last executing test programs: 1.916818509s ago: executing program 2 (id=4271): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect(r0, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x4, 0x3}}, 0x80) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x89, "8774cd28d2d0b5df793ce99e81bfcfa67272a7d280f4046c278cfb1b04dfb84e26d500bbe4f718e47f47de6426a7e472ac62d5c022c3d867f5e3c66ee97d4b4a93ebc97738d900caa43d7e01cbf4e7b358d6bc398217cea2587bce1b3b4cd55fe7d16cb3745a96779a7c502f044b3f7d7364f3df0b1c50c4c4dd3149d718d185ff598307dbb405acac"}, &(0x7f0000000140)=0xad) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000180)=""/113, &(0x7f0000000200)=0x71) r2 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000240)=@isdn, 0x80, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/168, 0xa8}, {&(0x7f0000000380)=""/124, 0x7c}, {&(0x7f0000000400)=""/117, 0x75}, {&(0x7f0000000480)=""/46, 0x2e}, {&(0x7f00000004c0)=""/114, 0x72}, {&(0x7f0000000540)=""/235, 0xeb}], 0x6, &(0x7f00000006c0)=""/159, 0x9f}, 0x120) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="a3540d538e4a5be3790597d989ea4e8a9d4978ffac57ccb18f2734ae42e0096fcb4020daf03df6a9e142c1d151581dabd4607b48b7dc9bf819ceacb3bccb6118d7b721fbc8f751a81f736a380a54a9d2e4a9b38faba63071829d1003e30458ae1e613797d279a782b3e48908e4ce1748406a1e0fc141ceec586c188bbcd3d9369d22cc75b88ba7464a9a0b0944", 0x8d, 0x4000040, 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000980)={&(0x7f00000008c0)=""/136, 0x0, 0x800, 0xff, 0x1}, 0x20) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f00000009c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000a00)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000a40)={0x0, 0x100, 0x0, 0x10001, 0xf64c, 0x80000001}, &(0x7f0000000a80)=0x14) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000ac0)={r6, 0x4}, &(0x7f0000000b00)=0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000b40)={r5, 0x5, 0x0, 0x4493}) connect$qrtr(r7, &(0x7f0000000b80)={0x2a, 0xffffffff, 0xffff7fff}, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r7) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, r9, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9ac}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080810}, 0x818) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000d40)={0x7, 'macvtap0\x00', {0x80000001}, 0x4}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000d80)={0xe1d, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1f}}}}, 0x88) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000e40)={r1, 0xffffffffffffff00, 0xe, 0x500000000}) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ec0), r7) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r11, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x3c, r12, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xdee}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x881}, 0x4040050) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001000), r11) sendmsg$ETHTOOL_MSG_DEBUG_GET(r11, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0xa0, r13, 0x200, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001180)={r1, 0x7, 0xfffffffffffffffd, 0xfffffffffffffffe}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r7) sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x24, r14, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044800}, 0x1) 1.797543516s ago: executing program 1 (id=4274): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x1000) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0xd1383000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b400000000001400791048000000000069003e000000000095000000d2f9b872b2e79d58e17bbd0561e563ea65a2ffb4a8c06a7dc56b07000000000000007d9f37cff0d0cf92f7967d931a9c53d24489768486acd6c4665d6bcff45a190b44"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xc3, &(0x7f0000000080)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) 1.603264804s ago: executing program 1 (id=4277): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffffff, 0x0, 0x0, 0x4}, 0x10) write(r0, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000000000200000800040001000000", 0x24) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x22000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x402, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x100}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x48195) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1412, 0x1}, 0x10}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xe}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adff91284bd7a4ef80c47cd39f1b0100626f6e64000000000900028008001c00"/44], 0x44}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) 1.424223701s ago: executing program 0 (id=4279): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getanyicast={0x14, 0x3e, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000051}, 0x0) splice(r0, &(0x7f0000000100)=0x4, r0, &(0x7f0000000140)=0x7, 0x80000001, 0x4) r1 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r1, r0, 0x0, 0x18, &(0x7f0000000180)='@(/(.((.:[\xb8_.-##)@\x97[.\'(\x00'}, 0x30) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x7}, {0x2, 0x7}, {0x5, 0x7}, {0x3, 0x5}, {0x7f}, {0x4, 0x1}, {0xa5, 0x5}, {0x10, 0x4}, {0x39, 0x4}, {0x5, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x4, 0x5}, {0xc, 0x6}, {0x7, 0x1}, {0x6, 0x7}, {0x3, 0x6}, {0xc7, 0x2}, {0x7}, {0xc9, 0x4}, {0xf7, 0x6}], "5ba68d6ccf8b8571"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0xc, 0x4}, {0x4, 0x5}, {0x4, 0x3}, {0x91}], "7da765359a6c48dd"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x0, 0x2}, {0x9, 0x5}, {0xd, 0x3}, {0x8}, {0x9, 0x6}, {0x9, 0x7}, {0x7, 0x2}, {0x40, 0x3}, {0x4, 0x6}], "8b86025170a8f3af"}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_ASSOCIATE(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r5, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x2b}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@device_b}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2000, 0x2, 0x2, 0x0, {0x7, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x1, 0x10000, 0x3}}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x6, 0x2, 0xee9, 0x100, 0x10, 0x2, 0x2, 0x2, 0x1ff, 0x9812, 0x0, 0xc, 0x2, 0x8, 0x5, 0x5]}]}, 0x78}}, 0x40000) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, r5, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x10000, 0x74}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008004}, 0x4) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0x8c, r5, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x12b, 0x3c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}]}, 0x8c}}, 0x40000) sendmsg$nl_netfilter(r2, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x188, 0x14, 0xa, 0x5, 0x70bd29, 0x25dfdbfc, {0x3, 0x0, 0x3}, [@generic="29b2c11868e850905279de218ded8049cc00db727222d6ffc246e68809f339369c69624353c2716312e07756aeba06ea591ea158be959061cdfefb1b2c4206d4ed4d7e8b2df72d474f534ac601e708b7cea493b5ed3676c648d3a8195077cfdf65a4d10fabd2d126f2abc1cd9dca7d70e8275f06c59a32cb306f0b0a261bf1ed3267e5bc84bad391dfc57038c93c7fbe6c1777ca8e22dfdcd538cf0029aeaa4e07f17fbd40e15705", @nested={0x7a, 0x1a, 0x0, 0x1, [@generic="4e0d02e2467371222641bf1d2a0a0687a1369178861b87da21e482b32a7951fd61908b262745ae4a3c7989c473b1c1ab7c696088ed5613bfb24f707840a18f91edc24d23b97b3bae4df2614b15dd9f1762cf5698600b83ce593544c350059820f47533987bb724cff3cf0cac65921c9424d0729b90b6"]}, @generic="40020f1cd00093cf4bd5f6914ceb19fb44b9265f81a3822d723bd63c6947fb9f3f2082f1c4eddca3d91651641d6133b1f442d48a67041440af08273eb5acc614da5447a0726f0e0745f58feafcd60b4e"]}, 0x188}, 0x1, 0x0, 0x0, 0x5ba69b85d222570d}, 0xc850) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24080805}, 0x4000) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c40), r2) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, r8, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) syz_genetlink_get_family_id$gtp(&(0x7f0000000d40), r2) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000d80)={0x0, 0x3, {0x2, @struct={0x40, 0x7}, 0x0, 0x9, 0xd46, 0x4, 0x589, 0x4a6, 0x2, @usage=0x80000000, 0x1, 0x0, [0x4, 0xa, 0x0, 0x5, 0x18000000, 0x6]}, {0x7fffffffffffffff, @usage=0x1, 0x0, 0x80, 0x7, 0x8, 0x4, 0x8e00000000000000, 0xa, @usage=0x9, 0xfd, 0xfffffff8, [0x7, 0x2, 0x4, 0x3ff, 0x0, 0x7]}, {0xfffffffffffffffb, @usage=0x6, 0x0, 0x1, 0x9, 0x4, 0x0, 0xb8, 0x404, @struct={0x1, 0x95e}, 0xfffff135, 0x9, [0x5c, 0x9, 0x7, 0x100000001, 0x3, 0x8]}, {0x4, 0x2, 0x7}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001180)={r9, 0x3, 0x1, [0xf, 0x6, 0xffffffff, 0x101, 0xd71], [0x2, 0x6, 0xfffffffffffffff8, 0x592f, 0xe, 0x1, 0x100000001, 0x8, 0x8, 0x1, 0x1, 0x2, 0x6, 0x2, 0x9, 0xe985, 0x3d7d9714, 0x344b09b6, 0x81f1, 0x6, 0x9, 0x5, 0x0, 0x79d, 0x8000, 0x5, 0xd1c1, 0x10001, 0x4, 0x3, 0x0, 0x1, 0xfb0ffee, 0x401, 0x5, 0xff, 0x100000001, 0x0, 0xb1a, 0x8, 0x4, 0x7, 0x8, 0x1c000000000, 0x1, 0x9, 0x549, 0x7fff, 0x0, 0x7fffffffffffffff, 0xccdf, 0x32, 0x8, 0x9, 0x6, 0x2, 0x401, 0x7fffffff, 0x7ff, 0xffffffff80000000, 0x1, 0x7, 0x4, 0x80, 0x10, 0xfffffffffffffffa, 0x6, 0x1900000000000000, 0xc5a3, 0x80000000, 0x5, 0x2, 0xa6, 0x6, 0x800, 0x7, 0x1000, 0x8, 0x3, 0xff8, 0x2, 0x7, 0x4, 0x9, 0x7, 0x80000001, 0x6f0, 0x8, 0x6, 0x7ff, 0x7, 0x1, 0x8, 0x9, 0x3, 0x6, 0x2, 0xfffffffffffffffc, 0x4, 0x8, 0xfffffffffffffffc, 0x7, 0x4b06f2bd, 0x7, 0xc, 0x6, 0x5, 0x6, 0x1, 0x7, 0x7, 0x2, 0x9, 0x9, 0x3, 0x2ab8, 0x0, 0x6994, 0x8, 0x5a5, 0xfffffffffffffffd]}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x28, r3, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x40}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8c4}, 0x24004844) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f00000016c0)=0x40, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000002e80)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002e40)={&(0x7f0000001740)=@newtaction={0x16e4, 0x30, 0x202, 0x70bd2c, 0x25dfdbfb, {}, [{0x16d0, 0x1, [@m_connmark={0x88, 0x8, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0x652, 0x1, 0x7f, 0x1}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffb12, 0x2, 0x0, 0x44, 0x2}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x400, 0x5, 0x20, 0xbf1}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x78, 0x2, 0x0, 0x0, {{0xc}, {0x4}, {0x4b, 0x6, "0b9e22bf7ca83451269128eec1492da826a67258eccc6ae6b6bf082b2528832b239594ecf69c22188ba8b54bb2b539bedfc1014aa22b428bfeb4286e01797900ff53c5bc23db41"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0xc8, 0x4, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0x800, 0x1, 0x5, 0xaad, 0x5e}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfffffff8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffff7}]}, {0x52, 0x6, "12a6e3fe2640a12d76c4affe12d3e3afa81e5566ee6bf1e1c102d90f40cbde22e87efb7117026511fa49387bc6fe962b5172e66fcc8c516838bc3f10d66558d72d9eca2496ba965b28eb90cf2371"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0xa8, 0x7, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x2, 0x20000004, 0x3, 0x8}, 0xf}}]}, {0x4d, 0x6, "7aa6334be515bdb5927a5eba5eacc01e417b747fbd967f30d74e5343155257213c0ea31d61aa329455355603626883bbdd4a924d3fd5813aa6c5e7e1b9a1c75602b28a19c2f948b7a3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0x74, 0xf, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x101, 0x8c3, 0x5, 0x4, 0x774}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}]}, {0x10, 0x6, "3e24c7cdb86119a0ebcdc82d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x130, 0xc, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}]}, {0xd9, 0x6, "3e1a1f69bbeb0320332cf4b97e79eb295cfeb0c9737cf2c8cb8a1c7ee4d69d0d66f5324c29a08c85ad90559569b152c2a2a639b13dd7a64acaafed04f0338813ef043095c19e560b5b3ff9497f8cbe602990a9bdd3febd389010c980af89ea3d1738bd9a8af9e3e7c9b8256a47eb7264969cf154e1a7785f331d80013d689f8f902af87a54ea45cb86d26e84584404b008b09ca4b08a48ce5b766d883076a91f223c2bb877197ef341a5824fb12bedbb979b4c0912dde3630cbacfbd42b7d486ba05628a9c7a9b3af2afd0a29406c9ed68d3981892"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0xa4, 0x19, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000000, 0x2, 0x10000000, 0x5, 0x3}, 0x1}}]}, {0x42, 0x6, "2fab9a6f635f62424845e719c09219ff5c5af3b221149680940c2556ba9a82225e085530c39003fe19773c5150e69a54d2e7648fa21583ba59112b034297"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x174, 0xf, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7, 0x5, 0x10000000, 0x400, 0xfffffff3}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xff, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x58, 0xc, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x1048, 0x14, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x8, 0x6, 0xc, 0x3}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x16e4}, 0x1, 0x0, 0x0, 0x110}, 0x4000000) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000002ec0), 0x8) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r11, &(0x7f0000002fc0)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)={0x20, r3, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe, 0x7c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r12, &(0x7f0000003100)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000030c0)={&(0x7f0000003040)={0x64, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xa, 0x2a}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004804) 1.42366669s ago: executing program 1 (id=4280): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) connect$802154_dgram(r4, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000003c0)={r5, @in={{0x2, 0x4e21, @multicast2}}, [0xfffffffffffffff9, 0xd, 0x1, 0x5, 0x1, 0x7, 0x0, 0x2, 0x29, 0xfffffffffffffffe, 0x700, 0x8000000000000000, 0x19c, 0x9, 0x100000000000]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r6, 0x4}, 0x8) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x11}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.421113134s ago: executing program 4 (id=4281): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000200000000000000000000010000000000000002000013bba2e80e3fc99a1a00008d3faf067e2e10aaa77e67bf12e615b894575540e96ed3c014fea53757eb5f1846451ef910f7fcf8ade4ce39f9a5059107aeb6549e63005ed1b558947d675e8822939af9a7e099becc05a5a1c86ba7e64f3adadcef621e247c9c7b1bdc25ce522969a1429565871d5759d133909f9396902b7ac81533"], 0x0, 0x2a, 0x0, 0x0, 0x800001}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000101840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffff050000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x7ffffff, &(0x7f0000000200), 0x10}, 0x90) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r5, @ANYRESOCT=r3], 0x24}}, 0x0) r6 = gettid() r7 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x403, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x10d39, 0x55223}, [@IFLA_NET_NS_PID={0x8, 0x13, r6}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x406c406}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r10, 0x0, 0x1, 0x0, &(0x7f0000000380)) sendmsg$TIPC_CMD_SET_LINK_PRI(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r9, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xfffffc00, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1e, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xb2, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r0, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%ps \x00'}, 0x20) r14 = syz_genetlink_get_family_id$gtp(&(0x7f00000009c0), r8) r15 = socket$unix(0x1, 0x1, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r17, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000018c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56747, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r17, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4004000) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r14, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r11}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_LINK={0x8, 0x1, r17}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048045}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xb, 0x11, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8e2c0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x5, 0x7, 0x6}, 0x10, r12, r1, 0x3, &(0x7f0000000840)=[r13], &(0x7f0000000880)=[{0x2, 0x2, 0x3, 0x1}, {0x2, 0x1, 0x1, 0x5}, {0x5, 0x5, 0xc}], 0x10, 0x6}, 0x94) 1.398654311s ago: executing program 0 (id=4282): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c01250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3f000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x9}, {0x8}]}, @NL80211_ATTR_SCAN_SSIDS={0x20, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x4}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x14}, 0x4881) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000791204000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r6, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0xf, 0x25}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x80) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01012abd7000000008002b00000008000300", @ANYRES32=r7, @ANYBLOB="040046000500340076000000080026006c09"], 0x58}}, 0x4804) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f0000000280)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0xa, 'syz0\x00', @default, 0xfffffdbb, 0x2, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) setsockopt$netrom_NETROM_T2(r8, 0x103, 0x2, &(0x7f0000000380)=0x1, 0x4) 1.219911215s ago: executing program 0 (id=4285): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x800, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x0, 0x4}, 0x9c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x4ed, 0x9, 0x208, 0x8, 0x82, 0x0, 0x909, 0x2, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000500)={r2, @in={{0x2, 0x4e24, @empty}}, 0xffffffff, 0x8, 0xfffffff7, 0x2, 0x0, 0xbc4}, 0x9c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000003010101"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmmsg(r3, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003b40)=""/210, 0xd2}], 0x1}, 0x1c5}], 0x1, 0x40000000, 0x0) 1.151669692s ago: executing program 3 (id=4286): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0xd1383000) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r1, 0x0) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)="9b468da99267a99aed5f6b48ad03b7c825ecb32adffc80ff47af98a3741169ea2fcaa8de0120079173a79cbc6b3e4ef87d968b9bfd711da55a06467ae7196c92aeb550695c643a2eb3d0ce6ec6c56ba80e0fd32e8d2c4151045ca0c0e4ae46503bcef27a4a62957c4b4f633201531d45c0", 0x71}], 0x1}}], 0x1, 0x404c041) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000010000002c0004800500030080ff00000500030004080000050003000600faff05000300000000000500030000f3000008000100ffffffff080002"], 0x50}}, 0x0) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x1000) (async) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 1.009880374s ago: executing program 4 (id=4287): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x3, @bcast, 0xffffffffffffffff}) (async) listen(r0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200000a090002004981f140000000000900010073797a300000000034000480300001800a0001006d611905680000002000028005000300e40000000a0001007265616c6d000077001100010000000000000000000300000a"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) (async) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) (async) close(0x3) (async) r3 = socket$inet(0x2, 0x80000, 0x1) getpeername$inet(r3, &(0x7f0000000140)={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x10) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x2710, @local}, 0x10) (async) r5 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000280)={0x0, 0x6cda83faea3171fc, &(0x7f0000000400)=[{&(0x7f0000000cc0)=""/4096}, {&(0x7f00000004c0)=""/93}, {&(0x7f0000000340)=""/63}, {&(0x7f0000000680)=""/151}], 0x44}, 0x4c2103a0) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96030000000000000004bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcb18e1fd0773909464a783148e0e7b604a6c47b33c43a3ffff92ec8bbde1af40f29cfcf0836a70a2f6b1192ab8f24ca363492393e1c2a3b190180caafbf8cfca720074bdcc7cbd978efd846ac8f823402eea2bdeaf5e99514e64e36cad5eba82010b2d149aa72e5f070000000000000000000000002904000000003a4a00009d5df0e0dbb9821d9c5402474d5866ce5eb60188d83ac741b45aeacac594cf09de9b460f48b96ae8a0ee478e46c8ca3e4c5d2b3cb4ad480100000000000000dcbf36b7e8be59ca4b46266cf75bea8a22ab71895d954dc6d28864144c73391770690a9301cbe97565d5000000000000000455355d5d55f551df82ea475a711ec56d00000000507c093f4fad7095fbec5b005ebb710d87"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x34, &(0x7f00000000c0)=r8, 0x4) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a63b}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)=@newchain={0x240, 0x64, 0x8, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xe, 0x9}, {0x3, 0x3}, {0x6, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1a6}, @filter_kind_options=@f_basic={{0xa}, {0x200, 0x2, [@TCA_BASIC_ACT={0x1f4, 0x3, [@m_mpls={0x140, 0x6, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8809}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xc3, 0x45, 0xe, 0x3, 0x8}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x69b4e}, @TCA_MPLS_LABEL={0x8, 0x5, 0x54092}]}, {0xc7, 0x6, "840582edb2baec83dd1e5a065ada9ca37dd37e4e07f3ecc9df1fef3020ed44d65e064c9b13ef8d38219cd0edcd931c02d913a79367bb98fd8c8812f61ea1c4e98ed4a734f7667a087a6944d6d9288e1b107357c170afd6e2e50c5b64fb3d26380599958070816cd12dd63621aec0a9bf5494b73105200836df20d3e9fdd40bf8457d150aec998b990ea3486515caaac16d240f8585549a1550e5c6f62a5c6ab08c440e51056e7c0d7887b6b8dfebd6be9e2eaad17fe99502f57486fe2452acca70c50f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_connmark={0xb0, 0x2, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x6, 0x9, 0x4}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffff9c, 0x4, 0x0, 0x9, 0x4}, 0x40}}]}, {0x47, 0x6, "b67e80e1b65223a6361094f2fdccfeae26a2e559bcef87faf8cf3853c2a8e4ab95608f1a50309995b9f97375bacd9dcb10af3d67cf27339e303f01499acb880a63e894"}, {0xc, 0x7, {0x1}}, {0xc}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xffe0}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1a7}]}, 0x240}, 0x1, 0x0, 0x0, 0xc090}, 0x1) 859.734987ms ago: executing program 3 (id=4288): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="186000ad6b000001000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x40004}, 0x20050840) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) (async) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)={0x3c, 0x42, 0x601, 0x0, 0x0, "", [@typed={0x25, 0x0, 0x0, 0x0, @str='\x00h\x10x\xd0\x96\x00\xe0\xd4uT\t\xebL!?