last executing test programs: 14.729682402s ago: executing program 3 (id=3381): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x349d00, &(0x7f0000000040)={@align=0x8001, {0xfff7, 0x1, 0x2, 0xfffffffffffffffd}}, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x1}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x700, 0x40, 0x87f9, 0x6, {{0x16, 0x4, 0x1, 0x0, 0x58, 0x66, 0x0, 0xa, 0x4, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp_addr={0x44, 0x1c, 0x9a, 0x1, 0x3, [{@remote, 0x5}, {@loopback, 0x99}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x94}]}, @lsrr={0x83, 0x1f, 0x25, [@multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast1, @remote, @broadcast, @loopback]}, @rr={0x7, 0x7, 0x64, [@multicast2]}]}}}}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000280)={'gretap0\x00', r1, 0xf, 0x7800, 0x7fff, 0xfffff801, {{0xe, 0x4, 0x2, 0x6, 0x38, 0x65, 0x0, 0x3, 0x2f, 0x0, @multicast1, @local, {[@end, @end, @timestamp_addr={0x44, 0x14, 0x9a, 0x1, 0x7, [{@broadcast, 0x8}, {@empty, 0x5}]}, @rr={0x7, 0xb, 0xfd, [@local, @local]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="170000102acaebafd3aa2176d9ccfe000000000004a93800ff000000000000006ad40f8aab9da187e1328545542b72340d06e43a0e294ad0fffdfa4f1a4b2b56a221", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 14.585638253s ago: executing program 3 (id=3382): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000240)="ff02040000b5fffffffffffff3ff2f2be82db1af00000000", 0x18) (async) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000240)="ff02040000b5fffffffffffff3ff2f2be82db1af00000000", 0x18) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0xae3e}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0xb00) (async) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0xb00) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) recvmsg(r0, 0x0, 0x2022) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fedbdf251b00000007faff00626200000700210062620000a6c61f2b972a7b"], 0x24}, 0x1, 0x0, 0x0, 0x80000}, 0x4005841) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r5, 0x1, 0x0, 0x3, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r5, 0x1, 0x0, 0x3, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 14.177782863s ago: executing program 3 (id=3385): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x40041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r2, 0x400454cd, 0x337) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000210001"], 0x28}}, 0x4000000) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12.235242827s ago: executing program 3 (id=3390): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000300014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001ff5e0d5b6e73e2f5ab791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c76", 0xd8}], 0x1}, 0x20040005) 12.076042063s ago: executing program 3 (id=3393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r1, 0x1, 0x70bd2d, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @private1}]}, 0x38}}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3c, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a030200000000000000000200fffd0900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001000000000000000700"], 0x68}, 0x1, 0x0, 0x0, 0x4810}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) ioctl$BTRFS_IOC_SYNC(r6, 0x9408, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x32, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x8, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) socket$inet6(0xa, 0x4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x2, 0xb0, 0x9, 0x2, 0x44, @empty, @loopback, 0x80, 0x80, 0x2, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="9500000000000000184100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850200000600000085200000040000008520000004000000478706e600000000"], &(0x7f0000000200)='GPL\x00', 0x4, 0xd9, &(0x7f0000000400)=""/217, 0x0, 0x2, '\x00', r10, @fallback=0x1, r7, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800090300000000000000007f6eecd20000000004000b000800010001000010"], 0x24}}, 0x0) 2.4375544s ago: executing program 2 (id=3502): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @multicast1}, {0x0, @remote}, 0x18, {0x2, 0x4e24, @private=0xa010102}, 'veth0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @multicast1}, {0x0, @remote}, 0x18, {0x2, 0x4e24, @private=0xa010102}, 'veth0\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) 2.390893532s ago: executing program 4 (id=3503): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xd}, {0x1, 0xc}, {0x3, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44045}, 0x804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0xbc, r6, 0x8, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x85a2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x26}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x38}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x81}, 0x48040) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf250b000000080003008a6cecb5562154cab91a1abdd575fae0961c632a789e11ccbe49e0a7dff6fbdb7521c8845783115c592e8751b6984353144f427e06d6ef9fc9a817e4b9cdc17ff048e2d473d08b9efd2785a3fddebce1bc241075a77a1f49c7bd1b02938c8d95a434531ca52f2b6451adeb93663a3cd01eba3f9a4f98f95218284054213e267609433c6e000091ee688d4908c366b8ddd65c4aad08000000f226b58c8d9ff190cfb385e48192e5a05dda6329e3e2a736ebcd28a0239fd93b1537d2cdc40dbb0fd6aa91c89ffbd28e22212bc3", @ANYRES32=r7, @ANYBLOB="18005080090001004154d4cb970000000800070000000000"], 0x34}, 0x1, 0x0, 0x0, 0xc6552491d85fa764}, 0x800) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.263178691s ago: executing program 2 (id=3505): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x10) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000500000000000000050008000d000000", 0x24) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2b}, @in6=@private2, {}, {0x0, 0x0, 0x0, 0x400}, {0x0, 0x31638d34}, 0x0, 0x4, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x94, 0x30, 0xb, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x7c, 0x1, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) 2.070551485s ago: executing program 4 (id=3506): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r2, 0x301, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1c080}, 0x804) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)="f0cfbbb138978fb4c7e00789165e2fbe16c97b064807834bbc136c63d6576d615a7169a8a95f3d42fa5ec6dbff2abaa3d427427b1f57467798f5d21f9768551939585c0573a0fe579f99f15138086c26c69204d90ff7cabe836ba01e550ef8867405793105cdfe66bf3409ccec", 0x6d}, {&(0x7f0000000740)="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", 0x18e}, {&(0x7f0000000680)="5243467ae874b97c41f31bf97be6e821cfdb1b93a49386ebe02f0a21887d1c0712f050875cd59e14c3089c13c5b817a23cfbfea4344228b482be5d937a7847e80653b30379707c257b87c953b711593b1450799fa282bba7247edb06e4e2356eeb9f9db0188a5648537cda30bfbde562a31b0f80ee6eed9ba033b4b853124d09b213b886d64971933a7ddca8bb98fd1cc29d7d85f3ca5a47e861ae92fbfe4737cc5bdacd6e0bfcf9bc989e68ff3a9f1926f804ef150f", 0xb6}], 0x3, 0x0, 0x0, 0x4a0f0000}, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000000)={'filter\x00', 0x0, [0x7, 0x5, 0xff, 0x80, 0xfffffff8]}, &(0x7f0000000100)=0x54) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}, {0x0}], 0x2}, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r10 = socket(0x1e, 0x4, 0x0) bind$tipc(r10, 0x0, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="77feffff13000100000000000000000000000000000000000000000000000001e00000010000000000000000000000000000000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000feffffff000000000201000000000000840005000a010100000000000000000000000000000000002b00000002000000ac1414aa0000000000000000000000000000000001000000040000000000000000000000ac1414aa000000000000000000000000000000002b0000000200000000000000000000000000ffffac1414bb0000000000030000feffffbf0000000000000000"], 0x13c}}, 0x0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r11, &(0x7f0000000080), 0x12) bind$x25(r11, &(0x7f00000002c0), 0x12) bind$tipc(r10, 0x0, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r12, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(r12, 0x5411, &(0x7f0000000200)) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500000000000000feff0e00000008000300", @ANYRES32=r6, @ANYRES16=r1], 0x24}}, 0x4008090) 2.002867889s ago: executing program 2 (id=3507): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xffbc, 0x0, &(0x7f0000000200)="63eced8e2613c2b346dc3f0a7387", 0x0, 0xbfff8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.590771163s ago: executing program 4 (id=3510): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a00)='(', 0x1}], 0x1}}], 0x1, 0x4880) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffffe}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x8801) sendfile(r1, r2, 0x0, 0xffffffff000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c000000200025a729bd7000fddbdf250a0000cdfe001001020001e308008600fe7f00000c0014001f654d09072a049afe262d90083cfacca700d2fbf8d7a4e3090f0c9b548546c67b9f331850951793f18bf88ff74558ed74699dfec4360071f27f474f070952d41313d1959b63ffad2a167454176471b3", @ANYRESOCT=r0, @ANYRES8=0x0, @ANYBLOB="a6cb4f996b6eefc2df07292c8a8195760e9a15a9bee971e3b937b8a322e66c37cb9e8d606983b0e66d9d7b1fe53dc91a59985dd9e0f4134e50700db97b1d"], 0x30}, 0x1, 0x0, 0x0, 0x4c005}, 0x10888) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x4, 0x4070bf25, 0x25dfdbff}, 0x50}, 0x1, 0x0, 0x0, 0x40880}, 0x20040014) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9}, {0x10, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x2, 0x9, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xe757}]}, 0x24}, 0x1, 0x0, 0x0, 0x44805}, 0x4000084) socket$nl_route(0x10, 0x3, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) sendmmsg$inet(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a00)='(', 0x1}], 0x1}}], 0x1, 0x4880) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xfffffffe}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044000}, 0x8801) (async) sendfile(r1, r2, 0x0, 0xffffffff000) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c000000200025a729bd7000fddbdf250a0000cdfe001001020001e308008600fe7f00000c0014001f654d09072a049afe262d90083cfacca700d2fbf8d7a4e3090f0c9b548546c67b9f331850951793f18bf88ff74558ed74699dfec4360071f27f474f070952d41313d1959b63ffad2a167454176471b3", @ANYRESOCT=r0, @ANYRES8=0x0, @ANYBLOB="a6cb4f996b6eefc2df07292c8a8195760e9a15a9bee971e3b937b8a322e66c37cb9e8d606983b0e66d9d7b1fe53dc91a59985dd9e0f4134e50700db97b1d"], 0x30}, 0x1, 0x0, 0x0, 0x4c005}, 0x10888) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x4, 0x4070bf25, 0x25dfdbff}, 0x50}, 0x1, 0x0, 0x0, 0x40880}, 0x20040014) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9}, {0x10, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x2, 0x9, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xe757}]}, 0x24}, 0x1, 0x0, 0x0, 0x44805}, 0x4000084) (async) 1.411029394s ago: executing program 0 (id=3512): socket$kcm(0x10, 0x2, 0x10) (async) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/131, 0x83}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/138, 0x8a}], 0x5}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x20, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_FLAGS={0x8}]}, 0x20}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x20, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_FLAGS={0x8}]}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r5, @ANYBLOB="05002d0001", @ANYRES8=r3], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000100)={r5, 0x1, 0x6, @local}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010180000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002"], 0x34}, 0x1, 0x0, 0x0, 0x4c080}, 0x20000000) 1.284506144s ago: executing program 1 (id=3513): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000180)=0x4, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010e89b382118b55db7dbdf2500007400", @ANYRES32=r1, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500190002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2800}, 0x0) 1.189852767s ago: executing program 1 (id=3514): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = accept4(r0, 0x0, 0x0, 0x80000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0x6, 0x2, 0x4, 0x40}, &(0x7f00000002c0)=0x98) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000340)={r4, 0x2, 0x0, 0x81, 0x5b, 0x9}, 0x14) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, r6, 0x501, 0x70bd29, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001"], 0x64}}, 0x0) accept$alg(r2, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x20008000) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002c00"], 0x114}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) (rerun: 64) 1.118428242s ago: executing program 0 (id=3515): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c010000190001000000000000000000fe880000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000100000000000000c4000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000010000000000000000000000000000e0000002000000000000000000000000000000006c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc00000000000000000000000000000000000000040004"], 0x17c}}, 0x0) 1.117630801s ago: executing program 4 (id=3516): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x6c, 0x4, '\x00', [@hao={0xc9, 0x10, @remote}, @pad1, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x3}, @enc_lim={0x4, 0x1, 0x2e}]}, 0x30) sendto$inet6(r0, &(0x7f0000000040)="3e50b6d5cd914ce4c584d19a7c5102e3662a500402dfc2c66b1cc2271fda3914f950bb2cc091bcf9e4fe0bc6f25b47fc426277a18772c7948e4d22552f3b9faf1c16d3b8ec337bed5626480d3b2c6284b73ad46fb15f450cde7cdc7534a2c5044dfe53ecdfddf74f36a151d004", 0x6d, 0x0, 0x0, 0x0) socketpair(0x9, 0x5, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000140)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r3}, 0x14) sendmmsg$alg(r2, &(0x7f00000003c0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="b941b6b4c067f03b2db2c53a4afa5db3df7fd1912fc384c6fac879ee6a940cdace769ee860308fcdef62c84c8b5424093a70fa1f", 0x34}, {&(0x7f00000001c0)="305b4b9a5c53382b4476f7ce2d1ab6209a734dd91b1e1daf7f49491ec7c6af1b5ca543ee194b4749de7da6d096ae3ced99bd4adad17b2aa99dfc8cb9ec50e27628146fb0fb3e72cd3ceec9c655b4b2d8315ea88e57028aef3f5e6660f9e886c65a7158d72c0a04ea323d18d4275e94737cd3d21d", 0x74}], 0x2, &(0x7f0000000280)=[@iv={0x38, 0x117, 0x2, 0x21, "bb93118ee680ec3103207f1564825a03d6567177c34f5520e67c302f042d4e2193"}, @iv={0xc8, 0x117, 0x2, 0xaf, "9b5eb096343630c8e11fe564fdf89e1b66e69b2adeaa6268a7d6ff9511b4b7098e3e7bc261f1eb376490c59d6c0001c45f93ff2a4198d8cf623cbf58ec07c2ea8400f12f84a1179769af26d71bb26ec8e8ec44018a3269a5c5bf66645b6ceb8e501d43698fe67424ce2f7a9f38a8a6447c2c696544b3ad2be225e10058ab4d9a4e9a33b5de830a21653c6b32aad93576a12dd347e90e2648a6321784a9fc91e5274248044e81f23d683eb4960634fb"}, @op={0x18, 0x117, 0x3, 0x1}], 0x118, 0x4008084}], 0x1, 0x8000) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3f2, 0x2, 0x70bd28, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8841}, 0x44811) sendmmsg$inet6(r2, &(0x7f00000028c0)=[{{&(0x7f0000000500)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, 0x8}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000540)="9748f47b582b4ce704692b2293dff3c7b8c5e76151a60059d5c983ab04e073b9a2a56ebdb3c6f9cb6a28260051fc90646143c9c9c8dedc0dd6fcd8dabab5824058", 0x41}, {&(0x7f00000005c0)="de22b70d6bb58a8ac7e67a19cd047e191beb043b08f9", 0x16}, {&(0x7f0000000600)="9bc0d878ba5581008e22915dc275f531aacc9a0d476272792591253a2c1eb91a4ac6c76180108fe1", 0x28}], 0x3, &(0x7f0000000680)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x87, 0x2, 0x1, 0x46, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}]}}}, @dstopts={{0x108, 0x29, 0x37, {0x0, 0x1d, '\x00', [@generic={0xc, 0x7c, "2359d3f64f2bbe377aa27dedce3cf3d2bd16bc077aa745a20d79e1eb47022ea72dbdd6d3300362d1db35368d43446f572f0cb7fddfea3710f2f0a5c0d77a67be82c6f404b05c2c639d014406e5a716729cb7d1e33c59bb90bb53fcecdb1387bbd14a81a0709c76429cec5567969fc8dcb8c815248f99e5ccc64f9f9f"}, @jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x49f0}, @ra={0x5, 0x2, 0x4}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x4, 0x400, [0x0, 0x2, 0xada9, 0xfd0, 0xf21, 0x1, 0x8]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x80, 0x3, [0xb11]}}, @enc_lim={0x4, 0x1, 0x4}]}}}, @hopopts={{0x28, 0x29, 0x36, {0x32, 0x1, '\x00', [@padn, @enc_lim={0x4, 0x1, 0xc0}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x5e, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x3a, 0x2, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3ff}, @pad1, @ra={0x5, 0x2, 0x4a0c}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @hopopts={{0x30, 0x29, 0x36, {0x0, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @private2}]}}}], 0x1f0}}, {{&(0x7f0000000880)={0xa, 0x4e20, 0x1, @mcast1, 0x1}, 0x1c, &(0x7f0000000980)=[{&(0x7f00000008c0)="f5194bda43279f7f9e838f4fbd7ea8f4065ba2796aab51e64c4351e29c024e78fa130318451830471311945d7dbc899cfb716d4fbd9e5ec88693b6eba3f62c24baf0c4c5c21f471c3c475c631b5227d9e3b5d27e5035e2982e1538e6f4dc743ce5a3033665c3bcb22ee32312495bad1340579799054cf190733c879dea20dc6c70cfecfa2d82df28643746ad30b5ef26f28489a43fbbeebfa433", 0x9a}], 0x1, &(0x7f00000009c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x3}}, @hopopts={{0x30, 0x29, 0x36, {0x0, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x200}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @hopopts={{0x60, 0x29, 0x36, {0x2e, 0x8, '\x00', [@ra={0x5, 0x2, 0xfff}, @calipso={0x7, 0x30, {0x2, 0xa, 0xe, 0x4, [0x81, 0x5, 0x7ca, 0x0, 0xffffffffffffffff]}}, @pad1, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0xc0}}, {{&(0x7f0000000a80)={0xa, 0x4e21, 0x1, @loopback, 0x7f}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000ac0)="55e6a48c4eda76620cd43baf6eaea14586e48d3c2e4f71f9105ad921a9fd76d5f37a4fbd8b5881ec8d8a74877ce6a97e42ad431f9f01fb746d6aeb31d5161c2863c3634d02e35dcfffd2230a163d70633aa431cf74429df4b83e5d15ad811946d351182448ceacffcb1271d1a2da3c645f55ec9005afeba673ceabb28eba4c5a4df2", 0x82}, {&(0x7f0000000b80)="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", 0xfe}, {&(0x7f0000000c80)="9a8f9c9ff365a253800e79940e39d85ac0b93a97bd86209436a84eee0cc9e1cac0b8f70a4c6fa0b349b62788016ca363c21fb6bb5c967152dbc896da1e7e055a1178635901f2a66a82bf868143b825d91a342d7f5151125468c22e2b530aca535a117ad315927caf27b0022b75b395887591eaf3af99eae666453e98e958fd453e3fc5c741ce4ea5e1034110337e6631d3f6790581925e67cd6ce5af7dcfc2d9b8eba6262580c79889b539427515b2ef91a45d97430144ab69278c", 0xbb}, {&(0x7f0000000d40)="056f454f2465b7c9f70b2869fd6f2a69f65590e640b7b1ef0123a34745f48f91dc47f540ef895635d808fe3dbf9cc7b9cc83be3594d02860559f868dd9aec12384b7c9b9b431db2b52eb8e6ba646dcbd73202f08fa88d0c87cbf7ce3d2dde2111c362abf8b5da2d3c391f8704c7fbd800b7fbe", 0x73}, {&(0x7f0000000dc0)="1ffaf1baf91c0740ac4a3a50638d31278cff70aeb63a1d826b232df00084470f0b90adf3c5cfb283124116c4c18b18d0eb140a6a6d7436c9f6e4e48e6eef2005d0c4a4cd13f2ff40ebb6636be383da400d6adbad31", 0x55}], 0x5, &(0x7f0000000ec0)=[@tclass={{0x14, 0x29, 0x43, 0x5415}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000f00)="95ffc7eb6aaa6221d8944c55e1da0a004b468e98c017e960e15e084cf386", 0x1e}, {&(0x7f0000000f40)="b91e36470cfd4aec728570337dac4361fd149f61816090a99b14ee3cf35929bcb19c0c8200485bea0882928b70", 0x2d}], 0x2, &(0x7f0000000fc0)=[@dstopts_2292={{0x50, 0x29, 0x4, {0x4, 0x6, '\x00', [@pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x9e6d}, @jumbo={0xc2, 0x4, 0x50000}, @enc_lim, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x40}}, @tclass={{0x14, 0x29, 0x43, 0x200}}], 0x80}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001040)="1be96e1fcce616dfb2a3505178665287098c7a6c07fbd7fccf462fb9b580afad48aa8b195820a06ce327667a20e2e094cf0f9aa7b9f73bf590dec8809d233a75aee32d013e64c0bceb9cd67dfc22d5570ca94013bb624392d8afa54766fa6c757077ee833b7a01ad8f", 0x69}, {&(0x7f00000010c0)="993f36d67fbcb676c72af1c86716de04ed13d639442ad8a13005614e25a1069ed8e27329a6a1bda40836535610e2f2d292bc7574dbb773a3899959e04fa6acd8f6f0f9865c6cd779bc452cbafb5adda14727d178eabacf3f356a5c3b18cedf78794edc7d66ea60f855a49bd3d48cf09d577c9a6a918bf34fda77d494a2727f62eb1ea008a530441b5c30", 0x8a}, {&(0x7f0000001180)="a580074dbbbe5d99d70947898b9a13defea83bd213ceef", 0x17}], 0x3, &(0x7f0000001200)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x11, 0xc, 0x0, 0x2, 0x0, [@empty, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @mcast1]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x87, 0x12, 0x2, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x22}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @mcast2, @loopback]}}}], 0x120}}, {{&(0x7f0000001340)={0xa, 0x4e20, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1ff}, 0x1c, &(0x7f0000001440)=[{&(0x7f0000001380)="0f44ba8930b336fe6361099d264c06a7e88786e398768ec591cecb64525ecb6924268278429951e229d248c46bf9a1ea2a6b95a4dafd39dba2b6841262330731f3cbea7e7cacd8902579d9adf15ebe2e0edf7826e098f756d34bd5ca6270463d361f60fff197bd1b5182f6af81d368d328e06dabef062bccb0f1fab3c015ab93457e86e18b", 