last executing test programs: 5m5.681562686s ago: executing program 2 (id=2080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/uts\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x8005}, 0x0) close(0x3) 5m4.734106048s ago: executing program 2 (id=2096): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20000020008b180000000200000005003d000300000008000a0100000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x18, 0x0, 0x0) close(r6) socket$can_j1939(0x1d, 0x2, 0x7) getsockname$packet(r6, 0x0, &(0x7f0000000080)) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r7, &(0x7f0000000240)={0x27, 0x0, 0xffffffffffffffff, 0x4}, 0x10) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x2, 0xba, &(0x7f00000001c0)="139d", &(0x7f0000000280)=""/186, 0x2, 0x0, 0xf9, 0x58, &(0x7f0000000380)="345a603ff6a4355a73bb3a92872bccedea4b1929a9d45d6d9e681aa0b6787b355dbabc273f1f3e239d28f1b264215f3acaa3160503078334dfe31d1cf17c95060df3768caf8edc760d3ee120f2ff1148eb46fb0c02cea0497f6ae63600b39784bf45cc8593c9f296f0450608a3e74b1af2d461b7dab4b74a69e756ee2b5335911d970015621ca2a3b8cf9ed7f4e3987efeb03bbd1c0f494416d4206677831232a2150b15284bd8da2a243bf83e3451dec61d7a6a7a9d480f6446ec5011d6debd014bb6b97c3a91f3b350c9403bca3a22a9614b9441a23d1771f48e06fac4e08f8894c855f3df1c0e2cf7d8fe084577e2cdd9c29409d1a73aaa", &(0x7f0000000480)="e296dd90f95ffeccb619b2deed3d636c8b878f7ecfaf13b998178d33dc327344f589f9bf6da5f9a3e0b230698a8ef47ba583939ab5d3d9b95b40a6a7c73cfbfc3141373d5e557aa1c57fbca78963a766f5ddaff848dac581", 0x5}, 0x50) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x80}, {0x6}]}, 0x10) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888010500001c0012810900010000000c0002800500010002000000000000000000"], 0x3c}}, 0x0) 5m4.650744471s ago: executing program 2 (id=2099): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}], 0x1, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001bc0)=ANY=[], 0x11a0}, 0x1, 0x0, 0x0, 0x8040}, 0x8080) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, 0x0, &(0x7f0000000380)) 5m4.538615432s ago: executing program 2 (id=2100): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) 5m4.381801029s ago: executing program 2 (id=2105): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000ff8400000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) 5m4.013213378s ago: executing program 2 (id=2111): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040040}, 0x40840) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200026bd7000fcdbdf251900000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000200000000000000000006000100000001000000d9fe0300", @ANYRES32=r0, @ANYBLOB="0c000600020000000200000008bcf34b83eb52cdf7e6649900348d190615b7d7f37d4daf7ca100f03f2815904ec4570506bf4339024b28ed67382dbfab6ae78631e27e02094e429a87b1d368530c3549ed3ff153572e06d383598dfda1fd3f759e7769fc5f35ecc05e8d7cbcb7ee18e2979d15c76503f6fd9f406b98bae2af1f4e6b230f15ee292b896431926845b472654c4cad78fdaea45092a624403185295b4b909b639029cb5d7d3a531d3924a4dae3d57ccfe2743a680b0fa951475bf415abfc8b1db0581db28ecd32dcf810649789c0fb77af3bc4aaaacd4a44b969ba0f44cb"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x140) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074f55a38374f09afe500028008000240000000012c0003007339f2f10455afb9fd563a3cf7002a5bd672bad09dfb78c7699c74e891a0c700000000009528cb3a5b67bec12cabd33b4c000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x845) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xf}, {0xfff2, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x28}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@delqdisc={0xe0, 0x25, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xf, 0xfff2}, {0x9, 0x7}, {0xb, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1000, 0xb}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x252}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xd, 0x7, 0xffffff80, 0x2, 0x0, 0x3, 0x3}}, {0xa, 0x2, [0x3, 0x8000, 0xc]}}, {{0x1c, 0x1, {0x9, 0xf, 0x7, 0xc1a, 0x0, 0x85b1, 0x9, 0x5}}, {0xe, 0x2, [0x5, 0x3, 0xffff, 0xfb, 0xfffa]}}, {{0x1c, 0x1, {0x61, 0x8, 0x101, 0x6, 0x0, 0x2, 0x0, 0xa}}, {0x18, 0x2, [0x8, 0xfeda, 0xc, 0x5, 0x3, 0x0, 0x5, 0xb, 0x6, 0xfffa]}}]}, @TCA_RATE={0x6, 0x5, {0x4, 0x81}}, @qdisc_kind_options=@q_clsact={0xb}]}, 0xe0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @broadcast}, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) 5m3.792507519s ago: executing program 32 (id=2111): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040040}, 0x40840) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200026bd7000fcdbdf251900000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000200000000000000000006000100000001000000d9fe0300", @ANYRES32=r0, @ANYBLOB="0c000600020000000200000008bcf34b83eb52cdf7e6649900348d190615b7d7f37d4daf7ca100f03f2815904ec4570506bf4339024b28ed67382dbfab6ae78631e27e02094e429a87b1d368530c3549ed3ff153572e06d383598dfda1fd3f759e7769fc5f35ecc05e8d7cbcb7ee18e2979d15c76503f6fd9f406b98bae2af1f4e6b230f15ee292b896431926845b472654c4cad78fdaea45092a624403185295b4b909b639029cb5d7d3a531d3924a4dae3d57ccfe2743a680b0fa951475bf415abfc8b1db0581db28ecd32dcf810649789c0fb77af3bc4aaaacd4a44b969ba0f44cb"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x140) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074f55a38374f09afe500028008000240000000012c0003007339f2f10455afb9fd563a3cf7002a5bd672bad09dfb78c7699c74e891a0c700000000009528cb3a5b67bec12cabd33b4c000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x845) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xf}, {0xfff2, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x28}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@delqdisc={0xe0, 0x25, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xf, 0xfff2}, {0x9, 0x7}, {0xb, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1000, 0xb}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x252}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xd, 0x7, 0xffffff80, 0x2, 0x0, 0x3, 0x3}}, {0xa, 0x2, [0x3, 0x8000, 0xc]}}, {{0x1c, 0x1, {0x9, 0xf, 0x7, 0xc1a, 0x0, 0x85b1, 0x9, 0x5}}, {0xe, 0x2, [0x5, 0x3, 0xffff, 0xfb, 0xfffa]}}, {{0x1c, 0x1, {0x61, 0x8, 0x101, 0x6, 0x0, 0x2, 0x0, 0xa}}, {0x18, 0x2, [0x8, 0xfeda, 0xc, 0x5, 0x3, 0x0, 0x5, 0xb, 0x6, 0xfffa]}}]}, @TCA_RATE={0x6, 0x5, {0x4, 0x81}}, @qdisc_kind_options=@q_clsact={0xb}]}, 0xe0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @broadcast}, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) 2.756801783s ago: executing program 1 (id=4762): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, r1, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x21}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4045}, 0x4040001) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) 2.724311669s ago: executing program 3 (id=4763): socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (rerun: 64) close(0x4) (async, rerun: 64) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="17000000002500000000f100000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.539577024s ago: executing program 1 (id=4767): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000280)) 2.346762698s ago: executing program 1 (id=4771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x2d, 0x0, 0x1}, {0x40, 0x40}, {0x6}]}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd2a, 0x0, {}, [@FRA_FLOW={0x8, 0xb, 0x2}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000380)) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r6, 0x0, 0xfffffffffffffdff, 0x7) readv(r5, &(0x7f0000000000)=[{&(0x7f0000000100)=""/70, 0x46}], 0x1) connect$tipc(r3, &(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000003000000000000000000000604000000002e00b9dd75f41f5abeedfe88e502874fb556c92dfc10ce4f455787f133c7f5f565db85f6b7fac5981c02c6698099819ee473f1707e4a993a33df56483fedc676d6c17f025cb84d3148177b154f40bd49fe540ce1e2e2895fd1f9673c"], 0x0, 0x27}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x4, 0x2}, 0x10}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8000, 0x1, 0x2, 0x1, {{0x2f, 0x4, 0x0, 0x11, 0xbc, 0x64, 0x0, 0x81, 0x2f, 0x0, @broadcast, @loopback, {[@lsrr={0x83, 0x7, 0x8c, [@broadcast]}, @cipso={0x86, 0x10, 0xffffffffffffffff, [{0x5, 0xa, "974ba37b6fe38a61"}]}, @timestamp={0x44, 0x14, 0x7c, 0x0, 0x7, [0x0, 0x80000001, 0xfffffffa, 0x1]}, @timestamp_addr={0x44, 0x44, 0x93, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x39}, 0xffffff29}, {@rand_addr=0x64010101, 0x5}, {@loopback, 0x3}, {@multicast1, 0xd7}, {@empty, 0x40000003}, {@remote, 0xfffffffd}, {@multicast2, 0x1}, {@empty, 0x1ff}]}, @generic={0x88, 0xd, "8d3173aab62cb03663ce66"}, @generic={0x82, 0x7, "8e6b1f951d"}, @timestamp_prespec={0x44, 0x24, 0x9a, 0x3, 0x3, [{@private=0xa010100, 0x3}, {@broadcast, 0x3}, {@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}]}}}}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @local, 0x4, 0x1, 0xb2eb, 0xfe819c4ed6ba1bbe, 0x2, 0x40000080, r8}) 1.917363386s ago: executing program 1 (id=4772): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) getsockopt$MRT6(r3, 0x29, 0xd0, &(0x7f0000000380), &(0x7f0000000400)=0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x3c, r5, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xc}, @broadcast, @broadcast, @random="7aba05c5d6f1", {0x6, 0x7fb}}, 0xb, @void}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000129bd7000fbdb760567d956e2df253a"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x24040000) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0x1270, r5, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xfff, 0x40}}}}, [@NL80211_ATTR_TESTDATA={0x69, 0x45, "15712fcd06ebb3df7717ed1c695af8446d269cb9a40a4f8831fefc939d16f78427a4cfa65ed5f3e00ea4f1266f13eca539edc0ac012dedfd8b16006cb612e023ed544bedefa594d86c097e094a1a724e3a300f03522a6dcdc2d8f3837a98dc7b6a521697d4"}, @NL80211_ATTR_TESTDATA={0x21, 0x45, "42f8c465486e5ea3ce61ba0258238eead6c753b7a513c2b1bd0eefb147"}, @NL80211_ATTR_TESTDATA={0x1e, 0x45, "8e307a4264693eb3f9fb47aa855dfad7b5e8c10bae5abf6c94bb"}, @NL80211_ATTR_TESTDATA={0xce, 0x45, "e1e47e72fc096da25eb77d1cab9c540dd95bbc7322a0e897c492dcd7694e806754426f552cfa6ce893665facb98f31fbf13941af2ff9ffdc23cd00967802012aa1b33a99d08c767bf0c159443825504ad8ceca439de31b05809f46bbffaf410e4a7d53eaa83c58d619c621b4b05f2979da8acd05f94e8fe7ed432ff072207bcf247532efe1106116542c21c62c46b57f463f81b402dba77980f93aa8afa9a9aa714e8abfe38eba35efb8fca8c863aca914f512344782d7af62844a195f6cd6d42072107781e68dd7ca1e"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0xa1, 0x45, "d7f2641e9923455634f01eec64bc79302846bff7317cb85acc6e083d5417173fff999eb0fcab15e2de1e45b6c6fda037627337c01b45ba9ea47af553bc86ec2fc19c331b61baf557a0e2bedfd280f7f3b77e84e231ae42b13f240a1b7cacfc9cf8eb779c78c8db11d70ba7dc613e8291beae6372587031b6505cc47ffddda189176f377d71d5e350a7191d26958c8d9f308a23ecb6d04c39f02ee259dd"}, @NL80211_ATTR_TESTDATA={0x20, 0x45, "16bdb4ffa966202665d37400a3ec8418f17776d1fdb1dac0ecd64ad8"}]}, 0x1270}, 0x1, 0x0, 0x0, 0x20060040}, 0x10800) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.554861591s ago: executing program 4 (id=4778): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x5) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004e00ff13"], 0x14}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe001, 0x2}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe001, 0x2}}}}}, 0x0) 1.544688116s ago: executing program 1 (id=4779): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x5, 0x4, 0x4000000}]}, {0xf, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb0}}, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080011"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.398659849s ago: executing program 4 (id=4782): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000"], 0xfdef) 1.063931887s ago: executing program 5 (id=4786): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)=0x0) (async) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000540)=0x2, 0x4) (async) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x4000000}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) close(r0) bind$nfc_llcp(r3, &(0x7f0000000140)={0x27, r1, 0x1, 0x3, 0x1, 0x8, "78f2ebf955259167998611dbf4cd5eacffc1248a431b2e630eb3484cc0f08cd6f302d61e6443937bb2c9fdf08765a7446e8d362146518347155c6b4ec50365", 0x8}, 0x60) (async) r4 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@empty, @empty}, &(0x7f00000000c0)=0xc) (async, rerun: 32) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=@newlink={0x3c, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x2e, 0xb, 0x0, 0x0, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r8}, @nested={0xb, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}]}, 0x28}}, 0x8000) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r9, 0x2, 0x0}, 0x10) (async, rerun: 64) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r11 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r11, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) splice(r11, 0x0, r10, 0x0, 0xfea8, 0xa) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)=""/4096, 0x112, 0x1000, 0x1, 0xffff8000, 0x10000, @value=r10}, 0x28) 994.505158ms ago: executing program 4 (id=4788): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000080)="c3b6ac3e0a21", &(0x7f0000000380)=@buf="95abb169bf48146718347a67563930d4e2184bc66adf2a2fafb1eb0836ef130b749f7d82dda26d3973ef6b7fa0a0b4985eca2579f418bf10cc84f07d2636b81761601c039c31dc1ae917385e81e5829f7b92fa6ae420786ae8dc9d7eab63cdea4d9171c3d4a6cd2ee1f91076335a79ae94666de29d4682f47dd4f51ea2a208a9678ff1ff12b65f2ff99fd490bc3a8cb5c1b74f5abe88015cef0b42692d1e16630d5d1b59b3c3b79625ed8d6d6c5b189df2e7278b90c112222339"}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x27, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) r3 = socket(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x52, 0x0, &(0x7f00000002c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x20, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x880) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@remote, @dev, 0x0}, &(0x7f00000001c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x9, 0x2, 0x41, @private0, @private2, 0x40, 0x40, 0x9, 0xfffffff9}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x78, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x78}}, 0x40080) 923.081164ms ago: executing program 3 (id=4789): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x6, 0x668, 0x9, 0xe, 0x5}, 0x14) sendmsg$inet6(r1, &(0x7f0000000280)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)="caf318fb4430976fbc26b22624d5412173a21314561c85fd93a319", 0x1b}], 0x1, &(0x7f0000000240)=[@tclass={{0x14, 0x29, 0x43, 0x8}}], 0x18}, 0x20000800) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x9c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x6c, 0x2, [@TCA_FLOW_EMATCHES={0x68, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x5c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x80, 0x7, 0x3}, {{0x0, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0xa, 0x4, 0x8}, [@TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="0239290a0115c9f9f0"]}, @TCA_EM_META_LVALUE={0x7, 0x2, [@TCF_META_TYPE_VAR="a1cabc"]}]}}]}]}]}}]}, 0x9c}}, 0x20040054) 820.93576ms ago: executing program 5 (id=4791): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000000000000100000400000000010000000400000003180000002e5f2e"], 0x0, 0x35}, 0x20) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="08000300", @ANYRES32], 0x60}}, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 283.841952ms ago: executing program 0 (id=4792): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) recvmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x3}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x8, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x5, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x57}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0) 282.974041ms ago: executing program 3 (id=4793): r0 = socket(0x5, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000052000100fcff0000000000001c"], 0x18}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r3, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x44) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 281.457108ms ago: executing program 4 (id=4794): setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x400, 0x70bd2c, 0x25dfdbfb, {0x2, 0x20, 0x10, 0x7, 0xa2, 0x0, 0x0, 0x7, 0x4}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000001c0)={0x1, 0x200, 0x42, &(0x7f0000000140)=""/66}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000002400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000023c0)={&(0x7f0000000280)={0x2104, r2, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x5b8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x124, 0xd, 0x0, 0x1, [{0x57, 0x0, "44f87459474e1187a6b46c5336b93f47ca61e059a3c0d32176ce2597803ad82b0258500bacadbc98b450d702b06c00dd070953f2292c61d832c42ca7b13fec08b1db96b8652d1c2871f956e3b1ddcd03e92ed2"}, {0xb4, 0x0, "041043a69ee027cf49be661726e375f38106accc4154a81a5d6f60dc2f88d832d51aef389ca3c7229eded507a27812d0c0bb971f3aa6f74ee4599f46ecd8cad1917e8f9f14319825f2efea28bc237ae89979ac949f1516044855063c8ef2d5aeae5e917aeae1c8a5018bc0ad130f19ec2d7af0471e55ba788704f6fdfbde2ad05ca194af0dc180ff2bbd98b09d2616dbfc564f5f7c34c76f45e1253060565d772cebbd4da8d9d62eb687919989af2781"}, {0x13, 0x0, "65dc0229be561867911db66f2155b9"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7f}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x47c, 0xe, 0x0, 0x1, [{0xe6, 0x0, "4df836137495a66f44913ed07a89f155c1f09d6c78e5a5394d45438d08bff4d3b80e8f61c83d30ab282ce49bfbb93a4184df6b3e7557ee832061540c569370d659dc51bac1841957e53b8fdf2dde11d6c59cfd095e1210aac625596354ba750a22b006d8cdefb669aff9096ddcf7e46701c397a6b35e6451f8fa14fd751e3b1aae40e75f1f3ef9197874334a28f2c32d51a7b40caefdc62e3bb97bb375968fe27f22fab8c78a7b907e578426210148de4c45394c1f5a54f1fb7b5763d6a9f2478c4a39ac9116f97ec43f39085859e1be70569927136eff570d11e7397ece30202a02"}, {0xf6, 0x0, "c64f0732c691df882414ba7e58837002b89f52f21ca07365421c0e3c581d66b20e2a1633c10bd2bb5a79289bae9edc285a4c4182c9d28c9956c95ec9d790c9c0f2ff6e5790eb0a1338cc2c68d7b0dac5d66095801a543a0105a264380efe4878645145f9d4472ebe722fa9e8fe677e1ccda7bc3d404b2ebc18df198f2635c0eb436ef3cc0ba340c326e5b9696c05ea18276306dcbb4aa9fbce96d34ca750d70f69613ca0b2dd9ded84d915570d4295317b202441749ed00d209cb284e494862f9c492bf118573cb92ec054299c30da5a3c4c1677becc18502d37eb8b2524e92be56f8b1b6b946fcee5367672f6cf0bff92f8"}, {0x72, 0x0, "5e291377932719e91cadb59f8bd21a467432abebb0a7559ac32040404e501b4c580f280ab87936ad415e5a330100de21729000b5bfda7f3442af647a75b0f6d341003c9e59fc04fb545445098e2aa2a8bb50de5af75387b74bb643608467f6c80d3df72345cf69ce9135f8b64ee0"}, {0x66, 0x0, "1c3f9216fa3fb69cc9f1b68689100b6a66bd5c930eed615fe68cb8c93d837d087d85070cdafa3888b280d4cb97147b35751a32aa3695405447a1d77485eb80ad0112c1fe3e5a2fcab649f6464d7446612bcf19915ced16b6b0046f53afa6d3bd99bb"}, {0xfa, 0x0, "c1a38e46d3cc46dbdec72df78ce6430935568353b6b18051f0cf923e84893b24df8388918acf897c251dd59234c82577072bbbfdcce09bafd1c7844124e018586631520068aa28f354a6a37831d12b4278c4666f52632aa4556257d7d48a9f3cdab196d7a9d068fedb396150f078b306ef9e82ce0ad791b257d5c66d6a045361652c430cf9d3c9e55271a1782a797d9bbe752616477fec21f7757bc8406c863187ead2ee533383ae699f755df9c80969cdd08afc8841e48a3406145b38bc683aa2e1af5f4563934cdcd25515d1ccccf9a7e0436bdfdecfe1a79d4dcb0c6f0cf5d5d461f611768a8ee5e610110a76a3ac74c48a902504"}, {0x2d, 0x0, "3798ae2994d3f4f0509d10c885ec4cc0f1a3e2e89fe98eae318796f32c94483333e2a40ea70f1111ce"}, {0x29, 0x0, "3d76e21693f29c607f36652e775463917d2b18286544469c48a059cdda00386256ab18c754"}, {0x4e, 0x0, "a93d22d8e9487d43d4528b0d7758ef833388a2906290e0887bc0ff700fc8f51d2b4678b69e744e2f315cf00bab77c3789f3c6800a429eafce05687b10900f1ff5e536d0574d00318f712"}, {0x11, 0x0, "c542639f8f142cafefb17581cb"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xf9}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xac, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x90, 0xb, "10ad44300c520800b371a7d426dccc1c83105a2c473933ec1cc704ec6db6999ea505ab24b42f37a3d1ecaa2479270c492d3f76667a111a36102b09aea5bd458610887b60acba8d218dd1037253cdcc9e1b7051696279c99c1128a2af7ade6977e563eeb1e88553e9312e1838fe752071c2bc52a9767cb3a2beb58e6197bd74157cfaf7a0b7f30974adbdd11e"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x40}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x224, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x21c, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "107a2818c6f3753dcf637084fd2e8ae166a9d75e48cdd6d5b58901067505ba36f0d5c5ffff48c3ac23869baf27a70c381739ededf5d65978f0ba2a84054df25805a683f2d051f5cfb3ef67d9e691732a46b709fc405f3ff009934f4bc3a52e48343bc32c312a2fed0134b5da2f23cd263fb463041514af6783963d908232cc951ee9d33637616b8a5b05e3767cc9f2d192163eca3554411da9f2ee98ce082e746082a533a51426f27b19dfec7fdf9dcdca223b8f5056531904949dfbef55d292a0505ca475ddb57c2625b19ba27e7792a4fd0c5d5fdc7ba017e99d2f2c0dc2c49252417bc211cf592d2b563d65fe2a1d953952bd1e26a661b3eb2d46466a58"}]}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x1860, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x13b4, 0xe, 0x0, 0x1, [{0x13, 0x0, "a173b38799171e4c2d04636b188366"}, {0x1004, 0x0, "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"}, {0xc5, 0x0, "77fd46d5a05a0d15421c8a6e046a5ca6831411f9bd32289fbc0a988889c1adce23694e3bdfc2aba5ee634187d548d30b1bbd1353aa32b50726525fa6d8463339a3d06e5ae6937b6b4207ef06af4770dfa220ece099e6f81c780bf439959820b97ca847845bb3a985c3ac09a4f271362aaf6f87a0bdf2ba921e30f30b9851686fbc2bfd5e154bb6f90252184e14edfb66deeb21f4e72d262594aac978f2327f43ddcf89ab4e5e865e3d83c72940422e56417a33d0349d28ed6110a27c8fb8067bf4"}, {0xe1, 0x0, "72f58543d402444e1f397ef36e9630c28c39c4f9e335e4f42c4b3d60efd4adb6253924d25eccddb2346ade9df200c96a06f7c0a9ecd33b4431be64995b2c6153fb3d227f621bcb42b25b4b3692e5a98dfb104d98fbcfa143f86c241b260d0ff1f66d0b06b07cf571f7425c7d729fa5604f42a02d09284b7c61fafebd292f1ca360dda8331b690cf26ec302e0f5c219eafb42408832517b01dd675c86d9de31cf1fa8986c6ea255a7e7aba1f59bc32d4965873a01d6cbcbca979e327a02a0b94cb53016c4dee5a5b312f3300fcc3ef104c9fccf1657e571416e5ee5fd60"}, {0x82, 0x0, "e28067959cf05a49658d4bf30cfa6a41b79744266a48d3540ff56405af9612aca4bf6cc1b8fb017b45edbe4fff6d5b4273be5a58d8092fc8e932bce404506ef4392e8da6746ffaaabfea3c4229501f4210ce8343a61006175dbac5ca408970dca65426cd074ea1436328dd94510dea0652cc4805b0673b00a66cb3a690f8"}, {0xd8, 0x0, "5c500637f5d595132a1412ff8627fd4d9b3a44878796f44807ccb5e6950d2881f7ab98b9cf25c3b8191126e31ce21c20f234e8b4e6c049b6951c27ff3e5ecaf637bcd8a7607b6e809610596fdcb230f5f76302750a14ef317b86d9ef54ea7b89ab149ed6b25b45cdacd36f54db83756ab72bd8ecb6c49f69b3d26d700b03be1c072ce220107ed1defa65d6c8b989d7b9fc2dbcaad6f2ad12a7a6b57f2eedc03c3798a07383c4969522f76a2830dd97cb0512216bbea7434cd49ab5665d948c0d6e45d4700eb30b26a4122b76039f03a680d8f3b3"}, {0x8e, 