\x1bZ\xa49\x9c\xec\x8f\b8\t\x97\xf9Jy\x03<\"'}, @generic="f4"]}, 0x3c}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x2e}], 0x1}, 0x0) 859.170694ms ago: executing program 2 (id=4289): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x9b}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x9b}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) r4 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r4, r3, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r6, 0x8911, &(0x7f0000000000)="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") r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8983, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {0x1}, 0x105}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8983, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {0x1}, 0x105}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f00000006c0)={0x0, 'macvtap0\x00', {0xffe}, 0x2b1}) r8 = socket$key(0xf, 0x3, 0x2) r9 = socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x26, &(0x7f0000000200)={@random="60e9ac7fdd93", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @val={@val={0x88a8, 0x4, 0x1, 0x1}, {0x8100, 0x0, 0x1, 0x3}}, {@can={0xc, {{0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "9701f4587cb3ed1a"}}}}, 0x0) getsockopt$MRT6(r9, 0x29, 0xce, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) getsockopt$MRT6(r9, 0x29, 0xce, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020200000a000000000000000000000003000600000000000200000000000000000000000000000002000100000000000040001800000000030005000000000002000200ac1414aa0000000000000000"], 0x50}, 0x1, 0x7}, 0x0) 823.675026ms ago: executing program 4 (id=4290): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48004}, 0x4000040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x81) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@empty, @initdev, 0x0}, &(0x7f0000000380)=0xc) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x90, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x40}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xf}, @ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2c}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xdb}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x2}]}, 0x90}, 0x1, 0x0, 0x0, 0x8004}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1f8, r6, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xec, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1373}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b7b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2406b15}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e48}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95be}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30cc815f}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa00c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x119ca202}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1549059d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc07}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ee3d1aa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41598d04}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbc00}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f4cb033}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6250}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74991da3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e4c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72c2a41e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff85}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe591}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3615}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2576}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29f0854e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc60b6b1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e671dd5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d2afb08}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xdc, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x395c0ee7}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a616026}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5620fe3f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bda4e07}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2688efb4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x792395de}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5836b8ba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e9407dd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3374ade7}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x203bc9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x338e80c9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}]}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20000800}, 0x841) r7 = socket$kcm(0x29, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, r1, 0x1, 0x3, 0x5}, 0x50) r9 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r8, &(0x7f0000000880)="b087b08c365963e5fd0a8c719aa28111145d2c948fcb57e2fa43d5dac3197b0ab7130c9804d5de87ddedab810f9fcfa9f382d0ab10337a17c8b2ae1cce531dc9f67e3e8ea9352f130caebe80521f7fc278cc85eed55c0d334cdeff74d4e419f719533da9", &(0x7f0000000900)=@udp=r9, 0x4}, 0x20) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000980)={'tunl0\x00', {0x2, 0x4e20, @rand_addr=0x64010101}}) socket(0x2b, 0xa, 0x17b) sendmsg$kcm(r7, &(0x7f0000002100)={&(0x7f00000009c0)=@llc={0x1a, 0x306, 0x7, 0x4, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000a40)="58ce153be1cf8dbf6b57069bb5abf9fefde2ed1c7ab2268565af8cfb35", 0x1d}, {&(0x7f0000000a80)="4325c7331f3747a34733ac93858b5374215598d9515cc1c17751b0cdfc89c77bb096891e96bc931656b210365bebd37b0ce8d9a08f49631f53c8d2f085a57507f919d1c3055855c50435b63a25fd", 0x4e}, {&(0x7f0000000b00)="9b0d534bd5537fc80d9b39eefaf4e4378ee725014afe0f3099af4ba1cddca901961419b7c5f27a315745cec876dc6219b1131f4890fa68a8eea6a18b5d29727843c58205306025a26a526ed3b5451d084c34513dd5dc82e4f2478b74ef54cd0a03f53a384d9b929f", 0x68}, {&(0x7f0000000b80)="72983eb1e342bdb7c3a41061cc877173132f42c0f2b7f9c00676c20a3e96bc93729418690066e1dbb7c4f62c464c6615ec7bb024ee8598883b9a70c63317de2845b673594dfb25a2b9a9579d0cba9cf1f0a975067257d83a54ae66e090e944fcba33af14231dee8593cb", 0x6a}, {&(0x7f0000000c00)="9bc95b5ac90841bcaf255c5bf84f70efaa8f3613eecce42d927ac9b1711194bba45ad55cd9af847fb141f489752693c8642cf6269fb5147b1823bddf812eb664c61828aa899c75f54ceb14b9901556f12adc842565e758b3b9aa20b1bb9bd0020e45f050d816ac0b0c33e3ca58c3757f71a154bd59", 0x75}, {&(0x7f0000000c80)="6fc10311ae668f39af1910ef26d4c5df8019b9401232e9b531d147ff49d36dc5245733e4a10658114f1d35fb420551fac2fd3fd9d3ca8146bbc49bae", 0x3c}, {&(0x7f0000000cc0)="eff2e3618a1b05fdb276830f110ffc681bf6ea141a11912cc1235acc5ca76065feff95b147c35fe7924c988966eda27854a8d4a3259ace3029326af8a152849fc7f63d68a17d1f82f3ad1de1d3c2fc5c17df54b94cc62fab52a954c2bd26e7610f", 0x61}, {&(0x7f0000000d40)="2be9b7bbc7f5", 0x6}], 0x8, &(0x7f0000000e00)=[{0x108, 0x118, 0x6, "774448a090322427f3a946e5602bd1186ec675f7b2817a14d66914f17419a043a507159314b172054d0b7e6b81d14ca76b0902613770f9e1f3418d59396a15dbee98d4feca95c6df0fc5ddd0393b1f1ec7aa35abc752b37018e349c20dd9642e2e9dd5e9080be30a0c53c7a51a043f226283657d7315dcf3d504d93d0ef9d71b37b0561ee6acd8a51f020ee146cfd43c736fed5d4ff8d85d75a5b475e991eb40a86805e456c4572c05b5504827e9f694761f08afcfbcb0756b68f43acdffe355fed513b60b22a49e85ba1260974735fb9ab89aa67e27e3137757c1b644df64885e19b0409076ec2cfcc3f8ba0b7e42f275f7b8be413d6e"}, {0x1010, 0x84, 0x1000, "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"}, {0x48, 0x1, 0x9, "2a0439ff0508ffeb59f2fe4c78b27391cf8584582387cb9b1ee81b199dad64b5d201b5fb0e725c0cfc95966dfcb7674646"}, {0x70, 0x103, 0x3ff, "24926ba68c0ed0806ce82feecfd1eec9cc87a4e8824aaf3348b499c45bc243a5a0371273943502e769c65083137e20194ab3e4a44cdf5917cd89e12c0af9688da1d83d8596d736975b31434a7bd101445581cab3972cdbd50621"}, {0x100, 0x1, 0xfffffc00, "f6f3933f8b23ed7b563800783844e9ef2171ea4721b503f7e15668585eb38197b10bb6ef8490a26ce15c551262cc5a09b9db1372e56ec953e45cb1553c09c48281af6a913f7e241bee9614fd00a0a57b2ed357bff844eb533acff3d2244f024a092f25b3865e923ce50fe3206d5e404a251de2055c0736b9870557e6799c5a2178807d39105d3c4b3f2e9bfb5ff8232e0343bee8dcd1e1dcf330a6c3278bdedca56d9319dc41e599230e653b3525b0eb0f9f5f7c3c8999e0439e42f55a7d60804824f2752db464388392c5a2a3453840771228920a02d0f36744c39e6457d7638993d17b642c18c58bdf20161013"}], 0x12d0}, 0x800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000024c0)={&(0x7f0000002140)="b2109551e0d45a52296d54f7aa2a85c4b952fcd2edbacf9fd2513cf81c19fe5b1931d79ba7897e98f75602bc91a529fa6ec2a21af2f48178aa08e3657707aa36d025d787a4adf83c8aa03386839890a34b48e8f4ecba438c10062f7cea99445ce7b406905a9f84fab9afd156f5fdb3563d6cb66c15e56191b675c89b8cd7379436634ef148ec3756071f5e5db2b75043457c8b8aa39ad11e60e3ef3c935bcfd51d2b845b8d9d1e50125afc31314b6970eef099167e82282a58c732734103e240903f6f24b6f40f8bb86e3bd61192b630127bdfd5830713c0105d48cd01e5e74797a4594147b2d31f2528a16fccabcf", &(0x7f0000002240)=""/85, &(0x7f00000022c0)="5a09065f92614372e91d4ac6a31ee40acbad458e7d7773a7e96a16d7345a45842888f317842f989c4b6197374d88ffba57811f23e6cf5d1266cce300661031b275135fc401506a49337d667f0599d8b14d25c4c226dae5a9cd8874ea6851b35daacfd4d7d3078f0d6ade0421f729d7eadf4d821734f3aad22299bd942b9df6b1cb89cc1c6eb3c9384b660cb5f1ed4e1d209b50154618347ce82c49f602bd58ab2300aa3c75e9b1410f68a5804e400e0c5205625edf070a2b296fccd6bed1ff8960f4dd495746506c013f3c953df2e31fada7dbb1b75a6e5950e603adee80b94ad3d615", &(0x7f00000023c0)="f55d17e99ca9aed6004e04854dd06e99940c3080e3a790c787458a70bcfbf6097d62fc5192b19534011a50ee23e3a078fb66814f5880eb530af4a92a2a82181758b6462c5f715595db8da81afd21cbe9681b2e10033b7d86c877cd7f132a25b6c3c5562a6a48573d73ba46478fc3f01915f529539477928ff89dc8eed36a4704f6c71cbc3a857fb93287b7fdf8412ccab2b9922e97571eca1691ba7f20d3542c0fc4d17eb3", 0x1, r11, 0x4}, 0x38) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000002540), r5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002580)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000025c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r10, &(0x7f00000026c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x54, r12, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'veth0\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, 'ethtool\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '%'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000810) sendmsg$NLBL_CIPSOV4_C_LISTALL(r10, &(0x7f0000002840)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002800)={&(0x7f0000002740)={0xc0, r6, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d274364}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1eff0d06}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2523152f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c24}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ed83d5e}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1168f755}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d2e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6de83156}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x568a66fd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e74}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c9a6b0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf9c85e1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3232}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a6b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b42}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55488a7c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55a1944e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1183}]}]}]}, 0xc0}}, 0x4000000) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x9, 0x7, &(0x7f0000002880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@map_fd={0x18, 0x0, 0x1, 0x0, r8}, @generic={0x9, 0xd, 0xc, 0x9, 0x7f}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000028c0)='syzkaller\x00', 0x3, 0xb5, &(0x7f0000002900)=""/181, 0x41100, 0x50, '\x00', r4, @cgroup_sock=0xd, 0xffffffffffffffff, 0x8, &(0x7f00000029c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000002a00)={0x5, 0x8, 0x0, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000002a40)=[r11], &(0x7f0000002a80)=[{0x0, 0x4, 0x1, 0x8}, {0x1, 0x3, 0x0, 0xa}, {0x2, 0x5, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002c80)={@ifindex=r4, 0x5, 0x1, 0x6, &(0x7f0000002b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000002bc0)=[0x0], &(0x7f0000002c00)=[0x0], &(0x7f0000002c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002cc0)={@map, r15, 0x15, 0x1c, 0x0, @void, @value, @void, @void, r16}, 0x20) 757.83191ms ago: executing program 2 (id=4291): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000dc0), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x1, 0xb, 0x8, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x4, 0xfff3}, {0x0, 0xffe0}, {0xfff3, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c8c4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e000000000a0000030000400000000000000000", @ANYRES32=r1, @ANYBLOB='\f\x00'/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0500000000000000010000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 700.298941ms ago: executing program 4 (id=4292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @handle=@pci={{0x8}, {0x11}}]}, 0x3c}}, 0x0) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x10}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) close(r7) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket(0x15, 0x5, 0x0) getsockopt(r10, 0x200000000114, 0x271b, 0x0, &(0x7f0000000340)) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r9, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x2, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0xffff}}}}}}, 0x0) 699.935268ms ago: executing program 0 (id=4293): r0 = socket$isdn(0x22, 0x2, 0x25) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x8, 0xffffffffffff8407}) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x3, 0x3, {0xa, 0x4e24, 0xe, @remote, 0x5}}}, 0x32) (async) close(r0) 691.611716ms ago: executing program 3 (id=4294): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012000000000000003f3431f44df1d4a537d63a93c22e0e15798a615e5d970355707801a72bb8ca814cba0db7e2a5012fb2209ccf56518a85d4bc1fea4ab85ff9f9c1c6d192054e2e9327171635f9b455300bfbda0158d9bec74b7a2b6c2b48c3b24e30ac4d04c4a0625f01332d17ea6be8d693fec777abc5bdedbc6c895ae4a9a0aea661d7773c1fcafa4785a931e247b458b08870c24976f5db7f55d11ebef968883725f19dfa3b8f27ed0e4f8677f88dcf65bff21cc426e3e8726b9b698d9213148d8b7a67b4e518a44200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000000)="b86bc0", 0x3) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0x0, 0x0) 668.377523ms ago: executing program 2 (id=4295): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000010c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000050000006c00000008000300cca84971a44d7903f1860620309fcf548bbe1f9cae227791486625450b659488500973f5f91bc6218bafff719e980beee63673b3ebe277daa11c1e633bc347db6218d09e630faf0d4cb756d6fb585bc1ec0c68dad92793eac915221f3808d0ac088ef343cba90852fbdae9fa7fe7d274b81f2fb2cc71bb3fa270b4e0c64091cf424629ed11890959c797859883ae3d86bbae2c1841e099f08c61aa7744b8cf59f36e1e8e5d2d86b211660f779d8b6cc7d3c898ad11d431dfdb7f3ba102ad592b3ebd1b128601913375f98eed19994ee67f3e4d484f89ef6aa4fa746ecc81bbcec6236ad31d00", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x4) (async) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r8, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0xffffffffffffffc6, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c00009a4fe1081cb6ed25ee74f2"], 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x4004c40) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x40000) (async) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) sendmsg$NL80211_CMD_GET_MPATH(r9, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32, @ANYBLOB="2000010033433e972fdab48d0397e3f525b58a8108cd8b1d4dba6eaf5fe6b7233e40025cccddb5ec21f9450c8cbdc7cbeed3ff489bb62c3292de5b616b78fb721c6fdf7e0058ce2e466a6576544ae38941c6447e9d5b2d8261d0ac1f18a39d97edc3ed09c40c52c62fef", @ANYRESOCT], 0x38}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000bc00000095", @ANYRESOCT=r5], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) r12 = socket(0x400000000010, 0x2, 0x0) write(r12, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c0400070080000300", 0x33a) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="2400d844839926000000520000c0", @ANYRES16=r2, @ANYBLOB="10002dbd7000fddbdf2549000000080001000000000008000300", @ANYRES32=r13, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r14 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r14, 0x84, 0x74, 0x0, &(0x7f0000000000)=0x43) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000001000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000009000000000000010001000000000000008a46000000000009020000000000"], 0x0, 0x96}, 0x20) (async) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000001000c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r15, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x500}, 0x2}, 0x80) 504.411078ms ago: executing program 0 (id=4296): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1], 0x0, [0x8, 0x0, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000001340)=ANY=[@ANYBLOB="000000f602040400090008000900aaaaaaaaaabbaaaaaaaaaabb88a8210081003e0088476c06641f00442f01fc000000000000000000000000000000ff0200000000000000000100000000010421880b00000000090008000d0086dd080088be000000011d0294060100000000000009080022eb00000000200317000200000000000061000597120800655800000003"], 0x90) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r10], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r11 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$nl_route_sched(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r14, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r14, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r14, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r14, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r14, 0x0, r13, 0x0, 0x7ffff000, 0xa) socket$nl_route(0x10, 0x3, 0x0) 484.780075ms ago: executing program 1 (id=4297): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 469.433144ms ago: executing program 3 (id=4298): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f49000008000500", @ANYRES32=r1], 0x50}}, 0xc0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x3}}}}}}}, 0x0) 388.349055ms ago: executing program 2 (id=4299): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000021aee3dece8055f60000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000040000000000000000000200000000000000000000000000000000000000100000300000000440005000a010101000000000000000000000000000004d62b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x1c8, 0x1c8, 0x98, 0x0, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x7fffff80, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xff, 0x2, [0x4, 0x36, 0x1d, 0x1c, 0x23, 0x1e, 0x2c, 0x7, 0x1e, 0x7, 0x2d, 0x37, 0x30, 0x9, 0x3b, 0x16], 0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56741, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) 387.931066ms ago: executing program 4 (id=4300): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x201}, 0x14}}, 0x8081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020100030a00000000000000000000000300050000000000020000000000000000000000000000000200100000000000ffffffff00000000030006000000000002"], 0x50}}, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 282.733616ms ago: executing program 3 (id=4301): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x44}}, 0x0) sendmmsg(r0, &(0x7f0000005d00)=[{{&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}}], 0x1, 0x44080) 245.32588ms ago: executing program 1 (id=4302): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70502000000000061106a000000000004000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x34, 0x0, &(0x7f00000001c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000004726c83b8e0003c6adb70000000018"], 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000000005927dad3e000000"], 0x26}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 184.503539ms ago: executing program 2 (id=4303): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, &(0x7f00000002c0)={{0x6, @rose}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x34, r2, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x40}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xda}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x17}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40044) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="68b2bb955466d1557e74ffc9659f40349a39e1a75aa01a693b1c824db3ec7efb4cd2b7ed5b7035670800000000000000dcea4193d26b946b71519652640d4ec9800466a5123dc7b17418514975795dce94a724b09d5c53a402af71afb42e576d67b620cd495de27b191d736c66e50c5815f728f6bbd8b1ae5b517bb090e7a08e2e4b387ed2449fb69e181da32562ff7879a95fc1dd2e4fd8b6306ece95c194798fc58614f51cf6334e276e3df953114b999163eab629f20abe71a2cc05c7330d4869fe90faba355a3026aa0914c92b43bf1d8a8bd2a548932032ddd1cd260f01329c345d9a256f085f5f191f3ea631112d2b4071cb9fd3641915938ef6d45cc597f648339a63352009481477ac2b429bd3eedfd2e6ac836b80b909d3b22b076a9811b18f5512641c96513efcda9326926b856a0d3efeb4a42f72a645d3526686ce39213137e1692fedf907ed7966a55751397414b763336dc9b18b0bb90febb5a645d975fa008d15ac29acc37e942daa6b3c10035ea382595db453d642af13ec90445141bf24fb8494e826641ac452e71b7374172046dbbbe2a9806a3d491181c9ba15979e17b0f20eaf94216bfe0c76", @ANYRES16=r6, @ANYBLOB="01002abd7000fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x810) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) bind$bt_hci(0xffffffffffffffff, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="2e000300010003", 0x7) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x148, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x73c7d38a1b8432c4, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14}]}}]}, 0x148}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000126bd7000fcdbdf25020000000c0005000a010000000000000c00030007000000000000000c00050002000000000000000c00030008000000000000000c00060000000000000000001c0007800c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="0c0003006b00000020000000"], 0x78}, 0x1, 0x0, 0x0, 0x80d0}, 0x40e1) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r4]}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r11, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x8, 0x0, 0x0}}, 0x10) r12 = socket$netlink(0x10, 0x3, 0x4) writev(r12, &(0x7f0000000300)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r13, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r13, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x66, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7c56c988f0195595, 0x6071, 0x0, 0xe7}}}}}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, 0x0, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r14) 152.041869ms ago: executing program 1 (id=4304): ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0xfffffffd, 0xffffffffffffffff, 0x5b0f9f04, 0xffffffffffffffff}) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x14, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200601, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0x1, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="f1ff00004ec6"}) sendmsg$inet(r1, &(0x7f0000002780)={&(0x7f0000001140)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000026c0)=[{&(0x7f00000011c0)="2a0d53da1513bc5ef6c4ba1e3c807998637764854ab446f45d92182c4b88bf05e3ebfd0a3dfaf6cf286958c3895b3d8c09cbede8a64a440c768b554ae27b3f4bc35306b178f46ba5f69f3b4f5a36895e81ccb4", 0x53}, {&(0x7f0000001240)="7f6ada61059474a5ed626f23c4202bafd7439a4ece2c8ef65e0be3857b9b163b48f573be22ec287d629579de1a62cc9795d0702039393d79617e01d16d964223d063488e3b7673de6f55ed5cb69b926c709c07e484a20977bb4126405e66617135d055f03d0e26a9cd2750e9faed700b3ef0c91ee4369e7d6ffcd56774b8b2a54e84abba4f4a4e5889ab9a217dc062088c1dd2157b0d1040a7", 0x99}, {&(0x7f0000001300)="14d5276b5145bd93c5d4b4887da167331e0e1cbff56c6f2ceda0a3d80571809ecbb8422d5e624e13a84047f3a39764d890fba558596f589de39021506633209371c8d41b39baf5d9702ae36ebd23185b3a04e0913e9c6e78f539fbce147abacf244acbd0a135a24b6802ff2df8f1bd733584113ac8126768300d1d3296d1da4ce7329c6a7a22dff6f66389d5b3c94ef975e4323d24126a4c6029057c209101b46fdf6e8a6156137709256cbd98233259495c80512edc5a6ee33d3f28b0ba38d303f370eb8499", 0xc6}, {&(0x7f0000001400)="4e3b601f58c175f0433dd5785ccad7ed5a0180382d5ef3b4b9482f2d15ba4dc65bdd94acdfdfaf99e82eec73ad2a46b26784870ce5741bce79a370ea0deb270e81369e344dc2898db0221effa5b6170cca01cebbcb4bb0005fa8b7e545e2a13bac039ef6b349c96f85fd5478931d4ac14822b8b5c25ad214d6a1f0409a9c104f4addf114824788bcb79afbdd6bc67a490138a6856018afb69952421455758c604b52ae213f880daa3a5e872f98f95d6aa58278c65c6822f88038582f25a480947c96dc3779bcd756242d9339a28c37b97fbec661bc953ce21b2f76499a9ec09742a545c8e4e508", 0xe7}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="6a0ffcd1dbc379a68d6407eb7fd456a0800cdf27ef23e721e5e09d0e5059bb65a357b56e8b1e3e275738fb9c223661e0353b4c0ffe7196271591bc556eb2f1ff3fd063ca84e9f2ee05593693fba2d13b0ddf42063459fe2ff4881b98f12ce44c009136805b233ab41874221eaa82600e7272bf2d652f3706db7743fa8287c85ab5cb2dc6c345bd67e2fb5ae34d38392c075286315d540589b45f04cb38a334fdc854925f5a14e8a8b56f18d9645327d0d1dd099ae43344", 0xb7}, {&(0x7f00000025c0)="cdfd57b970e702684a197e7521070a20e806a8539e4aaf17add635bf1db3652a97e5bf82b4f7900c2b772a3cb1e2dd674947f1fc2ab0322b63ddfd228c58e1cc153a9f4b5886d70b52f0a9e329b3422770", 0x51}, {&(0x7f0000002640)="ce1b5098632004666928d10cc994fa99deb41fc7db688d22abe270237ff5bbed43dc682edfae44a314b1dabfb45405bcefb209d3d47b4755f87a6a40345124137ec4250bbd02ba15f2d982231009e76cec66716f26aa99c36b4fa4b1f378", 0x5e}], 0x8, &(0x7f0000002740)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7f6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffff000}}], 0x30}, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r11, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) r12 = socket(0x2, 0x80805, 0x0) accept$nfc_llcp(r12, &(0x7f00000027c0), &(0x7f0000002840)=0x60) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) 102.761341ms ago: executing program 4 (id=4305): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r2}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r4}, 0x10) close(r3) r5 = socket$netlink(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r6], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x437, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x4000) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="6400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000088520300440012800b000100697036746e6c00003400028014000300fc00000000000000000000000000000008000100", @ANYRES32, @ANYBLOB="14000200fe0000bb"], 0x64}}, 0x4000080) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, 'P'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)={0x14, r9, 0x401, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='cachefiles_read\x00', r8, 0x0, 0x3}, 0x18) 283.129µs ago: executing program 3 (id=4306): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000400)=ANY=[@ANYRESOCT], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002a80)=ANY=[@ANYBLOB="4c0000002300010000000000fcdbdf253c00f2800f0018007d3a2e9c5bc85c23277d000014000200ff0100000000000000000000000000011000cc800c000400e2000000004000000400e900"], 0x4c}], 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r8 = socket(0x15, 0x5, 0x0) accept4$alg(r8, 0x0, 0x0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r6}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r9}, 0x18) r13 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r13, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f000001b640)={{r1}, 0x0, 0x1e, @inherit={0x58, &(0x7f00000004c0)={0x0, 0x2, 0x7, 0xb31, {0x30, 0x2c5a, 0x1, 0x6, 0x3}, [0x0, 0x4]}}, @name="028e0edea83226e0766db889c458572a422be5d145f35949c6827fc1ecb6343d9c1230c6ed00e14207f159ac056130a748d6cbd406fa7ab1ef6b30a24b0e586cc73d5e38db614479323884d0fd6f8a76e0b4cab31635630255ff60d63862ece824dc9c3ec4715510c9494ee4fb7bc95f4251af8c0e0326e5573fc49be2a90de641932b32befd42f1ac444f6f24ef73eaa4ff2763fddcc803d9882297d7efc8d1ca8e26f1a4a2410dddc204d9e3ef074dc913cc9db3efb29405352b1f7c6cb3bacdae9864d0492d0ec589539e25fe9053c6eb56a9d34f68eff722a6cb22b01393c992e848ca761d150588aefc8d2dc1d3309afea531bb8c5b0baf7d947e0b587f3eb00fc37ba5bb937e3ddffef4eda71417fd52f0eed904d0093952526b2b70116bc38f3d15cd4e02ee39e99382915ba8e603082ac92dea043b7b364a8ec4a7072958ca14a08594bf982935520f2cf9b5e2001768d9b1d24915ac623795c62db6fe9b0e2e39dceeee41980ac0181db93148ff22a4b91e785f84672c8410be7644975f6f4845393a1cc4efc7870b5bd499c6356e7d35d7fdc811a80f8607082a78eed2cc84b07644f3474182ed12734ca8e3c7cc62c20c22aea7c064c676a6aff4f5a9d51aea565703914659d2b235cf3a905250a168637bb1a61dc790058df785e4c5e708543410e7858d6e6b12cf7d25249002ccde9117b3dabed9847fa503b67e0e9adc8977b085bfa5326fc1ea30c6208714bf313c795b85445bd422c966e15598a400fa1c207868edf656a4c8be31384ee3bfeba49523a6308675bc590ab01b90e22ee4d1be0e752522dc4dd251c6e9146cd65945dd6774c36a601fb307fc43f0dfbf9a009249b7cd352790ecf06fe2e36d54219326b471c159f7764c5a564379c50fa49a607f50dd1431e64165bf1a63347542bfea2a87f491129663c79cd6256e49de79502f0096790df5927f0a2cb886e2ba147999f2a718ba50fe5c70857f0590d3171debf8f6a560414006f146a535e31e113caf4255e13c7cc01c11cebb850f9eab5528f5f58ceb7f78779b840c28e5e51d37ea6fa825455bdba047b44a81a76f209ef476de97bc7387f2ccc94aab4dcb3b0bb5baebc5afdc75a5fe75b9ebe5095e4b3ee5d8e281d3b31c2dccab41784f630c189a0eb91806b85c88c32096ad3508ba9aab552c13a27d2d3a4a1a3613e9702dcabef3baa1e8a5529077f9d8e77b14d85ca553c25f4ec6c81ffa96e1cd999fd19b820920a05200fd5b3272218222709515ee5a54dc89d2f541594ca48f3d8f9f9bfb8628a2f58e488f17e578d5fbd77f8354bc46a13f8f19a99dee8d48fbb1c266db63ce0ed322497da63be6bfbfa903bb32fd6730d80930a570a723beae4b77a153247ab51eb8849e51b5ed7a1c592d009e0added97515ae2473d38bae69c7467d1057c94f4aaf1656e5191d95c29107f2cf29537b9a783830e80ad43b492ce46b5daa50e63237be8759e6595a4233e9cfc14be78e4abaf3551c55a5449850ff15bac68e80ecb3901f2b4b496ac604a92a6097acce883de8018c6ed753f4dbc945985daacb9a533ab48e5f6c08b9af6ec70f0637b8c186b72178cb90924f46f5da10028e428b4a71db79e96dbeaba173989795fc569113235a916310c27b7933c4674d01036938211d23b7a8861fc9d15c11d637575475532a483bcd11ad93ff346bf1d6555468c5c9a7cae28488efa7934118b5efac3922b60138f0852e65e747c8cf5de7d335f741e36b7c8590fcbc77f685561f784779e01852b303a0783b4f5301d73515eee3107b587163437cc75fd4a12712673b51e1ef4334cedd6c3032644ade536151809021411815bd17ec63c5a3ae64e6914c18dab8283a6e0d281f2de503a3800bd7df0d6d4f9ff9fad05e7e898e8618666be0e1b9a99b3e44bba3acb4fd5a788cb92cb9a6d5d96de423373f0414e33ac72fcf5f433c1fc9650b1d7359f3ff03117e02c0372c2686f3355368481fc9845e274c9f816e63ff7d2b2484392667dc699f55640c46715e1523f917288728e63cdcd2b094f64f98ec65c097bbe4b1ac7d8cd2b7c6a38e5f336e447081e6b2c1e6586f37b4a47c7192a7d8254b2dd5ef71fc59e8296b178e8fb4cced1687eb17275b9c0c3c5f557f9aac64ea80a4bef3f138e847a5a2608b98ad8703cd25c036a088b2095fe82c8f69da7d9cb58e59470f05b5905b4f3f6f191f5008e7485ee66ba88b126d3c0cdd273d1ebb710599fd30765777b269fdcd3e1708bcfcbe78c93e304bb2991bb9573067e0b637c8c9252ebd50f9ff4f6c3c46377accf03087c2b0cda1278de21ef6425f70d18ffa571af94e79b5b8ad7e53b334cc595ad84eba06668a68657bc4777618e019f6c90c7d146d5297d8ec346898a78bbc20f7aea5b46b2bb44b604b4d276abc56c1f4118c10e16b221c9dbfff07a364c6cf64a64863aef59e5868f2d5550d7e570ed4720d33c1d2589573401de53b3f6e2191cee902dc9dbcf8ebd690c2441c09ee29e11338348f53b4b26f1f50e6ce3b11e80934471b711404c750047add0978ea227a38fc7a307cfbd4611c270d1b9642953a9269c516fe80d06d954650e82f56df2b94edbd9bf68ef2ccf9899f23a411807dd167209eaa3ac61a66088d7a1a9431c467ac5ebba4240c5f261e904c91dd5a30047710ac943ece2cd86c78abb59b53a1e95340fee24f939f36d2b625248ff4e0e857121931ede31b8b7bc262a15d0e684a81e573f7b7f575bf57d48779a87ce162e8f54f0c31742a79243c4440b98b603b5ed114d29a14ce2f605e99c06ba53ed8abe040be5e3c5714fa1526bebabe77b7b6766f3cca8eeff60ab875b676c858c024805163c6f962cd4909bf6894996e28886840aa036a49ebb4cb6b449117002df00af51449f45b5b75117e7a2fd39486b119d347c783268362bf4d9b6face460916ba1f511784603b40f2256b41884bc8eb3ad4059a86efd5a034dfea741e642f089b9c855d46267a5ee89b458c0747f1a5f68345cab41a3138f914730546874f05e580b8c408bb9009c2cf21036913f1a3ca0f7d36e2d35e7cc81930dfa4a1d81de536c2e4c70b663f161962a29e2116eae99db9bdbb059a2848f6f6fd5d7968acd980d03615cb627488acf327192102039ef4e5bada070b09f094471315e1108f008a2b4a90b108ed13019bab2b0281725a5f95bdc800a59b66e8196f9688e2e40ded4b88ef6660efad26c8f73457d3d87183a500b620b64d4c5e060433f2283a42c8c0a4ea7615661123d48a2a3210f5b3d01b1f9e3530ee9e83deed61bf835b6b83ba0ba587b80d1064c7fd1aa282263c4376861963b4ef37d53f872f197892c70963c20392131761d3c1898551e877fdd6e7ac4f3c34e64299b9c51f4bb9a9b737cfbacafcc802cf87b69ba8d64ef30cb43dffd6cb2b62c226f974ac90af4212b31c841036396dfebe862298f37cb1dd4e25efb35fa5597957316a7fb5931fd58c491a641b8d71c9f1391344d73f54671bc1952977b4663da681962761920ccde1e0c78761cf96c549498231aa161f7e2484643dfedd6a405b00e9bab174a306793ec77580bdcbc67cb9fff43fa63a23886da3e3e5e3a96647ad970e62e627c8359ae7a748647b9157f7bc07e9e03a876b690d87e17cfe0218dd2778b5f1150199b4e191eed6825a8a2fc669dd26e94f372ba80a06333f6977d14d891dea873c79b30db2edf450e6c01fd669b79ffc9c67400761bedfcaccaae5328b645297c942762d61068e4ccee496f20d8b5d56dd34af01220028bcdb858185e1b2ed08125dcbc260110b1e882e6782c0757bea16184ea373e5d76d4de932a487c8fb184e62ac6c152ebe8ef4bee439b2715b8aa31b56fe35965486853df7809a94dc24d41fe0c951ba8176355fa9ebaa18045d1b4a18c39ae6dd97aff528ee230ac8fb5640084b70a43df383a3fd9f0ad09c5d40c037facc0fa905c1bd7a16795dec80baf4bf836f455a6c55596ec7b81166851cadef75efb3515410d96b0c9e1779e0c5b3b6fabf8fcf8f009ec4092af9284b7497567de237893c6b73fac64e4bc234d79abf1a0f6bf5e066326f06a45df55b0be179692e693a41aeecc552c892f2e2c55d0b2b7e7625f1eda13510649c5a0668e562156291f42dd0acd1f8b290e6c8d998405589db0e3821a3839c2863d82a4c88e4e526140043f4c7b5979b380842f47ada513587fd38400f72b8f6703ff8ee360efba849140027ae8404856b1a12c172d520fafd98240d3cd8a057e887e9d9121fb6957d1c449d2fd4567b595b171038cf28fad354db563518c1e19fbca54a7b2fbcab16fdb74bb50e7d549eef72e98ada9c16598173f7fbd0bfedb8b1539c7c8ae9fa23ac9812d6f096284b1d3367fc7577d6be49169e5a5b9db6b437f7054917f4f89cfa0feb01877ebb9e9d2ec5b35eccfe9f0350b92473ef05f585e5bd443ea300f3145c2713c97e698b84be90a5c920b292e4cc99a5a8cc3ca9cd7a4e2e6b930cfb752809cbc8adc555b15c9f1cc6f30338144fb7ff733bd6d87a350004404a5bbc1b78b0f3f00db912eb15a3ff9696d21a64e604149d1f4f3b35a4aa34813c101552cae22641fe1d4908093a65636f023796e3e5bea0928fe2c2f7467174f82122ba74a98fc2b95245f19947a5d57fc8a19ca57204b194ccf743722f5edb420ed141a1c488da9f89dcb70a07f6e745ea69a4f2762fefc0efaf29928d3f8810326adf07b0ee7c6a53cadd86737c45dca47b9ae2f7bbc29aae2da8397e7fc0105eb456f90cc6487ea87faf8d380e95889835907eb2e9a0924f57fbddeefcad2adca7a5c50d333aec4cf17640da7cc7ade95a5f69b696db818fcf10a06c801bb9d404e7f5a504b246e4b58a922d04282a22dc8a75c6ced5f2a7eea126f3f699a82b8d757fc2b1c6c286980c52d0c01f50b6519c81aa20f9956aaf6ef6f71c69c4000d5b13d3c96666b1411dfa02b56000b33606406b1836a69b784f70ee9c7ac501f764668fb7b7522276ab9b8f86c7fed4305bdc172d2bea1d2b6f3d222b8afb94c8e4916c289b4dcdd43937ec0ab011c90c0982b03741d10fc8d5a64016f2908fff69cca0fa34742b09c2eb056360830dca8eed44888ed452dbb4b6999233da5ac1c03711cc123df40a45b9714da8bae3b28fac2f2487291e6424fa0967ca409e96eddc33c067f5313fc9e568c998c3845e1b9dc0def228a5fe4512bc6466c2d195f27140a62c04ccac03789de1f8f1771e1b854f01a269fb1cac8fdc45f920c71ceb76764e4d9091441d67d951c398482edd2ea336a0cbb70c7ec9960e642043caadc495739e6320ee6eff9cc13d1c57e5d9f4b97c95a30f7fbb6b296d486dfb285f100b34c5fcfb4cd4ef8db4907dfd15461b6603f28d2b9dacaba0d0d123bbefa80ccf083ae5fd0840123db8c25d16f9afe8a50a47ea880379e36c6e46c1261cd6eca8f2365e1a17d20f0ca386f4c825e24e8b418cc356ed01085c7a5c81a5c83f387d0642e1194374fb5c6e12fb7bf666323cc361de34387c74184d8fb78b2554543509c41106d56e2cf1f1adb4aa4288630c228056a45ad25724f0daca2d6465cb8b3d4846f38284b88e02400a3e6b78ea2d0241db3175e681f75ef156a6cd17274c98804ae8abaae49d72cd9256579a9e5f16e19ce78c220c63867c9f3feef3eb62"}) 0s ago: executing program 0 (id=4307): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x18, &(0x7f0000000480)=0xc, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000002780)=ANY=[], 0xfb5) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYRESHEX=r5, @ANYRES64=r2], 0x44}, 0x1, 0x0, 0x0, 0x4004881}, 0x2400c084) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000140)=0x14) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) kernel console output (not intermixed with test programs): rsing attributes in process `syz.0.2748'. [ 333.953451][T16088] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 333.976438][T16088] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 333.993471][T16088] gretap3: entered promiscuous mode [ 334.007783][T16088] gretap3: entered allmulticast mode [ 334.051405][T16101] : renamed from bridge_slave_0 (while UP) [ 334.127554][T16106] bridge_slave_0: invalid flags given to default FDB implementation [ 334.442500][T16132] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2762'. [ 334.679016][T16136] batadv1: left allmulticast mode [ 334.687983][T16136] batadv1: left promiscuous mode [ 334.693202][T16136] bridge0: port 3(batadv1) entered disabled state [ 334.714860][T16136] bridge_slave_1: left allmulticast mode [ 334.720566][T16136] bridge_slave_1: left promiscuous mode [ 334.734541][T16136] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.750613][T16136] bridge_slave_0: left allmulticast mode [ 334.756757][T16136] bridge_slave_0: left promiscuous mode [ 334.780070][T16136] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.791269][T16145] xt_l2tp: invalid flags combination: 8 [ 335.039016][T16157] sctp: [Deprecated]: syz.3.2767 (pid 16157) Use of int in maxseg socket option. [ 335.039016][T16157] Use struct sctp_assoc_value instead [ 335.368909][T16183] netlink: 'syz.1.2777': attribute type 30 has an invalid length. [ 335.388588][T16180] tipc: Enabled bearer , priority 0 [ 335.466290][T16180] syzkaller0: entered promiscuous mode [ 335.472171][T16180] syzkaller0: entered allmulticast mode [ 335.556272][T16180] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 335.615221][T16190] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 335.673671][T16180] tipc: Resetting bearer [ 335.788648][T16177] tipc: Resetting bearer [ 335.845025][T16177] tipc: Disabling bearer [ 336.079177][T16232] netlink: 'syz.3.2787': attribute type 10 has an invalid length. [ 336.108278][T16232] __nla_validate_parse: 4 callbacks suppressed [ 336.108295][T16232] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2787'. [ 336.137211][T16236] x_tables: unsorted entry at hook 1 [ 336.172686][T16240] netlink: ct family unspecified [ 336.183010][T16240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.214637][T16232] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 336.425729][T16254] ipt_ECN: cannot use operation on non-tcp rule [ 336.438278][T16248] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 336.447033][T16254] netlink: 'syz.0.2793': attribute type 10 has an invalid length. [ 336.464900][T16257] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 336.469996][T16254] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2793'. [ 336.472886][T16257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.484624][T16248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.748993][T16281] bridge0: Device is already in use. [ 336.759206][T16277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2800'. [ 336.948795][T16287] can: request_module (can-proto-4) failed. [ 336.949566][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2804'. [ 336.966457][T16288] netlink: 'syz.1.2804': attribute type 14 has an invalid length. [ 336.975544][T16288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2804'. [ 336.985748][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2804'. [ 336.994678][T16296] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.2807'. [ 336.994707][T16296] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 337.015964][T16288] netlink: 'syz.1.2804': attribute type 14 has an invalid length. [ 337.023908][T16288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2804'. [ 337.191874][T16306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2812'. [ 337.442076][T16323] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 337.472942][T16333] veth0: entered promiscuous mode [ 337.539655][T16331] tipc: Enabled bearer , priority 0 [ 337.563389][T16331] syzkaller0: entered promiscuous mode [ 337.569518][T16331] syzkaller0: entered allmulticast mode [ 337.588804][T16336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2821'. [ 337.589897][T16331] tipc: Resetting bearer [ 337.648689][T16329] tipc: Resetting bearer [ 337.669445][T16342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 337.676725][T16342] IPv6: NLM_F_CREATE should be set when creating new route [ 337.684031][T16342] IPv6: NLM_F_CREATE should be set when creating new route [ 337.691238][T16342] IPv6: NLM_F_CREATE should be set when creating new route [ 337.699591][T16344] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 337.715987][T16329] tipc: Disabling bearer [ 337.891760][T16354] macsec0: entered promiscuous mode [ 337.891840][T16352] netlink: 'syz.1.2825': attribute type 10 has an invalid length. [ 337.897281][T16354] bridge0: entered promiscuous mode [ 337.897534][T16354] macsec0: entered allmulticast mode [ 337.897548][T16354] bridge0: entered allmulticast mode [ 337.925850][T16354] bridge0: left allmulticast mode [ 337.931062][T16354] bridge0: left promiscuous mode [ 337.979084][T16359] netlink: 'syz.1.2825': attribute type 10 has an invalid length. [ 337.987364][T16352] team0: Port device dummy0 added [ 338.000062][T16359] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 338.023639][T16359] team0: Failed to send options change via netlink (err -105) [ 338.051049][T16359] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 338.062780][T16359] team0: Port device dummy0 removed [ 338.074870][T16359] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 338.232519][T16327] veth0: left promiscuous mode [ 338.360123][T16378] netlink: 'syz.0.2834': attribute type 1 has an invalid length. [ 338.383342][T16379] syzkaller0: entered promiscuous mode [ 338.398268][T16379] syzkaller0: entered allmulticast mode [ 338.508077][T16387] netlink: 'syz.0.2837': attribute type 1 has an invalid length. [ 338.547901][T16391] netlink: 'syz.2.2839': attribute type 12 has an invalid length. [ 338.556204][T16390] netlink: 'syz.2.2839': attribute type 12 has an invalid length. [ 338.872074][T16411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.915800][T16413] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 339.391111][T16477] netlink: 'syz.0.2852': attribute type 32 has an invalid length. [ 339.421199][T16483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.474756][T16483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.520014][T16483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.561822][T16483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.149304][T16582] IPv6: NLM_F_CREATE should be specified when creating new route [ 340.231903][T16589] vlan0: entered allmulticast mode [ 340.244464][T16589] geneve1: entered allmulticast mode [ 340.758536][T16614] tipc: Enabled bearer , priority 0 [ 340.779662][T16614] syzkaller0: entered promiscuous mode [ 340.797343][T16614] syzkaller0: entered allmulticast mode [ 340.859339][T16628] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 341.006402][T16634] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 341.363918][T16612] tipc: Resetting bearer [ 341.407001][T16612] tipc: Disabling bearer [ 341.473273][T16654] netlink: 'syz.0.2881': attribute type 2 has an invalid length. [ 341.491791][T16648] __nla_validate_parse: 17 callbacks suppressed [ 341.491809][T16648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2879'. [ 341.494982][T16654] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2881'. [ 341.516722][T16639] syz.3.2872 (16639) used greatest stack depth: 17832 bytes left [ 341.526412][T16657] netlink: 'syz.1.2877': attribute type 1 has an invalid length. [ 341.571939][T16636] syz.3.2872 (16636) used greatest stack depth: 17096 bytes left [ 341.688846][T16665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2882'. [ 341.816609][T16671] macsec0: entered promiscuous mode [ 341.822088][T16671] macsec0: entered allmulticast mode [ 341.823091][T16670] netlink: 'syz.1.2886': attribute type 10 has an invalid length. [ 342.017198][T16679] netlink: 'syz.0.2888': attribute type 1 has an invalid length. [ 342.066336][T16679] 8021q: adding VLAN 0 to HW filter on device bond9 [ 342.159529][T16679] bond9: (slave geneve2): making interface the new active one [ 342.215599][T16679] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 342.276951][T16697] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2892'. [ 342.356577][T16694] bond9: Removing last ns target with arp_interval on [ 342.539754][T16711] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2895'. [ 