0000002a80)) bind$inet(r7, &(0x7f0000002ac0)={0x2, 0x4e24, @broadcast}, 0x10) (async) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x0, &(0x7f0000002b00)=0x10001, 0x4) close(r7) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffff}, {0x9, 0xd}, {0x0, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x800) (rerun: 64) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000002c40)=0x8d, 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000002d40)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)=@dellink={0x34, 0x11, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x8080, 0x204}, [@IFLA_CARRIER={0x5, 0x21, 0x78}, @IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000008}, 0x20002011) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002fc0)={0x0, 0xd, 0x18}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003080)=@bpf_ext={0x1c, 0x1a, &(0x7f0000002d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0xa, 0x9, 0x9, 0x8, 0x1}, @alu={0x7, 0x0, 0x5, 0x6, 0x2, 0xfffffffffffffff0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3d2, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_val={0x18, 0x3, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @ldst={0x0, 0x3, 0x0, 0x7, 0x7, 0xffffffffffffffb1, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002e80)='syzkaller\x00', 0x8, 0x55, &(0x7f0000002ec0)=""/85, 0x0, 0x1, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002f40)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000002f80)={0x1, 0x1, 0x3, 0x10}, 0x10, 0xe532, 0xffffffffffffffff, 0x4, &(0x7f0000003000)=[r9, r5, r4], &(0x7f0000003040)=[{0x3, 0x5, 0x6, 0xb}, {0x1, 0x4, 0xf}, {0x5, 0x5, 0x1, 0x7}, {0x5, 0x3, 0x0, 0x9}], 0x10, 0x8}, 0x94) r10 = socket(0x1a, 0xa, 0x7f) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000003180), r7) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r10, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x30, r11, 0x18, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x1a, 0x6, 0x1000, 0x6}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x11) socketpair(0x11, 0xa, 0x5b, &(0x7f0000003280)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SEND(r12, 0x40489426, &(0x7f0000003300)={{r6}, 0x2, &(0x7f00000032c0)=[0x10000, 0x2], 0x2, 0x1}) (async, rerun: 64) bind$inet(r7, &(0x7f0000003380)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) (rerun: 64) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r13, 0x6, 0x2, &(0x7f00000033c0)=0xffff, 0x4) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f0000003400)={{0xa, 0x4e23, 0xfffffff0, @private0, 0xffff8000}, {0xa, 0x4e20, 0xf, @remote, 0x7}, 0x0, {[0x2, 0x8000, 0x18, 0x9, 0xed3, 0xb067, 0x40, 0x9]}}, 0x5c) (async) setsockopt$inet_tcp_int(r10, 0x6, 0xe6bb767c0ce668e1, &(0x7f0000003480)=0x6, 0x4) 1.31230107s ago: executing program 2 (id=4340): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001800010000000000000000000200000900000009000000000400088008001e0003000000"], 0x28}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="ea0ec42f83f31b743ae8c57c6599a7081142b344eea99a4351a57ee0f20db8a54af93ce1aff4442c92f9383a80e0629f4c03c65f6cc742d7cc59d1921266bcae4a7a6f817aaacd99d490277bfbfa43dec6a92d5ed8b1fcae5d59c42e77d524b124a847f868c48068bc5e810d4203781fa267f1fb0dca13df501ea5fdac4a59410b0056a60d2e11ee7eb2475e1954ab7e8ba6bcabab25e70404a174e2b78c07bc22efda7f4c566f9df45cc747f9c1e88924911bc3733d", @ANYRES16=r4, @ANYBLOB="000028bd7000fcdbdf25020000000900030073797a3200000000140002006d6163766c616e310000000000000000140002006261746164765f736c6176655f3000000500040001000000"], 0x50}, 0x1, 0x0, 0x0, 0x8014}, 0x40000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'team_slave_0\x00'}) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000000)="ff45679b012420893ba2a1fd1ee01ebc00000000a1a037b8f6bf96abd096b48908b61cb527072453f698f34d", 0xfffffc63}], 0x1}, 0x4000000) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x5452, &(0x7f0000000080)) sendmsg$kcm(r7, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4008000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010023000008000100", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r10, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r10, 0x0) r11 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r11, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x1, 0x3}, 0x10) sendmsg$tipc(r11, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'\x00', 0x8000}) write$nci(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="7110010596"], 0x5) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)={0x2, 0x9, 0x0, 0x2, 0x2}, 0x10}}, 0x0) 1.100464042s ago: executing program 0 (id=4343): sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008090}, 0x800) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x7, 0x6, 0x201, 0x0, 0x0, {0xd, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40054) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x10, @mcast1, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xfdef}], 0x1) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0xc7) shutdown(0xffffffffffffffff, 0x1) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 898.069981ms ago: executing program 0 (id=4345): socket$nl_route(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020400000e00000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe880000000000000000000000000001000000000000000005000600000000000a0000000000000000000000000000000000ffffe0000001ac95641c00000000"], 0x70}}, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000070000e800000000000000000000000000000000a85768594c79ffd478a6eae6b2d6f43bba25e3a6878aff179ecac2b768343e86a4d6877c9bc5dff02cfbefae0f61080b5db1e1cb754bc7afe61c151422ff83d7b6b3a2882e2623440518c1026e102f7cefe5e005bf3bf104ef464afbff6bf9f82169a7e45036047ac5266c04f5c2da3ac605aca23ed5697b1ba20970d3e7f78b8aa389f138971e13", @ANYRES32=0x0, @ANYBLOB="05000a0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c0001800b0001007470726f787900130c00028008000140000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000200)) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, 0x0, 0x4000000) sendmsg$NL80211_CMD_SET_BSS(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01802600", @ANYRES32=r11, @ANYBLOB="0500a3000000000005001e0010000000050060000000000005001d0007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x60000}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0xe}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}]}]}}}]}, 0x68}}, 0x8c0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="00042dbd7000fbdbdf255400000008000300", @ANYRES32=r15, @ANYBLOB="0a00060008021100000100000a000600ffffffffffff00000a00060008021100000000000a00060008021100000100000a000600ffffffffffff0000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 760.442198ms ago: executing program 1 (id=4346): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) write$nci(r1, &(0x7f0000000240)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x4, {0x1, 0x2, "cd42"}}, 0x7) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x42}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0x3) 752.413587ms ago: executing program 0 (id=4348): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2530000000", @ANYRES32=r3, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) 687.625836ms ago: executing program 3 (id=4349): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271a, 0x0, &(0x7f0000000040)) (async) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f00000000c0), 0x4) 632.410876ms ago: executing program 0 (id=4350): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000280)={0x0, @local, @local}, &(0x7f0000000500)=0x50) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@remote, 0x0, r2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0xc00}) setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f00000001c0)=0xe130, 0x4) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000040)=0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000240)={'geneve0\x00', &(0x7f0000000200)=@ethtool_rxfh={0x46, 0x4, 0x400, 0x1, 0x6, "f7b6fe"}}) sendmsg$nl_xfrm(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)=@updsa={0xf8, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2b}, @in6=@private2, {0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x400}, {0x0, 0x31638d34}, 0x0, 0x4, 0x2}, [@replay_thresh={0x8, 0xb, 0x2}]}, 0xf8}}, 0x0) 608.925462ms ago: executing program 3 (id=4351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000100001000000ee41ca35422186f7000a7c000000060a010400000000000000000a0000050900010073797a31000000005000048020000180070001006374000014000280080002400000000708000140000000092c0001800a0001006c696d69740000001c0002800c00024000000000000000000c00014000000000000000090900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x8, 0x7, 0x1, 0x0, 0x3, {0x0, @in={{0x2, 0x4e21, @loopback}}, 0x80000000, 0x9, 0x1, 0x9, 0xa}}, &(0x7f0000000140)=0xb0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000a80)="87", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r3, 0x1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x28, r1, 0x4, 0x70bd2d, 0x5, {{}, {@void, @val={0xc, 0x99, {0x9, 0x48}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r7, @ANYBLOB="050003"], 0x28}}, 0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e8000000010901040000000000530000000000000900010073797a31000000000900010073797a310000000008000340000000000c0004800800014000000000100002000c00028007000100000000000800054000000000840002001400018008000100ffffffff08000200ac1e000114000180080001000a01010008000200ffffffff06000340000300000c0002"], 0xe8}}, 0x0) 511.534828ms ago: executing program 0 (id=4352): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000111035000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000100850000ff0b000000b700000000000000f6100000dbdc13922500000000000041c17975a12df7844e99587f7b9a2e5c4a7dfab06dab6ea5df60000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000183400000400000000000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 448.217731ms ago: executing program 3 (id=4353): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000400)=@ethtool_drvinfo={0x3, "9ef6aeb0996fd8d77803e21a590d1cff12a9dab6f390d872c5de12569ad30556", "666d857d1dc6439a8bcdf8e1c10ee4873a493d4e4ae9346cc418a4bb4a5a91a7", "61fb23db8ff55530f6e0d09450deb906eed399989a23420ffa115843702e55a0", "be2258ec7c7320a1ae40fe9995dc3cd6caed0922b8801f0ac2f0ccc4187cebff", "c3c81060262e6ed523b4b9aea8286726428eccc951d3acb597fd5a3acfc80ccc", "4ce17855d2534a547c2067b7"}}) syz_emit_ethernet(0x86, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x65, 0xa, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @remote, {[@timestamp_addr={0x44, 0x14, 0xb6, 0x1, 0x0, [{@remote, 0x80}, {@empty}]}, @timestamp_prespec={0x44, 0x34, 0xf4, 0x3, 0x7, [{@multicast2, 0xb61d}, {@local, 0x400}, {@multicast1}, {@remote, 0x7}, {@broadcast, 0xfffffc01}, {@multicast1, 0x8}]}]}}}}}}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r2, &(0x7f0000000040)=0xfffffffffffffffc, r1, 0x0, 0x800000000ff, 0x0) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000240)="68a865d866494f6bd22f9da537ec", 0xe}, {&(0x7f0000000280)="d448", 0x2}, {&(0x7f00000002c0)="3683f90d846a3fd14517de3fbd10814e70cc36eeddc38667dff9612f7795186a4f383144e60aeb25e2d627cd164b947252ef44a434cacb933fc09209e2e6d28502d844cb65f6ef47640a0fa4e36a2e78c1a45f4e5bcfe3bc91aa42a4fbaf094b4b56b7a8fa0f576feff1c51da83f11799096243da39154cf782cba64a283feefbfe28897fb88f328df48eca15acdc23dad8e28e96b6cac5eb1", 0x99}, {&(0x7f0000000380)="82d55a180eae6f3aa3bac1401d780ac015f4a601f168265f2ec72da00c94e735240a2cf1e25e7451a624476e7fe6034a", 0x30}, {&(0x7f00000003c0)="8fcbb425c22835be8d55db9df32eb7f3b049635725a27f24bdbad634440113649f88f9198d784d4efad403df7f6702697d0fc6737ddd4ec25cde8daa15fb0761d38814ab5f3e34cdbfba05bc04967972aba5abc9127f3c5652cc9698fc58eb4e3cc0eced8423ab77", 0x68}, {&(0x7f0000000440)="8fa65558252d506a8002571d3c6b6f45ffb0f19401b90f92d2d49871a92fa3dfae83f0c75f225fc1884d9a28e6aec3b075e3d7c4e239bee3373a2aac59c072251ec824638642064440617a3d8a9adedccc7640f8acded00c2f7e70ee33b507dbfdab362b18ba28d3", 0x68}, {&(0x7f00000004c0)="2d12c1fa3468a74b2ce51d2066229625aedac1e7534a420fa84cc97522b0", 0x1e}], 0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)=0x58) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0xcc, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_NAT={0x94, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x35}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private1}}}]}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd000000", 0x24) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000080)=ANY=[@ANYBLOB="c40000001900f3fe0000000000000000fe8000000000000000000000000000bbac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000b86b6e0000000000000000000c0008"], 0xc4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x72246e269e0e88d6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000c400950000000800000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r5}, 0x94) r7 = openat$cgroup_ro(r2, &(0x7f0000000580)='cgroup.events\x00', 0x0, 0x0) sendmsg$key(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)={0x2, 0x18, 0x2, 0x3, 0x54, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd25}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e20, 0xe68, @local, 0x5}, @in={0x2, 0x4e24, @private=0xa010100}}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_x_sec_ctx={0x15, 0x18, 0x9, 0x9, 0x9a, "1ea78f0a57bd721a48075a2d383d089f563fd843ef46811e6c947115d0ee95b066112090c5a825e0ec79ef2f3171f0271d4516d23c979af23513b8d5d8324ae9752b45d1c95a70e6ae5d137daeb615d794755f3698bf167fe01664a3d95e87223be602eaa46b3cd9645654773174d70e1ca67d1dc9b3ad70f2812121dc5f9960530f549c956fcd8ea28da974981d974e4225baa6009d10fcfb29"}, @sadb_x_sa2={0x2, 0x13, 0x4, 0x0, 0x0, 0x70bd2d, 0x3501}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_address={0x5, 0x7, 0x32, 0x20, 0x0, @in6={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0xb}}, @sadb_x_sec_ctx={0x1c, 0x18, 0xe, 0x1, 0xd3, "e254137a5f2fec2f314240c7b63bd5163fab3b78f7e939b13c0ca0776c6aebe8e56787154f692db54de968dd8a0d97fef50386b4e5061dba7bb7a82fa267725c5c402138d8c82bf01e5f744ac8bcd326a52640488d39e62543b34c409268b1400f5a21d7425ecd8d4088e96f061e8ed9776e996fa87686039be7d5bc64ccb0ad54e120b029398e3614ab1239c9ff3e90efd175955608632721a0fbdb919aee7b723b44cf9b3a8745a44c16be30596faddb9bbc322641cf6a735deffe2115ff7fcea2755851547865ade0bcb565783f8f4ce3da"}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd25, 0x34ff}, @sadb_x_sec_ctx={0xd, 0x18, 0x9, 0x8, 0x5c, "264703d7e8a2ab4140b8e144fe80b7bb341b376c1e2637f3a76270ac778d649b5bf7079fa07b44e6142d5032dd097f8546c07bfc18610afd19b1a8a83eb2921fb31978396db11ade10233f0f499525d17fa1757f81893be10adb72bc"}]}, 0x2a0}}, 0x1801) 376.292273ms ago: executing program 0 (id=4354): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x220c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) r12 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r12, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="42ee6100"/16, @ANYRES16=r3, @ANYBLOB="01000000000000000000047409060800020000000000080004000000000014000600626f6e6430000000000000000000000014000300ff020000000000000000000000000001"], 0x4c}, 0x1, 0xffffffff00000003}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 372.370577ms ago: executing program 2 (id=4355): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x0) 335.537436ms ago: executing program 1 (id=4356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) 244.569879ms ago: executing program 3 (id=4357): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="190000fd7e500004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001000000ffffac14140000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f00000000000000000001000000002b000000ff0204000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004000000000000000000600012"], 0x150}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 234.527244ms ago: executing program 2 (id=4358): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae535af2f0a70ddeb37f"}, @TCA_CT_MARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000140)={0x1}) (async) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140140002d00010000000000fcdbdf250401f2800c00160000000000000000801400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bbfa19dd6dafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dc81ddb59e655b1086cda40e00aec58754734ec26203508f05c95eb43d9621dc08c029d1608a46cf26fd8816b89f7cb81e923c65973deb0a99b962b9fc234f755a6eb7bbd7b85b3a68216e9a3ddb9ad008078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3a, 0x1c, 0x8000, 0x0, 0x5, 0x2, 0x0, @broadcast, @loopback}, {0x16, 0x7c, 0x0, @multicast2}}}}}, 0x0) (async) sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x44b, 0x70bd26, 0x25dfdbfe, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x7fff}]}}}]}, 0x40}}, 0x0) (async) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r7, 0x112, 0xb, 0x0, &(0x7f0000001d80)) (async) r8 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000240)=0x4) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00082bbd7000fddbdf2506000000050013000600000008000a00040000000500210000000000050006000100000008000c00000000000c001000060000000000000008001700", @ANYRES32=r8, @ANYBLOB="4741f129f26471ca776a468e52f7466883dd09233e256dd7e4eb5ee88d7b00fd3382aa4dad4cbfc86f0044d70d798390ff8b5294131a1996ea8f80318a28b375a3355473b01b3268eed6aac0a8"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x51) 130.182704ms ago: executing program 1 (id=4359): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)={0x48, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191d}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) 76.465723ms ago: executing program 3 (id=4360): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="4c00010002"], 0x8) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e5d72f10952e25e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x20004086) tee(r1, r1, 0x12000000, 0x2) 75.721905ms ago: executing program 2 (id=4361): r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @loopback}, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40000151) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000021301000600000600000000000000000e0003006269746d61f03a6970000000050003"], 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000100)={'tunl0', 0x32, 0x36}, 0x8) r4 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r4, &(0x7f0000000000)=""/44, 0x2c, 