0x85}], 0x1, &(0x7f0000001480)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x18}}, {{&(0x7f00000014c0)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0xffff4a3b}, 0x1c, &(0x7f0000002800)=[{&(0x7f0000001500)="8c2bf8eafbf8752a733efc5ce0ce35940aa8ad3737ee0acd11249eed686111f144c92a2ce80b734e5a9d959c559a46e1d52de8d03f26f3bed8b4868672ce4a14392d0c1470033f3b685fb48c00d9317424ca941e6405e8e0e5b7dc600dfdb106", 0x60}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000002580)="3a142fda0258d3701ae20e6b04a9b04d3256c1398db78da8283488c4f568d53b77363e87a7aec3e31d58bc662c09b206a6887015e5efdd77db16b2ed54c3ff6062e13adbb80b77976f497a802bd9a944090d22dff9875ecc42d98ed0d63d687135e8b2922218c6d29e2bc987f7470a6a051773d8b3caf842140112131a2f23168df077c9c93c6ce8fc2bb3ae541f10efa78daa66e14244607145b306c4a838c2b52ef8610e3866d0113f3b1271fde1de81d0401d3b9688", 0xb7}, {&(0x7f0000002640)="1361eea38b9dbde0cf37a116c222c33e26622fbc69568ea6b443767621903d72c97c317800d6cd990fb16a108af7f5c4e0c7250186ce367c21f72a1c09e111dd8dd4b8ca68876a9959e488e5cbf028ce93de5692e642297a0bf892e6ac514a6ff6e2e4949cd37da10bb2d82c7d2c4107cd3f31aaac9b4fb2b3a49129e01a8c854b4cc60f8f91a46ecbbecbc7df4be9fa46784ad87845dcf773ea19d3", 0x9c}, {&(0x7f0000002700)="1502ed9530dc9d7daab9cd5331effd793abf38a56f81bf6edcb70c42ba0e6db53c11be551d874788d465bd596b1fd622c3fd0ed60b679be57496e79c403c2566d355bc43ec2dc123f8af33c8570ebe8079ad7403dd6ddae6ec8a5d0f2f5b5cbd7d485100dc8f42245c1407f6e0638bebcecb0dac497f3bdb7804378468de5744951bd2bf2419dababf6528745d394b84c4ca67b0849ab475d1c2033a949e755577970717586e9c403b4a4e44f5a95d96cae4af4a9057ffdd3822b47d6719bc515de044d63b4d609553916c50ea40901418a8fde04e1b8de685a8fee1a33d96823cf07bc1d367c5daaa8a79aa4ddb9bd6ac79bb", 0xf3}], 0x5, &(0x7f0000002880)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}], 0x18}}], 0x7, 0x4000000) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000002a80)={0x3158, 0x10}) r4 = socket$rds(0x15, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000002ac0)={0x0, 0xa1be}, &(0x7f0000002b00)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000002b40)={r5, @in={{0x2, 0x4e22, @multicast1}}, 0x7fff, 0x3ff, 0x8, 0x0, 0x2, 0x1, 0xb}, 0x9c) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000002c00)=0x9, 0x4) socketpair(0x11, 0x800, 0x401, &(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002cc0), r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002d00)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000002e80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002d40)={0xc8, r8, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xfd}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7976}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2da0}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1ff}]}, 0xc8}}, 0x800) getsockname$packet(r1, &(0x7f0000002ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002f00)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000002fc0)={'gre0\x00', &(0x7f0000002f40)={'gre0\x00', r10, 0x8008, 0x700, 0x6, 0xa91, {{0xa, 0x4, 0x1, 0x1a, 0x28, 0x65, 0x0, 0x0, 0x4, 0x0, @local, @multicast1, {[@timestamp={0x44, 0x14, 0xa0, 0x0, 0x0, [0xfff, 0x9, 0x8, 0x9]}]}}}}}) ioctl$FIOCLEX(r0, 0x5451) ioctl$XFS_IOC_SWAPEXT(r7, 0xc0c0586d, &(0x7f0000003000)={0x0, r0, r4, 0x9, 0x2, '\x00', {0x180000000000, 0x1, 0x4, 0x9, 0x3, 0x3, 0x9, 0x2, {0x80000000, 0x7}, {0x7fff, 0x3}, {0x6, 0x770}, 0x8001, 0x401, 0x48000000, 0x40, 0x1e, 0x3800, 0xff, 0x401, 0x4309, 0x0, '\x00', 0x6, 0x2, 0x401, 0x1}}) r11 = accept4$inet6(r1, &(0x7f00000030c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000003100)=0x1c, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000003140)={'batadv_slave_0\x00'}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003180)='freezer.state\x00', 0x0, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r12, 0xc0105872, &(0x7f00000031c0)={0x10000000, 0x80000000}) getsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000003200)={@dev}, &(0x7f0000003240)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000003280)={r5, @in={{0x2, 0x4e22, @loopback}}, 0xfffffc01, 0x7, 0x3, 0x5, 0x0, 0x2, 0x4}, &(0x7f0000003340)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r12, 0x84, 0x7b, &(0x7f0000003380)={r13, 0xb}, 0x8) sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f0000003700)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000036c0)={&(0x7f0000003480)={0x20c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2f00000, 0x69}}}}, [@NL80211_ATTR_TID_CONFIG={0x1e4, 0x11d, 0x0, 0x1, [{0xe0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xdc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x749, 0xe092, 0x5, 0x0, 0x5, 0x6, 0x2]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x5a, 0x9, 0x48, 0x16, 0x36, 0x1b, 0x6, 0x2, 0xc, 0x30, 0x6c, 0x3, 0x5, 0x48, 0x18, 0x6, 0x36, 0x6c, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x6, 0xc, 0x30, 0x4, 0x48, 0x30, 0x3, 0xc, 0x3, 0x12, 0x30, 0x16, 0x18, 0x7b, 0x1b, 0x2, 0x2, 0x4, 0x12]}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x3, 0x1}, {0x7, 0xa}, {0x7, 0x7}, {0x4, 0x6}, {0x2, 0x3}, {0x2, 0x8}, {0x6, 0x3}, {0x6, 0x7}, {0x7, 0x8}, {0x2, 0xa}, {0x2, 0x7}, {0x1, 0x5}, {0x1, 0x4}, {0x3, 0xa}, {0x1, 0x8}, {0x7, 0x6}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x4}, {0x3, 0x8}, {0x5, 0x3}, {0x6, 0xa}, {0x4, 0x6}, {0x7, 0x8}, {0x3, 0x4}, {0x3, 0x7}, {0x2, 0x4}, {0x1, 0x3}, {0x0, 0x7}, {0x6, 0x7}, {0x6, 0x3}, {0x6, 0x7}, {0x1, 0x1}, {0x5, 0x9}, {0x0, 0x2}, {0x6, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x1, 0x3}, {0x0, 0x4}, {0x5, 0x9}, {0x1, 0x9}, {0x5, 0x1}, {0x7, 0x7}, {0x3, 0x9}, {0x5}, {0x1, 0x8}, {0x5}, {0x0, 0x8}, {0x0, 0x8}, {0x1}, {0x3, 0x3}, {0x2, 0x4}, {0x0, 0x5}, {0x1}, {0x1, 0xa}, {0x4, 0x4}, {0x4, 0x9}, {0x7, 0x9}, {0x0, 0x6}, {0x2, 0x5}, {0x1, 0xa}, {0x6, 0xa}, {0x7, 0x7}, {0x0, 0x1}, {0x6, 0xa}, {0x2}, {0x6, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x800, 0x7fff, 0x4, 0x5, 0xfff, 0x8000, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8001, 0xe, 0x7, 0x5, 0xfc2d, 0x700, 0xdbb]}}]}]}]}, {0x100, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x79e, 0x5, 0x4, 0x8, 0x5, 0x34b, 0x1, 0xd8]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2, 0x4f, 0xb, 0x1b, 0x1b, 0xc]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x16, 0x0, 0x6c, 0x12, 0x3, 0x16, 0x1b, 0x24, 0x12, 0x9, 0x6c, 0xb, 0x36, 0x24, 0x1, 0x60, 0x36, 0x30, 0x6c, 0x24, 0xc, 0x4, 0x6, 0x1b, 0xb]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x2, 0x16}, {0x1, 0x4}, {0x4, 0x6}, {0x1, 0x3}, {0x2, 0x1}, {0x4, 0x2}, {0x5, 0xa}, {0x6, 0x4}, {0x4, 0x2}, {0x2}, {0x4, 0xa}, {0x1, 0xa}, {0x6, 0x7}, {0x4, 0x6}, {}, {0x6, 0x3}, {0x5, 0x2}, {0x7, 0x7}, {0x4, 0xa}, {0x3, 0x4}, {0x5, 0x2}, {0x0, 0x5}, {0x5, 0xa}, {0x5, 0x2}, {0x4, 0x6}, {0x0, 0xa}, {0x2, 0x7}, {0x2, 0x4}, {0x0, 0x3}, {}, {0x3, 0x8}, {0x5, 0x6}, {0x0, 0x9}, {0x0, 0x2}, {0x4, 0x6}, {0x7, 0x9}, {0x5, 0x5}, {0x6, 0xa}, {0x1, 0x4}, {0x6, 0xa}, {0x3, 0x4}, {0x1, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x5, 0x7}, {0x3, 0x2}, {0x6, 0x3}, {0x3}, {0x1, 0x5}, {0x7}, {0x6, 0x6}, {0x4, 0x2}, {0x2, 0xa}, {0x0, 0x9}, {0x5, 0x5}, {0x3, 0x4}, {0x1, 0x2}, {0x0, 0x3}, {0x2, 0x3}, {0x1, 0xa}, {0x3, 0x9}, {0x5, 0xa}, {0x2, 0x7}, {0x7, 0x6}, {0x0, 0x7}, {0x5, 0x8}, {0x4, 0x1}, {0x1}, {0x1, 0x5}, {0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x4, 0xa}, {0x1, 0x8}, {0x4, 0x4}, {0x3, 0x6}, {0x1, 0xa}, {0x6, 0x9}, {0x1, 0x9}, {0x0, 0x8}, {0x5, 0x7}, {0x4, 0x5}, {0x2, 0x2}, {0x7}]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0xfff, 0x75, 0xd6, 0x8a0, 0x6c9, 0x7, 0xfffe]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3ff, 0x192d, 0x3, 0x8, 0xbf4, 0x7, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20004001}, 0x40000) 956.353861ms ago: executing program 4 (id=3517): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) r2 = socket$inet(0xa, 0x801, 0x84) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f00000000c0)=0x6, 0x4) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32, @ANYBLOB="0000000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES64=r5], 0x48}, 0x1, 0x0, 0x0, 0x2400008c}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000050000002000000008000300", @ANYRES32=r7, @ANYBLOB="24002d80050003"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r3) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e00000003000000ff7fffff0700000000040000", @ANYRES32=r8, @ANYBLOB="e40300"/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0000000002000000030000000a00000000000000b800000000000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x2, r9}, 0x38) socket$inet6(0xa, 0x6, 0x71) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x4c, r1, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x8081) r10 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_ENCODED_READ(r10, 0x80809440, &(0x7f0000001b00)={&(0x7f0000001ac0)=[{&(0x7f0000000a00)="32fb983e58f0e68d3089bded2a3fc9aec715e44c615d7d67e8fea7beddf3d84a577173caff13b32c41d4455d4e63dfc69621bece6e2edbb0412c6b9f75666b0aa4b8ccd079d91888c1b43c32daeb206d4dda8c1245ea3f30ed9043f2e7ad5b5e1d13944e8668fef7c5a90a43d2e3e1885daea15dcff543a1c4a32612998272f6c54f208a8f38d9673f64d2af435dde3c31be72cf90b9d6ba11e00ff56a64c37929615665f220bff2334e40e24f11aa87f0ee8f218cdf1b182dac5d8b8685e2bdda22c4d2d25c7ce2805b5addee71e1f503c5c0a9fc512d7480c5af44aee0f79a43f66b19bad116f47cfe95f80b85fad03ec5bc45b7f75cfaa2030939188fd63c665e4e4bf5e2c765d2494c7a93117c2b3714128f2d1efb07549eb858e96de0043365369ce8afb8a5c37541ab8a51650c92af5ea60af89a12c50dd9f758c98ebac87c065412ef4475ccc5c438fd383126097d3380f309d8bb680cde848dd0586351367039b305575915e827a83fef05d1810a2d996e12bda5684c55bdf8a7db67f4e4c2f0d62fd9639454876ae0ca35cff37feb6b63c9fc56149cfd72f0c2a0a4141881ac005cf91f99654d35bac56bbb2ff40f44bbd462c37983845849ec9a0749c2039aa6de7972f49d071b480e9ea560c65fda4ff55205e499f77b43a9ea1ced3919a5cc7e04a799ae1c1cdcb0e9c13828a06fa126ca7bbcc1b90d8a42b0653d77390928bc267ba9f8a97321e896c9ebb20c51c19f92a4989624e6cbe340ece92891bab31d71b5eebadb1dc3c14e6a2992550d3ddcaba8d273726368fcc6fc4a6514c2a8c03f92a4ca5599b7db0da8c6186808e5310c31043a68099ba0da6422a2bc8c71d996094425f908c4567f1f783683d197306c4057bda6059b18395d42f5d52dac213ffe79adaaa420d86d7289b3b3311fb2e01b9000f4fcd04bd5da88c04f65447c51be0b50ced75d112fed7fa02bc797408ce7b0dc5834e3152489cfc34396adb9cb286d84c7563b2b75f8b5ea1fd38fea7f3e161aafa19eba0464f48050ee12285d9169b6483ad821e61cdb6009aa5ea2391588a9a486809f2913228f8d928f6019fdcafca3091f34c9a154cc99c6e843d5532806832ff904a670ecaf84deae3d811200f2731257acd944b2a9d28e0ce192f27b9dff89fdbb5c916195ab0fde53d128a6676b7de963cd04c106aacbba05bae296ad036d288e18740615635debad96de7b51b4fb1b17cc11783531e9aa6de1eba8fd7de376a45bb385afd36b8050d630b6996831570124cb0ca09cdf254734040c53a5026daf9336ee9008c5216328ade15538f2350272de57bc41436e1d37bacae9d55ca8b5748123efdadeccef9aa2cfd8849723e9e6a693fd5cb1a96a5f3474c241bffe17936add78daf603694d14939e85906bd38af8e3e0ecb4b70f7f712d672939fc79c6fa355c0d0a0658c2d37bd5df5f4bec5b590832d34967f22492814e54edf6ba3c126458663fa462b6c9f13022cb3d98a907374b89d4d4004266acf76eb6bc42c9c67dcb4f9e0d11892ba197b9dc3ae77d95ba01044c36a8ce8dea6075f5bf99c80a7cfb10d288e08064da3f212456be570326136724fd7d522e759f377fde5c04b53a09f0e5071c22cfa5841b41a4c40f8545dbbc10482cf8a8a328fdd02e1dfd6e30216244a065d9d8ce61ec5dde7a575a4e5799eef62d952de7495ed3930f6695801349b21c05277ce0c3f299b327d5edb8a6c1710f3930f25f75dd20b05d46299b682a09d3e868d8e21e6662976c891d1e90aafaa9e385dd14889a55dc40ad12b83346303009cd8ac2fc3e864a2c66459b6023a44a933f73afd409c2756f762a1d4cc98002321a921748a58f186cb2f2fc842bf62a23a1cde4a0d1c08542fc9e88873a9cfc3192ac1df53246d7a25ea4268675ae41462611d4451d3a7b64fba024479494ad4fa699898d6a942a883b1dd716c1f9165d34a96a5e6e1a28fd2f43b2abf115617e905221e8b28f2cb7a0b65f0c97fcc6990f9d6ca50e18fd0156711af0eb9a6419549f100ea6e633fc22bf75dbed1d495b477086d2ce15ebf6ef5e6fb2b5859b8c0c107e9c457aeb5f21dfcab2fdf320fef0d07a5ea7683d0eda5b9c8b1242c1e569e68bc7a73422d52953c93748505007ed752c8821d3112aa278ad2655cb5dd19067324c7ad0584f1f05cff976b44d68c497739759e73cbfae8a35753ef093e4350f4b346c2dab5b150a287afd73ea61678f555808a3a7acd68f6ad77a2e607737346b69313c930f3adf7f743cf2ac7ca2c013462f2ebf9e9d940033907c060319a2e6b3a56927d7be03d2f891fb86d2e127e7de7b614e679b9f753e55665bcd2725d98d29acb2d204668f3c7fc516a4e53d498f9f6ed1f57e1d82aeaba40d50c5b035268148007a9610721f3d214233a63eff85046680fc069fba86ae75fdcabf22afa7f625d443f91571d6d6b203edba81b0b51c23d6f0155ce8ba97051042cd9654959f4c2d4d932036589c5a6eba8d0c0f8998d5521f445a742c7be9b62adfbbd619e5ff4e6984f1cf47154bf9f2fe78b091200de0bee4a01918ac93b975e4a45b66300c0e12ad6630f6e74d29c4d6948429551c8bf285b1735283d05c533a49adbbba9f1030c9f51f14d22412e6554bbc06bf0d7d4122f312c5a46dfc790664bd52cd7a5b26e338f424d8db0f4676c976f0761ad99e01db4f9c79932ea064f96f8d6e94cd01599823a0357f89fd9a0bc6ab4dafefae718ceec9d97cf6a95102337cd67711309aa5a4f85ceceb346199f65261fdadfb1abb5807b3ea70e8cc30cc6a1a2fefbc19deb57c7fc4d3327429801ec21f220387acc063ec38309340dc6a634548db76a6746980b65e9f1fe03a3c63ad9d4d83beae1022f20073c3599d1bb56fcbd275dfba35624ac544fe9a668da52fd1f63dc8f4a484ccb1d805037c14f60c0b6d029eae52160ccc91aa455f0202ce6e1be96d49f14239a93292aa625c2c5e77f1b5454fe8bca3d4d749c867d1cf8fcccab3a9761c75e02ff5a24d889837d6185c9c47f1ec887af2d5c0117afc1639093909b018ae33146cbf4455c2fee21e2176efa82a554d0f63f5952fb95177311540a490c4709ecf95f7c1310675f7e7e1bf298ef0002bbc85f8996a654862aa9615aec49ad9357463f005d7484d9bbb89d46bffedb4e90339bc5210b40f47cb69968a5b8e1c0ae2db92fa584db7aacb75f1266a16e9402903dd15d18a6b09d1163e599429221425c4ae64cf1561bdabae17e49431cd4d4335331a025923201bf0c7d9149940e4d8488f03204a0d84ca0315ef5339cb7b36cf9e9387b3323019e2fb825e8768e91c1c0f5f419af4a24efcbbaf09a4a28e9da863c09fb9ebf402b097360fba7c64a559feb7059f81b7cfde364fa478bd31c0d922f41bfe1ab845b7d6403c600a991c3467ba656ce02c22481ce76fe10f95803d3096d9daeb53ffa913fba01c7dd81d6bb730dfdd750c1741460999b0d942c3e17b4d0dee0c35056423e11da1b6a598b8fffefe27b715dc06bcf9e6b9beb11084a967cf4e38c3b59527d6464f892d7d31d9214b80417ddb996af0237f2f518a6cd82d061ff80459ba2462b358e0c2bc20ad2e1804064280e247d8ff39217e0111f910fec668c3bb59a9329fec388038b41eff4bcfc33d500aace1b7c916bfa9ab7a032da068d0a3ed069c9b149cb7b36763de6ff1167779f559a2f6c7071f48bb3cef9a7dfda23f9b7f7a5d1ac7958e116cbc5ebb6f5abfd42576f0451cc62ae957991d9244b089c51bfe4349fd8ae299df25712ff426c4b2b975ef8f771665addfad19676faf9b3d328a316124483fb3d0daf8350649cbf15e594a89d820acf5b48098b0ad05d9e2f4ef80b525b972b984c9d6a625e24d61016ad30a2a31986e791078fa3df11f160f6d1195ecd31dcfc9ff29cd3157e52b84d0009b9c999173c709da9df872931c3dfbb4931efee7822e0a337c17e0e618e4b253b4849d48b4b917946067b1d896910c73d86e96e2f216d0584c61234d8fc5a91f53d63bb9f5072fb35a178ea7e6950870d4d4f99b3ba6d351e44a3445951370b38554c6bb917d3469dbfae88eb74eeecb19dc2de4f6200c05fc3aa850578014ab2b680bcbc22b6e1582dc8b4b87ad3a103029f50eb9ed78e32b170eb39eb46f380fc43359812c66d9a3600e09bf3517fc58789333740c20470e0abdab56ed3b2fd4efc1f0a2747094e32909fa62276e13c6ee7d7aabadb91f19687ce3103299673ee7e69394ad9fc7f15e6a9a24a23ecadea346650029de7d592760393bfe7f4e212b6d104d66a2d915213000f92724ec7d74ba0448a3a6e650aa10b3d925d7ab8ed6e1df63cf3cf83fb11c4509fa015409591c5547b3b83e4c7544b7958f78c532897e1b8b59e61e911016b874660bf8a981536d931652aff5d7f22711d7b9879f255f657468adf24ae9a4ee6af8c7c9944710e668bf95396f1d7bcbd6904e27ed98dd3edd061fd26dbff602fa891f01e3aba0bfe9c1763dd9bf2c95f769650326f0d2a089bd1a194cfcbbfcba3b5083d5c6789bbc609c57f01bd90362612cde0377c14e6f64a69d44b049592ad04b56f6697ed25c5fd22c033ee9dd20d817b3308d1867d244cb4c63c9f141ff0e76e264c8c97f72ba1ecfbc17231d539991cd41f408f344ad4345ec08c29e6bc52fe172696a20e1285ed7e05fec215f5271aec49e21b0b9c83c57945584f2a7c8a68cd147489a632ca6e21e22fe7d4774ce0b7e3af28bce572bb37c3d955ac602a10db205a64ee48a83b34fe8f6423d4467a7944212c7349cf0f0a7676b0e650d8c4ca69e0de1947e9b29092bcfbdd21c4b7b4d3190c49f7f53f5a020f6115ce2042695847acf55ae5e6b33910c86c7a3a973d71f6595c61875d1546867132bffd939d81f8c0d475c0ffe638042500f2aefd5d79b820918f1c97752d9aa9152512d45bb315cb76f7c6aa2d8ed00a0d93f7c76be013440fdcb7554088e8a708b5ae848dd259bd2544a27f764727d90f66e4685a698224aabd994c22fca21e2526a95e946d5287d0064f4514fa9b3198ba7f403d1335a0c9451bc4200e9594e49ce65389c4219cc5e73e755bf103894244030e473b7dbdd4803f4974189bc2320853facaec4a0f2b4acd485dadc77d0594650c2381f16f4b4866498d480e9ef696130e51c4f475a6ada83419ab81a44343cb91a23887e70b1d077dbdb2570d9b7d47055d46a87d77758be9f6be4d78ba1d5a836af13a006293bccf07b4a4a81ecd39b52f42b8cf8ac19c86aa9479079eae487795f37850076f54e5ae8086eac48d7f4831de781eac8ae2a3895cda48021a0781bdd99703abe8e4ed762ceeffa2af9405f225fc11e0274094e14342481d9f05d0f38afc5248f6f6374f41f6e37cc47f11c4c1e33deaa473085dd09cd84447e499961072497e2a60239019903deead6feeb6d4f05b76c677ebf81e9c77926608295c5b4a9eb1129c04b1fb15237a29b2394ad3d364e9866d2b0af64a60fbcb15281a1b7b7e5a0f8f2c18d9d7ae3958827c22ca240f81c135e44f8c0a14941db0ff5833dff0023a63217961eaac10cdac98a626c23e29d57b295fedaa3b74d86e0ef90c7f5552fa30b3add003f9e8d42e25a3c56618491adef1cd8718c87c6547a309407f2c0959d0a70d21456f58676312d186c181a7e121e5885b7c541c9945242b5adac216a1ca4cb598bdf016326c60da05769c6e81df982686f54b79ed36d177f87f5883778465eb67c485081b329352f", 0x1000}, {&(0x7f0000001a00)="809f6ec7f4366f7e62bc1dc8b7", 0xd}, {&(0x7f0000001a40)="d074bf825e889a1fd572c304cbbebf93144c49da26013adc1d664cbdeca28f0383e1bc864e0b5a53d40fa95fba6186fe36392124bd9c4249a5e920c92dcf88e2272d28027ad047f97a529b99", 0x4c}], 0x3, 0x6, 0x0, 0x8, 0x6, 0xb, 0x7, 0x8}) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3c080045853e0aa307f9ecbdd480dd21001c0067000403029078ac1e0001ac1414321705907800000000"], 0x0) 933.490419ms ago: executing program 2 (id=3518): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x3f4}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@delchain={0x268, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x22c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x8000001}, @TCA_BPF_ACT={0x15c, 0x1, [@m_ctinfo={0x128, 0x4, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x98c}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf3fa}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_skbmod={0x30, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x268}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) sendmsg$unix(r2, &(0x7f00000001c0)={&(0x7f0000000040)=@abs={0x1, 0x2f, 0x2e}, 0x6e, 0x0}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000240)={0x1d, r5}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000001c0)={0x5}, 0x4) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) 722.179951ms ago: executing program 1 (id=3519): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000055003d0902000000fcdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010301000700000000000000000000000000000008"], 0x38}}, 0x4000000) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0700000004000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\v\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="b40800000000000073110e00000000008510000002000000b7000000000000009500c200000000009500001200000000830345f5b3f42590c416b734596006d9dec99bdcb359ce8c"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) (async) socket$phonet(0x23, 0x2, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) (async) recvmmsg(r4, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x10142, 0x0) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 721.747551ms ago: executing program 0 (id=3520): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010100, @multicast1}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r2, &(0x7f0000002180)=[{{&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x1, 0x0) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name, &(0x7f0000000140)=0x10, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb0100200000000100000018000000180000000a0000000000000001"], 0x0, 0x3a, 0x0, 0x1, 0x6}, 0x28) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, 0x0, 0x52) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000200)='wg2\x00', 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000280)=0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x3c8, 0x110, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xff, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'vlan0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xfffffffffffffdfd) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c0001000d0c10000000000000000000", 0x58}], 0x1) r7 = socket(0x1d, 0x3, 0x1) getsockopt$nfc_llcp(r7, 0x65, 0x2, 0x0, 0x20000028) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f00000002c0)='memory.events.local\x00', 0x0, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000300)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) 679.244972ms ago: executing program 2 (id=3521): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000100000000000000000000007112dd000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000300)={0x0, 0xfffffffffffffe6e, &(0x7f00000002c0)={&(0x7f0000001080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000ffdbdf250300000008000300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@gettaction={0x5c, 0x32, 0x20, 0x70ad25, 