0x0, "a1afaf5dc5d7f8c485d5664791918bfa686976d2ed48d1b5860dca96b58513e872c402704a27ce8c53d0a1b9f31402e3681c3236b30dd2b9507c527555c469c1e03a4b235886c92a4e6eae652588f51271d3aca63efafbbd3cdc561d6981f0196d0c64059c4537ec35e643ff1c532e602218374dd75999977bb445cc7ba27c8f8807c77ae262adea695b"}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x42c, 0xe, 0x0, 0x1, [{0x93, 0x0, "82f4a3d4287698d4708575e94f334dfd0f9fdf77a99a9cee97ba61839dceafb093361098090a497d9658af0fca857f6026f77a0ea414674ccb8e713ff10c3db930c38c07022f3ea5fdc6374f6fad9b3ef5bb7d70b824159ccd73823dd864b23673ec717eb0b332550c148a035053a9588306984271323d1966c53ca1840cf066f40afe620d592a763cf6963b907a15"}, {0x8d, 0x0, "b188890f8374d41255cd06752ea47fa79683988aecaff90733d7116c6441b347284b26125f91079212007c5cf1dcc9703b54850c20eb53359be2b053fb65c7030cdd20b946461642275713b6d2e44ae85371e6e96ccff9be5994d361eaacb6e99eb2a91a618fcd91a2878def782ffee72ff1e3dbc7d08e5c8cc26b29b703ec4f6de145be98299e8610"}, {0x34, 0x0, "92145f5d805c384d4f7eaa9d0c0d7a8a6ecc71b16ac5eb17efbf69396132911befdd111a1f7b3bfd09f719e0602734b9"}, {0xe6, 0x0, "9aebca730abec3891fb46072a949a5dbd93b362654ab486fb6f590f49e60d1c4b127ea0eefda190d32303d03c6ff1b082fc6786de357033ade273142960380dcee0cd1198ea5b9abf2b35d5f1cab1c463053cf486fc8bc2b9b023b13c57c06924c9512530c32aadab06f0bc18b3bdc23a05bf51ca942c15d4233e9a04f45a29c179dabe5bb9e12b49d9bcc1b4e10d674d63f592f880629c75ddda0719eb8f42bdafe6fb362db8bcb866ebc650665f127ffdfca50aecbeeaae675425a4c56dd570863bce3002f3969aa23b3c0282cc3feae4089420c937438ec75511cc7faa25d9daf"}, {0xe5, 0x0, "eae4671422e980b67de66768a677c630b443953f06593957eda702cad4e5cc3570e21cd88e97173ead531f60b3c33e0bc198be93d71c43e69372939dbac4225af902ec0529fda9a94e5a0ad6f9d8755a79332aaa4ba7da6668d4bd37b85eef94bc6aa1b43844c64226dab54421883b40f8a1ae30ce1841c0b913a3d50d20d37af29f8773b9c378ae5b9e601f16a45fdb025db7084e32be78f58a669897a0b53328524c314caea96f18d80e33e67536b32d46f7a656ccd69ae6f74a146b84560d9ff6025c480721517f1789f777e739ecf830c821048e518c038691e75d62af484a"}, {0x9a, 0x0, "a1dce977f4b6f17ee3e08c6410ebb6cc064c7d44f556cb6963a62b0ad1bf396f38e18cca6da92507076a42d4901dfec09b2ad1df7535f948fe541f2c739327354a1c32b478912760a8385e27e50827fb785dfd467cbee7c4f58e3cdac851a73779c442cbbfe31c64612f68738d5ad29aaf136e3a72f9966212d68c0b4e1a885dc2f9e2a3d1c72ed23f4fbcf1241055de1da8dc11a429"}, {0x63, 0x0, "ac0120d918bd1d99f44aca29b8694230e72f7c121a943d6083896e0ff0bd6c0e339abace4d4ec7a8bb03d37cefa3f01150838ec8502e865e25aa28c28c2fe2a6e0a457c301e91dca39c79284334181a8a1311521c40eb49d1429dd03a99113"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2c, 0xd, 0x0, 0x1, [{0x28, 0x0, "0c8a7e86638ef8383df48622d9728f90977d28312b3ac7a27a22bd9e24dfd1932b0308ab"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0x2d, 0xb, "b0aac6e3c437a93a956ecee07d12a12595715b91569911e281dba53153be770c3dcfbfca7a382e7bb1"}]}]}, 0x2104}, 0x1, 0x0, 0x0, 0x4c040}, 0x40) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002500)={&(0x7f0000002480)={0x54, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, &(0x7f0000002580)="726cd10aa935df32210565f44a7f42e47b4581b10845ed8a03b9d3968476f0b54aba980729920c8146fdd420648159fc19194c63da74372576f36d917238a03cbc01939b292e2064394d716554518365a1ce9c57755d1d8921a4ee866fdf7d210c700b9c616fb1b3f28eb57189bfdde76419769506563365d717e1f2ad1fca1a1278ba581ce21c27", 0x88, 0x805, &(0x7f0000002640)={0xa, 0x4e22, 0xb8fd, @mcast2, 0x401}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000002680)=0xa703, 0x4) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000026c0)={@local, 0x0}, &(0x7f0000002700)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000002740)={0x11, 0x18, r4, 0x1, 0xb, 0x6, @random="33611b036774"}, 0x14) pselect6(0x40, &(0x7f0000002780)={0x6, 0x5, 0x9, 0x9, 0x266, 0x1, 0xfffffffffffffffe, 0x80000001}, &(0x7f00000027c0)={0x3, 0xa5, 0x20000000000, 0x4, 0x3, 0x4, 0x82f, 0x1}, &(0x7f0000002800)={0x5, 0x0, 0x3, 0x0, 0x40, 0x9, 0x6e5d, 0x3}, &(0x7f0000002840)={0x77359400}, &(0x7f00000028c0)={&(0x7f0000002880), 0x8}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002dc0)=@bpf_lsm={0x1d, 0x23, &(0x7f0000002a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@generic={0xa, 0x9, 0x6, 0x8, 0x7}, @exit, @tail_call, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x100}, @cb_func={0x18, 0xb}, @ldst={0x2, 0x0, 0x2, 0x4, 0x0, 0x4, 0x4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x9}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002b40)='GPL\x00', 0x2, 0xfe, &(0x7f0000002b80)=""/254, 0x41000, 0x40, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002c80)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000002cc0)={0x2, 0xb, 0x7f, 0x6e00}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000002d00)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000002d40)=[{0x1, 0x4, 0xc, 0x4}, {0x0, 0x5, 0x1, 0x7}, {0x3, 0x2, 0x8, 0x7}, {0x0, 0x1, 0xa, 0xa}, {0x5, 0x4, 0x4, 0x3}, {0x5, 0x5, 0x6, 0xc}], 0x10, 0xa30}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002f00)={{0x1, 0xffffffffffffffff}, &(0x7f0000002e80), &(0x7f0000002ec0)='%pB \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002f80)={0x9, 0x4, &(0x7f0000002900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10b, 0x0, 0x0, 0x0, 0x401}, [@exit]}, &(0x7f0000002940)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x22, '\x00', r4, @cgroup_sock=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000002980)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000029c0)={0x2, 0x1, 0xf, 0x3ff}, 0x10, 0xffffffffffffffff, r5, 0x0, &(0x7f0000002f40)=[r6]}, 0x94) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000003080)={0x0, 0x2c, &(0x7f0000003040)=[@in6={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, @in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f00000030c0)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000003100)={r9, 0x18}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000031c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000003140), &(0x7f0000003180)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003280)={{0x1, 0xffffffffffffffff}, &(0x7f0000003200), &(0x7f0000003240)=r7}, 0x20) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000035c0)={&(0x7f0000003500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0xb, [@enum={0x4, 0x6, 0x0, 0x6, 0x4, [{0xd, 0x1}, {0x7, 0x101}, {0x1, 0x23b}, {0x8, 0x8}, {0xc, 0xffff}, {0xc}]}, @restrict={0xf, 0x0, 0x0, 0xb, 0x4}, @var={0xe, 0x0, 0x0, 0xe, 0x2, 0x2}]}, {0x0, [0x5f, 0x5f, 0x2e, 0x61, 0x5f, 0x2e, 0x0, 0x2e, 0x43b5110a8456ce55]}}, &(0x7f0000003580)=""/61, 0x7b, 0x3d, 0x1, 0x8, 0x10000, @value=r0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003700)={0x18, 0x25, &(0x7f00000032c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @alu={0x7, 0x0, 0x2, 0xa, 0x1, 0xffffffffffffffe0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd1}}, @call={0x85, 0x0, 0x0, 0x49}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @ldst={0x2, 0x1, 0x6, 0x5, 0x2, 0x0, 0x10}]}, &(0x7f0000003400)='syzkaller\x00', 0x9, 0x92, &(0x7f0000003440)=""/146, 0x40f00, 0x42, '\x00', r4, 0x0, r12, 0x8, &(0x7f0000003600)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000003640)={0x0, 0x10, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000003680)=[r6, r0, r6], &(0x7f00000036c0)=[{0x0, 0x4, 0x10, 0x4}, {0x4, 0x2, 0x2, 0x4}, {0x4, 0x5, 0xe}], 0x10, 0x8}, 0x94) r13 = socket$alg(0x26, 0x5, 0x0) sendfile(r8, r13, 0x0, 0x575d) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000003880)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003840)={&(0x7f0000003800)={0x2c, r2, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xaf97}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040885}, 0x850) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r10, 0x84, 0x4, &(0x7f00000038c0), &(0x7f0000003900)=0x4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000003ac0)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003a80)={&(0x7f00000039c0)={0x9c, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKINFO_PORT={0x5}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xd2}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x8080) 280.66805ms ago: executing program 3 (id=4795): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000009"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}], 0x1000000000000123) (async) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/1, 0x1}], 0x1000000000000123) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$l2tp(0x2, 0x2, 0x73) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x190, 0xc0, 0xc0, 0xc0, 0x0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@broadcast, @rand_addr=0x640100fe, 0x17e7fffff, 0xff000000, 'veth1_virt_wifi\x00', 'veth1_macvtap\x00', {}, {0xff}, 0x1d, 0x2, 0x51}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wg0\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x7, 0x1100, 0x11]}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x2, 0x4, 0x2]}}}}, {{@ip={@private=0xa010102, @multicast1, 0xff, 0xff000000, 'bridge_slave_1\x00', 'dvmrp0\x00', {0xff}, {0xff}, 0x29, 0x3, 0x6a}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8000, 0x400, @dev={0xac, 0x14, 0x14, 0xc}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x190, 0xc0, 0xc0, 0xc0, 0x0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@broadcast, @rand_addr=0x640100fe, 0x17e7fffff, 0xff000000, 'veth1_virt_wifi\x00', 'veth1_macvtap\x00', {}, {0xff}, 0x1d, 0x2, 0x51}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wg0\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x7, 0x1100, 0x11]}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x2, 0x4, 0x2]}}}}, {{@ip={@private=0xa010102, @multicast1, 0xff, 0xff000000, 'bridge_slave_1\x00', 'dvmrp0\x00', {0xff}, {0xff}, 0x29, 0x3, 0x6a}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8000, 0x400, @dev={0xac, 0x14, 0x14, 0xc}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0xa0, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x74, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x3ee, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x7ff, 0x2, 0x1, 0x8000}, {0x3, 0x1, 0x3, 0x3e}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_POLICE={0x4}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) r7 = socket$alg(0x26, 0x5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000001c0)="b420b75e008ee20b8e3dd7129b8431699e5cee86acf57f10e425653b747b8bf57e6bd6568cd4aa5d95a4d894a2539f4a7d9ce34033214ff342efe40b3dd0fcd00d", 0x41) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="020c0202100000002abd7000fedbdf2505000600da9000000a004e200000000bfc00000000000000000000000000000008000000000000000800120000000400b56b6e000400000006006c00050b0000ffffff7f00000000ac1e0101000000000000000000000000fc0000000000d00f00000000000000000100140002000000"], 0x80}}, 0x8000) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000140)={0x31, 0x3, 0x7, 0x6, 0xebb0cdc1, 0x81}) (async) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000140)={0x31, 0x3, 0x7, 0x6, 0xebb0cdc1, 0x81}) 275.060322ms ago: executing program 5 (id=4796): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000100)={0x0, 0x6, 0xd}) 274.231181ms ago: executing program 0 (id=4797): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6, 0xc}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x24004841) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r6, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r6, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@ssrr={0x89, 0x7, 0xef, [@broadcast]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6c00000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c0001800800014000000000080006000400000005000500020000000500010006"], 0x6c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0x8}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 272.293823ms ago: executing program 1 (id=4798): r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) (async) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r2 = getpid() r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async) recvmmsg(r3, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/84, 0x54}, {0x0}, {&(0x7f0000000300)=""/131, 0x83}, {&(0x7f00000003c0)=""/84, 0x54}], 0x4}, 0x1}], 0x1, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x10, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x0, 0xc, 0x1, 0x0, 0x7}]}], {0x14}}, 0x64}}, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000200)=r2) (async) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x20008051) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x20) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r6, 0x106, 0x1, &(0x7f0000001380)=0x1, 0x4) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r7, 0x34da2000) 249.979509ms ago: executing program 4 (id=4799): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000400000241000000030013"], 0x2c}}, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x1, 0x60, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000180)=@buf={0x2a, &(0x7f0000000100)="73f11065b775d2c63300b6dfe3c67b2e1ec06e3e4f2e1c5550100a2482b596759d2c51685089020daece"}) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 249.793275ms ago: executing program 5 (id=4800): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x20, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x88}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x90) 249.040455ms ago: executing program 5 (id=4801): r0 = socket$inet(0x2, 0x3, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002980)={0x0, 0x0, 0x0}, &(0x7f00000029c0)=0xc) r2 = socket$phonet(0x23, 0x2, 0x1) r3 = socket$netlink(0x10, 0x3, 0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002840)={0x0, 0x0}, &(0x7f0000002880)=0xc) sendmsg$netlink(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000d40)=ANY=[@ANYBLOB="100000003200040025bd7000ffdbdf250fa51c9d548e12a464acf6f95580fb686b670f959d79814b460fac73f2c0825fed99df338cd62ea70a89a81a81954869932327a10a3c16c11624afa0e10ce70da739c8325f7ce02ba7b1576cc26aa62754c6d37e9a19f928d201b0b25f132c66a8f49991b5483f7e25a3069164f63340f3649f54dd77c4b3e6df2833f673668c56e9e362db3c0e32b880a1c5de8931c440b2579f2417b2ffc286b614705fcb52429058bebacb41d8dc4555804d5fd9606412813e6e452438071815086fa151d11ed086ed6332e341"], 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20, 0x50}, 0x40880) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = getgid() ioctl$TUNSETGROUP(r6, 0x400454ce, r7) r8 = socket$phonet(0x23, 0x2, 0x1) r9 = socket$key(0xf, 0x3, 0x2) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r11, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002dc0)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in=@private}}, &(0x7f0000002ec0)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r18 = syz_open_procfs$namespace(r15, &(0x7f0000001780)='ns/ipc\x00') r19 = getpid() sendmmsg$unix(r14, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r15, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r15, 0x0, r17}}}, @cred={{0x1c, 0x1, 0x2, {r19, r16}}}, @rights={{0x18, 0x1, 0x1, [r18, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003000)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000340)="d645e946779377c09eb3819b800149aa354333d4024f384b46e61fef4f5bb1a24e5eaf65a3d231db3d392a0dc27093392035f268bf7291d2c32275693fed9d25ea00f2da3f8b316116bdc0940050855370646480afa8383c4b3eaa5b5d1ebe13c2190e1874c72debf03272199176d2555f5c103deeffa84899fc2b1a33042dfbad6007552ab20307601b13622ab7ecdada16fceebe3c3817b09c5fd7804656f1521ae7caae1df96217199211c7ae42a4326506fd43d789cc8bdb566a1c597b6bf672867858a349f646e594538868ac7d3333c316926bec601caabe351faa4a7384bc3aab68de3996413babb7f0d3118f3807c022c722", 0xf6}, {&(0x7f0000000440)="6742347e2e781a3f1c45257d857bc98612291bb362591a58f12bf336a2d32ff5bbb8d3ceb16d8d7fd2c97bfb1384f2454d6361a746bf43978c16b5cd31fa2706577aa161177c71aeefcab03f3409a1f6f96778428ec3403658d051a1db99a71cab9a80eedd936059e1a4a6d1e42b1b8cf4d17d95733fc9d3cb889323a88bf6521d19f03c6e04d61f31f2056919534156f356bb248909f555ee63ae7b87cc3aac4617fa411eeaee8648cac2d3c5f1b6dc09e9d3b7ba1a451cb5a9986edaf21abdfd605099231741dd17eaf13a5a4bd9dec8f4272fbbe1e406519842c4a6d9d3384826cdd95dc92aaf3f4d20a054f27ac63ac02eae", 0xf4}, {&(0x7f0000000540)="018a102d4893d6bd66fa3075a461cf8f8215b1e26db3a89db8e72c92b0ea4f3be6733e8f38b1709e2315b13dd696b9cbe47c5b4fd405130ae606e51618d71a66024843f2c88bed0f249a18d694d8b42e03c411e95820b45a2bee4b3df94cd2", 0x5f}, {&(0x7f00000005c0)="74605f42f1710142474e4621859a851f9f48e5189b385b9e461a823787c8a38db6a6f5092f7102abe321d846158e2782302b665583c82f7d2bdc61d0a7240b1199b178fbeb1663cc5c95a9c2aff3f548c8a339ade9e2f76ddb174ac7715b52ebc9796a0b023cf4866546f275cedc5e2ace1e609cc5e24d3016f2c66c78779dee55d9f1e3a2e5d60ae228", 0x8a}, {&(0x7f0000000680)="8f440ea6c3f5c8ae39ee4caa5085c538a440ab2d0b5dd86ba3172512407404d35179e854be4a42f5eed7f90bf723e60602f58913f4baf77f34790f5248ec2c5546ae6cec963382a7b784b76939a68214ecffa792edbac16630b5a43b05c1634a9e233df4abd101222f4bd05108a9a568ec36c4e7d90c6fa9a8c16e23c96b726611e2f5aff2e5db0c77832a5dfbb19f3bdd8bb113d6eab84891f3137115ccf0c5069b6d08b2ba7afc75bf650d8a68978aad1a3d37fe5d", 0xb6}, {&(0x7f0000000f80)="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", 0x1000}], 0x6, 0x0, 0x0, 0x14000}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000007c0)="7c1396fc207d01a6cd98fa09d53ff4246d25e779a959a999a06a11904b8d18ac88cb39cc789de503c19a2c62dac614f39b4dc6336f311c19f5aa7e09e140b3a99c25773d1169144ba015e56fb794df12", 0x50}, {&(0x7f0000000840)="f2fe2720980d0a11fad0d333827c46cbb082abd3315c9dd785dbc09c398465081fa65681f57f471e4b2ba8fe4477ff970d082b108acc31befa0f361056eed0ed90aa37c75f2294206a765dff0d10fba32c30d6fb80c4012b9905627a0b80d850a1ab5c4a20354cc765ee55548bfdd65de6acf287b38dcc55a9cce807c845969b086a2c70f8fedbd45b0758986cc03a19399e6587", 0x94}], 0x2, 0x0, 0x0, 0x1}}, {{&(0x7f0000000940)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f00000009c0)="51465c2bff18fc91f78801372ea3d3905a8cc1768fcc344a69f222d2afc93a9b9850ae79fd091a091923fe5713bf3d45c0e2b1dad881913bee3269bf8dbd9561443b8474636d8419c2e787333691ba366d2760e73f3202291b9f", 0x5a}, {&(0x7f0000000a40)="572fa4ac7ad38175f9ffcaca9633aaa6d52e91defeb3a7cf131afc95c2475ac10e782e6fdf0b12ca", 0x28}, {&(0x7f0000000a80)="62d41d44ab223e0474417a56092ded67f538f28b9b7075d87e06fd1bba7660fc2e5510edce733e63a922e336c3e65711eed1d3084c90a9ade5766885fbb8b545b9d1fabf5c9214565582b26f3886f0badc5d34db1b3b9d490c475d4105832ffb667df2c818770ed714c0534f93bf33438bdb20650bd63f6cf41930a37f7b3fa2a24a366537b2886d0ef33503d937b9c22136eb12ac52e65beac72bd6", 0x9c}, {&(0x7f0000000b40)="c8a25dc8ebbc6a249252fb0312cb29834cb90298d3c2966a07b1c6848bf02573f7bde7ca1aebb80d612ba973769120323d41a5af7e83b2a451338da4628d0dcafd33f0df712a957c161e55d37c1b1663105a16234c572ea1675e579b98ab91ad475f70885c4e5d5b3e61de11272cbf6d85a54414d1ee4848b54185ab8fa2a943d2d7adcdd1", 0x85}, {&(0x7f0000000c00)}, {&(0x7f0000000c40)="2e1eb3c88071f6ff2943704bba09132ccdb7671f832e96ca916f41d0f6b2cc8bcce97a7affd390e579f903d491ab635daec2fa04b8aeb4eb934531090c8ad9b77e25a028174f65dcdaf1d62972b10344974ed058c15fdd913d9a718caf900e9f757ac4b4c70608919f8af03488e654bbe5bdb766030e6bed1ff2daf2e8", 0x7d}], 0x6, &(0x7f0000001f80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}], 0xd8, 0x40000}}, {{&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002740)=[{&(0x7f0000002080)="3932314983e67aa481cdf14aead80745df32081a5e357a09d657ee713fe75171236a036b3a44991c824d970b1a60999fe124ea5ebe19a3bc6e0d397becefe9eeaedd3af35aaa514db639347356222a00c4dc3636b5c59cd920df447cee1e5158f51ce92a467a21e3fe0fe80a431783743ba41e2976c6b0e16f6d9d51a4254d6a01e2d174ff53294f46d72a6d73b9d92d2cfed29e97b226190564bcf3d3de2a2cb7f7f3db66673c2bc1", 0xa9}, {&(0x7f0000002140)="7b26a7eb05d86902162dd3c2483331c4b816890455071edad71abc4ccbedb546ad87a85d7bfffe86e22258febebf5d214a440c41ebdf47487cd65211f7ee3b715943f817470defa6fd5089975134ca1e2e41bed8bf9c66f97ce72fc243b4121eb2cc0fb2387c69f5f306", 0x6a}, {&(0x7f00000021c0)="66133ebeadeb08116c02003925a6b817e3ccfa615d488cd7d6fcda5c4871281cc0cef80483b41bcf79911be8b8d86d1bd782098634fe693cda4cba7795098e024b09d10cc46388dfee9fa7439cb5ecb7092fa9ce41bdf158c00f9b0c93f0a68a461c4a67abf0639e4acf8d1868a4b903f191501dc3bdf06b28442dd418465ff3750d3c50643f", 0x86}, {&(0x7f0000002280)="a4f1146427b16165f5031b7222e44d6c65d460449286c0e0f08ff6ca8f3be076b1cce00c508b6b548f286c6dc6f3ee66a313d5d9549322eb3c247af8cf66408906bb779db5901156e2f954eaeeea726c95", 0x51}, {&(0x7f0000002300)="71c48be1f48036ee4147e2d8b59336da5ec8ea468b82f0a01fe4275d09389814caf71690c7bbc1cf724880b256da0d81f85cfb5cd20fb6dd2781e874299902d27f20699fe744008bcf514ca1eb5279bdd884bd907633caef1ab50cd0c76e8a6fd76167a748dff00bde389c6d23cfa1f23a8a5bf496f3a9130942bbe809fddcbea58b44a57a6e901fb2e15b5c2c49dfa5b073f3215136aa", 0x97}, {&(0x7f00000023c0)="8788a88da6bc2512c73c6d7d3f06b26ccda61b9fd82665fd9928e8635e7b650322df8759b7b03e4791a5e1e4226dcb18013796ab4e82279096a9ea33a67a3ecae0ff9f279391edc0f809a6344ebad8c7d6c0dba367fe299b6a4d58b0de5326fc6412289d6d9eb7bbf4cd49b5d87f17a5e26548fc295cc333c49c4c6fa6ddda46204cdbccc0099da6fc1c0b439979a575eb4638e152556095e5ccd775436a2cee477e3839fd6580b61b597d1d53c31f136030bda67055e3760ea5104187f9a3175e3b47e9a2035529b987aea57588c7da5272", 0xd2}, {&(0x7f00000024c0)="ba311b1679c6faacffbd16b5066317d69df0c0f16e3254a0951c1bafbde842238276bc6f10a0dbcbd8ac8ab75836889251cecc33c11955ba5f1c1a4c19a390467f2940ea4945f3b23e6fee471a619334e2b46849a2f9", 0x56}, {&(0x7f0000002540)="0345f2c187cbf66c9df651c04fb025df5e23d810d3a33f3e28b1d6b2f352de97dddd15af8cb790374bf1b28a59c3f70cab44ef1bedb0bbad5e1c10778aa9141d9acf4d08043c02954f1920e9d06427fa6365124739a940bbe38413b42b433a3519bbbdd118bbd8119508fb8b4578b15f6d93dc8f5a0dbba7e8838122f1526e13d16c774d3ab0d7b2f6910cfd52d20742ae9280f6f1dd3de2196e5803264730c94185f014ce7ec400cb4070440a9e46956def385cab635821b148acde3588ca1e483e", 0xc2}, {&(0x7f0000002640)="7199cef9eb1dc47ee932c816058fd957eb14a2a2e05c5754a0679b2af82ba3aab0466ad68b5caaf4e345d51429eb13872e001ee191e8322936ff90760c5c6aea02856e6d105cdf96a3093105bf2dfbbf63899bf8e19ccb2fe0d0d8c0ba7f0459b348efb11bd228e99d53296a6565bd3d3373b54a122d1f0898c9aa7879ea0bbac6d621abf845f9dbe8257921bcafd562bbed40dde1bf01cdf2d2f212649da9f2882b684c7a2dfee8d1bd7900f9ba5cf9ac4dc6d18e11a1bf933289264354b733c10ce44253d0dad2cfa5940f357f9feba74e8e6dea5e56b22a511fe890f8c8f31a", 0xe1}], 0x9, &(0x7f0000002a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r1}}}], 0xf8, 0x2004c001}}, {{&(0x7f0000002b00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002b80)="e59419721d3081cdb19f557677d1f18d02a55e317f13d652702167ab3fd8da57ca55c19dcf87de36fe07243fea132f0fd72134aadf0a8c954367962d", 