last executing test programs: 9.048081021s ago: executing program 0 (id=3667): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x2, 0x9}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={r3, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x5, @loopback, 0x6}, @in6={0xa, 0x4e21, 0x47, @empty, 0x4000}, @in6={0xa, 0x4e22, 0x4, @private2, 0x3}]}, &(0x7f0000000340)=0x10) (async) sendfile(r1, r2, 0x0, 0xffffffff000) (async) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, 0x0, 0x40000) (async) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0x8) (async) sendmsg$key(r0, &(0x7f0000001080)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="020300090800000000000000120000000300bc7f2e4cfc77349d115d985b874cdd060000008e00020000000a010100000000000000000002000100000004d4048d73d99350d86908a22b2d4f2622cc7f62c971ae3ac1dddbecb527764a05fe980b42ecae54086c54f89ec89c67034364508a6c276029a9eac5629b20809a5ce81fec3e46490f0fb9d554db1c42921dad3091af57455568a6dcc0e5247f7fc6c52ea1f6c2b172d3fd6f6f37ca0a7c6f495ffb1afb715efb5ccd0d086e5df857b62e4aba981fb7719fd091e1ff9f02f1066137706c541d2852c6e464e27dd8a0eb1e18c59ea26c45221469619ba4a5df6f1c5334032cbb5921ce2ef147b47e4af761a452734c3f37c34ad1040a5e51e8741a1d84f958e2b655d46e59d3c300eee5d78447"], 0x40}}, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r5, 0x84, 0x82, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688890687", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f0000000100), &(0x7f00000004c0)=0x4) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r11, 0x4) 8.916049021s ago: executing program 0 (id=3668): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) writev(r2, &(0x7f00000007c0)=[{&(0x7f0000000b00)="66b88c73b297848e54", 0x9}], 0x1) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x32, &(0x7f0000000000)={&(0x7f0000001900)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f2a, 0x5, 0x6, 0x9, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x4000010) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xb}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) 8.564074792s ago: executing program 0 (id=3675): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff3}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x1, 0x20000000, 0x9, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8880}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x2000c000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000006, 0x13, r2, 0x607d8000) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000880)={0x5, &(0x7f0000000840)=[{0x3, 0xc0, 0xf6, 0x8}, {0x400, 0x4, 0x0, 0x4}, {0xe7, 0xf8, 0x1, 0x4}, {0x4, 0x2, 0x0, 0x7}, {0x7, 0xf, 0x80, 0xfffffff7}]}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000300)={0x0, 0x80, 0x6}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8880}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x58, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x6}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x89b0, &(0x7f0000000080)={'macvtap0\x00', 0x400}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) sendmsg$inet(r9, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000400)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x24048884) r10 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x8, 0x5}, {0xe, 0xd}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x1ffe, 0x2, 0x1d64765e, 0x1}}, {0x4}}, {{0x1c, 0x1, {0xa, 0x4, 0xc, 0x2000800, 0x1, 0x8001, 0x8}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000280)="8fdbc19ff00ad5f7788549380fea38a9ed", 0x11}, {&(0x7f0000000340)="e7143e52f91c000abf8b727a284b490c9f0bbeaeea5e9a88c979650f87b1", 0x1e}, {&(0x7f0000000440)="c14811b92f1c917e80d8b6944a09e8e415498852a9fde1f3b70430c49f124facb5b4512443d70c9b6bbec31ce56d609c0f7174de5dbcd86d2e96ff18550fa12ccbd12e1f92cc2886480ed8adc621df80bc4d8f1c8da61d42db595c22ac8a935b52def145bedf1816374f4ad025bdcc21586f28ebc67496748891802fe4111a392b2df5cbc384165707c4edcaf19a25afdb3cfd", 0x93}, {&(0x7f0000000500)="86ed36457a6d65475e00091c396b5ae91ae4f807061a86b9bac9", 0x1a}, {&(0x7f0000000540)="f2d866fdc17d2e0edafcffafa445723722aad97cf74d12c211871595a79ad9ee73", 0x21}], 0x5, &(0x7f0000000600)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffff8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0xc5, [@dev={0xac, 0x14, 0x14, 0x3c}, @loopback]}]}}}], 0x50}, 0x2c080884) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}}], 0x2, 0x20, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r11) 8.262809323s ago: executing program 3 (id=3680): socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvfrom(r1, 0x0, 0x0, 0x983706c3b03e3dca, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000305fcffffff0000000000000000dedf6b277548442c92929407d83751277ba329e779bde74b99d0250f9a24aab97215ef8a6c2b431037483ea2375624a939d82f4627781b407cf1248fefef504ee7ea45a3eace46f7186bd8ec31387597b49b3b09c96cd2bf109ee30670a601a7bf6b49fc67a9c60ab6312fc5b6feb4ede5e97e5ce2043e7f4d0a9bfff3442518496124f0dba2bbbcf79c22066a49a862869f562b775333d4e5784400dbffa8803536ebfb115eea424af46e54fc8ce6f7c6fca67c392f98f1321c792058a45b5b40b5905cb8b78cfade4a62049e6e30c59cf1643571c9", @ANYRES32=0x0, @ANYBLOB="1111020031880000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8305020000000000200012800800010067726500140002800800050108000000080006000a010101"], 0x40}, 0x1, 0x0, 0x0, 0x2400004c}, 0x0) 7.826441103s ago: executing program 3 (id=3687): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r0], 0x38}}, 0x10) 7.646641614s ago: executing program 3 (id=3689): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004002001000000000000000000000000000106000340000200000800194000000001"], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004e00)={0xb4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_SYNPROXY={0x0, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x0, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ISN={0x0, 0x1, 0x1, 0x0, 0x6a}, @CTA_SYNPROXY_ITS]}, @CTA_TUPLE_ORIG={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_ORIG={0x0, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x0, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_SEQ_ADJ_REPLY={0x0, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x0, 0x3, 0x1, 0x0, 0x10}, @CTA_SEQADJ_CORRECTION_POS={0x0, 0x1, 0x1, 0x0, 0x80}, @CTA_SEQADJ_OFFSET_AFTER={0x0, 0x3, 0x1, 0x0, 0x100}, @CTA_SEQADJ_OFFSET_BEFORE={0x0, 0x2, 0x1, 0x0, 0x7ff}]}, @CTA_PROTOINFO={0x0, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x0, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x0, 0x4, {0x2, 0x4}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x0, 0x5, {0x4, 0x3}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x0, 0x4, {0x72, 0x7}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x0, 0x4, {0x12, 0x7}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x0, 0x4, {0x9, 0x4}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x0, 0x2, 0xa}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x0, 0x2, 0x8}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x0, 0x4, {0x18, 0x3}}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r4, &(0x7f0000004dc0)={&(0x7f0000000080), 0xc, &(0x7f0000003a80)=[{&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/24, 0x18}, {&(0x7f0000002800)=""/42, 0x2a}, {&(0x7f0000002840)=""/14, 0xe}, {&(0x7f0000002880)=""/46, 0x2e}, {&(0x7f00000028c0)=""/34, 0x22}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/161, 0xa1}, {&(0x7f00000039c0)=""/142, 0x8e}], 0x9, &(0x7f0000003b40)=[{0x18, 0x0, 0x0, ""/3}, {0xe8, 0x0, 0x0, ""/212}, {0xe8, 0x0, 0x0, ""/213}, {0x50, 0x0, 0x0, ""/62}, {0x1010, 0x0, 0x0, ""/4096}], 0x1248, 0x40}, 0x38, 0x12000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_buf(r5, 0x29, 0x14, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000380)={0x0, 0x8, 0x1, [0x81, 0x40, 0x1, 0x3ff, 0xf273], [0x5, 0xf, 0x2, 0x2, 0x8, 0x7fffffffffffffff, 0x2, 0x5, 0x7f, 0x62c0, 0x2, 0x2c, 0x3, 0xfffffffffffffffd, 0x0, 0x4, 0x5, 0xde08, 0x8, 0xa, 0x7, 0x1, 0x3, 0x2, 0x5, 0x9, 0x3c00000000, 0x7, 0x1, 0xd5ac, 0x8, 0x2, 0x8000000000000001, 0x3, 0xa5e, 0x3ff, 0x0, 0xb, 0x3d, 0x1, 0x95, 0x4, 0x2, 0x8, 0x92, 0x100, 0xffffffffffffffff, 0x8001, 0x80, 0x7fff, 0x3, 0x401, 0x8, 0x4, 0x7ff, 0x1, 0x1, 0x8, 0x80000000, 0x80000000000, 0x4, 0x80000000, 0x8, 0x9, 0x1, 0x5, 0x0, 0x9, 0xfb, 0x3, 0x2, 0xffffffffffffffff, 0x6, 0xdd6, 0x3, 0x1, 0x3, 0x8, 0xe, 0x3c9, 0x1, 0x7, 0x7, 0x7, 0x5, 0xfffffffffffffff8, 0x4, 0x200, 0x2, 0x20000005, 0x8, 0xb, 0xffffffff, 0xc4, 0x6, 0x8, 0x9, 0xbd81, 0x0, 0x8, 0x7, 0xe8, 0x5c1, 0x7, 0x1af4, 0x8, 0x9, 0x0, 0x6c6, 0x9, 0x1, 0x1000, 0x7, 0x5, 0x9bb7, 0x22, 0x8a6, 0x4, 0x5, 0x8, 0x6]}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f00000007c0)={r6, "3744ea3cb396a62b58df00bba41c61d9"}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01400000000200000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0x0, 0x400}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x2}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000004f40)=ANY=[@ANYBLOB="280000f80eaf0000", @ANYRES16=0x0, @ANYBLOB="040025bd7000fbdbdf25040000001400060076657468315f746f5f7465616d000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048080}, 0x40) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xfffffffd, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x800) 7.51011513s ago: executing program 0 (id=3691): r0 = socket$kcm(0x29, 0x2, 0x0) (async, rerun: 32) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) (rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r1, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r2, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@fallback, 0xffffffffffffffff, 0x2b, 0x4004}, 0x20) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x10005, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) (async, rerun: 64) r5 = socket$kcm(0x2, 0x1, 0x0) (rerun: 64) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r5, r4}) (async, rerun: 64) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000001a40)="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", 0xc800}], 0x1}, 0x2000002) (rerun: 64) 6.525893601s ago: executing program 0 (id=3692): r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e20, @empty}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1e, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000ffffff7f0000000000000000711805000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x24}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x2c020400) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname(r2, 0x0, &(0x7f0000005f00)) close(r1) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e27, 0x5, 0x4e20, 0x0, 0x2, 0xa0, 0x20, 0x3c, r3, 0xee01}, {0x60000000, 0xc60, 0x1, 0x3, 0x4, 0x3800000, 0x3, 0x1000}, {0x3, 0x610c, 0x0, 0x2d5}, 0x1, 0x6e6bba, 0x1, 0x0, 0x1}, {{@in=@rand_addr=0x64010100, 0x4d4, 0x2b}, 0x2, @in6=@private1, 0x0, 0x0, 0x3, 0x5, 0x8, 0x5, 0xe5bb}}, 0xe8) 3.994303154s ago: executing program 2 (id=3693): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000001c00)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f024e22000000000000ab5c58000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000100214e0000", 0x58}], 0x1) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000001c00)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, 0x1c) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f024e22000000000000ab5c58000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000100214e0000", 0x58}], 0x1) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$bt_hci(r2, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) (async) 3.926739888s ago: executing program 0 (id=3695): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0xc, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r7, &(0x7f0000000040)}, 0x20) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYRES16=r1, @ANYBLOB="7d9ae700d730299bd9777a705f4987d4393445b0be3a1356223b50a846d9873ef1a13f7439023ffdae8b571a4171a25fd5d33f32959cf5f0cdcd095169ca6c", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x8080}, 0x4004805) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1417, 0x39}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48845}, 0x4008010) socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket(0x80000000000000a, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r11, 0x0) recvmmsg(r11, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r10}, &(0x7f0000000080), &(0x7f00000001c0), 0x2000000}, 0x20) setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f0000000080)={0x6, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) unshare(0x20000400) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=0x1, r12, 0x5}, 0x10) 3.852281462s ago: executing program 3 (id=3697): socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r10, 0x6b, 0x2, &(0x7f0000000000), 0x4) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)) ppoll(&(0x7f0000000180)=[{r11}, {r7, 0x4}, {r9, 0x1c}], 0x3, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) poll(&(0x7f0000000040)=[{}], 0x20000000000002d6, 0x0) 3.686152206s ago: executing program 4 (id=3698): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf25051f0000080002"], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0xa50d9986120083c6) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2008000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x240c8044, &(0x7f0000000080)={0xa, 0xe20, 0x0, @empty}, 0x1c) (async, rerun: 32) sendto$inet6(r4, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) (async, rerun: 32) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000500)=0x3, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x4010, 0x0, 0x0) (async) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async, rerun: 64) ioctl$sock_netdev_private(r3, 0x89f8, &(0x7f0000000000)) (rerun: 64) 3.684702194s ago: executing program 2 (id=3699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x7800, 0x700, 0x31, 0x0, {{0xc, 0x4, 0x1, 0x1e, 0x30, 0x65, 0x0, 0x3, 0x29, 0x0, @multicast1, @multicast1, {[@lsrr={0x83, 0x1b, 0x12, [@broadcast, @multicast2, @private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r2, 0x4, 0x4, 0xff, 0x5, 0x51, @mcast2, @loopback, 0x2e51cec7a551249a, 0x40, 0xffff, 0x3d}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}]}}]}, 0x38}}, 0x0) 3.516979843s ago: executing program 4 (id=3701): recvmsg(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000080)=""/165, 0xa5}, {&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000000200)=""/56, 0x38}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f00000002c0)=""/225, 0xe1}, {&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x7, &(0x7f0000001500)=""/4096, 0x1000}, 0x10001) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4(r0, &(0x7f0000002540)=@l2tp={0x2, 0x0, @broadcast}, &(0x7f00000025c0)=0x80, 0x81c00) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000002600)='lp', 0x2) setsockopt$sock_int(r1, 0x1, 0x1e, &(0x7f0000002640)=0x1c000000, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000002680), 0x4c00, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000026c0)) ioctl$FICLONE(r2, 0x40049409, r2) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000029c0)={0x9, 0x13, &(0x7f0000002700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xff}, {}, {}, [@ldst={0x0, 0x0, 0x4, 0x8, 0x0, 0x4, 0xfffffffffffffff0}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000027c0)='GPL\x00', 0x6, 0xa2, &(0x7f0000002800)=""/162, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000028c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000002900)={0x3, 0xd, 0xde35, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002940)=[0x1, 0x1], &(0x7f0000002980)=[{0x4, 0x1, 0xd, 0x7}, {0x4, 0x2, 0x3, 0xc}, {0x3, 0x4, 0x6, 0x6}, {0x4, 0x1, 0xe, 0x2}], 0x10, 0xfffffff7}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002a80)='net_prio.prioidx\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002bc0)={@fallback=r1, 0x5, 0x0, 0x0, &(0x7f0000002ac0)=[0x0], 0x1, 0x0, &(0x7f0000002b00)=[0x0, 0x0, 0x0], &(0x7f0000002b40)=[0x0, 0x0], &(0x7f0000002b80)=[0x0], 0x0}, 0x40) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002c80)=@o_path={&(0x7f0000002c40)='./file0\x00', 0x0, 0x4008, r0}, 0x18) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002cc0)={0xffffffffffffffff, 0xffffffffffffffff, 0x11, 0x0, @void}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002c00)={@map=r7, r3, 0x20, 0x201c, r4, @value=r8, @void, @void, @void, r6}, 0x20) ioctl$FITHAW(r0, 0xc0045878) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000002d40), r4) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000002e40)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002d80)={0x48, r9, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4081) writev(r1, &(0x7f0000003f40)=[{&(0x7f0000002e80)="c4e7e31ae3e3526fe5d0a92122dfc373a7f67bab8f70c35223a6f174991f7117f4473e90b21a19976ef6f9d4728788ca3fa464029f02909b8d4ddc044d6789a9ada89f7941314aac16ab533723aac60ba70893518d6d7f33d8a3c079cde335fdbb20a0c65cac07d721aef6994d308e1f283877c6a1f8602f9a80d555444c8765337990957064d8c1cb6b1079a31d9a0238a649149e895820737302aa8654249e0964d7ff088f98c3130533d403684ef9ad36720773c956751e1198a1e02659730d5314c8f73692001730b1c40c5518d17e4484efdde86705f9374f81d2f4a81e0f1032108fadcd13a8cea9971d9415c7489f5f48cd33398c24883112a3aaf4af8600da3f3aab3d81d30c785e64e84f9b25ccc9e2fec8f0f2916243f6777b1e88cfa352388c9e8e08aa8267097634dcbca1b7705ec2df966df0abb1f669cf7d5f58b545fa28af2bda415a408444d46451d2fe62c6a37c48a7e697cf7b743789ca9bf5a74a367c4837fcbb0198424786c9e32bafaa4fe159adef39a6d414a67b6a53bdef5e29d09cb3b5e42e5f50bc985add3c44bed0b3c48822c72dc5bd1158e32c9c970a88946a3a1a41ef1a7742cf93376a06330e19eee1bb82770e154af1e4e88c53569f14e57a5a9add0a2d659884b9144bba0eaa030eea37b8f00db4ac1224b5c6883e04670db4e22ec920ee0dca72ded550e6b17a1d4d0c264b1cb337078d4687ca14e991a31f2adb8d0631dd11c359fee7d12edcd3469d7ce85eab36bfb411970f1c6e7befc903303ea582d859f00e8ea557d2adf7c7ba29ce38a3d1e9d2f292212abff85694134eba20aaf51cadbb654b8e43e0bb465532a039220c2838b61845aaf5eb2d7890b9f25b37aa30c117a036bbf9cf6bdeee309ab7b45e7b1122bb62c56978c7a4e80e195c9c70bb0fb8c08f61ba6c290192e87cc6da6545037db685ef1a60da3375fe506f841c00ecbfed257707c742dedbbabdfdac3f8ab4d73163df16f01090b21cc43ea469191c6053f54fff4380fb2fef2257b5cbcbfe4aa9bb1ee76bce7afab15c0ea8b7e4b96dca65119625da80b78cb41d458c172f4adedddf7f758d2281e12ab46aade43d004efb946a5fafb5b7cbbbb35fa5eb65d722f61d642ef404f762883e777cb404390074f784737426198403324da0e76a231e1e5324e655c5705147624d6b1989313a5f55644c1ddec625f165145a7c1c88faa0f6cbc4b3c7beb4968988be32f40299170e9be77d8fbb86316d79c07ad413502dd4490279ed45f7a6cf9471003282817e415bd6697355df77e8d9fbc97155b3e93e8c94ad8442162d502a2b38446644590238c2467202f07388f94eb7f6930a24a1bf3fc4fedf73fc04847523b66382814438c3df493686306aba0fbdd70cbf7cc6ebb3f9652a8e40deef10a8084208796ee36f8e96a7bf6f6d678be381517752f97bd13f1b6fd104f7edd8c381367decf6ce603110998ff775a54e96719157ed0f7ae5b94993c2f9214ce45effb09230a02072192cbde86f3ceb8aa06acbc13e795e91285754e2a5f1401813c63f7305cfcd413462ecbc6efa9a55f96010fc4f49e7076b47b9532c2342261dd51b6fcbced39e0a5043a71341bf4872438c11b585898ab181c0f92bb345d3b08862b9a7ff8140c9331713304aa07d43f3c5a3ac3d39b16b7cc10fff22ddf5a984d6a0412c1e48db03b6e34f4f5d5364ef5cabee4fee653ad72cf54baa322a0fce97cac51e702b1db22e7a2ab163ff864671c547eabd0067c8574fe2ccdb751e76989b20373215b58b4ea6551a44351325bfc8f894cfbea30394f82ff38a6778a26f76ef5ac1beb01bd52dcfb036788d9bb3995d03e7def0e32c5dce9bdfbf6bf6c486a6ed52fae1e939b519aeed18e2a8a86cb0170cefed14dd19f617f3cf440e3430d2d59e3911dfe30900eb7d57485da41d5384455b64b5431770d8a77e93f9af0b91b9a897bd221374078cc82d8bf5f8118c2ffdc7a302b2cce68bbe744dac4300093af8fdb1ca06c32b79542d3dd4a7800ccbe6d7063a855e767eb5ba06752e25f91089579031a1b374137c5a12327e77970cf1d10f9ab74d6cd80e8f48668874b989376bf5f55d5d62c56bacfe231ec49e0e20ea1963aad549bf22643209c8ef07a2c12673bca7cf37bcc8a4e6742981d9adccdf99f7a17bf77f467d797a6918ca30571530a6f308802941415e0cac9318af9985bc8f8ed23153265a2ef01d34de96c6c72827695cc888aa9d9778b5414c91a14b600b787a9409be952025b022db93879a8595d44d875da3d7509586862a4ea7de5481b1e801edc441d97edb911421e5776bfd443a8d16273ef024509c1b0b9f62e150e50d965470262d3c8729b2ada217f360ea2109d1155ede186d827a68cb215406adabb46c9267f47c47ac50d90d1a3af3f7f45910d3ae1b17727d6ee018f49e4985cdd7b73a9a302da14a456aabfb225341cb8f2b2180d2d4783ef94214e8ecb5ee8911a8981b3560ddc6c4204fea1e3076da1fea3c6557f7ac742c40542ca335cca6f115b27229bd146baef8f5a7e350daf1cb54d2aa6cd5255868b89591ec5c9b3fb3b3535110f5d672b188dab738eb0ab9839553ada19fb6641e9b962e9080774c29a3fec9133014d5797ea756d6aeb2cd95d93ed2bbdfeea9b7aa512a9e1a8e034011c51b79c00b75e0eb0d57f92aae8098386651dd8c173894fb00d65a975b12d66cd59334b5aaf78a6d06804c1a06ffbc836c53cfd6a93841be9d902bd17ae139fda1596d1249405718a1dd003810ad9732c3dac4999a9a31953571cf7d0b67cd018f66a8ca2203371778d517b2be8d5a9fe4c590283f2e7a43324ffed42028564d9f6e2c16d48178f240c5b2f2781a0365d6d5efdce0e992aaf85625a48fed58d4a543db851da685b698e45e44e941ba6e70c4a4a835ab789fc905429b9e46cad9e31a11f54adee29f248a874abafd051e6051752fba7580d172f41ae3c05478a5f985b6698fbd07dfc20aeb374faf08f248e53d3cb1ed83455e404e7829a94ddb56b74c25f8b8d90ec082d092220f2c82532428265323257a71cae788fce0d4be929441fac0f6ce5bc328fdc4f3249b80096d0ce9f7f7882cb9668cc4959b087b198c7880f985ccc8592325ff1f013fdcd4f2eef399738ffef7f55eb220119b5b739c589f2aaebc160ca06f14b8987ef53f7f8af9673d0fd6795926fdbf54e1cac612021851f1dc1c5a26b0e8f62af96bac7d879a984fea441395cb5f9e2c8695ccca52378931c39fc432491c98e9fd2c82c05a4d028c879dab362ee412c0f8f408a0f246f27b16249beb5983662d72eb59b6ee89344321f687113f76d4cba59d3996b152f57e95d0bb902491bde03fb50b517d63ddbcfe5c0c6540b7de40c5ba6471a352a760e678ec4291286af4fd1f86c38d727e60716fa0addf6bd1d5c280d4631afe9804ac0031aab5f1428075276b3334f85fde91658953a875111dc79a4a1c9d20bf70762f8390153e922a75464ed56c6629b02f1df3f73db3035f1304f84eb2fa697a5f9c55f1200d33b94901ac502970d8bfa9bced6738cb278e045388733435f0f1ab1557c5742dfc7bd84e1d95e8ac5092b079ac86f72ac92f279ac51990d1dbef678b2114cedb0d355e4a6f9163ecd2bbc6f81194af548465ea8d922a8a7d503aa3ff73c3e8ec726c60ddba99c931746cbe487399c07aacbc7a115986ccc30bad3662bc3a04b890d8317b732973923c87298e26e135b47e16b4e4f9e6d69a09627296416aaa2af899ae357f0919d8fe20ffaf7e2edd2f6f34cde13a97b9d75160ff96fa27f79969d6f323d14992d47419d61ff44b8d7645bb266fad229dc3b567bd546f748bf824190f0f8087594e0e42b5d570d1083ee7df06cbfd9afa641f03bff0a0c38960c230e166292074051e8ef4d1673c791cee0778db96ee4be966a61a6de5ea2c2befc30f0dc0955d2b2c781e647ce38a09c804f6f1db9616e1311c5b0a9dd285162b090cfc8cb30d29446aee5f8180c7efeda890d2e7c8318e9b8ed2d39881a868ed025a2a0c1d23f1bb5f101d5899c0a841533726efbcb11a225189196e2382b7a4a527278fe1216512f6f14af7889aa2e5176dfd46c661fcc3ff26eec06ffdcd9d7c4237a55434d92690001ecd6f4fbdebf08db7d5714f0c5314449b9bd7b2435ce11f27972921ed1b735687a73a9dcc640e742db9839c88530ae992b019dd4b56857031c02a857a80b3c4cabab02b6a38e9d4738123d901aff4bba21701fa7333e5ff8c8f8b0d79c59172609d7f2f5b3685b0b6c9431f0d0aca8f267b1d2ebc9c642fe30fcae6abc8f80ca4c08e603d49b75d592a5db51c9ba3a8a1f591211c343d4a44c747fd4092603a4e01da8589763e0d044a3eae76a3a4074350a18dfaa836aa3d231038094d444abf3bd04cd0f7f156e39d415214e3677568e3ccc7bd2319a155bcd76802add3cb369f664e4ce6cb40ec411fb2fc547a81135fc664a7d84362dd8fa9b333b88af7388270c482328809d46230d28413ca8f73e1b55bc12a4bce48509ea2c479125cb8355c525fffd7f279ae64ec2d9a51d513c1abf22ea4958ae8572c16d80f7c980f73e5cd5b610b6a6a1897c48eddf24a053564da2403e71f547d9afcd821aea43ad1f43169a700c73a2349625ed9c5276c879518983229a882ff5c189326e0e9837209947477c2d3dc06ac8e9b12864c7b184b86845758c6dee183acc35f51781973fdd009fc3a0948dfc2ac1d435151da128b3b48b958a53725bf44cc0598766e80cabe7c012012412b6efa9eb068b22faa67fc3c9306ff1778fb6d7f8c01ccf14b6dd68fc11a0b7decd3b9991e09dd6808257d7a55f3c7cda04e49f76742d9039326b55150691649a5c1374ec18a5e90b92bd8b1848db216f286228de424e7e80da25e9d156172bd0502b9c515022bcadbb713f60427ff825acfcaff238c9bcd9b5b4ed7461293d0afb829d9d7366a587f71b26bd8a3420fbe4c70eb1fde1117758422c515919ef4c6cca750ec654a401284388d4bc6285f6344367dd1304ccfa625627da7a75761059be46b9d0f72999c4f54eaf9e7f494068b270e4fd750062c44b6bf6e2ccc4702bb855bb71bf38f1b6d7003effcc699d3ed3b72aeb6b2ee5a41e771cd6a0e6f7a44cc4e9795bef18cae865be03004220c1119c296bc0c72bd0aa445f3f1602a742e18092235a3c1836d8a0acd0c5fd2c4e9134bfa5957de438daef3b963f7120b4fc5ed9b6e862aa521205d87faa6395adeca85930b4a996106fcd0a3db715058449a05f5598ccbb5d45f81b6b7b72f956d046798e138ca312a04fac1451440a10ccb1e7aa5a0fa93ff02271ba8f0237a63ebe164cf6eedc844f3e5f3e178a44090d184b5af51f3cdd1464c11e3d9ef9369912062481d7f9c64e337653e40d6c45072d1cea6430d7a995406133190ae8d1b74f3e7351fe67f6aabb5f563510d2bcb19050199dc856b0669b9a68d8049e2fe93a60a5c55c4844cd71804b636e9e2364b1437d623398472da199b75ec0ecb92d8f22e801831fb2022fd1eb30d0ace9aac2c48e33825be438ffb9eb9cf41ae21f1785a9b4e16bf53778744d7543f957106579d4c346a6a7ed5684c5e9a1cd1501bcb8511dd06f4639d227e9a3cd2a8547c7bee453bf4005e428fd7a3f2ea4bc5c42707c14bd8388b64219cc234a3024e072370764940efaea459ed8912b58fea04326154a934214850539032f295e4b2b1ac6cc2602819a1f67873a6f86a2b621e", 