0x0, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000340)=0x7e, 0x4) close(0x3) r6 = socket$inet6(0xa, 0x4, 0x800a0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff}}, [@tmpl={0x184, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x7}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in6=@private1, 0x3502, 0x2, 0x0, 0x7, 0x7f, 0x0, 0x4}, {{@in=@multicast1, 0x4d5, 0x6c}, 0x2, @in6=@private0, 0x3507, 0x4, 0x3, 0x3, 0x4, 0x2, 0x3}, {{@in6=@private0, 0x4d3, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x2, 0xfffffffa, 0x401, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}, {{@in=@broadcast, 0x4d5, 0x33}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x34ff, 0x3, 0x0, 0x6, 0x5, 0x4, 0x7f}]}]}, 0x23c}}, 0x4000) sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80003, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="850000006a0a00ff000000000c0000000000000095000000000000ea00010000000000008098b57c4924e4fefb7c1d85a463678be969470e32c8b71818e1b8b1a1d78354bb3458fd305c71d918cb117c66d5094b9925a82070c5d377a4e89bc2bf103dc5b5f408b9c83d3e201e452e8df3bf2c2e2c81751993dfe48bc0fb5f4830c3ede79a2f1b3dcfd68ed6ea71b4e931ff743ebcd23fb965fe965c44a9fafca5f55faa9838a28064a51d8246", @ANYRES32=r3, @ANYBLOB="000000000000000005000000000000009500000000000000", @ANYBLOB="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", @ANYRESDEC], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000076a27247deb80000000000000000005e177600", @ANYRES32=r9, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRES64=r9, @ANYRESDEC=r5, @ANYRESDEC=r9, @ANYBLOB="ff44", @ANYRES32=r0, @ANYRES8=r9, @ANYRESHEX=0x0, @ANYRESDEC=r5], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 41.120513ms ago: executing program 4 (id=4362): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x5) close(r1) r3 = socket$netlink(0x10, 0x3, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xfffffff9) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0xc8, 0x16, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x94, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x58, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_USERDATA={0x44, 0x6, "d949a3f5ad12c6131699baf1f98c1f00e91e52980cf0d79b2fdd3dd77692960c3e19ba483dfaebfcdf9ec939f6102ba31c71942e8a3af93cb1002ef782f84a05"}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x80, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xeef6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffff09}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffd}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x244}, 0x1, 0x0, 0x0, 0x15}, 0x24004080) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(r6, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, 0x0) 0s ago: executing program 3 (id=4363): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@local, @dev={0xac, 0x14, 0x14, 0x3a}, 0x20, 0x1e}}) r4 = socket(0x14, 0x2, 0x4) ioctl$SIOCX25GDTEFACILITIES(r4, 0x61d0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r2, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0x18, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x8, 0x645}, 0x3c) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e24, 0xfffffffe, @remote, 0x8}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000000)={0x0, 0xa}, 0x8) bind$alg(r6, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) kernel console output (not intermixed with test programs): een left with an inconsistent configuration, please check. [ 260.332959][T14988] macsec2: entered promiscuous mode [ 260.342551][T14988] macsec2: entered allmulticast mode [ 260.756486][T15024] vcan0: entered allmulticast mode [ 260.806266][T15028] netlink: 'syz.0.2522': attribute type 1 has an invalid length. [ 260.860249][T15031] macvtap1: entered promiscuous mode [ 260.865733][T15031] vlan0: entered promiscuous mode [ 260.879629][ T5880] Bluetooth: hci4: command 0x0405 tx timeout [ 260.889762][T15031] macvtap1: entered allmulticast mode [ 260.895590][T15031] vlan0: entered allmulticast mode [ 260.903904][T15031] veth0_vlan: entered allmulticast mode [ 261.152248][T15050] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 261.267462][T15057] __nla_validate_parse: 16 callbacks suppressed [ 261.267480][T15057] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2533'. [ 261.583886][T15086] netlink: 'syz.3.2540': attribute type 11 has an invalid length. [ 261.641061][T15089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.698473][T15088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2541'. [ 261.788729][T15091] netlink: 'syz.1.2542': attribute type 10 has an invalid length. [ 261.860806][T15096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2542'. [ 262.013876][T15113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2548'. [ 262.031237][T15114] sctp: [Deprecated]: syz.0.2549 (pid 15114) Use of int in maxseg socket option. [ 262.031237][T15114] Use struct sctp_assoc_value instead [ 262.092544][T15113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.422055][T15137] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2557'. [ 262.583974][T15144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2559'. [ 262.617424][T15145] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 262.801485][T15162] ip6gre2: entered allmulticast mode [ 262.935283][T15168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2569'. [ 262.952120][T15171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.958305][ T5880] Bluetooth: hci4: command 0x0405 tx timeout [ 262.964290][T15171] netlink: 'syz.3.2571': attribute type 10 has an invalid length. [ 262.995863][T15171] hsr0: mtu greater than device maximum [ 263.002041][ T6845] hsr0 speed is unknown, defaulting to 1000 [ 263.008238][ T6845] syz2: Port: 1 Link DOWN [ 263.059808][T15180] netlink: 'syz.1.2573': attribute type 5 has an invalid length. [ 263.896588][T15201] veth0_to_team: entered promiscuous mode [ 263.925718][T15201] veth0_to_team: entered allmulticast mode [ 263.935848][T15203] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2578'. [ 264.081551][T15216] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2583'. [ 264.133471][T15216] veth0: entered promiscuous mode [ 264.161015][T15214] veth0: left promiscuous mode [ 264.186250][T15225] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 264.570107][T15242] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 264.705836][T15244] netlink: 'syz.0.2592': attribute type 1 has an invalid length. [ 264.769836][T15253] netlink: 'syz.1.2594': attribute type 1 has an invalid length. [ 264.863360][T15260] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 264.919335][T15258] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 264.954611][T15258] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 265.041865][T15253] gretap1: entered promiscuous mode [ 265.071558][T15253] bond5: (slave gretap1): making interface the new active one [ 265.093180][T15253] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 265.142583][T15265] macvlan4: entered promiscuous mode [ 265.152803][T15265] macvlan4: entered allmulticast mode [ 265.159237][T15265] bond5: entered promiscuous mode [ 265.165747][T15265] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 265.179127][T15282] netlink: 'syz.0.2598': attribute type 10 has an invalid length. [ 265.232121][T15285] netlink: 'syz.0.2598': attribute type 10 has an invalid length. [ 265.241160][T15265] bond5: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 265.254968][T15265] bond5: left promiscuous mode [ 265.280379][ T94] block nbd0: Possible stuck request ffff888025275080: control (read@0,1024B). Runtime 120 seconds [ 265.295540][ T94] block nbd0: Possible stuck request ffff888025275240: control (read@1024,1024B). Runtime 120 seconds [ 265.309450][ T94] block nbd0: Possible stuck request ffff888025275400: control (read@2048,1024B). Runtime 120 seconds [ 265.321129][ T94] block nbd0: Possible stuck request ffff8880252755c0: control (read@3072,1024B). Runtime 120 seconds [ 265.360079][T15283] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2600'. [ 265.421145][T15285] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 265.920720][ T4522] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 266.361297][T15340] __nla_validate_parse: 1 callbacks suppressed [ 266.361315][T15340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2614'. [ 266.395107][T15343] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2616'. [ 266.542405][T15354] netlink: 'syz.2.2618': attribute type 1 has an invalid length. [ 266.895439][T15375] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 267.107401][T15388] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2629'. [ 267.129336][T15388] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2629'. [ 267.144278][T15388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2629'. [ 267.186473][T15388] netlink: 'syz.3.2629': attribute type 1 has an invalid length. [ 267.205437][T15388] gretap0: entered promiscuous mode [ 267.250961][T15401] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2629'. [ 267.392669][T15409] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2635'. [ 267.415679][T15411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2634'. [ 267.442448][T15411] IPv6: sit2: Disabled Multicast RS [ 267.449009][T15411] sit2: entered allmulticast mode [ 267.669046][T15417] netlink: 'syz.3.2637': attribute type 1 has an invalid length. [ 267.687667][T15417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2637'. [ 267.722728][T15417] netlink: 'syz.3.2637': attribute type 1 has an invalid length. [ 267.733029][T15417] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2637'. [ 267.899723][T15422] IPv6: NLM_F_CREATE should be specified when creating new route [ 268.013993][T15435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.119406][T15440] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 268.147028][T15447] netlink: 'syz.3.2646': attribute type 10 has an invalid length. [ 268.336170][T15459] tipc: MTU too low for tipc bearer [ 268.578844][T15468] netlink: 'syz.3.2652': attribute type 2 has an invalid length. [ 268.586776][T15468] nbd: must specify at least one socket [ 268.795519][T15491] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 268.849401][T15496] netlink: 'syz.3.2659': attribute type 83 has an invalid length. [ 268.859782][T15496] netlink: 'syz.3.2659': attribute type 5 has an invalid length. [ 268.872787][T15496] netlink: 'syz.3.2659': attribute type 83 has an invalid length. [ 268.895389][T15493] bridge8: entered promiscuous mode [ 268.907763][T15493] bridge8: entered allmulticast mode [ 269.138840][T15512] syzkaller0: entered promiscuous mode [ 269.166777][T15512] syzkaller0: entered allmulticast mode [ 269.242465][T15519] gtp0: entered promiscuous mode [ 269.247595][T15519] gtp0: entered allmulticast mode [ 269.305927][T15521] openvswitch: netlink: Message has 4 unknown bytes. [ 269.314317][T15521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.353884][T15526] bridge_slave_1: default FDB implementation only supports local addresses [ 269.435170][T15530] netlink: 'syz.0.2667': attribute type 21 has an invalid length. [ 269.450676][T15530] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 269.621965][T15542] netlink: 'syz.2.2671': attribute type 64 has an invalid length. [ 269.751281][T15550] IPv6: Can't replace route, no match found [ 269.766106][T15550] openvswitch: netlink: Missing key (keys=40, expected=80) [ 270.237837][ T5878] Bluetooth: hci4: command 0x0405 tx timeout [ 270.314037][T15597] Dead loop on virtual device ip6_vti0, fix it urgently! [ 270.436399][T15605] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 270.505586][T15617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.413910][T15676] __nla_validate_parse: 16 callbacks suppressed [ 271.413929][T15676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2710'. [ 271.936078][T15720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2718'. [ 272.136045][T15731] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2720'. [ 272.209533][T15739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2723'. [ 272.227627][T15737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2723'. [ 272.312484][ T4571] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 272.314098][T15747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2725'. [ 272.337857][T15747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2725'. [ 272.346859][T15747] validate_nla: 3 callbacks suppressed [ 272.346874][T15747] netlink: 'syz.3.2725': attribute type 3 has an invalid length. [ 272.371903][T15754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2725'. [ 272.384906][T15754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2725'. [ 272.395177][T15754] netlink: 'syz.3.2725': attribute type 3 has an invalid length. [ 272.460442][T15757] tls_set_device_offload_rx: netdev not found [ 272.800844][T15773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.820573][T15772] netlink: zone id is out of range [ 272.825774][T15772] netlink: zone id is out of range [ 272.835162][T15772] netlink: zone id is out of range [ 273.034730][T15789] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 273.105615][T15789] tipc: Enabled bearer , priority 0 [ 273.117608][T15789] syzkaller0: entered promiscuous mode [ 273.123773][T15789] syzkaller0: entered allmulticast mode [ 273.135430][T15789] tipc: Resetting bearer [ 273.155993][T15788] tipc: Resetting bearer [ 273.216315][T15788] tipc: Disabling bearer [ 273.373545][T15807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2742'. [ 273.469115][T15814] netlink: 'syz.0.2745': attribute type 8 has an invalid length. [ 273.514922][T15817] netlink: 'syz.0.2745': attribute type 8 has an invalid length. [ 273.598975][T15816] : entered promiscuous mode [ 274.329370][T15870] nbd: nbd1 already in use [ 274.351521][T15870] block nbd1: NBD_DISCONNECT [ 274.356645][T15870] block nbd1: Send disconnect failed -32 [ 274.366784][T15870] block nbd1: shutting down sockets [ 274.676079][T15898] 1{X: left allmulticast mode [ 274.679482][T15901] netlink: 'syz.2.2767': attribute type 1 has an invalid length. [ 275.096618][T15933] IPVS: set_ctl: invalid protocol: 33 172.30.0.2:20004 [ 275.124755][T15940] net_ratelimit: 13 callbacks suppressed [ 275.124773][T15940] openvswitch: netlink: Message has -1 unknown bytes. [ 275.386307][T15963] team0: Device gtp0 is of different type [ 275.513480][T15975] tipc: Enabled bearer , priority 0 [ 275.610027][T15975] tipc: Disabling bearer [ 275.759912][ T13] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x7d [ 275.777799][T15996] 8021q: adding VLAN 0 to HW filter on device bond11 [ 275.786017][T15985] netlink: 'syz.1.2791': attribute type 32 has an invalid length. [ 275.794485][T15985] (unnamed net_device) (uninitialized): option coupled_control: invalid value (71) [ 276.016374][T16020] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 276.425862][T16045] __nla_validate_parse: 24 callbacks suppressed [ 276.425882][T16045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2807'. [ 276.809994][T16069] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2814'. [ 276.859346][T16074] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 276.908331][T16074] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2816'. [ 276.914474][T16069] hsr0 speed is unknown, defaulting to 1000 [ 276.917460][T16074] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2816'. [ 276.937466][T16069] hsr0 speed is unknown, defaulting to 1000 [ 277.150458][T16088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2819'. [ 277.263256][T16096] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2822'. [ 277.617324][T16110] netlink: 6928 bytes leftover after parsing attributes in process `syz.0.2826'. [ 277.828167][T16123] netlink: 'syz.3.2833': attribute type 39 has an invalid length. [ 277.882069][T16130] netlink: 'syz.2.2831': attribute type 6 has an invalid length. [ 277.890487][T16130] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2831'. [ 278.372949][T16161] netlink: 'syz.2.2841': attribute type 2 has an invalid length. [ 278.459745][T16166] netlink: 'syz.0.2843': attribute type 2 has an invalid length. [ 278.633840][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2848'. [ 278.678864][T16179] vlan0: entered allmulticast mode [ 278.695823][T16179] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode [ 278.870674][T16189] netlink: 'syz.4.2853': attribute type 1 has an invalid length. [ 278.885963][T16189] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 278.928908][T16201] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2855'. [ 279.042039][T16205] netlink: 'syz.4.2856': attribute type 1 has an invalid length. [ 279.102203][T16205] 8021q: adding VLAN 0 to HW filter on device bond4 [ 279.225898][T16222] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 279.285327][ T12] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 279.327901][ T12] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 279.336318][ T12] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 279.392262][ T12] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 279.944428][T16262] netlink: 'syz.1.2871': attribute type 4 has an invalid length. [ 280.150269][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.159974][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.171458][ T5878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.182026][ T5878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.193174][ T5878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.251487][T16271] hsr0 speed is unknown, defaulting to 1000 [ 280.260404][T16271] hsr0 speed is unknown, defaulting to 1000 [ 280.828239][T16301] openvswitch: netlink: IPv6 tunnel dst address is zero [ 280.934863][T16296] hsr0 speed is unknown, defaulting to 1000 [ 280.945668][T16296] hsr0 speed is unknown, defaulting to 1000 [ 281.277980][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 281.338983][T16271] chnl_net:caif_netlink_parms(): no params data found [ 281.475608][T16329] __nla_validate_parse: 12 callbacks suppressed [ 281.475625][T16329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2886'. [ 281.573096][T16335] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2888'. [ 281.586312][T16332] geneve2: entered promiscuous mode [ 281.592737][T16332] geneve2: entered allmulticast mode [ 281.603728][T16335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2888'. [ 