0x25dfdbf6, {}, [@action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x300070}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fedbdf25010000000500110004000000050007000a0000000500070003000000050007000800000006000800a2aa0000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000800) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r7 = socket$rds(0x15, 0x5, 0x0) (rerun: 32) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) (async, rerun: 64) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) (async, rerun: 64) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) (rerun: 64) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 530.378391ms ago: executing program 1 (id=3522): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="08000500060000000c001780040007"], 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x10c, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_IE={0xe7, 0x2a, [@random_vendor={0xdd, 0x60, "d5871c3077241ef94514e8d0a232d65e08c45549ee3f5a6bd633899356861bb50e5471a23b2b8fe719dba65568f6d7a44123f648a29caa31209f0d7c5c4b1522ca34d9b97e25fc1fa94a5c7198fa42e6c62591606aac099841cbea2283c436c5"}, @rann={0x7e, 0x15, {{0x1, 0x3}, 0x4, 0x23, @device_a, 0x6, 0x9, 0x4}}, @perr={0x84, 0x2f, {0x75, 0x3, [{{0x0, 0x1}, @device_b, 0x1, @value, 0x1a}, {{}, @device_b, 0x3, @void, 0x3f}, {{}, @device_a, 0x401, @void, 0x38}]}}, @mic={0x8c, 0x10, {0x269, "43299deb9d83", @short="7abdd878a135f5b1"}}, @tim={0x5, 0x1d, {0x9, 0x46, 0x4, "2724602ba095934020bd2fa551b38bf8dfbb6ca7c05016ad84f0"}}, @cf={0x4, 0x6, {0x4, 0x9, 0x6, 0x9}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4050}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x13, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x5, 0x200}}}}]}, 0x48}}, 0x40) 431.015851ms ago: executing program 0 (id=3523): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000d00)=ANY=[@ANYBLOB="9feb010018000000000000006400000064000000080000000100000000000008010000000100000000000008030000000e0000000000000c030000000100000005000006e09e00000b000000ff01000004000000070000000f00000007000900000000000000ffff1000000000000000080000000000000905000000005f5f303f"], 0x0, 0x84}, 0x20) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x50000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 290.00622ms ago: executing program 0 (id=3524): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@getnexthop={0x20, 0x6a, 0x501, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xa, 0xfffffff0}]}, 0x20}}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000088000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 279.615119ms ago: executing program 1 (id=3525): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @broadcast}}, 0x1e) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x2, @multicast1}}, 0x1e) connect$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x3, @multicast2}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x4, 0x4, 0x25dfdbfb, {0xa, 0x40, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x13}, [@FRA_SRC={0x14, 0x2, @remote}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) 122.588661ms ago: executing program 4 (id=3526): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000100)=')*\\^%+,!/^\x00', 0xffe6) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000080)) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x4800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x0) 122.092743ms ago: executing program 2 (id=3527): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f00000002c0)=0x1, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300)=0x18000, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@restrict={0x4, 0x0, 0x0, 0xb, 0x3}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xe, 0x5}, {0x7, 0x4}, {0xd, 0x1}]}]}, {0x0, [0x61]}}, &(0x7f0000000340)=""/4096, 0x4b, 0x1000, 0x0, 0x4}, 0x28) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r5, 0x0, 0x20000000002) sendmmsg$inet(r0, &(0x7f0000002a80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\b', 0x1}], 0x1}}], 0x1, 0x2400c042) 76.571245ms ago: executing program 0 (id=3528): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x8f7b80029b167919, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_opts(r2, 0x0, 0xc, 0x0, &(0x7f0000000780)) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 16.560021ms ago: executing program 1 (id=3529): socket$inet6_sctp(0xa, 0x801, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x1010, r0, 0x7000) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, 0x0, &(0x7f0000000580)) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000005c0)={0x0, 0x8ac2}, &(0x7f0000000b80)=0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000000095000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r4 = socket(0xf, 0x6, 0x4000003e) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x4e20, 0x0, @empty, 0x1}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x8, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x8, 0x1]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x8, 0x1]}}, 0x5c) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r5 = openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000000c0)='THAWED\x00', 0x7) (async) write$cgroup_freezer_state(r5, &(0x7f00000000c0)='THAWED\x00', 0x7) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x54000, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x54000, 0x0) close(r8) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 0s ago: executing program 3 (id=3424): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, 0x2, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x3c}}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r6, @ANYBLOB="0000000001"], 0x48}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x20842}]}}]}, 0x3c}}, 0x4044080) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000380)={0x20, r8, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r10, 0x29, 0x3, 0x0, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) kernel console output (not intermixed with test programs): : adding VLAN 0 to HW filter on device bond11 [ 320.164122][T13322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2063'. [ 320.174691][T13331] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 320.186766][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.203120][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.261537][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.268794][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.346030][T13345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2068'. [ 320.388987][ T3282] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.399360][ T3282] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 320.402943][T13348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2069'. [ 320.416921][ T3282] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.429286][T13313] xfrm0 speed is unknown, defaulting to 1000 [ 320.466261][T13338] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 320.487359][T13338] bond8 (unregistering): Released all slaves [ 320.549868][ T3282] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.570035][ T3282] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 320.591373][ T3282] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.613362][ T3282] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.621748][ T3282] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 320.630068][ T3282] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.669779][ T13] syz_tun: tun_net_xmit 110 [ 320.690301][ T3282] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.699589][T12136] syz_tun: tun_net_xmit 90 [ 320.708219][ T3282] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 320.746623][ T3282] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.771296][T13352] syzkaller0: entered allmulticast mode [ 320.854724][T13360] netlink: 'syz.1.2074': attribute type 1 has an invalid length. [ 320.864741][T13361] netlink: 'syz.1.2074': attribute type 1 has an invalid length. [ 320.965528][T13360] bond7: (slave bridge7): Enslaving as a backup interface with an up link [ 320.994960][ T81] bond9: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 321.058632][ T81] bond9: (slave veth9): making interface the new active one [ 321.120306][ T81] bond9: active interface up! [ 321.156201][ T5643] syz_tun: tun_net_xmit 110 [ 321.445413][ T5643] syz_tun: tun_net_xmit 90 [ 321.516715][T13383] syzkaller1: entered promiscuous mode [ 321.535976][T13383] syzkaller1: entered allmulticast mode [ 321.648832][T13394] netlink: 'syz.4.2084': attribute type 10 has an invalid length. [ 321.749559][T13394] bond0: (slave H): Releasing backup interface [ 321.775707][T13394] H: left promiscuous mode [ 321.808492][T13394] team0: Port device H added [ 322.136602][T13414] vlan3: entered allmulticast mode [ 322.145916][T13414] veth1_virt_wifi: entered allmulticast mode [ 322.239767][T13420] macvlan2: entered promiscuous mode [ 322.271046][T13420] macvlan2: entered allmulticast mode [ 322.678386][T13442] netlink: 'syz.1.2095': attribute type 63 has an invalid length. [ 322.687299][T13441] netlink: 'syz.1.2095': attribute type 63 has an invalid length. [ 322.833818][T13446] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 322.884086][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.892683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.901169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.909562][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.282262][T13482] netlink: 'syz.0.2105': attribute type 12 has an invalid length. [ 323.400798][T13486] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 323.575227][T13493] __nla_validate_parse: 7 callbacks suppressed [ 323.575246][T13493] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2108'. [ 323.924614][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.933361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.941851][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.950392][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.958951][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.967500][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.976850][T13462] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.342611][T13534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2120'. [ 324.466778][T12501] xfrm0 speed is unknown, defaulting to 1000 [ 324.853425][T13559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2130'. [ 325.020126][T13568] netlink: 'syz.2.2132': attribute type 39 has an invalid length. [ 325.073360][T13571] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2132'. [ 325.229525][T13576] syzkaller0: entered promiscuous mode [ 325.248497][T13576] syzkaller0: entered allmulticast mode [ 325.361715][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2136'. [ 325.392390][T13584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2136'. [ 325.491870][T13590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2138'. [ 325.879977][T13615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2144'. [ 325.945855][T13615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2144'. [ 326.104698][T13627] bond0: entered promiscuous mode [ 326.110129][T13627] bond_slave_0: entered promiscuous mode [ 326.295467][T13640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2152'. [ 326.501603][T13652] syzkaller0: entered promiscuous mode [ 326.527000][T13652] syzkaller0: entered allmulticast mode [ 326.548223][T13652] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 326.595219][T13648] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 326.853101][T13667] netlink: 'syz.0.2160': attribute type 10 has an invalid length. [ 327.341958][T13698] xt_hashlimit: size too large, truncated to 1048576 [ 327.701530][T13731] netlink: zone id is out of range [ 327.729642][T13731] netlink: zone id is out of range [ 327.761643][T13731] netlink: zone id is out of range [ 327.767480][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.806739][T13737] netlink: 'syz.0.2179': attribute type 11 has an invalid length. [ 327.915920][T13737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.941961][T13737] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.969109][T13737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.072076][T13737] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 328.082947][T13737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.109364][T13737] veth1_vlan: left promiscuous mode [ 328.119343][T13737] veth0_vlan: left promiscuous mode [ 328.137098][T13737] veth0_vlan: entered promiscuous mode [ 328.159767][T13737] veth1_vlan: entered promiscuous mode [ 328.182194][T13737] veth1_macvtap: entered promiscuous mode [ 328.207029][T13737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 328.216398][T13737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 328.226388][T13737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 328.245833][T13737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 328.270430][T13737] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 328.287707][T13737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 328.300226][T13737] 8021q: adding VLAN 0 to HW filter on device bond2 [ 328.311018][T13737] veth0_macvtap: entered promiscuous mode [ 328.360820][T13737] 8021q: adding VLAN 0 to HW filter on device bond3 [ 328.393495][T13737] erspan0: entered promiscuous mode [ 328.400410][T13737] 8021q: adding VLAN 0 to HW filter on device bond4 [ 328.408754][T13737] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 328.419009][T13737] 8021q: adding VLAN 0 to HW filter on device bond5 [ 328.429227][T13737] 8021q: adding VLAN 0 to HW filter on device bond6 [ 328.510352][ T5909] syz0: Port: 1 Link ACTIVE [ 328.515729][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.553764][ T13] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 328.593893][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.730064][T13774] netlink: 'syz.0.2185': attribute type 1 has an invalid length. [ 328.775962][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.802999][ T13] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 328.825847][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.845671][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.861014][ T13] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 328.888745][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.939815][T13785] nft_compat: unsupported protocol 0 [ 328.995660][T13789] __nla_validate_parse: 5 callbacks suppressed [ 328.995677][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2191'. [ 329.011868][T13789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2191'. [ 329.034051][T13774] 8021q: adding VLAN 0 to HW filter on device bond7 [ 329.081591][T13795] netem: change failed [ 329.121849][T13778] bond7: (slave veth0_to_bond): making interface the new active one [ 329.157347][T13778] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 329.259092][T13783] 8021q: adding VLAN 0 to HW filter on device bond8 [ 329.278763][T13783] bond7: (slave bond8): Enslaving as an active interface with a down link [ 329.288062][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.299509][ T13] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 329.308633][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.396628][ T3282] ip6_tunnel:  xmit: Local address not yet configured! [ 329.818985][T13821] vti0: entered promiscuous mode [ 329.841887][T13821] vti0: entered allmulticast mode [ 329.950110][T13832] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2198'. [ 329.986820][T13831] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2198'. [ 330.073544][T13841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2202'. [ 330.149596][T13843] set match dimension is over the limit! [ 330.236490][T13848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2204'. [ 330.457852][T13848] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2204'. [ 330.509461][T13858] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 330.529283][T13848] tipc: Enabled bearer , priority 10 [ 330.695472][T13874] netlink: 'syz.4.2211': attribute type 29 has an invalid length. [ 330.747148][T13876] net_ratelimit: 55 callbacks suppressed [ 330.747167][T13876] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.776439][T13883] xt_TCPMSS: Only works on TCP SYN packets [ 330.792893][T13882] netlink: 'syz.4.2211': attribute type 29 has an invalid length. [ 330.919860][T13880] bond8: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 330.932132][T13876] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 330.988624][T13880] bond8 (unregistering): Released all slaves [ 331.072452][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2218'. [ 331.106511][T13901] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 331.147468][T13906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2218'. [ 331.305873][T13901] team1: entered promiscuous mode [ 331.331996][T13901] team1: entered allmulticast mode [ 331.344635][T13901] netlink: 'syz.3.2218': attribute type 21 has an invalid length. [ 331.402066][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2218'. [ 331.429300][T13913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.442687][T13906] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 331.453803][T13917] x_tables: unsorted underflow at hook 2 [ 331.510709][T13906] team2: entered promiscuous mode [ 331.516087][T13906] team2: entered allmulticast mode [ 331.528020][T13906] netlink: 'syz.3.2218': attribute type 21 has an invalid length. [ 331.575543][T13901] netlink: 'syz.3.2218': attribute type 21 has an invalid length. [ 331.588224][T13906] netlink: 'syz.3.2218': attribute type 21 has an invalid length. [ 331.597719][ T76] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.636525][ T76] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.662058][ T76] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.679909][ T76] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.171133][T13947] : entered promiscuous mode [ 332.378032][T13964] sctp: [Deprecated]: syz.2.2235 (pid 13964) Use of int in max_burst socket option deprecated. [ 332.378032][T13964] Use struct sctp_assoc_value instead [ 332.763383][T13979] nbd: must specify a size in bytes for the device [ 332.787156][T13984] netlink: 'syz.1.2242': attribute type 1 has an invalid length. [ 332.995741][T13993] openvswitch: netlink: Missing key (keys=40, expected=80) [ 333.030829][T13987] bond8: (slave bridge8): Enslaving as a backup interface with an up link [ 333.080534][T13987] netlink: 'syz.1.2242': attribute type 1 has an invalid length. [ 333.092186][T13988] macvlan4: entered promiscuous mode [ 333.099908][T13988] macvlan4: entered allmulticast mode [ 333.107174][T13988] bond8: entered promiscuous mode [ 333.112289][T13988] bridge8: entered promiscuous mode [ 333.120033][T13988] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 333.129069][T13998] ipt_rpfilter: unknown options [ 333.135560][T13988] bond8: left promiscuous mode [ 333.149134][T13988] bridge8: left promiscuous mode [ 333.363256][T14003] team0: Port device team_slave_0 removed [ 333.763917][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 335.968538][T13996] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.984986][T14037] netlink: 'syz.2.2254': attribute type 1 has an invalid length. [ 336.016840][T14037] __nla_validate_parse: 17 callbacks suppressed [ 336.016862][T14037] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2254'. [ 336.059833][T14037] NCSI netlink: No device for ifindex 0 [ 336.095141][T14040] netlink: 'syz.2.2254': attribute type 11 has an invalid length. [ 336.151923][T14040] netlink: 134296 bytes leftover after parsing attributes in process `syz.2.2254'. [ 336.492676][T14077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2260'. [ 336.511982][T14070] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 336.633786][T14083] netlink: 'syz.2.2265': attribute type 11 has an invalid length. [ 336.855973][T14101] Unsupported ieee802154 address type: 0 [ 336.930088][T14094] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.983473][T14094] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.090946][T14116] netlink: 'syz.1.2272': attribute type 5 has an invalid length. [ 337.284393][T14108] ve: renamed from veth0_vlan [ 337.384685][T14114] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2271'. [ 337.488991][T14131] lo: left allmulticast mode [ 337.543073][T14131] tunl0: left promiscuous mode [ 337.560699][T14131] tunl0: left allmulticast mode [ 337.585693][T14131] gretap0: left allmulticast mode [ 337.621490][T14131] ip_vti0: left allmulticast mode [ 337.641787][T14131] ip6_vti0: left allmulticast mode [ 337.659030][T14145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2275'. [ 337.779801][T14131] bond0: left promiscuous mode [ 337.794402][T14131] bond_slave_0: left promiscuous mode [ 337.809262][T14131] bond_slave_1: left promiscuous mode [ 337.828222][T14131] syz_tun: left promiscuous mode [ 337.889491][T14131] A