0x3c}, {&(0x7f0000002bc0)="68b633604254fd1e343d8cad199fb03ee30649dda3cb3d8392a22ef2f287a12c4c9ba3ed7c53dfe6f7512e824972271ca786d10e7b05db18bac1ca7e94f3cdc77bdd5946bf153a300fd28c5a5f9fafa24c2d246a4e177488ba663c5f7e43971b71530823040c703bc759aba63c945bdba68f0eef35d3355723e4073935a004af356abfde2a06a2e4f08dd9dd2c910c0fdf10d9f40384aa24e811070bdd14252ec24f6eb84ea2d0c4fd19d81e06e156b6de1c4995580b97", 0xb7}, {&(0x7f0000002c80)="eef513a61b839ce2aa9f0f196e78b346ab61d9a4e498851d1f5b3dc6d76164b0c674dc37e56694fa841bb7efae50c9fb0470e5fc4ea41c6271f72f13730bdd4e069c523bbb999d451d3788ddea73aef3e074c9419fc0e23ef86ba30d6fd56b758860b7b67c2a7aca83e9d041863369db8b2d393d481f52d48dcb1b82854edb33445dd2d2a5946dce5d150b27c4b0409cacb03b2ae101ad4df31810d0aba71eb97ce1b106c449874f4b9f433d8835dc1a24dd495c48c04e0abf7c888fe641b592319f4b3679493dd7f60257bca5d741f75c47731f", 0xd4}], 0x3, &(0x7f0000002f00)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5, r7}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x20, 0x1, 0x1, [r9, r0, 0xffffffffffffffff, r0]}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r10, r0, r0, r0, r11, r12, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13, r17}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x100}}], 0x5, 0x5) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4f20, @loopback}, 0x10) r20 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x10, 0x20, 0x7fffffff, 0x101, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x68, 0x0, 0x76, 0x4, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @noop]}}}}}) sendmsg$nl_route_sched(r20, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r21, {0xd, 0x5}, {0x8, 0xf}, {0xfff2, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x28}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x40001) sendmsg$nl_route(r20, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3200000010cedff160671d2779dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 246.10005ms ago: executing program 3 (id=4802): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0xbc}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000001100000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x4000040) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0) 245.694232ms ago: executing program 4 (id=4803): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x20) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0xf2) socket$inet(0x2, 0x4, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @multicast1}, &(0x7f0000000140)=0xc) 215.167353ms ago: executing program 0 (id=4804): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d00)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000003000000010000000000000e02000000000000000000000001000084000000000000000003000000000000210000000000000006040000000061"], 0x0, 0x4f, 0x0, 0x8}, 0x20) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r0, 0x20, &(0x7f0000000080)={&(0x7f0000000040)=""/47, 0x2f, 0x0, &(0x7f00000001c0)=""/254, 0xfe}}, 0x10) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f00000002c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) 188.856213ms ago: executing program 3 (id=4805): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pselect6(0x40, &(0x7f0000000000)={0x8, 0x4, 0x400, 0x0, 0x0, 0x3ff, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f00000005c0)) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100ffffffff1c0004800500030001000000050003000000000015000300070000000800020003000000"], 0x40}}, 0x0) r6 = socket(0x2b, 0x80801, 0x1) ioctl$sock_TIOCINQ(r6, 0x8905, &(0x7f0000000040)) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r7, &(0x7f0000000680)="c4af28b4b729da64af2b72899d2e58d172c81d33fe03ee0286393ce80968386ccff2c1c752121c0829d1e1f6a8c3a100", 0x30, 0x800, &(0x7f00000006c0)={0xa, 0x4e24, 0x0, @private0, 0x2}, 0x1c) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r7, 0xe15a, 0x800, &(0x7f0000000140)=""/87, &(0x7f00000001c0)=0x57) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES8], 0x35c}, 0x1, 0x0, 0x0, 0x10046880}, 0x40004) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be34c6e17aa310769876c1d0000007ea60864160af36514001ac004000202080002000600010076e6f06cea2618c3ecb525c89c32f292b156a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r12 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r12, 0x65, 0x5, 0x0, &(0x7f0000000100)) recvmmsg(r5, &(0x7f0000000580)=[{{&(0x7f0000000240)=@l2, 0x80, &(0x7f0000000480)=[{&(0x7f0000000700)=""/83, 0x53}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f00000000c0)=""/32, 0x20}], 0x3, &(0x7f0000000780)=""/165, 0xa5}, 0x51fde79}], 0x1, 0x2103, &(0x7f0000000640)={r9, r10+10000000}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, r7, 0x5ea98000) 74.564248ms ago: executing program 5 (id=4806): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f00000000c0)=0x7, 0x4) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) close(r2) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000200)=0x199, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x48, r3, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) 56.494295ms ago: executing program 0 (id=4807): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99abca60d3bd074d285ff1ee459e5c6c481550d717d08ca8f24815cbe0d257cb74cf34d2e2ab6e908464f29ce8e95b22a5c81fdd1c1242906d559f50863323a8111b6b12b371e6a6e40f74d08b87d99d7ae28c256d5f6a5e93f45593760660ca819561281c2b1563df1e000ee3f97e7b4b1eee08c5305b74de5b78f0f400750f45f027e4959a73", 0x87}], 0x1}}], 0x2, 0x44801) (async) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99abca60d3bd074d285ff1ee459e5c6c481550d717d08ca8f24815cbe0d257cb74cf34d2e2ab6e908464f29ce8e95b22a5c81fdd1c1242906d559f50863323a8111b6b12b371e6a6e40f74d08b87d99d7ae28c256d5f6a5e93f45593760660ca819561281c2b1563df1e000ee3f97e7b4b1eee08c5305b74de5b78f0f400750f45f027e4959a73", 0x87}], 0x1}}], 0x2, 0x44801) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000003c0)={r2, 0xcb}, 0x8) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x852f, @loopback, 0x7}, 0xfffffffffffffdd2) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r2, 0x6}, 0x8) (async) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r2, 0x6}, 0x8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r4, 0x80089000) (async) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x80000c, 0x28012, r4, 0x80089000) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r4, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x11, 0xd, r6, 0x1, 0xda, 0x6, @remote}, 0x14) (async) sendto$packet(r5, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x11, 0xd, r6, 0x1, 0xda, 0x6, @remote}, 0x14) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) (async) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000007900)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x3d66, @local, 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000980)="dc", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r7, 0x1) getsockopt$bt_hci(r7, 0x84, 0x83, &(0x7f0000001c40)=""/4130, &(0x7f0000000000)=0x913) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfb3, @loopback, 0x2000003}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) 39.818895ms ago: executing program 0 (id=4808): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) close(0x3) (async, rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}, @NHA_BLACKHOLE={0x4}]}, 0x34}}, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r4}, &(0x7f0000000600), &(0x7f0000000980)=r2}, 0x20) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_RULE_EXPRESSIONS={0xfffffffffffffc4a, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x0, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xffffffffffffff20, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 0s ago: executing program 0 (id=4809): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): th0: set [1, 0] type 2 family 0 port 19999 - 0 [ 273.245451][ T4207] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 273.266985][ T4207] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 273.477157][T16265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2822'. [ 273.492724][T16267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2823'. [ 274.066789][T16277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2827'. [ 274.131458][T16278] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2827'. [ 274.831344][ T4207] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 274.869649][T16265] ip6gre1: entered allmulticast mode [ 274.878793][T16268] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 275.058729][T16286] validate_nla: 2 callbacks suppressed [ 275.058748][T16286] netlink: 'syz.1.2831': attribute type 3 has an invalid length. [ 275.081044][T16286] netlink: 'syz.1.2831': attribute type 1 has an invalid length. [ 275.095665][T16286] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2831'. [ 275.133818][T16286] NCSI netlink: No device for ifindex 813332851 [ 275.161145][T16291] syzkaller0: entered promiscuous mode [ 275.172766][T16291] syzkaller0: entered allmulticast mode [ 275.514280][T16321] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 275.706721][T16332] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.974461][T16353] geneve2: left promiscuous mode [ 276.014504][ T6248] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 276.039207][T16359] veth1_to_hsr: entered promiscuous mode [ 276.067662][T16362] syz.5.2856 uses old SIOCAX25GETINFO [ 276.067790][ T6248] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 276.093042][ T6248] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 276.113290][ T6248] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 276.132420][T16358] veth1_to_hsr: left promiscuous mode [ 276.255695][T16367] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2858'. [ 276.285002][T16367] IPVS: Error connecting to the multicast addr [ 276.626128][T16400] lo: left promiscuous mode [ 276.630694][T16400] lo: entered allmulticast mode [ 276.657565][T16400] gretap0: entered allmulticast mode [ 276.690991][T16400] veth0_to_team: left promiscuous mode [ 276.699891][T16400] veth0_to_team: entered allmulticast mode [ 276.729549][T16400] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 276.748825][T16400] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 276.765834][T16400] : entered allmulticast mode [ 276.772385][T16400] gtp0: entered allmulticast mode [ 276.781094][T16400] vxlan0: entered allmulticast mode [ 276.811746][T16400] ip6tnl2: entered allmulticast mode [ 276.819740][T16400] ip6tnl3: entered allmulticast mode [ 276.851867][T16400] bond9: left promiscuous mode [ 276.861938][T16400] bond9: entered allmulticast mode [ 276.878309][T16400] ip6erspan0: entered allmulticast mode [ 276.892552][T16400] bond11: entered allmulticast mode [ 276.901686][T16400] veth2: entered allmulticast mode [ 276.911766][T16400] veth3: left promiscuous mode [ 276.916957][T16400] veth3: entered allmulticast mode [ 276.923923][T16400] bridge0: entered allmulticast mode [ 276.931683][T16400] bridge2: entered allmulticast mode [ 276.938113][T16400] macvlan3: entered allmulticast mode [ 276.943815][T16400] mac80211_hwsim hwsim3 t: entered allmulticast mode [ 276.951084][T16400] bond12: entered allmulticast mode [ 276.956714][T16400] bridge3: entered allmulticast mode [ 276.962356][T16400] veth4: entered allmulticast mode [ 276.967923][T16400] veth5: entered allmulticast mode [ 276.973552][T16400] bond13: entered allmulticast mode [ 277.004165][T16400] bond14: entered allmulticast mode [ 277.019815][T16400] bond15: entered allmulticast mode [ 277.044854][T16400] macvlan0.0: entered allmulticast mode [ 277.084473][T16400] vxlan1: entered allmulticast mode [ 277.103121][T16400] gtp1: left promiscuous mode [ 277.134145][T16400] bond16: left promiscuous mode [ 277.160186][T16400] gretap2: left promiscuous mode [ 277.169243][T16400] erspan1: entered allmulticast mode [ 277.176291][T16400] bond17: entered allmulticast mode [ 277.181733][T16400] bridge4: entered allmulticast mode [ 277.188267][T16400] ip6gre2: entered allmulticast mode [ 277.194479][T16400] bridge5: entered allmulticast mode [ 277.200081][T16400] gre2: entered allmulticast mode [ 277.206797][T16400] gtp2: left promiscuous mode [ 277.212148][T16400] gtp2: entered allmulticast mode [ 277.219142][T16400] gretap3: entered allmulticast mode [ 277.225893][T16400] macsec1: entered allmulticast mode [ 277.258537][T16434] v: renamed from veth0_vlan [ 277.526162][T16458] unsupported nla_type 33542 [ 277.554632][T16458] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2881'. [ 277.699532][T16463] gtp1: entered promiscuous mode [ 277.800171][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2886'. [ 277.841275][T16482] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2886'. [ 277.930576][T16491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2888'. [ 277.990645][ T9292] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.003297][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2886'. [ 278.025115][ T9292] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.052456][T16482] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2886'. [ 278.063244][ T9292] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.098380][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.110269][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.118346][ T9292] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.127489][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.138283][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.148960][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.236872][T16499] wlan0 speed is unknown, defaulting to 1000 [ 278.246692][T16499] wg1 speed is unknown, defaulting to 1000 [ 278.360041][T16504] IPVS: Error joining to the multicast group [ 278.627034][T16517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2892'. [ 278.724766][T16533] IPVS: set_ctl: invalid protocol: 12 10.1.1.2:19999 [ 278.731875][ T8215] IPVS: starting estimator thread 0... [ 278.807759][T16499] chnl_net:caif_netlink_parms(): no params data found [ 278.854686][T16535] IPVS: using max 36 ests per chain, 86400 per kthread [ 278.937208][T16545] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2903'. [ 278.953056][T16546] syzkaller1: entered promiscuous mode [ 278.986638][T16546] syzkaller1: entered allmulticast mode [ 279.106025][T16550] netlink: 'syz.4.2902': attribute type 13 has an invalid length. [ 279.120660][T16550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2902'. [ 279.196784][T16550] netlink: 'syz.4.2902': attribute type 13 has an invalid length. [ 279.208887][T16550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2902'. [ 279.223091][T16499] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.232394][T16499] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.235555][T16569] netlink: 'syz.1.2910': attribute type 4 has an invalid length. [ 279.240071][T16499] bridge_slave_0: entered allmulticast mode [ 279.256726][T16499] bridge_slave_0: entered promiscuous mode [ 279.274430][T16499] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.281657][T16499] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.289252][T16499] bridge_slave_1: entered allmulticast mode [ 279.297290][T16499] bridge_slave_1: entered promiscuous mode [ 279.345552][T16567] syzkaller0: entered promiscuous mode [ 279.351097][T16567] syzkaller0: entered allmulticast mode [ 279.425431][T16499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.449647][T16562] syzkaller0: left promiscuous mode [ 279.455440][T16562] syzkaller0: left allmulticast mode [ 279.471815][T16499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.660739][T16499] team0: Port device team_slave_0 added [ 279.673129][T16499] team0: Port device team_slave_1 added [ 279.739792][T16576] No such timeout policy "syz0" [ 279.746176][T16499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.753217][T16499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.813667][T16499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.866985][T16499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.874304][T16499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.912362][T16499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.040184][T16499] hsr_slave_0: entered promiscuous mode [ 280.055187][T16499] hsr_slave_1: entered promiscuous mode [ 280.061792][T16499] debugfs: 'hsr0' already exists in 'hsr' [ 280.068747][T16499] Cannot create hsr debugfs directory [ 280.193137][ T51] Bluetooth: hci5: command tx timeout [ 280.902720][T16499] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 280.920120][T16499] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 280.937228][T16499] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 280.948812][T16499] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 281.092683][T16499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.127074][T16499] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.138499][T16664] bridge0: left allmulticast mode [ 281.145675][T16664] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 281.168211][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.175395][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.221876][ T9273] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.229132][ T9273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.431252][T16677] netlink: 'syz.1.2944': attribute type 9 has an invalid length. [ 281.718681][T16499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.868445][T16691] netlink: 'syz.4.2948': attribute type 13 has an invalid length. [ 281.899070][T16691] syz_tun: refused to change device tx_queue_len [ 281.914235][T16691] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 281.948737][T16499] veth0_vlan: entered promiscuous mode [ 281.994340][T16499] veth1_vlan: entered promiscuous mode [ 282.106706][T16499] veth0_macvtap: entered promiscuous mode [ 282.156169][T16499] veth1_macvtap: entered promiscuous mode [ 282.241111][T16499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.263679][ T51] Bluetooth: hci5: command tx timeout [ 282.287976][T16499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.352392][ T6248] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.368573][ T6248] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.385947][ T6248] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.428217][ T6248] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.456642][T16720] syzkaller0: entered promiscuous mode [ 282.493919][T16720] syzkaller0: entered allmulticast mode [ 282.634374][T16734] __nla_validate_parse: 69 callbacks suppressed [ 282.634392][T16734] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2957'. [ 282.644506][T16732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.691862][T16730] netlink: 'syz.0.2960': attribute type 1 has an invalid length. [ 282.702777][ T9278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.727835][ T9278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.861701][ T9273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.888345][ T9273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.078239][T16751] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2887'. [ 283.089673][T16750] pim6reg: entered allmulticast mode [ 283.233402][T16756] tipc: Failed to remove unknown binding: 66,1,1/0:3826307335/3826307338 [ 283.243581][T16756] tipc: Failed to remove unknown binding: 66,1,1/0:3826307335/3826307338 [ 283.654100][T16768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2971'. [ 283.675363][T16768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2971'. [ 283.719607][T16768] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2971'. [ 283.935137][T16783] netlink: 'syz.1.2973': attribute type 1 has an invalid length. [ 283.956527][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 283.972800][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 283.982843][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 284.014646][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 284.042339][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 284.342977][T16783] bond10: entered promiscuous mode [ 284.351037][ T51] Bluetooth: hci5: command tx timeout [ 284.357706][T16783] 8021q: adding VLAN 0 to HW filter on device bond10 [ 284.459876][T16786] wlan0 speed is unknown, defaulting to 1000 [ 284.460991][T16794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2975'. [ 284.522945][T16786] wg1 speed is unknown, defaulting to 1000 [ 284.878995][T16786] chnl_net:caif_netlink_parms(): no params data found [ 284.934458][T16813] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2979'. [ 284.955388][T16813] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2979'. [ 284.974004][T16813] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2979'. [ 284.997010][T16816] netlink: 'syz.1.2981': attribute type 39 has an invalid length. [ 285.115606][T16819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 285.194394][T16829] netlink: 'syz.5.2983': attribute type 24 has an invalid length. [ 285.247710][T16786] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.279874][T16786] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.299318][T16786] bridge_slave_0: entered allmulticast mode [ 285.308368][T16786] bridge_slave_0: entered promiscuous mode [ 285.319694][T16786] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.328154][T16786] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.335832][T16786] bridge_slave_1: entered allmulticast mode [ 285.347649][T16786] bridge_slave_1: entered promiscuous mode [ 285.381526][T16835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2986'. [ 285.422228][T16786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.449545][T16786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.546017][T16786] team0: Port device team_slave_0 added [ 285.556643][T16842] syzkaller0: entered promiscuous mode [ 285.563319][T16842] syzkaller0: entered allmulticast mode [ 285.574798][T16786] team0: Port device team_slave_1 added [ 285.611789][T16852] x_tables: duplicate underflow at hook 1 [ 285.656244][T16842] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 285.754473][T16786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.772558][T16786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.844453][T16786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.890878][T16786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.898165][T16786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.926072][T16786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.066171][T16786] hsr_slave_0: entered promiscuous