281.617526][T16340] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2888'. [ 281.686090][T16345] netlink: 'syz.4.2886': attribute type 10 has an invalid length. [ 281.755991][ T12] netdevsim netdevsim0 : set [1, 0] type 2 family 0 port 19999 - 0 [ 281.785686][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 281.831657][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 281.989320][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 282.200706][T16271] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.234746][T16271] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.248899][ T5878] Bluetooth: hci3: command tx timeout [ 282.255964][T16271] bridge_slave_0: entered allmulticast mode [ 282.284534][T16271] bridge_slave_0: entered promiscuous mode [ 282.406491][T16271] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.407474][T16376] delete_channel: no stack [ 282.421665][T16271] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.426326][T16376] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2897'. [ 282.437524][T16271] bridge_slave_1: entered allmulticast mode [ 282.449626][T16376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2897'. [ 282.455526][T16271] bridge_slave_1: entered promiscuous mode [ 282.603410][T16382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2900'. [ 282.621836][T16271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.650136][T16271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.753759][T16271] team0: Port device team_slave_0 added [ 282.764293][T16271] team0: Port device team_slave_1 added [ 282.767200][T16398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2904'. [ 282.793882][T16398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2904'. [ 282.808829][T16399] lo: entered allmulticast mode [ 282.822332][T16271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.830284][T16271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.857505][T16271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.870698][T16399] lo: left allmulticast mode [ 282.892778][T16271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.900514][T16271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.927994][T16271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.953445][T16398] macvtap1: entered allmulticast mode [ 282.959070][T16398] veth0_macvtap: entered allmulticast mode [ 283.020092][T16271] hsr_slave_0: entered promiscuous mode [ 283.026402][T16271] hsr_slave_1: entered promiscuous mode [ 283.034149][T16271] debugfs: 'hsr0' already exists in 'hsr' [ 283.040191][T16271] Cannot create hsr debugfs directory [ 283.059431][T16404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2905'. [ 283.230571][T16271] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.242046][T16271] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 283.254645][T16271] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 283.264751][T16271] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 283.336795][T16271] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.347304][T16271] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 283.357255][T16271] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 283.368137][T16271] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 283.399716][T16412] can: request_module (can-proto-4) failed. [ 283.461557][T16271] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.488532][T16271] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 283.498510][T16271] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 283.513628][T16271] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 283.588531][T16271] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.599323][T16271] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 283.610176][T16271] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 283.625437][T16271] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 283.884381][T16271] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 283.925690][T16271] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 283.962820][T16271] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 283.993663][T16439] gtp0: entered promiscuous mode [ 284.001260][T16439] gtp0: entered allmulticast mode [ 284.015755][T16441] pim6reg527: entered allmulticast mode [ 284.022119][T16271] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 284.122255][T16455] block nbd0: reconnected socket [ 284.127303][T16455] nbd: socks must be embedded in a SOCK_ITEM attr [ 284.156744][ T5878] block nbd0: Receive control failed (result -32) [ 284.317825][ T5878] Bluetooth: hci3: command tx timeout [ 284.413318][T16463] netlink: 'syz.3.2924': attribute type 1 has an invalid length. [ 284.436793][T16271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.553774][T16271] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.595578][T11198] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.602880][T11198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.640543][T16474] sctp: [Deprecated]: syz.1.2928 (pid 16474) Use of int in maxseg socket option. [ 284.640543][T16474] Use struct sctp_assoc_value instead [ 284.666078][T11198] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.673278][T11198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.985602][T16496] xt_HMARK: spi-set and port-set can't be combined [ 285.163125][T16506] netlink: 'syz.4.2935': attribute type 1 has an invalid length. [ 285.251879][T16505] bond5: (slave bridge7): making interface the new active one [ 285.263965][T16505] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 285.309568][T16271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.396108][T16271] veth0_vlan: entered promiscuous mode [ 285.416269][T16271] veth1_vlan: entered promiscuous mode [ 285.505610][T16271] veth0_macvtap: entered promiscuous mode [ 285.527157][T16271] veth1_macvtap: entered promiscuous mode [ 285.621459][T16271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.653343][T16271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.685491][ T4571] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.727009][ T4571] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.778342][ T4571] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.798445][ T4571] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.866081][T16532] tipc: Enabled bearer , priority 0 [ 285.916033][T16532] syzkaller0: entered promiscuous mode [ 285.926044][T16532] syzkaller0: entered allmulticast mode [ 285.990387][T16532] tipc: Resetting bearer [ 286.021065][T16531] tipc: Resetting bearer [ 286.037203][T16531] tipc: Disabling bearer [ 286.061213][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.081499][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.126307][T16544] netlink: 'syz.3.2945': attribute type 1 has an invalid length. [ 286.172968][ T4522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.183318][ T4522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.220209][T16544] 8021q: adding VLAN 0 to HW filter on device bond11 [ 286.246002][T16544] bond10: (slave bond11): making interface the new active one [ 286.262755][T16544] bond10: (slave bond11): Enslaving as an active interface with an up link [ 286.325349][T16553] bond10: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 286.352222][T16553] bond10: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 286.401481][ T5878] Bluetooth: hci3: command tx timeout [ 286.790056][ T30] audit: type=1107 audit(1756681555.154:5): pid=16574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='%m?k3γVB;.r 1 [ 287.426996][ T5880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 287.437170][ T5880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 287.463958][ T5880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 287.479455][ T5880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.490832][ T4522] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.501951][ T4522] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 287.594925][T16614] netlink: 'syz.2.2963': attribute type 1 has an invalid length. [ 287.664424][ T4522] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.687300][ T4522] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 287.710688][T16605] hsr0 speed is unknown, defaulting to 1000 [ 287.761587][T16616] team0: Device wireguard0 is of different type [ 287.795480][T16605] hsr0 speed is unknown, defaulting to 1000 [ 287.828697][T16622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2966'. [ 287.850378][ T4522] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.866347][ T4522] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 287.999154][ T4522] bond0: (slave ): Releasing backup interface [ 288.007898][ T4522] bond0: (slave ): the permanent HWaddr of slave - aa:aa:aa:aa:aa:2b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 288.064727][ T4522] netdevsim netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.097947][ T4522] netdevsim netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 288.484473][ T5878] Bluetooth: hci3: command tx timeout [ 289.037516][ T4522] erspan0 (unregistering): left promiscuous mode [ 289.173478][ T4522] dvmrp0 (unregistering): left allmulticast mode [ 289.528140][ T5878] Bluetooth: hci1: command tx timeout [ 289.851434][ T4522] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 289.865865][ T4522] bond0 (unregistering): Released all slaves [ 289.883438][ T4522] bond1 (unregistering): Released all slaves [ 290.003846][ T4522] bond2 (unregistering): Released all slaves [ 290.105960][ T4522] bond3 (unregistering): Released all slaves [ 290.211482][ T4522] bond4 (unregistering): Released all slaves [ 290.224410][ T4522] bond5 (unregistering): Released all slaves [ 290.345440][ T4522] bond6 (unregistering): Released all slaves [ 290.441225][ T4522] bond7 (unregistering): Released all slaves [ 290.530691][ T4522] bond8 (unregistering): Released all slaves [ 290.546218][ T4522] bond9 (unregistering): Released all slaves [ 290.558775][ T5878] Bluetooth: hci3: command tx timeout [ 290.561059][ T4522] bond10 (unregistering): Released all slaves [ 290.662040][ T4522] bond11 (unregistering): Released all slaves [ 290.902166][ T4522] tipc: Disabling bearer [ 290.917056][ T4522] tipc: Left network mode [ 290.984845][T16683] macvlan3: entered promiscuous mode [ 291.000411][T16683] macvlan3: entered allmulticast mode [ 291.105827][T16686] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2981'. [ 291.156319][T16605] chnl_net:caif_netlink_parms(): no params data found [ 291.585074][T16605] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.598784][ T5878] Bluetooth: hci1: command tx timeout [ 291.603763][T16605] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.612699][T16605] bridge_slave_0: entered allmulticast mode [ 291.646951][T16605] bridge_slave_0: entered promiscuous mode [ 291.673022][T16605] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.697129][T16605] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.722996][T16605] bridge_slave_1: entered allmulticast mode [ 291.756974][T16605] bridge_slave_1: entered promiscuous mode [ 291.831020][ T4522] batadv_slave_1: left promiscuous mode [ 291.847143][ T4522] hsr_slave_0: left promiscuous mode [ 291.863181][ T4522] hsr_slave_1: left promiscuous mode [ 291.883782][ T4522] veth0_macvtap: left allmulticast mode [ 291.937192][T16722] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2992'. [ 292.511888][T16605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.533597][T16726] netlink: 'syz.2.2993': attribute type 11 has an invalid length. [ 292.554099][T16605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.564644][T16725] netlink: 'syz.2.2993': attribute type 11 has an invalid length. [ 292.646843][T16731] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2995'. [ 292.667019][T16605] team0: Port device team_slave_0 added [ 292.689111][T16728] : renamed from hsr0 [ 292.754391][T16605] team0: Port device team_slave_1 added [ 292.785468][T16738] netlink: 'syz.4.2997': attribute type 1 has an invalid length. [ 292.923321][T16738] 8021q: adding VLAN 0 to HW filter on device bond6 [ 292.990675][T16745] 8021q: adding VLAN 0 to HW filter on device bond6 [ 293.000548][T16745] bond6: (slave vxcan7): The slave device specified does not support setting the MAC address [ 293.015401][T16745] bond6: (slave vxcan7): Error -95 calling set_mac_address [ 293.146782][T16751] veth9: entered promiscuous mode [ 293.161625][T16761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3000'. [ 293.165001][T16751] bond6: (slave veth9): Enslaving as an active interface with a down link [ 293.187210][T16605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.195241][T16605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.231494][T16605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.252235][T16738] vlan4: entered allmulticast mode [ 293.257367][T16738] bond6: entered allmulticast mode [ 293.309564][T16605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.316727][T16605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.356439][T16605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.422740][T16766] netlink: 'syz.2.3001': attribute type 1 has an invalid length. [ 293.454655][T16766] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3001'. [ 293.483690][T16766] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.639981][T16605] hsr_slave_0: entered promiscuous mode [ 293.647578][T16605] hsr_slave_1: entered promiscuous mode [ 293.661936][T16781] veth1_to_bond: entered allmulticast mode [ 293.678160][ T5878] Bluetooth: hci1: command tx timeout [ 293.685560][T16781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3004'. [ 293.725270][T16781] bond0: (slave bond_slave_1): Releasing backup interface [ 293.769681][T16785] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3007'. [ 293.780804][T16781] veth1_to_bond (unregistering): left allmulticast mode [ 293.848789][T16792] netlink: 'syz.3.3009': attribute type 1 has an invalid length. [ 294.064698][T16804] netlink: 'syz.3.3013': attribute type 12 has an invalid length. [ 294.304579][T16819] netlink: 'syz.3.3018': attribute type 1 has an invalid length. [ 294.318405][T16819] netlink: 'syz.3.3018': attribute type 1 has an invalid length. [ 294.332754][T16819] netlink: 'syz.3.3018': attribute type 6 has an invalid length. [ 294.357244][T16819] netlink: 'syz.3.3018': attribute type 1 has an invalid length. [ 294.388224][T16819] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.3018'. [ 294.613692][T16605] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 294.645752][T16605] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 294.671713][T16605] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 294.693621][T16605] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 294.811735][T16847] hsr0 speed is unknown, defaulting to 1000 [ 294.869648][T16847]  speed is unknown, defaulting to 1000 [ 294.879346][T16850] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3028'. [ 294.901067][T16850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3028'. [ 294.989041][T16605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.035556][T16605] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.083595][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.090797][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.125317][T16855] lo: entered promiscuous mode [ 295.143343][T16855] netlink: 'syz.3.3030': attribute type 2 has an invalid length. [ 295.160845][T16855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.196995][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.204248][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.224187][T16856] netlink: 'syz.3.3030': attribute type 2 has an invalid length. [ 295.232324][T16856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.335869][T16861] sctp: [Deprecated]: syz.3.3031 (pid 16861) Use of int in maxseg socket option. [ 295.335869][T16861] Use struct sctp_assoc_value instead [ 295.371282][ T94] block nbd0: Possible stuck request ffff888025275080: control (read@0,1024B). Runtime 150 seconds [ 295.385254][ T94] block nbd0: Possible stuck request ffff888025275240: control (read@1024,1024B). Runtime 150 seconds [ 295.396653][ T94] block nbd0: Possible stuck request ffff888025275400: control (read@2048,1024B). Runtime 150 seconds [ 295.408868][ T25] block nbd0: Dead connection, failed to find a fallback [ 295.416121][ T25] block nbd0: shutting down sockets [ 295.422451][ T94] block nbd0: Possible stuck request ffff8880252755c0: control (read@3072,1024B). Runtime 150 seconds [ 295.434160][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.445771][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 295.453694][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.462777][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 295.471448][ T25] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.481261][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 295.489125][ T25] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.499047][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 295.508729][ T6223] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.518678][ T6223] Buffer I/O error on dev nbd0, logical block 0, async page read [ 295.526714][ T6223] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.537105][ T6223] Buffer I/O error on dev nbd0, logical block 1, async page read [ 295.545161][ T6223] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.554337][ T6223] Buffer I/O error on dev nbd0, logical block 2, async page read [ 295.563262][ T6223] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.572472][ T6223] Buffer I/O error on dev nbd0, logical block 3, async page read [ 295.581515][ T6223] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.591608][ T6223] Buffer I/O error on dev nbd0, logical block 0, async page read [ 295.600280][ T6223] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.609636][ T6223] Buffer I/O error on dev nbd0, logical block 1, async page read [ 295.622563][ T6223] ldm_validate_partition_table(): Disk read failed. [ 295.631489][ T6223] Dev nbd0: unable to read RDB block 0 [ 295.639561][ T6223] nbd0: unable to read partition table [ 295.644116][T16858] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3027'. [ 295.664532][ T6223] ldm_validate_partition_table(): Disk read failed. [ 295.673793][ T6223] Dev nbd0: unable