link change request failed with some changes committed already. Interface H may have been left with an inconsistent configuration, please check. [ 337.981814][T14159] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 338.049326][T14163] : entered promiscuous mode [ 338.161424][T14173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2283'. [ 338.209033][T14176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2283'. [ 338.367426][T14187] x_tables: duplicate underflow at hook 2 [ 338.379444][T14179] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2284'. [ 338.416366][T14179] openvswitch: netlink: IP tunnel dst address not specified [ 338.730833][T14216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2289'. [ 341.349645][T14186] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 341.635840][T14239] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2295'. [ 341.690527][T14240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2294'. [ 341.702449][T14244] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2296'. [ 341.843112][T14251] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2297'. [ 341.889049][T14256] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2299'. [ 342.228514][T14280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2304'. [ 342.271124][T14280] veth0_to_bond: entered allmulticast mode [ 342.298403][T14283] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2301'. [ 342.337144][T14283] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2301'. [ 342.578625][T14292] netlink: 'syz.0.2301': attribute type 1 has an invalid length. [ 342.646964][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 343.087210][T14329] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2314'. [ 343.102409][T14324] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2311'. [ 343.137541][T14329] 0·: renamed from hsr0 (while UP) [ 343.158792][T14329] 0·: entered allmulticast mode [ 343.164977][T14329] hsr_slave_0: entered allmulticast mode [ 343.170782][T14329] hsr_slave_1: entered allmulticast mode [ 343.179765][T14329] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 343.201909][ T5295] ve: left promiscuous mode [ 343.207616][T14325] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 343.217331][T14325] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 343.266912][ T5295] ve: entered promiscuous mode [ 343.308413][T14335] 1·: renamed from c0· (while UP) [ 343.347357][ T35] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 343.358954][T14335] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 346.078681][T14336] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 346.094599][T14362] netlink: 'syz.1.2316': attribute type 1 has an invalid length. [ 346.109214][T14362] netlink: 'syz.1.2316': attribute type 1 has an invalid length. [ 346.128077][T14362] netlink: 'syz.1.2316': attribute type 8 has an invalid length. [ 346.552169][T14402] ip6erspan1: entered allmulticast mode [ 346.796677][T14419] xt_NFQUEUE: number of total queues is 0 [ 347.318523][T14446] __nla_validate_parse: 10 callbacks suppressed [ 347.318543][T14446] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2336'. [ 347.452537][T14461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.463003][T14460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.837940][T14483] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2345'. [ 348.088766][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2349'. [ 348.102816][T14495] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 348.420803][T14510] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 348.579225][T14519] sctp: [Deprecated]: syz.4.2358 (pid 14519) Use of int in maxseg socket option. [ 348.579225][T14519] Use struct sctp_assoc_value instead [ 348.621861][T14519] netlink: 'syz.4.2358': attribute type 1 has an invalid length. [ 348.641270][T14519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2358'. [ 348.838465][T14537] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 349.072630][T14551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2365'. [ 349.102869][T14550] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2366'. [ 349.127298][T14556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2367'. [ 349.133384][T14550] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2366'. [ 349.144680][T14556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2367'. [ 349.153979][T14553] can: request_module (can-proto-0) failed. [ 349.787676][T14601] netlink: 'syz.4.2381': attribute type 1 has an invalid length. [ 349.871267][T14601] bond8: entered promiscuous mode [ 349.909975][T14601] 8021q: adding VLAN 0 to HW filter on device bond8 [ 350.064176][T14606] bond8: (slave bridge4): making interface the new active one [ 350.083351][T14606] bridge4: entered promiscuous mode [ 350.098642][T14606] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 350.137009][T14612] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 350.161697][T14612] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 350.190401][T14612] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 350.250386][T14633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2388'. [ 350.555385][T14646] netlink: 'syz.0.2394': attribute type 6 has an invalid length. [ 350.719554][T14652] netlink: 'syz.2.2396': attribute type 11 has an invalid length. [ 350.918620][T14666] netlink: 'syz.4.2401': attribute type 8 has an invalid length. [ 351.161048][T14679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.207577][T14684] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 351.308561][T14679] netlink: 'syz.4.2406': attribute type 23 has an invalid length. [ 351.351669][T14704] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 351.414249][T14680] netlink: 'syz.4.2406': attribute type 23 has an invalid length. [ 351.827439][T14719] syzkaller0: entered promiscuous mode [ 351.845760][T14719] syzkaller0: entered allmulticast mode [ 351.932354][T14731] netlink: 'syz.4.2421': attribute type 32 has an invalid length. [ 351.994803][T14729] netlink: 'syz.2.2420': attribute type 24 has an invalid length. [ 352.029171][T14731] bond9: option coupled_control: invalid value (192) [ 352.038986][T14731] bond9 (unregistering): Released all slaves [ 352.136774][T14744] syzkaller0: entered promiscuous mode [ 352.145936][T14744] syzkaller0: entered allmulticast mode [ 352.310612][T14749] netlink: 'syz.1.2424': attribute type 12 has an invalid length. [ 352.538005][T14764] __nla_validate_parse: 13 callbacks suppressed [ 352.538112][T14764] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2429'. [ 352.590390][T14766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2430'. [ 352.638515][T14771] netlink: 'syz.4.2431': attribute type 10 has an invalid length. [ 352.666684][T14771] ipvlan0: entered allmulticast mode [ 352.687655][T14771] veth0_vlan: entered allmulticast mode [ 352.725673][T14771] team0: Device ipvlan0 failed to register rx_handler [ 352.735569][T14775] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2433'. [ 352.820551][T14775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2433'. [ 352.841051][T14775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2433'. [ 352.899508][T14775] : entered promiscuous mode [ 353.984701][T14840] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2450'. [ 354.249420][T14854] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2452'. [ 354.288134][T14859] xt_l2tp: v2 doesn't support IP mode [ 354.310222][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2452'. [ 354.356227][T14864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2455'. [ 354.411233][T14869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2455'. [ 355.561089][T14937] tipc: Enabled bearer , priority 10 [ 355.919487][T14956] bond0: (slave bond_slave_0): Releasing backup interface [ 356.847537][T15002] netlink: 'syz.2.2487': attribute type 1 has an invalid length. [ 357.575629][T15044] __nla_validate_parse: 8 callbacks suppressed [ 357.575650][T15044] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2496'. [ 357.607811][T15044] unsupported nlmsg_type 40 [ 357.689310][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2497'. [ 357.835891][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b02fc00: rx timeout, send abort [ 357.908183][T15063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2502'. [ 357.913920][T15057] bond9: entered promiscuous mode [ 357.922564][T15057] bond9: entered allmulticast mode [ 357.929419][T15057] 8021q: adding VLAN 0 to HW filter on device bond9 [ 357.961575][T15061] syzkaller0: entered promiscuous mode [ 357.979599][T15061] syzkaller0: entered allmulticast mode [ 358.123537][T15071] IPv6: NLM_F_CREATE should be specified when creating new route [ 358.344367][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b02fc00: abort rx timeout. Force session deactivation [ 358.492819][T15087] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 358.505424][T15091] netlink: 'syz.0.2512': attribute type 1 has an invalid length. [ 358.529238][T15095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2515'. [ 358.538424][T15091] netlink: 'syz.0.2512': attribute type 1 has an invalid length. [ 358.561361][T15091] netlink: 'syz.0.2512': attribute type 1 has an invalid length. [ 358.589714][T15091] netlink: 'syz.0.2512': attribute type 2 has an invalid length. [ 358.620285][T15091] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2512'. [ 358.779597][T15105] netlink: 'syz.1.2518': attribute type 1 has an invalid length. [ 358.795353][T15108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2519'. [ 358.869842][T15113] netlink: 'syz.3.2520': attribute type 9 has an invalid length. [ 358.931918][T15116] openvswitch: netlink: IP tunnel dst address not specified [ 358.945053][T15116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2522'. [ 358.956392][T15116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2522'. [ 359.379503][T15139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2529'. [ 359.451759][T15144] netlink: 'syz.0.2530': attribute type 39 has an invalid length. [ 359.633446][T15146] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2531'. [ 360.574859][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 361.282629][T15080] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.499281][T15164] Cannot find add_set index 4 as target [ 361.505033][T15159] netlink: 'syz.0.2534': attribute type 10 has an invalid length. [ 361.541072][T15164] Cannot find add_set index 4 as target [ 361.805332][T15159] netlink: 'syz.0.2534': attribute type 10 has an invalid length. [ 362.097041][T15202] validate_nla: 31 callbacks suppressed [ 362.097154][T15202] netlink: 'syz.0.2541': attribute type 1 has an invalid length. [ 362.282384][T15216] netlink: 'syz.4.2546': attribute type 2 has an invalid length. [ 362.508237][T15202] bond10: entered promiscuous mode [ 362.538738][T15202] 8021q: adding VLAN 0 to HW filter on device bond10 [ 362.587981][T15225] tipc: Enabled bearer , priority 0 [ 362.611777][T15228] __nla_validate_parse: 34 callbacks suppressed [ 362.611812][T15228] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2548'. [ 362.629689][T15221] syzkaller0: entered promiscuous mode [ 362.639425][T15221] syzkaller0: entered allmulticast mode [ 362.662517][T15221] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 362.757443][T15221] tipc: Resetting bearer [ 362.801873][T15220] tipc: Resetting bearer [ 362.950572][T15220] tipc: Disabling bearer [ 363.058353][T15239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.328978][T15262] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2555'. [ 363.455702][T15272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2556'. [ 364.034264][T15309] netlink: 'syz.1.2567': attribute type 10 has an invalid length. [ 364.062545][T15309] ipvlan0: entered allmulticast mode [ 364.081504][T15309] team0: Device ipvlan0 failed to register rx_handler [ 364.299637][T15324] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2572'. [ 364.325555][T15324] netlink: ct family unspecified [ 364.345220][T15324] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2572'. [ 365.007578][T15365] syzkaller1: entered promiscuous mode [ 365.022941][T15365] syzkaller1: entered allmulticast mode [ 365.048695][T15369] ipt_rpfilter: unknown options [ 365.119493][T15374] netlink: 'syz.4.2585': attribute type 83 has an invalid length. [ 365.329362][T15379] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2587'. [ 365.372870][T15379] netlink: 'syz.4.2587': attribute type 4 has an invalid length. [ 365.926408][T15417] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2594'. [ 366.202249][T15439] netlink: 'syz.4.2601': attribute type 1 has an invalid length. [ 366.228586][T15439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2601'. [ 366.249786][T15439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2601'. [ 366.589201][T15459] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2607'. [ 366.707093][T15470] ip6t_srh: unknown srh invflags 4000 [ 366.716066][T15470] IPv6: NLM_F_REPLACE set, but no existing node found! [ 366.781606][T15464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 367.448859][T15526] netlink: 'syz.1.2624': attribute type 1 has an invalid length. [ 367.458441][T15526] netlink: 'syz.1.2624': attribute type 1 has an invalid length. [ 367.572393][T15528] team1: entered promiscuous mode [ 367.579179][T15528] team1: entered allmulticast mode [ 367.622750][T15528] team2: entered promiscuous mode [ 367.628137][T15528] team2: entered allmulticast mode [ 367.840733][T15541] __nla_validate_parse: 3 callbacks suppressed [ 367.840763][T15541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2629'. [ 367.894849][T15544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2629'. [ 368.221350][T15537] tipc: Disabling bearer [ 368.718018][T15579] netlink: 'syz.4.2635': attribute type 10 has an invalid length. [ 368.851340][T15581] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 368.862940][ T2172] IPVS: starting estimator thread 0... [ 368.872969][T15556] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.902118][T15556] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.912646][T15596] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2636'. [ 368.937735][T15579] syz_tun: entered promiscuous mode [ 368.954050][T15587] IPVS: using max 34 ests per chain, 81600 per kthread [ 369.092614][T15556] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.103183][T15556] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.239196][T15556] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.250220][T15556] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.355127][T15618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2641'. [ 369.401589][ T1179] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.412106][ T1179] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.421776][T15618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2641'. [ 369.467271][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.484150][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.576932][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.587265][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.613130][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.627925][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.105598][T15611] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 370.147950][T15647] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2647'. [ 370.365066][T15659] netlink: 'syz.4.2648': attribute type 11 has an invalid length. [ 370.401107][T15659] netlink: 'syz.4.2648': attribute type 11 has an invalid length. [ 370.444649][T15659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2648'. [ 370.688106][T15685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.884147][ T5633] Bluetooth: hci4: command 0x0405 tx timeout [ 371.650475][T15737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2665'. [ 371.798584][T15745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2669'. [ 371.821679][T15745] netlink: 'syz.1.2669': attribute type 8 has an invalid length. [ 372.498941][T15780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2676'. [ 373.124627][T15811] : entered promiscuous mode [ 373.147377][T15815] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 373.559779][T15832] netlink: 'syz.3.2692': attribute type 1 has an invalid length. [ 373.640340][T15809] __nla_validate_parse: 1 callbacks suppressed [ 373.640360][T15809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2684'. [ 373.733039][T15839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2694'. [ 373.770971][T15837] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2693'. [ 373.865706][T15837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2693'. [ 373.938279][T15837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2693'. [ 374.033881][T15837] ip6gretap0: entered promiscuous mode [ 374.254554][T15857] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2698'. [ 374.316943][T15862] netlink: 'syz.1.2699': attribute type 32 has an invalid length. [ 374.356846][T15862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2699'. [ 374.413503][T15861] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2700'. [ 374.499949][T15875] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.2704'. [ 374.532463][T15862] bond9: option coupled_control: invalid value (192) [ 374.565674][T15862] bond9 (unregistering): Released all slaves [ 375.058813][T15899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2711'. [ 375.082680][T15903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.169432][T15907] bond15 (unregistering): Released all slaves [ 375.320569][T15911] syzkaller0: entered promiscuous mode [ 375.358132][T15911] syzkaller0: entered allmulticast mode [ 375.410465][T15918] xt_TCPMSS: Only works on TCP SYN packets [ 375.823727][T15930] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 376.060014][T15945] bridge_slave_0: default FDB implementation only supports local addresses [ 376.241954][T15964] xt_hashlimit: size too large, truncated to 1048576 [ 376.281319][T15968] 0·: renamed from hsr0 (while UP) [ 376.305725][T15968] 0·: entered allmulticast mode [ 376.320790][T15968] hsr_slave_0: entered allmulticast mode [ 376.337857][T15968] hsr_slave_1: entered allmulticast mode [ 376.355179][T15968] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 376.383155][T15977] syzkaller1: entered promiscuous mode [ 376.394497][T15977] syzkaller1: entered allmulticast mode [ 376.421758][T15978] netlink: 'syz.2.2730': attribute type 4 has an invalid length. [ 377.214911][T16019] IPv6: NLM_F_CREATE should be specified when creating new route [ 377.706988][T16033] gre2: entered promiscuous mode [ 377.725192][T16033] gre2: entered allmulticast mode [ 377.790476][T16047] set match dimension is over the limit! [ 378.152603][T16059] xt_CT: You must specify a L4 protocol and not use inversions on it [ 378.198759][T16069] netlink: 'syz.1.2748': attribute type 1 has an invalid length. [ 378.787331][T16093] __nla_validate_parse: 12 callbacks suppressed [ 378.787354][T16093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2755'. [ 378.890309][T16104] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2757'. [ 379.171214][T16111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.252316][T16119] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2762'. [ 379.339626][T16119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2762'. [ 379.683143][T16119] 8021q: adding VLAN 0 to HW filter on device bond9 [ 379.856203][T16146] tipc: Enabling of bearer rejected, failed to enable media [ 380.062486][T16159] tipc: Enabled bearer , priority 0 [ 380.195939][T16159] syzkaller0: entered promiscuous mode [ 380.201666][T16159] syzkaller0: entered allmulticast mode [ 380.210219][T16159] tipc: Resetting bearer [ 380.250271][T16154] tipc: Resetting bearer [ 380.994596][T16178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2788'. [ 382.025018][T16154] tipc: Disabling bearer [ 382.609725][T16172] xfrm0 speed is unknown, defaulting to 1000 [ 382.764645][T16214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2804'. [ 383.588651][T16248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2821'. [ 383.633752][T16248] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2821'. [ 384.849148][T16299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2843'. [ 384.866493][T16301] netlink: 'syz.0.2845': attribute type 1 has an invalid length. [ 384.971518][T16309] netlink: 'syz.2.2847': attribute type 8 has an invalid length. [ 384.989317][T16310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2845'. [ 384.998430][T16309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2847'. [ 385.044970][T16301] 8021q: adding VLAN 0 to HW filter on device bond12 [ 385.178329][T16323] netlink: 'syz.3.2851': attribute type 4 has an invalid length. [ 385.210620][T16325] nbd: illegal input index 2958377 [ 385.228389][T16318] vlan0: MTU too low for