342.574362][T16715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2896'. [ 342.688577][T16719] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 343.097121][T16752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2908'. [ 343.126945][T16752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2908'. [ 343.199859][T16764] netlink: 'syz.2.2909': attribute type 21 has an invalid length. [ 343.385391][T16764] bond10: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 343.399538][T16764] bond10 (unregistering): Released all slaves [ 343.448613][T16772] netlink: 'syz.4.2910': attribute type 10 has an invalid length. [ 343.457546][T16772] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2910'. [ 343.468151][T16772] dummy0: entered promiscuous mode [ 343.477098][T16772] bridge0: port 2(dummy0) entered blocking state [ 343.483646][T16772] bridge0: port 2(dummy0) entered disabled state [ 343.491842][T16772] dummy0: entered allmulticast mode [ 343.789142][T16794] netlink: 'syz.3.2916': attribute type 10 has an invalid length. [ 343.813808][T16794] bond1: (slave C): Releasing backup interface [ 343.823595][T16794] bond1: (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 343.843202][T16794] net_ratelimit: 2 callbacks suppressed [ 343.843219][T16794] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 343.907891][T16800] netlink: 'syz.2.2918': attribute type 1 has an invalid length. [ 344.036616][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2921'. [ 344.108723][T16814] netlink: 'syz.0.2922': attribute type 6 has an invalid length. [ 344.119325][T16814] netlink: 'syz.0.2922': attribute type 5 has an invalid length. [ 344.659239][T16838] tipc: Enabled bearer , priority 0 [ 344.681325][T16838] syzkaller0: entered promiscuous mode [ 344.697221][T16838] syzkaller0: entered allmulticast mode [ 344.755622][T16838] tipc: Resetting bearer [ 344.820979][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.837047][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.847023][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.856162][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.863898][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.908414][T16835] tipc: Resetting bearer [ 344.918320][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.927256][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.935543][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.945238][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.983667][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.999429][T16835] tipc: Disabling bearer [ 345.119018][T16861] sctp: [Deprecated]: syz.2.2935 (pid 16861) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.119018][T16861] Use struct sctp_sack_info instead [ 345.216705][T16861] sctp: [Deprecated]: syz.2.2935 (pid 16861) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.216705][T16861] Use struct sctp_sack_info instead [ 345.467562][T16890] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 345.520169][T16890] netlink: 'syz.2.2939': attribute type 1 has an invalid length. [ 345.707810][T16844] chnl_net:caif_netlink_parms(): no params data found [ 345.771653][T16919] netlink: 'syz.1.2946': attribute type 13 has an invalid length. [ 345.803516][T16919] netlink: 'syz.1.2946': attribute type 17 has an invalid length. [ 345.863143][T16919] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 346.007833][T16934] bond0: entered promiscuous mode [ 346.012907][T16934] bond_slave_0: entered promiscuous mode [ 346.024913][T16934] bond_slave_1: entered promiscuous mode [ 346.030799][T16934] bridge0: entered promiscuous mode [ 346.041863][T16934] bridge_slave_1: entered promiscuous mode [ 346.048663][T16934] bond0: entered allmulticast mode [ 346.053902][T16934] bond_slave_0: entered allmulticast mode [ 346.063287][T16945] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 346.113337][T16934] bond_slave_1: entered allmulticast mode [ 346.138820][T16934] bridge0: entered allmulticast mode [ 346.147973][T16934] bridge_slave_1: entered allmulticast mode [ 346.156269][T16934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.207352][T16844] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.216288][T16844] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.223631][T16844] bridge_slave_0: entered allmulticast mode [ 346.231971][T16844] bridge_slave_0: entered promiscuous mode [ 346.242618][T16844] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.265264][T16844] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.293177][T16844] bridge_slave_1: entered allmulticast mode [ 346.303618][T16844] bridge_slave_1: entered promiscuous mode [ 346.336560][T16962] netlink: 'syz.0.2957': attribute type 10 has an invalid length. [ 346.428907][T16844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.465214][T16844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.531876][T16844] team0: Port device team_slave_0 added [ 346.542505][T16844] team0: Port device team_slave_1 added [ 346.607232][T16977] __nla_validate_parse: 14 callbacks suppressed [ 346.607249][T16977] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2962'. [ 346.629454][T16844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.643333][T16844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.669899][T16844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.699864][T16844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.714553][T16844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.741682][T16844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.753206][T16981] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2964'. [ 346.778741][T16981] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 346.882197][T16985] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2966'. [ 346.894656][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2967'. [ 346.967330][T16844] hsr_slave_0: entered promiscuous mode [ 346.977964][T16844] hsr_slave_1: entered promiscuous mode [ 346.986139][T16844] debugfs: 'hsr0' already exists in 'hsr' [ 346.991909][T16844] Cannot create hsr debugfs directory [ 347.074361][ T52] Bluetooth: hci1: command tx timeout [ 347.173477][T16999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2967'. [ 347.197955][T17005] º: renamed from veth1_vlan [ 347.243703][T17003] bond6: option mode: unable to set because the bond device has slaves [ 347.291158][T17003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2970'. [ 347.312814][T17003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2970'. [ 347.391008][T17011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2972'. [ 347.531841][T16844] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.553326][T16844] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.582855][T17010] tipc: Enabling of bearer rejected, failed to enable media [ 347.670424][T16844] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.697166][T16844] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.000307][T16844] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.019308][T16844] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.099282][T16844] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.126767][T16844] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.150344][T17057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2983'. [ 348.159602][T17057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2983'. [ 348.403967][T17072] tipc: Enabled bearer , priority 0 [ 348.481682][T17073] tipc: Disabling bearer [ 348.538010][T16844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 348.561783][T16844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 348.615948][T16844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 348.677422][T16844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 348.864149][T17113] netlink: 'syz.0.2997': attribute type 14 has an invalid length. [ 348.999642][T17128] xt_CT: You must specify a L4 protocol and not use inversions on it [ 349.052475][T16844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.101124][T16844] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.155275][ T52] Bluetooth: hci1: command tx timeout [ 349.183104][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.190327][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.212672][ T6490] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.219906][ T6490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.266580][T17146] netlink: 'syz.0.3005': attribute type 1 has an invalid length. [ 349.278416][T17144] netlink: 'syz.2.3006': attribute type 1 has an invalid length. [ 349.403396][T17153] bond13: (slave bridge8): making interface the new active one [ 349.412732][T17160] netlink: 'syz.4.3007': attribute type 1 has an invalid length. [ 349.423358][T17153] bond13: (slave bridge8): Enslaving as an active interface with an up link [ 349.532368][T17156] netlink: 'syz.4.3007': attribute type 6 has an invalid length. [ 349.564438][T17156] netlink: 'syz.4.3007': attribute type 5 has an invalid length. [ 349.585713][T17156] nbd: couldn't find a device at index 4 [ 349.751209][T17178] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 349.806061][ T95] block nbd5: Possible stuck request ffff88802532e000: control (read@0,1024B). Runtime 60 seconds [ 349.817270][ T95] block nbd5: Possible stuck request ffff88802532e1c0: control (read@1024,1024B). Runtime 60 seconds [ 349.831515][ T95] block nbd5: Possible stuck request ffff88802532e380: control (read@2048,1024B). Runtime 60 seconds [ 349.842745][ T95] block nbd5: Possible stuck request ffff88802532e540: control (read@3072,1024B). Runtime 60 seconds [ 349.901544][T17184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.912792][T16844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.983723][T16844] veth0_vlan: entered promiscuous mode [ 350.007286][T16844] veth1_vlan: entered promiscuous mode [ 350.057326][T16844] veth0_macvtap: entered promiscuous mode [ 350.076217][T16844] veth1_macvtap: entered promiscuous mode [ 350.127377][T16844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.201829][T16844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.238904][T15086] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.248640][T15086] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.272531][T15086] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.328842][T15086] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.450329][T17209] batadv_slave_1: entered promiscuous mode [ 350.496512][T17209] batadv_slave_1: left promiscuous mode [ 350.541320][T17214] netlink: 'syz.2.3026': attribute type 1 has an invalid length. [ 350.555030][T15086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.562918][T15086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.607815][T17214] 8021q: adding VLAN 0 to HW filter on device bond14 [ 350.679321][T17217] bond14: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 350.706820][T15086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.715706][T15086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.774577][T17214] bond14: (slave ip6gretap1): making interface the new active one [ 350.782284][T17223] netlink: 'syz.0.3029': attribute type 10 has an invalid length. [ 350.788810][T17214] bond14: (slave ip6gretap1): Enslaving as an active interface with an up link [ 350.997571][T17233] tipc: Enabled bearer , priority 0 [ 351.021605][T17233] syzkaller0: entered promiscuous mode [ 351.029137][T17233] syzkaller0: entered allmulticast mode [ 351.073287][T17235] batadv_slave_0: entered promiscuous mode [ 351.108443][T17233] tipc: Resetting bearer [ 351.157383][T17229] tipc: Resetting bearer [ 351.214918][T17229] tipc: Disabling bearer [ 351.235934][ T52] Bluetooth: hci1: command tx timeout [ 351.323066][T17239] batadv_slave_0: left promiscuous mode [ 351.547116][T17252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.635451][T17255] __nla_validate_parse: 20 callbacks suppressed [ 351.635472][T17255] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3038'. [ 351.843821][T17262] sctp: [Deprecated]: syz.3.3040 (pid 17262) Use of int in max_burst socket option. [ 351.843821][T17262] Use struct sctp_assoc_value instead [ 351.860647][T17264] ipt_ECN: cannot use operation on non-tcp rule [ 351.870611][T15107] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.889501][T15107] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 351.949373][T17271] netlink: 'syz.0.3043': attribute type 16 has an invalid length. [ 351.957908][T17271] netlink: 'syz.0.3043': attribute type 17 has an invalid length. [ 351.984892][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 351.986234][T17273] bond0: (slave rose0): Enslaving as an active interface with an up link [ 352.011989][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 352.021387][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 352.030307][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 352.038262][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 352.080381][T17271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.094369][T17271] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.104935][T17271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.161353][T15107] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.184673][T15107] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 352.334811][T15107] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.346101][T17289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3047'. [ 352.367552][T17289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.380885][T15107] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 352.468358][T15107] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.497824][T17299] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3048'. [ 352.500925][T15107] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 352.542388][T17299] unsupported nlmsg_type 40 [ 352.610183][T17306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3050'. [ 352.631177][T17306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3050'. [ 352.870197][T17319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3054'. [ 352.983497][T17272] chnl_net:caif_netlink_parms(): no params data found [ 353.052263][T17328] xt_ecn: cannot match TCP bits for non-tcp packets [ 353.310796][T15107] bond14 (unregistering): (slave ip6gretap1): Releasing active interface [ 353.320469][ T5147] Bluetooth: hci1: command tx timeout [ 353.436496][T15107] bond1 (unregistering): (slave gretap1): Releasing active interface [ 353.466844][T15107] bond6 (unregistering): (slave geneve3): Releasing backup interface [ 353.845054][T15107] bond13 (unregistering): (slave bridge8): Releasing active interface [ 353.894990][T15107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.906475][T15107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.918630][T15107] bond0 (unregistering): Released all slaves [ 353.932394][T15107] bond1 (unregistering): Released all slaves [ 353.946119][T15107] bond2 (unregistering): Released all slaves [ 354.040195][T15107] bond3 (unregistering): Released all slaves [ 354.115058][ T5147] Bluetooth: hci2: command tx timeout [ 354.139134][T15107] bond4 (unregistering): Released all slaves [ 354.152286][T15107] bond5 (unregistering): Released all slaves [ 354.164725][T15107] bond6 (unregistering): Released all slaves [ 354.177645][T15107] bond7 (unregistering): Released all slaves [ 354.191432][T15107] bond8 (unregistering): Released all slaves [ 354.221694][T15107] bond9 (unregistering): Released all slaves [ 354.235675][T15107] bond10 (unregistering): Released all slaves [ 354.248929][T15107] bond11 (unregistering): Released all slaves [ 354.262635][T15107] bond12 (unregistering): Released all slaves [ 354.275975][T15107] bond13 (unregistering): Released all slaves [ 354.371615][T15107] bond14 (unregistering): Released all slaves [ 354.489176][T17351] x_tables: duplicate entry at hook 2 [ 354.496484][T17351] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3062'. [ 354.621740][T17358] netlink: 'syz.1.3063': attribute type 1 has an invalid length. [ 354.638987][T17358] netlink: 'syz.1.3063': attribute type 3 has an invalid length. [ 354.659881][T17358] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3063'. [ 354.679587][T15107] : left promiscuous mode [ 354.791132][T17367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3067'. [ 354.821521][T17272] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.839626][T17272] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.870510][T17272] bridge_slave_0: entered allmulticast mode [ 354.889800][T17272] bridge_slave_0: entered promiscuous mode [ 354.907520][T15107] tipc: Disabling bearer [ 354.935784][T15107] tipc: Left network mode [ 354.950604][T17272] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.967680][T17272] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.976906][T17272] bridge_slave_1: entered allmulticast mode [ 354.985397][T17272] bridge_slave_1: entered promiscuous mode [ 355.166612][T17272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.238552][T17272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.285072][T17393] nbd: couldn't find device at index 847872 [ 355.416530][T17272] team0: Port device team_slave_0 added [ 355.502707][T17272] team0: Port device team_slave_1 added [ 355.647021][T17409] syzkaller0: entered promiscuous mode [ 355.652541][T17409] syzkaller0: entered allmulticast mode [ 355.681286][T15107] veth0: left promiscuous mode [ 355.706049][T15107] batadv0: left promiscuous mode [ 355.732619][T15107] hsr_slave_0: left promiscuous mode [ 355.753751][T15107] hsr_slave_1: left promiscuous mode [ 355.760866][T15107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.769186][T15107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.782216][T15107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.792625][T15107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.814261][T15107] veth1_vlan: left promiscuous mode [ 355.893930][T15107] pimreg (unregistering): left allmulticast mode [ 356.194857][ T5147] Bluetooth: hci2: command tx timeout [ 356.209146][ T95] block nbd0: Possible stuck request ffff888025110000: control (read@0,1024B). Runtime 270 seconds [ 356.221234][ T95] block nbd0: Possible stuck request ffff8880251101c0: control (read@1024,1024B). Runtime 270 seconds [ 356.233494][ T95] block nbd0: Possible stuck request ffff888025110380: control (read@2048,1024B). Runtime 270 seconds [ 356.246475][ T95] block nbd0: Possible stuck request ffff888025110540: control (read@3072,1024B). Runtime 270 seconds [ 356.299663][T15107] batadv_slave_0 (unregistering): left allmulticast mode [ 356.333572][T15107] team0 (unregistering): Port device team_slave_1 removed [ 356.372695][T15107] team0 (unregistering): Port device team_slave_0 removed [ 356.739756][T17272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.747912][T17272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.781506][T17427] openvswitch: netlink: IP tunnel dst address not specified [ 356.781643][T17272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.803340][T17272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.844813][T17272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.900465][T17272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.999817][T17439] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3085'. [ 357.073372][T17439] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 357.087769][T17439] bond1 (unregistering): Released all slaves [ 357.189412][T17272] hsr_slave_0: entered promiscuous mode [ 357.208116][T17272] hsr_slave_1: entered promiscuous mode [ 357.498526][T17466] tap0: tun_chr_ioctl cmd 1074025677 [ 357.504685][T17466] tap0: linktype set to 771 [ 357.636082][T17476] sctp: [Deprecated]: syz.0.3095 (pid 17476) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.636082][T17476] Use struct sctp_sack_info instead [ 357.669087][T17475] sctp: [Deprecated]: syz.0.3095 (pid 17475) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.669087][T17475] Use struct sctp_sack_info instead [ 357.709389][T15107] IPVS: stop unused estimator thread 0... [ 357.837398][T17482] syzkaller1: entered promiscuous mode [ 357.853807][T17482] syzkaller1: entered allmulticast mode [ 357.863304][T17486] netlink: 'syz.4.3098': attribute type 1 has an invalid length. [ 357.886992][T17487] netlink: 'syz.0.3099': attribute type 83 has an invalid length. [ 357.904419][T17490] lo: entered allmulticast mode [ 357.928204][T17482] xt_policy: output policy not valid in PREROUTING and INPUT [ 358.249801][T17272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 358.263671][T17272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 358.274320][ T5147] Bluetooth: hci2: command tx timeout [ 358.286149][T17272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 358.302963][T17272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 358.432700][T17272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.458938][T17272] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.473377][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.480651][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.501351][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.508556][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.533611][T17525] bond0: Caught tx_queue_len zero misconfig [ 358.616154][T17521] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3107'. [ 358.981646][T17272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.005174][ T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf03 [ 359.061243][T17272] veth0_vlan: entered promiscuous mode [ 359.080840][T17272] veth1_vlan: entered promiscuous mode [ 359.108684][T17272] veth0_macvtap: entered promiscuous mode [ 359.117799][T17272] veth1_macvtap: entered promiscuous mode [ 359.136103][T17272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.153335][T17272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.169356][ T6491] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.180143][ T6491] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.191837][ T6491] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.200902][ T6491] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.345047][T17564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3115'. [ 359.811165][T17572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3118'. [ 