to read RDB block 0 [ 295.695331][ T6223] nbd0: unable to read partition table [ 295.729460][ T6223] udevd[6223]: failed to send result of seq 13394 to main daemon: Connection refused [ 295.758114][ T5878] Bluetooth: hci1: command tx timeout [ 296.214471][T16896] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3042'. [ 296.250216][T16605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.480461][T16605] veth0_vlan: entered promiscuous mode [ 296.505469][T16605] veth1_vlan: entered promiscuous mode [ 296.661266][T16605] veth0_macvtap: entered promiscuous mode [ 296.673754][T16908] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 296.687960][T16909] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 296.705904][T16605] veth1_macvtap: entered promiscuous mode [ 296.735371][T16605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.766646][T16605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.805239][T11198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.828685][T11198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.855961][T11198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.873758][T11198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.984573][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.006296][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.053446][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.078074][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.305621][ T4571] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 297.484117][T16948] nbd: nbd0 already in use [ 297.499146][T16948] block nbd0: NBD_DISCONNECT [ 297.503944][T16948] block nbd0: Send disconnect failed -32 [ 297.709390][T16956] __nla_validate_parse: 2 callbacks suppressed [ 297.709408][T16956] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3060'. [ 297.838789][ T5878] Bluetooth: hci1: command tx timeout [ 298.023401][T16970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3065'. [ 298.055153][T16970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3065'. [ 298.084780][T16970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3065'. [ 298.107049][T16975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3063'. [ 298.161854][T16975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3063'. [ 298.181660][ T5880] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.191072][ T5880] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.200495][ T5880] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.209282][ T5880] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.217609][ T5880] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.353123][T16985] netlink: 'syz.3.3067': attribute type 11 has an invalid length. [ 298.363607][T16985] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3067'. [ 298.418108][T16986] netlink: 'syz.3.3067': attribute type 29 has an invalid length. [ 298.445256][T16977] hsr0 speed is unknown, defaulting to 1000 [ 298.449020][T16988] netlink: 'syz.1.3068': attribute type 83 has an invalid length. [ 298.461514][T16977]  speed is unknown, defaulting to 1000 [ 298.576488][T16990] netlink: 'syz.1.3069': attribute type 10 has an invalid length. [ 298.595431][T16990] veth0_vlan: entered allmulticast mode [ 298.603268][T16990] veth0_vlan: left promiscuous mode [ 298.643686][T16990] veth0_vlan: entered promiscuous mode [ 298.657303][T16990] team0: Device veth0_vlan failed to register rx_handler [ 298.756795][T17000] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3072'. [ 299.074256][T17014] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3078'. [ 299.171402][T17019] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3079'. [ 299.296778][T17028] tipc: Started in network mode [ 299.302024][T17028] tipc: Node identity 027bd9ade5f7, cluster identity 4711 [ 299.312179][T17028] tipc: Enabled bearer , priority 0 [ 299.328126][T17029] tipc: Enabling of bearer rejected, already enabled [ 299.337592][T17028] syzkaller0: entered promiscuous mode [ 299.343605][T17028] syzkaller0: entered allmulticast mode [ 299.363924][T16977] chnl_net:caif_netlink_parms(): no params data found [ 299.415631][T17028] tipc: Resetting bearer [ 299.464539][T17027] tipc: Resetting bearer [ 299.487031][T17027] tipc: Disabling bearer [ 299.648681][T16977] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.664696][T16977] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.672829][T16977] bridge_slave_0: entered allmulticast mode [ 299.687385][T16977] bridge_slave_0: entered promiscuous mode [ 299.785572][T17043] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.883604][T17043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.907414][T17043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.959953][T17055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.038128][T17043] macvlan3: left promiscuous mode [ 300.043440][T16977] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.051844][T16977] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.059463][T16977] bridge_slave_1: entered allmulticast mode [ 300.067332][T16977] bridge_slave_1: entered promiscuous mode [ 300.077373][T17051] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 300.105072][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.138040][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.148896][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.159371][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.318659][T16977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.318799][ T5878] Bluetooth: hci5: command tx timeout [ 300.333901][T16977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.393899][T16977] team0: Port device team_slave_0 added [ 300.394144][T17068] netlink: 'syz.1.3093': attribute type 11 has an invalid length. [ 300.403852][T16977] team0: Port device team_slave_1 added [ 300.463016][T16977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.470568][T16977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.518964][T16977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.550146][T16977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.557258][T16977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.597399][T16977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.646952][T17074] hsr0 speed is unknown, defaulting to 1000 [ 300.683912][T17074]  speed is unknown, defaulting to 1000 [ 300.838840][T17090] hsr0 speed is unknown, defaulting to 1000 [ 301.027181][T16977] hsr_slave_0: entered promiscuous mode [ 301.092070][T16977] hsr_slave_1: entered promiscuous mode [ 301.098788][T16977] debugfs: 'hsr0' already exists in 'hsr' [ 301.104576][T16977] Cannot create hsr debugfs directory [ 301.180460][T17090]  speed is unknown, defaulting to 1000 [ 301.436235][T17118] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 301.608810][T17120] nbd0: detected capacity change from 0 to 127 [ 301.683244][ T5878] block nbd0: Receive control failed (result -32) [ 301.983834][T16977] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.995128][T16977] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.005981][T16977] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 302.079927][T17145] netlink: 'syz.2.3113': attribute type 26 has an invalid length. [ 302.160964][T16977] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.182049][T16977] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.210352][T16977] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 302.236180][T17158] netlink: 'syz.0.3118': attribute type 39 has an invalid length. [ 302.296646][T17163] netlink: 'syz.0.3118': attribute type 39 has an invalid length. [ 302.380449][T17161] syzkaller0: entered promiscuous mode [ 302.386023][T17161] syzkaller0: entered allmulticast mode [ 302.398017][ T5878] Bluetooth: hci5: command tx timeout [ 302.410572][T16977] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.421061][T16977] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.431724][T16977] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 304.255368][T16977] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.283147][T16977] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.293558][T16977] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 304.347029][T17177] openvswitch: netlink: IP tunnel dst address not specified [ 304.436742][T17184] __nla_validate_parse: 8 callbacks suppressed [ 304.436766][T17184] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3125'. [ 304.463383][T17187] netlink: 'syz.1.3124': attribute type 24 has an invalid length. [ 304.479634][ T5878] Bluetooth: hci5: command tx timeout [ 304.610752][T17214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3126'. [ 304.620521][T17214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3126'. [ 304.629558][T17214] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3126'. [ 305.193350][T17184] netlink: 'syz.3.3125': attribute type 1 has an invalid length. [ 305.213724][T17184] netlink: 'syz.3.3125': attribute type 1 has an invalid length. [ 305.249811][T16977] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 305.274607][T16977] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 305.316651][T16977] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 305.377846][T16977] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 305.575732][T17240] Bluetooth: MGMT ver 1.23 [ 305.617051][T17240] tipc: Enabling of bearer rejected, failed to enable media [ 305.756541][T16977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.771426][T17244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3133'. [ 305.810636][T16977] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.823140][T17244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3133'. [ 305.852642][T17244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3133'. [ 305.863573][T17244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3133'. [ 305.863836][ T3169] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.873002][T17244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3133'. [ 305.879804][ T3169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.909748][ T3169] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.916910][ T3169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.918504][T17244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3133'. [ 306.026143][T17255] netlink: 'syz.1.3137': attribute type 10 has an invalid length. [ 306.190961][T17262] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.271333][T17262] bridge_slave_1 (unregistering): left allmulticast mode [ 306.279509][T17262] bridge_slave_1 (unregistering): left promiscuous mode [ 306.286723][T17262] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.551031][T16977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.557865][ T5878] Bluetooth: hci5: command tx timeout [ 306.576211][T17289] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 306.683295][T17289] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 306.926102][T17303] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 307.114497][T17320] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 307.156473][T17320] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 307.168099][T17320] gretap1: entered promiscuous mode [ 307.174718][T17320] gretap1: entered allmulticast mode [ 307.203275][T17324] netlink: 'syz.0.3155': attribute type 8 has an invalid length. [ 307.296116][T16977] veth0_vlan: entered promiscuous mode [ 307.347113][T16977] veth1_vlan: entered promiscuous mode [ 307.488730][T16977] veth0_macvtap: entered promiscuous mode [ 307.535255][T16977] veth1_macvtap: entered promiscuous mode [ 307.638447][T16977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.681045][T16977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.715669][ T3169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.740472][ T3169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.769291][T17203] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.792967][T17203] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.954562][T17203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.979234][T17203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.039520][T17355] tipc: Enabled bearer , priority 0 [ 308.047566][T17355] syzkaller0: entered promiscuous mode [ 308.077560][T17355] syzkaller0: entered allmulticast mode [ 308.123333][T17207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.132233][T17207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.169901][T17355] tipc: Resetting bearer [ 308.205883][T17354] tipc: Resetting bearer [ 308.256742][T17362] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 308.261097][T17354] tipc: Disabling bearer [ 309.076449][T17407] netlink: 'syz.2.3183': attribute type 3 has an invalid length. [ 309.188348][ T5880] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 309.199041][ T5880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 309.207180][ T5880] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 309.222407][ T5880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 309.231646][ T5880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 309.296994][T17410] hsr0 speed is unknown, defaulting to 1000 [ 309.338695][T17410]  speed is unknown, defaulting to 1000 [ 309.582169][T17431] __nla_validate_parse: 38 callbacks suppressed [ 309.582190][T17431] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3191'. [ 309.610895][T17431] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3191'. [ 309.639400][T17431] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3191'. [ 309.705764][T17441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3194'. [ 309.731978][T17441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3194'. [ 309.853338][T17450] netlink: 'syz.4.3196': attribute type 10 has an invalid length. [ 309.887241][T17450] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 310.034276][T17466] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3200'. [ 310.140202][T17469] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3201'. [ 310.150941][T17469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3201'. [ 310.160415][T17469] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3201'. [ 310.196784][T17469] netlink: 'syz.1.3201': attribute type 2 has an invalid length. [ 310.222111][T17469] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3201'. [ 310.328811][T17473] hsr0 speed is unknown, defaulting to 1000 [ 310.336608][T17473]  speed is unknown, defaulting to 1000 [ 310.408234][T17410] chnl_net:caif_netlink_parms(): no params data found [ 310.855860][T17410] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.873209][T17410] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.888480][T17410] bridge_slave_0: entered allmulticast mode [ 310.906994][T17410] bridge_slave_0: entered promiscuous mode [ 311.003720][T17410] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.034224][T17410] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.042945][T17410] bridge_slave_1: entered allmulticast mode [ 311.051878][T17410] bridge_slave_1: entered promiscuous mode [ 311.279070][ T5878] Bluetooth: hci2: command tx timeout [ 311.303117][T17410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.327511][T17410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.560625][T17410] team0: Port device team_slave_0 added [ 311.606220][T17410] team0: Port device team_slave_1 added [ 311.688833][T17552] netlink: 'syz.2.3219': attribute type 1 has an invalid length. [ 311.755330][T17554] netlink: 'syz.4.3221': attribute type 11 has an invalid length. [ 311.829734][T17558] netlink: 'syz.2.3222': attribute type 1 has an invalid length. [ 311.841641][T17559] netlink: 'syz.2.3222': attribute type 1 has an invalid length. [ 311.852650][T17410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.861535][T17410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.894282][T17410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.907260][T17410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.923733][T17410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.958676][T17410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.283213][T17410] hsr_slave_0: entered promiscuous mode [ 312.292121][T17410] hsr_slave_1: entered promiscuous mode [ 312.298967][T17410] debugfs: 'hsr0' already exists in 'hsr' [ 312.304813][T17410] Cannot create hsr debugfs directory [ 312.318293][T17565] hsr0 speed is unknown, defaulting to 1000 [ 312.364754][T17565]  speed is unknown, defaulting to 1000 [ 312.756883][T17583] veth1_to_bond: entered allmulticast mode [ 312.764641][T17566] hsr0 speed is unknown, defaulting to 1000 [ 312.859922][T17586] bond0: (slave bond_slave_1): Releasing backup interface [ 312.954860][T17586] veth1_to_bond (unregistering): left allmulticast mode [ 313.114211][T17410] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.127294][T17410] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.158351][T17566]  speed is unknown, defaulting to 1000 [ 313.291284][T17410] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.313257][T17410] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.333979][T17611] netlink: 'syz.0.3237': attribute type 4 has an invalid length. [ 313.360781][ T5878] Bluetooth: hci2: command tx timeout [ 313.395283][T17615] netlink: 'syz.0.3237': attribute type 4 has an invalid length. [ 313.449229][T17614] syz_tun: entered promiscuous mode [ 313.455552][T17614] batadv_slave_0: entered promiscuous mode [ 313.497157][T17614] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 313.515126][T17614] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 313.556277][T17614] hsr1: entered allmulticast mode [ 313.561620][T17614] syz_tun: entered allmulticast mode [ 313.567000][T17614] batadv_slave_0: entered allmulticast mode [ 313.604059][T17410] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.614519][T17410] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.786838][T17410] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.838497][T17410] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.938155][T17636] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 314.680422][T17644] bond1: entered promiscuous mode [ 314.685560][T17644] bond1: entered allmulticast mode [ 314.691621][T17644] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.762451][T17656] __nla_validate_parse: 15 callbacks suppressed [ 314.762468][T17656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3247'. [ 