0x1000}, {&(0x7f0000003e80)="975f952b6e5bae84a1def14d2ea6228d13f937b05ae85f64c09aa58e50955e6a73de69c9709a19a6023f67b6f54b2a528e9e5731d583593873105a9cb738e312b151098dcc7e4a45824616894f7f0c559c6749bcda22df2c16992e19b31d4483a5ca5fe6f081c0f2d6f2aab0fd7502a11ab5804f0b1be512481495f6a9fc0399ea646a7402fd276a01d1fc337da9934d2b6984305667830a71282cd0e3", 0x9d}], 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000004180)={&(0x7f0000003f80)="efa2d25acd15619e9eb260440369b47bbe7e5382bc48e3c2171337fbb8f8fea5a4358037cd671864cee75cab83ce45c395322dfb94f98c169a027cc8548cce9ea25dbde59b1e0454d89fa1e87e4e5541a6", &(0x7f0000004000), &(0x7f0000004040)="af3745b8b65bc12e15729953e4f650afc568130f36684c33f5ad241265b3364cf6b5c7875b5844233baa1c2d73a562a771adca3bfe6507dd6cf08c4309ca7ca252985a1b984057e34a17c964d2ddb3a02b216de735067e2250d9de62243516afa7a9b1c72ad439cb2cf43f611f02dae9a0eb82", &(0x7f00000040c0)="1f63b3ed03b351a1630d1ea4e5ab21879a202b05017f372073e0affbaa95e01e556bd32da98ba8b4e4d08fda8805e812afb55b485b1eb9f3535e78e41b8b3089bf01866b8b18bf6899a73a91cd337975fe8ad778dc31608d8be290ef60f67020763c8da042ef50787b8809dc2882abc14222bd4ad909823b296a936d384fb132bf0ba406eebb57026d6e20205db17fee73", 0x9, r7, 0x4}, 0x38) r10 = accept$alg(r5, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000041c0)={{r10}, "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"}) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000005300)={r4, &(0x7f0000005200)='SMC_PNETID\x00', 0x40000, &(0x7f0000005240)={@align=0x8001, {0x1, 0x9, 0xa4, 0x7fffffff}}, 0x1, &(0x7f0000005280)={@_ha_fsid}, &(0x7f00000052c0)}) syz_genetlink_get_family_id$nl80211(&(0x7f00000051c0), r11) setsockopt$bt_hci_HCI_TIME_STAMP(r11, 0x0, 0x3, &(0x7f0000005340)=0x4, 0x4) recvfrom$llc(r4, &(0x7f0000005380)=""/132, 0x84, 0x40002062, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000005440)={r2, 0x8, 0x8, 0x100000001}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000005480)={r12, r4, 0x1f, 0x0, @void}, 0x10) 3.306096671s ago: executing program 4 (id=3702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000030600000000000000ffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r4}, 0xc) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r6, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="315d0a7b74b8c3302140a7cb7280177a6b3b37fac3fe1fb31df102d920377dc373fbd6db550f0a272c0f4ceff53f464cce3f05661693f49d638ce6a0a0d2", 0x3e}, {0x0}], 0x2}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000400)={0x18, 0x1402, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x4850) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xffffffff, 0xe, 0x0, &(0x7f00000000c0)="05004013ffffffffa000c4353512", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(0x3) 3.261710916s ago: executing program 2 (id=3704): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4c440}, 0x200000b0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xcb, &(0x7f0000000480)={0x0, 0x0, 0x7, 0x2b, @vifc_lcl_addr=@local, @broadcast}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e657269"], 0xe0}}, 0x0) sendmsg$nl_crypto(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r8, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000040a010100000000000000000a0000010900030073797a320000000083df0a63f183422e4215036c08a6377775327d731a22565a505990290b084f38d7af564b530c79f51a3b1c74ad86292d882cae"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r10, &(0x7f0000000040), 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r7, 0x3) sendmsg$inet6(r6, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1) 2.203550646s ago: executing program 2 (id=3710): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f00000004c0)={0x2, 0x9, 0x0, 0x2, 0x2, 0x0, 0x70bd26, 0x7}, 0x10}, 0x1, 0x400000000000000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="410404"], 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="0000000022a76d2993d3eee041c33c30798615956bf53918db161646c80000000f00"/43, @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf251b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000041fe0b0000000000"], 0x3c}}, 0x0) 1.634161995s ago: executing program 3 (id=3711): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4400046, r1}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='cubic', 0xb) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r6, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @private1, 0x80, 0x0, 0x1, 0x1}}) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0xffffffffffffffff) sendmsg$kcm(r4, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) socket$tipc(0x1e, 0x5, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) readv(r4, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/228, 0xe4}, {0x0}, {&(0x7f0000000380)=""/241, 0xf1}, {&(0x7f0000000480)}], 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1.592716708s ago: executing program 2 (id=3712): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000001000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}, 0x1, 0x0, 0x0, 0x2810}, 0x4000814) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@rand_addr=0x64010100, @multicast1, 0x0, 0x4, [@local, @broadcast, @broadcast, @broadcast]}, 0x20) (async, rerun: 64) ioctl$HCIINQUIRY(r1, 0x400448e3, &(0x7f0000000100)={0x0, 0x4000, '\x00', 0x2}) (rerun: 64) 1.467919687s ago: executing program 3 (id=3713): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) read(r0, &(0x7f0000000000)=""/31, 0x1f) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000020000000f0000000800000041000000ab12d88bc7af81903d8cd03f89f4b339ccdc38f8b644e5edc47fd7891cf283bfdadd1b7034628f98a165fa1e8d196cfe1227990e074c98bf1d7e7fc6f8b1eccf0b45e6a413b99311985bc2f81db346913b4e15240a4bcbc0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x9005}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="b102", 0x2}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)=""/190, 0xbe}], 0x1, &(0x7f00000008c0)=""/68, 0x44}, 0xb9}], 0x1, 0x40002102, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000feffffff7e0000000000000037000000fcffffff95"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x1f, 0x0, &(0x7f0000000080)="25adf9570f6739ab97bbe5c3f8813930bd3436a84261c581ccf73d49755e30", 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8001}, 0x50) 1.373966852s ago: executing program 2 (id=3714): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f00000000c0)=0xfd, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x3c, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x91}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x85}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x32, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x90656}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x40) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x8014) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @broadcast, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x9, 0x28, 0x68, 0x0, 0x8, 0x21, 0x0, @remote, @private=0xa010102, {[@noop, @ssrr={0x89, 0x3, 0x4a}]}}, {{0x4e20, 0x4e24, 0x4, 0x1, 0x9, 0x0, 0x0, 0x0, 0x2, "7dead8", 0x4, "a1d0e7"}}}}}}, 0x0) 1.281628488s ago: executing program 4 (id=3716): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000fd00)={0x40, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x24, 0x1, 0x0, 0x1, [@nested={0x20, 0x13, 0x0, 0x1, [@nested={0x1c, 0x128, 0x0, 0x1, [@typed={0x15, 0x11, 0x0, 0x0, @binary="2db36a4ad25e7da73e2ef07b39ed1eb6da"}]}]}]}]}, 0x40}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x24, 0x0, 0xe000, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x24, 0x0, @val=0x80}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}]}, 0xcc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000edff0000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e"], 0x128}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@initdev}}, &(0x7f0000000240)=0xe8) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="04010000100007000000008000000000ac1e0101000000000000000000000000000000020000000000000000002000004e2000000000000000000000020000003fc164799cf53a875ae17a0de01806db360dfc21d2aec4796b3f354ecaa14db9b94751344abaec1153e61860cfa1ccd37bcade9f04551a28aa747e3457313138", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000900000000000000ffffffffffffffff00000000000000000000000000000000000000000000000004000000000000000700000000000000000000000000000000000400fdffffffe40a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) 1.1131267s ago: executing program 1 (id=3719): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vlan0\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x10) sendmmsg(r3, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000001180)="e23bf17c7002777c084c8b5057dd1d7480b5d62b22c58852386eee5ed29662808bd6f6babc2e103e97de030f93d5ed73eadf3ea63fcd7f691ea53a598f9f9b00f4b162be8db892b0fcea0efb179e08e916cfaa14c3d65c1d029a9ab5a7389d8a0a1aa2cf61d26ace015dad28c249d1a24c400b230e660da80c4ccc2ab9c8b9ae60160f90ece98c1dd1cf2c5c7a2fb8d2a3b648aeee03cd1f9a7a8edac023c99868c5b4411ad1cdcce4a34f9756cbed51a7b8a470a8f136d6af6a06d726bf25698dcb96113d7cf102c298f654dd549e9f7616661149f10e342017caaaa486f1b54124223b357c9ee9bbb1d99c7e366f5959b6e44e5391edb5f0e6b7d6ed357c6e0cd1244f9b3f61e25c6236ec029975a5f4e839775cb9de83f2670dd743bde2fd8438e30c454fe5d045e45f0c2c9331562ac98507c8b2fdf69926ca1949c2d74054fa4370481fe67f0a5d517db35460514985cc2b241abaa2a0c97e248c889e174745b52167b47ecf872e16e93249413446e5249f36a144e935ac90ffa355797a265dbb3af33395c1dc8b098c79bd8cc665db900141cdc212888d38f2fd308fdd38358ef363b15483badc666ee5244075799590f0e20de5c6b492a83a098a273b51f3fc6522f3b3ff8fe2899a10c73602cbd7d5f3e08d0e5b27a9fdc8e782de07ab7700ad6542fd3ee8727977b7d288d64774471586186a2a9af1500d74d03d898ba04520a55b6105a7f3ee493cb832517b8e888e28fd171203c0d2ff42959b0c98cc75f89caac6f043238da8c2d9138305d512860ed75e9a52f3787b1c46a1cdb14a5a9c8e3f66d0bb3cfdbe4cea757b602ab699b1e3810a9d084943fdc8b4438c3a013d2e9b96c3ef2b1ad602a9fd1ecd1d70d8e6f006b63e758de98094cacd0a3d9fe1cd47e0dbc739bc24d490c964596503fa07729db46617e4992b14be8178c89a1ebad37dbffc96894f900519a6ace34952cac0ce571d54920da683ae4b901b64f1c34cdbe62362ba6a83da2c737c5d160bcb2f9bbf4c5b0c4362c9759719da68c1dd6caae02a530677f8a05482bdf325efb1326197b9764c399b816af09bfbb662e653e54fcdea89a6d96221e5422f11ee12dc311170adcb15096222c01c12a0c60b1900daaafa15af53e0341222ffddbeeaabdee6070dcd322eb48e54a728104702adc11a4b2c8ff7b18ca0fb839699ad2d7bf557b67212eaf4c858824c847952d913c6de6cd3f54cdd736da82bc6b25df60c1f892bfc035e93e4a78157b129b627ccc04b9b9d82b97db1ebf4968f446893cb3d7902925205e6acd01d5f9cd54c19eef2a811b89498ed8c65070644f4be3874751d897bbb15d82f1d61eb6104b00649905685343ec457e8b7f530b4bb9b9207351193b4615dc0fd5453d037970a3f61f0774b55e88600ef90db73aadca98e9f7e336e624604a7887e8db74be789a006b61c7420e5325edcf6e3852bec986fcc1a99e175249231019d73d83f9433e2c5dbc0f3f947dbdc3f65ed98f10580531a752883a7c3fd3232e7df8923ad4301e7e9c75980858504b78ad6c8ef3d97606dd75b0c9b3a04c7ef152b9cc9b63e098f809c4aa5bc4fa32619d411d513a250f025ca9e3ed237e1797f0675a0bf4e07bcfd62acb9a4c637a668ad576937388e8667133f13189f001f7f9d3ff02bd2a8fa9bf8b5ff519ff05b2831471636872f9bf890b05bfc9260a1cff2420882225acf386549a351bdbfd54deb7e5c3aeba10dffcecc131ebe5921b5c132d09589e273e3fd4a4fd936ee8962adb9d4329f7ddc15578f30ef149abe7108a40dc8967c0c5f7bcaf7b2d709c12e2b71009eb24a6f5dd371062d8cb50d2787ffea1dafe54ab33dfc9ce0a86d5e751ad0ef4a60627d85281c003caaa551d77ec700b2e2edfefa9f7b8a1fbb9e87b4a4d3af125e76637fa23ea5ba21066fa725d27e5124eb45bca54695421366e9d4585badb8c81a3aa0f04915bbc5b1c6e736e6b19b1ebc50cbd0c4b4ee2617158ba206525fa9f9e6a304707aebd37ac6fb0fd567b13ae54fa0b3", 0x5a8}, {&(0x7f0000002180)}], 0x2}}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x70bd28, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1000}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x38}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="060000001000"}) 1.001416831s ago: executing program 4 (id=3720): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a0000000000000000000b8008001e0001000000080008"], 0x2c}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="30de1cee2fc8", 0x6}, {&(0x7f0000001840)="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", 0xa3a}], 0x2, 0x0, 0x0, 0x24008000}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/8, 0x8}, {&(0x7f0000000300)=""/57, 0x39}, {&(0x7f00000008c0)=""/168, 0xa8}, {&(0x7f0000000980)=""/200, 0xc8}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x5}, 0x6}], 0x1, 0x28144, 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x5) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x2e, 0x10, 0x400, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x20, 0x7d80}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @void}}}]}, 0x48}}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r8, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000db5e7f8d417870"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000300012800c0001006d6163766c616e0020000280080003000000000008000100100000000a000400aaaaaaaaaa42000008000500", @ANYRES32=r7, @ANYBLOB="db"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r10 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r10, 0x0, 0x0, 0x2040, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r13, &(0x7f00000002c0)="4cf7", 0x2) splice(r13, &(0x7f0000000040), r12, 0x0, 0x6, 0x0) readv(r11, &(0x7f0000001900)=[{0x0}, {0x0}, {0x0}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) socket$packet(0x11, 0x2, 0x300) 857.005139ms ago: executing program 1 (id=3721): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) socket$rxrpc(0x21, 0x2, 0x2) socket$kcm(0x2, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) accept4$alg(r0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 450.043331ms ago: executing program 1 (id=3722): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x3a1942, &(0x7f0000000040)={@align=0x6, {0x6, 0x1, 0xf, 0xc}}, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0xeea}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001004390400"/20, @ANYRES32=0x0, @ANYBLOB="a3080400000000002000128008000100767469001400028008000300030000000800020008000000"], 0x40}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x10, 0x3f8, 0x20, 0x70bd2c, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a40)=ANY=[@ANYBLOB="40e500009fbebaadae89255307290c8933ba4f1295210615de781e1a0753d097dada7eb4446ed009f6896336e4ee5b84effbae4e1ca85df40eff", @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf257c00000008000300", @ANYRES32=r4, @ANYBLOB="0a00060008021100000100000a00060008021100000100000a000600ffffffffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x20000040) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r5, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="0c009900030000002200000017002a00000e26287c17fbf4e21aaa2a052424860301a50025012a00680401000800001999c30b0d300b0fb98e2d62177b74a5050a01289d348fe4e90965125050505050500802110000010802110000008236450280fe0c000008021100000004000000ffffffffffff060000000700000002050802110000000000000000ffffffffffff09000000057008c009cf0e4b85274a7ea5755938e537111ea60ccf99e3d92bf1fe91d394069cd7f9a5f4e2e44ec03308e9c1a06ea0027b779769f67f69bd50bb544fb20f434b772842c4a34e2978c740a07f43bddc8f0d42f882468df2217408639ea0be6db333b7ad7e33cfbf04f4c4735d14f1ee2c71070001010100094801038403848c1815074f48ee71e8eaf7c4b864a385c38c155422cd7e01aa668c18290f8de5ad45c8ca02117d754145b702490ba95920878ee300000004002a00"], 0x16c}}, 0x0) (async) r6 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x7, 0x1, 0xb, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x3, 0x0, 0x2f, 0x0, @empty, @private}}}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, &(0x7f0000000200)=0x8) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000a00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x140f, 0x8, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000fa710adfd30a96211aac7f3a383bfc39d2a0c42ed53fdbaab9c448f5bd8dcd61116b0c0cf7dc533b348dc6415fcb6c112ec5453fbfa3c3f502b1f10f5f1924ef8d72b8f282f101056a7367ddcbc085dbde6a1a5250e08449bf04d8c562f54fb9e2d248b722ea9e7987dfdd42e7bf86f88cb7031e68aed9705f193ac9e2721a431f5afe5a0b080e5e89adfc", @ANYRES16=r0, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008010) (async) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0x8000}, 0x1c) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r11, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1010000007c0004060000000000bf852c8986626691b01b5f44e4ce287128"], 0xe0}], 0x1}, 0x40040) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000030101f7000000000000000002000006"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40050) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0xd873bc37f3c14a33}, 0x4004000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) 334.211515ms ago: executing program 1 (id=3723): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180000002500000000000000000000007600010025000000950000000000000018400000020000000000000000000000950000000000000095000000000000000ccafae8b924b5b3bb297832a1fd082c161fa7650468f6657de0ee3621050b493602bd2cd55debab8d285f39fede3c44c849b0c2b7b11ad27bc6"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180000002500000000000000000000007600010025000000950000000000000018400000020000000000000000000000950000000000000095000000000000000ccafae8b924b5b3bb297832a1fd082c161fa7650468f6657de0ee3621050b493602bd2cd55debab8d285f39fede3c44c849b0c2b7b11ad27bc6"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) (async) 193.253603ms ago: executing program 1 (id=3724): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7200000000003900000008000300", @ANYRES32=r1, @ANYBLOB="24005a802000018014000300090279000700060003000400010007000500040020"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000908500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xffffffff, 0x10, 0xfffffffffffffffe, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000000c0)=0xfffffff9, 0x4) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x8000000, 0x4, 0x3a8, 0xffffffff, 0x0, 0x2d8, 0xe8, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'ip6gre0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xff000000, 0x0, 0xffffffff], 0x4e23, 0x4e22, 0x4e22, 0x4e22, 0xf6, 0xc, 0xfffffff0, 0x3, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f57625092d006bb183ddd9b468ffd1ab108839f458a6b7fd70870ecd20a0"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@ipv6_delrule={0x2c, 0x21, 0x11, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x6}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8}]}, 0x2c}}, 0x0) 70.243283ms ago: executing program 4 (id=3725): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) close(0x3) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0xfe86}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000004000000040034eb8e99933586319d39f33b0123c05e83eeba82dae4fd6e58b2b251e0de17cd5f10ae33101c2574d69b6d4b14654df8ae903816fbedfa6eab93ac331c61982c2222b1e6544e0a02bbe6d9d33ad13f46b9f99d5f428f2a9b0cd6647ae4db8c54d49900c2aa2b295e8f29e053ff61d94547feaed6c424677a40997d86e7046b605c1cce173ca2403aad1f4fe0838c39e234fdb4be37b3d859e66d1c11343644803929b33b24a6f8bda45cfb2bb16e1f039893ec103179e739aa2881e52fc72ea67bc961456dc58b87b80a834694875449b3af1ae3dc7cc4", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, 