mode [ 286.082334][T16786] hsr_slave_1: entered promiscuous mode [ 286.094069][T16786] debugfs: 'hsr0' already exists in 'hsr' [ 286.103769][ T51] Bluetooth: hci1: command tx timeout [ 286.111638][T16786] Cannot create hsr debugfs directory [ 286.137357][T16878] vlan3: entered promiscuous mode [ 286.156706][T16878] bridge0: entered promiscuous mode [ 286.425945][ T51] Bluetooth: hci5: command tx timeout [ 286.562453][T16894] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.834179][T16918] netlink: 'syz.4.3002': attribute type 58 has an invalid length. [ 287.323827][T16786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 287.371339][T16949] syzkaller0: entered promiscuous mode [ 287.379045][T16949] syzkaller0: entered allmulticast mode [ 287.393599][T16786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 287.425782][T16786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 287.785333][T16961] nbd1: detected capacity change from 0 to 127 [ 288.159401][T16971] __nla_validate_parse: 4 callbacks suppressed [ 288.159419][T16971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3016'. [ 288.184146][ T5831] Bluetooth: hci1: command tx timeout [ 288.460129][ T51] block nbd1: Receive control failed (result -32) [ 289.053376][T16786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 289.280280][T16786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.305529][T17001] netem: change failed [ 289.409492][T16786] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.455655][ T9273] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.462829][ T9273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.625034][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.632212][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.820923][T17023] tc_dump_action: action bad kind [ 289.966130][T17031] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3032'. [ 289.988195][T17031] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3032'. [ 290.174689][T16786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.265370][ T51] Bluetooth: hci1: command tx timeout [ 290.344423][T16786] veth0_vlan: entered promiscuous mode [ 290.361791][T16786] veth1_vlan: entered promiscuous mode [ 290.406658][T16786] veth0_macvtap: entered promiscuous mode [ 290.410632][T17051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3038'. [ 290.418547][T16786] veth1_macvtap: entered promiscuous mode [ 290.463260][T16786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.506875][T16786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.535707][ T9278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.552808][T17057] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3039'. [ 290.626126][ T9278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.644326][ T9278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.666081][ T9278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.779529][ T6248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.802746][ T6248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.851041][ T6248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.865288][ T6248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.880055][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3043'. [ 290.891779][T17068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3043'. [ 290.902066][T17068] netlink: 'syz.4.3043': attribute type 15 has an invalid length. [ 290.917182][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3043'. [ 290.927187][T17068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3043'. [ 290.937422][T17068] netlink: 'syz.4.3043': attribute type 15 has an invalid length. [ 291.001033][T17073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2968'. [ 291.383952][T17088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.687524][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 291.700363][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 291.709724][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 291.719058][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 291.728459][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 291.809272][T17101] wlan0 speed is unknown, defaulting to 1000 [ 291.818564][T17101] wg1 speed is unknown, defaulting to 1000 [ 292.328141][T17142] netlink: 'syz.3.3063': attribute type 2 has an invalid length. [ 292.345753][ T51] Bluetooth: hci1: command tx timeout [ 292.372791][T17101] chnl_net:caif_netlink_parms(): no params data found [ 292.697729][T17101] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.705779][T17101] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.713068][T17101] bridge_slave_0: entered allmulticast mode [ 292.721246][T17101] bridge_slave_0: entered promiscuous mode [ 292.757223][T17101] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.773060][T17101] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.785157][T17101] bridge_slave_1: entered allmulticast mode [ 292.931480][T17101] bridge_slave_1: entered promiscuous mode [ 293.047289][T17178] bond9 (unregistering): Released all slaves [ 293.185017][T17101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.205178][T17191] syzkaller1: entered promiscuous mode [ 293.210666][T17191] syzkaller1: entered allmulticast mode [ 293.237380][T17101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.355288][T17101] team0: Port device team_slave_0 added [ 293.365561][T17101] team0: Port device team_slave_1 added [ 293.402964][T17101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.410970][T17101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.440772][T17101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.456356][T17101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.469651][T17101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.496913][T17101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.622257][T17101] hsr_slave_0: entered promiscuous mode [ 293.639251][T17101] hsr_slave_1: entered promiscuous mode [ 293.647465][T17101] debugfs: 'hsr0' already exists in 'hsr' [ 293.654226][T17101] Cannot create hsr debugfs directory [ 293.783656][ T51] Bluetooth: hci0: command tx timeout [ 294.289462][T17243] __nla_validate_parse: 6 callbacks suppressed [ 294.289480][T17243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3093'. [ 294.368442][T17246] : entered promiscuous mode [ 294.402425][T17101] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 294.420123][T17248] tipc: Started in network mode [ 294.426923][T17248] tipc: Node identity ac1414aa, cluster identity 4711 [ 294.448569][T17248] tipc: Enabled bearer , priority 10 [ 294.456676][T17101] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 294.456834][T17248] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3095'. [ 294.488746][T17101] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 294.501263][T17248] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3095'. [ 294.510487][T17248] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3095'. [ 294.515682][T17101] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 294.687160][T17101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.723178][T17101] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.745833][T17269] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3100'. [ 294.766902][T17271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.785319][T17273] netlink: 'syz.4.3102': attribute type 2 has an invalid length. [ 294.816215][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.823405][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.835047][T17273] veth0_to_bridge: left allmulticast mode [ 294.850766][T17274] pim6reg: entered allmulticast mode [ 294.868091][T17271] pim6reg: left allmulticast mode [ 294.893966][ T9295] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.901067][ T9295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.910344][T17277] sock: sock_set_timeout: `syz.5.3103' (pid 17277) tries to set negative timeout [ 295.382332][T17301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3111'. [ 295.497571][T17101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.519591][T17310] mac80211_hwsim hwsim11 : renamed from wlan1 [ 295.555782][ T5939] tipc: Node number set to 2886997162 [ 295.598065][T17315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3115'. [ 295.636773][T17101] veth0_vlan: entered promiscuous mode [ 295.676223][T17101] veth1_vlan: entered promiscuous mode [ 295.771165][T17101] veth0_macvtap: entered promiscuous mode [ 295.800298][T17101] veth1_macvtap: entered promiscuous mode [ 295.825723][T17327] openvswitch: netlink: IP tunnel dst address not specified [ 295.839564][T17327] netlink: 'syz.4.3118': attribute type 1 has an invalid length. [ 295.847570][T17327] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3118'. [ 295.849587][T17101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.866638][ T5831] Bluetooth: hci0: command tx timeout [ 295.924420][T17101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.972149][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.992187][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.020795][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.075786][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.286453][ T9278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.299492][ T9278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.395312][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.424134][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.424425][T17355] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3127'. [ 296.849845][T17377] netlink: 11 bytes leftover after parsing attributes in process `syz.1.3131'. [ 297.423052][T17396] openvswitch: netlink: Message has 8 unknown bytes. [ 297.441978][T17396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.502231][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 297.514333][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 297.523296][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 297.539820][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 297.550913][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 297.619058][T17401] bond2: option lp_interval: invalid value (0) [ 297.628591][T17401] bond2: option lp_interval: allowed values 1 - 2147483647 [ 297.641746][T17401] bond2 (unregistering): Released all slaves [ 297.655669][T17404] openvswitch: netlink: Flow key attr not present in new flow. [ 297.692041][T17394] wlan0 speed is unknown, defaulting to 1000 [ 297.729504][T17394] wg1 speed is unknown, defaulting to 1000 [ 297.919217][T17418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.946345][ T5831] Bluetooth: hci0: command tx timeout [ 298.320947][T17394] chnl_net:caif_netlink_parms(): no params data found [ 298.643760][T17394] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.651178][T17394] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.658635][T17394] bridge_slave_0: entered allmulticast mode [ 298.668607][T17394] bridge_slave_0: entered promiscuous mode [ 298.679474][T17394] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.686902][T17394] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.694388][T17394] bridge_slave_1: entered allmulticast mode [ 298.702795][T17394] bridge_slave_1: entered promiscuous mode [ 298.767039][T17394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.789538][T17394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.877249][T17394] team0: Port device team_slave_0 added [ 298.892569][T17394] team0: Port device team_slave_1 added [ 298.980572][T17394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.997815][T17394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.064055][T17394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.105721][T17394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.112709][T17394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.196347][T17394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.234132][T17494] can: request_module (can-proto-4) failed. [ 299.251299][T17500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.268225][T17500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.307831][T17504] netlink: 'syz.5.3167': attribute type 58 has an invalid length. [ 299.318221][T17504] __nla_validate_parse: 11 callbacks suppressed [ 299.318239][T17504] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3167'. [ 299.354673][T17500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.409745][T17500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.427390][T17508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3168'. [ 299.438546][T17500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.462204][T17394] hsr_slave_0: entered promiscuous mode [ 299.476942][T17394] hsr_slave_1: entered promiscuous mode [ 299.484344][T17394] debugfs: 'hsr0' already exists in 'hsr' [ 299.490177][T17394] Cannot create hsr debugfs directory [ 299.497109][T17500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.624453][ T5831] Bluetooth: hci4: command tx timeout [ 300.024716][ T5831] Bluetooth: hci0: command tx timeout [ 300.043013][T17539] tc_dump_action: action bad kind [ 300.169420][T17550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3179'. [ 300.226500][T17550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3179'. [ 300.402839][T17554] wlan0 speed is unknown, defaulting to 1000 [ 300.429713][T17554] wg1 speed is unknown, defaulting to 1000 [ 300.430371][T17394] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 300.625222][T17394] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 300.657867][T17394] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 300.695589][T17394] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 300.715257][T17573] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3187'. [ 301.167171][T17600] bridge0: port 3(team0) entered blocking state [ 301.181739][T17600] bridge0: port 3(team0) entered disabled state [ 301.200230][T17600] team0: entered allmulticast mode [ 301.209180][T17600] team_slave_0: entered allmulticast mode [ 301.218992][T17600] team_slave_1: entered allmulticast mode [ 301.230624][T17600] team0: entered promiscuous mode [ 301.236708][T17600] team_slave_0: entered promiscuous mode [ 301.242731][T17600] team_slave_1: entered promiscuous mode [ 301.251270][T17600] bridge0: port 3(team0) entered blocking state [ 301.258037][T17600] bridge0: port 3(team0) entered forwarding state [ 301.268556][T17598] tipc: Started in network mode [ 301.279156][T17598] tipc: Node identity ea0e88d6a68c, cluster identity 4711 [ 301.297186][T17598] tipc: Enabled bearer , priority 0 [ 301.313113][T17604] syzkaller0: entered promiscuous mode [ 301.337967][T17604] syzkaller0: entered allmulticast mode [ 301.366757][T17394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.374870][T17598] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 301.404482][T17603] syzkaller0: entered allmulticast mode [ 301.425700][T17598] tipc: Resetting bearer [ 301.457092][T17598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3191'. [ 301.536133][T17394] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.564983][T17597] tipc: Resetting bearer [ 301.600926][T17597] tipc: Disabling bearer [ 301.627628][ T9292] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.634870][ T9292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.646191][T17623] sctp: [Deprecated]: syz.0.3197 (pid 17623) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.646191][T17623] Use struct sctp_sack_info instead [ 301.682190][ T9292] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.689677][ T9292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.700254][T17625] sctp: [Deprecated]: syz.0.3197 (pid 17625) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.700254][T17625] Use struct sctp_sack_info instead [ 301.719381][ T5831] Bluetooth: hci4: command tx timeout [ 301.750826][T17623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3197'. [ 301.797243][T17630] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3200'. [ 301.817690][T17394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 302.130166][T17651] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3205'. [ 302.340033][T17394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.376223][T17666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3211'. [ 302.810956][T17690] netlink: 'syz.5.3220': attribute type 1 has an invalid length. [ 302.819049][T17690] netlink: 'syz.5.3220': attribute type 3 has an invalid length. [ 302.829343][T17690] netlink: 'syz.5.3220': attribute type 7 has an invalid length. [ 302.853864][T17690] netlink: 'syz.5.3220': attribute type 8 has an invalid length. [ 302.883668][T17690] NCSI netlink: No device for ifindex 131092 [ 302.901143][T17694] nbd: must specify an index to disconnect [ 302.972306][T17702] xfrm1: entered promiscuous mode [ 302.996387][T17702] xfrm1: entered allmulticast mode [ 303.080478][T17394] veth0_vlan: entered promiscuous mode [ 303.127522][T17394] veth1_vlan: entered promiscuous mode [ 303.216618][T17394] veth0_macvtap: entered promiscuous mode [ 303.245724][T17721] netlink: 'syz.5.3228': attribute type 1 has an invalid length. [ 303.246175][T17394] veth1_macvtap: entered promiscuous mode [ 303.264547][T17721] netlink: 'syz.5.3228': attribute type 11 has an invalid length. [ 303.315444][T17394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.328924][T17394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.374946][ T9278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.426488][ T9278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.449528][ T9278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.460661][ T9278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.573975][T17736] netlink: 'syz.0.3235': attribute type 12 has an invalid length. [ 303.632329][ T4207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.642638][ T4207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.696846][ T4207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.723803][ T4207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.794366][ T5831] Bluetooth: hci4: command tx timeout [ 303.842111][T17746] netem: incorrect ge model size [ 303.847765][T17746] netem: change failed [ 304.116515][T17760] netem: change failed [ 304.189000][T17763] syzkaller0: entered promiscuous mode [ 304.200561][T17763] syzkaller0: entered allmulticast mode [ 304.228665][T17763] netlink: 'syz.4.3245': attribute type 1 has an invalid length. [ 304.445460][T17777] syzkaller0: entered promiscuous mode [ 304.450983][T17777] syzkaller0: entered allmulticast mode [ 304.588124][T17786] netlink: 'syz.0.3252': attribute type 1 has an invalid length. [ 304.646052][T17792] __nla_validate_parse: 16 callbacks suppressed [ 304.646070][T17792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3255'. [ 304.711757][T17798] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 304.723373][T17790] netlink: 'syz.4.3254': attribute type 1 has an invalid length. [ 304.753978][T17790] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3254'. [ 304.795589][T17798] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 304.806825][T17798] gretap1: entered promiscuous mode [ 304.813104][T17798] gretap1: entered allmulticast mode [ 304.878502][T17805] net_ratelimit: 59 callbacks suppressed [ 304.878524][T17805] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 305.029088][T17818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3262'. [ 305.084169][T17818] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3262'. [ 305.125816][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3262'. [ 305.207014][T17818] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3262'. [ 305.266357][T17841] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 305.295586][T17842] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 305.451310][T17852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3272'. [ 305.471906][T17852] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3272'. [ 305.492877][T17853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.524665][T17860] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3272'. [ 305.537932][T17856] netlink: 'syz.0.3273': attribute type 1 has an invalid length. [ 305.632559][T17856] 8021q: adding VLAN 0 to HW filter on device bond2 [ 305.730320][T17864] bond2: (slave veth3): Enslaving as an active interface with a down link [ 305.773178][T17856] bond2: (slave veth0_to_bond): making interface the new active one [ 305.792963][T17864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3273'. [ 305.812458][T17856] veth0_to_bond: entered promiscuous mode [ 305.818893][T17856] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 305.873711][ T5831] Bluetooth: hci4: command tx timeout [ 306.037017][T17888] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 306.500312][T17922] bridge0: entered allmulticast mode [ 306.552570][T17922] pim6reg: entered allmulticast mode [ 307.426585][T17967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.986441][T18009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.037956][T18012] netlink: 'syz.4.3318': attribute type 1 has an invalid length. [ 308.179242][ T5877] IPVS: starting estimator thread 0... [ 308.284674][T18023] IPVS: using max 33 ests per chain, 79200 per kthread [ 308.438540][T18042] Bluetooth: MGMT ver 1.23 [ 308.697785][T18053] openvswitch: netlink: Multiple metadata blocks provided [ 308.920849][T18069] tipc: Trying to set illegal importance in message [ 308.952093][T18068] IPVS: set_ctl: invalid protocol: 2 172.30.1.4:20003 [ 308.992411][T18069] syzkaller0: entered promiscuous mode [ 308.998964][T18069] syzkaller0: entered allmulticast mode [ 309.284250][T18087] netlink: 'syz.0.3342': attribute type 64 has an invalid length. [ 309.439216][T18104] netlink: 'syz.5.3348': attribute type 1 has an invalid length. [ 309.660950][T18118] __nla_validate_parse: 15 callbacks suppressed [ 309.660970][T18118] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.3352'. [ 309.818215][T18127] netlink: 'syz.1.3355': attribute type 1 has an invalid length. [ 309.940085][T18139] sctp: [Deprecated]: syz.1.3359 (pid 18139) Use of int in maxseg socket option. [ 309.940085][T18139] Use struct sctp_assoc_value instead [ 310.049679][T18143] netlink: 'syz.3.3358': attribute type 21 has an invalid length. [ 310.083596][T18143] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3358'. [ 310.119250][T18147] netlink: 'syz.5.3361': attribute type 4 has an invalid length. [ 310.157550][T18147] netlink: 'syz.5.3361': attribute type 1 has an invalid length. [ 