314.838994][T17410] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 314.929766][T17410] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 315.003638][T17410] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 315.019494][T17667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3249'. [ 315.071795][T17410] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 315.438134][ T5878] Bluetooth: hci2: command tx timeout [ 315.470411][T17410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.492515][T17410] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.523939][T17202] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.531215][T17202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.585486][T17202] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.592689][T17202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.864302][T17699] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3256'. [ 316.071753][T17709] netlink: zone id is out of range [ 316.127281][T17709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3257'. [ 316.157383][T17709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3257'. [ 316.175803][T17713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3259'. [ 316.201706][T17713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3259'. [ 316.229872][T17203] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.229901][T17709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3257'. [ 316.229919][T17709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3257'. [ 316.291608][T17203] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.304115][T17203] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.326946][T17203] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.342727][T17410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.453457][T17410] veth0_vlan: entered promiscuous mode [ 316.454334][T17716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.467549][T17410] veth1_vlan: entered promiscuous mode [ 316.484883][T17705] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 316.529280][T17410] veth0_macvtap: entered promiscuous mode [ 316.550095][T17410] veth1_macvtap: entered promiscuous mode [ 316.593652][T17410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.625480][T17410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.650730][T17202] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.663127][T17202] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.685064][T17202] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.703774][T17202] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.734709][T17721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3261'. [ 316.894927][T17199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.909621][T17727] openvswitch: netlink: Missing key (keys=40, expected=100) [ 316.917101][T17199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.997246][T17202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.020617][T17732] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 317.036749][T17202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.055454][T17732] openvswitch: netlink: Message has 6332 unknown bytes. [ 317.080895][T17731] gtp0: entered promiscuous mode [ 317.086341][T17731] gtp0: entered allmulticast mode [ 317.112135][T17734] veth0: entered promiscuous mode [ 317.136798][T17733] veth0: left promiscuous mode [ 317.522232][ T5878] Bluetooth: hci2: command tx timeout [ 317.829136][T17763] netlink: 'syz.3.3276': attribute type 1 has an invalid length. [ 317.898258][T17768] siw: device registration error -23 [ 318.030147][ T5880] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.047298][ T5880] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 318.055718][ T5880] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.066417][ T5880] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.075044][ T5880] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 318.195539][T17782] tipc: Failed to obtain node identity [ 318.201445][T17782] tipc: Enabling of bearer rejected, failed to enable media [ 318.302893][T17772] hsr0 speed is unknown, defaulting to 1000 [ 318.328304][T17772]  speed is unknown, defaulting to 1000 [ 318.414558][T17793] netlink: 'syz.2.3285': attribute type 1 has an invalid length. [ 318.636386][T17803] netlink: 'syz.2.3289': attribute type 6 has an invalid length. [ 318.772293][T17811] bridge_slave_0: left allmulticast mode [ 318.778660][T17811] bridge_slave_0: left promiscuous mode [ 318.784593][T17811] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.805693][T17811] bridge_slave_1: left allmulticast mode [ 318.833881][T17811] bridge_slave_1: left promiscuous mode [ 318.846629][T17811] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.886902][T17811] bond0: (slave bond_slave_0): Releasing backup interface [ 318.910900][T17811] team0: Port device team_slave_0 removed [ 318.918460][T17811] team0: Port device team_slave_1 removed [ 318.924627][T17811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.934560][T17811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.006544][T17825] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.121198][T17825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.141780][T17825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.271291][T17825] bond1: left promiscuous mode [ 319.324770][T17207] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.348072][T17207] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.381092][T17207] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.400900][T17207] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.419999][T17203] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.435240][T17203] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.487498][T17203] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.497358][T17203] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.615516][T17845] : renamed from bridge_slave_0 (while UP) [ 319.868647][T17772] chnl_net:caif_netlink_parms(): no params data found [ 320.001185][T17878] __nla_validate_parse: 4 callbacks suppressed [ 320.001203][T17878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3308'. [ 320.158652][ T5878] Bluetooth: hci4: command tx timeout [ 320.206547][T17772] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.234797][T17772] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.268256][T17772] bridge_slave_0: entered allmulticast mode [ 320.282729][T17772] bridge_slave_0: entered promiscuous mode [ 320.344446][T17772] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.370719][T17772] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.399314][T17772] bridge_slave_1: entered allmulticast mode [ 320.413756][T17772] bridge_slave_1: entered promiscuous mode [ 320.591323][T17772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.613130][T17772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.753261][T17772] team0: Port device team_slave_0 added [ 320.782712][T17772] team0: Port device team_slave_1 added [ 320.925121][T17772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.935544][T17772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.996733][T17772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.037386][T17772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.056749][T17772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.110851][T17927] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3322'. [ 321.133717][T17772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.155507][T17930] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 321.166274][T17930] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 321.253504][T17934] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3324'. [ 321.396749][T17772] hsr_slave_0: entered promiscuous mode [ 321.413426][T17772] hsr_slave_1: entered promiscuous mode [ 321.427252][T17772] debugfs: 'hsr0' already exists in 'hsr' [ 321.437013][T17772] Cannot create hsr debugfs directory [ 321.457065][T17944] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 322.139976][T17969] batman_adv: batadv0: Interface deactivated: wlan1 [ 322.241151][ T5878] Bluetooth: hci4: command tx timeout [ 322.400596][T17980] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3339'. [ 322.425530][T17985] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 322.694513][T17997] netlink: 'syz.4.3345': attribute type 1 has an invalid length. [ 322.723940][T17997] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3345'. [ 322.745255][T17997] netlink: 'syz.4.3345': attribute type 1 has an invalid length. [ 322.745802][T17772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 322.754150][T17999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3346'. [ 322.783409][T17772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 322.797494][T17969] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 322.804244][T17969] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 322.824242][T17772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 322.864813][T17969] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 322.870957][T17772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 322.881019][T17969] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 322.913698][T18001] netlink: 'syz.0.3347': attribute type 2 has an invalid length. [ 322.927397][T17969] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 322.942407][T17969] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 322.943158][T18001] netlink: 150480 bytes leftover after parsing attributes in process `syz.0.3347'. [ 322.960399][T18001] nbd: must specify a device to reconfigure [ 323.020435][T17969] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 323.027517][T17969] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 323.051156][T18019] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3349'. [ 323.085895][T17969] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 323.099689][T17969] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 323.209267][T17772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.252266][T17772] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.288719][T17207] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.296062][T17207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.337571][T17207] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.344780][T17207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.382509][T18028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3353'. [ 323.493848][T18032] netlink: 'syz.0.3355': attribute type 1 has an invalid length. [ 323.505036][T18032] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3355'. [ 323.565255][T18035] : left allmulticast mode [ 323.573338][T18035] : left promiscuous mode [ 323.595500][T18035] bridge0: port 1() entered disabled state [ 323.629165][T18035] bridge_slave_1: left allmulticast mode [ 323.634869][T18035] bridge_slave_1: left promiscuous mode [ 323.690565][T18035] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.732989][T18035] bond0: (slave bond_slave_0): Releasing backup interface [ 323.768296][T18035] bond0: (slave bond_slave_1): Releasing backup interface [ 323.795901][T18035] team0: Port device team_slave_0 removed [ 323.813517][T18035] team0: Port device team_slave_1 removed [ 323.821122][T18035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.829101][T18035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.842694][T18035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.851803][T18035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.884864][T18042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.103314][T18059] siw: device registration error -23 [ 324.130129][T17772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.221300][T17772] veth0_vlan: entered promiscuous mode [ 324.260850][T17772] veth1_vlan: entered promiscuous mode [ 324.325994][T18068] block nbd1: Unsupported socket: shutdown callout must be supported. [ 324.339391][T17772] veth0_macvtap: entered promiscuous mode [ 324.360683][T17772] veth1_macvtap: entered promiscuous mode [ 324.390992][T17772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.452173][T17772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.505626][T17207] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.560895][T17207] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.569804][T17207] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.621473][T17207] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.784481][T17203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.810230][T17203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.906853][T17197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.940235][T17197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.033689][T18100] __nla_validate_parse: 5 callbacks suppressed [ 325.033713][T18100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3375'. [ 325.115574][T18107] netlink: 'syz.2.3377': attribute type 11 has an invalid length. [ 325.158722][T18106] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3378'. [ 325.168720][T18107] netlink: 'syz.2.3377': attribute type 11 has an invalid length. [ 325.177347][T18107] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3377'. [ 325.406065][T18125] netlink: 'syz.3.3381': attribute type 2 has an invalid length. [ 325.426237][T18125] netlink: 'syz.3.3381': attribute type 1 has an invalid length. [ 325.516084][T17201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.541207][T17201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.851161][T18144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3387'. [ 326.179849][T18154] syzkaller0: entered promiscuous mode [ 326.185484][T18154] syzkaller0: entered allmulticast mode [ 326.212332][T18154] tipc: Started in network mode [ 326.217284][T18154] tipc: Node identity 1e89d13c2d23, cluster identity 4711 [ 326.248934][T18154] tipc: Enabled bearer , priority 0 [ 326.288295][T18154] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 326.395860][T18154] tipc: Resetting bearer [ 326.439908][T18152] tipc: Resetting bearer [ 326.511969][T18152] tipc: Disabling bearer [ 326.578432][T18179] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3398'. [ 326.715098][T18187] netlink: 'syz.3.3400': attribute type 11 has an invalid length. [ 326.767777][T18187] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3400'. [ 326.911117][T18196] netlink: 'syz.4.3404': attribute type 8 has an invalid length. [ 326.971668][T18201] netlink: 'syz.4.3404': attribute type 8 has an invalid length. [ 327.729501][T18240] tipc: Started in network mode [ 327.768639][T18240] tipc: Node identity ac14140f, cluster identity 4711 [ 327.777026][T18240] tipc: New replicast peer: 255.255.255.255 [ 327.795893][T18240] tipc: Enabled bearer , priority 10 [ 327.815664][T18244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3421'. [ 328.489467][T18273] netlink: 'syz.3.3430': attribute type 1 has an invalid length. [ 328.560371][T18273] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3430'. [ 328.576649][T18278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3432'. [ 328.601622][T18279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3426'. [ 328.910249][ T6873] tipc: Node number set to 2886997007 [ 329.210068][T18317] syzkaller0: entered promiscuous mode [ 329.217416][T18317] syzkaller0: entered allmulticast mode [ 329.244879][T18317] tipc: Enabled bearer , priority 0 [ 329.315996][T18317] tipc: Resetting bearer [ 329.361868][T18315] tipc: Resetting bearer [ 329.454455][T18315] tipc: Disabling bearer [ 330.125222][T18375] __nla_validate_parse: 6 callbacks suppressed [ 330.125247][T18375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3463'. [ 330.141869][T18381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3466'. [ 330.149057][T18376] netlink: 2664 bytes leftover after parsing attributes in process `syz.0.3463'. [ 330.187181][T18381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3466'. [ 330.201191][T18388] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 330.210205][T18389] netlink: 'syz.1.3467': attribute type 1 has an invalid length. [ 330.262049][T18381] 8021q: VLANs not supported on wg1 [ 330.263601][T18389] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3467'. [ 330.415620][ T10] IPVS: starting estimator thread 0... [ 330.425730][T18400] IPVS: ip_vs_add_dest(): server weight less than zero [ 330.448242][T18402] IPVS: ip_vs_add_dest(): server weight less than zero [ 330.547866][T18401] IPVS: using max 37 ests per chain, 88800 per kthread [ 330.580248][T18413] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3474'. [ 330.604139][T18413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3474'. [ 330.614548][T18410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3477'. [ 330.650018][T18416] tipc: Started in network mode [ 330.661511][T18416] tipc: Node identity , cluster identity 4711 [ 330.672714][T18416] tipc: Failed to obtain node identity [ 330.680133][T18416] tipc: Enabling of bearer rejected, failed to enable media [ 330.737400][T18419] netlink: 'syz.2.3479': attribute type 33 has an invalid length. [ 330.764962][T18416] syzkaller0: entered promiscuous mode [ 330.775032][T18416] syzkaller0: entered allmulticast mode [ 330.802175][T18419] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 330.900352][T18424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3480'. [ 331.263705][T18444] netlink: 'syz.2.3484': attribute type 1 has an invalid length. [ 331.277872][T18444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.877618][T18459] netlink: 'syz.4.3488': attribute type 6 has an invalid length. [ 333.215750][T18446] hsr0 speed is unknown, defaulting to 1000 [ 333.239928][T18446]  speed is unknown, defaulting to 1000 [ 333.351483][T18470] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3491'. [ 333.770280][T18487] bond1: entered allmulticast mode [ 333.778829][T18490] netlink: 'syz.3.3494': attribute type 1 has an invalid length. [ 333.790597][T18487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.800066][T18487] bridge0: port 3(bond1) entered blocking state [ 333.806596][T18487] bridge0: port 3(bond1) entered disabled state [ 333.816605][T18487] bond1: entered promiscuous mode [ 333.822542][T18487] bridge0: port 3(bond1) entered blocking state [ 333.829033][T18487] bridge0: port 3(bond1) entered forwarding state [ 333.925458][T18486] gretap0: entered promiscuous mode [ 333.988711][T18502] openvswitch: netlink: Flow key attr not present in new flow. [ 334.127206][T18504] IPv6: sit1: Disabled Multicast RS [ 334.250328][T17202] bridge0: port 3(bond1) entered disabled state [ 334.360253][T18512] netlink: zone id is out of range [ 334.365694][T18512] netlink: zone id is out of range [ 334.372982][T18512] netlink: zone id is out of range [ 334.379227][T18512] netlink: zone id is out of range [ 334.384482][T18512] netlink: zone id is out of range [ 334.390227][T18512] netlink: get zone limit has 8 unknown bytes [ 334.437228][T18514] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 334.455392][T18514] netlink: 'syz.1.3507': attribute type 1 has an invalid length. [ 334.495312][T18514] netlink: 'syz.1.3507': attribute type 3 has an invalid length. [ 334.535130][T18518] netlink: 'syz.4.3509': attribute type 21 has an invalid length. [ 334.554346][T18518] netlink: 'syz.4.3509': attribute type 1 has an invalid length. [ 334.688266][T18528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.415664][T18577] __nla_validate_parse: 14 callbacks suppressed [ 335.415685][T18577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3529'. [ 335.823189][T18600] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3538'. [ 335.844193][T18601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3538'. [ 335.892459][T18600] netlink: 'syz.0.3538': attribute type 6 has an invalid length. [ 335.913954][T18601] netlink: 'syz.0.3538': attribute type 6 has an invalid length. [ 335.968393][T18609] veth0_to_bridge: entered promiscuous mode [ 336.077058][T18603] veth0_to_bridge: left promiscuous mode [ 336.082652][ T24] IPVS: starting estimator thread 0... [ 336.178608][T18617] IPVS: using max 26 ests per chain, 62400 per kthread [ 336.648297][T18648] syzkaller0: entered promiscuous mode [ 336.658832][T18648] syzkaller0: entered allmulticast mode [ 338.839705][T18670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3559'. [ 338.862860][T18670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3559'. [ 338.870519][T18675] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3562'. [ 338.873672][T18672] net_ratelimit: 1 callbacks suppressed [ 338.873690][T18672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.916549][T18676] smc: net device bond0 applied user defined pnetid SYZ2 [ 338.954349][T18670] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3559'. [ 339.293100][T18670] smc: removing net device bond0 with user defined pnetid SYZ2 [ 339.302666][T18670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.318330][T18670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.334142][T18670] bond0 (unregistering): Released all slaves [ 339.353442][T18696] tipc: New replicast peer: 255.255.255.255 [ 339.365322][T18696] tipc: Enabled bearer , priority 10 [ 339.422325][T18696] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3566'. [ 339.438099][T18694] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3566'. [ 339.592825][T18710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3571'. [ 340.142565][T18740] netlink: 'syz.2.3581': attribute type 1 has an invalid length. [ 340.200062][T18743] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 340.477903][ T6873] tipc: Node number set to 866832700 [ 340.575871][T18759] openvswitch: netlink: Key type 121 is out of range max 32 [ 340.586022][T18760] __nla_validate_parse: 1 callbacks suppressed [ 340.586043][T18760] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3585'. [ 341.324041][T18760] bond0 (unregistering): Released all slaves [ 341.602898][T18802] netlink: 'syz.1.3597': attribute type 142 has an invalid length. [ 341.647237][T18798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3596'. [ 341.659657][T18798] netlink: 'syz.2.3596': attribute type 1 has an invalid length. [ 341.667500][T18798] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3596'. [ 341.841621][T18815] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3602'. [ 342.071768][T18831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3606'. [ 342.096026][T18831] netlink: 212292 bytes leftover after parsing attributes in process `syz.3.3606'. [ 342.203483][T18839] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 342.397173][T18848] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3611'. [ 342.435480][T18848] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3611'. [ 342.472944][T18848] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 342.545397][T18852] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3614'. [ 342.767327][T18868] netlink: 'syz.2.3618': attribute type 11 has an invalid length. [ 342.796546][T18868] netlink: 'syz.2.3618': attribute type 11 has an invalid length. [ 342.826279][T18868] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3618'. [ 343.608182][T18922] netlink: 'syz.4.3631': attribute type 1 has an invalid length. [ 344.070283][T18949] IPVS: Error connecting to the multicast addr [ 344.196596][T18960] netlink: 'syz.0.3645': attribute type 11 has an invalid length. [ 344.784073][T18995] netlink: 'syz.0.3657': attribute type 29 has an invalid length. [ 345.173136][T19019] openvswitch: netlink: IP tunnel dst address not specified [ 345.363996][T19038] netlink: 'syz.0.3670': attribute type 1 has an invalid length. [ 345.443804][T19038] bond3: entered promiscuous mode [ 345.451066][T19038] 8021q: adding VLAN 0 to HW filter on device bond3 [ 345.553116][T19045] 8021q: adding VLAN 0 to HW filter on device bond3 [ 345.562913][T19045] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 345.574164][T19045] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 345.589832][T19045] bond3: (slave wireguard0): making interface the new active one [ 345.605161][T19045] wireguard0: entered promiscuous mode [ 345.616392][T19045] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 345.643846][T19051] mac80211_hwsim hwsim37 wlan1: left allmulticast mode [ 345.686308][T19051] hsr1: left allmulticast mode [ 345.733388][T19051] syz_tun: left allmulticast mode [ 345.747021][T19051] batadv_slave_0: left allmulticast mode [ 346.040610][T19071] syzkaller1: entered promiscuous mode [ 346.046795][T19071] syzkaller1: entered allmulticast mode [ 346.134269][T19075] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 346.166088][T19075] netlink: 'syz.2.3684': attribute type 10 has an invalid length. [ 346.202553][T19075] mac80211_hwsim hwsim37 wlan1: left allmulticast mode [ 346.375703][T19087] __nla_validate_parse: 12 callbacks suppressed [ 346.375725][T19087] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3686'. [ 346.395529][ T6873] IPVS: starting estimator thread 0... [ 346.498174][T19095] IPVS: using max 31 ests per chain, 74400 per kthread [ 347.312075][T19153] netlink: 'syz.3.3704': attribute type 21 has an invalid length. [ 347.348947][T19153] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3704'. [ 347.386952][T19150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3705'. [ 347.400104][T19157] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3702'. [ 347.409326][T19153] netlink: 'syz.3.3704': attribute type 5 has an invalid length. [ 347.435306][T19153] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3704'. [ 349.608302][T19183] netlink: 'syz.2.3713': attribute type 29 has an invalid length. [ 349.736954][T19194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.806561][T19194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.901087][T19211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3715'. [ 349.951345][T19203] syzkaller1: entered promiscuous mode [ 349.956867][T19203] syzkaller1: entered allmulticast mode [ 350.127553][T17201] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.155783][T17201] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.160991][T19220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3723'. [ 350.177612][T17201] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.195030][T17201] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.341084][T19225] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3726'. [ 350.385260][T19235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.449452][T19240] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3728'. [ 350.481323][T19239] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3728'. [ 350.694321][T19256] lo: entered allmulticast mode [ 350.741866][T17202] nci: nci_rsp_packet: unsupported rsp opcode 0xf05 [ 350.751737][T19262] lo: left allmulticast mode [ 350.761530][T19256] netlink: 'syz.2.3732': attribute type 1 has an invalid length. [ 350.785171][T19265] netlink: 'syz.3.3730': attribute type 10 has an invalid length. [ 350.846814][T19256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.887580][T19265] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 350.927546][T19262] bond0: (slave geneve2): making interface the new active one [ 350.947614][T19262] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 350.986564][T17203] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.006143][T17203] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.044390][T17203] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.064444][T17203] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.212266][T19281] hsr_slave_1 (unregistering): left promiscuous mode [ 351.346042][T19291] IPv6: sit1: Disabled Multicast RS [ 351.353449][T19291] sit1: entered allmulticast mode [ 352.055560][T19328] __nla_validate_parse: 14 callbacks suppressed [ 352.055581][T19328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3752'. [ 352.083248][T19328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3752'. [ 352.324184][T19352] netlink: 'syz.3.3758': attribute type 3 has an invalid length. [ 352.342738][T19352] netlink: 'syz.3.3758': attribute type 3 has an invalid length. [ 352.358477][T19352] netlink: 'syz.3.3758': attribute type 3 has an invalid length. [ 352.381093][T19352] netlink: 'syz.3.3758': attribute type 3 has an invalid length. [ 352.389795][T19352] netlink: 'syz.3.3758': attribute type 3 has an invalid length. [ 352.399365][T19352] netlink: 'syz.3.3758': attribute type 3 has an invalid length. [ 352.408295][T19352] netlink: 'syz.3.3758': attribute type 3 has an invalid length. [ 352.416579][T19352] netlink: 'syz.3.3758': attribute type 3 has an invalid length. [ 352.492127][T19361] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3760'. [ 352.580104][T19364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3761'. [ 352.687170][T19370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3764'. [ 352.805452][T19379] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3765'. [ 352.937078][T19381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3766'. [ 353.006266][T19381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3766'. [ 353.020974][T19388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3768'. [ 353.196052][T19399] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3772'. [ 353.255938][T19401] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 353.287590][T17201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.315403][T17201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.815325][T19436] dvmrp0: entered allmulticast mode [ 355.106300][T19500] tipc: Enabled bearer , priority 10 [ 355.342138][T19519] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 355.476885][T19520] ip6_vti0: entered allmulticast mode [ 355.517047][T19517] IPVS: set_ctl: invalid protocol: 92 172.30.0.3:21 [ 355.794125][T19537] validate_nla: 51 callbacks suppressed [ 355.794148][T19537] netlink: 'syz.0.3814': attribute type 1 has an invalid length. [ 356.071651][T19557] openvswitch: netlink: Actions may not be safe on all matching packets [ 356.120991][T19560] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.198465][T19563] team_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 356.595757][T19590] tc_dump_action: action bad kind [ 356.644848][T19590] !: renamed from dummy0 [ 356.921092][T19614] netlink: zone id is out of range [ 356.927629][T19614] netlink: zone id is out of range [ 356.933570][T19614] netlink: zone id is out of range [ 356.942433][T19614] netlink: zone id is out of range [ 356.951381][T19614] netlink: zone id is out of range [ 356.956643][T19614] netlink: zone id is out of range [ 356.977926][T19614] netlink: zone id is out of range [ 356.989750][T19614] netlink: zone id is out of range [ 357.093347][T19618] __nla_validate_parse: 17 callbacks suppressed [ 357.093368][T19618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3837'. [ 357.261539][T19630] tipc: Bearer : already 2 bearers with priority 10 [ 357.286221][T19630] tipc: Bearer : trying with adjusted priority [ 357.305022][T19630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3841'. [ 357.315320][T19630] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 357.325717][T19630] tipc: Enabled bearer , priority 9 [ 357.602061][T19642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3843'. [ 357.725294][T19651] tipc: Started in network mode [ 357.751486][T19651] tipc: Node identity f6d9279e7992, cluster identity 4711 [ 357.780767][T19651] tipc: Enabled bearer , priority 0 [ 357.882005][T19652] tipc: Disabling bearer [ 357.936851][T19660] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3847'. [ 358.164143][T19665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3850'. [ 358.220424][T19666] ksmbd: Unknown IPC event: 3, ignore. [ 358.566613][T19683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3855'. [ 358.750034][T19689] netlink: 'syz.0.3858': attribute type 1 has an invalid length. [ 358.813380][T19694] tipc: Enabled bearer , priority 0 [ 358.814365][T19689] netlink: 'syz.0.3858': attribute type 1 has an invalid length. [ 358.835129][T19694] syzkaller0: entered promiscuous mode [ 358.846750][T19694] syzkaller0: entered allmulticast mode [ 358.874053][T19687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3857'. [ 358.890248][T19687] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3857'. [ 358.911315][T19694] tipc: Resetting bearer [ 358.928264][T19687] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.936857][T19687] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.017979][T19693] tipc: Resetting bearer [ 359.074139][T19693] tipc: Disabling bearer [ 359.147952][T19707] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3862'. [ 359.801503][T19754] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 359.815208][T19754] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 359.839542][T19758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3877'. [ 360.088995][T19763] hsr0 speed is unknown, defaulting to 1000 [ 360.096699][T19763]  speed is unknown, defaulting to 1000 [ 360.661570][T19770] netlink: 'syz.0.3879': attribute type 13 has an invalid length. [ 360.696053][T19770] netlink: 'syz.0.3879': attribute type 17 has an invalid length. [ 360.935932][T19770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.950313][T19770] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.127124][T19810] syzkaller0: entered promiscuous mode [ 361.154678][T19810] syzkaller0: entered allmulticast mode [ 361.230383][T19810] tipc: Enabled bearer , priority 0 [ 361.258403][T19810] tipc: Resetting bearer [ 361.582769][T19828] net_ratelimit: 19 callbacks suppressed [ 361.582800][T19828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.247841][ T6858] tipc: Node number set to 3884767661 [ 362.516561][T19855] openvswitch: netlink: Flow key attribute not present in set flow. [ 362.517626][T19856] veth0_to_bridge: entered promiscuous mode [ 362.554687][T19856] veth0_to_bridge: left promiscuous mode [ 362.649128][T19856] bridge0: entered promiscuous mode [ 362.656995][T19856] macsec1: entered promiscuous mode [ 362.696245][T19856] bridge0: left promiscuous mode [ 362.775298][T17203] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x7d [ 363.740678][T19798] tipc: Resetting bearer [ 363.920923][T19898] __nla_validate_parse: 7 callbacks suppressed [ 363.920943][T19898] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3917'. [ 363.963208][T19896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3916'. [ 363.987235][T19898] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.3917'. [ 365.855837][T19798] tipc: Disabling bearer [ 365.880408][T19896] dummy0: entered promiscuous mode [ 365.887016][T19896] batadv_slave_1: entered promiscuous mode [ 365.895268][T19896] debugfs: 'hsr1' already exists in 'hsr' [ 365.901905][T19896] Cannot create hsr debugfs directory [ 366.025804][T19913] IPVS: Unknown mcast interface: nr0 [ 366.172356][T19926] netlink: 'syz.1.3923': attribute type 1 has an invalid length. [ 366.221265][T19926] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3923'. [ 366.273954][T19926] block nbd1: not configured, cannot reconfigure [ 366.343330][T19941] netlink: 'syz.3.3929': attribute type 1 has an invalid length. [ 366.357215][T19941] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3929'. [ 366.680167][T19960] team0: Device vti0 is up. Set it down before adding it as a team port [ 366.712846][T19965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3935'. [ 366.764307][T19966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3935'. [ 366.776243][T19969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 366.783546][T19969] IPv6: NLM_F_CREATE should be set when creating new route [ 366.793264][T19970] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 366.801582][T19966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3935'. [ 366.813251][T19966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3935'. [ 366.849622][T19970] geneve2: entered promiscuous mode [ 366.854976][T19970] geneve2: entered allmulticast mode [ 366.875979][T19979] netlink: 'syz.3.3937': attribute type 1 has an invalid length. [ 366.916091][T17197] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 366.929619][T17197] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 366.983147][T19985] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3937'. [ 367.014482][T19969] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.040836][T17207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.054051][T17207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.092065][T19976] bond2: (slave gretap2): making interface the new active one [ 367.102173][T19976] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 367.113036][T17197] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 367.579442][T20009] tipc: Enabled bearer , priority 10 [ 368.261267][T20023] netlink: 'syz.4.3953': attribute type 8 has an invalid length. [ 368.663906][T19969] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.706359][T19969] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 368.891539][T19969] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.902961][T19969] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 368.955766][T20062] __nla_validate_parse: 4 callbacks suppressed [ 368.955787][T20062] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3965'. [ 369.032455][T19969] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.053816][T19969] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 369.186938][T20080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3970'. [ 369.196797][T17202] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 369.205980][T17202] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 369.213840][T20079] netlink: 'syz.2.3970': attribute type 24 has an invalid length. [ 369.271942][T17202] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 369.272080][T20079] netlink: 'syz.2.3970': attribute type 24 has an invalid length. [ 369.284261][T17202] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 369.299685][T20079] netlink: 'syz.2.3970': attribute type 24 has an invalid length. [ 369.315756][T17207] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 369.324687][T17207] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 369.339027][T20079] netlink: 'syz.2.3970': attribute type 24 has an invalid length. [ 369.366010][T17202] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 369.366139][T20079] netlink: 'syz.2.3970': attribute type 24 has an invalid length. [ 369.388267][T17202] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 369.397258][T20079] netlink: 'syz.2.3970': attribute type 24 has an invalid length. [ 369.501532][T20085] 8021q: adding VLAN 0 to HW filter on device bond4 [ 369.513239][T20085] bond3: (slave bond4): making interface the new active one [ 369.522488][T20085] bond3: (slave bond4): Enslaving as an active interface with an up link [ 369.566256][T20090] bond3: (slave gretap3): Enslaving as a backup interface with an up link [ 369.575865][T20085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3972'. [ 369.615141][T20085] 8021q: adding VLAN 0 to HW filter on device bond3 [ 370.235760][T20126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3983'. [ 370.371650][T20136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3986'. [ 370.689112][T20148] 8021q: adding VLAN 0 to HW filter on device bond4 [ 370.776210][T20152] bond4: (slave geneve2): making interface the new active one [ 370.789312][T20152] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 370.808443][T17201] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.837000][T20160] ip6gre1: entered allmulticast mode [ 370.845921][T17201] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.857492][T20160] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 370.869662][T17201] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.883741][T17201] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.933190][T20163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3996'. [ 371.073058][T20169] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3997'. [ 371.557204][T20186] macsec1: entered promiscuous mode [ 371.568765][T20186] macsec1: entered allmulticast mode [ 371.767537][T20201] netlink: zone id is out of range [ 371.785806][T20201] netlink: zone id is out of range [ 371.825278][T20201] netlink: zone id is out of range [ 371.835017][T20201] netlink: zone id is out of range [ 371.853182][T20201] netlink: zone id is out of range [ 371.864673][T20201] netlink: zone id is out of range [ 371.889097][T20201] netlink: zone id is out of range [ 371.904314][T20201] netlink: zone id is out of range [ 371.946309][T20201] netlink: zone id is out of range [ 371.968377][T20210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4009'. [ 371.996958][T20211] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4008'. [ 372.008752][T20210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4009'. [ 372.024544][T20211] Unsupported ieee802154 address type: 0 [ 372.349600][T20234] tipc: Invalid UDP bearer configuration [ 372.349663][T20234] tipc: Enabling of bearer rejected, failed to enable media [ 372.633365][T20245] syzkaller1: entered promiscuous mode [ 372.641279][T20245] syzkaller1: entered allmulticast mode [ 373.390077][T20284] xt_limit: Overflow, try lower: 271964/0 [ 373.959131][T20314] __nla_validate_parse: 10 callbacks suppressed [ 373.959153][T20314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4043'. [ 374.006309][T20314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4043'. [ 374.273165][T20329] : entered promiscuous mode [ 374.377460][T20333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4049'. [ 374.472398][T20340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4052'. [ 374.497374][T20340] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4052'. [ 374.516621][T20342] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4053'. [ 374.616371][T20347] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4055'. [ 374.671939][T20347] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4055'. [ 374.707137][T20352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4056'. [ 375.264515][T20384] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4064'. [ 375.497498][T20414] validate_nla: 63 callbacks suppressed [ 375.497530][T20414] netlink: 'syz.2.4074': attribute type 1 has an invalid length. [ 375.629102][T20414] 8021q: adding VLAN 0 to HW filter on device bond3 [ 375.780965][T20436] netlink: 'syz.1.4078': attribute type 1 has an invalid length. [ 375.787398][T20429] netlink: 'syz.0.4075': attribute type 1 has an invalid length. [ 375.851298][T20436] smc: adding net device bond0 with user defined pnetid SYZ2 [ 375.890334][T20441] netlink: 'syz.4.4079': attribute type 1 has an invalid length. [ 375.902149][T20443] 8021q: adding VLAN 0 to HW filter on device bond1 [ 375.917249][T20443] bond0: (slave bond1): making interface the new active one [ 375.927139][T20443] bond0: (slave bond1): Enslaving as an active interface with an up link [ 375.952416][T20441] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 375.954170][T20447] net_ratelimit: 5 callbacks suppressed [ 375.954190][T20447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.012958][T20436] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 376.045986][T20443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.308499][T20509] syzkaller1: entered promiscuous mode [ 377.314025][T20509] syzkaller1: entered allmulticast mode [ 377.542715][T20526] hsr0 speed is unknown, defaulting to 1000 [ 377.595634][T20526]  speed is unknown, defaulting to 1000 [ 377.862013][T20543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.892241][T20543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.907233][T20543] bond0 (unregistering): Released all slaves [ 380.321593][T20591] __nla_validate_parse: 19 callbacks suppressed [ 380.321611][T20591] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4124'. [ 380.436689][T20600] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDR3p(@O>ZRaGͽӓp' [ 380.470440][T20600] CPU: 0 UID: 0 PID: 20600 Comm: syz.0.4128 Not tainted syzkaller #0 PREEMPT(full) [ 380.470469][T20600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 380.470484][T20600] Call Trace: [ 380.470491][T20600] [ 380.470501][T20600] dump_stack_lvl+0x189/0x250 [ 380.470533][T20600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.470554][T20600] ? __pfx__printk+0x10/0x10 [ 380.470582][T20600] ? kernfs_path_from_node+0x2f/0x290 [ 380.470601][T20600] ? kernfs_path_from_node+0x250/0x290 [ 380.470618][T20600] ? kernfs_path_from_node+0x2f/0x290 [ 380.470640][T20600] sysfs_warn_dup+0x8e/0xa0 [ 380.470659][T20600] sysfs_do_create_link_sd+0xc0/0x110 [ 380.470680][T20600] device_add_class_symlinks+0x1cf/0x240 [ 380.470705][T20600] device_add+0x475/0xb50 [ 380.470725][T20600] wiphy_register+0x1ba6/0x28d0 [ 380.470762][T20600] ? __pfx_wiphy_register+0x10/0x10 [ 380.470781][T20600] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 380.470806][T20600] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 380.470827][T20600] ieee80211_register_hw+0x3484/0x4100 [ 380.470859][T20600] ? ieee80211_register_hw+0x14d1/0x4100 [ 380.470882][T20600] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 380.470905][T20600] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 380.470932][T20600] ? __hrtimer_setup+0x187/0x210 [ 380.470946][T20600] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 380.470969][T20600] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 380.471019][T20600] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 380.471036][T20600] ? trace_kmalloc+0x1f/0xd0 [ 380.471055][T20600] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 380.471076][T20600] ? kstrndup+0xbf/0x160 [ 380.471101][T20600] hwsim_new_radio_nl+0xea4/0x1b10 [ 380.471121][T20600] ? __pfx___nla_validate_parse+0x10/0x10 [ 380.471168][T20600] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 380.471201][T20600] ? __nla_parse+0x40/0x60 [ 380.471224][T20600] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 380.471255][T20600] genl_family_rcv_msg_doit+0x212/0x300 [ 380.471280][T20600] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 380.471312][T20600] ? bpf_lsm_capable+0x9/0x20 [ 380.471331][T20600] ? security_capable+0x7e/0x2e0 [ 380.471360][T20600] genl_rcv_msg+0x60e/0x790 [ 380.471384][T20600] ? __pfx_genl_rcv_msg+0x10/0x10 [ 380.471401][T20600] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 380.471437][T20600] netlink_rcv_skb+0x208/0x470 [ 380.471455][T20600] ? __lock_acquire+0xab9/0xd20 [ 380.471475][T20600] ? __pfx_genl_rcv_msg+0x10/0x10 [ 380.471492][T20600] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 380.471536][T20600] ? down_read+0x1ad/0x2e0 [ 380.471555][T20600] genl_rcv+0x28/0x40 [ 380.471572][T20600] netlink_unicast+0x82f/0x9e0 [ 380.471605][T20600] ? __pfx_netlink_unicast+0x10/0x10 [ 380.471627][T20600] ? netlink_sendmsg+0x642/0xb30 [ 380.471641][T20600] ? skb_put+0x11b/0x210 [ 380.471660][T20600] netlink_sendmsg+0x805/0xb30 [ 380.471684][T20600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.471701][T20600] ? aa_sock_msg_perm+0xf1/0x1d0 [ 380.471718][T20600] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 380.471736][T20600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.471752][T20600] __sock_sendmsg+0x219/0x270 [ 380.471786][T20600] ____sys_sendmsg+0x505/0x830 [ 380.471813][T20600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.471842][T20600] ? import_iovec+0x74/0xa0 [ 380.471867][T20600] ___sys_sendmsg+0x21f/0x2a0 [ 380.471888][T20600] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.471950][T20600] ? __fget_files+0x2a/0x420 [ 380.471973][T20600] ? __fget_files+0x3a0/0x420 [ 380.472006][T20600] __x64_sys_sendmsg+0x19b/0x260 [ 380.472027][T20600] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 380.472057][T20600] ? rcu_is_watching+0x15/0xb0 [ 380.472081][T20600] ? do_syscall_64+0xbe/0x3b0 [ 380.472102][T20600] do_syscall_64+0xfa/0x3b0 [ 380.472115][T20600] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.472143][T20600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.472160][T20600] ? clear_bhb_loop+0x60/0xb0 [ 380.472181][T20600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.472203][T20600] RIP: 0033:0x7f8b0cd8ebe9 [ 380.472222][T20600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.472237][T20600] RSP: 002b:00007f8b0dc69038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.472256][T20600] RAX: ffffffffffffffda RBX: 00007f8b0cfc5fa0 RCX: 00007f8b0cd8ebe9 [ 380.472269][T20600] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 380.472279][T20600] RBP: 00007f8b0ce11e19 R08: 0000000000000000 R09: 0000000000000000 [ 380.472290][T20600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.472300][T20600] R13: 00007f8b0cfc6038 R14: 00007f8b0cfc5fa0 R15: 00007ffc9e7b38e8 [ 380.472332][T20600] [ 380.964035][T20603] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4124'. [ 381.023094][T20602] IPv6: sit2: Disabled Multicast RS [ 381.029835][T20602] sit2: entered allmulticast mode [ 381.087605][T20612] tipc: Enabling of bearer rejected, failed to enable media [ 381.481998][T20639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.567541][T20653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4144'. [ 381.599119][T20653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4144'. [ 381.613559][T20639] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 381.625682][T20645] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 381.775397][T20663] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4147'. [ 381.820441][T20665] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 382.019395][T20678] netlink: 'syz.1.4152': attribute type 49 has an invalid length. [ 382.029302][T20680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4153'. [ 382.267472][T20689] tipc: Enabled bearer , priority 0 [ 382.293469][T20690] syzkaller0: entered promiscuous mode [ 382.297286][T20696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4159'. [ 382.314001][T20690] syzkaller0: entered allmulticast mode [ 382.370988][T20691] tipc: Resetting bearer [ 382.405539][T20691] tipc: Disabling bearer [ 382.514764][T20702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4161'. [ 382.542564][T20704] netlink: 580 bytes leftover after parsing attributes in process `syz.0.4162'. [ 382.556663][T20705] netlink: 580 bytes leftover after parsing attributes in process `syz.0.4162'. [ 382.964126][T20730] bridge_slave_0: left allmulticast mode [ 382.971074][T20730] bridge_slave_0: left promiscuous mode [ 382.977080][T20730] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.991702][T20730] team0: Port device team_slave_0 removed [ 383.000348][T20730] team0: Port device team_slave_1 removed [ 383.006844][T20730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.016211][T20730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.026416][T20730] bond1: left allmulticast mode [ 383.034269][T20730] bond3: (slave wireguard0): Releasing backup interface [ 383.046639][T20730] wireguard0: left promiscuous mode [ 383.060085][T20730] bond4: (slave geneve2): Releasing active interface [ 383.079174][T17204] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.089528][T17204] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.099900][T17204] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.109149][T17204] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.697089][T20758] netlink: 'syz.3.4180': attribute type 1 has an invalid length. [ 384.084544][T20779] syzkaller0: entered promiscuous mode [ 384.101312][T20779] syzkaller0: entered allmulticast mode [ 384.123305][T20779] tipc: Enabled bearer , priority 0 [ 384.134867][T20779] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 384.294755][T20779] tipc: Resetting bearer [ 384.449180][T20777] tipc: Resetting bearer [ 384.509162][T20777] tipc: Disabling bearer [ 384.790363][T20796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.302921][T20824] netlink: 'syz.1.4202': attribute type 1 has an invalid length. [ 385.779355][T20849] netlink: 'syz.2.4209': attribute type 5 has an invalid length. [ 386.166456][T20878] __nla_validate_parse: 9 callbacks suppressed [ 386.166628][T20878] netlink: 19 bytes leftover after parsing attributes in process `syz.4.4220'. [ 386.185699][T20880] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4219'. [ 386.232442][T20881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4221'. [ 386.287419][T20884] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4222'. [ 386.335654][T20889] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 386.441593][T20893] netlink: 'syz.1.4224': attribute type 39 has an invalid length. [ 386.442110][T20894] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4224'. [ 386.503192][T20894] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4224'. [ 386.759389][T20907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.111551][T20924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4232'. [ 387.470740][T20940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4236'. [ 387.497921][T20940] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4236'. [ 387.575310][T20940] geneve3: entered promiscuous mode [ 387.581996][T20940] geneve3: entered allmulticast mode [ 387.631549][T20945] tipc: Enabled bearer , priority 0 [ 387.673806][T20945] syzkaller0: entered promiscuous mode [ 387.706033][T20945] syzkaller0: entered allmulticast mode [ 387.720373][T20952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4240'. [ 387.816659][T20959] netlink: 'syz.3.4243': attribute type 4 has an invalid length. [ 387.844811][T17204] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.854252][T17204] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.869426][T20945] tipc: Resetting bearer [ 387.902159][T17204] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.951769][T17204] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.990220][T20945] tipc: Resetting bearer [ 388.055975][T20945] tipc: Disabling bearer [ 388.153470][T20978] bond3: entered promiscuous mode [ 388.161003][T20978] bond3: entered allmulticast mode [ 388.167256][T20978] 8021q: adding VLAN 0 to HW filter on device bond3 [ 388.388370][T20997] veth0_to_bridge: entered promiscuous mode [ 388.419046][T20996] veth0_to_bridge: left promiscuous mode [ 388.947277][T21029] netlink: 'syz.1.4266': attribute type 4 has an invalid length. [ 389.086206][T21038] bond0: entered promiscuous mode [ 389.097532][T21038] bond_slave_0: entered promiscuous mode [ 389.115703][T21038] bond_slave_1: entered promiscuous mode [ 389.127206][T21038] syz_tun: entered promiscuous mode [ 389.143650][T21038] bond0: left promiscuous mode [ 389.165048][T21045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.190575][T21038] bond_slave_0: left promiscuous mode [ 389.209366][T21038] bond_slave_1: left promiscuous mode [ 389.215088][T21038] syz_tun: left promiscuous mode [ 389.284002][T21041] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 389.316930][T17201] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 389.469969][T21055] netlink: 'syz.0.4273': attribute type 4 has an invalid length. [ 