0x0, &(0x7f00000000c0)=""/193}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bf2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3, 0x42ff}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x2a5f13df9afa8791, 0x70bd2c, 0x27dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xffe1}, {0x1, 0xfff1}, {0x10, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x200008c1}, 0x4041080) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100000000001b0000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a300000000048000480440001800b000100657874686472000034000280080001400000000b080004400000001908000340000000f905000200830000000800064000000002"], 0xf8}}, 0x0) 0s ago: executing program 1 (id=3726): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000500)={@broadcast, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@broadcast, @broadcast, 0x1}, 0x10) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000003000000000000008000000018430000f9ffffff000000000000000075500400100000000822d4000080000018110000", @ANYRES32=0x1, @ANYBLOB="000000b1138f3600b7080000020000007b8af8ff00000000bfa200000000000013020000f8ffffffb703000008000000b7040000000000008500e0ff810000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x9, 0xf, &(0x7f00000002c0)=""/15, 0x41100, 0x20, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xa, 0x9, 0xfff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000440)=[{0x5, 0x3, 0x10, 0xb}, {0x0, 0x5, 0x5, 0xc}], 0x10, 0x2}, 0x94) unshare(0x600) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$inet6(r6, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f00000086c0)=[{&(0x7f0000006240)="c1346f2d260685eb57d897465edd4823", 0x10}, {&(0x7f00000062c0)="2977c9c80000000000", 0x9}, {&(0x7f0000006300)="5c711d9c51a0c1a7", 0x8}], 0x3}}, {{0x0, 0x0, &(0x7f000000a3c0)=[{&(0x7f00000090c0)="9a4037055e1d2207e96d56db2b87dc0f58811431433ec0e2435dab2ea838935a599486af8d13ab2df30ff8d0a89465852ec7abbeffae9462a84e0967d932a92cccb35fdc84", 0x45}, {&(0x7f0000009140)="14b48e5b08fd6c6c9c03031067a0f6194cf12963721ad167aa845aa732510bdfc2795ea40719d18c35e44298992aafa50921ae2de7ce25d85f96044894250e8a684d06c37ca05fddbafd651f2f0ab91dadf0ed44f422cf", 0x57}, {&(0x7f0000000080)="59058e8bf0cc944add2bc5e92c2a324f8f63fd70006d7d", 0xffffffaa}], 0x3}}], 0x2, 0x44051) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xfffeffff) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000840)={r1, r4}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7db", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000880)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b39008b91ed1036b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a1844d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc219239993f7e9973e3c40204fadbc2325355ae02e87792be5dc0", 0xa9}, {&(0x7f00000000c0)="7542473782798be019", 0x9}], 0x2}}], 0x2, 0x2094) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x1e, &(0x7f00000004c0)=0x1, 0x4) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0xe27, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7) close(0x3) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 371': attribute type 75 has an invalid length. [ 443.903927][T15067] 8021q: adding VLAN 0 to HW filter on device bond8 [ 443.935452][T15072] bond8: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 443.950908][T15072] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 443.962656][T15080] xt_hashlimit: size too large, truncated to 1048576 [ 443.974986][T15044] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.076837][T15085] netlink: 'syz.1.2374': attribute type 1 has an invalid length. [ 444.102923][T15085] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2374'. [ 444.119782][T15085] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2374'. [ 444.174575][T15087] netlink: 'syz.0.2375': attribute type 10 has an invalid length. [ 444.264477][ T7883] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.420766][ T7883] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.452495][ T7883] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.511172][T15040] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.536487][T15095] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2377'. [ 444.604437][T15040] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.895043][T15111] tipc: Enabled bearer , priority 0 [ 445.004788][T15108] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.045276][T15114] tipc: Disabling bearer [ 445.163079][T15108] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.199477][T15125] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 445.200763][T15122] ip6erspan0: entered promiscuous mode [ 445.206736][T15125] IPv6: NLM_F_CREATE should be set when creating new route [ 445.206784][T15125] IPv6: NLM_F_CREATE should be set when creating new route [ 445.212445][T15122] ip6erspan0: entered allmulticast mode [ 445.219575][T15125] IPv6: NLM_F_CREATE should be set when creating new route [ 445.240787][T15125] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 445.302638][T15108] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.739903][ T7883] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.760109][ T7883] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.775074][ T7883] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.798377][ T7883] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.984066][T15044] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.008255][T15153] validate_nla: 1 callbacks suppressed [ 446.008270][T15153] netlink: 'syz.0.2393': attribute type 4 has an invalid length. [ 446.089741][T15155] sctp: [Deprecated]: syz.3.2394 (pid 15155) Use of int in maxseg socket option. [ 446.089741][T15155] Use struct sctp_assoc_value instead [ 446.380606][T15162] gre1: entered allmulticast mode [ 446.452005][T15165] 5n: entered promiscuous mode [ 446.553895][T15172] ip6erspan1: entered allmulticast mode [ 446.893181][T15181] netlink: 'syz.0.2402': attribute type 3 has an invalid length. [ 448.650554][T15145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.897317][T15209] __nla_validate_parse: 4 callbacks suppressed [ 448.897336][T15209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2410'. [ 448.943777][T15215] openvswitch: netlink: Missing valid actions attribute. [ 448.974485][T15215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.092626][T15209] bond9: entered promiscuous mode [ 449.107709][T15209] 8021q: adding VLAN 0 to HW filter on device bond9 [ 449.124317][T15229] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2413'. [ 449.202547][T15221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2413'. [ 449.380822][T15243] syzkaller1: entered promiscuous mode [ 449.393984][T15248] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2420'. [ 449.398650][T15243] syzkaller1: entered allmulticast mode [ 449.921768][T15278] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2423'. [ 449.958690][T15278] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2423'. [ 450.153154][T15295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2428'. [ 450.218377][T15294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2428'. [ 450.458552][T15315] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2432'. [ 450.502282][T15324] netlink: 'syz.0.2431': attribute type 1 has an invalid length. [ 450.737421][T15340] syz_tun: entered allmulticast mode [ 450.824407][ C0] syz_tun: tun_net_xmit 62 [ 450.824524][T15343] openvswitch: netlink: Actions may not be safe on all matching packets [ 450.831235][ C0] syz_tun: tun_net_xmit 62 [ 450.844055][ C0] syz_tun: tun_net_xmit 62 [ 450.849018][ C0] syz_tun: tun_net_xmit 62 [ 450.853903][ C0] syz_tun: tun_net_xmit 62 [ 450.858883][ C0] syz_tun: tun_net_xmit 62 [ 450.863866][ C0] syz_tun: tun_net_xmit 62 [ 450.868807][ C0] syz_tun: tun_net_xmit 62 [ 450.873737][ C0] syz_tun: tun_net_xmit 62 [ 450.878645][ C0] syz_tun: tun_net_xmit 62 [ 450.883508][ C0] syz_tun: tun_net_xmit 62 [ 450.888454][ C0] syz_tun: tun_net_xmit 62 [ 450.893347][ C0] syz_tun: tun_net_xmit 62 [ 450.898344][ C0] syz_tun: tun_net_xmit 62 [ 450.903202][ C0] syz_tun: tun_net_xmit 62 [ 450.908158][ C0] syz_tun: tun_net_xmit 62 [ 450.913045][ C0] syz_tun: tun_net_xmit 62 [ 450.917976][ C0] syz_tun: tun_net_xmit 62 [ 450.922865][ C0] syz_tun: tun_net_xmit 62 [ 450.927778][ C0] syz_tun: tun_net_xmit 62 [ 450.932621][ C0] syz_tun: tun_net_xmit 62 [ 450.937514][ C0] syz_tun: tun_net_xmit 62 [ 450.942431][ C0] syz_tun: tun_net_xmit 62 [ 450.947327][ C0] syz_tun: tun_net_xmit 62 [ 450.952228][ C0] syz_tun: tun_net_xmit 62 [ 450.957082][ C0] syz_tun: tun_net_xmit 62 [ 450.961997][ C0] syz_tun: tun_net_xmit 62 [ 450.966880][ C0] syz_tun: tun_net_xmit 62 [ 450.971812][ C0] syz_tun: tun_net_xmit 62 [ 450.976684][ C0] syz_tun: tun_net_xmit 62 [ 450.981624][ C0] syz_tun: tun_net_xmit 62 [ 450.986482][ C0] syz_tun: tun_net_xmit 62 [ 450.991389][ C0] syz_tun: tun_net_xmit 62 [ 450.996152][ C0] syz_tun: tun_net_xmit 62 [ 451.001052][ C0] syz_tun: tun_net_xmit 62 [ 451.005787][ C0] syz_tun: tun_net_xmit 62 [ 451.010588][ C0] syz_tun: tun_net_xmit 62 [ 451.015251][ C0] syz_tun: tun_net_xmit 62 [ 451.020126][ C0] syz_tun: tun_net_xmit 62 [ 451.024864][ C0] syz_tun: tun_net_xmit 62 [ 451.029690][ C0] syz_tun: tun_net_xmit 62 [ 451.034366][ C0] syz_tun: tun_net_xmit 62 [ 451.039224][ C0] syz_tun: tun_net_xmit 62 [ 451.043948][ C0] syz_tun: tun_net_xmit 62 [ 451.048879][ C0] syz_tun: tun_net_xmit 62 [ 451.053575][ C0] syz_tun: tun_net_xmit 62 [ 451.058438][ C0] syz_tun: tun_net_xmit 62 [ 451.063346][ C0] syz_tun: tun_net_xmit 62 [ 451.068278][ C0] syz_tun: tun_net_xmit 62 [ 451.073168][ C0] syz_tun: tun_net_xmit 62 [ 451.078088][ C0] syz_tun: tun_net_xmit 62 [ 451.082967][ C0] syz_tun: tun_net_xmit 62 [ 451.087855][ C0] syz_tun: tun_net_xmit 62 [ 451.092784][ C0] syz_tun: tun_net_xmit 62 [ 451.097499][ C0] syz_tun: tun_net_xmit 62 [ 451.102382][ C0] syz_tun: tun_net_xmit 62 [ 451.107292][ C0] syz_tun: tun_net_xmit 62 [ 451.112220][ C0] syz_tun: tun_net_xmit 62 [ 451.117093][ C0] syz_tun: tun_net_xmit 62 [ 451.122035][ C0] syz_tun: tun_net_xmit 62 [ 451.126919][ C0] syz_tun: tun_net_xmit 62 [ 451.131847][ C0] syz_tun: tun_net_xmit 62 [ 451.136740][ C0] syz_tun: tun_net_xmit 62 [ 451.141565][ C0] syz_tun: tun_net_xmit 62 [ 451.148781][ C0] syz_tun: tun_net_xmit 54 [ 451.154770][ C0] syz_tun: tun_net_xmit 62 [ 451.159607][ C0] syz_tun: tun_net_xmit 62 [ 451.164049][ C0] syz_tun: tun_net_xmit 62 [ 451.168910][ C0] syz_tun: tun_net_xmit 62 [ 451.173689][ C0] syz_tun: tun_net_xmit 62 [ 451.178534][ C0] syz_tun: tun_net_xmit 62 [ 451.183377][ C0] syz_tun: tun_net_xmit 62 [ 451.188226][ C0] syz_tun: tun_net_xmit 62 [ 451.193074][ C0] syz_tun: tun_net_xmit 62 [ 451.197957][ C0] syz_tun: tun_net_xmit 62 [ 451.202763][ C0] syz_tun: tun_net_xmit 62 [ 451.207587][ C0] syz_tun: tun_net_xmit 62 [ 451.212722][ C0] syz_tun: tun_net_xmit 62 [ 451.217527][ C0] syz_tun: tun_net_xmit 62 [ 451.222378][ C0] syz_tun: tun_net_xmit 62 [ 451.227191][ C0] syz_tun: tun_net_xmit 62 [ 451.232061][ C0] syz_tun: tun_net_xmit 62 [ 451.236906][ C0] syz_tun: tun_net_xmit 62 [ 451.241791][ C0] syz_tun: tun_net_xmit 62 [ 451.246598][ C0] syz_tun: tun_net_xmit 62 [ 451.251453][ C0] syz_tun: tun_net_xmit 62 [ 451.256125][ C0] syz_tun: tun_net_xmit 62 [ 451.258266][T15315] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 451.260962][ C0] syz_tun: tun_net_xmit 62 [ 451.274389][ C0] syz_tun: tun_net_xmit 62 [ 451.279225][ C0] syz_tun: tun_net_xmit 62 [ 451.284068][ C0] syz_tun: tun_net_xmit 62 [ 451.288891][ C0] syz_tun: tun_net_xmit 62 [ 451.293741][ C0] syz_tun: tun_net_xmit 62 [ 451.298899][ C0] syz_tun: tun_net_xmit 62 [ 451.303719][ C0] syz_tun: tun_net_xmit 62 [ 451.308567][ C0] syz_tun: tun_net_xmit 62 [ 451.313399][ C0] syz_tun: tun_net_xmit 62 [ 451.318158][ C0] syz_tun: tun_net_xmit 62 [ 451.322823][ C0] syz_tun: tun_net_xmit 62 [ 451.327503][ C0] syz_tun: tun_net_xmit 62 [ 451.332658][ C0] syz_tun: tun_net_xmit 62 [ 451.337341][ C0] syz_tun: tun_net_xmit 62 [ 451.338046][T15340] netlink: 'syz.2.2436': attribute type 1 has an invalid length. [ 451.342162][ C0] syz_tun: tun_net_xmit 62 [ 451.350253][T15340] netlink: 'syz.2.2436': attribute type 1 has an invalid length. [ 451.354368][ C0] syz_tun: tun_net_xmit 62 [ 451.354726][ C0] syz_tun: tun_net_xmit 62 [ 451.355039][ C0] syz_tun: tun_net_xmit 62 [ 451.355343][ C0] syz_tun: tun_net_xmit 62 [ 451.363747][T15340] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2436'. [ 451.367701][ C0] syz_tun: tun_net_xmit 62 [ 451.372367][T15340] netlink: 'syz.2.2436': attribute type 1 has an invalid length. [ 451.376839][ C0] syz_tun: tun_net_xmit 62 [ 451.406904][ C0] syz_tun: tun_net_xmit 62 [ 451.411761][ C0] syz_tun: tun_net_xmit 62 [ 451.416545][ C0] syz_tun: tun_net_xmit 62 [ 451.421393][ C0] syz_tun: tun_net_xmit 62 [ 451.426187][ C0] syz_tun: tun_net_xmit 62 [ 451.431041][ C0] syz_tun: tun_net_xmit 62 [ 451.435862][ C0] syz_tun: tun_net_xmit 62 [ 451.440745][ C0] syz_tun: tun_net_xmit 62 [ 451.445595][ C0] syz_tun: tun_net_xmit 62 [ 451.450460][ C0] syz_tun: tun_net_xmit 62 [ 451.455335][ C0] syz_tun: tun_net_xmit 62 [ 451.460485][ C0] syz_tun: tun_net_xmit 62 [ 451.465335][ C0] syz_tun: tun_net_xmit 62 [ 451.470173][ C0] syz_tun: tun_net_xmit 62 [ 451.474844][ C0] syz_tun: tun_net_xmit 62 [ 451.479496][ C0] syz_tun: tun_net_xmit 62 [ 451.484129][ C0] syz_tun: tun_net_xmit 62 [ 451.488876][ C0] syz_tun: tun_net_xmit 62 [ 451.494129][ C0] syz_tun: tun_net_xmit 54 [ 451.608435][ C0] syz_tun: tun_net_xmit 54 [ 451.657047][T15371] gretap2: entered allmulticast mode [ 451.860833][ T29] audit: type=1804 audit(1779723451.124:12): pid=15377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2446" name="/newroot/486/cgroup.controllers" dev="tmpfs" ino=2504 res=1 errno=0 [ 451.911839][T15384] rdma_op ffff888032d9b1f0 conn xmit_rdma 0000000000000000 [ 451.926668][ T29] audit: type=1800 audit(1779723451.124:13): pid=15377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2446" name="cgroup.controllers" dev="tmpfs" ino=2504 res=0 errno=0 [ 451.992348][ T29] audit: type=1804 audit(1779723451.174:14): pid=15377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2446" name="/newroot/486/cgroup.controllers" dev="tmpfs" ino=2504 res=1 errno=0 [ 452.135473][T15398] : renamed from team_slave_1 [ 452.534887][T15419] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 452.548280][ C0] syz_tun: tun_net_xmit 54 [ 452.900852][T15416] ipvlan2: entered promiscuous mode [ 453.134793][T15445] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 453.201352][T15453] batadv1: entered promiscuous mode [ 453.248294][T15453] batadv1: entered allmulticast mode [ 453.589716][T15464] veth0_macvtap: left promiscuous mode [ 454.539336][T15499] __nla_validate_parse: 11 callbacks suppressed [ 454.539354][T15499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2475'. [ 454.576376][T15507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2473'. [ 454.643284][T15499] xt_hashlimit: max too large, truncated to 1048576 [ 454.659233][T15499] No such timeout policy "syz1" [ 454.754213][T15517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.891584][T15523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2480'. [ 454.903025][T15523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2480'. [ 454.904691][T15525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2482'. [ 454.931480][T15523] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2480'. [ 454.957697][T15522] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 455.149012][T15540] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2486'. [ 455.347212][T15547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2487'. [ 455.473933][T15551] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2488'. [ 455.482969][T15553] xt_hashlimit: overflow, rate too high: 0 [ 455.498599][T15551] netlink: 'syz.1.2488': attribute type 9 has an invalid length. [ 455.690932][T15559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2490'. [ 455.837270][T15564] tipc: Resetting bearer [ 456.078674][T15574] netlink: 'syz.4.2497': attribute type 2 has an invalid length. [ 456.134228][T15564] tipc: Disabling bearer [ 456.443238][T15590] tipc: Enabled bearer , priority 0 [ 456.452363][T15590] syzkaller0: entered promiscuous mode [ 456.461232][T15590] syzkaller0: entered allmulticast mode [ 456.497043][T15590] tipc: Resetting bearer [ 456.547265][T15598] netlink: 'syz.4.2506': attribute type 21 has an invalid length. [ 456.555661][T15598] IPv6: NLM_F_CREATE should be specified when creating new route [ 456.605490][T15598] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 457.312986][T15589] tipc: Resetting bearer [ 457.335954][T15589] tipc: Disabling bearer [ 457.507021][T15646] nbd: must specify a size in bytes for the device [ 457.677111][T15662] ieee802154 phy0 wpan0: encryption failed: -22 [ 460.759973][T15686] netlink: 'syz.0.2528': attribute type 83 has an invalid length. [ 460.774364][T15683] __nla_validate_parse: 31 callbacks suppressed [ 460.774390][T15683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2527'. [ 460.777535][T15688] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2530'. [ 460.840014][T15683] 8021q: VLANs not supported on wg1 [ 461.056317][T15697] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 461.080530][T15700] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 461.102427][T15705] xt_hashlimit: overflow, try lower: 6/0 [ 461.117454][T15699] hmac(sha224: entered promiscuous mode [ 461.168862][T15703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2533'. [ 461.322218][T15708] dummy0: left allmulticast mode [ 461.358210][T15708] vlan0: left promiscuous mode [ 461.386411][T15708] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 461.423531][T15708] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 461.503253][T15708] bond0: left promiscuous mode [ 461.535686][T15708] macsec1: left promiscuous mode [ 461.541979][T15708] macsec1: left allmulticast mode [ 461.552995][T15708] bond12: left promiscuous mode [ 461.564959][T15708] bond12: left allmulticast mode [ 461.592638][T15708] gretap2: left allmulticast mode [ 461.603479][T15708] ipvlan2: left promiscuous mode [ 461.824694][ T29] audit: type=1107 audit(1779723461.084:15): pid=15739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='n' [ 461.840398][T15742] netlink: 'syz.1.2541': attribute type 1 has an invalid length. [ 462.062726][T15754] openvswitch: netlink: IP tunnel dst address not specified [ 462.093463][T15753] openvswitch: netlink: IP tunnel dst address not specified [ 462.174992][T15759] netlink: 'syz.0.2545': attribute type 22 has an invalid length. [ 462.187627][ T5771] hid-generic 0005:0458:0101.0002: item fetching failed at offset 0/1 [ 462.197032][ T5771] hid-generic 0005:0458:0101.0002: probe with driver hid-generic failed with error -22 [ 462.366328][T15755] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 462.382477][T15755] vlan2: left allmulticast mode [ 462.389158][T15755] geneve1: left allmulticast mode [ 462.435200][T15755] ip6gre1: left allmulticast mode [ 462.459007][T15755] bond5: left allmulticast mode [ 462.469794][T15755] vlan4: left allmulticast mode [ 462.480264][T15755] gretap0: left allmulticast mode [ 462.491348][T15755] bridge2: left allmulticast mode [ 462.503906][T15755] bond7: left allmulticast mode [ 462.530880][T15755] ip6tnl5: left allmulticast mode [ 462.553062][T15755] ip6gre2: left allmulticast mode [ 462.576119][T15755] ip6erspan0: left allmulticast mode [ 462.591954][T15755] gre1: left allmulticast mode [ 462.604556][T15755] ip6erspan1: left allmulticast mode [ 462.639990][T15749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2543'. [ 462.668616][ T7883] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.687291][ T7883] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 462.725312][ T7883] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 462.771909][ T7883] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.814609][ T7883] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 462.851825][ T7883] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 462.895951][ T7883] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.923558][T15790] netlink: 'syz.2.2551': attribute type 5 has an invalid length. [ 462.940506][ T7883] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 462.959825][ T7883] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 462.969354][T15792] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2552'. [ 462.980098][ T7883] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.006484][ T7883] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 463.014107][T15792] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2552'. [ 463.041528][ T7883] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 463.140980][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2553'. [ 463.246565][T15803] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2555'. [ 463.455417][T15817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2559'. [ 463.654060][T15824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2556'. [ 463.886129][T15832] bridge0: port 1(vlan3) entered blocking state [ 463.892833][T15832] bridge0: port 1(vlan3) entered disabled state [ 463.900664][T15832] vlan3: entered allmulticast mode [ 463.906099][T15832] geneve0: entered allmulticast mode [ 463.926012][T15832] vlan3: entered promiscuous mode [ 463.933642][T15832] geneve0: entered promiscuous mode [ 464.070100][T15845] sctp: [Deprecated]: syz.0.2566 (pid 