310.187858][T18147] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3361'. [ 310.262371][T18159] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3365'. [ 310.441776][T18168] IPv6: NLM_F_REPLACE set, but no existing node found! [ 310.832029][T18180] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3373'. [ 310.945222][T18194] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3377'. [ 311.169634][T18209] sock: sock_timestamping_bind_phc: sock not bind to device [ 311.595892][T18212] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.603793][T18212] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.012469][T18254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.074596][T18256] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3396'. [ 312.216427][T18212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.258773][T18212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.642690][T18270] netlink: 'syz.5.3400': attribute type 21 has an invalid length. [ 312.650932][T18270] IPv6: NLM_F_CREATE should be specified when creating new route [ 312.813000][T18212] xfrm1: left promiscuous mode [ 312.822555][T18212] xfrm1: left allmulticast mode [ 312.905101][ T60] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.924637][ T60] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.034536][T18282] netlink: 'syz.0.3403': attribute type 11 has an invalid length. [ 313.055774][T18282] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3403'. [ 313.115183][ T60] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.151491][ T60] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.249890][T18297] FAULT_INJECTION: forcing a failure. [ 313.249890][T18297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.275250][T18297] CPU: 0 UID: 0 PID: 18297 Comm: syz.3.3410 Not tainted syzkaller #0 PREEMPT(full) [ 313.275278][T18297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 313.275290][T18297] Call Trace: [ 313.275298][T18297] [ 313.275307][T18297] dump_stack_lvl+0xe8/0x150 [ 313.275336][T18297] should_fail_ex+0x414/0x560 [ 313.275371][T18297] _copy_from_user+0x2d/0xb0 [ 313.275400][T18297] ___sys_recvmsg+0x12e/0x510 [ 313.275422][T18297] ? get_pid_task+0x20/0x1f0 [ 313.275445][T18297] ? get_pid_task+0x20/0x1f0 [ 313.275472][T18297] ? __pfx____sys_recvmsg+0x10/0x10 [ 313.275500][T18297] ? __fget_files+0x2a/0x420 [ 313.275541][T18297] ? __fget_files+0x3a0/0x420 [ 313.275600][T18297] __x64_sys_recvmsg+0x198/0x260 [ 313.275626][T18297] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 313.275660][T18297] ? __pfx_ksys_write+0x10/0x10 [ 313.275691][T18297] do_syscall_64+0xec/0xf80 [ 313.275711][T18297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.275730][T18297] ? trace_irq_disable+0x37/0x100 [ 313.275755][T18297] ? clear_bhb_loop+0x60/0xb0 [ 313.275778][T18297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.275797][T18297] RIP: 0033:0x7f90d0b8f749 [ 313.275815][T18297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.275832][T18297] RSP: 002b:00007f90d1b0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 313.275855][T18297] RAX: ffffffffffffffda RBX: 00007f90d0de5fa0 RCX: 00007f90d0b8f749 [ 313.275869][T18297] RDX: 0000000000004000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 313.275882][T18297] RBP: 00007f90d1b0b090 R08: 0000000000000000 R09: 0000000000000000 [ 313.275895][T18297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.275907][T18297] R13: 00007f90d0de6038 R14: 00007f90d0de5fa0 R15: 00007fff4a076c38 [ 313.275938][T18297] [ 313.362267][T18300] wlan0 speed is unknown, defaulting to 1000 [ 313.479474][T18304] netlink: 'syz.5.3411': attribute type 1 has an invalid length. [ 313.500975][T18304] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3411'. [ 313.514717][T18309] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3413'. [ 313.530947][T18304] NCSI netlink: No device for ifindex 0 [ 313.710673][T18300] wg1 speed is unknown, defaulting to 1000 [ 313.734563][T18317] ipvlan2: entered promiscuous mode [ 313.926471][T18333] syzkaller1: entered promiscuous mode [ 313.933154][T18333] syzkaller1: entered allmulticast mode [ 313.949130][T18331] bond0: entered allmulticast mode [ 313.955788][T18331] bond_slave_0: entered allmulticast mode [ 313.961522][T18331] bond_slave_1: entered allmulticast mode [ 313.982346][T18337] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 314.203119][T18352] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 314.280474][T18359] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 314.507087][T18368] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 315.007411][T18395] rdma_rxe: rxe_newlink: failed to add lo [ 315.067165][T18399] sctp: [Deprecated]: syz.1.3443 (pid 18399) Use of int in max_burst socket option deprecated. [ 315.067165][T18399] Use struct sctp_assoc_value instead [ 315.172701][T18408] veth1_to_bond: entered allmulticast mode [ 315.180795][T18408] __nla_validate_parse: 2 callbacks suppressed [ 315.180812][T18408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3446'. [ 315.242616][T18408] bond0: (slave bond_slave_1): Releasing backup interface [ 315.308438][T18412] syzkaller0: entered promiscuous mode [ 315.315197][T18412] syzkaller0: entered allmulticast mode [ 315.487308][T18426] netlink: 'syz.4.3450': attribute type 13 has an invalid length. [ 315.510583][T18426] gretap0: refused to change device tx_queue_len [ 315.526406][T18426] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 315.676932][T18435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3455'. [ 316.103287][T18466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3462'. [ 316.121819][T18472] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3464'. [ 316.169910][T18476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3463'. [ 316.338072][T18481] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3466'. [ 316.377219][T18472] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.384942][T18472] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.410355][T18481] 0{X: renamed from gretap0 (while UP) [ 316.428022][T18481] 0{X: entered allmulticast mode [ 316.440250][T18481] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 316.668449][T18502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3471'. [ 316.802946][T18516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3473'. [ 316.842059][T18518] netlink: 'syz.1.3476': attribute type 1 has an invalid length. [ 316.858353][T18518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3476'. [ 316.876545][T18502] hsr_slave_0 (unregistering): left promiscuous mode [ 316.991057][T18524] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3478'. [ 317.068670][T18526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.214392][T18533] netlink: 'syz.1.3481': attribute type 1 has an invalid length. [ 317.252226][T18533] netlink: 'syz.1.3481': attribute type 1 has an invalid length. [ 317.297499][T18533] netlink: 'syz.1.3481': attribute type 1 has an invalid length. [ 317.317073][T18543] Cannot find add_set index 2 as target [ 317.317523][T18533] netlink: 'syz.1.3481': attribute type 2 has an invalid length. [ 317.952845][T18588] netlink: 'syz.1.3500': attribute type 2 has an invalid length. [ 318.203802][T18603] netlink: 'syz.3.3506': attribute type 1 has an invalid length. [ 318.259236][T18609] 8021q: VLANs not supported on caif0 [ 318.297387][T18612] netlink: 'syz.4.3509': attribute type 2 has an invalid length. [ 318.317601][T18612] 9: entered promiscuous mode [ 318.692776][T18639] FAULT_INJECTION: forcing a failure. [ 318.692776][T18639] name failslab, interval 1, probability 0, space 0, times 0 [ 318.714347][T18639] CPU: 1 UID: 0 PID: 18639 Comm: syz.5.3519 Not tainted syzkaller #0 PREEMPT(full) [ 318.714372][T18639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 318.714383][T18639] Call Trace: [ 318.714390][T18639] [ 318.714399][T18639] dump_stack_lvl+0xe8/0x150 [ 318.714427][T18639] should_fail_ex+0x414/0x560 [ 318.714458][T18639] should_failslab+0xa8/0x100 [ 318.714481][T18639] __kmalloc_noprof+0xdf/0x800 [ 318.714500][T18639] ? tomoyo_encode+0x28b/0x550 [ 318.714528][T18639] tomoyo_encode+0x28b/0x550 [ 318.714557][T18639] tomoyo_realpath_from_path+0x58d/0x5d0 [ 318.714584][T18639] ? tomoyo_domain+0xd8/0x130 [ 318.714611][T18639] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 318.714631][T18639] tomoyo_path_number_perm+0x1e8/0x5a0 [ 318.714654][T18639] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 318.714672][T18639] ? __lock_acquire+0x6b6/0x2cf0 [ 318.714693][T18639] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 318.714748][T18639] ? __fget_files+0x2a/0x420 [ 318.714773][T18639] ? __fget_files+0x2a/0x420 [ 318.714795][T18639] ? __fget_files+0x3a0/0x420 [ 318.714817][T18639] ? __fget_files+0x2a/0x420 [ 318.714843][T18639] security_file_ioctl+0xcb/0x2d0 [ 318.714865][T18639] __se_sys_ioctl+0x47/0x170 [ 318.714886][T18639] do_syscall_64+0xec/0xf80 [ 318.714906][T18639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.714924][T18639] ? trace_irq_disable+0x37/0x100 [ 318.714947][T18639] ? clear_bhb_loop+0x60/0xb0 [ 318.714974][T18639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.714991][T18639] RIP: 0033:0x7f5fb1d8f749 [ 318.715008][T18639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.715024][T18639] RSP: 002b:00007f5fb2c61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.715044][T18639] RAX: ffffffffffffffda RBX: 00007f5fb1fe5fa0 RCX: 00007f5fb1d8f749 [ 318.715076][T18639] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003 [ 318.715088][T18639] RBP: 00007f5fb2c61090 R08: 0000000000000000 R09: 0000000000000000 [ 318.715101][T18639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.715112][T18639] R13: 00007f5fb1fe6038 R14: 00007f5fb1fe5fa0 R15: 00007ffc0e9863c8 [ 318.715144][T18639] [ 318.715162][T18639] ERROR: Out of memory at tomoyo_realpath_from_path. [ 319.204952][T18670] netem: change failed [ 319.392685][T18682] netlink: 'syz.1.3535': attribute type 1 has an invalid length. [ 319.456121][T18682] bond1: entered promiscuous mode [ 319.464616][T18682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.511698][T18683] bond1: (slave bridge3): making interface the new active one [ 319.523587][T18683] bridge3: entered promiscuous mode [ 319.531112][T18683] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 319.879119][T18706] syzkaller1: entered promiscuous mode [ 319.888395][T18706] syzkaller1: entered allmulticast mode [ 319.913255][T18715] x_tables: ip_tables: dscp.0 match: invalid size 8 (kernel) != (user) 40 [ 320.217535][T18735] __nla_validate_parse: 13 callbacks suppressed [ 320.217553][T18735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3551'. [ 320.256602][T18730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3553'. [ 320.368132][T18741] syzkaller1: entered promiscuous mode [ 320.374726][T18741] syzkaller1: entered allmulticast mode [ 320.512154][T18751] validate_nla: 3 callbacks suppressed [ 320.512172][T18751] netlink: 'syz.4.3559': attribute type 1 has an invalid length. [ 320.569425][T18751] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 320.583381][T18757] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3561'. [ 320.653559][T18759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3562'. [ 320.662902][T18760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3562'. [ 320.780873][T18763] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3564'. [ 320.800928][T18770] tc_dump_action: action bad kind [ 320.812879][T18770] netlink: 'syz.3.3566': attribute type 3 has an invalid length. [ 320.830838][T18770] netlink: 'syz.3.3566': attribute type 3 has an invalid length. [ 320.878665][T18774] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3564'. [ 320.907475][T18774] nbd: device at index 64 is going down [ 321.008465][T18782] FAULT_INJECTION: forcing a failure. [ 321.008465][T18782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.026195][T18782] CPU: 1 UID: 0 PID: 18782 Comm: syz.3.3570 Not tainted syzkaller #0 PREEMPT(full) [ 321.026223][T18782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 321.026235][T18782] Call Trace: [ 321.026243][T18782] [ 321.026250][T18782] dump_stack_lvl+0xe8/0x150 [ 321.026280][T18782] should_fail_ex+0x414/0x560 [ 321.026310][T18782] _copy_from_user+0x2d/0xb0 [ 321.026332][T18782] ioctl_standard_iw_point+0x59d/0xd40 [ 321.026360][T18782] ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10 [ 321.026385][T18782] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 321.026402][T18782] ? __pfx___mutex_lock+0x10/0x10 [ 321.026425][T18782] ? full_name_hash+0x92/0xe0 [ 321.026446][T18782] ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10 [ 321.026471][T18782] ioctl_standard_call+0xaf/0x1b0 [ 321.026489][T18782] ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10 [ 321.026511][T18782] wext_ioctl_dispatch+0xee/0x410 [ 321.026525][T18782] ? __pfx_ioctl_standard_call+0x10/0x10 [ 321.026543][T18782] wext_handle_ioctl+0x100/0x1c0 [ 321.026561][T18782] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 321.026574][T18782] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 321.026605][T18782] sock_ioctl+0x15f/0x790 [ 321.026629][T18782] ? __pfx_sock_ioctl+0x10/0x10 [ 321.026651][T18782] ? __fget_files+0x2a/0x420 [ 321.026670][T18782] ? __fget_files+0x3a0/0x420 [ 321.026689][T18782] ? __fget_files+0x2a/0x420 [ 321.026711][T18782] ? bpf_lsm_file_ioctl+0x9/0x20 [ 321.026729][T18782] ? __pfx_sock_ioctl+0x10/0x10 [ 321.026749][T18782] __se_sys_ioctl+0xfc/0x170 [ 321.026766][T18782] do_syscall_64+0xec/0xf80 [ 321.026782][T18782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.026797][T18782] ? trace_irq_disable+0x37/0x100 [ 321.026818][T18782] ? clear_bhb_loop+0x60/0xb0 [ 321.026837][T18782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.026860][T18782] RIP: 0033:0x7f90d0b8f749 [ 321.026874][T18782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.026889][T18782] RSP: 002b:00007f90d1b0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 321.026907][T18782] RAX: ffffffffffffffda RBX: 00007f90d0de5fa0 RCX: 00007f90d0b8f749 [ 321.026920][T18782] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003 [ 321.026931][T18782] RBP: 00007f90d1b0b090 R08: 0000000000000000 R09: 0000000000000000 [ 321.026941][T18782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.026951][T18782] R13: 00007f90d0de6038 R14: 00007f90d0de5fa0 R15: 00007fff4a076c38 [ 321.026978][T18782] [ 321.400269][T18790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3573'. [ 321.403923][T18791] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3574'. [ 321.511362][T18797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3577'. [ 321.516440][T18794] gre4: entered promiscuous mode [ 321.558759][T18794] gre4: entered allmulticast mode [ 321.896379][T18824] FAULT_INJECTION: forcing a failure. [ 321.896379][T18824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.930223][T18824] CPU: 1 UID: 0 PID: 18824 Comm: syz.5.3584 Not tainted syzkaller #0 PREEMPT(full) [ 321.930250][T18824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 321.930263][T18824] Call Trace: [ 321.930270][T18824] [ 321.930279][T18824] dump_stack_lvl+0xe8/0x150 [ 321.930309][T18824] should_fail_ex+0x414/0x560 [ 321.930344][T18824] _copy_to_user+0x31/0xb0 [ 321.930370][T18824] simple_read_from_buffer+0xe1/0x170 [ 321.930399][T18824] proc_fail_nth_read+0x1b3/0x220 [ 321.930424][T18824] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 321.930448][T18824] ? rw_verify_area+0x2a6/0x4d0 [ 321.930466][T18824] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 321.930488][T18824] vfs_read+0x200/0xa30 [ 321.930506][T18824] ? fdget_pos+0x247/0x320 [ 321.930534][T18824] ? __pfx___mutex_lock+0x10/0x10 [ 321.930557][T18824] ? __pfx_vfs_read+0x10/0x10 [ 321.930577][T18824] ? __fget_files+0x2a/0x420 [ 321.930605][T18824] ? __fget_files+0x3a0/0x420 [ 321.930632][T18824] ? __fget_files+0x2a/0x420 [ 321.930665][T18824] ksys_read+0x145/0x250 [ 321.930682][T18824] ? __fget_files+0x3a0/0x420 [ 321.930707][T18824] ? __pfx_ksys_read+0x10/0x10 [ 321.930725][T18824] ? __pfx_sock_ioctl+0x10/0x10 [ 321.930761][T18824] do_syscall_64+0xec/0xf80 [ 321.930781][T18824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.930800][T18824] ? trace_irq_disable+0x37/0x100 [ 321.930824][T18824] ? clear_bhb_loop+0x60/0xb0 [ 321.930848][T18824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.930866][T18824] RIP: 0033:0x7f5fb1d8e15c [ 321.930884][T18824] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 321.930901][T18824] RSP: 002b:00007f5fb2c61030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 321.930922][T18824] RAX: ffffffffffffffda RBX: 00007f5fb1fe5fa0 RCX: 00007f5fb1d8e15c [ 321.930938][T18824] RDX: 000000000000000f RSI: 00007f5fb2c610a0 RDI: 0000000000000004 [ 321.930950][T18824] RBP: 00007f5fb2c61090 R08: 0000000000000000 R09: 0000000000000000 [ 321.930963][T18824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.930975][T18824] R13: 00007f5fb1fe6038 R14: 00007f5fb1fe5fa0 R15: 00007ffc0e9863c8 [ 321.931008][T18824] [ 323.376867][T18872] syzkaller0: entered promiscuous mode [ 323.382416][T18872] syzkaller0: entered allmulticast mode [ 323.555104][T18888] xt_CT: You must specify a L4 protocol and not use inversions on it [ 323.566511][T18887] xt_CT: You must specify a L4 protocol and not use inversions on it [ 323.611027][T18889] tc_dump_action: action bad kind [ 323.637152][T18891] netlink: zone id is out of range [ 323.646820][T18891] netlink: zone id is out of range [ 323.652280][T18891] netlink: zone id is out of range [ 323.658631][T18891] netlink: zone id is out of range [ 323.666518][T18888] tc_dump_action: action bad kind [ 323.669364][T18891] netlink: zone id is out of range [ 323.677191][T18891] netlink: zone id is out of range [ 323.685099][T18891] netlink: zone id is out of range [ 323.691604][T18891] netlink: zone id is out of range [ 323.723977][T18891] netlink: zone id is out of range [ 323.729252][T18891] netlink: zone id is out of range [ 323.942881][T18916] syzkaller0: entered promiscuous mode [ 323.959284][T18916] syzkaller0: entered allmulticast mode [ 324.051891][T18927] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 324.241274][T18933] tipc: Can't bind to reserved service type 2 [ 324.269112][T18937] delete_channel: no stack [ 324.313882][T18933] syzkaller0: entered promiscuous mode [ 324.325081][T18933] syzkaller0: entered allmulticast mode [ 324.655077][T18965] netlink: 'syz.4.3630': attribute type 9 has an invalid length. [ 324.679372][T18965] netlink: 'syz.4.3630': attribute type 6 has an invalid length. [ 324.688744][T18962] sctp: [Deprecated]: syz.0.3629 (pid 18962) Use of int in max_burst socket option. [ 324.688744][T18962] Use struct sctp_assoc_value instead [ 324.939439][T18978] xt_hashlimit: size too large, truncated to 1048576 [ 325.281065][T18991] syzkaller0: entered promiscuous mode [ 325.324960][T18991] syzkaller0: entered allmulticast mode [ 325.896211][T19019] __nla_validate_parse: 14 callbacks suppressed [ 325.896233][T19019] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3644'. [ 327.364668][T19048] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3652'. [ 327.716557][T19070] IPVS: set_ctl: invalid protocol: 92 10.1.0.254:20001 [ 327.724656][T19070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3658'. [ 327.745744][T19070] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.754442][T19070] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.816342][T19074] netlink: 'syz.3.3660': attribute type 1 has an invalid length. [ 327.848990][T19074] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3660'. [ 328.064462][T19083] x_tables: duplicate underflow at hook 2 [ 328.517319][T19110] netlink: 'syz.4.3671': attribute type 33 has an invalid length. [ 328.668199][T19110] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 328.686550][T19110] bond1 (unregistering): Released all slaves [ 328.745280][T19124] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3676'. [ 328.757359][T19124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3676'. [ 328.855797][T19127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3678'. [ 328.942712][T19127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3678'. [ 328.965992][T19137] netlink: 'syz.5.3682': attribute type 21 has an invalid length. [ 328.994027][T19137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3682'. [ 329.190305][T19155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3689'. [ 329.451846][T19167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.540311][T19173] netlink: 'syz.1.3694': attribute type 22 has an invalid length. [ 329.556142][T19173] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 329.563049][T19173] syzkaller1: Refused to change device type [ 329.697813][T19182] xt_TPROXY: Can be used only with -p tcp or -p udp [ 330.095390][T19212] syzkaller0: entered promiscuous mode [ 330.101575][T19212] syzkaller0: entered allmulticast mode [ 330.190514][T19222] net_ratelimit: 4 callbacks suppressed [ 330.190530][T19222] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 330.601069][T19246] syzkaller0: entered promiscuous mode [ 330.608173][T19246] syzkaller0: entered allmulticast mode [ 331.310581][T19301] __nla_validate_parse: 7 callbacks suppressed [ 331.310599][T19301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3739'. [ 331.708426][T19328] wlan0 speed is unknown, defaulting to 1000 [ 331.750831][T19328] wg1 speed is unknown, defaulting to 1000 [ 332.167653][T19357] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3755'. [ 332.197442][T19369] netlink: 'syz.0.3757': attribute type 21 has an invalid length. [ 332.215319][T19353] netlink: 'syz.5.3753': attribute type 1 has an invalid length. [ 332.333255][T19376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3759'. [ 332.365406][T19376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3759'. [ 332.392211][T19378] xt_CT: You must specify a L4 protocol and not use inversions on it [ 332.408212][T19380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3759'. [ 332.434932][T19380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3759'. [ 332.448421][T19376] macvtap1: entered promiscuous mode [ 332.455041][T19376] vlan0: entered promiscuous mode [ 332.466985][T19376] macvtap1: entered allmulticast mode [ 332.477583][T19376] vlan0: entered allmulticast mode [ 332.477642][T19384] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3762'. [ 332.482876][T19376] veth0_vlan: entered allmulticast mode [ 332.513271][T19380] macvtap2: entered promiscuous mode [ 332.565295][T19380] macvtap2: entered allmulticast mode [ 