tipc bearer [ 385.235849][T16318] tipc: Enabling of bearer rejected, failed to enable media [ 385.267950][T16318] tipc: Enabled bearer , priority 0 [ 385.309771][T16318] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2850'. [ 385.748757][T16359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 385.911393][T16365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2861'. [ 385.973196][ T5633] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.985386][ T5633] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 386.010697][ T5633] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 386.013117][T16370] netlink: 'syz.3.2861': attribute type 1 has an invalid length. [ 386.037935][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 386.047148][ T5633] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 386.081541][T16372] IPv6: addrconf: prefix option has invalid lifetime [ 386.153072][T16370] netlink: 'syz.3.2861': attribute type 3 has an invalid length. [ 386.194916][T16370] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2861'. [ 386.489670][T16396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.601427][T16396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2867'. [ 386.706381][T16408] netlink: 296 bytes leftover after parsing attributes in process `syz.2.2870'. [ 387.171032][T16429] netlink: 'syz.2.2877': attribute type 1 has an invalid length. [ 387.188181][T16429] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.2877'. [ 387.207111][T16435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2876'. [ 387.596051][T16367] xfrm0 speed is unknown, defaulting to 1000 [ 387.975459][T16463] syzkaller0: entered promiscuous mode [ 387.983310][T16463] syzkaller0: entered allmulticast mode [ 388.164192][ T50] Bluetooth: hci5: command tx timeout [ 388.847569][T16367] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.890969][T16367] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.912299][T16367] bridge_slave_0: entered allmulticast mode [ 388.931054][T16367] bridge_slave_0: entered promiscuous mode [ 388.958187][T16367] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.981722][T16367] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.030502][T16367] bridge_slave_1: entered allmulticast mode [ 389.066921][T16367] bridge_slave_1: entered promiscuous mode [ 389.198764][T16367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.248786][T16367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.392086][T16367] team0: Port device team_slave_0 added [ 389.409129][T16516] netlink: 'syz.0.2899': attribute type 25 has an invalid length. [ 389.456149][T16367] team0: Port device team_slave_1 added [ 389.575847][T16367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.583768][T16367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.616308][T16367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.662820][T16367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.672841][T16367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.700016][T16367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.773121][T16367] hsr_slave_0: entered promiscuous mode [ 389.780142][T16367] hsr_slave_1: entered promiscuous mode [ 389.792612][T16367] debugfs: 'hsr0' already exists in 'hsr' [ 389.799485][T16367] Cannot create hsr debugfs directory [ 389.877956][T16530] __nla_validate_parse: 1 callbacks suppressed [ 389.877976][T16530] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2904'. [ 389.909848][T16530] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2904'. [ 390.243715][ T50] Bluetooth: hci5: command tx timeout [ 390.353211][T16555] nftables ruleset with unbound chain [ 390.412621][T16367] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.430131][T16557] netlink: 'syz.2.2910': attribute type 1 has an invalid length. [ 390.439697][T16367] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.453816][T16557] netlink: 'syz.2.2910': attribute type 7 has an invalid length. [ 390.463643][T16555] netlink: 'syz.3.2911': attribute type 2 has an invalid length. [ 390.485934][T16557] netlink: 'syz.2.2910': attribute type 8 has an invalid length. [ 390.501252][T16557] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2910'. [ 390.649381][T16562] bond13: option lp_interval: invalid value (0) [ 390.657034][T16562] bond13: option lp_interval: allowed values 1 - 2147483647 [ 390.669048][T16562] bond13 (unregistering): Released all slaves [ 390.763850][T16367] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.767117][T16571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2916'. [ 390.791677][T16367] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.970658][T16367] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.001427][T16367] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.066495][T16591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.082730][T16367] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.118309][T16367] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.167278][T16595] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2920'. [ 391.189919][T16595] xt_policy: neither incoming nor outgoing policy selected [ 391.348664][T16602] netlink: 'syz.0.2925': attribute type 3 has an invalid length. [ 391.387582][T16602] netlink: 'syz.0.2925': attribute type 3 has an invalid length. [ 391.398423][T16602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2925'. [ 391.544950][T16614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2927'. [ 391.851634][T16367] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 391.915904][T16367] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 391.956649][T16367] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 392.020087][T16367] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.045492][T16367] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 392.086804][T16367] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.146436][T16367] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 392.174551][T16367] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 392.323747][ T50] Bluetooth: hci5: command tx timeout [ 392.491414][T16367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.560902][T16367] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.586247][ T3282] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.593474][ T3282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.631654][ T3282] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.638898][ T3282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.650254][T16676] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004 [ 392.667623][T16676] IPVS: set_ctl: invalid protocol: 8 172.30.1.3:20000 [ 392.689405][T16677] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2940'. [ 392.738028][T16677] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2940'. [ 393.222135][T16708] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2948'. [ 393.277025][T16708] xt_policy: neither incoming nor outgoing policy selected [ 393.342517][T16707] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 393.373083][T16707] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 393.401755][T16714] netlink: 'syz.3.2951': attribute type 18 has an invalid length. [ 393.535646][T16721] : left promiscuous mode [ 393.606777][T16724] xt_ecn: cannot match TCP bits for non-tcp packets [ 393.960688][T16367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.138210][T16752] ip6tnl4: entered allmulticast mode [ 394.267810][T16367] veth0_vlan: entered promiscuous mode [ 394.278896][T16761] netlink: 'syz.2.2962': attribute type 2 has an invalid length. [ 394.310344][T16367] veth1_vlan: entered promiscuous mode [ 394.404410][ T50] Bluetooth: hci5: command tx timeout [ 394.428457][T16367] veth0_macvtap: entered promiscuous mode [ 394.497233][T16367] veth1_macvtap: entered promiscuous mode [ 394.590738][T16367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.634909][T16367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.708645][T12036] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.732647][T12036] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.775039][T12036] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.853978][T12036] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.123866][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 395.157131][T14440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.172413][T14440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.305649][ T3372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.331243][ T3372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.439995][T16816] __nla_validate_parse: 8 callbacks suppressed [ 395.440017][T16816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2976'. [ 395.474675][T16816] bridge_slave_0: default FDB implementation only supports local addresses [ 395.541793][T16820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2979'. [ 395.820251][T16834] netlink: 'syz.4.2984': attribute type 1 has an invalid length. [ 395.829019][T16836] netlink: 'syz.3.2983': attribute type 2 has an invalid length. [ 395.904767][T16837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.937598][T16834] 8021q: adding VLAN 0 to HW filter on device bond10 [ 396.017856][T16841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2986'. [ 396.055292][T16841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2986'. [ 396.093876][T16841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2986'. [ 396.107180][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 396.120735][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 396.129817][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 396.147157][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 396.156172][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 396.430409][T16854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2989'. [ 396.672166][T16861] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2991'. [ 396.703837][T16861] nbd: illegal input index -8454144 [ 397.065905][T16880] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2996'. [ 397.094397][T16879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2997'. [ 397.133113][T16879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2997'. [ 397.258542][T16890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.756249][T16916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 397.763610][T16916] IPv6: NLM_F_CREATE should be set when creating new route [ 397.770880][T16916] IPv6: NLM_F_CREATE should be set when creating new route [ 397.776047][T16920] netlink: 'syz.1.3008': attribute type 1 has an invalid length. [ 397.915881][T16926] netlink: 'syz.1.3010': attribute type 16 has an invalid length. [ 397.930625][T16926] netlink: 'syz.1.3010': attribute type 3 has an invalid length. [ 398.245045][ T5633] Bluetooth: hci1: command tx timeout [ 399.680798][T16845] xfrm0 speed is unknown, defaulting to 1000 [ 399.826058][T16950] netlink: 'syz.4.3014': attribute type 18 has an invalid length. [ 399.947884][T16950] netlink: 'syz.4.3014': attribute type 18 has an invalid length. [ 400.228334][T16972] netlink: 'syz.1.3023': attribute type 1 has an invalid length. [ 400.324439][ T5633] Bluetooth: hci1: command tx timeout [ 400.453154][T16991] __nla_validate_parse: 4 callbacks suppressed [ 400.453173][T16991] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3027'. [ 400.539985][T16993] pimreg: entered allmulticast mode [ 400.564266][T16993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3026'. [ 400.595075][T16993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3026'. [ 400.837827][T17009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3030'. [ 401.080468][T16845] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.087982][T16845] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.095399][T16845] bridge_slave_0: entered allmulticast mode [ 401.103485][T16845] bridge_slave_0: entered promiscuous mode [ 401.113171][T16845] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.120721][T16845] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.128197][T16845] bridge_slave_1: entered allmulticast mode [ 401.137027][T16845] bridge_slave_1: entered promiscuous mode [ 401.196591][T16845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.228001][T16845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.330415][T16845] team0: Port device team_slave_0 added [ 401.357614][T16845] team0: Port device team_slave_1 added [ 401.528059][T16845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.546323][T16845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.572653][T16845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.610630][T17045] lo: entered allmulticast mode [ 401.629662][T17045] tunl0: entered allmulticast mode [ 401.645615][T17045] gre0: entered allmulticast mode [ 401.656995][T17045] gretap0: entered allmulticast mode [ 401.676531][T17050] openvswitch: netlink: IPv4 tun info is not correct [ 401.684694][T17045] ip_vti0: entered allmulticast mode [ 401.705923][T17045] ip6_vti0: entered allmulticast mode [ 401.722135][T17045] sit0: entered allmulticast mode [ 401.740959][T17045] ip6tnl0: entered allmulticast mode [ 401.756860][T17045] ip6gre0: entered allmulticast mode [ 401.762951][T17045] syz_tun: left promiscuous mode [ 401.768902][T17045] syz_tun: entered allmulticast mode [ 401.775181][T17045] bridge0: entered allmulticast mode [ 401.781412][T16845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.795536][T16845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.824761][T16845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.011235][T16845] hsr_slave_0: entered promiscuous mode [ 402.024891][T16845] hsr_slave_1: entered promiscuous mode [ 402.031499][T16845] debugfs: 'hsr0' already exists in 'hsr' [ 402.039359][T16845] Cannot create hsr debugfs directory [ 402.078292][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3045'. [ 402.140928][T17073] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3047'. [ 402.404688][ T5633] Bluetooth: hci1: command tx timeout [ 402.446881][T16845] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.458937][T16845] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 402.470095][T16845] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.638457][T16845] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.649449][T16845] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 402.661941][T16845] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.741065][T16845] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.753051][T16845] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 402.765086][T16845] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.853071][T16845] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.865800][T16845] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 402.877820][T16845] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.209269][T16845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 403.225481][T16845] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 403.238549][T16845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 403.261737][T16845] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 403.279703][T16845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 403.309094][T16845] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 403.326588][T16845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 403.352695][T16845] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 403.601268][T16845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.639734][T16845] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.664474][ T3372] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.671771][ T3372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.682637][ T3372] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.689867][ T3372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.711357][T17107] Unknown options in mask b7f2 [ 403.924761][T17146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3065'. [ 404.052434][T17153] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.3068'. [ 404.073361][T17153] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.3068'. [ 404.089148][T17153] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.3068'. [ 404.251619][T17164] netlink: 'syz.4.3070': attribute type 10 has an invalid length. [ 404.483885][ T5633] Bluetooth: hci1: command tx timeout [ 404.881329][T17198] sock: sock_timestamping_bind_phc: sock not bind to device [ 404.895125][T16845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.971725][T17206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.100292][T16845] veth0_vlan: entered promiscuous mode [ 405.149928][T16845] veth1_vlan: entered promiscuous mode [ 405.242781][T16845] veth0_macvtap: entered promiscuous mode [ 405.254344][T17210] netlink: 'syz.4.3082': attribute type 11 has an invalid length. [ 405.270044][T16845] veth1_macvtap: entered promiscuous mode [ 405.404721][T17214] 8021q: adding VLAN 0 to HW filter on device bond15 [ 405.476340][T17216] 8021q: adding VLAN 0 to HW filter on device bond16 [ 405.485535][T17216] bond15: (slave bond16): Enslaving as an active interface with an up link [ 405.551669][T17224] bond15 (unregistering): (slave bond16): Releasing backup interface [ 405.580810][T17224] bond15 (unregistering): Released all slaves [ 405.698465][T16845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.729603][T16845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.770071][T14440] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.802671][T14440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.855724][ T81] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.875199][ T81] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.904801][T17235] syzkaller0: entered promiscuous mode [ 405.912022][T17235] syzkaller0: entered allmulticast mode [ 405.938556][T17235] netlink: 'syz.2.3090': attribute type 1 has an invalid length. [ 406.007570][T17240] __nla_validate_parse: 35 callbacks suppressed [ 406.007590][T17240] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3091'. [ 406.078266][T17244] netlink: 'syz.2.3090': attribute type 1 has an invalid length. [ 406.208953][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.238420][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.322940][T17252] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3096'. [ 406.360925][T17255] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3096'. [ 406.405720][ T3372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.417802][ T3372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.544391][T17265] netlink: 'syz.3.3099': attribute type 4 has an invalid length. [ 406.597164][T17266] netlink: 'syz.3.3099': attribute type 4 has an invalid length. [ 406.820068][T17277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3102'. [ 406.949363][T17286] netlink: 'syz.1.3105': attribute type 4 has an invalid length. [ 406.958145][T17286] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3105'. [ 407.019344][T17286] .