15845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.070100][T15845] Use struct sctp_sack_info instead [ 464.156373][T15845] netlink: 'syz.0.2566': attribute type 8 has an invalid length. [ 464.175558][T15845] sch_fq: defrate 0 ignored. [ 464.345650][T15859] batman_adv: batadv0: Adding interface: macvtap2 [ 464.355942][T15859] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 464.414077][T15861] netlink: 'syz.0.2570': attribute type 1 has an invalid length. [ 464.599066][T15872] netlink: 'syz.4.2572': attribute type 32 has an invalid length. [ 464.639349][T15872] bond14: option coupled_control: invalid value (12) [ 464.649696][T15872] bond14 (unregistering): Released all slaves [ 465.050012][T15898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.491486][T15866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 467.917425][T15932] __nla_validate_parse: 7 callbacks suppressed [ 467.917442][T15932] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2588'. [ 467.993986][T15932] veth1_to_team: entered promiscuous mode [ 468.018850][T15932] ipvlan1: entered promiscuous mode [ 468.039514][T15932] ipvlan1: left promiscuous mode [ 468.049657][T15942] netlink: 'syz.2.2592': attribute type 1 has an invalid length. [ 468.062223][T15932] veth1_to_team: left promiscuous mode [ 468.096857][T15943] netlink: 'syz.1.2591': attribute type 12 has an invalid length. [ 468.153794][T15942] bond10: entered promiscuous mode [ 468.169396][T15942] 8021q: adding VLAN 0 to HW filter on device bond10 [ 468.265795][T15942] bond10: (slave bridge3): making interface the new active one [ 468.306976][T15942] bridge3: entered promiscuous mode [ 468.338418][T15942] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 469.058128][T15974] pim6reg: left allmulticast mode [ 469.200700][T15986] netlink: 'syz.2.2601': attribute type 1 has an invalid length. [ 469.249717][T15986] bond11: entered promiscuous mode [ 469.257266][T15985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2601'. [ 469.269401][T15990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2601'. [ 469.269623][T15986] 8021q: adding VLAN 0 to HW filter on device bond11 [ 469.309689][T15990] bond11: entered allmulticast mode [ 469.387130][T15985] bond11: (slave bridge4): making interface the new active one [ 469.404144][T15996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2602'. [ 469.453138][T15985] bridge4: entered promiscuous mode [ 469.476361][T15985] bridge4: entered allmulticast mode [ 469.528596][T15985] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 469.546936][T16004] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 469.554291][T16004] IPv6: NLM_F_CREATE should be set when creating new route [ 469.566781][ T4945] block nbd2: Receive control failed (result -32) [ 469.574609][ T5629] block nbd2: Receive control failed (result -32) [ 469.739051][T16010] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 469.771355][T16007] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2605'. [ 469.787428][T16007] openvswitch: netlink: Key type 769 is out of range max 32 [ 470.094226][T16017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2608'. [ 470.239032][T16030] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2613'. [ 470.262977][T16030] veth1_to_team: entered promiscuous mode [ 470.345425][T16030] veth1_to_team: left promiscuous mode [ 470.482210][T16038] xt_TCPMSS: Only works on TCP SYN packets [ 470.517607][T16040] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2615'. [ 470.594161][T16040] gretap0: entered promiscuous mode [ 470.637609][T16040] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2615'. [ 470.678589][T16040] 0{X: renamed from gretap0 [ 470.696813][T16040] 0{X: left promiscuous mode [ 470.702140][T16040] 0{X: entered allmulticast mode [ 470.723694][T16040] batman_adv: batadv0: Interface activated: vlan2 [ 470.730729][T16040] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 471.051079][T16065] netlink: 'syz.0.2621': attribute type 11 has an invalid length. [ 471.061456][T16065] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.2621'. [ 471.459844][T16061] erspan1: entered allmulticast mode [ 471.691432][T16082] syzkaller0: entered promiscuous mode [ 471.702211][T16082] syzkaller0: entered allmulticast mode [ 471.747832][ T5629] block nbd3: Receive control failed (result -32) [ 471.761261][ T4945] block nbd3: Receive control failed (result -32) [ 474.596271][T16107] tap0: tun_chr_ioctl cmd 1074025692 [ 474.806159][T16118] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 475.111667][T16136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2638'. [ 475.126237][T16129] netlink: 'syz.0.2636': attribute type 1 has an invalid length. [ 475.155614][T16129] netlink: 'syz.0.2636': attribute type 2 has an invalid length. [ 475.210968][T16136] 8021q: adding VLAN 0 to HW filter on device bond15 [ 475.217571][T16144] netlink: 'syz.1.2640': attribute type 11 has an invalid length. [ 475.226776][T16144] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2640'. [ 475.247190][T16146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2638'. [ 475.347445][T16142] 8021q: adding VLAN 0 to HW filter on device bond16 [ 475.383534][T16142] bond15: (slave bond16): Enslaving as an active interface with an up link [ 476.010673][T16146] bond15 (unregistering): (slave bond16): Releasing backup interface [ 476.269074][T16146] bond15 (unregistering): Released all slaves [ 476.286236][T16150] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 476.296919][T16150] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 476.308710][T16150] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 480.948225][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 501.430096][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 515.116688][T16179] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2645'. [ 515.162563][T16179] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2645'. [ 515.253804][T16179] netlink: 'syz.2.2645': attribute type 4 has an invalid length. [ 515.286270][T16191] netlink: 'syz.4.2648': attribute type 1 has an invalid length. [ 515.428774][T16191] bond14: entered promiscuous mode [ 515.445977][T16191] 8021q: adding VLAN 0 to HW filter on device bond14 [ 515.504664][T16194] 8021q: adding VLAN 0 to HW filter on device bond15 [ 515.514806][T16194] bond14: (slave bond15): making interface the new active one [ 515.523673][T16194] bond15: entered promiscuous mode [ 515.530054][T16194] bond14: (slave bond15): Enslaving as an active interface with an up link [ 515.550805][T16209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2651'. [ 515.736424][T16221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.129533][T16249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2664'. [ 516.271651][T16256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2667'. [ 516.295408][T16258] netlink: 'syz.3.2665': attribute type 2 has an invalid length. [ 516.305826][T16256] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 516.519086][T16270] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2669'. [ 516.522278][T16268] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2669'. [ 516.700717][T16278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2672'. [ 516.750289][T16278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2672'. [ 516.787621][T16282] tipc: Enabling of bearer rejected, failed to enable media [ 516.828155][T16285] netlink: 'syz.0.2674': attribute type 10 has an invalid length. [ 516.869234][T16289] netlink: 'syz.0.2674': attribute type 10 has an invalid length. [ 517.136064][T16296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2676'. [ 517.474724][T16310] veth21: entered allmulticast mode [ 517.534304][T16310] bond9: (slave veth21): Enslaving as an active interface with an up link [ 517.548760][ T29] audit: type=1800 audit(1779723516.804:16): pid=16314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2680" name=573B960713188F22BC0D675F3DA4BDADC7D8 dev="tmpfs" ino=2760 res=0 errno=0 [ 517.681592][T16316] bond15 (unregistering): Released all slaves [ 517.868374][T16331] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20004 [ 518.448598][T16351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.543985][T16351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.638746][T16351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.496609][T16407] ip6gre1: entered promiscuous mode [ 519.509328][T16407] ip6gre1: entered allmulticast mode [ 519.553328][T16409] 0{X: entered promiscuous mode [ 519.993567][ T7915] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.021336][ T7915] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.045525][ T7915] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.062260][ T7915] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.078783][ T7915] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.087519][ T7915] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.109347][ T7915] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.126020][ T7915] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.255940][T16449] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 520.381575][T16456] netlink: get zone limit has 4 unknown bytes [ 520.883070][T16484] dvmrp0: entered allmulticast mode [ 520.977548][T16489] __nla_validate_parse: 7 callbacks suppressed [ 520.977565][T16489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2718'. [ 521.045911][T16489] veth1_to_team: entered promiscuous mode [ 521.078448][T16489] veth1_to_team: left promiscuous mode [ 521.088740][T16493] netlink: 'syz.4.2719': attribute type 1 has an invalid length. [ 521.173930][T16493] bond16: entered promiscuous mode [ 521.212526][T16493] 8021q: adding VLAN 0 to HW filter on device bond16 [ 521.231793][T16500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2720'. [ 521.266215][T16503] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 521.300265][T16493] ipvlan2: entered allmulticast mode [ 521.306372][T16493] bond16: entered allmulticast mode [ 521.348380][T16493] bond16: (slave bridge6): making interface the new active one [ 521.361464][T16493] bridge6: entered promiscuous mode [ 521.370021][T16493] bridge6: entered allmulticast mode [ 521.385113][T16493] bond16: (slave bridge6): Enslaving as an active interface with an up link [ 521.665948][T16532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2728'. [ 521.696167][T16532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2728'. [ 522.073031][T16552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2734'. [ 522.134860][T16552] netlink: 840 bytes leftover after parsing attributes in process `syz.1.2734'. [ 522.163165][T16557] netlink: 'syz.0.2733': attribute type 32 has an invalid length. [ 522.195388][T16558] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 522.215100][T16558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.256659][T16561] netlink: 'syz.3.2736': attribute type 21 has an invalid length. [ 522.264842][T16561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 522.272134][T16561] IPv6: NLM_F_CREATE should be set when creating new route [ 522.279460][T16561] IPv6: NLM_F_CREATE should be set when creating new route [ 522.286721][T16561] IPv6: NLM_F_CREATE should be set when creating new route [ 522.315372][T16559] tipc: Resetting bearer [ 522.321647][T16559] tipc: Resetting bearer [ 522.476142][T16568] Cannot find set identified by id 65534 to match [ 522.489493][T16571] netlink: 'syz.0.2739': attribute type 3 has an invalid length. [ 522.585619][T16577] xt_TPROXY: Can be used only with -p tcp or -p udp [ 522.635896][T16580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2742'. [ 522.669599][T16582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2743'. [ 522.770901][T16585] syzkaller0: entered promiscuous mode [ 522.776801][T16585] syzkaller0: entered allmulticast mode [ 523.278843][ T29] audit: type=1107 audit(1779723522.534:17): pid=16610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 523.424850][T16617] gtp2: entered promiscuous mode [ 523.426204][T16621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2755'. [ 523.443067][T16617] gtp2: entered allmulticast mode [ 523.470716][T16617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2754'. [ 523.807511][T16637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.219733][T16650] xt_hashlimit: max too large, truncated to 1048576 [ 524.387862][T16652] team0 (unregistering): left promiscuous mode [ 524.403011][T16652] team_slave_0: left promiscuous mode [ 524.414842][T16652] team_slave_1: left promiscuous mode [ 524.434452][T16652] team0 (unregistering): Port device team_slave_0 removed [ 524.456303][T16652] team0 (unregistering): Port device team_slave_1 removed [ 524.644858][T16667] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 524.666840][T16667] xt_hashlimit: size too large, truncated to 1048576 [ 525.111238][T16693] netlink: 'syz.1.2772': attribute type 1 has an invalid length. [ 525.322359][T16698] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 525.344050][T16698] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 525.374382][T16708] netlink: 'syz.3.2777': attribute type 2 has an invalid length. [ 525.394475][T16708] netlink: 'syz.3.2777': attribute type 2 has an invalid length. [ 525.416473][T16711] netlink: 'syz.4.2778': attribute type 4 has an invalid length. [ 525.436403][T16708] netlink: 'syz.3.2777': attribute type 2 has an invalid length. [ 525.446439][T16693] bond11: (slave bridge7): Enslaving as an active interface with a down link [ 525.447069][T16708] sctp: [Deprecated]: syz.3.2777 (pid 16708) Use of int in max_burst socket option deprecated. [ 525.447069][T16708] Use struct sctp_assoc_value instead [ 525.473919][T16703] 8021q: adding VLAN 0 to HW filter on device bond11 [ 526.133382][T16731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 526.394986][T16741] __nla_validate_parse: 12 callbacks suppressed [ 526.395004][T16741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2788'. [ 526.426320][T16741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.442966][T16741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.457390][T16741] batman_adv: batadv0: Removing interface: macvtap2 [ 527.285283][T16768] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2795'. [ 527.295978][T16768] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2795'. [ 527.306382][T16771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2793'. [ 527.354510][T16774] pim6reg: entered allmulticast mode [ 527.371368][T16774] pim6reg: left allmulticast mode [ 527.645538][T16782] tipc: Enabled bearer , priority 0 [ 527.804932][T16801] netlink: 'syz.0.2804': attribute type 10 has an invalid length. [ 527.816012][T16782] syzkaller0: entered promiscuous mode [ 527.833379][T16782] syzkaller0: entered allmulticast mode [ 527.845292][T16782] tipc: Resetting bearer [ 528.044010][ T7883] tipc: Resetting bearer [ 528.056893][T16781] tipc: Resetting bearer [ 530.926931][T16781] tipc: Disabling bearer [ 531.210348][T16839] netlink: 'syz.3.2810': attribute type 13 has an invalid length. [ 531.314435][T16831] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2808'. [ 531.414075][T16847] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2812'. [ 531.430558][T16848] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2812'. [ 531.503342][T16853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2814'. [ 532.535817][T16911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2829'. [ 532.614659][T16911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2829'. [ 532.828498][T16919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 532.845375][T16922] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2835'. [ 532.955735][T16927] openvswitch: netlink: Duplicate or invalid key (type 0). [ 532.984461][T16927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.036155][T16935] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2838'. [ 533.237526][T16948] tipc: Enabled bearer , priority 0 [ 533.310078][T16947] tipc: Disabling bearer [ 533.399455][T16954] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2846'. [ 533.514953][T16963] tipc: Enabled bearer , priority 0 [ 533.530208][T16967] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2850'. [ 533.531399][T16963] erspan2: entered promiscuous mode [ 533.546789][T16963] erspan2: entered allmulticast mode [ 533.711368][T16963] syzkaller0: entered promiscuous mode [ 533.717161][T16963] syzkaller0: entered allmulticast mode [ 533.724093][T16963] tipc: Resetting bearer [ 533.752320][T16962] tipc: Resetting bearer [ 533.825434][T16980] xt_recent: Unsupported userspace flags (000000b1) [ 533.870500][T16980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2853'. [ 536.465769][T16962] tipc: Disabling bearer [ 536.564574][T16998] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2858'. [ 536.575422][T16998] openvswitch: netlink: Flow key attr not present in new flow. [ 537.014223][T17028] syzkaller1: entered promiscuous mode [ 537.022340][T17028] syzkaller1: entered allmulticast mode [ 537.098503][T17030] netlink: 'syz.2.2868': attribute type 1 has an invalid length. [ 537.153785][T17033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2870'. [ 537.226601][T17030] 8021q: adding VLAN 0 to HW filter on device bond12 [ 537.526540][T17057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2876'. [ 537.902710][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2879'. [ 537.998351][T17085] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2882'. [ 539.115260][T17093] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2885'. [ 539.177610][T17105] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2888'. [ 539.373554][T17114] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2890'. [ 539.404108][T17114] bond1: (slave bond0): Removing an active aggregator [ 539.435608][T17114] bond1: (slave bond0): Releasing backup interface [ 539.490865][T17125] netlink: 'syz.3.2894': attribute type 1 has an invalid length. [ 539.532779][T17114] bond0 (unregistering): (slave ): Releasing backup interface [ 539.554302][T17114] : left promiscuous mode [ 539.573194][T17114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.603834][T17114] bond_slave_1: left promiscuous mode [ 539.622691][T17114] bond0 (unregistering): Released all slaves [ 539.639331][T17135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.681368][T17125] 8021q: adding VLAN 0 to HW filter on device bond15 [ 539.704648][T17132] IPVS: set_ctl: invalid protocol: 50 42.1.1.1:20000 [ 539.894478][T17142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2898'. [ 540.029667][T17159] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2903'. [ 540.553205][T17190] : renamed from bond_slave_0 [ 562.869301][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.783678][T17210] __nla_validate_parse: 7 callbacks suppressed [ 564.783696][T17210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2915'. [ 565.164333][T17226] bond12: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 565.237776][T17226] bond12 (unregistering): Released all slaves [ 565.329493][ T5629] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 565.347633][ T5629] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 565.358531][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 565.362040][T17230] batman_adv: batadv0: Interface deactivated: vlan2 [ 565.379116][ T5629] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 565.399285][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 565.529147][T17230] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.620087][T17243] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 565.702659][T17230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.743677][T17230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.931050][ T7880] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.969981][ T7880] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.999519][ T7880] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.028510][ T7880] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.096652][T17268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2926'. [ 566.128375][T17268] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2926'. [ 566.194188][T17272] bond10: (slave lo): Releasing backup interface [ 566.249291][T17272] bond10: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 566.272575][T17272] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 566.300299][T17275] tipc: Enabled bearer , priority 0 [ 566.318894][T17272] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 566.339829][T17278] syzkaller0: entered promiscuous mode [ 566.352669][T17278] syzkaller0: entered allmulticast mode [ 566.364394][T17282] tipc: Enabling of bearer rejected, already enabled [ 566.374428][T17272] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 566.405593][T17272] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 566.431723][T17272] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 566.460499][T17289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2931'. [ 566.482140][T17290] xt_CT: You must specify a L4 protocol and not use inversions on it [ 566.511906][T17272] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 566.528191][T17272] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 566.546424][T17275] tipc: Resetting bearer [ 566.565621][T17272] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 566.585334][T17272] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 566.608730][T17274] tipc: Resetting bearer [ 566.633041][T17274] tipc: Disabling bearer [ 566.713220][T17272] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 566.940056][T17310] netlink: 47 bytes leftover after parsing attributes in process `syz.3.2936'. [ 566.960403][T17313] netlink: 'syz.2.2934': attribute type 12 has an invalid length. [ 567.022543][T17306] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 