332.658405][T19386] netlink: 'syz.1.3763': attribute type 13 has an invalid length. [ 332.674500][T19386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3763'. [ 332.718811][ T3535] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.759298][ T3535] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.782326][ T3535] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.794082][ T3535] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.976689][T19408] netlink: 'syz.5.3770': attribute type 3 has an invalid length. [ 333.038016][T19408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3770'. [ 333.047465][T19408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3770'. [ 333.113193][T19417] netlink: 'syz.4.3773': attribute type 5 has an invalid length. [ 333.316072][T19434] xt_cgroup: invalid path, errno=-2 [ 333.691185][T19460] bond3: option mode: invalid value (133) [ 333.699023][T19460] bond3 (unregistering): Released all slaves [ 333.838504][T19469] netlink: 'syz.1.3792': attribute type 1 has an invalid length. [ 333.900220][T19476] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 334.105340][ T5831] Bluetooth: hci4: command tx timeout [ 334.494951][T19528] netlink: 'syz.1.3808': attribute type 83 has an invalid length. [ 334.925013][T19559] netlink: 'syz.1.3817': attribute type 3 has an invalid length. [ 335.220482][T19585] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 335.277657][T19592] netlink: 'syz.5.3826': attribute type 1 has an invalid length. [ 335.280676][ T1138] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.297884][ T1138] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.324294][ T1138] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.402561][T19592] bond6: entered promiscuous mode [ 335.426438][T19592] 8021q: adding VLAN 0 to HW filter on device bond6 [ 335.441660][ T1138] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.454324][T19595] 8021q: VLANs not supported on gre0 [ 335.582864][T19592] bond6: (slave bridge7): making interface the new active one [ 335.590921][T19592] bridge7: entered promiscuous mode [ 335.599135][T19592] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 335.707638][T19615] openvswitch: netlink: Missing key (keys=40, expected=100) [ 335.925129][T19630] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 336.150561][T19643] netlink: 'syz.0.3844': attribute type 1 has an invalid length. [ 336.542475][T19670] __nla_validate_parse: 25 callbacks suppressed [ 336.542494][T19670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3854'. [ 336.867708][T19696] syzkaller0: entered promiscuous mode [ 336.873320][T19696] syzkaller0: entered allmulticast mode [ 337.001503][T19698] tipc: Started in network mode [ 337.010738][T19698] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 337.022619][T19698] tipc: Enabled bearer , priority 10 [ 337.130178][T19706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3868'. [ 337.159661][T19706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3868'. [ 337.195620][T19706] vlan2: entered allmulticast mode [ 337.275003][T19720] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3872'. [ 337.287252][T19720] netlink: 'syz.5.3872': attribute type 8 has an invalid length. [ 337.299201][T19720] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3872'. [ 337.309182][T19720] openvswitch: netlink: Flow actions attr not present in new flow. [ 337.319853][T19720] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3872'. [ 337.583298][T19737] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3879'. [ 337.594118][T19737] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3879'. [ 337.642779][T19739] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3880'. [ 337.927960][T19759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.962299][T19759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3883'. [ 338.089064][T19772] bond2: (slave veth0_to_bond): Releasing active interface [ 338.096765][T19772] veth0_to_bond: left promiscuous mode [ 338.146750][T18261] tipc: Node number set to 4269801492 [ 338.197329][T19776] netlink: 'syz.0.3889': attribute type 11 has an invalid length. [ 338.556725][T19798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.049493][T19825] IPVS: sync thread started: state = BACKUP, mcast_ifn = xfrm0, syncid = 1, id = 0 [ 339.509071][T19854] syzkaller0: entered promiscuous mode [ 339.515742][T19854] syzkaller0: entered allmulticast mode [ 341.509120][T19903] delete_channel: no stack [ 341.554507][T19907] __nla_validate_parse: 9 callbacks suppressed [ 341.554529][T19907] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3937'. [ 341.817920][T19922] x_tables: duplicate entry at hook 1 [ 342.137965][T19946] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 342.275014][T19953] wlan0 speed is unknown, defaulting to 1000 [ 342.299589][T19958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3956'. [ 342.316831][T19953] wg1 speed is unknown, defaulting to 1000 [ 342.438652][T19963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.468429][ T6248] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.552309][T19967] bond2: option lp_interval: invalid value (0) [ 342.565131][T19977] netlink: 'syz.4.3961': attribute type 1 has an invalid length. [ 342.627498][T19967] bond2: option lp_interval: allowed values 1 - 2147483647 [ 342.681942][T19967] bond2 (unregistering): Released all slaves [ 342.691833][T19986] openvswitch: netlink: Message has 8 unknown bytes. [ 342.716106][T19986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.761894][ T6248] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.787520][ T6248] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.796886][ T6248] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.036718][T19996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3969'. [ 343.186823][T20006] bpq0: left promiscuous mode [ 343.340566][T20026] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 343.367267][T20026] xt_policy: output policy not valid in PREROUTING and INPUT [ 343.418360][T20031] netlink: 'syz.4.3979': attribute type 4 has an invalid length. [ 343.418376][T20032] netlink: 'syz.4.3979': attribute type 23 has an invalid length. [ 343.502069][T20037] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3980'. [ 343.649631][T20045] Cannot find map_set index 0 as target [ 343.666371][T20047] syzkaller1: entered promiscuous mode [ 343.672206][T20047] syzkaller1: entered allmulticast mode [ 343.689033][T20047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3985'. [ 343.768234][T20056] netlink: 'syz.4.3987': attribute type 1 has an invalid length. [ 343.812339][T20056] bond1: (slave geneve2): making interface the new active one [ 343.820755][T20056] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 343.829810][ T4308] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 343.848356][ T4308] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 343.870424][ T4308] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 343.905937][ T49] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 344.340499][T20073] ۜ}JX: renamed from lo (while UP) [ 344.481050][T20075] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3993'. [ 344.857956][T20087] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3997'. [ 344.930107][T20095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4000'. [ 345.004472][T20098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4001'. [ 345.026148][T20100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4001'. [ 345.026217][T20095] xt_limit: Overflow, try lower: 271964/0 [ 345.203251][T20098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.213742][T20098] bond0 (unregistering): Released all slaves [ 345.255522][T20107] netlink: 'syz.3.4003': attribute type 83 has an invalid length. [ 345.263698][T20106] netlink: 'syz.3.4003': attribute type 83 has an invalid length. [ 345.324823][T20110] netlink: 'syz.5.4002': attribute type 10 has an invalid length. [ 345.367153][T20110] team0: Port device dummy0 added [ 345.590688][T20128] netlink: 'syz.4.4009': attribute type 2 has an invalid length. [ 345.610629][T20128] 9: entered promiscuous mode [ 345.650258][T20135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.803233][T20135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.916446][T20144] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 346.170282][T20172] xt_TCPMSS: Only works on TCP SYN packets [ 346.192051][T20174] xt_TCPMSS: Only works on TCP SYN packets [ 346.208194][T20169] veth3: entered allmulticast mode [ 346.410000][T20190] : entered promiscuous mode [ 346.617945][T20202] __nla_validate_parse: 9 callbacks suppressed [ 346.617964][T20202] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4030'. [ 346.664555][T20202] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4030'. [ 346.857688][T20217] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4034'. [ 347.002929][T20222] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4035'. [ 347.350988][T20259] netlink: 'syz.5.4045': attribute type 10 has an invalid length. [ 347.374719][T20260] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4042'. [ 347.553282][T20268] bridge6: entered promiscuous mode [ 347.572556][T20268] bridge6: entered allmulticast mode [ 347.583296][T20275] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4050'. [ 347.627085][T20278] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4049'. [ 347.656606][T20278] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4049'. [ 347.956629][T20304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4057'. [ 348.376095][T20272] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 348.676751][T20343] netlink: 108 bytes leftover after parsing attributes in process `syz.5.4070'. [ 348.905588][T20361] bond0: mtu less than device minimum [ 390.908345][ T5831] Bluetooth: hci2: command 0x0405 tx timeout [ 401.144208][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 406.263865][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 420.251116][T20392] __nla_validate_parse: 1 callbacks suppressed [ 420.251134][T20392] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4078'. [ 420.312955][T20398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4082'. [ 420.366796][T20398] openvswitch: netlink: Flow actions attr not present in new flow. [ 420.780951][T20413] netlink: 'syz.4.4088': attribute type 25 has an invalid length. [ 420.799372][T20409] wlan0 speed is unknown, defaulting to 1000 [ 420.809641][T20409] wg1 speed is unknown, defaulting to 1000 [ 421.228181][T20438] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4090'. [ 421.243137][T20438] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4090'. [ 421.252588][T20438] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4090'. [ 421.815254][T20453] IPVS: Unknown mcast interface: veth0_vlan [ 421.835222][T20453] IPVS: set_ctl: invalid protocol: 7 0.0.0.0:20003 [ 421.939414][T20464] x_tables: unsorted entry at hook 1 [ 422.164352][T20475] delete_channel: no stack [ 422.237094][T20486] netlink: 'syz.4.4106': attribute type 1 has an invalid length. [ 422.391843][T20486] bond2: entered promiscuous mode [ 422.407281][T20486] 8021q: adding VLAN 0 to HW filter on device bond2 [ 422.445307][T20487] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 422.458876][T20487] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 422.470584][T20487] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 422.639533][T20515] vlan1: entered allmulticast mode [ 422.653761][T20515] veth0_vlan: entered allmulticast mode [ 422.839065][T20528] veth0: entered promiscuous mode [ 422.846406][T20526] veth0: left promiscuous mode [ 422.882808][T20532] netlink: 35 bytes leftover after parsing attributes in process `syz.5.4118'. [ 422.971895][T20536] veth7: entered promiscuous mode [ 423.048139][T20543] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 423.104171][T20536] veth7: entered allmulticast mode [ 423.125041][T20542] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4118'. [ 423.165697][T20536] veth9: entered promiscuous mode [ 423.170912][T20536] veth9: entered allmulticast mode [ 423.362911][T20561] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4129'. [ 423.420485][T20565] netlink: 'syz.3.4131': attribute type 2 has an invalid length. [ 423.484550][T20569] netlink: 'syz.3.4132': attribute type 1 has an invalid length. [ 423.541032][T20571] netlink: 'syz.3.4133': attribute type 1 has an invalid length. [ 423.683144][T20571] 8021q: adding VLAN 0 to HW filter on device bond3 [ 423.736741][T20573] bond3: (slave veth0_to_bond): making interface the new active one [ 423.775695][T20573] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 423.820559][T20580] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 423.937951][T20586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4136'. [ 424.253298][T20597] xt_ipcomp: unknown flags 1D [ 424.294030][T20586] hsr_slave_1 (unregistering): left promiscuous mode [ 424.539093][T20608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4144'. [ 424.726583][T20615] netlink: 'syz.0.4147': attribute type 10 has an invalid length. [ 424.746075][T20615] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 425.002395][T20631] delete_channel: no stack [ 425.422568][T20649] __nla_validate_parse: 2 callbacks suppressed [ 425.422586][T20649] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4157'. [ 425.736292][T20671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4167'. [ 425.775493][T20677] netlink: 'syz.5.4168': attribute type 6 has an invalid length. [ 425.794331][T20680] xt_cgroup: xt_cgroup: no path or classid specified [ 426.079235][T20685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4171'. [ 426.092931][T20685] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 427.675647][T20721] netlink: 'syz.1.4180': attribute type 23 has an invalid length. [ 427.715750][T20721] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20002 [ 427.797711][T20728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4180'. [ 427.809406][T20729] netlink: 'syz.1.4180': attribute type 23 has an invalid length. [ 427.918160][T20708] team_slave_0: entered promiscuous mode [ 427.923895][T20708] team_slave_1: entered promiscuous mode [ 427.929549][T20708] dummy0: entered promiscuous mode [ 427.969927][T20708] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 428.153195][T20733] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4182'. [ 428.170330][T20742] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4185'. [ 428.179586][T20742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4185'. [ 428.193040][T20733] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4182'. [ 428.218587][T20745] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4186'. [ 428.249461][T20747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4187'. [ 428.388578][T20761] delete_channel: no stack [ 428.449107][T20761] netlink: 'syz.1.4188': attribute type 9 has an invalid length. [ 428.793315][T20783] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 428.813875][ T4207] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 428.823122][ T4207] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 428.867125][T20783] netlink: 'syz.1.4197': attribute type 6 has an invalid length. [ 428.876071][ T4207] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 429.042599][ T4207] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 429.110902][T20808] netlink: 'syz.5.4204': attribute type 1 has an invalid length. [ 429.211828][T20817] netlink: 'syz.3.4208': attribute type 11 has an invalid length. [ 429.239290][T20817] netlink: 'syz.3.4208': attribute type 4 has an invalid length. [ 430.094434][T20877] netlink: 'syz.5.4219': attribute type 12 has an invalid length. [ 430.112561][T20877] netlink: 'syz.5.4219': attribute type 29 has an invalid length. [ 430.579765][T20895] __nla_validate_parse: 25 callbacks suppressed [ 430.579783][T20895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4229'. [ 431.061207][T20929] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 431.168847][T20933] wlan0 speed is unknown, defaulting to 1000 [ 431.185899][T20933] wg1 speed is unknown, defaulting to 1000 [ 431.252458][T20945] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 431.434021][T20952] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4247'. [ 431.507832][T20955] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4247'. [ 431.736379][T20981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4248'. [ 431.903508][T20988] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4254'. [ 431.934098][T20988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4254'. [ 431.947114][T20988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4254'. [ 432.244464][T21015] netlink: 'syz.1.4263': attribute type 12 has an invalid length. [ 432.265929][T21012] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4261'. [ 432.446858][T21021] wireguard0: entered promiscuous mode [ 432.452585][T21021] wireguard0: entered allmulticast mode [ 432.476203][T21021] team0: Device wireguard0 is of different type [ 432.517260][T21031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4269'. [ 432.528119][T21029] netlink: 'syz.1.4266': attribute type 6 has an invalid length. [ 432.537121][T21031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4269'. [ 432.567565][T21034] batman_adv: batadv0: Adding interface: netdevsim0 [ 432.584212][T21034] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.616514][T21034] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 432.802068][T21044] ipvlan2: left promiscuous mode [ 432.822344][T21044] veth7: left promiscuous mode [ 432.828719][T21044] veth7: left allmulticast mode [ 432.847532][T21045] validate_nla: 1 callbacks suppressed [ 432.847549][T21045] netlink: 'syz.0.4271': attribute type 5 has an invalid length. [ 432.868138][T21044] veth9: left promiscuous mode [ 432.878950][T21044] veth9: left allmulticast mode [ 432.896126][ T4207] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.924647][T21045] geneve2: entered promiscuous mode [ 432.929883][T21045] geneve2: entered allmulticast mode [ 432.948600][ T4207] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.974900][ T4207] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 433.001816][ T4207] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.032478][ T4207] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 433.058489][ T4207] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.078335][ T4207] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 433.177404][ T4207] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 433.401622][T21077] tipc: Enabled bearer , priority 0 [ 433.411654][T21077] syzkaller0: entered promiscuous mode [ 433.418742][T21077] syzkaller0: entered allmulticast mode [ 433.436520][T21077] tipc: Resetting bearer [ 433.449958][T21076] tipc: Resetting bearer [ 433.467279][T21076] tipc: Disabling bearer [ 433.482713][T21079] delete_channel: no stack [ 433.557861][T21085] bridge_slave_1: mtu less than device minimum [ 433.624371][T21088] netlink: 'syz.5.4284': attribute type 1 has an invalid length. [ 433.641691][T21087] netlink: 'syz.5.4284': attribute type 1 has an invalid length. [ 433.690445][T21101] bond7: (slave ip6gretap1): making interface the new active one [ 433.701925][T21101] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 433.710306][T21101] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 433.719734][T21101] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 433.842774][T21111] pimreg3: entered allmulticast mode [ 434.045531][T21128] xt_TCPMSS: Only works on TCP SYN packets [ 434.078254][T21124] nbd: must specify at least one socket [ 434.347133][T21144] xt_ecn: cannot match TCP bits for non-tcp packets [ 434.910415][T21171] netlink: 'syz.5.4306': attribute type 8 has an invalid length. [ 434.925601][T21171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.940973][T21171] netlink: 'syz.5.4306': attribute type 11 has an invalid length. [ 435.300434][T21196] syzkaller0: entered promiscuous mode [ 435.316855][T21196] syzkaller0: entered allmulticast mode [ 435.608826][T21219] : renamed from hsr0 (while UP) [ 435.644245][T21206] __nla_validate_parse: 13 callbacks suppressed [ 435.644265][T21206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4318'. [ 435.679963][T21206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4318'. [ 435.698215][T21206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4318'. [ 435.729578][T21206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4318'. [ 435.888827][T21236] netlink: 'syz.3.4327': attribute type 64 has an invalid length. [ 435.897506][T21236] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4327'. [ 435.927328][T21238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4326'. [ 435.946350][T21238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4326'. [ 435.959439][T21241] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4328'. [ 435.970591][T21241] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4328'. [ 436.062374][T21246] netlink: 'syz.3.4331': attribute type 83 has an invalid length. [ 436.089811][T21246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4331'. [ 436.473203][T21278] netlink: 'syz.5.4340': attribute type 7 has an invalid length. [ 436.800452][T21292] openvswitch: netlink: Missing key (keys=40, expected=80) [ 436.824510][ T9282] wlan0: Trigger new scan to find an IBSS to join [ 436.832450][T21301] openvswitch: netlink: Missing key (keys=40, expected=80) [ 437.187440][T21324] syzkaller0: entered promiscuous mode [ 437.205687][T21324] syzkaller0: entered allmulticast mode [ 437.271511][T21336] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 437.383020][T21341] syz_tun: entered promiscuous mode [ 437.545594][T21350] veth0: entered promiscuous mode [ 438.079014][T21380] bond5: Invalid ad_actor_system MAC address. [ 438.086395][T21380] bond5: option ad_actor_system: invalid value (1) [ 438.114587][T21380] bond5 (unregistering): Released all slaves [ 438.152209][T21394] netlink: 'syz.0.4373': attribute type 3 has an invalid length. [ 438.169560][T21391] lo: entered allmulticast mode [ 438.192630][T21391] tunl0: entered allmulticast mode [ 438.229452][T21391] gre0: entered allmulticast mode [ 438.246859][T21391] erspan0: entered allmulticast mode [ 438.258200][T21391] ip_vti0: entered allmulticast mode [ 438.269220][T21391] ip6_vti0: entered allmulticast mode [ 438.296586][T21391] sit0: entered allmulticast mode [ 438.328083][T21391] ip6tnl0: entered allmulticast mode [ 438.339083][T21391] ip6gre0: entered allmulticast mode [ 438.352690][T21391] syz_tun: entered allmulticast mode [ 438.366646][T21391] ip6gretap0: entered allmulticast mode [ 438.379707][T21391] bridge0: entered allmulticast mode [ 438.386665][T21391] vcan0: entered allmulticast mode [ 438.400758][T21391] bond0: entered allmulticast mode [ 438.408652][T21391] bond_slave_0: entered allmulticast mode [ 438.415691][T21391] bond_slave_1: entered allmulticast mode [ 438.429853][T21391] team0: entered allmulticast mode [ 438.435808][T21391] team_slave_0: entered allmulticast mode [ 438.441693][T21391] team_slave_1: entered allmulticast mode [ 438.451373][T21391] dummy0: entered allmulticast mode [ 438.460725][T21391] nlmon0: entered allmulticast mode [ 438.468185][T21391] caif0: entered allmulticast mode [ 438.474061][T21391] batadv0: entered allmulticast mode [ 438.481912][T21391] vxcan0: entered allmulticast mode [ 438.489266][T21391] vxcan1: entered allmulticast mode [ 438.496031][T21391] veth0: entered allmulticast mode [ 438.504528][T21391] veth1: entered allmulticast mode [ 438.512565][T21391] wg0: entered allmulticast mode [ 438.520355][T21391] wg1: entered allmulticast mode [ 438.527731][T21391] wg2: entered allmulticast mode [ 438.535193][T21391] veth0_to_bridge: entered allmulticast mode [ 438.547381][T21391] veth1_to_bridge: entered allmulticast mode [ 438.558656][T21391] veth0_to_bond: entered allmulticast mode [ 438.568834][T21391] veth1_to_bond: entered allmulticast mode [ 438.578891][T21391] veth0_to_team: entered allmulticast mode [ 438.591867][T21391] veth1_to_team: entered allmulticast mode [ 438.602361][T21391] veth0_to_batadv: entered allmulticast mode [ 438.611227][T21391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.619456][T21391] batadv_slave_0: entered allmulticast mode [ 438.628428][T21391] xfrm0: entered allmulticast mode [ 438.636338][T21391] veth0_to_hsr: entered allmulticast mode [ 438.645784][T21391] hsr_slave_0: entered allmulticast mode [ 438.653918][T21391] veth1_to_hsr: entered allmulticast mode [ 438.662491][T21391] hsr_slave_1: entered allmulticast mode [ 438.670856][T21391] hsr0: entered allmulticast mode [ 438.678780][T21391] veth1_virt_wifi: entered allmulticast mode [ 438.688056][T21391] veth0_virt_wifi: entered allmulticast mode [ 438.696413][T21391] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 438.705113][T21391] veth1_vlan: entered allmulticast mode [ 438.713882][T21391] veth0_vlan: entered allmulticast mode [ 438.727066][T21391] vlan0: entered allmulticast mode [ 438.732301][T21391] vlan1: entered allmulticast mode [ 438.738447][T21391] macvlan0: entered allmulticast mode [ 438.748461][T21391] macvlan1: entered allmulticast mode [ 438.757017][T21391] ipvlan0: entered allmulticast mode [ 438.762464][T21391] ipvlan1: entered allmulticast mode [ 438.769160][T21391] veth1_macvtap: entered allmulticast mode [ 438.778342][T21391] veth0_macvtap: entered allmulticast mode [ 438.787054][T21391] macvtap0: entered allmulticast mode [ 438.795534][T21391] macsec0: entered allmulticast mode [ 438.805421][T21391] geneve0: entered allmulticast mode [ 438.814618][T21391] geneve1: entered allmulticast mode [ 438.822981][T21391] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 438.835757][T21391] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 438.847299][T21391] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 438.857106][T21391] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 438.871705][T21391] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode [ 438.885401][T21391] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode [ 438.894643][T21391] ip6tnl1: entered allmulticast mode [ 438.900020][T21391] vxcan2: entered allmulticast mode [ 438.908315][T21391] vxcan3: entered allmulticast mode [ 438.914157][T21391] bridge1: entered allmulticast mode [ 438.919762][T21391] bridge2: entered allmulticast mode [ 438.929399][T21391] bond1: left promiscuous mode [ 438.934664][T21391] bridge3: left promiscuous mode [ 438.939714][T21391] bond1: entered allmulticast mode [ 438.944937][T21391] bridge3: entered allmulticast mode [ 438.953457][T21391] batadv1: entered allmulticast mode [ 438.959752][T21391] @: entered allmulticast mode [ 438.969489][T21391] bridge4: entered allmulticast mode [ 438.976820][T21391] syztnl0: entered allmulticast mode [ 438.982182][T21391] geneve2: entered allmulticast mode [ 438.988291][T21391] bridge5: entered allmulticast mode [ 438.994091][T21391] ip6tnl2: entered allmulticast mode [ 439.001216][T21391] bridge6: left promiscuous mode [ 439.007495][T21391] bond2: entered allmulticast mode [ 439.012627][T21391] geneve3: entered allmulticast mode [ 439.019898][T21391] sit1: entered allmulticast mode [ 439.026378][T21391] macsec1: entered allmulticast mode [ 439.034585][T21396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.041961][T21396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.060813][T21396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.069624][T21396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.082783][T21396] batman_adv: batadv0: Removing interface: netdevsim0 [ 439.113711][ T1138] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.122617][ T1138] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.132327][ T1138] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 439.141681][ T1138] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.153334][ T1138] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.163747][ T1138] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 439.195024][ T1138] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.214861][ T1138] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.224741][ T1138] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 439.263969][ T1138] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 439.273804][ T1138] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.303924][ T1138] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 439.598138][T21439] lo: entered allmulticast mode [ 439.617751][T21439] tunl0: entered allmulticast mode [ 439.623045][T21439] gre0: entered allmulticast mode [ 439.631507][T21439] gretap0: entered allmulticast mode [ 439.639452][T21439] erspan0: entered allmulticast mode [ 439.646600][T21439] ip_vti0: entered allmulticast mode [ 439.652281][T21439] ip6_vti0: entered allmulticast mode [ 439.660564][T21439] sit0: entered allmulticast mode [ 439.666174][T21439] ip6tnl0: entered allmulticast mode [ 439.671902][T21439] ip6gre0: entered allmulticast mode [ 439.679329][T21439] syz_tun: entered allmulticast mode [ 439.685311][T21439] ip6gretap0: entered allmulticast mode [ 439.691080][T21439] bridge0: entered allmulticast mode [ 439.697746][T21439] vcan0: entered allmulticast mode [ 439.708081][T21439] bond0: entered allmulticast mode [ 439.713195][T21439] bond_slave_0: entered allmulticast mode [ 439.719572][T21439] bond_slave_1: entered allmulticast mode [ 439.731659][T21439] team0: entered allmulticast mode [ 439.738125][T21439] team_slave_0: entered allmulticast mode [ 439.744915][T21439] team_slave_1: entered allmulticast mode [ 439.755785][T21439] dummy0: entered allmulticast mode [ 439.764161][T21439] nlmon0: entered allmulticast mode [ 439.770734][T21439] caif0: entered allmulticast mode [ 439.777641][T21439] vxcan0: entered allmulticast mode [ 439.785129][T21439] vxcan1: entered allmulticast mode [ 439.791910][T21439] veth0: entered allmulticast mode [ 439.800508][T21439] veth1: entered allmulticast mode [ 439.808912][T21439] wg0: entered allmulticast mode [ 439.817173][T21439] wg1: entered allmulticast mode [ 439.824461][T21439] wg2: entered allmulticast mode [ 439.831213][T21439] veth0_to_bridge: entered allmulticast mode [ 439.842269][T21439] veth1_to_bridge: entered allmulticast mode [ 439.854660][T21439] veth0_to_bond: entered allmulticast mode [ 439.864723][ T3493] wlan0: Trigger new scan to find an IBSS to join [ 439.871850][T21439] veth1_to_bond: entered allmulticast mode [ 439.883782][T21439] veth0_to_team: entered allmulticast mode [ 439.895375][T21439] veth1_to_team: entered allmulticast mode [ 439.906572][T21439] veth0_to_batadv: entered allmulticast mode [ 439.915482][T21439] batadv_slave_0: entered allmulticast mode [ 439.924937][T21439] veth1_to_batadv: entered allmulticast mode [ 439.933847][T21439] batadv_slave_1: entered allmulticast mode [ 439.942284][T21439] xfrm0: entered allmulticast mode [ 439.951691][T21439] veth0_to_hsr: entered allmulticast mode [ 439.959711][T21439] hsr_slave_0: entered allmulticast mode [ 439.968587][T21439] veth1_to_hsr: entered allmulticast mode [ 439.978202][T21439] hsr_slave_1: entered allmulticast mode [ 439.986838][T21439] hsr0: entered allmulticast mode [ 439.995203][T21439] veth1_virt_wifi: entered allmulticast mode [ 440.004598][T21439] veth0_virt_wifi: entered allmulticast mode [ 440.012570][T21439] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 440.021497][T21439] veth1_vlan: entered allmulticast mode [ 440.040196][T21439] vlan1: entered allmulticast mode [ 440.048301][T21439] macvlan0: entered allmulticast mode [ 440.058523][T21439] macvlan1: entered allmulticast mode [ 440.067210][T21439] ipvlan0: entered allmulticast mode [ 440.072598][T21439] ipvlan1: entered allmulticast mode [ 440.079364][T21439] veth1_macvtap: entered allmulticast mode [ 440.088636][T21439] veth0_macvtap: entered allmulticast mode [ 440.097569][T21439] macvtap0: entered allmulticast mode [ 440.107546][T21439] macsec0: entered allmulticast mode [ 440.115675][T21439] geneve0: entered allmulticast mode [ 440.124164][T21439] geneve1: entered allmulticast mode [ 440.131370][T21439] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 440.140393][T21439] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 440.150563][T21439] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 440.161763][T21439] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 440.175220][T21439] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 440.184699][T21439] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 440.191938][T21439] bridge1: entered allmulticast mode [ 440.197679][T21439] 9: entered allmulticast mode [ 440.205168][T21439] gre1: entered allmulticast mode [ 440.211839][T21439] macvtap1: left promiscuous mode [ 440.219074][T21439] vlan0: left promiscuous mode [ 440.224746][T21439] macvtap2: left promiscuous mode [ 440.231590][T21439] ip6gre1: entered allmulticast mode [ 440.238991][T21439] macvlan2: entered allmulticast mode [ 440.246656][T21439] bond1: entered allmulticast mode [ 440.251765][T21439] geneve2: entered allmulticast mode [ 440.259158][T21439] vti60: entered allmulticast mode [ 440.265233][T21439] 9: entered allmulticast mode [ 440.270642][T21439] bridge2: entered allmulticast mode [ 440.276099][T21439] veth2: entered allmulticast mode [ 440.281980][T21439] bond2: left promiscuous mode [ 440.287654][T21439] bond2: entered allmulticast mode [ 440.294480][T21439] ip6erspan0: entered allmulticast mode [ 440.326788][ T9282] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.348995][ T9282] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 440.382112][ T9282] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.416835][ T9282] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 440.427128][T21453] netlink: 'syz.4.4391': attribute type 21 has an invalid length. [ 440.435685][ T9282] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.457110][ T9282] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 440.477081][ T9282] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.497096][ T9282] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 440.654436][T21469] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 440.723819][T21479] __nla_validate_parse: 9 callbacks suppressed [ 440.723836][T21479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4398'. [ 440.767178][T21469] bond3: (slave lo): Enslaving as a backup interface with an up link [ 440.784183][ T3493] wlan0: Creating new IBSS network, BSSID 92:72:5d:f3:11:90 [ 440.801528][T21469] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 440.998107][T21496] gre2: entered allmulticast mode [ 441.030782][T21500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4403'. [ 441.095414][T21503] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4402'. [ 441.149041][T21503] vxcan2: entered allmulticast mode [ 441.275333][T21516] netlink: 'syz.0.4408': attribute type 1 has an invalid length. [ 441.380158][T21524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4409'. [ 441.380158][T21522] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4409'. [ 441.380195][T21524] netlink: 'syz.4.4409': attribute type 7 has an invalid length. [ 441.416469][T21516] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 441.426911][T21522] netlink: 'syz.4.4409': attribute type 7 has an invalid length. [ 441.455248][T21526] netlink: 'syz.3.4411': attribute type 10 has an invalid length. [ 441.463842][T21524] netlink: 'syz.4.4409': attribute type 8 has an invalid length. [ 441.471586][T21524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4409'. [ 441.474205][T21526] syzkaller0: entered promiscuous mode [ 441.502826][T21522] netlink: 'syz.4.4409': attribute type 8 has an invalid length. [ 441.510925][T21522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4409'. [ 441.520056][T21526] syzkaller0: entered allmulticast mode [ 441.592373][T21533] netlink: 'syz.5.4413': attribute type 83 has an invalid length. [ 441.699346][T21549] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4416'. [ 441.797484][T21561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4416'. [ 442.564596][T21579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4425'. [ 443.119037][T21620] openvswitch: netlink: Key 9 has unexpected len 2 expected 4 [ 444.080163][T21681] syzkaller0: entered promiscuous mode [ 444.085711][T21681] syzkaller0: entered allmulticast mode [ 444.189341][T21687] netlink: 'syz.0.4452': attribute type 14 has an invalid length. [ 444.238293][ T9282] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.274288][ T9282] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.283211][T21687] netlink: 'syz.0.4452': attribute type 14 has an invalid length. [ 444.305758][ T9282] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.333714][ T9282] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.436658][T21695] nbd2: detected capacity change from 0 to 127 [ 444.632415][ T5831] block nbd2: Receive control failed (result -32) [ 445.142511][T21751] netlink: 'syz.5.4470': attribute type 5 has an invalid length. [ 445.162282][T21751] netlink: 'syz.5.4470': attribute type 6 has an invalid length. [ 445.251357][T21752] bond5: entered promiscuous mode [ 445.258642][T21752] bond5: entered allmulticast mode [ 445.280824][T21752] 8021q: adding VLAN 0 to HW filter on device bond5 [ 445.346232][T21766] xt_CT: You must specify a L4 protocol and not use inversions on it [ 445.817580][T21798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 445.882601][T21804] xt_l2tp: wrong L2TP version: 0 [ 446.081889][T21813] netlink: 'syz.5.4489': attribute type 64 has an invalid length. [ 446.104252][T21813] __nla_validate_parse: 20 callbacks suppressed [ 446.104269][T21813] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4489'. [ 446.245602][T21824] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4489'. [ 446.336727][T21830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4496'. [ 446.370927][T21832] netlink: 'syz.1.4497': attribute type 1 has an invalid length. [ 446.441187][T21832] 8021q: adding VLAN 0 to HW filter on device bond4 [ 446.479199][T21841] bond4: entered allmulticast mode [ 446.487167][T21844] xt_nat: multiple ranges no longer supported [ 446.506563][T21842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4500'. [ 446.524487][T21842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4500'. [ 446.537219][T21832] tipc: Enabling of bearer rejected, failed to enable media [ 446.547478][T21832] netlink: 'syz.1.4497': attribute type 12 has an invalid length. [ 446.816320][T21866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4505'. [ 446.899699][T21871] netlink: 'syz.3.4507': attribute type 29 has an invalid length. [ 446.940596][T21871] netlink: 'syz.3.4507': attribute type 29 has an invalid length. [ 447.014476][T21871] netlink: 500 bytes leftover after parsing attributes in process `syz.3.4507'. [ 447.180141][T21891] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4512'. [ 447.216694][T21892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4513'. [ 447.419789][T21917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4517'. [ 447.838908][T21944] x_tables: duplicate entry at hook 1 [ 448.014432][T21949] netlink: 'syz.4.4529': attribute type 1 has an invalid length. [ 448.112832][T21949] bond3: entered promiscuous mode [ 448.119672][T21949] 8021q: adding VLAN 0 to HW filter on device bond3 [ 448.214937][T21959] 8021q: adding VLAN 0 to HW filter on device bond4 [ 448.229436][T21959] bond3: (slave bond4): making interface the new active one [ 448.238084][T21959] bond4: entered promiscuous mode [ 448.244609][T21959] bond3: (slave bond4): Enslaving as an active interface with an up link [ 448.314461][T21949] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 448.327475][T21949] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 448.551313][T21987] bridge7: entered promiscuous mode [ 448.561546][T21987] bridge7: entered allmulticast mode [ 448.994646][T22024] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 449.837817][T22087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.232439][T22125] validate_nla: 3 callbacks suppressed [ 450.232456][T22125] netlink: 'syz.5.4576': attribute type 12 has an invalid length. [ 450.247055][T22125] netlink: 'syz.5.4576': attribute type 29 has an invalid length. [ 450.254960][T22125] netlink: 'syz.5.4576': attribute type 2 has an invalid length. [ 450.295081][T22126] netlink: 'syz.1.4577': attribute type 1 has an invalid length. [ 450.313791][T22126] netlink: 'syz.1.4577': attribute type 4 has an invalid length. [ 450.391976][T22128] syzkaller0: entered promiscuous mode [ 450.411751][T22128] syzkaller0: entered allmulticast mode [ 451.946663][T22151] syzkaller0: entered promiscuous mode [ 451.953067][T22151] syzkaller0: entered allmulticast mode [ 452.258993][T22182] __nla_validate_parse: 21 callbacks suppressed [ 452.259011][T22182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4589'. [ 452.362070][T22187] syzkaller0: entered promiscuous mode [ 452.379295][T22187] syzkaller0: entered allmulticast mode [ 452.420803][T22189] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4592'. [ 452.422149][T22191] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4593'. [ 452.434273][T22187] 0: reclassify loop, rule prio 0, protocol 800 [ 452.478080][ T8217] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x1 [ 452.504672][ T8217] hid-generic 0005:0C49:1012.0001: ignoring exceeding usage max [ 452.528295][T22196] netlink: 'syz.1.4595': attribute type 3 has an invalid length. [ 452.556021][ T8217] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x4 [ 452.573720][T22196] netlink: 'syz.1.4595': attribute type 11 has an invalid length. [ 452.582959][T22196] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4595'. [ 452.583826][ T8217] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x5 [ 452.620706][ T8217] hid-generic 0005:0C49:1012.0001: reserved main item tag 0xd [ 452.659847][ T8217] hid-generic 0005:0C49:1012.0001: item fetching failed at offset 31/106 [ 452.692484][ T8217] hid-generic 0005:0C49:1012.0001: probe with driver hid-generic failed with error -22 [ 452.749593][T22221] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4597'. [ 452.807232][T22242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4599'. [ 452.960394][T22266] netlink: 'syz.1.4601': attribute type 4 has an invalid length. [ 452.975809][T22266] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4601'. [ 452.993084][T22266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4601'. [ 453.069910][T22278] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4604'. [ 453.211270][T22291] pim6reg1: entered promiscuous mode [ 453.217220][T22291] pim6reg1: entered allmulticast mode [ 453.274390][T22292] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4607'. [ 453.281920][T22295] xt_TCPMSS: Only works on TCP SYN packets [ 453.298032][T22295] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 453.435885][T22307] 8021q: VLANs not supported on ip_vti0 [ 453.470580][T22307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.519111][T22317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.520636][T22316] 8021q: VLANs not supported on ip_vti0 [ 453.777004][T22337] team0: Device ipvlan2 failed to register rx_handler [ 453.802327][T22339] netlink: 'syz.3.4621': attribute type 13 has an invalid length. [ 453.867870][T22339] gretap0: refused to change device tx_queue_len [ 453.884447][T22339] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 454.111045][T22363] netlink: 'syz.0.4630': attribute type 10 has an invalid length. [ 454.220378][T22374] netlink: ct family unspecified [ 454.245788][T22359] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 454.660251][T22408] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 454.805582][T22419] : renamed from bond_slave_0 [ 455.064488][T22426] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.950981][T22492] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 456.227218][T22514] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.234951][T22514] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.550725][T22533] pim6reg: entered allmulticast mode [ 456.720596][T22543] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 456.760913][T22543] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 456.807115][T22543] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 456.833936][T22543] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 456.852203][T22543] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 456.872354][T22556] validate_nla: 8 callbacks suppressed [ 456.872370][T22556] netlink: 'syz.4.4691': attribute type 33 has an invalid length. [ 456.888435][T22543] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 456.905086][T22543] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 456.913070][T22543] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 456.920718][T22558] x_tables: duplicate underflow at hook 1 [ 456.926923][T22543] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 