389.817953][T21060] netlink: 'syz.1.4274': attribute type 1 has an invalid length. [ 389.843918][T21060] netlink: 'syz.1.4274': attribute type 2 has an invalid length. [ 390.778536][T21094] syzkaller0: entered promiscuous mode [ 390.785560][T21094] syzkaller0: entered allmulticast mode [ 390.870837][T21094] syzkaller0: mtu less than device minimum [ 391.401674][T21118] netlink: 'syz.0.4293': attribute type 10 has an invalid length. [ 391.470302][T21122] __nla_validate_parse: 11 callbacks suppressed [ 391.470322][T21122] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4296'. [ 391.528037][T21131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4298'. [ 391.551678][T21131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4298'. [ 391.570780][T21131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4298'. [ 392.072103][T21170] vlan0: entered promiscuous mode [ 392.078836][T21170] vlan0: entered allmulticast mode [ 392.083986][T21170] veth0_vlan: entered allmulticast mode [ 392.111266][T21175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4311'. [ 392.233644][T21182] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4314'. [ 392.381249][T21186] veth9: entered promiscuous mode [ 392.454733][T21188] macsec1: entered promiscuous mode [ 392.460613][T21188] macsec1: entered allmulticast mode [ 392.480972][T21182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4314'. [ 392.490068][T21182] openvswitch: netlink: Flow actions attr not present in new flow. [ 392.499026][T21182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4314'. [ 392.509000][T21182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4314'. [ 392.537200][T17201] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.576999][T17201] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.598634][T17201] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.610433][T17201] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.049031][T21230] netlink: 'syz.0.4328': attribute type 1 has an invalid length. [ 393.056818][T21230] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4328'. [ 393.690482][T21268] netlink: 'syz.2.4340': attribute type 6 has an invalid length. [ 393.718700][T21268] netlink: 'syz.2.4340': attribute type 5 has an invalid length. [ 394.245640][T21295] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 394.411596][T21309] netlink: 'syz.3.4351': attribute type 1 has an invalid length. [ 394.421157][T21309] netlink: 'syz.3.4351': attribute type 1 has an invalid length. [ 394.429589][T21309] netlink: 'syz.3.4351': attribute type 2 has an invalid length. [ 394.546227][T21312] netlink: 'syz.3.4353': attribute type 9 has an invalid length. [ 394.695414][T21318] netlink: 'syz.0.4354': attribute type 14 has an invalid length. [ 394.715435][T21318] netlink: 'syz.0.4354': attribute type 13 has an invalid length. [ 394.840051][T21327] IPv6: NLM_F_CREATE should be specified when creating new route [ 394.934049][T21332] Bluetooth: MGMT ver 1.23 [ 394.975957][T21336] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 395.069189][T21333] [ 395.071552][T21333] ====================================================== [ 395.078556][T21333] WARNING: possible circular locking dependency detected [ 395.085577][T21333] syzkaller #0 Not tainted [ 395.089975][T21333] ------------------------------------------------------ [ 395.096972][T21333] syz.1.4359/21333 is trying to acquire lock: [ 395.103014][T21333] ffff888024b47ba8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x19b/0x450 [ 395.112429][T21333] [ 395.112429][T21333] but task is already holding lock: [ 395.119773][T21333] ffff888024b47668 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: elevator_change+0x180/0x450 [ 395.130119][T21333] [ 395.130119][T21333] which lock already depends on the new lock. [ 395.130119][T21333] [ 395.141206][T21333] [ 395.141206][T21333] the existing dependency chain (in reverse order) is: [ 395.150373][T21333] [ 395.150373][T21333] -> #6 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 395.158966][T21333] lock_acquire+0x120/0x360 [ 395.163994][T21333] blk_alloc_queue+0x538/0x620 [ 395.169267][T21333] __blk_mq_alloc_disk+0x15c/0x340 [ 395.174880][T21333] nbd_dev_add+0x46c/0xae0 [ 395.179808][T21333] nbd_init+0x168/0x1f0 [ 395.184469][T21333] do_one_initcall+0x233/0x820 [ 395.189738][T21333] do_initcall_level+0x104/0x190 [ 395.195183][T21333] do_initcalls+0x59/0xa0 [ 395.200102][T21333] kernel_init_freeable+0x334/0x4b0 [ 395.205804][T21333] kernel_init+0x1d/0x1d0 [ 395.210639][T21333] ret_from_fork+0x3f9/0x770 [ 395.215738][T21333] ret_from_fork_asm+0x1a/0x30 [ 395.221020][T21333] [ 395.221020][T21333] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 395.228214][T21333] lock_acquire+0x120/0x360 [ 395.233226][T21333] fs_reclaim_acquire+0x72/0x100 [ 395.238670][T21333] __kmalloc_cache_node_noprof+0x44/0x3d0 [ 395.244899][T21333] create_worker+0x112/0x720 [ 395.249996][T21333] workqueue_prepare_cpu+0xe4/0x170 [ 395.255722][T21333] cpuhp_invoke_callback+0x442/0x860 [ 395.261514][T21333] _cpu_up+0x2c9/0x580 [ 395.266186][T21333] cpu_up+0x1d2/0x220 [ 395.270672][T21333] cpuhp_bringup_mask+0xb2/0x1a0 [ 395.276222][T21333] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 395.282546][T21333] bringup_nonboot_cpus+0x17/0x30 [ 395.288179][T21333] smp_init+0x32/0x110 [ 395.292765][T21333] kernel_init_freeable+0x316/0x4b0 [ 395.298489][T21333] kernel_init+0x1d/0x1d0 [ 395.303345][T21333] ret_from_fork+0x3f9/0x770 [ 395.308455][T21333] ret_from_fork_asm+0x1a/0x30 [ 395.313741][T21333] [ 395.313741][T21333] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 395.321461][T21333] lock_acquire+0x120/0x360 [ 395.326475][T21333] cpus_read_lock+0x42/0x160 [ 395.331617][T21333] static_key_slow_inc+0x12/0x30 [ 395.337066][T21333] nbd_genl_reconfigure+0xf24/0x1870 [ 395.342867][T21333] genl_family_rcv_msg_doit+0x212/0x300 [ 395.348917][T21333] genl_rcv_msg+0x60e/0x790 [ 395.353920][T21333] netlink_rcv_skb+0x208/0x470 [ 395.359196][T21333] genl_rcv+0x28/0x40 [ 395.363687][T21333] netlink_unicast+0x82f/0x9e0 [ 395.369022][T21333] netlink_sendmsg+0x805/0xb30 [ 395.374291][T21333] __sock_sendmsg+0x219/0x270 [ 395.379477][T21333] ____sys_sendmsg+0x505/0x830 [ 395.384744][T21333] ___sys_sendmsg+0x21f/0x2a0 [ 395.389925][T21333] __x64_sys_sendmsg+0x19b/0x260 [ 395.395368][T21333] do_syscall_64+0xfa/0x3b0 [ 395.400374][T21333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.406781][T21333] [ 395.406781][T21333] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 395.414542][T21333] lock_acquire+0x120/0x360 [ 395.419553][T21333] __mutex_lock+0x187/0x1350 [ 395.424735][T21333] nbd_queue_rq+0x257/0xf10 [ 395.429780][T21333] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 395.436037][T21333] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 395.442876][T21333] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 395.449369][T21333] blk_mq_run_hw_queue+0x348/0x4f0 [ 395.455083][T21333] blk_mq_dispatch_list+0xd0c/0xe00 [ 395.460801][T21333] blk_mq_flush_plug_list+0x469/0x550 [ 395.466677][T21333] __blk_flush_plug+0x3d3/0x4b0 [ 395.472075][T21333] __submit_bio+0x2d3/0x5a0 [ 395.477163][T21333] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 395.483308][T21333] block_read_full_folio+0x599/0x830 [ 395.489280][T21333] filemap_read_folio+0x114/0x380 [ 395.494918][T21333] do_read_cache_folio+0x350/0x590 [ 395.501144][T21333] read_part_sector+0xb6/0x2b0 [ 395.506419][T21333] adfspart_check_ICS+0xa4/0xa50 [ 395.511985][T21333] bdev_disk_changed+0x75f/0x14b0 [ 395.517531][T21333] blkdev_get_whole+0x380/0x510 [ 395.522896][T21333] bdev_open+0x31e/0xd30 [ 395.527775][T21333] blkdev_open+0x3a8/0x510 [ 395.533160][T21333] do_dentry_open+0x950/0x13f0 [ 395.538440][T21333] vfs_open+0x3b/0x340 [ 395.543129][T21333] path_openat+0x2ee5/0x3830 [ 395.548237][T21333] do_filp_open+0x1fa/0x410 [ 395.553271][T21333] do_sys_openat2+0x121/0x1c0 [ 395.558644][T21333] __x64_sys_openat+0x138/0x170 [ 395.564003][T21333] do_syscall_64+0xfa/0x3b0 [ 395.569012][T21333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.575519][T21333] [ 395.575519][T21333] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 395.582734][T21333] lock_acquire+0x120/0x360 [ 395.588025][T21333] __mutex_lock+0x187/0x1350 [ 395.593177][T21333] nbd_queue_rq+0xc8/0xf10 [ 395.598111][T21333] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 395.604351][T21333] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 395.611309][T21333] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 395.617892][T21333] blk_mq_run_hw_queue+0x348/0x4f0 [ 395.623508][T21333] blk_mq_dispatch_list+0xd0c/0xe00 [ 395.629221][T21333] blk_mq_flush_plug_list+0x469/0x550 [ 395.635153][T21333] __blk_flush_plug+0x3d3/0x4b0 [ 395.640530][T21333] __submit_bio+0x2d3/0x5a0 [ 395.645532][T21333] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 395.651756][T21333] block_read_full_folio+0x599/0x830 [ 395.657893][T21333] filemap_read_folio+0x114/0x380 [ 395.663439][T21333] do_read_cache_folio+0x350/0x590 [ 395.669057][T21333] read_part_sector+0xb6/0x2b0 [ 395.674328][T21333] adfspart_check_ICS+0xa4/0xa50 [ 395.679897][T21333] bdev_disk_changed+0x75f/0x14b0 [ 395.685452][T21333] blkdev_get_whole+0x380/0x510 [ 395.690822][T21333] bdev_open+0x31e/0xd30 [ 395.695608][T21333] blkdev_open+0x3a8/0x510 [ 395.700548][T21333] do_dentry_open+0x950/0x13f0 [ 395.705919][T21333] vfs_open+0x3b/0x340 [ 395.710785][T21333] path_openat+0x2ee5/0x3830 [ 395.715890][T21333] do_filp_open+0x1fa/0x410 [ 395.720903][T21333] do_sys_openat2+0x121/0x1c0 [ 395.726116][T21333] __x64_sys_openat+0x138/0x170 [ 395.731477][T21333] do_syscall_64+0xfa/0x3b0 [ 395.736488][T21333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.742944][T21333] [ 395.742944][T21333] -> #1 (set->srcu){.+.+}-{0:0}: [ 395.750061][T21333] lock_sync+0xba/0x160 [ 395.754778][T21333] __synchronize_srcu+0x96/0x3a0 [ 395.760244][T21333] elevator_switch+0x12b/0x640 [ 395.765531][T21333] elevator_change+0x2d4/0x450 [ 395.770812][T21333] elevator_set_default+0x186/0x260 [ 395.776589][T21333] blk_register_queue+0x34e/0x3f0 [ 395.782187][T21333] __add_disk+0x677/0xd50 [ 395.787067][T21333] add_disk_fwnode+0xfc/0x480 [ 395.792254][T21333] nbd_dev_add+0x717/0xae0 [ 395.797221][T21333] nbd_init+0x168/0x1f0 [ 395.801891][T21333] do_one_initcall+0x233/0x820 [ 395.807168][T21333] do_initcall_level+0x104/0x190 [ 395.812625][T21333] do_initcalls+0x59/0xa0 [ 395.817503][T21333] kernel_init_freeable+0x334/0x4b0 [ 395.823217][T21333] kernel_init+0x1d/0x1d0 [ 395.828320][T21333] ret_from_fork+0x3f9/0x770 [ 395.833761][T21333] ret_from_fork_asm+0x1a/0x30 [ 395.839034][T21333] [ 395.839034][T21333] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 395.846844][T21333] validate_chain+0xb9b/0x2140 [ 395.852116][T21333] __lock_acquire+0xab9/0xd20 [ 395.857309][T21333] lock_acquire+0x120/0x360 [ 395.862417][T21333] __mutex_lock+0x187/0x1350 [ 395.867559][T21333] elevator_change+0x19b/0x450 [ 395.872851][T21333] elevator_set_none+0x42/0xb0 [ 395.878137][T21333] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 395.884479][T21333] nbd_start_device+0x17f/0xb10 [ 395.889875][T21333] nbd_genl_connect+0x135b/0x18f0 [ 395.895416][T21333] genl_family_rcv_msg_doit+0x212/0x300 [ 395.901498][T21333] genl_rcv_msg+0x60e/0x790 [ 395.906547][T21333] netlink_rcv_skb+0x208/0x470 [ 395.911826][T21333] genl_rcv+0x28/0x40 [ 395.916412][T21333] netlink_unicast+0x82f/0x9e0 [ 395.921696][T21333] netlink_sendmsg+0x805/0xb30 [ 395.927055][T21333] __sock_sendmsg+0x219/0x270 [ 395.932247][T21333] ____sys_sendmsg+0x505/0x830 [ 395.937541][T21333] ___sys_sendmsg+0x21f/0x2a0 [ 395.942744][T21333] __x64_sys_sendmsg+0x19b/0x260 [ 395.948205][T21333] do_syscall_64+0xfa/0x3b0 [ 395.953224][T21333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.959690][T21333] [ 395.959690][T21333] other info that might help us debug this: [ 395.959690][T21333] [ 395.969912][T21333] Chain exists of: [ 395.969912][T21333] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#50 [ 395.969912][T21333] [ 395.983907][T21333] Possible unsafe locking scenario: [ 395.983907][T21333] [ 395.991362][T21333] CPU0 CPU1 [ 395.996736][T21333] ---- ---- [ 396.002262][T21333] lock(&q->q_usage_counter(io)#50); [ 396.007717][T21333] lock(fs_reclaim); [ 396.014205][T21333] lock(&q->q_usage_counter(io)#50); [ 396.022121][T21333] lock(&q->elevator_lock); [ 396.026739][T21333] [ 396.026739][T21333] *** DEADLOCK *** [ 396.026739][T21333] [ 396.034888][T21333] 6 locks held by syz.1.4359/21333: [ 396.040089][T21333] #0: ffffffff8f59e0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 396.048277][T21333] #1: ffffffff8f59dec8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 396.057259][T21333] #2: ffff88802522a188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 396.068652][T21333] #3: ffff88802522a0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 396.079724][T21333] #4: ffff888024b47668 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: elevator_change+0x180/0x450 [ 396.090439][T21333] #5: ffff888024b476a0 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: elevator_change+0x180/0x450 [ 396.101371][T21333] [ 396.101371][T21333] stack backtrace: [ 396.107358][T21333] CPU: 0 UID: 0 PID: 21333 Comm: syz.1.4359 Not tainted syzkaller #0 PREEMPT(full) [ 396.107378][T21333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 396.107388][T21333] Call Trace: [ 396.107398][T21333] [ 396.107408][T21333] dump_stack_lvl+0x189/0x250 [ 396.107431][T21333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.107445][T21333] ? __pfx__printk+0x10/0x10 [ 396.107463][T21333] ? print_lock_name+0xde/0x100 [ 396.107481][T21333] print_circular_bug+0x2ee/0x310 [ 396.107498][T21333] check_noncircular+0x134/0x160 [ 396.107514][T21333] validate_chain+0xb9b/0x2140 [ 396.107535][T21333] __lock_acquire+0xab9/0xd20 [ 396.107556][T21333] ? elevator_change+0x19b/0x450 [ 396.107573][T21333] lock_acquire+0x120/0x360 [ 396.107589][T21333] ? elevator_change+0x19b/0x450 [ 396.107610][T21333] __mutex_lock+0x187/0x1350 [ 396.107630][T21333] ? elevator_change+0x19b/0x450 [ 396.107647][T21333] ? xa_find_after+0xae/0x430 [ 396.107662][T21333] ? xa_find_after+0x402/0x430 [ 396.107674][T21333] ? elevator_change+0x19b/0x450 [ 396.107690][T21333] ? xa_find_after+0xae/0x430 [ 396.107704][T21333] ? __pfx___mutex_lock+0x10/0x10 [ 396.107727][T21333] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 396.107755][T21333] elevator_change+0x19b/0x450 [ 396.107775][T21333] ? elevator_set_none+0x37/0xb0 [ 396.107797][T21333] elevator_set_none+0x42/0xb0 [ 396.107819][T21333] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 396.107845][T21333] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 396.107870][T21333] ? sysfs_add_file_mode_ns+0x259/0x300 [ 396.107903][T21333] nbd_start_device+0x17f/0xb10 [ 396.107930][T21333] ? device_create_file+0xf4/0x1c0 [ 396.107948][T21333] nbd_genl_connect+0x135b/0x18f0 [ 396.107971][T21333] ? __pfx_nbd_genl_connect+0x10/0x10 [ 396.107998][T21333] ? __nla_parse+0x40/0x60 [ 396.108021][T21333] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 396.108045][T21333] genl_family_rcv_msg_doit+0x212/0x300 [ 396.108068][T21333] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 396.108093][T21333] ? stack_trace_save+0x9c/0xe0 [ 396.108115][T21333] genl_rcv_msg+0x60e/0x790 [ 396.108136][T21333] ? __pfx_genl_rcv_msg+0x10/0x10 [ 396.108153][T21333] ? __pfx_nbd_genl_connect+0x10/0x10 [ 396.108180][T21333] netlink_rcv_skb+0x208/0x470 [ 396.108202][T21333] ? __lock_acquire+0xab9/0xd20 [ 396.108222][T21333] ? __pfx_genl_rcv_msg+0x10/0x10 [ 396.108241][T21333] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 396.108270][T21333] ? down_read+0x1ad/0x2e0 [ 396.108287][T21333] genl_rcv+0x28/0x40 [ 396.108303][T21333] netlink_unicast+0x82f/0x9e0 [ 396.108328][T21333] ? __pfx_netlink_unicast+0x10/0x10 [ 396.108348][T21333] ? netlink_sendmsg+0x642/0xb30 [ 396.108362][T21333] ? skb_put+0x11b/0x210 [ 396.108379][T21333] netlink_sendmsg+0x805/0xb30 [ 396.108399][T21333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.108415][T21333] ? aa_sock_msg_perm+0xf1/0x1d0 [ 396.108432][T21333] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 396.108450][T21333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.108465][T21333] __sock_sendmsg+0x219/0x270 [ 396.108487][T21333] ____sys_sendmsg+0x505/0x830 [ 396.108508][T21333] ? __pfx_____sys_sendmsg+0x10/0x10 [ 396.108529][T21333] ? import_iovec+0x74/0xa0 [ 396.108549][T21333] ___sys_sendmsg+0x21f/0x2a0 [ 396.108567][T21333] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.108600][T21333] ? __fget_files+0x2a/0x420 [ 396.108622][T21333] ? __fget_files+0x3a0/0x420 [ 396.108646][T21333] __x64_sys_sendmsg+0x19b/0x260 [ 396.108664][T21333] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 396.108685][T21333] ? rcu_is_watching+0x15/0xb0 [ 396.108703][T21333] ? do_syscall_64+0xbe/0x3b0 [ 396.108718][T21333] do_syscall_64+0xfa/0x3b0 [ 396.108729][T21333] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.108746][T21333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.108759][T21333] ? clear_bhb_loop+0x60/0xb0 [ 396.108773][T21333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.108791][T21333] RIP: 0033:0x7f51c9d8ebe9 [ 396.108806][T21333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.108818][T21333] RSP: 002b:00007f51cab59038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.108834][T21333] RAX: ffffffffffffffda RBX: 00007f51c9fc5fa0 RCX: 00007f51c9d8ebe9 [ 396.108845][T21333] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 396.108854][T21333] RBP: 00007f51c9e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 396.108862][T21333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.108875][T21333] R13: 00007f51c9fc6038 R14: 00007f51c9fc5fa0 R15: 00007fff6c3a1418 [ 396.108890][T21333] [ 396.597162][T21335] bond0: (slave bond_slave_1): Releasing backup interface [ 396.663842][ T5878] block nbd1: Receive control failed (result -32) [ 396.671135][ T5878] block nbd1: Receive control failed (result -32) [ 396.740247][T21333] nbd1: detected capacity change from 0 to 127 [ 396.765013][T21343] netlink: 'syz.2.4361': attribute type 1 has an invalid length. [ 396.774639][T21343] __nla_validate_parse: 11 callbacks suppressed [ 396.774660][T21343] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4361'. [ 404.157856][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!