567.090783][T17306] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2935'. [ 567.342919][T17235] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.350383][T17235] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.370560][T17235] bridge_slave_0: entered allmulticast mode [ 567.375754][T17339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2941'. [ 567.381043][T17235] bridge_slave_0: entered promiscuous mode [ 567.431590][ T5629] Bluetooth: hci5: command tx timeout [ 567.455317][T17345] sctp: [Deprecated]: syz.3.2942 (pid 17345) Use of struct sctp_assoc_value in delayed_ack socket option. [ 567.455317][T17345] Use struct sctp_sack_info instead [ 567.479394][T17235] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.486748][T17235] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.494436][T17235] bridge_slave_1: entered allmulticast mode [ 567.501977][T17235] bridge_slave_1: entered promiscuous mode [ 567.534391][T17346] 8021q: adding VLAN 0 to HW filter on device bond13 [ 567.546307][T17346] bond13 (unregistering): Released all slaves [ 567.591585][T17343] 8021q: adding VLAN 0 to HW filter on device  [ 567.687788][T17235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.719638][T17235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.825031][T17235] team0: Port device team_slave_0 added [ 567.851825][T17235] team0: Port device team_slave_1 added [ 567.899467][T17357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2944'. [ 567.924188][T17235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.936423][T17235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.965406][T17235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.989450][T17235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.996545][T17235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.023359][T17235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.043302][T17357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2944'. [ 568.061248][T17364] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2946'. [ 568.151126][T17235] hsr_slave_0: entered promiscuous mode [ 568.167966][T17235] hsr_slave_1: entered promiscuous mode [ 568.186445][T17235] debugfs: 'hsr0' already exists in 'hsr' [ 568.219227][T17235] Cannot create hsr debugfs directory [ 568.640301][T17398] netlink: 'syz.2.2953': attribute type 1 has an invalid length. [ 568.642758][T17395] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 569.090727][T17415] tipc: Enabled bearer , priority 0 [ 569.102406][T17235] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 569.122515][T17235] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 569.147567][T17235] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 569.161164][T17235] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 569.170979][T17415] tipc: Disabling bearer [ 569.186751][T17235] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 569.205637][T17235] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 569.213857][T17235] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 569.244486][T17235] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 569.272410][T17421] xt_l2tp: wrong L2TP version: 0 [ 569.283889][T17420] xt_l2tp: wrong L2TP version: 0 [ 569.351093][T17432] syzkaller0: entered promiscuous mode [ 569.356944][T17432] syzkaller0: entered allmulticast mode [ 569.509392][ T5629] Bluetooth: hci5: command tx timeout [ 569.679570][T17452] ip6gre2: entered promiscuous mode [ 569.700548][T17452] ip6gre2: entered allmulticast mode [ 569.748718][T17235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.792095][T17452] xt_hashlimit: max too large, truncated to 1048576 [ 569.881954][T17235] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.918410][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.925650][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.975564][T17468] netlink: 'syz.2.2974': attribute type 6 has an invalid length. [ 569.996307][ T7885] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.003597][ T7885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.625993][T17505] __nla_validate_parse: 9 callbacks suppressed [ 570.626012][T17505] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2980'. [ 571.064369][T17235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.392108][T17543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2989'. [ 571.518091][T17235] veth0_vlan: entered promiscuous mode [ 571.558634][T17235] veth1_vlan: entered promiscuous mode [ 571.581537][T17553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 571.588877][T17553] IPv6: NLM_F_CREATE should be set when creating new route [ 571.596169][T17553] IPv6: NLM_F_CREATE should be set when creating new route [ 571.603960][ T5629] Bluetooth: hci5: command tx timeout [ 571.636423][T17235] veth0_macvtap: entered promiscuous mode [ 571.683267][T17235] veth1_macvtap: entered promiscuous mode [ 571.741379][T17235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.760177][T17235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.786245][ T7886] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.800156][ T7886] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.811011][ T7886] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.824966][ T7886] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.025796][T17573] xt_hashlimit: size too large, truncated to 1048576 [ 573.678488][ T5629] Bluetooth: hci5: command tx timeout [ 574.382474][T15771] hid-generic 0005:10CF:7FFF.0003: item fetching failed at offset 0/1 [ 574.395503][T15771] hid-generic 0005:10CF:7FFF.0003: probe with driver hid-generic failed with error -22 [ 574.679811][T17555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 574.795628][ T7880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.835121][ T7880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.944365][ T7883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.971928][ T7883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.012362][T17597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2998'. [ 575.466022][T17614] syzkaller0: entered promiscuous mode [ 575.488028][T17614] syzkaller0: entered allmulticast mode [ 575.723683][ T4945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 575.762330][ T4945] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 575.774589][ T4945] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 575.786923][ T4945] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 575.799128][ T4945] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 576.392920][T17638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3007'. [ 576.661270][T17650] net_ratelimit: 25 callbacks suppressed [ 576.661289][T17650] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 576.946215][T17658] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 576.967476][T17658] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 576.981488][T17658] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 577.422493][T17681] dvmrp0: entered allmulticast mode [ 577.460543][T17684] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 577.729999][T17624] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.754270][T17624] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.776039][T17624] bridge_slave_0: entered allmulticast mode [ 577.797103][T17624] bridge_slave_0: entered promiscuous mode [ 577.830568][T17624] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.850108][T17624] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.873093][T17624] bridge_slave_1: entered allmulticast mode [ 577.897573][T17624] bridge_slave_1: entered promiscuous mode [ 577.909216][ T4945] Bluetooth: hci4: command tx timeout [ 578.035552][T17624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.064561][T17624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.108051][T17712] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 578.116709][T17624] team0: Port device team_slave_0 added [ 578.135265][T17624] team0: Port device team_slave_1 added [ 578.192728][T17624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.209603][T17624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.290317][T17624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.460732][T17624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.506434][T17624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.623662][T17624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.652777][T17719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3026'. [ 578.806701][T17729] syzkaller0: entered promiscuous mode [ 578.825844][T17729] syzkaller0: entered allmulticast mode [ 578.937369][T17748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3032'. [ 578.948631][T17746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3031'. [ 579.072314][T17752] xt_CT: You must specify a L4 protocol and not use inversions on it [ 579.998125][ T4945] Bluetooth: hci4: command tx timeout [ 581.575116][T17624] hsr_slave_0: entered promiscuous mode [ 581.581760][T17624] hsr_slave_1: entered promiscuous mode [ 581.587862][T17624] debugfs: 'hsr0' already exists in 'hsr' [ 581.594389][T17624] Cannot create hsr debugfs directory [ 581.603039][T17748] kthread_run failed with err -4 [ 581.700375][T17762] openvswitch: netlink: Multiple metadata blocks provided [ 581.708896][T17762] sctp: [Deprecated]: syz.3.3035 (pid 17762) Use of int in maxseg socket option. [ 581.708896][T17762] Use struct sctp_assoc_value instead [ 581.765264][T17753] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 581.778888][T17753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 581.792991][T17753] hsr0: left promiscuous mode [ 581.816561][T17753] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 581.835257][T17753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 581.845250][T17753] vlan2: left promiscuous mode [ 581.850584][T17770] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3034'. [ 581.861989][T17753] geneve1: left promiscuous mode [ 581.869369][T17753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 581.881708][T17753] veth0_to_team: entered promiscuous mode [ 581.893146][T17753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.902906][T17753] 8021q: adding VLAN 0 to HW filter on device bond3 [ 581.915857][T17753] ip6gre1: left promiscuous mode [ 581.922381][T17753] 8021q: adding VLAN 0 to HW filter on device bond4 [ 581.930430][T17753] 8021q: adding VLAN 0 to HW filter on device bond5 [ 581.937801][T17753] vlan4: left promiscuous mode [ 581.942820][T17753] gretap0: left promiscuous mode [ 581.951472][T17753] 8021q: adding VLAN 0 to HW filter on device bond6 [ 581.959139][T17753] bridge2: left promiscuous mode [ 581.964919][T17753] sit1: left promiscuous mode [ 581.986709][T17753] bond7: left promiscuous mode [ 581.992505][T17753] 8021q: adding VLAN 0 to HW filter on device bond7 [ 582.002693][T17753] 8021q: adding VLAN 0 to HW filter on device bond8 [ 582.013301][T17753] 8021q: adding VLAN 0 to HW filter on device eth0 [ 582.022575][T17753] 8021q: adding VLAN 0 to HW filter on device eth1 [ 582.031742][T17753] 8021q: adding VLAN 0 to HW filter on device eth2 [ 582.040924][T17753] 8021q: adding VLAN 0 to HW filter on device eth3 [ 582.053355][T17753] ip6gre2: left promiscuous mode [ 582.059446][T17753] bond9: left promiscuous mode [ 582.064504][T17753] 8021q: adding VLAN 0 to HW filter on device bond9 [ 582.072909][T17753] ip6erspan0: left promiscuous mode [ 582.079920][ T5629] Bluetooth: hci4: command tx timeout [ 582.103332][T17753] bond10: left promiscuous mode [ 582.108531][T17753] bridge3: left promiscuous mode [ 582.114991][T17753] bond11: left promiscuous mode [ 582.119970][T17753] bridge4: left promiscuous mode [ 582.126782][T17753] gtp2: left promiscuous mode [ 582.230762][ T7886] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.261964][ T7886] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.289572][ T7886] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 582.316797][ T7886] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.350339][T17783] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3039'. [ 582.359272][T17774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3038'. [ 582.374771][ T7886] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.404230][ T7886] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 582.427542][ T7885] syz_tun: tun_net_xmit 90 [ 582.448965][T15763] syz_tun: tun_net_xmit 110 [ 582.492220][T17791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3038'. [ 582.533777][ T7886] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.570091][ T7886] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.585639][ T7886] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 582.614960][ T7886] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.639450][T15763] syz_tun: tun_net_xmit 110 [ 582.649742][ T7886] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.674093][ T7886] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 582.732678][T17802] veth1: Caught tx_queue_len zero misconfig [ 582.922637][T17804] syzkaller0: entered promiscuous mode [ 582.929759][T17804] syzkaller0: entered allmulticast mode [ 582.945258][ C0] syz_tun: tun_net_xmit 90 [ 582.973716][T17820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 582.989074][T17820] netlink: 'syz.1.3048': attribute type 10 has an invalid length. [ 583.003166][ T7880] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 583.011014][ T7880] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 583.028138][ T5742] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 583.055807][T17827] netlink: 'syz.1.3048': attribute type 15 has an invalid length. [ 583.080458][T17827] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3048'. [ 583.116086][ T7883] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 583.152319][T15763] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 583.559922][ T7915] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 583.748210][ T5742] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 583.789100][ T5742] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 584.069525][T15779] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 584.148342][ T4945] Bluetooth: hci4: command tx timeout [ 584.632116][ T1158] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 585.678215][T17804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 585.734568][T17624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 585.785725][T17624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 585.896468][T17624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 585.945764][T17624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 585.964170][T17624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 585.967677][T17856] xt_recent: Unsupported userspace flags (000000b1) [ 586.014307][T17624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 586.040245][T17624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 586.065304][T17624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 586.088421][T17860] No such timeout policy "syz1" [ 586.168053][T17867] tipc: Enabled bearer , priority 10 [ 586.702553][T17895] syz_tun: tun_net_xmit 34 [ 586.737134][T17624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.820256][T17624] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.883869][ T7880] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.891113][ T7880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.956880][ T7880] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.964136][ T7880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.227126][T17913] sctp: [Deprecated]: syz.4.3072 (pid 17913) Use of int in max_burst socket option. [ 587.227126][T17913] Use struct sctp_assoc_value instead [ 587.485879][T17929] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3073'. [ 587.806448][T17951] x_tables: unsorted underflow at hook 4 [ 587.835491][T17954] netlink: 'syz.1.3080': attribute type 6 has an invalid length. [ 587.915035][T17960] netlink: 'syz.1.3080': attribute type 6 has an invalid length. [ 588.069484][T17970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3083'. [ 588.143334][T17624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.169543][T17970] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3083'. [ 588.216224][T17979] vlan0: entered promiscuous mode [ 588.231973][T17979] team0: entered promiscuous mode [ 588.244510][T17979] bridge2: entered promiscuous mode [ 588.356447][T17624] veth0_vlan: entered promiscuous mode [ 588.418941][T17624] veth1_vlan: entered promiscuous mode [ 588.525035][T17997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3090'. [ 588.565193][T17624] veth0_macvtap: entered promiscuous mode [ 588.627138][T17624] veth1_macvtap: entered promiscuous mode [ 588.720804][T18007] netlink: 'syz.1.3089': attribute type 1 has an invalid length. [ 588.724924][T17624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.811804][T18012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3093'. [ 588.855523][T18007] bond13: entered promiscuous mode [ 588.868400][ C1] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 588.868419][ C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 588.871803][T18007] 8021q: adding VLAN 0 to HW filter on device bond13 [ 588.923753][T18020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3093'. [ 588.934317][T17624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.017788][T18016] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3093'. [ 589.119335][ T7880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.147864][ T7880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.176691][ T7880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.206513][ T7880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.441406][ T7886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.471877][ T7886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.549511][ T7885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.560342][ T7885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.676012][T18047] vlan2: entered promiscuous mode [ 589.700215][T18047] gretap0: entered promiscuous mode [ 589.707752][T18047] vlan2: entered allmulticast mode [ 589.729598][T18047] gretap0: entered allmulticast mode [ 590.234820][T18076] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3110'. [ 590.330473][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 590.346551][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 590.359358][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 590.376121][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 590.386393][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 590.737365][T18103] nicvf0: tun_chr_ioctl cmd 1074025677 [ 590.762816][T18103] nicvf0: linktype set to 1 [ 590.963001][T18121] netlink: 'syz.3.3118': attribute type 7 has an invalid length. [ 591.021244][T18121] tipc: Disabling bearer [ 591.192954][T18121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3118'. [ 591.290919][T18137] geneve3: entered allmulticast mode [ 591.382793][T18081] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.390078][T18081] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.397530][T18081] bridge_slave_0: entered allmulticast mode [ 591.405981][T18081] bridge_slave_0: entered promiscuous mode [ 591.418874][T18081] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.426224][T18081] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.434245][T18081] bridge_slave_1: entered allmulticast mode [ 591.441555][T18081] bridge_slave_1: entered promiscuous mode [ 591.473273][T18081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.485866][T18081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.523116][T18081] team0: Port device team_slave_0 added [ 591.531385][T18081] team0: Port device team_slave_1 added [ 591.557173][T18081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.564177][T18081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.590576][T18081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.604189][T18081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.611578][T18081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.637849][T18081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.682545][T18081] hsr_slave_0: entered promiscuous mode [ 591.690009][T18081] hsr_slave_1: entered promiscuous mode [ 591.696182][T18081] debugfs: 'hsr0' already exists in 'hsr' [ 591.702063][T18081] Cannot create hsr debugfs directory [ 592.468249][ T5629] Bluetooth: hci0: command tx timeout [ 593.565981][T18092] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 593.624688][T18081] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 593.641530][T18081] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 593.660994][T18081] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 593.718234][T18081] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 593.752976][T18081] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 593.754959][T18145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3121'. [ 593.808757][T18151] raw_sendmsg: syz.3.3120 forgot to set AF_INET. Fix it! [ 593.813985][T18081] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 593.831446][T18081] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 593.852279][T18081] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 593.881048][T18153] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3122'. [ 594.124362][T18173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3126'. [ 594.316939][T18176] bond1: entered allmulticast mode [ 594.351289][T18176] 8021q: adding VLAN 0 to HW filter on device bond1 [ 594.416816][T18181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3127'. [ 594.454139][T18081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.531886][T18081] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.548395][ T5629] Bluetooth: hci0: command tx timeout [ 594.587408][ T7915] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.594610][ T7915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.725234][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.732446][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.758127][T18200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3130'. [ 595.060569][T18217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3133'. [ 595.077009][T18217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3133'. [ 595.323489][T18220] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.331209][T18220] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.456051][T18236] netlink: 'syz.0.3137': attribute type 1 has an invalid length. [ 595.495495][T18236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3137'. [ 595.508461][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 595.573150][T18220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.603779][T18220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.923805][T18220] vlan2: left promiscuous mode [ 595.929812][T18220] gretap0: left promiscuous mode [ 595.935166][T18220] vlan2: left allmulticast mode [ 595.945177][T18220] gretap0: left allmulticast mode [ 595.972462][ T7882] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.005015][ T7882] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.130529][ T7882] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.149242][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 596.163178][ T7882] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.638649][ T5629] Bluetooth: hci0: command tx timeout [ 596.800907][T18277] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20002 [ 597.098696][T18284] team0: entered allmulticast mode [ 597.105798][T18284] team_slave_0: entered allmulticast mode [ 597.114688][T18284] team_slave_1: entered allmulticast mode [ 597.134862][T18081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.341164][T18081] veth0_vlan: entered promiscuous mode [ 597.407926][T18081] veth1_vlan: entered promiscuous mode [ 597.428148][ C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 597.512812][T18081] veth0_macvtap: entered promiscuous mode [ 597.574868][T18081] veth1_macvtap: entered promiscuous mode [ 597.598220][T18081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.610914][T18081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.687828][ T75] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.753350][ T440] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.851456][ T440] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.905929][ T440] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.214105][T18333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3159'. [ 598.265110][T18328] syzkaller0: entered promiscuous mode [ 598.276756][T18328] syzkaller0: entered allmulticast mode [ 598.327449][ T7915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.359776][ T7915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.463674][ T7886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.480466][ T7886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.489222][T18337] tipc: Enabled bearer , priority 0 [ 598.507234][T18337] syzkaller0: entered promiscuous mode [ 598.523515][T18337] syzkaller0: entered allmulticast mode [ 598.584916][T18336] tipc: Resetting bearer [ 598.660113][T18343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3104'. [ 598.676326][T18336] tipc: Disabling bearer [ 598.707693][T18347] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 598.719387][ T5629] Bluetooth: hci0: command tx timeout [ 599.039577][T18360] IPVS: Error connecting to the multicast addr [ 599.289246][ T4945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 599.306653][ T4945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 599.315748][ T4945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 599.324690][ T4945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 599.327418][T18366] netlink: 'syz.1.3168': attribute type 12 has an invalid length. [ 599.350692][ T4945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 599.390945][T18366] __nla_validate_parse: 1 callbacks suppressed [ 599.390962][T18366] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3168'. [ 599.697417][ T5632] syz_tun (unregistering): left allmulticast mode [ 599.960032][T18390] netlink: 'syz.1.3173': attribute type 83 has an invalid length. [ 599.961606][T18371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3169'. [ 599.990139][T18371] openvswitch: netlink: Invalid VLAN frame [ 599.990758][T18391] netlink: 'syz.1.3173': attribute type 1 has an invalid length. [ 600.018495][T18391] netlink: 'syz.1.3173': attribute type 2 has an invalid length. [ 600.219390][T18396] tipc: Started in network mode [ 600.233051][T18396] tipc: Node identity 565faa695ce2, cluster identity 4711 [ 600.249229][T18396] tipc: Enabled bearer , priority 0 [ 600.289513][T18397] syzkaller0: entered promiscuous mode [ 600.305740][T18397] syzkaller0: entered allmulticast mode [ 600.400564][T18396] tipc: Resetting bearer [ 600.435416][T18395] tipc: Resetting bearer [ 600.475883][T18395] tipc: Disabling bearer [ 600.671171][T18404] Bluetooth: MGMT ver 1.23 [ 600.795068][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880259fc000: rx timeout, send abort [ 600.804347][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880259fc000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 600.979883][T18365] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.987709][T18365] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.995651][T18365] bridge_slave_0: entered allmulticast mode [ 601.003820][T18365] bridge_slave_0: entered promiscuous mode [ 601.014220][T18365] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.022015][T18365] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.030452][T18365] bridge_slave_1: entered allmulticast mode [ 601.038635][T18365] bridge_slave_1: entered promiscuous mode [ 601.045911][T18413] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3178'. [ 601.097035][T18365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.119947][T18365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.227186][T18365] team0: Port device team_slave_0 added [ 601.250782][T18365] team0: Port device team_slave_1 added [ 601.345176][T18365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.363268][T18365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.430664][ T4945] Bluetooth: hci1: command tx timeout [ 601.438007][T18365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.473223][T18365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.482003][T18365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.508640][T18365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.682646][T18427] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.690397][T18427] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.853067][T18427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.880082][T18427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.130470][T18421] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 602.143280][ T440] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.171864][ T440] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.210291][ T440] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.257178][ T440] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.406480][T18365] hsr_slave_0: entered promiscuous mode [ 602.420742][T18365] hsr_slave_1: entered promiscuous mode [ 602.434959][T18365] debugfs: 'hsr0' already exists in 'hsr' [ 602.441018][T18365] Cannot create hsr debugfs directory [ 602.721068][T18450] netlink: 41 bytes leftover after parsing attributes in process `syz.4.3189'. [ 602.745185][T18450] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3189'. [ 602.775668][T18450] netlink: 41 bytes leftover after parsing attributes in process `syz.4.3189'. [ 602.786062][T18451] netlink: 'syz.4.3189': attribute type 21 has an invalid length. [ 602.799077][T18451] netlink: 'syz.4.3189': attribute type 6 has an invalid length. [ 602.806855][T18453] netlink: 34 bytes leftover after parsing attributes in process `syz.1.3190'. [ 602.819916][ T4945] block nbd4: Receive control failed (result -32) [ 602.820756][ T5629] block nbd4: Receive control failed (result -32) [ 602.839957][T18450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3189'. [ 602.923367][T18458] sock: sock_timestamping_bind_phc: sock not bind to device [ 603.237130][T18477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3197'. [ 603.250212][T18365] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.261798][T18365] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.284477][T18365] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 603.349453][ T5629] Bluetooth: hci0: command 0x080f tx timeout [ 603.423225][T18473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3197'. [ 603.508205][ T5629] Bluetooth: hci1: command tx timeout [ 603.586842][T18365] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.602945][T18365] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.614829][T18365] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 603.730482][T18365] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.748437][T18365] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.778020][T18365] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 603.921209][T18365] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.945915][T18365] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.967429][T18365] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 604.257023][T18504] macvtap0: entered allmulticast mode [ 605.588471][ T5629] Bluetooth: hci1: command tx timeout [ 607.499318][T18521] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 607.527660][T18365] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 607.586089][T18365] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 607.624283][T18365] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 607.656528][T18365] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 607.676814][ T5629] Bluetooth: hci1: command tx timeout [ 607.698937][T18365] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 607.730775][T18365] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 607.739837][T18365] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 607.752201][T18579] netlink: 'syz.0.3221': attribute type 1 has an invalid length. [ 607.874059][T18365] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 607.889862][T18577] bridge_slave_0: entered promiscuous mode [ 607.923079][T18579] 8021q: adding VLAN 0 to HW filter on device bond2 [ 608.007731][T18581] bond2: (slave veth3): Enslaving as an active interface with a down link [ 608.051019][T18583] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 608.060659][T18583] bond2: (slave batadv1): making interface the new active one [ 608.072199][T18583] batadv1: entered promiscuous mode [ 608.077862][T18583] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 608.095256][T18580] tunl0: Caught tx_queue_len zero misconfig [ 608.103848][T18589] __nla_validate_parse: 1 callbacks suppressed [ 608.103863][T18589] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3222'. [ 608.123238][T18590] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 608.131453][T18593] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 608.396922][T18365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.421844][T18609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3226'. [ 608.461732][T18609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3226'. [ 608.488707][T18365] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.495674][ T7880] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.508434][ T7880] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.517788][ T7880] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.547395][ T7880] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.591642][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.598879][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.644649][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.651891][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.699929][T18619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3227'. [ 608.865926][ T1158] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 609.379769][T18647] netlink: 'syz.4.3231': attribute type 2 has an invalid length. [ 609.472706][T18365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.536210][T18365] veth0_vlan: entered promiscuous mode [ 609.556347][T18365] veth1_vlan: entered promiscuous mode [ 609.613715][T18365] veth0_macvtap: entered promiscuous mode [ 609.628293][T18365] veth1_macvtap: entered promiscuous mode [ 609.652847][T18365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.671787][T18365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.702542][ T440] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.718570][ T440] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.730980][ T440] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.741946][ T440] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.518298][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 611.729551][T18623] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 611.909964][ T7882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.929549][ T7882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.006442][T18662] netlink: 'syz.3.3235': attribute type 4 has an invalid length. [ 612.035372][T18662] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3235'. [ 612.063615][T18661] batadv1: entered promiscuous mode [ 612.096000][T18661] batadv1: entered allmulticast mode [ 612.346383][ T7883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.365442][ T7883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.572951][T18674] netlink: 'syz.4.3241': attribute type 1 has an invalid length. [ 612.636104][T18681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3241'. [ 612.654042][T18683] xt_l2tp: missing protocol rule (udp|l2tpip) [ 612.693291][T18674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 612.709794][T18678] syzkaller1: entered promiscuous mode [ 612.717354][T18678] syzkaller1: entered allmulticast mode [ 612.788778][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 612.816962][T18679] syzkaller0: entered promiscuous mode [ 612.831747][T18679] syzkaller0: entered allmulticast mode [ 613.108996][T18692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3243'. [ 613.357623][ T4945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 613.372413][ T4945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 613.385143][ T4945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 613.401471][ T4945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 613.412749][ T4945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 613.937850][T18730] bond1 (unregistering): Released all slaves [ 614.080130][ C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 614.834778][T18781] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3259'. [ 615.061046][T18794] xt_l2tp: invalid flags combination: 0 [ 615.194163][T18794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3264'. [ 615.211852][T18797] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3266'. [ 615.399889][T18815] netlink: 1180 bytes leftover after parsing attributes in process `syz.4.3270'. [ 615.421761][T18818] netlink: 1180 bytes leftover after parsing attributes in process `syz.4.3270'. [ 615.494783][T18808] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.502914][T18808] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.508321][ T5629] Bluetooth: hci2: command tx timeout [ 615.643595][T18808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.659110][T18808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.857122][T18811] veth1: entered promiscuous mode [ 615.862582][T18811] veth1: entered allmulticast mode [ 615.873655][T18822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3270'. [ 615.883867][ T440] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.893259][ T440] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.935104][ T440] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.944484][ T440] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.036483][T18838] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 616.289450][T18855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3276'. [ 616.299779][T18855] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3276'. [ 616.341468][T18852] sctp: [Deprecated]: syz.0.3274 (pid 18852) Use of struct sctp_assoc_value in delayed_ack socket option. [ 616.341468][T18852] Use struct sctp_sack_info instead [ 616.380862][T18861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3275'. [ 616.413094][T18852] sctp: [Deprecated]: syz.0.3274 (pid 18852) Use of struct sctp_assoc_value in delayed_ack socket option. [ 616.413094][T18852] Use struct sctp_sack_info instead [ 616.571757][T18711] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.581769][T18711] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.590516][T18711] bridge_slave_0: entered allmulticast mode [ 616.599335][T18711] bridge_slave_0: entered promiscuous mode [ 616.610219][T18711] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.617665][T18711] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.627268][T18711] bridge_slave_1: entered allmulticast mode [ 616.638855][T18711] bridge_slave_1: entered promiscuous mode [ 616.702755][T18711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.731567][T18711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.841236][T18711] team0: Port device team_slave_0 added [ 616.863401][T18711] team0: Port device team_slave_1 added [ 616.949499][T18711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.970369][T18711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.033447][T18711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.055337][T18711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.078870][T18711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.140183][T18711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.150894][ T10] IPVS: starting estimator thread 0... [ 617.159411][T18888] netlink: 'syz.1.3283': attribute type 29 has an invalid length. [ 617.202355][T18888] netlink: 'syz.1.3283': attribute type 29 has an invalid length. [ 617.243281][T18888] netlink: 'syz.1.3283': attribute type 29 has an invalid length. [ 617.253291][T18893] IPVS: using max 31 ests per chain, 74400 per kthread [ 617.263381][T18899] hsr0: entered promiscuous mode [ 617.283739][T18888] netlink: 'syz.1.3283': attribute type 29 has an invalid length. [ 617.335873][T18888] netlink: 'syz.1.3283': attribute type 29 has an invalid length. [ 617.464805][T18711] hsr_slave_0: entered promiscuous mode [ 617.476792][T18711] hsr_slave_1: entered promiscuous mode [ 617.492997][T18711] debugfs: 'hsr0' already exists in 'hsr' [ 617.504451][T18711] Cannot create hsr debugfs directory [ 617.515588][T18888] netlink: 'syz.1.3283': attribute type 29 has an invalid length. [ 617.589096][ T5629] Bluetooth: hci2: command tx timeout [ 617.596450][T18888] netlink: 'syz.1.3283': attribute type 29 has an invalid length. [ 617.607395][T18888] netlink: 'syz.1.3283': attribute type 29 has an invalid length. [ 617.632082][T18888] netlink: 'syz.1.3283': attribute type 29 has an invalid length. [ 617.649994][T18888] netlink: 'syz.1.3283': attribute type 29 has an invalid length. [ 617.710704][T18887] hsr0: left promiscuous mode [ 617.783099][T18917] SET target dimension over the limit! [ 618.144089][T18936] syzkaller0: entered promiscuous mode [ 618.152322][T18936] syzkaller0: entered allmulticast mode [ 618.522296][T18947] __nla_validate_parse: 23 callbacks suppressed [ 618.522317][T18947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3299'. [ 618.584483][T18952] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 618.913483][T18962] nbd: couldn't find device at index -427251215 [ 618.988393][T18960] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 618.997309][T18960] bridge1: entered allmulticast mode [ 619.085973][T18963] syzkaller0: entered promiscuous mode [ 619.099868][T18963] syzkaller0: entered allmulticast mode [ 619.112825][T18711] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 619.130503][T18711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 619.209694][T18711] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 619.220707][T18711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 619.239600][T18711] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 619.254193][T18711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 619.311267][T18966] tipc: Started in network mode [ 619.316204][T18966] tipc: Node identity 724ce202f9d6, cluster identity 4711 [ 619.338687][T18966] tipc: Enabled bearer , priority 0 [ 619.350876][T18711] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 619.390186][T18711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 619.400406][T18961] tipc: Resetting bearer [ 619.454065][T18961] tipc: Disabling bearer [ 619.569818][ T440] batadv1: left promiscuous mode [ 619.644778][T18987] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c) [ 619.668163][ T5629] Bluetooth: hci2: command tx timeout [ 619.719774][T18711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.772548][T18711] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.791549][ T440] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.798786][ T440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.867827][ T7883] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.875079][ T7883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.773031][T19052] bond1: entered promiscuous mode [ 620.779027][T19052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 620.807230][T19052] macvtap1: entered allmulticast mode [ 620.886654][T19052] bond1: (slave bridge2): making interface the new active one [ 620.898780][T19052] bridge2: entered promiscuous mode [ 620.906074][T19052] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 621.101602][T18711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.137585][T19066] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3328'. [ 621.169760][T19066] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3328'. [ 621.196537][T19066] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3328'. [ 621.283077][T18711] veth0_vlan: entered promiscuous mode [ 621.327049][T18711] veth1_vlan: entered promiscuous mode [ 621.451857][T18711] veth0_macvtap: entered promiscuous mode [ 621.477185][T18711] veth1_macvtap: entered promiscuous mode [ 621.557614][T18711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.604928][T18711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.643221][ T7883] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.652978][ T7883] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.694933][ T7883] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.742112][ T7883] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.751627][ T5629] Bluetooth: hci2: command tx timeout [ 622.070419][ T7883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.097495][ T7883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.184768][T19108] validate_nla: 34 callbacks suppressed [ 622.184786][T19108] netlink: 'syz.2.3340': attribute type 1 has an invalid length. [ 622.228907][T19107] netlink: 'syz.4.3339': attribute type 25 has an invalid length. [ 622.271365][T19108] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 622.300137][T19108] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 622.330128][T19108] bond1: (slave vxcan3): making interface the new active one [ 622.332342][T19111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3340'. [ 622.346490][T19108] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 622.370924][ T7883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.379084][ T7883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.471870][T19111] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 622.510105][T19111] bond1 (unregistering): Released all slaves [ 622.558137][T19121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3342'. [ 622.669756][T19124] syzkaller1: entered promiscuous mode [ 622.687002][T19126] netlink: 'syz.0.3345': attribute type 1 has an invalid length. [ 622.689555][T19124] syzkaller1: entered allmulticast mode [ 622.731551][T19126] netlink: 'syz.0.3345': attribute type 2 has an invalid length. [ 622.758772][T19126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3345'. [ 623.075109][T19151] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3350'. [ 623.261257][T19159] tipc: Started in network mode [ 623.266321][T19159] tipc: Node identity 42b0f5e01987, cluster identity 4711 [ 623.274221][T19159] tipc: Enabled bearer , priority 0 [ 623.291068][T19159] syzkaller0: entered promiscuous mode [ 623.302848][T19159] syzkaller0: entered allmulticast mode [ 623.465212][T19159] tipc: Resetting bearer [ 623.468613][T19161] netlink: 'syz.3.3353': attribute type 11 has an invalid length. [ 623.523206][T19159] ipt_REJECT: TCP_RESET invalid for non-tcp [ 623.739436][T19158] tipc: Resetting bearer [ 623.842883][T19158] tipc: Disabling bearer [ 623.921606][T19170] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3356'. [ 623.938367][T19170] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3356'. [ 623.957600][T19170] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3356'. [ 623.995785][T19170] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3356'. [ 624.066374][T19172] syzkaller1: entered promiscuous mode [ 624.078716][T19172] syzkaller1: entered allmulticast mode [ 624.311259][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.399466][T19197] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3364'. [ 624.416153][T19197] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3364'. [ 624.873363][T19217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3370'. [ 625.201918][T19227] syzkaller0: entered promiscuous mode [ 625.238953][T19227] syzkaller0: entered allmulticast mode [ 625.385944][T19233] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3375'. [ 626.120715][T19253] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 626.239392][T19259] erspan1: entered promiscuous mode [ 626.257993][T19259] erspan1: entered allmulticast mode [ 626.410458][T19271] netlink: 'syz.1.3385': attribute type 9 has an invalid length. [ 626.959263][T19291] bridge0: entered promiscuous mode [ 626.977111][T19291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.997809][T19291] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.020003][T19291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.161140][T19291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.191185][T19291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.206009][T19291] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 627.223160][T19290] syzkaller1: entered promiscuous mode [ 627.233320][T19290] syzkaller1: entered allmulticast mode [ 627.262523][ T7886] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.269771][ T7886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.309938][ T7886] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.317207][ T7886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.439739][T19316] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3393'. [ 627.550521][T19321] netlink: 'syz.4.3395': attribute type 2 has an invalid length. [ 627.983635][T19338] netlink: 324 bytes leftover after parsing attributes in process `syz.2.3398'. [ 628.374470][T19321] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 628.404235][T19321] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 628.744470][T19371] netlink: 'syz.2.3406': attribute type 2 has an invalid length. [ 628.808481][T19321] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 628.838925][T19321] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 628.931519][T19321] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 628.955180][T19321] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 629.010135][T19386] netlink: 1992 bytes leftover after parsing attributes in process `syz.0.3409'. [ 629.061451][T19321] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 629.072602][T19383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3409'. [ 629.081884][T19321] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 629.150635][T19321] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 629.167163][T19321] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 629.172387][T19389] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3412'. [ 629.505892][T19411] nbd: nbd4 already in use [ 630.200499][T19451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3423'. [ 630.219308][T19451] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3423'. [ 630.285698][T19451] ip6tnl1: entered allmulticast mode [ 630.478171][T19466] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3426'. [ 630.501405][T19466] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3426'. [ 630.664333][T19474] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3429'. [ 630.835527][T19480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3430'. [ 630.887222][T19482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3431'. [ 630.920236][T19482] netlink: 'syz.2.3431': attribute type 11 has an invalid length. [ 631.435066][T19509] netlink: 'syz.4.3437': attribute type 1 has an invalid length. [ 631.652615][T19509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 631.707308][T19514] bond2: (slave gretap1): making interface the new active one [ 631.722263][T19514] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 631.737674][T19527] netlink: 'syz.0.3442': attribute type 1 has an invalid length. [ 631.754241][T19503] bond2 (unregistering): (slave gretap1): Releasing active interface [ 631.770830][T19503] bond2 (unregistering): Released all slaves [ 632.041949][T19527] 8021q: adding VLAN 0 to HW filter on device bond3 [ 633.951304][T19614] netlink: 'syz.0.3463': attribute type 2 has an invalid length. [ 634.420548][T19622] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 634.447847][T19622] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 634.491436][T19622] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 634.532813][T15780] IPVS: starting estimator thread 0... [ 634.658620][T19628] IPVS: using max 31 ests per chain, 74400 per kthread [ 634.919941][T19641] __nla_validate_parse: 12 callbacks suppressed [ 634.919961][T19641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3470'. [ 634.992313][T19641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3470'. [ 635.214207][T19650] netlink: 'syz.3.3473': attribute type 5 has an invalid length. [ 635.443854][T19666] syzkaller1: entered allmulticast mode [ 635.451250][T19667] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3476'. [ 635.546413][T19672] can: request_module (can-proto-3) failed. [ 635.580623][T19674] can: request_module (can-proto-3) failed. [ 635.813941][T19686] syzkaller0: entered promiscuous mode [ 635.823313][T19686] syzkaller0: entered allmulticast mode [ 636.208606][T19699] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 636.413344][T19710] tipc: Enabled bearer , priority 0 [ 636.432569][T19710] syzkaller0: entered promiscuous mode [ 636.441156][T19710] syzkaller0: entered allmulticast mode [ 636.461496][T19710] tipc: Resetting bearer [ 636.473302][T19710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3487'. [ 636.486432][T19710] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3487'. [ 636.493400][T19712] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3490'. [ 636.496045][T19710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3487'. [ 636.844028][T19734] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3494'. [ 636.900254][T19731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3494'. [ 637.033928][T19737] ieee802154 phy0 wpan0: encryption failed: -22 [ 637.043194][T19731] netlink: 638 bytes leftover after parsing attributes in process `syz.3.3494'. [ 637.172489][T19706] tipc: Resetting bearer [ 637.262512][T19706] tipc: Disabling bearer [ 637.561122][T19759] netlink: 'syz.4.3501': attribute type 10 has an invalid length. [ 637.610939][T19759] dummy0: entered allmulticast mode [ 637.626124][T19759] team0: Port device dummy0 added [ 638.535706][T19786] xt_CONNSECMARK: invalid mode: 0 [ 638.562458][T19785] xt_CONNSECMARK: invalid mode: 0 [ 638.815633][T19795] netlink: 'syz.2.3511': attribute type 25 has an invalid length. [ 639.031470][T19807] netlink: 'syz.3.3513': attribute type 1 has an invalid length. [ 639.071672][T19807] netlink: 'syz.3.3513': attribute type 1 has an invalid length. [ 639.316003][T19823] netlink: 'syz.0.3518': attribute type 1 has an invalid length. [ 639.334281][T19823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.356839][T19822] syz.4.3517: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 639.372302][T19822] CPU: 1 UID: 0 PID: 19822 Comm: syz.4.3517 Not tainted syzkaller #0 PREEMPT(full) [ 639.372331][T19822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 639.372349][T19822] Call Trace: [ 639.372361][T19822] [ 639.372370][T19822] dump_stack_lvl+0xe8/0x150 [ 639.372399][T19822] warn_alloc+0x249/0x340 [ 639.372428][T19822] ? stack_trace_save+0xa9/0x100 [ 639.372461][T19822] ? __pfx_warn_alloc+0x10/0x10 [ 639.372496][T19822] ? kasan_save_track+0x4f/0x80 [ 639.372521][T19822] ? kasan_save_track+0x3e/0x80 [ 639.372545][T19822] ? __kasan_kmalloc+0x93/0xb0 [ 639.372569][T19822] ? __kmalloc_cache_noprof+0x31c/0x660 [ 639.372595][T19822] ? xskq_create+0x56/0x170 [ 639.372622][T19822] ? xsk_setsockopt+0x54c/0x990 [ 639.372643][T19822] ? do_sock_setsockopt+0x17c/0x1b0 [ 639.372660][T19822] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 639.372678][T19822] ? do_syscall_64+0x15f/0xf80 [ 639.372699][T19822] __vmalloc_node_range_noprof+0x132/0x1750 [ 639.372759][T19822] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 639.372794][T19822] ? __kasan_kmalloc+0x93/0xb0 [ 639.372827][T19822] vmalloc_user_noprof+0xad/0xe0 [ 639.372852][T19822] ? xskq_create+0xbf/0x170 [ 639.372879][T19822] xskq_create+0xbf/0x170 [ 639.372909][T19822] xsk_init_queue+0x8a/0xe0 [ 639.372938][T19822] xsk_setsockopt+0x54c/0x990 [ 639.372965][T19822] ? __pfx_xsk_setsockopt+0x10/0x10 [ 639.372991][T19822] ? __pfx_aa_sk_perm+0x10/0x10 [ 639.373019][T19822] ? aa_sock_opt_perm+0xff/0x1a0 [ 639.373049][T19822] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 639.373076][T19822] ? __pfx_xsk_setsockopt+0x10/0x10 [ 639.373114][T19822] do_sock_setsockopt+0x17c/0x1b0 [ 639.373141][T19822] __x64_sys_setsockopt+0x13d/0x1b0 [ 639.373165][T19822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.373187][T19822] do_syscall_64+0x15f/0xf80 [ 639.373206][T19822] ? trace_irq_disable+0x3b/0x140 [ 639.373236][T19822] ? clear_bhb_loop+0x40/0x90 [ 639.373261][T19822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.373281][T19822] RIP: 0033:0x7f9fb159ce59 [ 639.373301][T19822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.373319][T19822] RSP: 002b:00007f9fb2520028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 639.373341][T19822] RAX: ffffffffffffffda RBX: 00007f9fb1815fa0 RCX: 00007f9fb159ce59 [ 639.373356][T19822] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000000 [ 639.373369][T19822] RBP: 00007f9fb1632d6f R08: 0000000000000004 R09: 0000000000000000 [ 639.373382][T19822] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.373395][T19822] R13: 00007f9fb1816038 R14: 00007f9fb1815fa0 R15: 00007ffe8add7a68 [ 639.373429][T19822] [ 639.373454][T19822] Mem-Info: [ 639.677060][T19822] active_anon:6341 inactive_anon:0 isolated_anon:0 [ 639.677060][T19822] active_file:3210 inactive_file:40157 isolated_file:0 [ 639.677060][T19822] unevictable:768 dirty:45 writeback:0 [ 639.677060][T19822] slab_reclaimable:12860 slab_unreclaimable:153210 [ 639.677060][T19822] mapped:29507 shmem:1424 pagetables:3668 [ 639.677060][T19822] sec_pagetables:0 bounce:0 [ 639.677060][T19822] kernel_misc_reclaimable:0 [ 639.677060][T19822] free:1259614 free_pcp:13953 free_cma:0 [ 639.725856][T19822] Node 0 active_anon:25364kB inactive_anon:0kB active_file:12840kB inactive_file:160424kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118028kB dirty:180kB writeback:0kB shmem:4160kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17924kB pagetables:14412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 639.792224][T19822] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 639.881442][T19822] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 639.978832][T19822] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 640.006755][T19822] Node 0 DMA32 free:1096192kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25336kB inactive_anon:0kB active_file:12840kB inactive_file:160432kB unevictable:2636kB writepending:208kB zspages:0kB present:3129332kB managed:2552360kB mlocked:1100kB bounce:0kB free_pcp:50868kB local_pcp:20388kB free_cma:0kB [ 640.043272][T19849] __nla_validate_parse: 5 callbacks suppressed [ 640.043292][T19849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3524'. [ 640.059858][T19822] lowmem_reserve[]: 0 0 0 0 0 [ 640.065861][T19822] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 640.148413][T19822] lowmem_reserve[]: 0 0 0 0 0 [ 640.161667][T19849] bond4: entered promiscuous mode [ 640.167036][T19822] Node 1 Normal free:3943044kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1004kB local_pcp:0kB free_cma:0kB [ 640.209976][T19856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3526'. [ 640.229700][T19849] 8021q: adding VLAN 0 to HW filter on device bond4 [ 640.263377][T19822] lowmem_reserve[]: 0 0 0 0 0 [ 640.277506][T19822] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 640.302465][T19858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3526'. [ 640.326911][T19822] Node 0 DMA32: 5120*4kB (UME) 4608*8kB (UME) 2159*16kB (UM) 347*32kB (UME) 384*64kB (UME) 848*128kB (UM) 691*256kB (UM) 448*512kB (UME) 247*1024kB (UM) 38*2048kB (UM) 30*4096kB (UM) = 1096016kB [ 640.401411][T19822] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 640.438206][T19822] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 1*16kB (M) 1*32kB (M) 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943044kB [ 640.456567][T19822] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 640.468890][T19822] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 640.480448][T19822] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 640.493305][T19822] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 640.502809][T19822] 47789 total pagecache pages [ 640.510977][T19822] 0 pages in swap cache [ 640.515310][T19822] Free swap = 124996kB [ 640.519918][T19822] Total swap = 124996kB [ 640.543435][T19822] 2097051 pages RAM [ 640.553211][T19822] 0 pages HighMem/MovableOnly [ 640.563880][T19822] 427181 pages reserved [ 640.575340][T19822] 0 pages cma reserved [ 641.495205][ T29] audit: type=1107 audit(1779723640.754:18): pid=19905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='3[jUI,YMQ])L/,bm4+V&g)&/XNHi-2}Sa6ePFŋ}-a ɤŸ>@_~f5*&w8YфCr0gѧ$V&? [ 641.495205][ T29] _2Y>YߖpQ~aƞ,s +[jNCu'' [ 642.879190][T19951] xt_socket: unknown flags 0x4 [ 644.138399][T19980] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 644.155353][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 644.213417][T19980] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3557'. [ 644.248984][T19980] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3557'. [ 644.543186][T20000] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3563'. [ 644.880944][T20022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3569'. [ 645.056221][T20032] netlink: 'syz.3.3571': attribute type 4 has an invalid length. [ 645.176260][T20034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3572'. [ 645.329366][T20049] openvswitch: netlink: Flow actions attr not present in new flow. [ 645.363996][T20050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3576'. [ 645.429233][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 645.516045][T20060] vxcan0: entered allmulticast mode [ 645.522668][T20060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3581'. [ 645.553595][T20060] vxcan0 (unregistering): left allmulticast mode [ 645.880466][T20088] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 645.919137][T20088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 646.097527][T20099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3591'. [ 646.220153][T20103] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3594'. [ 646.232584][T20101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3592'. [ 646.421449][T20114] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3597'. [ 646.438286][T20114] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3597'. [ 646.821807][T20139] pim6reg1: entered promiscuous mode [ 646.834954][T20139] pim6reg1: entered allmulticast mode [ 647.167036][T20149] syzkaller1: entered promiscuous mode [ 647.172684][T20149] syzkaller1: entered allmulticast mode [ 647.383985][T20161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3610'. [ 647.394459][T20160] Can't find ip_set type hxCW~ort,ip [ 647.471566][T20166] netlink: 'syz.1.3611': attribute type 1 has an invalid length. [ 647.742740][T15780] IPVS: starting estimator thread 0... [ 647.788920][T20180] macsec1: entered promiscuous mode [ 647.795374][T20173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3614'. [ 647.829835][T20180] bridge0: entered promiscuous mode [ 647.840791][T20174] netlink: 'syz.4.3613': attribute type 29 has an invalid length. [ 647.861124][T20185] IPVS: using max 37 ests per chain, 88800 per kthread [ 647.879604][T20186] netlink: 'syz.2.3616': attribute type 7 has an invalid length. [ 647.912040][T20186] netlink: 'syz.2.3616': attribute type 8 has an invalid length. [ 647.942062][T20173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 647.958433][T20173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.967001][T20173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.986850][T20173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.997587][ C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 648.046076][T20200] netlink: 'syz.2.3619': attribute type 6 has an invalid length. [ 648.063666][T20174] hsr0: entered promiscuous mode [ 648.105161][T20169] hsr0: left promiscuous mode [ 648.233981][T20209] netlink: 'syz.3.3620': attribute type 1 has an invalid length. [ 648.411138][T20209] bond1: entered promiscuous mode [ 648.431646][T20209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 648.570526][T20225] netlink: 'syz.2.3624': attribute type 4 has an invalid length. [ 649.164579][T20249] Cannot find del_set index 1 as target [ 649.246417][T20255] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 649.619805][T20277] netlink: 'syz.2.3640': attribute type 1 has an invalid length. [ 649.748662][T20277] bond1: entered promiscuous mode [ 649.754406][T20277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 649.809685][T20281] ipvlan2: entered allmulticast mode [ 649.826788][T20281] bond1: entered allmulticast mode [ 649.886006][T20286] bond1: (slave bridge4): making interface the new active one [ 649.893881][T20286] bridge4: entered promiscuous mode [ 649.900101][T20286] bridge4: entered allmulticast mode [ 649.907679][T20286] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 649.928529][T20287] team0: No ports can be present during mode change [ 650.043035][T20300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 650.234081][T20312] __nla_validate_parse: 7 callbacks suppressed [ 