456.954670][T22543] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 457.092036][T22567] netlink: 'syz.3.4695': attribute type 1 has an invalid length. [ 457.196003][T22569] xfrm1: entered promiscuous mode [ 457.206892][T22569] xfrm1: entered allmulticast mode [ 457.431490][T22597] ipvlan1: left allmulticast mode [ 457.667461][T22621] __nla_validate_parse: 27 callbacks suppressed [ 457.667478][T22621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4710'. [ 457.718775][T22616] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4710'. [ 457.737607][T22628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4714'. [ 457.808077][T22632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4715'. [ 457.958828][T22641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4717'. [ 458.005270][T22646] netlink: 'syz.1.4718': attribute type 178 has an invalid length. [ 458.176798][T22650] netlink: 'syz.4.4720': attribute type 1 has an invalid length. [ 458.185474][T22650] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4720'. [ 458.199528][T22650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4720'. [ 458.337281][T22663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4722'. [ 458.465666][T22668] smc: net device gre0 applied user defined pnetid SYZ1 [ 458.487042][T22670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4726'. [ 458.511494][T22670] netlink: 'syz.0.4726': attribute type 1 has an invalid length. [ 458.537759][T22670] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4726'. [ 458.565207][T22668] smc: net device gre0 erased user defined pnetid SYZ1 [ 458.735048][T22684] bond0: entered promiscuous mode [ 458.742708][T22684] bond_slave_0: entered promiscuous mode [ 458.751730][T22684] bond_slave_1: entered promiscuous mode [ 458.760764][T22684] bond0: left allmulticast mode [ 458.777417][T22688] netlink: 'syz.5.4731': attribute type 1 has an invalid length. [ 458.926116][T22697] netlink: 'syz.4.4734': attribute type 4 has an invalid length. [ 458.942838][T22698] sctp: [Deprecated]: syz.5.4735 (pid 22698) Use of int in max_burst socket option. [ 458.942838][T22698] Use struct sctp_assoc_value instead [ 459.214051][T22721] netlink: 'syz.4.4743': attribute type 2 has an invalid length. [ 465.751340][ T9278] bond10 (unregistering): (slave gretap1): Releasing active interface [ 466.230086][ T9278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.240123][ T9278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.250399][ T9278] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 466.260649][ T9278] bond0 (unregistering): (slave team0): Releasing backup interface [ 466.270074][ T9278] bond0 (unregistering): Released all slaves [ 466.283257][ T9278] bond1 (unregistering): Released all slaves [ 466.296921][ T9278] bond2 (unregistering): (slave bond3): Releasing backup interface [ 466.306035][ T9278] bond2 (unregistering): (slave bond4): Releasing backup interface [ 466.316527][ T9278] bond2 (unregistering): (slave bond5): Releasing backup interface [ 466.327660][ T9278] bond2 (unregistering): Released all slaves [ 466.412533][ T9278] bond3 (unregistering): Released all slaves [ 466.495751][ T9278] bond4 (unregistering): Released all slaves [ 466.580936][ T9278] bond5 (unregistering): Released all slaves [ 466.668903][ T9278] team0: Port device macvlan2 removed [ 466.678437][ T9278] bond6 (unregistering): Released all slaves [ 466.690165][ T9278] bond7 (unregistering): Released all slaves [ 466.778854][ T9278] bond8 (unregistering): Released all slaves [ 466.790722][ T9278] bond9 (unregistering): Released all slaves [ 466.880549][ T9278] bond10 (unregistering): Released all slaves [ 466.967583][ T9278] bond11 (unregistering): (slave veth3): Releasing active interface [ 466.976381][ T9278] bond11 (unregistering): Released all slaves [ 467.066495][ T9278] bond12 (unregistering): Released all slaves [ 467.079036][ T9278] bond13 (unregistering): Released all slaves [ 467.091769][ T9278] bond14 (unregistering): Released all slaves [ 467.103768][ T9278] bond15 (unregistering): Released all slaves [ 467.195451][ T9278] bond16 (unregistering): Released all slaves [ 467.208635][ T9278] bond17 (unregistering): Released all slaves [ 467.368481][ T9278] tipc: Left network mode [ 467.551858][ T9278] hsr_slave_0: left promiscuous mode [ 467.557901][ T9278] hsr_slave_1: left promiscuous mode [ 467.846543][ T9278] team0 (unregistering): Port device team_slave_1 removed [ 467.880116][ T9278] team0 (unregistering): Port device team_slave_0 removed [ 533.669132][T22746] __nla_validate_parse: 9 callbacks suppressed [ 533.669152][T22746] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4747'. [ 533.757483][T22755] bridge0: port 3(team0) entered disabled state [ 533.813281][T22755] team0 (unregistering): left allmulticast mode [ 533.821238][T22755] team_slave_0: left allmulticast mode [ 533.829392][T22755] team_slave_1: left allmulticast mode [ 533.836080][T22755] team0 (unregistering): left promiscuous mode [ 533.842324][T22755] team_slave_0: left promiscuous mode [ 533.849066][T22755] team_slave_1: left promiscuous mode [ 533.855666][T22755] bridge0: port 3(team0) entered disabled state [ 533.876418][T22755] team0 (unregistering): Port device team_slave_0 removed [ 533.898417][T22755] team0 (unregistering): Port device team_slave_1 removed [ 534.091973][T22783] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 534.156500][T22791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4761'. [ 534.188761][T22795] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4760'. [ 534.198773][T22795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4760'. [ 534.208318][T22795] ipvlan1: entered promiscuous mode [ 534.215265][T22795] ipvlan1: entered allmulticast mode [ 534.299992][T22799] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.4762'. [ 534.395661][T22809] netlink: 'syz.0.4765': attribute type 24 has an invalid length. [ 534.569189][T22817] syzkaller0: entered promiscuous mode [ 534.574882][T22817] syzkaller0: entered allmulticast mode [ 534.976988][T22826] syzkaller1: entered promiscuous mode [ 535.003489][T22826] syzkaller1: entered allmulticast mode [ 535.075837][T22837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4772'. [ 535.208067][T22845] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4772'. [ 535.379141][T22851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4776'. [ 535.428440][T22857] netlink: 'syz.1.4779': attribute type 4 has an invalid length. [ 535.479145][T22858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.538716][T22857] netlink: 'syz.1.4779': attribute type 4 has an invalid length. [ 535.601885][T22857] netlink: 'syz.1.4779': attribute type 4 has an invalid length. [ 535.636295][T22857] netlink: 'syz.1.4779': attribute type 4 has an invalid length. [ 535.668166][T22870] netlink: 'syz.5.4783': attribute type 1 has an invalid length. [ 535.681119][T22857] netlink: 'syz.1.4779': attribute type 4 has an invalid length. [ 535.724782][T22857] netlink: 'syz.1.4779': attribute type 4 has an invalid length. [ 535.752152][T22857] netlink: 'syz.1.4779': attribute type 4 has an invalid length. [ 535.796561][T22857] netlink: 'syz.1.4779': attribute type 4 has an invalid length. [ 536.193066][T22907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4791'. [ 536.226404][T22907] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4791'. [ 536.448384][T22922] SET target dimension over the limit! [ 536.469629][T22923] SET target dimension over the limit! [ 536.488021][ T30] audit: type=1804 audit(1767721144.290:2): pid=22929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4798" name="/newroot/328/cgroup.controllers" dev="tmpfs" ino=1686 res=1 errno=0 [ 536.529084][ T30] audit: type=1800 audit(1767721144.300:3): pid=22929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4798" name="cgroup.controllers" dev="tmpfs" ino=1686 res=0 errno=0 [ 536.974775][T22950] [ 536.977130][T22950] ====================================================== [ 536.984154][T22950] WARNING: possible circular locking dependency detected [ 536.991188][T22950] syzkaller #0 Not tainted [ 536.995608][T22950] ------------------------------------------------------ [ 537.002629][T22950] syz.5.4806/22950 is trying to acquire lock: [ 537.008692][T22950] ffff8881417b0f28 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b4/0x450 [ 537.018116][T22950] [ 537.018116][T22950] but task is already holding lock: [ 537.025478][T22950] ffff8881417b09e8 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x199/0x450 [ 537.035671][T22950] [ 537.035671][T22950] which lock already depends on the new lock. [ 537.035671][T22950] [ 537.046060][T22950] [ 537.046060][T22950] the existing dependency chain (in reverse order) is: [ 537.055063][T22950] [ 537.055063][T22950] -> #6 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 537.063662][T22950] blk_alloc_queue+0x52f/0x610 [ 537.068942][T22950] __blk_mq_alloc_disk+0x15c/0x340 [ 537.074569][T22950] nbd_dev_add+0x46c/0xae0 [ 537.079504][T22950] nbd_init+0x168/0x1f0 [ 537.084173][T22950] do_one_initcall+0x1f1/0x800 [ 537.089447][T22950] do_initcall_level+0x104/0x190 [ 537.094890][T22950] do_initcalls+0x59/0xa0 [ 537.099727][T22950] kernel_init_freeable+0x2a7/0x3d0 [ 537.105429][T22950] kernel_init+0x1d/0x1d0 [ 537.110272][T22950] ret_from_fork+0x510/0xa50 [ 537.115366][T22950] ret_from_fork_asm+0x1a/0x30 [ 537.120649][T22950] [ 537.120649][T22950] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 537.127850][T22950] fs_reclaim_acquire+0x72/0x100 [ 537.133296][T22950] __kmalloc_cache_node_noprof+0x45/0x700 [ 537.139523][T22950] create_worker+0x112/0x720 [ 537.144627][T22950] workqueue_prepare_cpu+0xe4/0x170 [ 537.150343][T22950] cpuhp_invoke_callback+0x445/0x860 [ 537.156148][T22950] _cpu_up+0x2ce/0x5c0 [ 537.160721][T22950] cpu_up+0x1d2/0x220 [ 537.165206][T22950] cpuhp_bringup_mask+0xb2/0x1a0 [ 537.170655][T22950] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 537.176969][T22950] bringup_nonboot_cpus+0x17/0x30 [ 537.182513][T22950] smp_init+0x32/0x110 [ 537.187091][T22950] kernel_init_freeable+0x289/0x3d0 [ 537.192794][T22950] kernel_init+0x1d/0x1d0 [ 537.197636][T22950] ret_from_fork+0x510/0xa50 [ 537.202735][T22950] ret_from_fork_asm+0x1a/0x30 [ 537.208011][T22950] [ 537.208011][T22950] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 537.215732][T22950] cpus_read_lock+0x42/0x160 [ 537.220827][T22950] static_key_slow_inc+0x12/0x30 [ 537.226278][T22950] nbd_genl_reconfigure+0x10d8/0x1a50 [ 537.232164][T22950] genl_family_rcv_msg_doit+0x215/0x300 [ 537.238213][T22950] genl_rcv_msg+0x60e/0x790 [ 537.243226][T22950] netlink_rcv_skb+0x208/0x470 [ 537.248496][T22950] genl_rcv+0x28/0x40 [ 537.252990][T22950] netlink_unicast+0x82f/0x9e0 [ 537.258260][T22950] netlink_sendmsg+0x805/0xb30 [ 537.263536][T22950] __sock_sendmsg+0x21c/0x270 [ 537.268729][T22950] ____sys_sendmsg+0x505/0x820 [ 537.274003][T22950] ___sys_sendmsg+0x21f/0x2a0 [ 537.279188][T22950] __x64_sys_sendmsg+0x19b/0x260 [ 537.284635][T22950] do_syscall_64+0xec/0xf80 [ 537.289647][T22950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.296046][T22950] [ 537.296046][T22950] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 537.303679][T22950] __mutex_lock+0x187/0x1350 [ 537.308776][T22950] nbd_queue_rq+0x257/0xf10 [ 537.313792][T22950] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 537.319846][T22950] __blk_mq_sched_dispatch_requests+0xdac/0x1570 [ 537.326688][T22950] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 537.333184][T22950] blk_mq_run_hw_queue+0x348/0x4f0 [ 537.338804][T22950] blk_mq_dispatch_list+0xd0b/0xe00 [ 537.344517][T22950] blk_mq_flush_plug_list+0x469/0x550 [ 537.350399][T22950] __blk_flush_plug+0x3d3/0x4b0 [ 537.355762][T22950] __submit_bio+0x2d0/0x5a0 [ 537.360777][T22950] submit_bio_noacct_nocheck+0x2eb/0xa30 [ 537.366918][T22950] block_read_full_folio+0x599/0x830 [ 537.372712][T22950] filemap_read_folio+0x117/0x380 [ 537.378242][T22950] do_read_cache_folio+0x358/0x590 [ 537.383860][T22950] read_part_sector+0xb6/0x2b0 [ 537.389133][T22950] adfspart_check_ICS+0xa4/0xa50 [ 537.394580][T22950] bdev_disk_changed+0x75f/0x14b0 [ 537.400112][T22950] blkdev_get_whole+0x380/0x510 [ 537.405471][T22950] bdev_open+0x31e/0xd30 [ 537.410222][T22950] blkdev_open+0x457/0x600 [ 537.415147][T22950] do_dentry_open+0x7ce/0x1420 [ 537.420423][T22950] vfs_open+0x3b/0x340 [ 537.425000][T22950] path_openat+0x340e/0x3dd0 [ 537.430098][T22950] do_filp_open+0x1fa/0x410 [ 537.435104][T22950] do_sys_openat2+0x121/0x200 [ 537.440294][T22950] __x64_sys_openat+0x138/0x170 [ 537.445655][T22950] do_syscall_64+0xec/0xf80 [ 537.450666][T22950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.457067][T22950] [ 537.457067][T22950] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 537.464265][T22950] __mutex_lock+0x187/0x1350 [ 537.469369][T22950] nbd_queue_rq+0xc8/0xf10 [ 537.474298][T22950] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 537.480360][T22950] __blk_mq_sched_dispatch_requests+0xdac/0x1570 [ 537.487198][T22950] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 537.493689][T22950] blk_mq_run_hw_queue+0x348/0x4f0 [ 537.499307][T22950] blk_mq_dispatch_list+0xd0b/0xe00 [ 537.505016][T22950] blk_mq_flush_plug_list+0x469/0x550 [ 537.510895][T22950] __blk_flush_plug+0x3d3/0x4b0 [ 537.516254][T22950] __submit_bio+0x2d0/0x5a0 [ 537.521269][T22950] submit_bio_noacct_nocheck+0x2eb/0xa30 [ 537.527409][T22950] block_read_full_folio+0x599/0x830 [ 537.533205][T22950] filemap_read_folio+0x117/0x380 [ 537.538733][T22950] do_read_cache_folio+0x358/0x590 [ 537.544353][T22950] read_part_sector+0xb6/0x2b0 [ 537.549625][T22950] adfspart_check_ICS+0xa4/0xa50 [ 537.555069][T22950] bdev_disk_changed+0x75f/0x14b0 [ 537.560601][T22950] blkdev_get_whole+0x380/0x510 [ 537.565960][T22950] bdev_open+0x31e/0xd30 [ 537.570709][T22950] blkdev_open+0x457/0x600 [ 537.575637][T22950] do_dentry_open+0x7ce/0x1420 [ 537.580910][T22950] vfs_open+0x3b/0x340 [ 537.585484][T22950] path_openat+0x340e/0x3dd0 [ 537.590576][T22950] do_filp_open+0x1fa/0x410 [ 537.595581][T22950] do_sys_openat2+0x121/0x200 [ 537.600767][T22950] __x64_sys_openat+0x138/0x170 [ 537.606124][T22950] do_syscall_64+0xec/0xf80 [ 537.611131][T22950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.617529][T22950] [ 537.617529][T22950] -> #1 (set->srcu){.+.+}-{0:0}: [ 537.624643][T22950] __synchronize_srcu+0x96/0x390 [ 537.630103][T22950] elevator_switch+0x12b/0x5f0 [ 537.635391][T22950] elevator_change+0x2cd/0x450 [ 537.640670][T22950] elevator_set_default+0x1af/0x2b0 [ 537.646387][T22950] blk_register_queue+0x34e/0x3f0 [ 537.651932][T22950] __add_disk+0x677/0xd50 [ 537.656775][T22950] add_disk_fwnode+0xfc/0x480 [ 537.661966][T22950] nbd_dev_add+0x717/0xae0 [ 537.666893][T22950] nbd_init+0x168/0x1f0 [ 537.671562][T22950] do_one_initcall+0x1f1/0x800 [ 537.676835][T22950] do_initcall_level+0x104/0x190 [ 537.682280][T22950] do_initcalls+0x59/0xa0 [ 537.687111][T22950] kernel_init_freeable+0x2a7/0x3d0 [ 537.692820][T22950] kernel_init+0x1d/0x1d0 [ 537.697657][T22950] ret_from_fork+0x510/0xa50 [ 537.702751][T22950] ret_from_fork_asm+0x1a/0x30 [ 537.708024][T22950] [ 537.708024][T22950] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 537.715829][T22950] __lock_acquire+0x15a6/0x2cf0 [ 537.721186][T22950] lock_acquire+0x107/0x340 [ 537.726193][T22950] __mutex_lock+0x187/0x1350 [ 537.731292][T22950] elevator_change+0x1b4/0x450 [ 537.736569][T22950] elevator_set_none+0x98/0x110 [ 537.741931][T22950] blk_mq_update_nr_hw_queues+0x5b4/0x1a80 [ 537.748247][T22950] nbd_start_device+0x17f/0xb10 [ 537.753609][T22950] nbd_genl_connect+0x1353/0x1900 [ 537.759147][T22950] genl_family_rcv_msg_doit+0x215/0x300 [ 537.765199][T22950] genl_rcv_msg+0x60e/0x790 [ 537.770202][T22950] netlink_rcv_skb+0x208/0x470 [ 537.775472][T22950] genl_rcv+0x28/0x40 [ 537.779966][T22950] netlink_unicast+0x82f/0x9e0 [ 537.785234][T22950] netlink_sendmsg+0x805/0xb30 [ 537.790507][T22950] __sock_sendmsg+0x21c/0x270 [ 537.795697][T22950] ____sys_sendmsg+0x505/0x820 [ 537.800966][T22950] ___sys_sendmsg+0x21f/0x2a0 [ 537.806148][T22950] __x64_sys_sendmsg+0x19b/0x260 [ 537.811593][T22950] do_syscall_64+0xec/0xf80 [ 537.816602][T22950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.823001][T22950] [ 537.823001][T22950] other info that might help us debug this: [ 537.823001][T22950] [ 537.833210][T22950] Chain exists of: [ 537.833210][T22950] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#52 [ 537.833210][T22950] [ 537.846936][T22950] Possible unsafe locking scenario: [ 537.846936][T22950] [ 537.854367][T22950] CPU0 CPU1 [ 537.859714][T22950] ---- ---- [ 537.865057][T22950] lock(&q->q_usage_counter(io)#52); [ 537.870422][T22950] lock(fs_reclaim); [ 537.876908][T22950] lock(&q->q_usage_counter(io)#52); [ 537.884791][T22950] lock(&q->elevator_lock); [ 537.889368][T22950] [ 537.889368][T22950] *** DEADLOCK *** [ 537.889368][T22950] [ 537.897492][T22950] 6 locks held by syz.5.4806/22950: [ 537.902667][T22950] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 537.910847][T22950] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 537.919795][T22950] #2: ffff888024e5c9d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa6/0x1a80 [ 537.931187][T22950] #3: ffff888024e5c8d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xb9/0x1a80 [ 537.942147][T22950] #4: ffff8881417b09e8 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x199/0x450 [ 537.952761][T22950] #5: ffff8881417b0a20 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: elevator_change+0x199/0x450 [ 537.963632][T22950] [ 537.963632][T22950] stack backtrace: [ 537.969520][T22950] CPU: 1 UID: 0 PID: 22950 Comm: syz.5.4806 Not tainted syzkaller #0 PREEMPT(full) [ 537.969539][T22950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 537.969553][T22950] Call Trace: [ 537.969560][T22950] [ 537.969569][T22950] dump_stack_lvl+0xe8/0x150 [ 537.969591][T22950] print_circular_bug+0x2e2/0x300 [ 537.969614][T22950] check_noncircular+0x12e/0x150 [ 537.969635][T22950] __lock_acquire+0x15a6/0x2cf0 [ 537.969661][T22950] ? elevator_change+0x1b4/0x450 [ 537.969680][T22950] lock_acquire+0x107/0x340 [ 537.969695][T22950] ? elevator_change+0x1b4/0x450 [ 537.969720][T22950] __mutex_lock+0x187/0x1350 [ 537.969738][T22950] ? elevator_change+0x1b4/0x450 [ 537.969758][T22950] ? __timer_delete+0x5d/0x390 [ 537.969773][T22950] ? rcu_is_watching+0x15/0xb0 [ 537.969794][T22950] ? work_grab_pending+0x3d6/0x8e0 [ 537.969811][T22950] ? elevator_change+0x1b4/0x450 [ 537.969832][T22950] ? __pfx___mutex_lock+0x10/0x10 [ 537.969847][T22950] ? enable_work+0x16b/0x220 [ 537.969866][T22950] ? lockdep_hardirqs_on+0x7b/0x110 [ 537.969884][T22950] ? __cancel_work_sync+0xf7/0x110 [ 537.969904][T22950] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 537.969928][T22950] elevator_change+0x1b4/0x450 [ 537.969950][T22950] elevator_set_none+0x98/0x110 [ 537.969970][T22950] ? __pfx_elevator_set_none+0x10/0x10 [ 537.969992][T22950] ? xa_load+0x1ea/0x210 [ 537.970011][T22950] blk_mq_update_nr_hw_queues+0x5b4/0x1a80 [ 537.970040][T22950] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 537.970058][T22950] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 537.970086][T22950] ? sysfs_add_file_mode_ns+0x259/0x300 [ 537.970113][T22950] nbd_start_device+0x17f/0xb10 [ 537.970139][T22950] ? device_create_file+0xf4/0x1b0 [ 537.970165][T22950] nbd_genl_connect+0x1353/0x1900 [ 537.970192][T22950] ? __pfx_nbd_genl_connect+0x10/0x10 [ 537.970216][T22950] ? rcu_is_watching+0x15/0xb0 [ 537.970236][T22950] ? __nla_parse+0x40/0x60 [ 537.970254][T22950] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 537.970274][T22950] genl_family_rcv_msg_doit+0x215/0x300 [ 537.970292][T22950] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 537.970311][T22950] ? __lock_acquire+0x6b6/0x2cf0 [ 537.970335][T22950] genl_rcv_msg+0x60e/0x790 [ 537.970352][T22950] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.970365][T22950] ? __pfx_nbd_genl_connect+0x10/0x10 [ 537.970393][T22950] netlink_rcv_skb+0x208/0x470 [ 537.970413][T22950] ? __pfx_genl_rcv_msg+0x10/0x10 [ 537.970428][T22950] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 537.970445][T22950] ? genl_rcv+0x19/0x40 [ 537.970474][T22950] ? down_read+0x274/0x2e0 [ 537.970490][T22950] ? genl_rcv+0xd/0x40 [ 537.970513][T22950] genl_rcv+0x28/0x40 [ 537.970535][T22950] netlink_unicast+0x82f/0x9e0 [ 537.970555][T22950] ? __pfx_netlink_unicast+0x10/0x10 [ 537.970573][T22950] ? __alloc_skb+0x198/0x3a0 [ 537.970589][T22950] ? netlink_sendmsg+0x642/0xb30 [ 537.970608][T22950] ? skb_put+0x11b/0x210 [ 537.970625][T22950] netlink_sendmsg+0x805/0xb30 [ 537.970648][T22950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.970669][T22950] ? aa_sock_msg_perm+0xf1/0x1b0 [ 537.970690][T22950] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 537.970705][T22950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.970725][T22950] __sock_sendmsg+0x21c/0x270 [ 537.970749][T22950] ____sys_sendmsg+0x505/0x820 [ 537.970770][T22950] ? __pfx_____sys_sendmsg+0x10/0x10 [ 537.970791][T22950] ? import_iovec+0x74/0xa0 [ 537.970811][T22950] ___sys_sendmsg+0x21f/0x2a0 [ 537.970830][T22950] ? __pfx____sys_sendmsg+0x10/0x10 [ 537.970851][T22950] ? futex_wake+0x4b2/0x560 [ 537.970881][T22950] ? __fget_files+0x2a/0x420 [ 537.970901][T22950] ? __fget_files+0x3a0/0x420 [ 537.970924][T22950] __x64_sys_sendmsg+0x19b/0x260 [ 537.970944][T22950] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 537.970966][T22950] ? rcu_is_watching+0x15/0xb0 [ 537.970989][T22950] do_syscall_64+0xec/0xf80 [ 537.971005][T22950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.971021][T22950] ? trace_irq_disable+0x37/0x100 [ 537.971042][T22950] ? clear_bhb_loop+0x60/0xb0 [ 537.971060][T22950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.971079][T22950] RIP: 0033:0x7f5fb1d8f749 [ 537.971095][T22950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.971110][T22950] RSP: 002b:00007f5fb2c61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.971126][T22950] RAX: ffffffffffffffda RBX: 00007f5fb1fe5fa0 RCX: 00007f5fb1d8f749 [ 537.971139][T22950] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 537.971150][T22950] RBP: 00007f5fb1e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 537.971161][T22950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.971170][T22950] R13: 00007f5fb1fe6038 R14: 00007f5fb1fe5fa0 R15: 00007ffc0e9863c8 [ 537.971189][T22950] [ 538.545585][ T5831] block nbd3: Receive control failed (result -32) [ 538.552193][ T5831] block nbd3: Receive control failed (result -32) [ 538.573371][T22950] nbd3: detected capacity change from 0 to 127