359.834702][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.861606][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.904764][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.913399][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.951241][T17577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3120'. [ 359.974288][T17577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3120'. [ 360.355794][ T5147] Bluetooth: hci2: command tx timeout [ 360.429739][T17604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3127'. [ 360.451642][T17604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3127'. [ 360.461181][ T1040] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.476319][ T1040] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.507092][ T1040] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.544243][ T1040] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.699202][T17608] vxcan1: tx address claim with dest, not broadcast [ 360.812719][T17609] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 360.824356][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x9e [ 360.864661][T17608] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 360.882690][T17623] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3131'. [ 360.948557][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 360.965704][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.974247][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.988552][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 360.998757][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.082115][T17628] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3134'. [ 361.170814][T17628] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 361.230330][T17640] netlink: 'syz.2.3137': attribute type 12 has an invalid length. [ 361.996841][T17625] chnl_net:caif_netlink_parms(): no params data found [ 362.205321][T17684] __nla_validate_parse: 2 callbacks suppressed [ 362.205339][T17684] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3149'. [ 362.311408][T17625] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.321381][T17625] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.330026][T17625] bridge_slave_0: entered allmulticast mode [ 362.338808][T17625] bridge_slave_0: entered promiscuous mode [ 362.354455][T17625] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.366720][T17625] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.374501][T17625] bridge_slave_1: entered allmulticast mode [ 362.382258][T17625] bridge_slave_1: entered promiscuous mode [ 362.464321][T17625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.477486][T17692] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3151'. [ 362.490932][T17625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.613616][T17625] team0: Port device team_slave_0 added [ 362.625694][T17625] team0: Port device team_slave_1 added [ 362.680264][T17702] bridge0: port 1(batadv2) entered blocking state [ 362.687171][T17702] bridge0: port 1(batadv2) entered disabled state [ 362.693863][T17702] batadv2: entered allmulticast mode [ 362.701850][T17702] batadv2: entered promiscuous mode [ 362.711507][T17625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.719012][T17625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.739442][T17705] netlink: 'syz.4.3156': attribute type 5 has an invalid length. [ 362.765579][T17625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.783575][T17704] netlink: 'syz.4.3156': attribute type 5 has an invalid length. [ 362.806323][T17625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.813306][T17625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.862709][T17625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.915251][T17712] xt_TPROXY: Can be used only with -p tcp or -p udp [ 363.019186][T17625] hsr_slave_0: entered promiscuous mode [ 363.036146][T17625] hsr_slave_1: entered promiscuous mode [ 363.055299][T17625] debugfs: 'hsr0' already exists in 'hsr' [ 363.070417][T17625] Cannot create hsr debugfs directory [ 363.078710][ T52] Bluetooth: hci4: command tx timeout [ 363.176396][ T6491] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 363.185686][ T6491] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 363.236979][ T95] block nbd2: Possible stuck request ffff8880251e0000: control (read@0,1024B). Runtime 120 seconds [ 363.247888][ T95] block nbd2: Possible stuck request ffff8880251e01c0: control (read@1024,1024B). Runtime 120 seconds [ 363.260289][ T95] block nbd2: Possible stuck request ffff8880251e0380: control (read@2048,1024B). Runtime 120 seconds [ 363.272586][ T95] block nbd2: Possible stuck request ffff8880251e0540: control (read@3072,1024B). Runtime 120 seconds [ 363.291600][T17724] syzkaller0: entered promiscuous mode [ 363.304061][T17724] syzkaller0: entered allmulticast mode [ 363.312063][T17729] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3166'. [ 363.330321][T17729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3166'. [ 363.352963][T17729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3166'. [ 363.386599][T17743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3169'. [ 363.392796][T17724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.592809][T17625] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.622661][T17625] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.737950][T17625] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.772683][T17625] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.908877][T17767] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3175'. [ 363.935244][T17769] Cannot find add_set index 0 as target [ 363.971469][T17625] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.996032][T17625] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.116518][T17625] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.137506][T17625] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.155400][ T52] Bluetooth: hci4: command tx timeout [ 365.529575][T17786] tipc: Started in network mode [ 365.534995][T17786] tipc: Node identity 42e408d746a1, cluster identity 4711 [ 365.542267][T17786] tipc: Enabled bearer , priority 0 [ 365.559727][T17789] syzkaller0: entered promiscuous mode [ 365.565805][T17789] syzkaller0: entered allmulticast mode [ 365.573399][T17796] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 365.604972][T17798] tipc: Resetting bearer [ 365.750230][T17800] tipc: Resetting bearer [ 365.755552][T17811] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3189'. [ 365.784139][T17800] tipc: Disabling bearer [ 365.816389][T17804] syzkaller1: entered promiscuous mode [ 365.821911][T17804] syzkaller1: entered allmulticast mode [ 365.837101][T17811] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 365.946262][T17625] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 366.012210][T17625] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 366.060015][T17625] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 366.080640][T17625] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 366.088779][T17827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3192'. [ 366.146709][T17827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3192'. [ 366.168576][T17833] netlink: 'syz.3.3194': attribute type 1 has an invalid length. [ 366.439993][T17625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.485281][T17625] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.503902][T15107] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.511143][T15107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.531362][T15107] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.538632][T15107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.980000][T17625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.057171][T17902] netlink: 'syz.2.3211': attribute type 1 has an invalid length. [ 367.117693][T17904] xt_CT: You must specify a L4 protocol and not use inversions on it [ 367.128424][T17625] veth0_vlan: entered promiscuous mode [ 367.146082][T17625] veth1_vlan: entered promiscuous mode [ 367.161015][T17909] tipc: Enabled bearer , priority 10 [ 367.205757][T17625] veth0_macvtap: entered promiscuous mode [ 367.219188][T17625] veth1_macvtap: entered promiscuous mode [ 367.234389][ T52] Bluetooth: hci4: command tx timeout [ 367.248570][T17914] __nla_validate_parse: 29 callbacks suppressed [ 367.248588][T17914] netlink: 512 bytes leftover after parsing attributes in process `syz.2.3214'. [ 367.250423][T17625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.265627][T17914] openvswitch: netlink: IP tunnel dst address not specified [ 367.298030][T17625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.376399][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.391882][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.410397][T17918] netlink: 'syz.3.3216': attribute type 8 has an invalid length. [ 367.470243][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.485568][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.507835][T17922] netlink: 'syz.2.3218': attribute type 1 has an invalid length. [ 367.528226][T17922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3218'. [ 367.613352][T17928] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3221'. [ 367.641325][ T5925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.677806][ T5925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.731113][T17931] syzkaller0: entered promiscuous mode [ 367.737631][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.746977][T17931] syzkaller0: entered allmulticast mode [ 367.755011][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.935281][T17946] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.942565][T17946] IPv6: NLM_F_CREATE should be set when creating new route [ 367.949880][T17946] IPv6: NLM_F_CREATE should be set when creating new route [ 367.963055][T17946] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 368.149778][T17956] 8021q: VLANs not supported on tunl0 [ 368.284295][ T5946] tipc: Node number set to 71633111 [ 368.408297][T17968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3234'. [ 368.432550][T17968] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3234'. [ 368.454470][T17968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3234'. [ 368.580126][T17977] netlink: 'syz.2.3236': attribute type 2 has an invalid length. [ 368.588856][T17977] netlink: 'syz.2.3236': attribute type 1 has an invalid length. [ 368.678427][T17980] netlink: 'syz.2.3236': attribute type 1 has an invalid length. [ 368.787111][T17984] netlink: 'syz.3.3238': attribute type 2 has an invalid length. [ 368.930251][ T5147] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 368.939917][ T5147] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 368.948445][ T5147] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 368.961259][ T5147] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 368.972575][ T5147] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 369.001573][T17998] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3240'. [ 369.139918][T18002] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3244'. [ 369.262505][T18010] netlink: 'syz.2.3246': attribute type 1 has an invalid length. [ 369.270515][T18010] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3246'. [ 369.314415][T10215] Bluetooth: hci4: command tx timeout [ 369.327492][T18010] syzkaller0: entered promiscuous mode [ 369.333114][T18010] syzkaller0: entered allmulticast mode [ 369.350587][T18013] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3247'. [ 369.437289][T17990] chnl_net:caif_netlink_parms(): no params data found [ 369.574719][T17990] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.583388][T17990] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.590778][T17990] bridge_slave_0: entered allmulticast mode [ 369.600285][T17990] bridge_slave_0: entered promiscuous mode [ 369.609267][T17990] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.617309][T17990] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.624675][T17990] bridge_slave_1: entered allmulticast mode [ 369.632472][T17990] bridge_slave_1: entered promiscuous mode [ 369.688536][T17990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.702263][T17990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.829465][T18035] netlink: 'syz.3.3251': attribute type 1 has an invalid length. [ 369.927876][T17990] team0: Port device team_slave_0 added [ 369.934470][T18030] syzkaller0: entered promiscuous mode [ 369.941016][T18030] syzkaller0: entered allmulticast mode [ 369.949433][T18035] tipc: Started in network mode [ 369.956604][T18035] tipc: Node identity aeb1e0ebf4c1, cluster identity 4711 [ 369.969794][T18035] tipc: Enabled bearer , priority 0 [ 369.985547][T17990] team0: Port device team_slave_1 added [ 370.050453][T18027] tipc: Resetting bearer [ 370.081235][T18027] tipc: Disabling bearer [ 370.166347][T17990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.177785][T17990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.235788][T18050] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 370.238457][T17990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.257849][T17990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.266699][T17990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.295001][T17990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.304274][T18054] netlink: 'syz.0.3256': attribute type 7 has an invalid length. [ 370.315557][T18053] bridge0: port 3(vlan2) entered blocking state [ 370.322099][T18053] bridge0: port 3(vlan2) entered disabled state [ 370.335007][T18053] vlan2: entered allmulticast mode [ 370.341951][T18053] bridge0: entered allmulticast mode [ 370.361632][T18053] vlan2: left allmulticast mode [ 370.385355][T18053] bridge0: left allmulticast mode [ 370.557957][T17990] hsr_slave_0: entered promiscuous mode [ 370.575685][T17990] hsr_slave_1: entered promiscuous mode [ 370.582119][T17990] debugfs: 'hsr0' already exists in 'hsr' [ 370.588574][T17990] Cannot create hsr debugfs directory [ 370.759094][T18074] NCSI netlink: No device for ifindex 131092 [ 370.770008][T18076] NCSI netlink: No device for ifindex 131092 [ 370.979394][T17990] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.077245][T10215] Bluetooth: hci3: command tx timeout [ 371.107870][T17990] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.167883][T18089] xt_CT: No such helper "snmp_trap" [ 371.189644][T18101] tipc: Enabled bearer , priority 0 [ 371.227538][T17990] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.255851][T18101] syzkaller0: entered promiscuous mode [ 371.261764][T18101] syzkaller0: entered allmulticast mode [ 371.272587][T18101] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 371.407082][T17990] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.453324][T18101] tipc: Resetting bearer [ 371.498352][T18113] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 371.518415][T18113] bond1 (unregistering): Released all slaves [ 371.629581][T18122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.687227][T18101] tipc: Resetting bearer [ 371.767116][T18101] tipc: Disabling bearer [ 372.018944][T18144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.099541][T18154] vlan2: entered promiscuous mode [ 372.113415][T18154] bridge0: entered promiscuous mode [ 372.163207][T18160] netlink: 'syz.0.3289': attribute type 11 has an invalid length. [ 372.174917][T18160] netlink: 'syz.0.3289': attribute type 11 has an invalid length. [ 372.187290][T18144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.243895][T18157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 372.339612][T18144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.461942][T17990] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 372.551142][T18144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.556777][T18170] __nla_validate_parse: 17 callbacks suppressed [ 372.556793][T18170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3294'. [ 372.587332][T17990] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 372.622487][T17990] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 372.648906][T17990] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 372.762367][T18188] sit0: entered promiscuous mode [ 372.778820][T18188] validate_nla: 12 callbacks suppressed [ 372.778847][T18188] netlink: 'syz.0.3296': attribute type 1 has an invalid length. [ 372.793957][T18188] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3296'. [ 372.858688][T15107] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.902667][ T6491] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.947541][ T6491] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.013084][ T6491] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.132410][T17990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.154180][T10215] Bluetooth: hci3: command tx timeout [ 373.218191][T17990] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.256725][T15107] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.263912][T15107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.320296][T15107] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.327537][T15107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.389052][T18219] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3306'. [ 373.870575][T18242] netlink: 'syz.0.3311': attribute type 1 has an invalid length. [ 373.977992][T17990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.372871][T18275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3323'. [ 374.431319][T18282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3326'. [ 374.499042][T18275] 8021q: adding VLAN 0 to HW filter on device bond2 [ 374.568887][T18285] vlan2: entered allmulticast mode [ 374.574649][T18285] bond2: entered allmulticast mode [ 374.593163][T18296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3327'. [ 374.849266][T17990] veth0_vlan: entered promiscuous mode [ 374.850336][T18313] xt_connbytes: Forcing CT accounting to be enabled [ 374.883483][T17990] veth1_vlan: entered promiscuous mode [ 374.992767][T17990] veth0_macvtap: entered promiscuous mode [ 375.025693][T17990] veth1_macvtap: entered promiscuous mode [ 375.074793][T17990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.138330][T17990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.229838][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.239421][T10215] Bluetooth: hci3: command tx timeout [ 375.264435][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.297382][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.307940][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.394281][ C1] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96 [ 375.459659][ T6498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.468547][T18337] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3339'. [ 375.494371][ T6498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.651395][T18343] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3340'. [ 375.688262][T18337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.705681][T18337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.729809][T18337] bond0 (unregistering): Released all slaves [ 375.799696][T15107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.817220][T15107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.100412][T18357] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3343'. [ 376.586783][ T43] IPVS: starting estimator thread 0... [ 376.588386][T18375] IPVS: ip_vs_edit_dest(): server weight less than zero [ 376.706862][T18378] IPVS: using max 39 ests per chain, 93600 per kthread [ 376.712551][T18385] netlink: 'syz.4.3355': attribute type 1 has an invalid length. [ 376.722563][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 376.735847][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 376.745340][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 376.758817][T18385] netlink: 'syz.4.3355': attribute type 3 has an invalid length. [ 376.774963][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 376.784961][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 376.794256][T18385] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3355'. [ 377.091277][T18398] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 377.099004][T18398] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 377.319732][T10215] Bluetooth: hci3: command tx timeout [ 377.608052][T18384] chnl_net:caif_netlink_parms(): no params data found [ 377.815220][T18426] sctp: [Deprecated]: syz.3.3368 (pid 18426) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.815220][T18426] Use struct sctp_sack_info instead [ 377.836997][T18384] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.844488][T18384] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.851754][T18384] bridge_slave_0: entered allmulticast mode [ 377.861381][T18384] bridge_slave_0: entered promiscuous mode [ 377.871800][T18384] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.879527][T18384] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.886940][T18384] bridge_slave_1: entered allmulticast mode [ 377.895513][T18384] bridge_slave_1: entered promiscuous mode [ 377.959570][T18384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.990551][T18384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.073151][T18384] team0: Port device team_slave_0 added [ 378.095922][T18384] team0: Port device team_slave_1 added [ 378.221503][T18384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.240762][T18436] __nla_validate_parse: 1 callbacks suppressed [ 378.240783][T18436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3370'. [ 378.267181][T18384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.326936][T18384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.377855][T18384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.395799][T18384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.464207][T18384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.498239][T18446] vlan2: entered promiscuous mode [ 378.503941][T18446] vlan2: entered allmulticast mode [ 378.510000][T18446] hsr_slave_1: entered allmulticast mode [ 378.518741][T18441] syzkaller1: entered promiscuous mode [ 378.525851][T18441] syzkaller1: entered allmulticast mode [ 378.735840][T18384] hsr_slave_0: entered promiscuous mode [ 378.752901][T18384] hsr_slave_1: entered promiscuous mode [ 378.762831][T18384] debugfs: 'hsr0' already exists in 'hsr' [ 378.770912][T18384] Cannot create hsr debugfs directory [ 378.835014][T10215] Bluetooth: hci0: command tx