`: renamed from bond0 (while UP) [ 407.177071][T17291] netlink: 'syz.3.3107': attribute type 12 has an invalid length. [ 407.216608][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 407.230279][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 407.239361][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 407.249379][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 407.257238][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 407.378409][T17291] bond7: option primary_reselect: invalid value (255) [ 407.407062][T17291] bond7 (unregistering): Released all slaves [ 407.542127][T17314] sctp: [Deprecated]: syz.2.3110 (pid 17314) Use of struct sctp_assoc_value in delayed_ack socket option. [ 407.542127][T17314] Use struct sctp_sack_info instead [ 407.733210][ T5646] bond0: (slave syz_tun): Releasing backup interface [ 407.830062][T17322] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 407.838535][T17324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3113'. [ 407.859303][T17324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3113'. [ 407.881623][T17322] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3112'. [ 407.895407][T17324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3113'. [ 408.113175][ T81] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.142882][ T81] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.169158][T17340] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3118'. [ 408.202072][T17340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.450375][ T81] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.461395][ T81] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.807193][ T81] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.821830][ T81] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.184947][ T81] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.200330][ T81] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.339941][T17293] xfrm0 speed is unknown, defaulting to 1000 [ 409.373816][ T50] Bluetooth: hci0: command tx timeout [ 409.763122][T17388] nbd4: detected capacity change from 0 to 63 [ 409.811293][ T4949] block nbd4: Receive control failed (result -104) [ 409.818589][ T50] block nbd4: Receive control failed (result -32) [ 409.996234][ T81] bridge_slave_1: left allmulticast mode [ 410.020266][ T81] bridge_slave_1: left promiscuous mode [ 410.050138][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.157891][ T81] bridge_slave_0: left allmulticast mode [ 410.188910][ T81] bridge_slave_0: left promiscuous mode [ 410.211207][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.342657][ T81] pimreg3: left allmulticast mode [ 410.630691][ T3372] smc: removing ib device syz1 [ 410.688401][ T3372] smbdirect: ib_dev[syz1] removed [ 411.393245][ T81] bond8 (unregistering): (slave bridge4): Releasing backup interface [ 411.402528][ T81] bridge4 (unregistering): left promiscuous mode [ 411.443724][ T50] Bluetooth: hci0: command tx timeout [ 411.534417][ T81] tipc: Disabling bearer [ 411.638669][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.654410][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.665879][ T81] bond0 (unregistering): Released all slaves [ 411.701384][ T81] bond1 (unregistering): Released all slaves [ 411.772107][ T81] bond2 (unregistering): Released all slaves [ 411.816452][ T81] bond3 (unregistering): (slave lo): Releasing backup interface [ 411.828301][ T81] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 411.853878][ T81] bond3 (unregistering): Released all slaves [ 411.960010][ T81] bond4 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 411.971427][ T81] bond4 (unregistering): Released all slaves [ 412.038127][ T81] bond5 (unregistering): Released all slaves [ 412.109964][ T81] bond6 (unregistering): Released all slaves [ 412.160929][ T81] bond7 (unregistering): Released all slaves [ 412.192497][ T81] bond8 (unregistering): Released all slaves [ 412.261884][ T81] bond9 (unregistering): Released all slaves [ 412.327774][ T81] bond10 (unregistering): Released all slaves [ 412.473289][T17438] batman_adv: batadv0: Adding interface: dummy0 [ 412.493307][T17438] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.593958][T17438] batman_adv: batadv0: Interface activated: dummy0 [ 412.620656][ T9] xfrm0 speed is unknown, defaulting to 1000 [ 412.632072][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 412.672077][ T9] syz1: Port: 1 Link DOWN [ 412.755540][T17456] netlink: 'syz.0.3145': attribute type 1 has an invalid length. [ 412.799753][T17460] __nla_validate_parse: 6 callbacks suppressed [ 412.799772][T17460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3146'. [ 412.805684][T17456] netlink: 'syz.0.3145': attribute type 2 has an invalid length. [ 412.914621][T17451] vlan0: entered allmulticast mode [ 412.920595][T17451] bond0: entered allmulticast mode [ 413.523977][ T50] Bluetooth: hci0: command tx timeout [ 413.952263][T17504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3156'. [ 413.989394][ T81] : left promiscuous mode [ 414.037098][T17509] nbd: must specify at least one socket [ 414.319145][ T81] tipc: Left network mode [ 414.657613][T17543] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 414.818720][T17293] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.826186][T17293] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.833481][T17293] bridge_slave_0: entered allmulticast mode [ 414.843364][T17293] bridge_slave_0: entered promiscuous mode [ 414.866489][T17550] netlink: 67 bytes leftover after parsing attributes in process `syz.1.3162'. [ 414.901317][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 414.935666][T17552] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 414.935666][T17552] Please contact the netfilter-devel mailing list or update your nftables rules. [ 414.935811][T17548] 8021q: adding VLAN 0 to HW filter on device .` [ 414.963256][T17552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3164'. [ 415.054112][T17555] netlink: 'syz.3.3165': attribute type 1 has an invalid length. [ 415.088619][T17555] bond7: entered promiscuous mode [ 415.094885][T17555] 8021q: adding VLAN 0 to HW filter on device bond7 [ 415.103209][T17293] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.112432][T17293] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.120564][T17293] bridge_slave_1: entered allmulticast mode [ 415.129786][T17293] bridge_slave_1: entered promiscuous mode [ 415.205931][T17552] macsec2: entered promiscuous mode [ 415.211213][T17552] bridge0: entered promiscuous mode [ 415.227438][T17552] macsec2: entered allmulticast mode [ 415.236165][T17552] bridge0: entered allmulticast mode [ 415.243023][T17552] bridge0: port 4(macsec2) entered blocking state [ 415.249667][T17552] bridge0: port 4(macsec2) entered disabled state [ 415.262892][T17552] bridge0: left allmulticast mode [ 415.321033][ T5744] bridge0: left promiscuous mode [ 415.356209][T17562] netlink: 'syz.0.3167': attribute type 30 has an invalid length. [ 415.412562][T17558] bond7: (slave bridge8): making interface the new active one [ 415.421950][T17558] bridge8: entered promiscuous mode [ 415.430107][T17558] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 415.529692][T17562] bond1: option arp_missed_max: invalid value (0) [ 415.554529][T17562] bond1: option arp_missed_max: allowed values 1 - 255 [ 415.566764][T17562] bond1 (unregistering): Released all slaves [ 415.604099][ T50] Bluetooth: hci0: command tx timeout [ 415.636204][T17293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.666095][T17293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.730415][T17578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3171'. [ 415.844612][T17583] xt_cluster: node mask cannot exceed total number of nodes [ 415.854739][T17293] team0: Port device team_slave_0 added [ 415.967581][T17293] team0: Port device team_slave_1 added [ 416.074707][T17591] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 416.242929][T17293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.257834][T17293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.286041][T17293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.368767][T17293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.389753][T17293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.478691][T17293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.550765][T17605] openvswitch: netlink: Flow actions attr not present in new flow. [ 416.706922][T17618] GUP no longer grows the stack in syz.0.3179 (17618): 200000003000-20000000a000 (200000001000) [ 416.764514][T17618] CPU: 1 UID: 0 PID: 17618 Comm: syz.0.3179 Not tainted syzkaller #0 PREEMPT(full) [ 416.764544][T17618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 416.764566][T17618] Call Trace: [ 416.764655][T17618] [ 416.764707][T17618] dump_stack_lvl+0xe8/0x150 [ 416.764827][T17618] __get_user_pages+0x238c/0x2720 [ 416.764917][T17618] ? down_read_killable+0x1bb/0x340 [ 416.765082][T17618] __gup_longterm_locked+0xd52/0x15c0 [ 416.765113][T17618] ? lock_acquire+0x106/0x350 [ 416.765174][T17618] gup_fast_fallback+0x1d82/0x20d0 [ 416.765237][T17618] ? __pfx_gup_fast_fallback+0x10/0x10 [ 416.765266][T17618] ? is_valid_gup_args+0x11f/0x200 [ 416.765294][T17618] ? get_user_pages_fast+0x4d/0xb0 [ 416.765321][T17618] __iov_iter_get_pages_alloc+0x378/0xa40 [ 416.765426][T17618] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 416.765474][T17618] iov_iter_get_pages2+0x5e/0xa0 [ 416.765503][T17618] __se_sys_vmsplice+0x7b5/0x1660 [ 416.765554][T17618] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 416.765583][T17618] ? __pfx_futex_wait+0x10/0x10 [ 416.765710][T17618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.765755][T17618] do_syscall_64+0x174/0x580 [ 416.765804][T17618] ? trace_irq_disable+0x3b/0x140 [ 416.765846][T17618] ? clear_bhb_loop+0x40/0x90 [ 416.765873][T17618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.765894][T17618] RIP: 0033:0x7f6cc9d9ce59 [ 416.765949][T17618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.766007][T17618] RSP: 002b:00007f6ccac0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 416.766056][T17618] RAX: ffffffffffffffda RBX: 00007f6cca015fa0 RCX: 00007f6cc9d9ce59 [ 416.766070][T17618] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 416.766083][T17618] RBP: 00007f6cc9e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 416.766095][T17618] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 416.766108][T17618] R13: 00007f6cca016038 R14: 00007f6cca015fa0 R15: 00007ffcff5e0d68 [ 416.766143][T17618] [ 416.993154][T17293] hsr_slave_0: entered promiscuous mode [ 417.000046][T17293] hsr_slave_1: entered promiscuous mode [ 417.006989][T17293] debugfs: 'hsr0' already exists in 'hsr' [ 417.012780][T17293] Cannot create hsr debugfs directory [ 417.110853][T17631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3182'. [ 417.165597][T17631] netlink: 'syz.3.3182': attribute type 1 has an invalid length. [ 417.471130][T17644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3185'. [ 417.550945][T17639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3184'. [ 417.600396][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3 [ 417.689997][T17649] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.700734][T17649] bridge0: port 3(bond1) entered blocking state [ 417.707525][T17649] bridge0: port 3(bond1) entered disabled state [ 417.714260][T17649] bond1: entered allmulticast mode [ 417.722207][T17649] bond1: entered promiscuous mode [ 417.729261][T17649] bridge0: port 3(bond1) entered blocking state [ 417.737476][T17649] bridge0: port 3(bond1) entered forwarding state [ 417.753441][ T81] hsr_slave_0: left promiscuous mode [ 417.760630][ T81] hsr_slave_1: left promiscuous mode [ 417.767113][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.774841][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.785968][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.793459][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.810982][ T81] veth1_macvtap: left promiscuous mode [ 417.820522][ T81] veth0_macvtap: left allmulticast mode [ 417.826445][ T81] veth0_macvtap: left promiscuous mode [ 417.832163][ T81] veth1_vlan: left promiscuous mode [ 417.837626][ T81] veth0_vlan: left promiscuous mode [ 417.976837][ T81] pim6reg (unregistering): left allmulticast mode [ 417.988869][T17660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3189'. [ 417.999456][T17658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3188'. [ 418.016589][T17660] netlink: 'syz.3.3189': attribute type 7 has an invalid length. [ 418.024922][T17660] netlink: 'syz.3.3189': attribute type 8 has an invalid length. [ 418.032803][T17660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3189'. [ 418.275100][ T81] team0 (unregistering): Port device team_slave_1 removed [ 418.392096][ T81] team0 (unregistering): Port device H removed [ 418.458463][T17649] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 418.459586][ T1179] bridge0: port 3(bond1) entered disabled state [ 418.545028][ T48] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.556835][ T48] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.571621][ T48] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.660131][ T48] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.673313][T17669] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 418.723198][T17672] pimreg: entered allmulticast mode [ 418.928661][T17684] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3196'. [ 419.499874][ T81] IPVS: stop unused estimator thread 0... [ 419.704547][T17725] Dead loop on virtual device ip6_vti0 (net 272), fix it urgently! [ 419.773209][T17730] IPv6: addrconf: prefix option has invalid lifetime [ 419.870359][T17733] xt_HMARK: spi-set and port-set can't be combined [ 420.118768][T17749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3210'. [ 420.186056][T17752] SET target dimension over the limit! [ 420.247943][T17744] tipc: Started in network mode [ 420.257607][T17744] tipc: Node identity 021aad1dd4c7, cluster identity 4711 [ 420.282437][T17744] tipc: Enabled bearer , priority 0 [ 420.340102][T17750] syzkaller0: entered promiscuous mode [ 420.385703][T17750] syzkaller0: entered allmulticast mode [ 420.441101][T17752] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 420.536411][T17750] tipc: Resetting bearer [ 420.628877][T17740] tipc: Resetting bearer [ 420.660048][T17740] tipc: Disabling bearer [ 421.186237][T17767] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 421.221218][T17293] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 421.278319][T17293] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.312491][T17293] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 421.349618][T17293] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.393849][T17825] openvswitch: netlink: IPv4 tun info is not correct [ 421.412920][T17293] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 421.425096][T17825] xt_TPROXY: Can be used only with -p tcp or -p udp [ 421.455080][T17293] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.473341][T17293] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 421.513334][T17293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.630791][T17843] netlink: 272 bytes leftover after parsing attributes in process `syz.0.3225'. [ 421.663965][T17834] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.730222][T17834] bridge_slave_0 (unregistering): left allmulticast mode [ 421.749866][T17834] bridge_slave_0 (unregistering): left promiscuous mode [ 421.758457][T17834] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.398297][T17879] C: renamed from lo (while UP) [ 422.413133][T17879] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 422.438171][T17879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3231'. [ 422.468801][T17879] bond1: left allmulticast mode [ 422.474939][T17879] bond1: left promiscuous mode [ 422.480149][T17879] bridge0: port 3(bond1) entered disabled state [ 422.505054][T17879] bridge_slave_1: left allmulticast mode [ 422.518491][T17879] bridge_slave_1: left promiscuous mode [ 422.534334][T17879] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.694635][T17293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.797904][T17900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3236'. [ 422.827426][T17900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3236'. [ 422.865041][T17904] netlink: 'syz.3.3233': attribute type 16 has an invalid length. [ 422.881121][T17900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3236'. [ 422.925268][T17904] netlink: 'syz.3.3233': attribute type 17 has an invalid length. [ 422.947168][T17897] tipc: Resetting bearer [ 422.968701][T17897] tipc: Resetting bearer [ 423.047924][T17917] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3238'. [ 423.169657][T17904] erspan0: left promiscuous mode [ 423.235237][T17904] tipc: Resetting bearer [ 423.346715][T17904] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 423.357756][T17904] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 423.373507][T17904] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 423.562125][T17293] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.606130][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.613371][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.696578][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.703838][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.859335][T17947] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3241'. [ 423.892450][T17947] netlink: 'syz.1.3241': attribute type 1 has an invalid length. [ 423.922586][T17947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3241'. [ 424.167999][T17960] netlink: 'syz.0.3245': attribute type 1 has an invalid length. [ 424.199388][T17961] sock: sock_set_timeout: `syz.2.3246' (pid 17961) tries to set negative timeout [ 424.210891][T17960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.548620][T17978] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3249'. [ 424.690226][T17978] macvlan2: entered promiscuous mode [ 424.722743][T17978] macvlan2: entered allmulticast mode [ 424.737143][T17978] batadv_slave_0: entered promiscuous mode [ 424.744824][T17978] batadv_slave_0: entered allmulticast mode [ 424.772395][T17978] team0: Port device macvlan2 added [ 425.179997][T18005] openvswitch: netlink: IPv4 tun info is not correct [ 425.279055][T18007] ipvlan3: entered promiscuous mode [ 425.312674][T18001] tipc: Enabled bearer , priority 0 [ 425.343269][T18006] syzkaller0: entered promiscuous mode [ 425.362795][T18006] syzkaller0: entered allmulticast mode [ 425.408891][T18012] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 425.451313][T18001] tipc: Resetting bearer [ 425.501193][T18000] tipc: Resetting bearer [ 425.555867][T18000] tipc: Disabling bearer [ 425.616844][T17293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.891097][T18034] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 426.444724][T17293] veth0_vlan: entered promiscuous mode [ 426.505598][T17293] veth1_vlan: entered promiscuous mode [ 426.531774][T18057] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000 [ 426.565485][T18057] syz_tun: tun_net_xmit 86 [ 426.648781][T17293] veth0_macvtap: entered promiscuous mode [ 426.690734][T17293] veth1_macvtap: entered promiscuous mode [ 426.807385][T17293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.858725][T17293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.891133][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.918748][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.951188][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.991372][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.000786][T18070] netlink: set zone limit has 4 unknown bytes [ 427.281508][T14440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.311410][T14440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.401000][T18093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3276'. [ 427.485042][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.485420][T18101] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3278'. [ 427.499308][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.525615][T18101] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3278'. [ 427.603881][ C1] syz_tun: tun_net_xmit 86 [ 427.649089][T18101] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3278'. [ 427.874663][T18113] netlink: 'syz.4.3101': attribute type 21 has an invalid length. [ 427.909843][T18113] netlink: 'syz.4.3101': attribute type 22 has an invalid length. [ 427.947367][T18113] netlink: 'syz.4.3101': attribute type 23 has an invalid length. [ 428.018528][T18123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3284'. [ 428.021659][T18113] netlink: 'syz.4.3101': attribute type 25 has an invalid length. [ 428.106770][T18113] netlink: 'syz.4.3101': attribute type 26 has an invalid length. [ 428.154417][T18113] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3101'. [ 428.315490][T18128] tipc: New replicast peer: 255.255.255.255 [ 428.348100][T18128] tipc: Enabled bearer , priority 10 [ 428.386066][T18129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3286'. [ 428.440921][ T4949] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 428.457277][ T4949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 428.471243][ T4949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 428.482789][ T4949] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 428.498039][ T4949] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 428.582420][T18139] IPv6: sit1: Disabled Multicast RS [ 428.608996][T18139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3288'. [ 428.643879][ C1] syz_tun: tun_net_xmit 86 [ 429.037995][ T1179] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.055897][ T1179] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 429.065901][ T1179] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.083984][T18160] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3290'. [ 429.101850][T18155] tipc: Enabling of bearer rejected, media not registered [ 429.115649][T18152] xt_hashlimit: size too large, truncated to 1048576 [ 429.193929][T18158] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.260046][T18158] bridge_slave_0 (unregistering): left allmulticast mode [ 429.295290][T18158] bridge_slave_0 (unregistering): left promiscuous mode [ 429.303043][T18169] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3294'. [ 429.325030][T18158] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.586165][ T1179] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.611265][ T1179] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 429.632716][ T1179] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.661245][T18183] netlink: 'syz.1.3297': attribute type 1 has an invalid length. [ 429.775938][T18183] bond0: entered promiscuous mode [ 429.858399][ T1179] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.874425][ T1179] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 429.885441][ T1179] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.113898][ T1179] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.140410][ T1179] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 430.180132][ T1179] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.564879][ T4949] Bluetooth: hci3: command tx timeout [ 430.759055][T18225] netlink: 'syz.1.3305': attribute type 1 has an invalid length. [ 430.783499][ T1179] batadv1: left allmulticast mode [ 430.802262][ T1179] batadv1: left promiscuous mode [ 430.818006][ T1179] bridge0: port 3(batadv1) entered disabled state [ 430.859897][ T1179] bridge_slave_1: left promiscuous mode [ 430.869771][ T1179] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.909704][ T1179] bridge_slave_0: left allmulticast mode [ 430.925669][ T1179] bridge_slave_0: left promiscuous mode [ 430.938447][ T1179] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.069485][ T1179] pimreg: left allmulticast mode [ 431.127309][T18243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3307'. [ 431.732079][T18274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3308'. [ 431.917381][T18280] netlink: 'syz.3.3310': attribute type 30 has an invalid length. [ 431.942353][ T1179] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 432.170682][ T1179] gretap0 (unregistering): left promiscuous mode [ 432.319317][ T1179] bond3 (unregistering): (slave bridge2): Releasing active interface [ 432.381184][ T1179] bond5 (unregistering): (slave bridge3): Releasing active interface [ 432.429922][ T1179] bond7 (unregistering): (slave bridge4): Releasing active interface [ 432.580781][ T1179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.592225][ T1179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.602694][ T1179] bond0 (unregistering): Released all slaves [ 432.617800][ T1179] bond1 (unregistering): Released all slaves [ 432.634534][ T1179] bond2 (unregistering): Released all slaves [ 432.644629][ T4949] Bluetooth: hci3: command tx timeout [ 432.658055][ T1179] bond3 (unregistering): Released all slaves [ 432.682146][ T1179] bond4 (unregistering): Released all slaves [ 432.698510][ T1179] bond5 (unregistering): Released all slaves [ 432.716789][ T1179] bond6 (unregistering): Released all slaves [ 432.739873][ T1179] bond7 (unregistering): Released all slaves [ 432.765849][ T1179] bond8 (unregistering): Released all slaves [ 432.783313][ T1179] bond9 (unregistering): (slave veth9): Releasing active interface [ 432.792860][ T1179] bond9 (unregistering): Released all slaves [ 432.810407][ T1179] bond10 (unregistering): Released all slaves [ 432.831299][ T1179] bond11 (unregistering): Released all slaves [ 432.848128][ T1179] bond12 (unregistering): Released all slaves [ 432.864560][ T1179] bond13 (unregistering): Released all slaves [ 432.880223][ T1179] bond14 (unregistering): Released all slaves [ 432.898649][ T1179] bond16 (unregistering): Released all slaves [ 432.916835][ T1179] bond15 (unregistering): Released all slaves [ 432.951352][T18251] syzkaller0: entered promiscuous mode [ 432.959998][T18251] syzkaller0: entered allmulticast mode [ 433.116903][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 433.269471][T18295] IPv6: NLM_F_CREATE should be specified when creating new route [ 433.277564][T18295] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 433.284861][T18295] IPv6: NLM_F_CREATE should be set when creating new route [ 433.331719][ T1179] tipc: Left network mode [ 433.635845][T18305] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3317'. [ 434.610861][T18124] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.618453][T18124] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.631373][T18124] bridge_slave_0: entered allmulticast mode [ 434.644610][T18124] bridge_slave_0: entered promiscuous mode [ 434.699619][T18124] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.724156][ T4949] Bluetooth: hci3: command tx timeout [ 434.732750][T18124] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.753793][T18124] bridge_slave_1: entered allmulticast mode [ 434.772574][T18124] bridge_slave_1: entered promiscuous mode [ 434.876973][T18124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.984084][T18124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.049937][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 435.112915][T18124] team0: Port device team_slave_0 added [ 435.157635][T18124] team0: Port device team_slave_1 added [ 435.302197][ T1179] veth1_to_team: left promiscuous mode [ 435.325418][ T1179] hsr_slave_0: left promiscuous mode [ 435.338842][ T1179] hsr_slave_1: left promiscuous mode [ 435.362899][T18386] netlink: 'syz.3.3334': attribute type 1 has an invalid length. [ 435.379335][ T1179] veth1_macvtap: left promiscuous mode [ 435.386434][ T1179] veth0_macvtap: left promiscuous mode [ 435.463152][T18394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3335'. [ 435.569986][T18396] netlink: 'syz.0.3335': attribute type 1 has an invalid length. [ 435.726025][ T1179] team0 (unregistering): Port device team_slave_1 removed [ 435.742059][ T1179] team0 (unregistering): Port device team_slave_0 removed [ 435.755885][T18399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3335'. [ 435.882116][T18124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.889897][T18124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.919720][T18124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.989443][T18386] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 435.992013][T18390] veth0: entered promiscuous mode [ 436.115362][T18404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3336'. [ 436.124844][T18404] netlink: 'syz.3.3336': attribute type 5 has an invalid length. [ 436.136889][T18404] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3336'. [ 436.149042][T18397] 8021q: adding VLAN 0 to HW filter on device bond3 [ 436.160875][T18397] bond2: (slave bond3): making interface the new active one [ 436.173484][T18397] bond2: (slave bond3): Enslaving as an active interface with an up link [ 436.197302][T18398] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 436.208453][T18399] 8021q: adding VLAN 0 to HW filter on device bond2 [ 436.231791][T18124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.240077][T18124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.271377][T18124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.323186][T18404] geneve2: entered promiscuous mode [ 436.357706][T18404] geneve2: entered allmulticast mode [ 436.451123][T12036] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 436.520094][T18417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3339'. [ 436.546071][T12036] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 436.602265][T12036] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 436.675398][T18124] hsr_slave_0: entered promiscuous mode [ 436.690997][T18124] hsr_slave_1: entered promiscuous mode [ 436.717023][T18124] debugfs: 'hsr0' already exists in 'hsr' [ 436.748117][T18124] Cannot create hsr debugfs directory [ 436.767456][T12036] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 436.805264][ T4949] Bluetooth: hci3: command tx timeout [ 436.826591][T18430] x_tables: unsorted underflow at hook 4 [ 436.843030][ T1179] IPVS: stop unused estimator thread 0... [ 437.028679][T18442] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3344'. [ 437.076648][T18433] bond1 (unregistering): Released all slaves [ 437.492475][T18464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3348'. [ 437.641455][T18473] bond4: entered promiscuous mode [ 437.656718][T18473] bond4: entered allmulticast mode [ 437.709549][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3 [ 437.718671][T18476] ve: renamed from veth0_vlan (while UP) [ 437.731942][T18471] x_tables: duplicate underflow at hook 1 [ 437.762529][T18478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3352'. [ 437.860476][T18482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3353'. [ 438.262196][T18507] netlink: 'syz.1.3360': attribute type 1 has an invalid length. [ 438.352327][T18507] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.410092][T18515] vlan2: entered promiscuous mode [ 438.432531][T18515] bond1: entered promiscuous mode [ 438.459858][T18515] vlan2: entered allmulticast mode [ 438.488257][T18515] bond1: entered allmulticast mode [ 438.489296][T18521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.682651][T18533] netlink: 'syz.0.3364': attribute type 21 has an invalid length. [ 438.692141][T18533] __nla_validate_parse: 3 callbacks suppressed [ 438.692157][T18533] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3364'. [ 438.728082][T18533] IPv6: NLM_F_CREATE should be specified when creating new route [ 438.750746][T18533] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 438.758155][T18533] IPv6: NLM_F_CREATE should be set when creating new route [ 438.765477][T18533] IPv6: NLM_F_CREATE should be set when creating new route [ 438.772715][T18533] IPv6: NLM_F_CREATE should be set when creating new route [ 438.877462][T18538] netlink: 'syz.0.3366': attribute type 3 has an invalid length. [ 438.894691][T18538] netlink: 'syz.0.3366': attribute type 1 has an invalid length. [ 438.913653][T18538] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3366'. [ 438.933635][T18538] NCSI netlink: No device for ifindex 813332851 [ 439.931723][ T1654] block nbd4: Connection timed out, retrying (0/2 alive) [ 439.939981][ T1654] block nbd4: Connection timed out, retrying (0/2 alive) [ 439.949943][ T1654] block nbd4: Connection timed out, retrying (0/2 alive) [ 439.958434][ T11] block nbd4: Dead connection, failed to find a fallback [ 439.965629][ T11] block nbd4: shutting down sockets [ 439.970916][ T11] blk_print_req_error: 138 callbacks suppressed [ 439.970932][ T11] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 439.989958][ T1654] block nbd4: Connection timed out, retrying (0/2 alive) [ 439.997988][ T11] buffer_io_error: 138 callbacks suppressed [ 439.998078][ T11] Buffer I/O error on dev nbd4, logical block 1, async page read [ 440.012814][ T11] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.023012][ T11] Buffer I/O error on dev nbd4, logical block 0, async page read [ 440.030928][ T11] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.041257][ T11] Buffer I/O error on dev nbd4, logical block 3, async page read [ 440.053790][ T11] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.062881][ T11] Buffer I/O error on dev nbd4, logical block 2, async page read [ 440.074667][T17303] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.084147][T17303] Buffer I/O error on dev nbd4, logical block 0, async page read [ 440.092066][T17303] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.101199][T17303] Buffer I/O error on dev nbd4, logical block 1, async page read [ 440.111610][T17303] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.120759][T17303] Buffer I/O error on dev nbd4, logical block 2, async page read [ 440.128882][T17303] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.138978][T17303] Buffer I/O error on dev nbd4, logical block 3, async page read [ 440.146951][T17303] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.156218][T17303] Buffer I/O error on dev nbd4, logical block 0, async page read [ 440.165811][T17303] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.175197][T17303] Buffer I/O error on dev nbd4, logical block 1, async page read [ 440.186896][T17303] ldm_validate_partition_table(): Disk read failed. [ 440.197528][T17303] Dev nbd4: unable to read RDB block 0 [ 440.208920][T17303] nbd4: unable to read partition table [ 440.225075][T17303] ldm_validate_partition_table(): Disk read failed. [ 440.236046][T17303] Dev nbd4: unable to read RDB block 0 [ 440.244303][T17303] nbd4: unable to read partition table [ 441.467479][T18570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3369'. [ 441.497081][T18576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.545044][T18570] openvswitch: netlink: Flow actions attr not present in new flow. [ 441.678570][T18581] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3372'. [ 441.716519][T18578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3370'. [ 441.738785][T18581] tipc: Started in network mode [ 441.744900][T18581] tipc: Node identity 0ac0f812b5df, cluster identity 4711 [ 441.757359][T18581] tipc: Enabled bearer , priority 11 [ 441.850021][T18124] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 441.880382][T18124] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 441.907501][T18124] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 441.956813][T18124] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 441.975422][T18124] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 441.995774][T18596] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3374'. [ 442.006801][T18596] syz.3.3374: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 442.026298][T18124] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 442.034643][T18596] CPU: 0 UID: 0 PID: 18596 Comm: syz.3.3374 Not tainted syzkaller #0 PREEMPT(full) [ 442.034670][T18596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 442.034684][T18596] Call Trace: [ 442.034693][T18596] [ 442.034702][T18596] dump_stack_lvl+0xe8/0x150 [ 442.034735][T18596] warn_alloc+0x249/0x340 [ 442.034796][T18596] ? __pfx_stack_trace_save+0x10/0x10 [ 442.034841][T18596] ? __pfx_warn_alloc+0x10/0x10 [ 442.034877][T18596] ? __kasan_kmalloc+0x93/0xb0 [ 442.034913][T18596] ? __kmalloc_cache_noprof+0x318/0x660 [ 442.034943][T18596] ? xskq_create+0x56/0x170 [ 442.035061][T18596] ? xsk_init_queue+0x8a/0xe0 [ 442.035097][T18596] ? xsk_setsockopt+0x52a/0x960 [ 442.035124][T18596] ? do_sock_setsockopt+0x17c/0x1b0 [ 442.035281][T18596] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 442.035314][T18596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.035345][T18596] __vmalloc_node_range_noprof+0x12c/0x1730 [ 442.035408][T18596] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 442.035446][T18596] ? __kasan_kmalloc+0x93/0xb0 [ 442.035485][T18596] vmalloc_user_noprof+0xad/0xe0 [ 442.035513][T18596] ? xskq_create+0xbf/0x170 [ 442.035539][T18596] xskq_create+0xbf/0x170 [ 442.035568][T18596] xsk_init_queue+0x8a/0xe0 [ 442.035600][T18596] xsk_setsockopt+0x52a/0x960 [ 442.035628][T18596] ? __fget_files+0x2a/0x420 [ 442.035672][T18596] ? __pfx_xsk_setsockopt+0x10/0x10 [ 442.035701][T18596] ? __pfx_aa_sk_perm+0x10/0x10 [ 442.035808][T18596] ? aa_sock_opt_perm+0xff/0x1a0 [ 442.035874][T18596] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 442.035915][T18596] ? __pfx_xsk_setsockopt+0x10/0x10 [ 442.035945][T18596] do_sock_setsockopt+0x17c/0x1b0 [ 442.035983][T18596] __x64_sys_setsockopt+0x13d/0x1b0 [ 442.036019][T18596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.036043][T18596] do_syscall_64+0x174/0x580 [ 442.036063][T18596] ? trace_irq_disable+0x3b/0x140 [ 442.036101][T18596] ? clear_bhb_loop+0x40/0x90 [ 442.036124][T18596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.036141][T18596] RIP: 0033:0x7f5ef3b9ce59 [ 442.036158][T18596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.036173][T18596] RSP: 002b:00007f5ef4ae2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 442.036192][T18596] RAX: ffffffffffffffda RBX: 00007f5ef3e15fa0 RCX: 00007f5ef3b9ce59 [ 442.036204][T18596] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 442.036215][T18596] RBP: 00007f5ef3c32d6f R08: 0000000000000004 R09: 0000000000000000 [ 442.036225][T18596] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.036237][T18596] R13: 00007f5ef3e16038 R14: 00007f5ef3e15fa0 R15: 00007fffdb753e18 [ 442.036265][T18596] [ 442.036380][T18596] Mem-Info: [ 442.132078][T18592] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 442.139338][T18124] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 442.348840][T18596] active_anon:5745 inactive_anon:0 isolated_anon:0 [ 442.348840][T18596] active_file:2885 inactive_file:40419 isolated_file:0 [ 442.348840][T18596] unevictable:768 dirty:41 writeback:0 [ 442.348840][T18596] slab_reclaimable:11725 slab_unreclaimable:112973 [ 442.348840][T18596] mapped:29431 shmem:1284 pagetables:1320 [ 442.348840][T18596] sec_pagetables:0 bounce:0 [ 442.348840][T18596] kernel_misc_reclaimable:0 [ 442.348840][T18596] free:1311595 free_pcp:11485 free_cma:0 [ 442.401008][T18124] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 442.421346][T18596] Node 0 active_anon:22980kB inactive_anon:0kB active_file:11540kB inactive_file:161472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117724kB dirty:160kB writeback:0kB shmem:3600kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14284kB pagetables:5144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 442.583374][T18596] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 442.648644][T18596] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 442.708736][T18596] lowmem_reserve[]: 0 2493 2494 2494 2494 [ 442.733799][T18596] Node 0 DMA32 free:1280700kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22696kB inactive_anon:0kB active_file:11540kB inactive_file:161472kB unevictable:1536kB writepending:160kB zspages:0kB present:3129332kB managed:2553212kB mlocked:0kB bounce:0kB free_pcp:42876kB local_pcp:21880kB free_cma:0kB [ 442.798428][T18596] lowmem_reserve[]: 0 0 0 0 0 [ 442.806972][T18596] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:692kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 442.906712][T18596] lowmem_reserve[]: 0 0 0 0 0 [ 442.919893][T18623] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.3379'. [ 442.929964][T18596] Node 1 Normal free:3950428kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 442.930042][T18596] lowmem_reserve[]: 0 0 0 0 0 [ 442.930104][T18596] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 442.930254][T18596] Node 0 DMA32: 8119*4kB (UME) 4241*8kB (UME) 1255*16kB (UME) 435*32kB (UME) 686*64kB (UM) 292*128kB (UME) 158*256kB (UM) 161*512kB (U) 115*1024kB (UM) 47*2048kB (UM) 186*4096kB (UM) = 1280436kB [ 442.930490][T18596] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 443.013975][T18596] Node 1 Normal: 1*4kB (M) 1*8kB (M) 3*16kB (UM) 7*32kB (UM) 9*64kB (UM) 6*128kB (UM) 3*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 1*2048kB (U) 962*4096kB (M) = 3950428kB [ 443.030906][T18596] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 443.040711][T18596] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 443.050533][T18596] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 443.122530][T18596] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 443.160579][T18596] 44584 total pagecache pages [ 443.171586][T18596] 0 pages in swap cache [ 443.181920][T18596] Free swap = 124996kB [ 443.198514][T18596] Total swap = 124996kB [ 443.217144][T18596] 2097051 pages RAM [ 443.227932][T18596] 0 pages HighMem/MovableOnly [ 443.238353][T18596] 426960 pages reserved [ 443.249732][T18596] 0 pages cma reserved [ 443.797913][T18662] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3383'. [ 443.809675][T18662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3383'. [ 445.542249][T12501] tipc: Node number set to 3206543378 [ 445.570282][T18665] gre2: entered promiscuous mode [ 445.638384][T18672] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 445.657395][T18672] syzkaller1: Linktype set failed because interface is up [ 445.932744][T18124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.002462][T18124] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.064654][T18696] batman_adv: batadv0: Adding interface: wlan0 [ 446.071716][T18696] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.135251][T18696] batman_adv: batadv0: Interface activated: wlan0 [ 446.200301][ T3372] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.207556][ T3372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.251118][T18711] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3394'. [ 446.278963][T18711] netlink: 'syz.4.3394': attribute type 1 has an invalid length. [ 446.405502][T18702] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3393'. [ 446.511214][T18708] bond2 (unregistering): Released all slaves [ 446.630232][ T3372] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.637578][ T3372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.724035][T18733] netlink: 23 bytes leftover after parsing attributes in process `syz.4.3397'. [ 447.231480][T18761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3402'. [ 447.257528][T18762] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3401'. [ 447.284533][T18762] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3401'. [ 447.297200][T18761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3402'. [ 447.313262][T18762] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3401'. [ 447.708318][T12136] IPVS: starting estimator thread 0... [ 447.715089][T18783] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 