650.234099][T20312] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3650'. [ 650.264228][T20314] netlink: 'syz.1.3649': attribute type 3 has an invalid length. [ 650.273596][T20322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3647'. [ 650.284778][T20314] netlink: 'syz.1.3649': attribute type 3 has an invalid length. [ 650.306356][T20314] tc_dump_action: action bad kind [ 650.533955][T20334] netlink: 'syz.1.3653': attribute type 1 has an invalid length. [ 650.626466][T20334] 8021q: adding VLAN 0 to HW filter on device bond2 [ 650.736043][T20334] bond2: (slave geneve2): making interface the new active one [ 650.755634][T20334] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 650.785887][ T440] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.803494][ T440] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.871179][ T440] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.895326][ T440] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.097410][T20361] ieee802154 phy0 wpan0: encryption failed: -126 [ 651.125763][T20361] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3660'. [ 651.136126][T20369] openvswitch: netlink: Unknown nsh attribute 0 [ 651.144126][T20369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 651.157539][T20364] ieee802154 phy0 wpan0: encryption failed: -126 [ 651.185683][T20373] xt_hashlimit: size too large, truncated to 1048576 [ 651.412624][T20381] bond3: Removing last arp target with arp_interval on [ 651.749373][T20399] tun0: tun_chr_ioctl cmd 1074025675 [ 651.768288][T20399] tun0: persist enabled [ 651.775964][T20399] tun0: tun_chr_ioctl cmd 1074025675 [ 651.797167][T20399] tun0: persist disabled [ 651.810307][T20399] tun0: tun_chr_ioctl cmd 1079531642 [ 651.930695][T20413] netlink: 'syz.3.3674': attribute type 15 has an invalid length. [ 651.950646][T20413] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3674'. [ 651.954432][T20414] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3675'. [ 651.994579][T20414] netlink: 'syz.0.3675': attribute type 9 has an invalid length. [ 652.025367][T20414] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3675'. [ 652.053550][ T29] audit: type=1800 audit(1779723651.314:19): pid=20422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3675" name="blkio.bfq.time_recursive" dev="tmpfs" ino=645 res=0 errno=0 [ 652.073794][T20414] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3675'. [ 652.225238][T20440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3680'. [ 652.263814][T20447] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3681'. [ 652.287819][T20440] gre1: entered promiscuous mode [ 652.573579][T20461] IPVS: set_ctl: invalid protocol: 127 172.30.0.3:20001 [ 652.764566][T20457] syzkaller0: entered promiscuous mode [ 652.780571][T20457] syzkaller0: entered allmulticast mode [ 652.932417][T20482] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3689'. [ 652.989142][T20482] netlink: 'syz.3.3689': attribute type 11 has an invalid length. [ 656.775093][T20530] __nla_validate_parse: 1 callbacks suppressed [ 656.775113][T20530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3698'. [ 657.245182][T20551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3704'. [ 657.354584][ T5629] block nbd6: Receive control failed (result -1) [ 658.262231][T20575] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3709'. [ 658.298542][T20575] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3709'. [ 659.284906][T20603] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3716'. [ 659.313953][T20598] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 659.335020][T20603] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3716'. [ 659.372556][T20598] bond2 (unregistering): Released all slaves [ 660.342216][T20626] xt_HMARK: spi-set and port-set can't be combined [ 660.416100][T20592] infiniband syz0: set down [ 660.429554][T20592] infiniband syz0: added bond_slave_1 [ 660.451980][T20592] [ 660.454343][T20592] ====================================================== [ 660.461365][T20592] WARNING: possible circular locking dependency detected [ 660.468407][T20592] syzkaller #0 Not tainted [ 660.472833][T20592] ------------------------------------------------------ [ 660.475115][T20633] netlink: 'syz.1.3726': attribute type 4 has an invalid length. [ 660.479943][T20592] syz.2.3714/20592 is trying to acquire lock: [ 660.479960][T20592] ffffffff8ea5f800 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x261/0x19c0 [ 660.480014][T20592] [ 660.480014][T20592] but task is already holding lock: [ 660.480020][T20592] ffffffff8e7fad60 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0x9f8/0x1f50 [ 660.480065][T20592] [ 660.480065][T20592] which lock already depends on the new lock. [ 660.480065][T20592] [ 660.480073][T20592] [ 660.480073][T20592] the existing dependency chain (in reverse order) is: [ 660.480081][T20592] [ 660.480081][T20592] -> #9 (wq_pool_mutex){+.+.}-{4:4}: [ 660.480110][T20592] __mutex_lock+0x1a3/0x1550 [ 660.480131][T20592] __alloc_workqueue+0x9f8/0x1f50 [ 660.480153][T20592] alloc_workqueue_noprof+0xe3/0x210 [ 660.480176][T20592] padata_alloc+0xc1/0x360 [ 660.480193][T20592] pcrypt_init_padata+0x27/0x100 [ 660.480215][T20592] pcrypt_init+0x60/0xc0 [ 660.480235][T20592] do_one_initcall+0x250/0x870 [ 660.480255][T20592] do_initcall_level+0x104/0x190 [ 660.480276][T20592] do_initcalls+0x59/0xa0 [ 660.480295][T20592] kernel_init_freeable+0x2a6/0x3e0 [ 660.480314][T20592] kernel_init+0x1d/0x1d0 [ 660.480332][T20592] ret_from_fork+0x514/0xb70 [ 660.480348][T20592] ret_from_fork_asm+0x1a/0x30 [ 660.480365][T20592] [ 660.480365][T20592] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 660.480391][T20592] cpus_read_lock+0x42/0x160 [ 660.628177][T20592] static_key_slow_inc+0x12/0x30 [ 660.633662][T20592] udp_tunnel_encap_enable+0x86/0xb0 [ 660.639496][T20592] udp_lib_setsockopt+0x5b6/0x6b0 [ 660.645059][T20592] udpv6_setsockopt+0x67/0xb0 [ 660.650279][T20592] do_sock_setsockopt+0x17c/0x1b0 [ 660.655841][T20592] __x64_sys_setsockopt+0x13d/0x1b0 [ 660.661576][T20592] do_syscall_64+0x15f/0xf80 [ 660.666704][T20592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.673135][T20592] [ 660.673135][T20592] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 660.680890][T20592] lock_sock_nested+0x41/0x100 [ 660.686206][T20592] inet_shutdown+0x6a/0x390 [ 660.691257][T20592] nbd_mark_nsock_dead+0x2e9/0x560 [ 660.696924][T20592] recv_work+0x1c2e/0x1d40 [ 660.701894][T20592] process_scheduled_works+0xb5d/0x1860 [ 660.707979][T20592] worker_thread+0xa53/0xfc0 [ 660.713121][T20592] kthread+0x389/0x470 [ 660.717745][T20592] ret_from_fork+0x514/0xb70 [ 660.722889][T20592] ret_from_fork_asm+0x1a/0x30 [ 660.728194][T20592] [ 660.728194][T20592] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 660.735866][T20592] __mutex_lock+0x1a3/0x1550 [ 660.741006][T20592] nbd_queue_rq+0x37b/0x1100 [ 660.746141][T20592] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 660.752239][T20592] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 660.759105][T20592] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 660.765619][T20592] blk_mq_run_hw_queue+0x348/0x4f0 [ 660.771270][T20592] blk_mq_dispatch_list+0xd16/0xe10 [ 660.777017][T20592] blk_mq_flush_plug_list+0x48d/0x570 [ 660.782942][T20592] __blk_flush_plug+0x3ed/0x4d0 [ 660.788337][T20592] __submit_bio+0x28d/0x580 [ 660.793370][T20592] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 660.799547][T20592] block_read_full_folio+0x599/0x830 [ 660.805366][T20592] filemap_read_folio+0x137/0x3b0 [ 660.810951][T20592] do_read_cache_folio+0x358/0x590 [ 660.816611][T20592] read_part_sector+0xb6/0x2b0 [ 660.821929][T20592] adfspart_check_ICS+0xb1/0x960 [ 660.827403][T20592] bdev_disk_changed+0x817/0x1770 [ 660.832971][T20592] blkdev_get_whole+0x380/0x510 [ 660.838354][T20592] bdev_open+0x31e/0xd30 [ 660.843136][T20592] blkdev_open+0x470/0x610 [ 660.848084][T20592] do_dentry_open+0x785/0x14e0 [ 660.853389][T20592] vfs_open+0x3b/0x340 [ 660.857991][T20592] path_openat+0x2e08/0x3860 [ 660.863120][T20592] do_file_open+0x23e/0x4a0 [ 660.868172][T20592] do_sys_openat2+0x113/0x200 [ 660.873389][T20592] __x64_sys_openat+0x138/0x170 [ 660.878778][T20592] do_syscall_64+0x15f/0xf80 [ 660.883904][T20592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.890343][T20592] [ 660.890343][T20592] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 660.897574][T20592] __mutex_lock+0x1a3/0x1550 [ 660.902711][T20592] nbd_queue_rq+0xc6/0x1100 [ 660.907752][T20592] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 660.913841][T20592] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 660.920713][T20592] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 660.927241][T20592] blk_mq_run_hw_queue+0x348/0x4f0 [ 660.932911][T20592] blk_mq_dispatch_list+0xd16/0xe10 [ 660.938659][T20592] blk_mq_flush_plug_list+0x48d/0x570 [ 660.944579][T20592] __blk_flush_plug+0x3ed/0x4d0 [ 660.949974][T20592] __submit_bio+0x28d/0x580 [ 660.955006][T20592] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 660.961177][T20592] block_read_full_folio+0x599/0x830 [ 660.966999][T20592] filemap_read_folio+0x137/0x3b0 [ 660.972564][T20592] do_read_cache_folio+0x358/0x590 [ 660.978217][T20592] read_part_sector+0xb6/0x2b0 [ 660.983545][T20592] adfspart_check_ICS+0xb1/0x960 [ 660.989024][T20592] bdev_disk_changed+0x817/0x1770 [ 660.994587][T20592] blkdev_get_whole+0x380/0x510 [ 660.999958][T20592] bdev_open+0x31e/0xd30 [ 661.004723][T20592] blkdev_open+0x470/0x610 [ 661.009659][T20592] do_dentry_open+0x785/0x14e0 [ 661.014941][T20592] vfs_open+0x3b/0x340 [ 661.019524][T20592] path_openat+0x2e08/0x3860 [ 661.024637][T20592] do_file_open+0x23e/0x4a0 [ 661.029663][T20592] do_sys_openat2+0x113/0x200 [ 661.034855][T20592] __x64_sys_openat+0x138/0x170 [ 661.040225][T20592] do_syscall_64+0x15f/0xf80 [ 661.045334][T20592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.051743][T20592] [ 661.051743][T20592] -> #4 (set->srcu){.+.+}-{0:0}: [ 661.058866][T20592] __synchronize_srcu+0xca/0x300 [ 661.064330][T20592] elevator_switch+0x1e8/0x7a0 [ 661.069616][T20592] elevator_change+0x2cc/0x450 [ 661.074992][T20592] elevator_set_default+0x36c/0x430 [ 661.080713][T20592] blk_register_queue+0x3e9/0x4e0 [ 661.086251][T20592] __add_disk+0x677/0xd50 [ 661.091100][T20592] add_disk_fwnode+0xfb/0x480 [ 661.096291][T20592] nbd_dev_add+0x72c/0xb50 [ 661.101222][T20592] nbd_init+0x168/0x1f0 [ 661.105902][T20592] do_one_initcall+0x250/0x870 [ 661.111193][T20592] do_initcall_level+0x104/0x190 [ 661.116659][T20592] do_initcalls+0x59/0xa0 [ 661.121507][T20592] kernel_init_freeable+0x2a6/0x3e0 [ 661.127234][T20592] kernel_init+0x1d/0x1d0 [ 661.132084][T20592] ret_from_fork+0x514/0xb70 [ 661.137195][T20592] ret_from_fork_asm+0x1a/0x30 [ 661.142480][T20592] [ 661.142480][T20592] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 661.150296][T20592] __mutex_lock+0x1a3/0x1550 [ 661.155407][T20592] elevator_change+0x1b3/0x450 [ 661.160697][T20592] elevator_set_none+0xb5/0x140 [ 661.166072][T20592] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 661.172396][T20592] nbd_start_device+0x17f/0xb10 [ 661.177772][T20592] nbd_genl_connect+0x165b/0x1cf0 [ 661.183313][T20592] genl_family_rcv_msg_doit+0x22a/0x330 [ 661.189381][T20592] genl_rcv_msg+0x61c/0x7a0 [ 661.194403][T20592] netlink_rcv_skb+0x232/0x4b0 [ 661.199685][T20592] genl_rcv+0x28/0x40 [ 661.204191][T20592] netlink_unicast+0x75c/0x8e0 [ 661.209465][T20592] netlink_sendmsg+0x813/0xb40 [ 661.214746][T20592] ____sys_sendmsg+0x972/0x9f0 [ 661.220027][T20592] ___sys_sendmsg+0x2a5/0x360 [ 661.225218][T20592] __x64_sys_sendmsg+0x1bd/0x2a0 [ 661.230688][T20592] do_syscall_64+0x15f/0xf80 [ 661.235815][T20592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.242223][T20592] [ 661.242223][T20592] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 661.250821][T20592] blk_alloc_queue+0x546/0x680 [ 661.256113][T20592] __blk_mq_alloc_disk+0x197/0x390 [ 661.261740][T20592] nbd_dev_add+0x499/0xb50 [ 661.266679][T20592] nbd_init+0x168/0x1f0 [ 661.271353][T20592] do_one_initcall+0x250/0x870 [ 661.276643][T20592] do_initcall_level+0x104/0x190 [ 661.282103][T20592] do_initcalls+0x59/0xa0 [ 661.286947][T20592] kernel_init_freeable+0x2a6/0x3e0 [ 661.292747][T20592] kernel_init+0x1d/0x1d0 [ 661.297597][T20592] ret_from_fork+0x514/0xb70 [ 661.302706][T20592] ret_from_fork_asm+0x1a/0x30 [ 661.307986][T20592] [ 661.307986][T20592] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 661.315204][T20592] fs_reclaim_acquire+0x71/0x100 [ 661.320671][T20592] prepare_alloc_pages+0x152/0x650 [ 661.326303][T20592] __alloc_frozen_pages_noprof+0x12f/0x380 [ 661.332669][T20592] __alloc_pages_noprof+0x10/0x100 [ 661.338335][T20592] pcpu_populate_chunk+0x182/0xb30 [ 661.343984][T20592] pcpu_alloc_noprof+0xcc2/0x19c0 [ 661.349530][T20592] xt_percpu_counter_alloc+0x161/0x220 [ 661.355510][T20592] translate_table+0x1332/0x20b0 [ 661.360970][T20592] ip6t_register_table+0x11b/0x330 [ 661.366597][T20592] ip6table_security_table_init+0x41/0x70 [ 661.372835][T20592] xt_find_table_lock+0x30c/0x3f0 [ 661.378386][T20592] xt_request_find_table_lock+0x26/0x100 [ 661.384541][T20592] do_ip6t_get_ctl+0x716/0x1230 [ 661.389910][T20592] nf_getsockopt+0x26e/0x290 [ 661.395025][T20592] ipv6_getsockopt+0x1fd/0x2b0 [ 661.400313][T20592] do_sock_getsockopt+0x51d/0x7e0 [ 661.405866][T20592] __x64_sys_getsockopt+0x1a4/0x240 [ 661.411583][T20592] do_syscall_64+0x15f/0xf80 [ 661.416686][T20592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.423180][T20592] [ 661.423180][T20592] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 661.430910][T20592] __lock_acquire+0x15a5/0x2cf0 [ 661.436284][T20592] lock_acquire+0x106/0x350 [ 661.441301][T20592] __mutex_lock+0x1a3/0x1550 [ 661.446411][T20592] pcpu_alloc_noprof+0x261/0x19c0 [ 661.451959][T20592] __alloc_workqueue+0xa88/0x1f50 [ 661.457570][T20592] alloc_workqueue_noprof+0xe3/0x210 [ 661.463382][T20592] ib_mad_init_device+0x944/0x20a0 [ 661.469008][T20592] add_client_context+0x37c/0x7a0 [ 661.474548][T20592] enable_device_and_get+0x19c/0x3e0 [ 661.480351][T20592] ib_register_device+0x110f/0x13e0 [ 661.486066][T20592] rxe_register_device+0x1e3/0x350 [ 661.491701][T20592] rxe_net_add+0x81/0x110 [ 661.496565][T20592] rxe_newlink+0xf4/0x1c0 [ 661.501414][T20592] nldev_newlink+0x5bc/0x650 [ 661.506536][T20592] rdma_nl_rcv+0x6d1/0xa10 [ 661.511469][T20592] netlink_unicast+0x75c/0x8e0 [ 661.516748][T20592] netlink_sendmsg+0x813/0xb40 [ 661.522026][T20592] ____sys_sendmsg+0x972/0x9f0 [ 661.527302][T20592] ___sys_sendmsg+0x2a5/0x360 [ 661.532496][T20592] __x64_sys_sendmsg+0x1bd/0x2a0 [ 661.537953][T20592] do_syscall_64+0x15f/0xf80 [ 661.543062][T20592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.549573][T20592] [ 661.549573][T20592] other info that might help us debug this: [ 661.549573][T20592] [ 661.559875][T20592] Chain exists of: [ 661.559875][T20592] pcpu_alloc_mutex --> cpu_hotplug_lock --> wq_pool_mutex [ 661.559875][T20592] [ 661.572910][T20592] Possible unsafe locking scenario: [ 661.572910][T20592] [ 661.580360][T20592] CPU0 CPU1 [ 661.585718][T20592] ---- ---- [ 661.591083][T20592] lock(wq_pool_mutex); [ 661.595330][T20592] lock(cpu_hotplug_lock); [ 661.602354][T20592] lock(wq_pool_mutex); [ 661.609112][T20592] lock(pcpu_alloc_mutex); [ 661.613610][T20592] [ 661.613610][T20592] *** DEADLOCK *** [ 661.613610][T20592] [ 661.621746][T20592] 6 locks held by syz.2.3714/20592: [ 661.626933][T20592] #0: ffffffff9a808808 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x328/0xa10 [ 661.636948][T20592] #1: ffffffff8fb334a8 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x429/0x650 [ 661.646521][T20592] #2: ffffffff8fb24aa8 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0xff/0x3e0 [ 661.656458][T20592] #3: ffffffff8fb24da8 (clients_rwsem){++++}-{4:4}, at: enable_device_and_get+0x165/0x3e0 [ 661.666485][T20592] #4: ffff8880555f0620 (&device->client_data_rwsem){++++}-{4:4}, at: add_client_context+0x33c/0x7a0 [ 661.677364][T20592] #5: ffffffff8e7fad60 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0x9f8/0x1f50 [ 661.687117][T20592] [ 661.687117][T20592] stack backtrace: [ 661.692999][T20592] CPU: 1 UID: 0 PID: 20592 Comm: syz.2.3714 Not tainted syzkaller #0 PREEMPT(full) [ 661.693018][T20592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 661.693029][T20592] Call Trace: [ 661.693037][T20592] [ 661.693045][T20592] dump_stack_lvl+0xe8/0x150 [ 661.693066][T20592] print_circular_bug+0x2e1/0x300 [ 661.693088][T20592] check_noncircular+0x12e/0x150 [ 661.693108][T20592] __lock_acquire+0x15a5/0x2cf0 [ 661.693127][T20592] ? check_path+0x21/0x40 [ 661.693144][T20592] ? check_noncircular+0xda/0x150 [ 661.693163][T20592] ? add_lock_to_list+0xc7/0x100 [ 661.693181][T20592] ? lockdep_unlock+0x5d/0xd0 [ 661.693195][T20592] ? __lock_acquire+0x146e/0x2cf0 [ 661.693211][T20592] ? pcpu_alloc_noprof+0x261/0x19c0 [ 661.693231][T20592] lock_acquire+0x106/0x350 [ 661.693246][T20592] ? pcpu_alloc_noprof+0x261/0x19c0 [ 661.693269][T20592] __mutex_lock+0x1a3/0x1550 [ 661.693285][T20592] ? pcpu_alloc_noprof+0x261/0x19c0 [ 661.693304][T20592] ? __mutex_trylock_common+0x158/0x260 [ 661.693325][T20592] ? __pfx___mutex_trylock_common+0x10/0x10 [ 661.693346][T20592] ? rcu_is_watching+0x15/0xb0 [ 661.693363][T20592] ? pcpu_alloc_noprof+0x261/0x19c0 [ 661.693383][T20592] ? __pfx___mutex_lock+0x10/0x10 [ 661.693397][T20592] ? __mutex_lock+0x319/0x1550 [ 661.693416][T20592] ? __alloc_workqueue+0x9f8/0x1f50 [ 661.693437][T20592] pcpu_alloc_noprof+0x261/0x19c0 [ 661.693456][T20592] ? rcu_is_watching+0x15/0xb0 [ 661.693475][T20592] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 661.693499][T20592] __alloc_workqueue+0xa88/0x1f50 [ 661.693523][T20592] alloc_workqueue_noprof+0xe3/0x210 [ 661.693544][T20592] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 661.693568][T20592] ib_mad_init_device+0x944/0x20a0 [ 661.693596][T20592] ? __pfx_ib_mad_init_device+0x10/0x10 [ 661.693611][T20592] ? do_raw_spin_unlock+0xf5/0x210 [ 661.693632][T20592] ? _raw_spin_unlock+0x28/0x50 [ 661.693653][T20592] add_client_context+0x37c/0x7a0 [ 661.693670][T20592] ? __pfx_add_client_context+0x10/0x10 [ 661.693684][T20592] ? xa_find+0x25b/0x2b0 [ 661.693702][T20592] enable_device_and_get+0x19c/0x3e0 [ 661.693724][T20592] ? __pfx_enable_device_and_get+0x10/0x10 [ 661.693747][T20592] ? device_add+0x70b/0xbb0 [ 661.693766][T20592] ib_register_device+0x110f/0x13e0 [ 661.693790][T20592] ? __pfx_ib_register_device+0x10/0x10 [ 661.693811][T20592] ? xas_start+0x3d4/0x770 [ 661.693827][T20592] ? xa_load+0x60/0x210 [ 661.693840][T20592] ? xa_load+0x60/0x210 [ 661.693853][T20592] ? xa_load+0x60/0x210 [ 661.693867][T20592] ? xa_load+0x1db/0x210 [ 661.693883][T20592] ? ib_device_set_netdev+0x5c9/0x6d0 [ 661.693900][T20592] rxe_register_device+0x1e3/0x350 [ 661.693922][T20592] rxe_net_add+0x81/0x110 [ 661.693949][T20592] rxe_newlink+0xf4/0x1c0 [ 661.693967][T20592] nldev_newlink+0x5bc/0x650 [ 661.693987][T20592] ? __pfx_nldev_newlink+0x10/0x10 [ 661.694045][T20592] ? bpf_lsm_capable+0x9/0x20 [ 661.694059][T20592] ? security_capable+0x7e/0x2c0 [ 661.694079][T20592] ? __pfx_nldev_newlink+0x10/0x10 [ 661.694098][T20592] rdma_nl_rcv+0x6d1/0xa10 [ 661.694122][T20592] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 661.694149][T20592] ? netlink_deliver_tap+0x2e/0x1b0 [ 661.694165][T20592] ? netlink_deliver_tap+0x2e/0x1b0 [ 661.694183][T20592] netlink_unicast+0x75c/0x8e0 [ 661.694201][T20592] netlink_sendmsg+0x813/0xb40 [ 661.694220][T20592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 661.694238][T20592] ? aa_sock_msg_perm+0xf1/0x1b0 [ 661.694258][T20592] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 661.694280][T20592] ____sys_sendmsg+0x972/0x9f0 [ 661.694297][T20592] ? __might_fault+0xaf/0x130 [ 661.694317][T20592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 661.694335][T20592] ? import_iovec+0x73/0xa0 [ 661.694359][T20592] ___sys_sendmsg+0x2a5/0x360 [ 661.694374][T20592] ? __lock_acquire+0x6b5/0x2cf0 [ 661.694391][T20592] ? __pfx____sys_sendmsg+0x10/0x10 [ 661.694409][T20592] ? futex_wait+0x2a2/0x390 [ 661.694438][T20592] ? __fget_files+0x2a/0x420 [ 661.694455][T20592] ? __fget_files+0x3a0/0x420 [ 661.694476][T20592] __x64_sys_sendmsg+0x1bd/0x2a0 [ 661.694492][T20592] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 661.694511][T20592] ? rcu_is_watching+0x15/0xb0 [ 661.694531][T20592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.694547][T20592] do_syscall_64+0x15f/0xf80 [ 661.694562][T20592] ? trace_irq_disable+0x3b/0x140 [ 661.694583][T20592] ? clear_bhb_loop+0x40/0x90 [ 661.694600][T20592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.694615][T20592] RIP: 0033:0x7f590d19ce59 [ 661.694631][T20592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.694646][T20592] RSP: 002b:00007f590e0e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 661.694663][T20592] RAX: ffffffffffffffda RBX: 00007f590d415fa0 RCX: 00007f590d19ce59 [ 661.694675][T20592] RDX: 0000000000008014 RSI: 0000200000000200 RDI: 0000000000000003 [ 661.694686][T20592] RBP: 00007f590d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 661.694696][T20592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.694706][T20592] R13: 00007f590d416038 R14: 00007f590d415fa0 R15: 00007ffef42b4068 [ 661.694724][T20592] [ 662.228300][T20592] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 662.229707][T20592] infiniband syz0: Couldn't open port 1 [ 662.262807][T20592] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 662.278372][T20592] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 662.295653][T20592] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 662.311385][T20638] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 662.321037][T20592] RDS/IB: syz0: added [ 662.334236][T20592] smc: adding ib device syz0 with port count 1 [ 662.340492][T20592] smc: ib device syz0 port 1 has no pnetid