timeout [ 378.846967][T18458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3377'. [ 379.103527][T18470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3382'. [ 379.252990][T18384] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.358307][T18384] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.500500][T18384] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.607747][T18384] bond0: (slave netdevsim0): Releasing backup interface [ 379.762908][T18497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3389'. [ 379.787505][T18497] tipc: Enabled bearer , priority 0 [ 379.821968][T18497] ip6tnl0: entered promiscuous mode [ 379.846433][T18497] ip6tnl0: entered allmulticast mode [ 379.879367][ T95] block nbd5: Possible stuck request ffff88802532e000: control (read@0,1024B). Runtime 90 seconds [ 379.888800][T18497] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 379.890092][ T95] block nbd5: Possible stuck request ffff88802532e1c0: control (read@1024,1024B). Runtime 90 seconds [ 379.908895][ T95] block nbd5: Possible stuck request ffff88802532e380: control (read@2048,1024B). Runtime 90 seconds [ 379.919878][ T95] block nbd5: Possible stuck request ffff88802532e540: control (read@3072,1024B). Runtime 90 seconds [ 379.999835][T18497] tipc: Resetting bearer [ 380.042058][T18496] tipc: Disabling bearer [ 380.306994][T18384] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 380.342191][T18384] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 380.370712][T18384] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 380.392300][T18384] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 380.438226][T18515] sctp: [Deprecated]: syz.2.3395 (pid 18515) Use of struct sctp_assoc_value in delayed_ack socket option. [ 380.438226][T18515] Use struct sctp_sack_info instead [ 380.466667][T18515] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3395'. [ 380.499767][T18522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3397'. [ 380.638991][T18527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3398'. [ 380.673923][T18384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.738158][T18384] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.763665][T18532] nbd: must specify a size in bytes for the device [ 380.767588][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.777390][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.797887][T18532] xt_l2tp: v2 tid > 0xffff: 1114244 [ 380.811995][T18538] Cannot find add_set index 0 as target [ 380.858758][ T1040] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.865996][ T1040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.930849][T10215] Bluetooth: hci0: command tx timeout [ 380.940780][T18384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 380.982776][T18540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3403'. [ 381.027483][ T5895] IPVS: starting estimator thread 0... [ 381.124868][T18546] IPVS: using max 32 ests per chain, 76800 per kthread [ 381.255382][T18555] erspan0: entered promiscuous mode [ 381.262486][T18555] erspan0: entered allmulticast mode [ 381.479740][T18384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.621881][T18384] veth0_vlan: entered promiscuous mode [ 381.652362][T18573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.662642][T18384] veth1_vlan: entered promiscuous mode [ 381.725411][T18575] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3415'. [ 381.758076][T18384] veth0_macvtap: entered promiscuous mode [ 381.805835][T18384] veth1_macvtap: entered promiscuous mode [ 381.870807][T18384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.927656][T18384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.974785][ T6498] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.001267][ T6498] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.074928][ T6498] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.098379][ T6498] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.235416][T18606] veth0: entered promiscuous mode [ 382.252166][T18606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3425'. [ 382.522028][ T6491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.538774][ T6491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.653298][ T6498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.669557][ T6498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.016838][T10215] Bluetooth: hci0: command tx timeout [ 383.045855][T18641] netlink: 'syz.0.3347': attribute type 21 has an invalid length. [ 383.057447][T18637] netlink: 'syz.3.3437': attribute type 1 has an invalid length. [ 383.132344][T18640] syzkaller0: entered promiscuous mode [ 383.169801][T18640] syzkaller0: entered allmulticast mode [ 383.199352][T18640] netlink: zone id is out of range [ 383.220556][T18646] tipc: Started in network mode [ 383.240592][T18646] tipc: Node identity 024ffcb5a643, cluster identity 4711 [ 383.248128][T18640] netlink: zone id is out of range [ 383.251243][T18649] netlink: 'syz.0.3440': attribute type 33 has an invalid length. [ 383.261691][T18640] netlink: zone id is out of range [ 383.268349][T18640] netlink: set zone limit has 8 unknown bytes [ 383.276087][T18646] tipc: Enabled bearer , priority 0 [ 383.286332][T18647] syzkaller0: entered promiscuous mode [ 383.295220][T18647] syzkaller0: entered allmulticast mode [ 383.360165][T18645] tipc: Resetting bearer [ 383.399558][T18645] tipc: Disabling bearer [ 383.449065][T18661] bridge_slave_0: left allmulticast mode [ 383.462147][T18661] bridge_slave_0: left promiscuous mode [ 383.477286][T18661] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.501020][T18661] bridge_slave_1: left allmulticast mode [ 383.517767][T18661] bridge_slave_1: left promiscuous mode [ 383.528078][T18661] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.547208][T18661] bond0: (slave bond_slave_0): Releasing backup interface [ 383.565929][T18661] bond0: (slave bond_slave_1): Releasing backup interface [ 383.589458][T18661] team0: Port device team_slave_0 removed [ 383.610781][T18661] team0: Port device team_slave_1 removed [ 383.617742][T18661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.629792][T18661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.639094][T18661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.647293][T18661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.657604][T18661] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 383.698044][T18666] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 384.021915][T18701] sctp: [Deprecated]: syz.4.3452 (pid 18701) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.021915][T18701] Use struct sctp_sack_info instead [ 384.141765][T18708] netlink: 'syz.2.3453': attribute type 1 has an invalid length. [ 384.199881][T18704] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.207642][T18704] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.273082][T18704] tipc: Resetting bearer [ 384.352401][T18676] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 384.353624][T18704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.403615][T18704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.472190][T18721] __nla_validate_parse: 3 callbacks suppressed [ 384.472207][T18721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3455'. [ 384.525121][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3455'. [ 384.529780][T18721] openvswitch: netlink: Flow actions attr not present in new flow. [ 384.543106][T18724] openvswitch: netlink: Flow actions attr not present in new flow. [ 384.682550][T18704] vlan2: left promiscuous mode [ 384.695878][T18708] team0: No ports can be present during mode change [ 384.773048][T15107] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.782954][T15107] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.821546][T15107] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.866544][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.890873][T18734] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3458'. [ 384.905178][T18734] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 384.990683][T18744] netlink: 'syz.3.3462': attribute type 4 has an invalid length. [ 384.999026][T18744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3462'. [ 385.075192][T10215] Bluetooth: hci0: command tx timeout [ 385.480414][T18787] syzkaller1: entered promiscuous mode [ 385.488730][T18787] syzkaller1: entered allmulticast mode [ 385.489239][T18788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3472'. [ 385.610058][T18791] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 385.691765][T18796] netlink: 'syz.3.3476': attribute type 29 has an invalid length. [ 385.703004][T18796] netlink: 'syz.3.3476': attribute type 29 has an invalid length. [ 385.968583][T18812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.970755][T18809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3480'. [ 385.989138][T18812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3481'. [ 386.246713][T18830] netlink: 'syz.4.3485': attribute type 2 has an invalid length. [ 386.258533][T18832] xt_hashlimit: size too large, truncated to 1048576 [ 386.268585][T18832] xt_hashlimit: size too large, truncated to 1048576 [ 386.280710][T18836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3486'. [ 386.281736][T18830] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3485'. [ 386.299500][ T95] block nbd0: Possible stuck request ffff888025110000: control (read@0,1024B). Runtime 300 seconds [ 386.300230][T18832] xt_hashlimit: size too large, truncated to 1048576 [ 386.312597][ T95] block nbd0: Possible stuck request ffff8880251101c0: control (read@1024,1024B). Runtime 300 seconds [ 386.329436][ T95] block nbd0: Possible stuck request ffff888025110380: control (read@2048,1024B). Runtime 300 seconds [ 386.335184][T18832] xt_hashlimit: size too large, truncated to 1048576 [ 386.340604][ T95] block nbd0: Possible stuck request ffff888025110540: control (read@3072,1024B). Runtime 300 seconds [ 386.364341][T18832] xt_hashlimit: size too large, truncated to 1048576 [ 386.368368][T18838] Cannot find add_set index 0 as target [ 386.371304][T18832] xt_hashlimit: size too large, truncated to 1048576 [ 386.384283][T18832] xt_hashlimit: size too large, truncated to 1048576 [ 386.391367][T18832] xt_hashlimit: size too large, truncated to 1048576 [ 386.393118][ T6498] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.406836][T18832] xt_hashlimit: size too large, truncated to 1048576 [ 386.406959][T18832] xt_hashlimit: size too large, truncated to 1048576 [ 386.424646][T18836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3486'. [ 386.495678][T18840] batadv_slave_0: entered allmulticast mode [ 386.501823][ T6498] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.523048][ T6498] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.532790][ T6498] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.542119][T18840] batadv_slave_0: left allmulticast mode [ 386.886386][T18866] syzkaller0: entered promiscuous mode [ 386.891906][T18866] syzkaller0: entered allmulticast mode [ 386.900184][T18866] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 386.972853][T18867] bond1 (unregistering): Released all slaves [ 387.154386][T10215] Bluetooth: hci0: command 0x080f tx timeout [ 387.250136][T18889] syzkaller0: entered promiscuous mode [ 387.257170][T18889] syzkaller0: entered allmulticast mode [ 387.464590][T18903] tipc: Enabled bearer , priority 0 [ 387.479870][T18903] syzkaller0: entered promiscuous mode [ 387.487115][T18903] syzkaller0: entered allmulticast mode [ 387.501790][T18903] tipc: Resetting bearer [ 387.512374][T18901] tipc: Resetting bearer [ 387.549350][T18901] tipc: Disabling bearer [ 387.575735][T18912] nbd6: detected capacity change from 0 to 63 [ 387.583012][T18913] block nbd2: NBD_DISCONNECT [ 387.594711][T18913] block nbd2: Send disconnect failed -32 [ 387.605843][T18913] block nbd2: shutting down sockets [ 387.624998][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 387.634422][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 387.646922][ C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 387.656062][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 387.665094][ C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 387.674256][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 387.682144][ C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 387.691238][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 387.699267][ T6137] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 387.706586][T18915] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 387.710555][T10215] block nbd6: Receive control failed (result -104) [ 387.717992][T18915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.740800][ T6137] Buffer I/O error on dev nbd2, logical block 0, async page read [ 387.749305][ T6137] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 387.758759][ T6137] Buffer I/O error on dev nbd2, logical block 1, async page read [ 387.767156][ T6137] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 387.776362][ T6137] Buffer I/O error on dev nbd2, logical block 2, async page read [ 387.784456][ T6137] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 387.793570][ T6137] Buffer I/O error on dev nbd2, logical block 3, async page read [ 387.801868][ T6137] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 387.811030][ T6137] Buffer I/O error on dev nbd2, logical block 0, async page read [ 387.819122][ T6137] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 387.828584][ T6137] Buffer I/O error on dev nbd2, logical block 1, async page read [ 387.842355][ T6137] ldm_validate_partition_table(): Disk read failed. [ 387.851542][ T6137] Dev nbd2: unable to read RDB block 0 [ 387.873335][ T6137] nbd2: unable to read partition table [ 387.920270][ T6137] ldm_validate_partition_table(): Disk read failed. [ 387.968945][ T6137] Dev nbd2: unable to read RDB block 0 [ 387.977720][ T6137] nbd2: unable to read partition table [ 388.219443][T18943] vlan2: entered allmulticast mode [ 388.334489][T18951] openvswitch: netlink: Flow actions attr not present in new flow. [ 388.466834][T18959] netlink: 'syz.1.3524': attribute type 1 has an invalid length. [ 388.478464][T18963] openvswitch: netlink: Flow actions attr not present in new flow. [ 389.009402][T18997] veth0_macvtap: left promiscuous mode [ 389.256587][T19019] netlink: 'syz.4.3542': attribute type 6 has an invalid length. [ 389.594409][T19034] tipc: Enabling of bearer rejected, failed to enable media [ 389.776061][T19039] syzkaller0: entered promiscuous mode [ 389.794406][T19039] syzkaller0: entered allmulticast mode [ 390.229371][T19048] __nla_validate_parse: 6 callbacks suppressed [ 390.229390][T19048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3552'. [ 390.697976][T19075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3559'. [ 390.755066][T19075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3559'. [ 390.888846][T19085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3563'. [ 390.977849][T19097] netlink: 'syz.1.3562': attribute type 2 has an invalid length. [ 390.987795][T19096] xt_l2tp: missing protocol rule (udp|l2tpip) [ 390.995770][T19097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3562'. [ 391.093739][T19104] hsr0 speed is unknown, defaulting to 1000 [ 391.101250][T19104] hsr0 speed is unknown, defaulting to 1000 [ 391.136444][T19104] hsr0 speed is unknown, defaulting to 1000 [ 391.158681][T19104] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 391.186914][T19108] batman_adv: batadv0: Adding interface: dummy0 [ 391.188330][T19104] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 391.193401][T19108] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.230362][T19108] batman_adv: batadv0: Interface activated: dummy0 [ 391.265027][T19109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3570'. [ 391.265580][T19104] hsr0 speed is unknown, defaulting to 1000 [ 391.285890][T19104] hsr0 speed is unknown, defaulting to 1000 [ 391.294617][T19104] hsr0 speed is unknown, defaulting to 1000 [ 391.302520][T19104] hsr0 speed is unknown, defaulting to 1000 [ 391.323109][T19108] batadv0: mtu less than device minimum [ 391.330433][T19108] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 391.331461][T19111] netlink: 'syz.3.3572': attribute type 1 has an invalid length. [ 391.342562][T19108] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 391.360833][T19108] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 391.372726][T19108] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 391.384655][T19108] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 391.439924][T19104] hsr0 speed is unknown, defaulting to 1000 [ 391.472655][T19112] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 391.489039][T19112] bond2 (unregistering): Released all slaves [ 391.575233][T19111] 8021q: adding VLAN 0 to HW filter on device bond2 [ 391.589187][T19104] hsr0 speed is unknown, defaulting to 1000 [ 391.617511][T19104] hsr0 speed is unknown, defaulting to 1000 [ 391.640512][T19104] hsr0 speed is unknown, defaulting to 1000 [ 391.669380][T19125] netlink: 'syz.4.3576': attribute type 30 has an invalid length. [ 391.690783][T19104] hsr0 speed is unknown, defaulting to 1000 [ 391.768265][T19130] veth0: entered promiscuous mode [ 391.786861][T19131] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3576'. [ 391.802458][T19131] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3576'. [ 391.909955][T19135] netlink: 'syz.1.3579': attribute type 3 has an invalid length. [ 391.948476][T19129] veth0: left promiscuous mode [ 391.975510][T19135] sctp: [Deprecated]: syz.1.3579 (pid 19135) Use of int in max_burst socket option deprecated. [ 391.975510][T19135] Use struct sctp_assoc_value instead [ 392.714096][T19144] net_ratelimit: 11936 callbacks suppressed [ 392.714116][T19144] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 392.729960][T19144] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 392.740123][T19144] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 392.750163][T19144] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 392.761726][T19144] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 392.773042][T19144] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 392.783071][T19144] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 392.793098][T19144] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 392.803339][T19144] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 392.813281][T19144] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 393.794801][T10215] Bluetooth: hci1: command tx timeout [ 394.208523][T19154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3585'. [ 394.326174][T19154] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3585'. [ 394.626650][T19187] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 394.772359][T19201] netlink: 'syz.2.3601': attribute type 58 has an invalid length. [ 394.875633][T19210] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 395.017168][T19217] gretap0: entered promiscuous mode [ 395.026302][T19217] gretap0: left promiscuous mode [ 395.572493][T19254] tipc: Enabled bearer , priority 0 [ 395.589217][T19254] syzkaller0: entered promiscuous mode [ 395.597253][T19254] syzkaller0: entered allmulticast mode [ 395.615240][T19254] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 395.709705][T19254] tipc: Resetting bearer [ 395.745882][T19251] tipc: Resetting bearer [ 395.795036][T19251] tipc: Disabling bearer [ 395.858439][T19268] netlink: 'syz.1.3622': attribute type 4 has an invalid length. [ 396.056706][T19281] tipc: Enabled bearer , priority 0 [ 396.073172][T19281] syzkaller0: entered promiscuous mode [ 396.095729][T19281] syzkaller0: entered allmulticast mode [ 396.180958][T19281] tipc: Resetting bearer [ 396.190335][T19296] __nla_validate_parse: 8 callbacks suppressed [ 396.190350][T19296] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3628'. [ 396.227424][T19298] syzkaller0: create flow: hash 3227347934 index 1 [ 396.263479][T19281] xt_hashlimit: invalid interval [ 396.330231][ T6491] syzkaller0: tun_net_xmit 76 [ 396.336713][ T6491] syzkaller0: tun_net_xmit 48 [ 396.354887][ T5903] syzkaller0: tun_net_xmit 76 [ 396.411561][T19280] tipc: Resetting bearer [ 396.430753][T19280] tipc: Disabling bearer [ 396.437553][ T43] syzkaller0: tun_net_xmit 76 [ 396.495404][T19306] netlink: 'syz.0.3632': attribute type 11 has an invalid length. [ 396.508310][T19303] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 396.621543][T19293] syzkaller0: delete flow: hash 3227347934 index 1 [ 396.670332][T19319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3635'. [ 396.688652][T19319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3635'. [ 397.940986][T19303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3631'. [ 397.950097][T19303] tipc: Invalid UDP bearer configuration [ 397.950144][T19303] tipc: Enabling of bearer rejected, failed to enable media [ 398.309495][T19345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3641'. [ 398.320083][T19344] Bluetooth: MGMT ver 1.23 [ 398.439230][T19352] x_tables: duplicate underflow at hook 1 [ 398.583184][T19346] syzkaller0: entered promiscuous mode [ 398.602429][T19346] syzkaller0: entered allmulticast mode [ 398.650839][T19364] net_ratelimit: 21098 callbacks suppressed [ 398.650861][T19364] openvswitch: netlink: IP tunnel dst address not specified [ 398.667105][T19363] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3644'. [ 398.669815][T19366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3647'. [ 398.736420][T19366] erspan0: entered promiscuous mode [ 398.798122][T19371] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3649'. [ 398.808361][T19368] netlink: 'syz.2.3648': attribute type 11 has an invalid length. [ 398.967517][T19378] netlink: 'syz.1.3650': attribute type 10 has an invalid length. [ 399.012214][T19378] team0: Port device dummy0 added [ 399.029696][T19378] netlink: 'syz.1.3650': attribute type 10 has an invalid length. [ 399.096388][T19378] team0: Port device dummy0 removed [ 399.128623][T19378] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 399.498985][T19408] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3657'. [ 399.676374][T19419] 0: reclassify loop, rule prio 0, protocol 800 [ 399.769744][T19427] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.778177][T19427] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.982266][T19430] syz_tun: entered allmulticast mode [ 399.983032][T19434] sctp: [Deprecated]: syz.1.3666 (pid 19434) Use of struct sctp_assoc_value in delayed_ack socket option. [ 399.983032][T19434] Use struct sctp_sack_info instead [ 400.030626][T19429] syz_tun: left allmulticast mode [ 400.262691][T19449] netlink: 'syz.0.3669': attribute type 11 has an invalid length. [ 400.271407][T19444] veth5: entered allmulticast mode [ 400.275815][T19449] netlink: 'syz.0.3669': attribute type 11 has an invalid length. [ 400.304599][T19449] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3669'. [ 400.476524][T19462] : entered promiscuous mode [ 400.574819][T19475] netlink: 'syz.1.3676': attribute type 27 has an invalid length. [ 400.603483][T19469] netlink: 'syz.3.3675': attribute type 13 has an invalid length. [ 400.680127][T19469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.895856][T19491] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 401.257867][T19515] __nla_validate_parse: 2 callbacks suppressed [ 401.257883][T19515] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3688'. [ 401.338285][T19521] lo: entered allmulticast mode [ 401.389715][T19524] netlink: 'syz.2.3690': attribute type 16 has an invalid length. [ 401.408203][T19524] netlink: 'syz.2.3690': attribute type 17 has an invalid length. [ 401.417393][T19528] sctp: [Deprecated]: syz.3.3691 (pid 19528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 401.417393][T19528] Use struct sctp_sack_info instead [ 401.553803][T19542] sctp: [Deprecated]: syz.3.3694 (pid 19542) Use of int in maxseg socket option. [ 401.553803][T19542] Use struct sctp_assoc_value instead [ 401.611149][T19542] sctp: [Deprecated]: syz.3.3694 (pid 19542) Use of struct sctp_assoc_value in delayed_ack socket option. [ 401.611149][T19542] Use struct sctp_sack_info instead [ 401.735339][T19549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3696'. [ 401.757814][T19549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3696'. [ 401.783820][T19551] openvswitch: netlink: Missing key (keys=40, expected=80) [ 401.793525][ T5925] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.805269][T19549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3696'. [ 401.820790][ T5925] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.845081][T19549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3696'. [ 401.882824][ T5925] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.925243][ T5925] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.163638][T19568] ip6t_srh: unknown srh match flags 5F28 [ 402.201382][T19559] can: request_module (can-proto-0) failed. [ 402.231443][T19570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3701'. [ 402.247761][T19570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3701'. [ 402.354725][T19575] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 402.379158][T19574] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 402.545056][T19574] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.552766][T19574] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.760542][T19574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.776341][T19574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.796672][T19597] netlink: 'syz.1.3708': attribute type 10 has an invalid length. [ 402.805702][T19597] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3708'. [ 402.927963][T19597] team0: Port device geneve0 added [ 402.943423][ T6498] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.955436][ T6498] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.982228][T19568] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 402.995891][T19568] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 403.003836][ T6498] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.032284][ T6498] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.086256][T19568] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 403.098494][T19568] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 403.134331][T19604] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 403.239349][T19568] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 403.286490][T19568] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 403.658360][T19568] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 403.682911][T19568] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 403.763768][T19568] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 403.771214][T19568] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 403.781756][T19621] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3714'. [ 403.891712][T19633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3716'. [ 404.567673][T19681] tipc: Enabled bearer , priority 0 [ 404.605831][T19672] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 404.628152][T19672] tipc: Resetting bearer [ 404.762281][T19684] syzkaller0: entered promiscuous mode [ 404.780688][T19684] syzkaller0: entered allmulticast mode [ 404.824699][T19700] netlink: 'syz.0.3727': attribute type 75 has an invalid length. [ 404.849353][T19682] syzkaller0: entered promiscuous mode [ 404.858183][T19682] syzkaller0: entered allmulticast mode [ 404.883347][T19670] tipc: Resetting bearer [ 404.899470][T19670] tipc: Disabling bearer [ 406.288874][T19701] tap0: tun_chr_ioctl cmd 1074025677 [ 406.294554][T19701] tap0: linktype set to 65534 [ 406.459756][T19720] openvswitch: netlink: Duplicate or invalid key (type 0). [ 406.468394][T19720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.557302][T19728] netlink: 'syz.3.3737': attribute type 1 has an invalid length. [ 406.701799][T19728] 8021q: adding VLAN 0 to HW filter on device bond3 [ 406.760108][T19736] v: renamed from vlan0 [ 406.794762][T19739] veth9: entered promiscuous mode [ 406.809214][T19739] bond3: (slave veth9): Enslaving as an active interface with an up link [ 406.935217][T19748] syzkaller0: entered promiscuous mode [ 406.947937][T19748] syzkaller0: entered allmulticast mode [ 407.132305][T19759] __nla_validate_parse: 3 callbacks suppressed [ 407.132322][T19759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3744'. [ 407.173346][T19768] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 407.242829][T19774] ip6t_srh: unknown srh invflags 4000 [ 407.366050][T19781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3751'. [ 407.456151][T19787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3753'. [ 407.466207][T19787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3753'. [ 407.500776][T19791] x_tables: unsorted underflow at hook 3 [ 407.609243][T19799] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3759'. [ 407.807125][T19819] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 407.884834][T19821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3765'. [ 407.949898][T19828] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3768'. [ 408.215244][T19836] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3770'. [ 408.428110][T19853] wg2: entered promiscuous mode [ 408.433317][T19853] wg2: entered allmulticast mode [ 408.753550][T19881] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 409.017565][T19894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3785'. [ 409.035905][T19894] netlink: 'syz.1.3785': attribute type 8 has an invalid length. [ 409.127106][T19900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3787'. [ 409.362174][T19910] tipc: Enabled bearer , priority 0 [ 409.389245][T19910] syzkaller0: entered promiscuous mode [ 409.404782][T19910] syzkaller0: entered allmulticast mode [ 409.423550][T19910] tipc: Resetting bearer [ 409.439455][T19909] tipc: Resetting bearer [ 409.519164][T19909] tipc: Disabling bearer [ 409.701574][T19926] syzkaller0: entered promiscuous mode [ 409.707428][T19926] syzkaller0: entered allmulticast mode [ 409.809971][T19936] netlink: 'syz.2.3798': attribute type 1 has an invalid length. [ 409.960133][ T95] block nbd5: Possible stuck request ffff88802532e000: control (read@0,1024B). Runtime 120 seconds [ 409.971452][ T95] block nbd5: Possible stuck request ffff88802532e1c0: control (read@1024,1024B). Runtime 120 seconds [ 409.982998][ T95] block nbd5: Possible stuck request ffff88802532e380: control (read@2048,1024B). Runtime 120 seconds [ 409.995016][ T95] block nbd5: Possible stuck request ffff88802532e540: control (read@3072,1024B). Runtime 120 seconds [ 411.578848][T19944] veth3: entered promiscuous mode [ 411.731104][T19981] netlink: 'syz.3.3806': attribute type 1 has an invalid length. [ 412.845887][T20047] __nla_validate_parse: 11 callbacks suppressed [ 412.845907][T20047] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3822'. [ 412.999827][T20049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3823'. [ 413.072971][T20057] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3826'. [ 413.161617][T20060] dvmrp0: entered allmulticast mode [ 413.195591][T20060] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3828'. [ 413.206592][T20064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3828'. [ 413.236899][T20070] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3827'. [ 413.252188][T20060] dvmrp0: left allmulticast mode [ 413.349024][T20075] nft_compat: unsupported protocol 0 [ 413.591303][T20081] ipt_ECN: cannot use operation on non-tcp rule [ 413.680614][T20091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3832'. [ 413.744784][T20095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3832'. [ 413.753909][T20095] netlink: 'syz.1.3832': attribute type 7 has an invalid length. [ 413.766281][T20095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3832'. [ 413.842634][T20094] 8021q: adding VLAN 0 to HW filter on device bond2 [ 413.881411][T20106] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3838'. [ 413.915839][T20088] tc_dump_action: action bad kind [ 414.004675][T20109] netlink: 'syz.2.3840': attribute type 29 has an invalid length. [ 414.023130][T20109] netlink: 'syz.2.3840': attribute type 29 has an invalid length. [ 414.083828][T20113] netlink: 'syz.1.3841': attribute type 1 has an invalid length. [ 414.170009][T20110] IPVS: ip_vs_add_dest(): server weight less than zero [ 414.177926][ T43] IPVS: starting estimator thread 0... [ 414.220396][T20130] bond1: (slave gretap1): making interface the new active one [ 414.259630][T20130] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 414.274122][T20129] IPVS: using max 25 ests per chain, 60000 per kthread [ 414.544808][T20147] netlink: 'syz.2.3850': attribute type 1 has an invalid length. [ 414.552868][T20147] netlink: 'syz.2.3850': attribute type 1 has an invalid length. [ 414.561675][T20147] netlink: 'syz.2.3850': attribute type 2 has an invalid length. [ 414.572532][T20145] macsec0: entered promiscuous mode [ 414.592192][T20145] macsec0: entered allmulticast mode [ 414.605631][T20145] bridge0: entered allmulticast mode [ 414.612773][T20145] bridge0: port 3(macsec0) entered blocking state [ 414.621022][T20145] bridge0: port 3(macsec0) entered disabled state [ 414.643923][T20145] bridge0: left allmulticast mode [ 414.708783][T20156] netlink: 'syz.2.3853': attribute type 2 has an invalid length. [ 414.717828][T20156] netlink: 'syz.2.3853': attribute type 2 has an invalid length. [ 414.740481][T20155] delete_channel: no stack [ 414.740668][T20159] syzkaller0: entered promiscuous mode [ 414.750726][T20159] syzkaller0: entered allmulticast mode [ 414.799565][T20159] tipc: Started in network mode [ 414.806695][T20159] tipc: Node identity e62226d7fc6e, cluster identity 4711 [ 414.853618][T20159] tipc: Enabled bearer , priority 0 [ 414.867930][T20160] tipc: Enabling of bearer rejected, already enabled [ 414.928240][T20158] tipc: Resetting bearer [ 414.985336][T20158] tipc: Disabling bearer [ 415.391571][T20199] Cannot find set identified by id 0 to match [ 415.608090][T20211] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 416.003589][T20234] lo: entered allmulticast mode [ 416.003680][T20233] nbd: must specify a size in bytes for the device [ 416.178470][T20240] ip6t_rpfilter: unknown options [ 416.273087][T20254] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 416.273590][T20242] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 416.286016][T20255] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 416.369539][ T95] block nbd0: Possible stuck request ffff888025110000: control (read@0,1024B). Runtime 330 seconds [ 416.390686][ T95] block nbd0: Possible stuck request ffff8880251101c0: control (read@1024,1024B). Runtime 330 seconds [ 416.414691][ T95] block nbd0: Possible stuck request ffff888025110380: control (read@2048,1024B). Runtime 330 seconds [ 416.426757][ T95] block nbd0: Possible stuck request ffff888025110540: control (read@3072,1024B). Runtime 330 seconds [ 416.585077][T20276] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 416.740336][T20285] bond4: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 416.752393][T20228] lo: left allmulticast mode [ 416.753940][T20284] validate_nla: 2 callbacks suppressed [ 416.755758][T20284] netlink: 'syz.0.3888': attribute type 33 has an invalid length. [ 417.491984][T20334] geneve2: entered promiscuous mode [ 417.534689][T20334] geneve2: entered allmulticast mode [ 417.550866][T15107] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 417.575020][T15107] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 417.634126][T15107] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 417.643411][ T95] block nbd6: Possible stuck request ffff88802538e000: control (read@0,1024B). Runtime 30 seconds [ 417.654749][ T95] block nbd6: Possible stuck request ffff88802538e1c0: control (read@1024,1024B). Runtime 30 seconds [ 417.666227][ T95] block nbd6: Possible stuck request ffff88802538e380: control (read@2048,1024B). Runtime 30 seconds [ 417.677931][ T95] block nbd6: Possible stuck request ffff88802538e540: control (read@3072,1024B). Runtime 30 seconds [ 417.691015][T15107] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 417.736128][T20347] syzkaller1: entered promiscuous mode [ 417.742299][T20347] syzkaller1: entered allmulticast mode [ 417.813195][T20353] team1: entered promiscuous mode [ 417.819351][T20353] team1: entered allmulticast mode [ 417.908438][T20359] netlink: 'syz.1.3909': attribute type 13 has an invalid length. [ 417.976386][T20363] __nla_validate_parse: 22 callbacks suppressed [ 417.976403][T20363] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3911'. [ 418.182642][T20377] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3914'. [ 419.749982][T20384] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3916'. [ 419.886635][T20407] netlink: 'syz.3.3923': attribute type 1 has an invalid length. [ 419.922502][T20411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3924'. [ 420.326124][T20435] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 420.339540][T20435] bond2 (unregistering): Released all slaves [ 420.547345][T20448] openvswitch: netlink: nsh attribute has 65492 unknown bytes. [ 420.574598][T20448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.610760][T20452] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 420.652221][T20458] netlink: 'syz.2.3934': attribute type 23 has an invalid length. [ 420.855678][T20470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.879775][T20474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3939'. [ 421.058501][T20485] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3945'. [ 421.077525][T20485] vlan3: entered allmulticast mode [ 421.082921][T20485] erspan0: entered allmulticast mode [ 421.419860][T20510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3952'. [ 421.445392][T20513] ip6gre2: entered promiscuous mode [ 421.450656][T20513] ip6gre2: entered allmulticast mode [ 421.458845][ T1040] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 421.479990][ T1040] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 421.489290][ T7816] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 421.565105][ T7816] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 421.605614][T20520] bond3 (unregistering): Released all slaves [ 421.724993][T12729] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 421.830037][T20536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3962'. [ 421.840929][T20533] netlink: 'syz.4.3958': attribute type 1 has an invalid length. [ 421.856909][T20542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3961'. [ 421.945635][T20548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3961'. [ 421.968219][T20533] 8021q: adding VLAN 0 to HW filter on device bond3 [ 422.010566][T20546] vlan0: entered promiscuous mode [ 422.042291][T20546] bond3: entered promiscuous mode [ 422.051924][T20546] vlan0: entered allmulticast mode [ 422.058389][T20546] bond3: entered allmulticast mode [ 422.150539][T20533] bond3: (slave gretap1): making interface the new active one [ 422.159672][T20533] gretap1: entered promiscuous mode [ 422.169622][T20533] gretap1: entered allmulticast mode [ 422.178819][T20567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.185383][T20533] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 422.232877][T20570] netlink: 'syz.3.3968': attribute type 10 has an invalid length. [ 422.279913][T20558] syzkaller0: entered promiscuous mode [ 422.286183][T20558] syzkaller0: entered allmulticast mode [ 422.329516][T20570] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 422.367599][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 422.421160][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 422.469794][T15107] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 422.490606][T15107] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 422.541056][T20586] netlink: 'syz.1.3972': attribute type 3 has an invalid length. [ 422.672408][T20597] syzkaller0: entered promiscuous mode [ 422.679637][T20597] syzkaller0: entered allmulticast mode [ 422.992175][T20624] netlink: 'syz.0.3983': attribute type 13 has an invalid length. [ 423.059864][T20624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 423.077605][T20626] netlink: 'syz.0.3983': attribute type 10 has an invalid length. [ 423.549386][T20653] mac80211_hwsim hwsim31 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 423.580043][T20655] __nla_validate_parse: 2 callbacks suppressed [ 423.580062][T20655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3992'. [ 423.610276][T20659] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3994'. [ 424.157565][T20694] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4004'. [ 424.166998][T20696] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4005'. [ 424.363125][T20698] syzkaller0: entered promiscuous mode [ 424.372570][T20698] syzkaller0: entered allmulticast mode [ 424.451317][T20708] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4010'. [ 424.507364][T20710] lo: entered promiscuous mode [ 424.512508][T20710] netlink: 'syz.3.4011': attribute type 2 has an invalid length. [ 424.542834][T20710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.698697][T20725] IPVS: Unknown mcast interface: vcan0 [ 424.757008][T20727] tipc: Enabling of bearer rejected, failed to enable media [ 424.775330][T20727] netlink: 'syz.0.4017': attribute type 1 has an invalid length. [ 424.786746][T20727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4017'. [ 424.806376][T20729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4018'. [ 424.839727][T20734] netlink: 'syz.3.4020': attribute type 63 has an invalid length. [ 424.948740][T20741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4021'. [ 424.988199][T20743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4021'. [ 424.996634][T20735] bond5 (unregistering): Released all slaves [ 425.130049][T20751] netlink: 51 bytes leftover after parsing attributes in process `syz.4.4025'. [ 425.193674][T20751] xt_CT: You must specify a L4 protocol and not use inversions on it [ 425.244888][T20752] xt_CT: You must specify a L4 protocol and not use inversions on it [ 425.315058][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 425.659942][T20761] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 425.683291][T20761] bond5 (unregistering): Released all slaves [ 425.968649][T10215] block nbd8: Receive control failed (result -32) [ 426.082215][T20794] syzkaller0: entered promiscuous mode [ 426.088658][T20794] syzkaller0: entered allmulticast mode [ 426.948067][T20849] veth5: entered promiscuous mode [ 426.950091][T20853] netlink: 'syz.1.4053': attribute type 10 has an invalid length. [ 426.966506][T20849] veth5: entered allmulticast mode [ 427.054946][T20853] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.062764][T20853] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.139442][T20853] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.146654][T20853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.154219][T20853] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.161393][T20853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.190748][T20853] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 427.426356][T20884] macvtap1: entered promiscuous mode [ 427.431734][T20884] vlan0: entered promiscuous mode [ 427.438271][T20884] macvtap1: entered allmulticast mode [ 427.443787][T20884] vlan0: entered allmulticast mode [ 427.449440][T20884] veth0_vlan: entered allmulticast mode [ 427.458699][T20886] netlink: 'syz.1.4064': attribute type 29 has an invalid length. [ 427.491754][T20888] macvtap2: entered promiscuous mode [ 427.499680][T20888] macvtap2: entered allmulticast mode [ 427.538592][T20887] netlink: 'syz.1.4064': attribute type 29 has an invalid length. [ 427.817848][T20903] tipc: Started in network mode [ 427.822766][T20903] tipc: Node identity 72114a89ec09, cluster identity 4711 [ 427.841786][T20903] tipc: Enabled bearer , priority 0 [ 427.850067][ T1040] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.859497][ T1040] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.869490][T20913] netlink: 'syz.0.4074': attribute type 1 has an invalid length. [ 427.870694][T20915] syzkaller0: entered promiscuous mode [ 427.885985][T20915] syzkaller0: entered allmulticast mode [ 427.902467][T20914] netlink: 'syz.4.4073': attribute type 10 has an invalid length. [ 427.903602][ T1040] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.921142][ T1040] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.960611][T20919] IPVS: ip_vs_edit_dest(): server weight less than zero [ 427.968293][T20913] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 427.981922][T20914] team0: Device ipvlan1 failed to register rx_handler [ 428.062980][T20903] tipc: Resetting bearer [ 428.093257][T20902] tipc: Resetting bearer [ 428.119896][T20902] tipc: Disabling bearer [ 428.138548][T20926] tipc: Enabled bearer , priority 0 [ 428.163223][T20926] syzkaller0: entered promiscuous mode [ 428.173391][T20926] syzkaller0: entered allmulticast mode [ 428.183267][T20928] syzkaller0: entered promiscuous mode [ 428.211056][T20928] syzkaller0: entered allmulticast mode [ 428.266230][T20928] netlink: 'syz.0.4078': attribute type 1 has an invalid length. [ 428.328475][T20928] bond2: (slave bridge7): making interface the new active one [ 428.338387][T20928] bond2: (slave bridge7): Enslaving as an active interface with an up link [ 428.365762][T20926] tipc: Resetting bearer [ 428.402635][T20936] netlink: 'syz.1.4080': attribute type 13 has an invalid length. [ 428.439928][T20924] tipc: Resetting bearer [ 428.486760][T20924] tipc: Disabling bearer [ 428.732243][T20959] netlink: 'syz.1.4087': attribute type 1 has an invalid length. [ 429.016331][T20973] __nla_validate_parse: 12 callbacks suppressed [ 429.016348][T20973] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4089'. [ 429.130788][T20977] Cannot find add_set index 1 as target [ 429.156961][T20977] macsec2: entered promiscuous mode [ 429.243109][T20985] ip6t_srh: unknown srh invflags 4000 [ 429.300219][T20985] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4091'. [ 429.315208][T20985] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4091'. [ 429.400565][T20992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4094'. [ 430.027403][T21036] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4106'. [ 430.075177][T21026] netlink: 'syz.4.4103': attribute type 1 has an invalid length. [ 430.254870][T21047] xt_ecn: cannot match TCP bits for non-tcp packets [ 430.261657][T21047] xt_ecn: cannot match TCP bits for non-tcp packets [ 430.327500][T21056] tipc: Enabling of bearer rejected, failed to enable media [ 430.841654][T21087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4120'. [ 430.866873][T21089] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4120'. [ 430.976344][T21100] netlink: 'syz.0.4124': attribute type 10 has an invalid length. [ 431.000738][T21100] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 431.040948][T21100] SET target dimension over the limit! [ 431.145722][T21106] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4127'. [ 431.440222][T21130] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4132'. [ 431.637817][T21148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4135'. [ 431.719785][T21130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.731316][T21130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.742496][T21130] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 431.762838][T21130] bond0 (unregistering): Released all slaves [ 431.908851][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 431.945167][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 432.032521][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 432.057213][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 432.129229][T21169] veth0: entered promiscuous mode [ 432.428377][T21197] batadv_slave_0: entered promiscuous mode [ 432.485936][T21201] syzkaller1: entered promiscuous mode [ 432.499657][T21201] syzkaller1: entered allmulticast mode [ 432.717612][T21192] batadv_slave_0: left promiscuous mode [ 432.773662][T21221] validate_nla: 1 callbacks suppressed [ 432.773678][T21221] netlink: 'syz.4.4153': attribute type 1 has an invalid length. [ 432.934418][T21168] veth0: left promiscuous mode [ 433.139317][T21243] syzkaller1: entered promiscuous mode [ 433.145814][T21243] syzkaller1: entered allmulticast mode [ 433.248243][T21251] batadv_slave_0: entered promiscuous mode [ 433.268208][T21249] batadv_slave_0: left promiscuous mode [ 433.385854][T21261] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 433.426909][T21262] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 433.745560][T21289] IPVS: set_ctl: invalid protocol: 34 224.0.0.1:20000 [ 433.827630][T21297] netlink: 'syz.2.4176': attribute type 1 has an invalid length. [ 433.904249][T21299] ipt_rpfilter: unknown options [ 433.915489][T21301] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 433.967395][T21297] 8021q: adding VLAN 0 to HW filter on device bond3 [ 434.030283][T21303] bond3: (slave ip6gretap1): making interface the new active one [ 434.048932][T21314] xt_hashlimit: overflow, rate too high: 0 [ 434.075934][T21303] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 434.227188][T21333] __nla_validate_parse: 8 callbacks suppressed [ 434.227203][T21333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4186'. [ 434.272301][T21333] macsec1: entered promiscuous mode [ 434.292745][T21333] bridge0: entered promiscuous mode [ 434.308928][T21333] macsec1: entered allmulticast mode [ 434.322922][T21333] bridge0: entered allmulticast mode [ 434.336062][T21333] bridge0: port 3(macsec1) entered blocking state [ 434.362277][T21333] bridge0: port 3(macsec1) entered disabled state [ 434.392444][T21333] bridge0: left allmulticast mode [ 434.405743][T21333] bridge0: left promiscuous mode [ 434.562048][T21355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.601209][T21355] netlink: 'syz.3.4190': attribute type 10 has an invalid length. [ 434.601290][T21358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4191'. [ 434.617509][T21355] batman_adv: batadv0: Adding interface: netdevsim0 [ 434.638082][T21355] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.688992][T21355] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 434.711547][T21361] lo: Caught tx_queue_len zero misconfig [ 434.940805][T21370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4196'. [ 435.011843][T21370] hsr_slave_0 (unregistering): left promiscuous mode [ 435.065777][T21377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4198'. [ 435.083658][T21379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4199'. [ 435.119923][T21379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4199'. [ 435.361444][T21390] netlink: 'syz.2.4201': attribute type 27 has an invalid length. [ 435.417064][T21389] tipc: Enabling of bearer rejected, failed to enable media [ 435.870537][T21422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4210'. [ 436.089959][T21422] hsr_slave_0 (unregistering): left promiscuous mode [ 436.205392][T21449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4217'. [ 436.364991][T21462] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4220'. [ 436.471331][T21456] batman_adv: batadv0: Interface deactivated: dummy0 [ 436.624276][T21456] veth5: left allmulticast mode [ 436.641912][T21456] vlan0: left allmulticast mode [ 436.647659][T21456] veth0_vlan: left allmulticast mode [ 436.652976][T21456] vlan0: left promiscuous mode [ 436.658919][T21456] macvtap1: left promiscuous mode [ 436.664219][T21456] macvtap1: left allmulticast mode [ 436.766143][ T36] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.794576][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.849600][ T36] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.860552][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.871016][ T36] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.881386][T21480] netlink: 'syz.4.4226': attribute type 12 has an invalid length. [ 436.883207][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.924940][T21478] netlink: 'syz.0.4224': attribute type 7 has an invalid length. [ 436.950537][ T36] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.976579][T21489] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4227'. [ 436.982422][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.219432][T21492] can: request_module (can-proto-3) failed. [ 437.558344][T21533] bond0: option lp_interval: invalid value (0) [ 437.564944][T21533] bond0: option lp_interval: allowed values 1 - 2147483647 [ 437.586993][T21533] bond0 (unregistering): Released all slaves [ 437.708728][T21545] pimreg: entered allmulticast mode [ 437.934224][T21555] tipc: Enabling of bearer rejected, failed to enable media [ 438.334582][T21573] netlink: 'syz.0.4250': attribute type 13 has an invalid length. [ 438.342668][T21573] netlink: 'syz.0.4250': attribute type 17 has an invalid length. [ 438.352402][T21576] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 438.363291][T21576] tipc: Enabled bearer , priority 10 [ 438.515392][T21573] erspan0: left promiscuous mode [ 438.543927][T21573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.552427][T21573] batman_adv: batadv0: Interface activated: dummy0 [ 438.559744][T21573] batadv0: mtu less than device minimum [ 438.567014][T21573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.578968][T21573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.590832][T21573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.602769][T21573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.614670][T21573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.626487][T21573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.638275][T21573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.650144][T21573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.664262][T21573] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.739412][T21596] batadv_slave_1: entered promiscuous mode [ 438.747390][T21596] batadv_slave_1: left promiscuous mode [ 439.095112][T21614] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 439.406726][T21638] syzkaller0: entered promiscuous mode [ 439.412235][T21638] syzkaller0: entered allmulticast mode [ 439.451064][T21641] netlink: 'syz.4.4270': attribute type 5 has an invalid length. [ 439.462333][T21635] tipc: Enabled bearer , priority 0 [ 439.484612][ T43] tipc: Node number set to 2752314549 [ 439.556970][T21635] tipc: Resetting bearer [ 439.642001][T21635] tipc: Disabling bearer [ 439.727849][T21658] __nla_validate_parse: 9 callbacks suppressed [ 439.727866][T21658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4276'. [ 439.754310][T21663] : entered promiscuous mode [ 439.786706][T21663] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4277'. [ 439.941413][T21673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4281'. [ 439.957652][T21674] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4282'. [ 440.046898][ T95] block nbd5: Possible stuck request ffff88802532e000: control (read@0,1024B). Runtime 150 seconds [ 440.058751][ T95] block nbd5: Possible stuck request ffff88802532e1c0: control (read@1024,1024B). Runtime 150 seconds [ 440.070961][ T95] block nbd5: Possible stuck request ffff88802532e380: control (read@2048,1024B). Runtime 150 seconds [ 440.083437][ T95] block nbd5: Possible stuck request ffff88802532e540: control (read@3072,1024B). Runtime 150 seconds [ 440.607910][T21719] delete_channel: no stack [ 440.612377][T21718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4292'. [ 440.882472][T21736] netlink: 'syz.1.4297': attribute type 6 has an invalid length. [ 440.915697][T21736] netlink: 'syz.1.4297': attribute type 6 has an invalid length. [ 440.928345][T21732] syzkaller1: entered promiscuous mode [ 440.933857][T21732] syzkaller1: entered allmulticast mode [ 440.942159][T21732] netlink: 'syz.0.4296': attribute type 1 has an invalid length. [ 440.957723][T21732] gretap1: entered promiscuous mode [ 441.180261][T21748] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 441.191582][T21750] netlink: 284 bytes leftover after parsing attributes in process `syz.2.4303'. [ 441.251294][T21757] syzkaller0: entered promiscuous mode [ 441.260370][T21757] syzkaller0: entered allmulticast mode [ 441.269722][T21757] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 441.303190][T21763] netlink: 'syz.3.4306': attribute type 9 has an invalid length. [ 441.325727][ T31] INFO: task udevd:5827 blocked for more than 143 seconds. [ 441.343695][ T31] Not tainted syzkaller #0 [ 441.349381][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 441.358963][ T31] task:udevd state:D stack:21864 pid:5827 tgid:5827 ppid:5197 task_flags:0x400140 flags:0x00080003 [ 441.371686][ T31] Call Trace: [ 441.375704][ T31] [ 441.378659][ T31] __schedule+0x1798/0x4cc0 [ 441.383400][ T31] ? __pfx___schedule+0x10/0x10 [ 441.388863][ T31] ? schedule+0x91/0x360 [ 441.393133][ T31] schedule+0x165/0x360 [ 441.398272][ T31] io_schedule+0x80/0xd0 [ 441.402555][ T31] folio_wait_bit_common+0x6b0/0xb80 [ 441.408470][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 441.414484][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 441.420112][ T31] ? __filemap_get_folio+0x6c0/0xaf0 [ 441.426181][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 441.431495][ T31] do_read_cache_folio+0x1aa/0x590 [ 441.437386][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 441.443079][ T31] read_part_sector+0xb6/0x2b0 [ 441.448335][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 441.453746][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 441.459888][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 441.466393][ T31] bdev_disk_changed+0x75f/0x14b0 [ 441.471436][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 441.479337][ T31] ? wait_on_inode+0xc0/0x230 [ 441.484731][ T31] blkdev_get_whole+0x380/0x510 [ 441.489692][ T31] bdev_open+0x31e/0xd30 [ 441.494147][ T31] blkdev_open+0x457/0x600 [ 441.498578][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 441.503531][ T31] do_dentry_open+0x953/0x13f0 [ 441.508468][ T31] vfs_open+0x3b/0x340 [ 441.512550][ T31] ? path_openat+0x2ecd/0x3830 [ 441.517789][ T31] path_openat+0x2ee5/0x3830 [ 441.522423][ T31] ? __pfx_path_openat+0x10/0x10 [ 441.527479][ T31] do_filp_open+0x1fa/0x410 [ 441.532036][ T31] ? __lock_acquire+0xab9/0xd20 [ 441.537285][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 441.542497][ T31] ? _raw_spin_unlock+0x28/0x50 [ 441.548376][ T31] ? alloc_fd+0x64c/0x6c0 [ 441.552829][ T31] do_sys_openat2+0x121/0x1c0 [ 441.558132][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 441.563361][ T31] __x64_sys_openat+0x138/0x170 [ 441.568335][ T31] do_syscall_64+0xfa/0xfa0 [ 441.572851][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.579414][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 441.585766][ T31] ? clear_bhb_loop+0x60/0xb0 [ 441.590460][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.596457][ T31] RIP: 0033:0x7fd09e6a7407 [ 441.600881][ T31] RSP: 002b:00007ffdc36be180 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 441.607823][T21772] xt_socket: unknown flags 0x50 [ 441.610096][ T31] RAX: ffffffffffffffda RBX: 00007fd09ee2f880 RCX: 00007fd09e6a7407 [ 441.622215][ T31] RDX: 00000000000a0800 RSI: 000055c19e95aed0 RDI: ffffffffffffff9c [ 441.630273][ T31] RBP: 000055c19e944910 R08: 0000000000000000 R09: 0000000000000000 [ 441.639057][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055c19e958ba0 [ 441.647797][ T31] R13: 000055c19e952190 R14: 0000000000000000 R15: 000055c19e958ba0 [ 441.655961][ T31] [ 441.659258][ T31] [ 441.659258][ T31] Showing all locks held in the system: [ 441.673417][ T31] 1 lock held by khungtaskd/31: [ 441.678436][ T31] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 441.689956][ T31] 2 locks held by getty/5588: [ 441.695170][ T31] #0: ffff88814d8e90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 441.705003][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 441.715298][ T31] 1 lock held by udevd/5827: [ 441.719893][ T31] #0: ffff888025033358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 441.729800][ T31] 1 lock held by udevd/5844: [ 441.734460][ T31] #0: ffff888025155358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 441.743745][ T31] 1 lock held by udevd/14522: [ 441.748487][ T31] #0: ffff888025157358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 441.758316][ T31] 2 locks held by syz.1.4304/21756: [ 441.763510][ T31] #0: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 441.772610][ T31] #1: ffffffff8df430f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 441.783902][ T31] 2 locks held by syz.4.4305/21761: [ 441.789669][ T31] #0: ffffffff8f331590 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 441.798399][ T31] #1: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 441.808487][ T31] 1 lock held by syz.4.4305/21769: [ 441.813613][ T31] #0: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: rtm_new_nexthop+0xe96/0x8140 [ 441.823493][ T31] 2 locks held by syz.4.4305/21770: [ 441.828982][ T31] #0: ffffffff8f7d1830 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 441.838603][ T31] #1: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 441.848271][ T31] 2 locks held by syz.4.4305/21771: [ 441.853476][ T31] #0: ffffffff8f7eb298 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 441.863049][ T31] #1: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 441.872236][ T31] [ 441.875233][ T31] ============================================= [ 441.875233][ T31] [ 441.883734][ T31] NMI backtrace for cpu 0 [ 441.883757][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 441.883778][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 441.883789][ T31] Call Trace: [ 441.883797][ T31] [ 441.883805][ T31] dump_stack_lvl+0x189/0x250 [ 441.883833][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.883852][ T31] ? __pfx__printk+0x10/0x10 [ 441.883880][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 441.883901][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 441.883922][ T31] ? __pfx__printk+0x10/0x10 [ 441.883946][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 441.883972][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 441.883991][ T31] watchdog+0xf60/0xfa0 [ 441.884011][ T31] ? watchdog+0x1e2/0xfa0 [ 441.884034][ T31] kthread+0x711/0x8a0 [ 441.884058][ T31] ? __pfx_watchdog+0x10/0x10 [ 441.884075][ T31] ? __pfx_kthread+0x10/0x10 [ 441.884097][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 441.884118][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 441.884137][ T31] ? __pfx_kthread+0x10/0x10 [ 441.884156][ T31] ret_from_fork+0x4bc/0x870 [ 441.884175][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 441.884198][ T31] ? __switch_to_asm+0x39/0x70 [ 441.884211][ T31] ? __switch_to_asm+0x33/0x70 [ 441.884223][ T31] ? __pfx_kthread+0x10/0x10 [ 441.884243][ T31] ret_from_fork_asm+0x1a/0x30 [ 441.884276][ T31] [ 442.026061][ T31] Sending NMI from CPU 0 to CPUs 1: [ 442.031868][ C1] NMI backtrace for cpu 1 [ 442.031882][ C1] CPU: 1 UID: 0 PID: 5186 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 442.031900][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 442.031909][ C1] RIP: 0010:skb_copy_datagram_from_iter+0x607/0x720 [ 442.031933][ C1] Code: 90 e9 1f ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 33 ff ff ff 48 89 df e8 35 39 02 f9 e9 26 ff ff ff e8 2b 84 9c f8 eb 19 24 84 9c f8 eb 54 e8 1d 84 9c f8 41 bc f2 ff ff ff eb 47 e8 10 [ 442.031946][ C1] RSP: 0018:ffffc900031c7a18 EFLAGS: 00000246 [ 442.031960][ C1] RAX: ffffffff89237d7f RBX: 0000000000000049 RCX: 0000000000000000 [ 442.031971][ C1] RDX: ffff88807e640000 RSI: 0000000000000000 RDI: 0000000000000000 [ 442.031981][ C1] RBP: ffff888042399640 R08: ffff88806df38048 R09: 1ffff1100dbe7009 [ 442.031993][ C1] R10: dffffc0000000000 R11: ffffed100dbe700a R12: 0000000000000000 [ 442.032003][ C1] R13: 0000000000000049 R14: 0000000000000049 R15: 0000000000000000 [ 442.032012][ C1] FS: 00007f9c0b8ecc80(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 442.032025][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 442.032036][ C1] CR2: 00007fbef85b12f8 CR3: 0000000030180000 CR4: 00000000003526f0 [ 442.032050][ C1] Call Trace: [ 442.032056][ C1] [ 442.032065][ C1] ? skb_put+0x11b/0x210 [ 442.032082][ C1] unix_dgram_sendmsg+0x522/0x1850 [ 442.032100][ C1] ? kasan_quarantine_put+0xdd/0x220 [ 442.032126][ C1] ? kfree+0x19a/0x6d0 [ 442.032150][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 442.032167][ C1] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 442.032194][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 442.032209][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 442.032228][ C1] __sock_sendmsg+0x21c/0x270 [ 442.032248][ C1] __sys_sendto+0x3bd/0x520 [ 442.032263][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 442.032297][ C1] __x64_sys_sendto+0xde/0x100 [ 442.032313][ C1] do_syscall_64+0xfa/0xfa0 [ 442.032333][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.032348][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 442.032362][ C1] ? clear_bhb_loop+0x60/0xb0 [ 442.032379][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.032394][ C1] RIP: 0033:0x7f9c0ba3c407 [ 442.032406][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 442.032418][ C1] RSP: 002b:00007ffc7eb62ca0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 442.032434][ C1] RAX: ffffffffffffffda RBX: 00007f9c0b8ecc80 RCX: 00007f9c0ba3c407 [ 442.032445][ C1] RDX: 0000000000000049 RSI: 00007ffc7eb62de0 RDI: 0000000000000003 [ 442.032454][ C1] RBP: 00007ffc7eb63210 R08: 0000000000000000 R09: 0000000000000000 [ 442.032464][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc7eb63228 [ 442.032474][ C1] R13: 00007ffc7eb62de0 R14: 000000000000002e R15: 00007ffc7eb62de0 [ 442.032495][ C1] [ 442.333125][T21770] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 445.405876][ T5197] udevd[5197]: worker [5844] /devices/virtual/block/nbd5 is taking a long time [ 446.435872][ T95] block nbd0: Possible stuck request ffff888025110000: control (read@0,1024B). Runtime 360 seconds [ 446.447043][ T95] block nbd0: Possible stuck request ffff8880251101c0: control (read@1024,1024B). Runtime 360 seconds [ 446.458543][ T95] block nbd0: Possible stuck request ffff888025110380: control (read@2048,1024B). Runtime 360 seconds [ 446.469922][ T95] block nbd0: Possible stuck request ffff888025110540: control (read@3072,1024B). Runtime 360 seconds [ 447.721988][ T95] block nbd6: Possible stuck request ffff88802538e000: control (read@0,1024B). Runtime 60 seconds [ 447.733147][ T95] block nbd6: Possible stuck request ffff88802538e1c0: control (read@1024,1024B). Runtime 60 seconds [ 447.744592][ T95] block nbd6: Possible stuck request ffff88802538e380: control (read@2048,1024B). Runtime 60 seconds [ 447.755961][ T95] block nbd6: Possible stuck request ffff88802538e540: control (read@3072,1024B). Runtime 60 seconds [ 448.425924][ T5197] udevd[5197]: worker [14522] /devices/virtual/block/nbd6 is taking a long time