447.726798][T18783] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 447.814734][T18784] IPVS: using max 25 ests per chain, 60000 per kthread [ 447.836234][T18124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.919233][T18124] veth0_vlan: entered promiscuous mode [ 447.945172][T18124] veth1_vlan: entered promiscuous mode [ 448.004966][T18124] veth0_macvtap: entered promiscuous mode [ 448.028831][T18124] veth1_macvtap: entered promiscuous mode [ 448.081417][T18124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.121772][T18792] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 448.134562][T18792] bond1 (unregistering): Released all slaves [ 448.167588][T18124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.217776][ T3282] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.228498][ T81] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.258939][T18794] netlink: 'syz.0.3407': attribute type 2 has an invalid length. [ 448.285484][ T81] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.299872][ T81] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.547634][ T3282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.580590][ T3282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.656542][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.675399][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.718485][T18819] sch_fq: defrate 0 ignored. [ 448.927684][T18830] __nla_validate_parse: 3 callbacks suppressed [ 448.927705][T18830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3417'. [ 448.962858][T18836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3419'. [ 449.004735][T18836] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3419'. [ 449.347465][T18849] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3425'. [ 449.395693][T18849] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3425'. [ 449.610087][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 449.623393][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 449.632648][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 449.651000][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 449.661318][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 450.240358][T18878] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3431'. [ 451.275873][T18909] xt_policy: too many policy elements [ 451.307978][T18911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3438'. [ 451.764494][ T50] Bluetooth: hci2: command tx timeout [ 451.880801][T18943] netlink: 'syz.0.3448': attribute type 9 has an invalid length. [ 452.026608][T18952] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3449'. [ 452.039452][T18953] netlink: 'syz.2.3451': attribute type 1 has an invalid length. [ 452.107275][T18952] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.114770][T18952] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.191149][T18960] netlink: 'syz.0.3452': attribute type 29 has an invalid length. [ 452.249010][T18964] netlink: 'syz.0.3452': attribute type 29 has an invalid length. [ 452.257888][T18852] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.259041][T18960] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3452'. [ 452.265261][T18852] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.284364][T18852] bridge_slave_0: entered allmulticast mode [ 452.292145][T18852] bridge_slave_0: entered promiscuous mode [ 452.302695][T18852] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.310778][T18852] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.318104][T18852] bridge_slave_1: entered allmulticast mode [ 452.331861][T18852] bridge_slave_1: entered promiscuous mode [ 452.332548][T18960] unsupported nla_type 58 [ 452.372708][T18967] xt_hashlimit: invalid interval [ 452.384877][T18852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.408616][T18852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.456493][T18852] team0: Port device team_slave_0 added [ 452.479519][T18852] team0: Port device team_slave_1 added [ 452.546809][T18852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.566080][T18852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.600251][T18852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.628000][T18852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.646377][T18852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.679649][T18852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.765992][T18981] C: entered allmulticast mode [ 452.779950][T18981] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.3459'. [ 452.824575][T18852] hsr_slave_0: entered promiscuous mode [ 452.842600][T18852] hsr_slave_1: entered promiscuous mode [ 452.863134][T18852] debugfs: 'hsr0' already exists in 'hsr' [ 452.869258][T18852] Cannot create hsr debugfs directory [ 453.081920][T18967] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 453.314031][T19003] sit0: entered promiscuous mode [ 453.337129][T19003] netlink: 'syz.1.3464': attribute type 1 has an invalid length. [ 453.358119][T19009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 453.365457][T19009] IPv6: NLM_F_CREATE should be set when creating new route [ 453.449361][T18852] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.466753][T18852] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.478064][T18852] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 453.625261][T18852] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.648912][T18852] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.662938][T18852] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 453.836894][T18852] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.844254][ T50] Bluetooth: hci2: command tx timeout [ 453.856605][T18852] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.872968][T18852] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 453.999302][T18852] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.027661][T18852] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.039436][T18852] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 454.397148][T18852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 454.434234][T18852] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 454.446034][T18852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 454.458005][T18852] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 454.471014][T18852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 454.488481][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 454.530069][T18852] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 454.568039][T18852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 454.667789][T18852] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 454.730645][T19078] __nla_validate_parse: 5 callbacks suppressed [ 454.730663][T19078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3486'. [ 454.900522][T18852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.953393][T19095] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.3491'. [ 454.966636][T19095] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.3491'. [ 454.985069][T18852] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.996700][T19095] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3491'. [ 455.018897][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.026148][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.073357][T19095] bond2 (unregistering): Released all slaves [ 455.128827][ T3372] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.136107][ T3372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.380526][T19115] netlink: 51 bytes leftover after parsing attributes in process `syz.0.3496'. [ 455.790251][T19143] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3503'. [ 455.924585][ T50] Bluetooth: hci2: command tx timeout [ 456.139886][T19163] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3506'. [ 456.226218][T19163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.298997][T19163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.332749][T19163] bond0 (unregistering): Released all slaves [ 456.454703][T19173] bridge0: entered promiscuous mode [ 456.485733][T19173] bridge0: entered allmulticast mode [ 456.574943][T18852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.714876][T18852] veth0_vlan: entered promiscuous mode [ 456.741945][T18852] veth1_vlan: entered promiscuous mode [ 456.769225][T19183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3510'. [ 456.786466][T19184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3512'. [ 456.826593][T19183] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3510'. [ 456.855571][T19184] : entered promiscuous mode [ 456.936797][ T1179] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.965381][ T1179] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.999785][T18852] veth0_macvtap: entered promiscuous mode [ 457.022213][ T1179] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.061585][ T1179] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.193137][T18852] veth1_macvtap: entered promiscuous mode [ 457.211755][T19203] bond6: entered promiscuous mode [ 457.217130][T19203] bond6: entered allmulticast mode [ 457.252940][T19207] netlink: 'syz.2.3518': attribute type 11 has an invalid length. [ 457.262265][T18852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.277348][T19207] netlink: 'syz.2.3518': attribute type 4 has an invalid length. [ 457.286861][T18852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.308017][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.333251][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.355869][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.389837][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.715594][T12036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.754387][T12036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.883090][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.911033][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.004427][ T50] Bluetooth: hci2: command tx timeout [ 458.096967][T19248] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.143969][ T50] block nbd5: Receive control failed (result -1) [ 458.156683][ T50] [ 458.159051][ T50] ====================================================== [ 458.166161][ T50] WARNING: possible circular locking dependency detected [ 458.173307][ T50] syzkaller #0 Not tainted [ 458.177755][ T50] ------------------------------------------------------ [ 458.184812][ T50] kworker/u9:0/50 is trying to acquire lock: [ 458.190795][ T50] ffff888029a8b660 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 458.200057][ T50] [ 458.200057][ T50] but task is already holding lock: [ 458.207429][ T50] ffff888058e42e68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cda/0x1e10 [ 458.216413][ T50] [ 458.216413][ T50] which lock already depends on the new lock. [ 458.216413][ T50] [ 458.226886][ T50] [ 458.226886][ T50] the existing dependency chain (in reverse order) is: [ 458.235924][ T50] [ 458.235924][ T50] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 458.243669][ T50] __mutex_lock+0x19d/0x1590 [ 458.248801][ T50] nbd_queue_rq+0x373/0x1150 [ 458.253969][ T50] blk_mq_dispatch_rq_list+0x499/0x1990 [ 458.260104][ T50] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 458.267007][ T50] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 458.273534][ T50] blk_mq_run_hw_queue+0x348/0x4f0 [ 458.279181][ T50] blk_mq_dispatch_list+0xd11/0xe10 [ 458.284929][ T50] blk_mq_flush_plug_list+0x45f/0x540 [ 458.290835][ T50] __blk_flush_plug+0x3ed/0x4d0 [ 458.296307][ T50] __submit_bio+0x465/0x560 [ 458.301350][ T50] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 458.307523][ T50] block_read_full_folio+0x599/0x830 [ 458.313351][ T50] filemap_read_folio+0x12c/0x3a0 [ 458.318935][ T50] do_read_cache_folio+0x354/0x590 [ 458.324595][ T50] read_part_sector+0xb6/0x2b0 [ 458.329915][ T50] adfspart_check_ICS+0xb1/0x960 [ 458.335456][ T50] bdev_disk_changed+0x82b/0x1780 [ 458.341018][ T50] blkdev_get_whole+0x372/0x510 [ 458.346427][ T50] bdev_open+0x324/0xd70 [ 458.351207][ T50] blkdev_open+0x461/0x600 [ 458.356175][ T50] do_dentry_open+0x816/0x1380 [ 458.361561][ T50] vfs_open+0x3b/0x340 [ 458.366159][ T50] path_openat+0x2e3b/0x3890 [ 458.371315][ T50] do_file_open+0x23e/0x4a0 [ 458.376356][ T50] do_sys_openat2+0x113/0x200 [ 458.381581][ T50] __x64_sys_openat+0x138/0x170 [ 458.386967][ T50] do_syscall_64+0x174/0x580 [ 458.392087][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.398522][ T50] [ 458.398522][ T50] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 458.405751][ T50] __mutex_lock+0x19d/0x1590 [ 458.410877][ T50] nbd_queue_rq+0xc1/0x1150 [ 458.415922][ T50] blk_mq_dispatch_rq_list+0x499/0x1990 [ 458.422018][ T50] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 458.428889][ T50] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 458.435413][ T50] blk_mq_run_hw_queue+0x348/0x4f0 [ 458.441060][ T50] blk_mq_dispatch_list+0xd11/0xe10 [ 458.446797][ T50] blk_mq_flush_plug_list+0x45f/0x540 [ 458.452741][ T50] __blk_flush_plug+0x3ed/0x4d0 [ 458.458139][ T50] __submit_bio+0x465/0x560 [ 458.463181][ T50] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 458.469349][ T50] block_read_full_folio+0x599/0x830 [ 458.475172][ T50] filemap_read_folio+0x12c/0x3a0 [ 458.480743][ T50] do_read_cache_folio+0x354/0x590 [ 458.486397][ T50] read_part_sector+0xb6/0x2b0 [ 458.491694][ T50] adfspart_check_ICS+0xb1/0x960 [ 458.497168][ T50] bdev_disk_changed+0x82b/0x1780 [ 458.502739][ T50] blkdev_get_whole+0x372/0x510 [ 458.508150][ T50] bdev_open+0x324/0xd70 [ 458.512940][ T50] blkdev_open+0x461/0x600 [ 458.517917][ T50] do_dentry_open+0x816/0x1380 [ 458.523242][ T50] vfs_open+0x3b/0x340 [ 458.527858][ T50] path_openat+0x2e3b/0x3890 [ 458.533005][ T50] do_file_open+0x23e/0x4a0 [ 458.538083][ T50] do_sys_openat2+0x113/0x200 [ 458.543309][ T50] __x64_sys_openat+0x138/0x170 [ 458.548717][ T50] do_syscall_64+0x174/0x580 [ 458.553862][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.560301][ T50] [ 458.560301][ T50] -> #4 (set->srcu){.+.+}-{0:0}: [ 458.567451][ T50] __synchronize_srcu+0xc9/0x2f0 [ 458.572964][ T50] elevator_switch+0x1e8/0x7b0 [ 458.578276][ T50] elevator_change+0x2fa/0x480 [ 458.583669][ T50] elevator_set_default+0x375/0x440 [ 458.589415][ T50] blk_register_queue+0x3f3/0x4e0 [ 458.595019][ T50] __add_disk+0x6cb/0xe30 [ 458.599900][ T50] add_disk_fwnode+0xfb/0x4b0 [ 458.605136][ T50] nbd_dev_add+0x733/0xb60 [ 458.610102][ T50] nbd_init+0x15f/0x1e0 [ 458.614931][ T50] do_one_initcall+0x250/0x870 [ 458.620240][ T50] do_initcall_level+0x10a/0x1a0 [ 458.625797][ T50] do_initcalls+0x59/0xa0 [ 458.630659][ T50] kernel_init_freeable+0x29d/0x3e0 [ 458.636391][ T50] kernel_init+0x1d/0x1d0 [ 458.641261][ T50] ret_from_fork+0x514/0xb70 [ 458.646441][ T50] ret_from_fork_asm+0x1a/0x30 [ 458.651747][ T50] [ 458.651747][ T50] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 458.659589][ T50] __mutex_lock+0x19d/0x1590 [ 458.664722][ T50] elevator_change+0x1af/0x480 [ 458.670039][ T50] elevator_set_none+0xb5/0x140 [ 458.675451][ T50] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 458.681898][ T50] nbd_start_device+0x189/0xb30 [ 458.687322][ T50] nbd_genl_connect+0x1597/0x1c10 [ 458.692886][ T50] genl_family_rcv_msg_doit+0x233/0x340 [ 458.699055][ T50] genl_rcv_msg+0x614/0x7a0 [ 458.704094][ T50] netlink_rcv_skb+0x226/0x4a0 [ 458.709431][ T50] genl_rcv+0x28/0x40 [ 458.713949][ T50] netlink_unicast+0x7bb/0x940 [ 458.719269][ T50] netlink_sendmsg+0x813/0xb40 [ 458.724582][ T50] ____sys_sendmsg+0x9b9/0xa20 [ 458.729893][ T50] ___sys_sendmsg+0x2a5/0x360 [ 458.735111][ T50] __x64_sys_sendmsg+0x1bd/0x2a0 [ 458.740589][ T50] do_syscall_64+0x174/0x580 [ 458.745712][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.752141][ T50] [ 458.752141][ T50] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 458.760799][ T50] blk_alloc_queue+0x544/0x690 [ 458.766120][ T50] __blk_mq_alloc_disk+0x194/0x390 [ 458.771788][ T50] nbd_dev_add+0x494/0xb60 [ 458.776749][ T50] nbd_init+0x15f/0x1e0 [ 458.781441][ T50] do_one_initcall+0x250/0x870 [ 458.786746][ T50] do_initcall_level+0x10a/0x1a0 [ 458.792220][ T50] do_initcalls+0x59/0xa0 [ 458.797083][ T50] kernel_init_freeable+0x29d/0x3e0 [ 458.802823][ T50] kernel_init+0x1d/0x1d0 [ 458.807692][ T50] ret_from_fork+0x514/0xb70 [ 458.812816][ T50] ret_from_fork_asm+0x1a/0x30 [ 458.818123][ T50] [ 458.818123][ T50] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 458.825354][ T50] fs_reclaim_acquire+0x71/0x100 [ 458.830843][ T50] kmem_cache_alloc_node_noprof+0x4a/0x680 [ 458.837190][ T50] __alloc_skb+0x1d7/0x7a0 [ 458.842209][ T50] tcp_stream_alloc_skb+0x3f/0x580 [ 458.847901][ T50] tcp_connect+0x15a9/0x53c0 [ 458.853047][ T50] tcp_v4_connect+0x1051/0x1950 [ 458.858463][ T50] __inet_stream_connect+0x258/0xe00 [ 458.864283][ T50] inet_stream_connect+0x66/0xa0 [ 458.869769][ T50] kernel_connect+0x141/0x1c0 [ 458.874983][ T50] smc_connect+0x78c/0xdb0 [ 458.880026][ T50] __sys_connect+0x323/0x460 [ 458.885156][ T50] __x64_sys_connect+0x7a/0x90 [ 458.890500][ T50] do_syscall_64+0x174/0x580 [ 458.895645][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.902099][ T50] [ 458.902099][ T50] -> #0 (k-sk_lock-AF_INET){+.+.}-{0:0}: [ 458.909937][ T50] __lock_acquire+0x1520/0x2cd0 [ 458.915323][ T50] lock_acquire+0x106/0x350 [ 458.920403][ T50] lock_sock_nested+0x41/0x100 [ 458.925707][ T50] inet_shutdown+0x6a/0x390 [ 458.930740][ T50] nbd_mark_nsock_dead+0x2cb/0x550 [ 458.936402][ T50] recv_work+0x1cef/0x1e10 [ 458.941350][ T50] process_scheduled_works+0xa8e/0x14e0 [ 458.947454][ T50] worker_thread+0xa47/0xfb0 [ 458.952579][ T50] kthread+0x389/0x470 [ 458.957186][ T50] ret_from_fork+0x514/0xb70 [ 458.962400][ T50] ret_from_fork_asm+0x1a/0x30 [ 458.967701][ T50] [ 458.967701][ T50] other info that might help us debug this: [ 458.967701][ T50] [ 458.977940][ T50] Chain exists of: [ 458.977940][ T50] k-sk_lock-AF_INET --> &cmd->lock --> &nsock->tx_lock [ 458.977940][ T50] [ 458.990827][ T50] Possible unsafe locking scenario: [ 458.990827][ T50] [ 458.998297][ T50] CPU0 CPU1 [ 459.003730][ T50] ---- ---- [ 459.009136][ T50] lock(&nsock->tx_lock); [ 459.013582][ T50] lock(&cmd->lock); [ 459.020125][ T50] lock(&nsock->tx_lock); [ 459.027079][ T50] lock(k-sk_lock-AF_INET); [ 459.031694][ T50] [ 459.031694][ T50] *** DEADLOCK *** [ 459.031694][ T50] [ 459.039905][ T50] 3 locks held by kworker/u9:0/50: [ 459.045021][ T50] #0: ffff8880276dc140 ((wq_completion)nbd5-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 459.056361][ T50] #1: ffffc90000ba7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 459.068118][ T50] #2: ffff888058e42e68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cda/0x1e10 [ 459.077449][ T50] [ 459.077449][ T50] stack backtrace: [ 459.083351][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 459.083370][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 459.083383][ T50] Workqueue: nbd5-recv recv_work [ 459.083399][ T50] Call Trace: [ 459.083405][ T50] [ 459.083412][ T50] dump_stack_lvl+0xe8/0x150 [ 459.083432][ T50] print_circular_bug+0x2e1/0x300 [ 459.083456][ T50] check_noncircular+0x12e/0x150 [ 459.083480][ T50] __lock_acquire+0x1520/0x2cd0 [ 459.083505][ T50] ? irqentry_exit+0x218/0x8e0 [ 459.083524][ T50] ? lockdep_hardirqs_on+0x7a/0x110 [ 459.083553][ T50] ? inet_shutdown+0x6a/0x390 [ 459.083570][ T50] lock_acquire+0x106/0x350 [ 459.083585][ T50] ? inet_shutdown+0x6a/0x390 [ 459.083608][ T50] lock_sock_nested+0x41/0x100 [ 459.083627][ T50] ? inet_shutdown+0x6a/0x390 [ 459.083645][ T50] inet_shutdown+0x6a/0x390 [ 459.083663][ T50] nbd_mark_nsock_dead+0x2cb/0x550 [ 459.083691][ T50] recv_work+0x1cef/0x1e10 [ 459.083712][ T50] ? lockdep_unlock+0x5d/0xd0 [ 459.083725][ T50] ? __lock_acquire+0x13e8/0x2cd0 [ 459.083746][ T50] ? __pfx_recv_work+0x10/0x10 [ 459.083774][ T50] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 459.083799][ T50] ? process_scheduled_works+0xa20/0x14e0 [ 459.083821][ T50] ? rcu_is_watching+0x15/0xb0 [ 459.083841][ T50] ? process_scheduled_works+0xa20/0x14e0 [ 459.083856][ T50] process_scheduled_works+0xa8e/0x14e0 [ 459.083884][ T50] ? __pfx_process_scheduled_works+0x10/0x10 [ 459.083914][ T50] ? assign_work+0x3cf/0x5d0 [ 459.083942][ T50] worker_thread+0xa47/0xfb0 [ 459.083971][ T50] kthread+0x389/0x470 [ 459.083992][ T50] ? __pfx_worker_thread+0x10/0x10 [ 459.084007][ T50] ? __pfx_kthread+0x10/0x10 [ 459.084028][ T50] ret_from_fork+0x514/0xb70 [ 459.084046][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 459.084063][ T50] ? __switch_to+0xc89/0x1420 [ 459.084087][ T50] ? __pfx_kthread+0x10/0x10 [ 459.084108][ T50] ret_from_fork_asm+0x1a/0x30 [ 459.084134][ T50] [ 459.528583][T19252] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.535784][T19252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.570021][T19252] bridge0: entered promiscuous mode [ 459.575802][T19252] bridge0: entered allmulticast mode [ 465.524343][ C0] ip6_tunnel:  xmit: Local address not yet configured!