last executing test programs: 1m28.320855043s ago: executing program 1 (id=4081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20040004) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1c4, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000000900010073797a3000000000a8000000090a010400000000000000000700000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000d640012802c0001800a0001006c696d69740000001c0002800c00024000000000000010000c0001400000000000000087340001e5b70000006c696d6974000000240002800c000240000000000000d2360c00014000000000000000070800044000000001080003400000011014"], 0xf0}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) 1m27.959230324s ago: executing program 1 (id=4086): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) (async) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) (async) r5 = socket$netlink(0x10, 0x3, 0x6) (async) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 1m27.794950841s ago: executing program 1 (id=4089): syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0800452e003800660000080190780a010102ac141417050290787f000001455f0501006607f2482f000f00000000ac1414bb000022eb00"/70], 0x0) 1m27.592207985s ago: executing program 1 (id=4091): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r1, 0x9, 0x0, 0x80000000}) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000016c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xa211580}, 0xc, &(0x7f0000001680)={&(0x7f0000000380)={0x12e4, 0x14, 0x200, 0x70bd2c, 0x25dfdbfb, {0x10, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "561b18424c8c05974211eecf51151683206e53c8e395f77396dc9c38df187716476c0f6c01308c6ffee97aaa92171a074260a2cdaa6581248f88661586bc5a92c97d94383e19eea79ab4b4219ac89dcc1bccecdf2d7d28aebe069d76488c28e0a60b441fc9c27b128f06a4d97238cc57bc72a2b24a72537ca7acb7de3bb2758ba595bd6dc759e56464898b36f67209737b9ccfcd58cd593ee4d4"}, @INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "472cb5b0ad63750089a1f834a6635f7e3553bdc932a9cde8eaccf68ee898085418430f81a98ab59ee4b66def1b26fcd5ef2930eca76c15ded786d83bf52935f42b42303081e32d975db15c677d0383f6b057b7ab25b62a339aeb963939a5a287616ab12e66a2fa375ab34ff995453f7628e08d5d0230f2de82f8d6372281d645d5cb0d9912694fe46346f0b2457c0503cd54a014aa70dcb34c74e890e16463b9c17b88a7bd609545d6f29ec7948035dce24a44b535596b2d5e4ba589f04f4ced80b44039365b9388521102ad4b3f8b29fb8dab091129ed83fcac97a7ce65"}, @INET_DIAG_REQ_BYTECODE={0x24, 0x1, "0dc940028805457e5a256341cb2c16fc8eda7332d7663dcfd9d832bf6de9b862"}, @INET_DIAG_REQ_BYTECODE={0x23, 0x1, "7f94884bf927ff945ad7090000007d28e413d6e77bb759"}, @INET_DIAG_REQ_BYTECODE={0x128, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x12e4}, 0x1, 0x0, 0x0, 0x800}, 0x4010) 1m27.330694166s ago: executing program 1 (id=4094): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)={0x14, 0x14, 0x1, 0x70bd2d, 0x0, "", [@generic='\t']}, 0x14}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x3, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000080)={0x10000000}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000000)={0xa0000001}) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) shutdown(r3, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000012c0)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r9, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40) r10 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x4924b68, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x21, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000009bdb4998cc1db7cfff00000086fa1759", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000003000000085000000be0000001867000000000000000000000b000000850000000f000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000800)='GPL\x00', 0xfffffffe, 0xc6, &(0x7f0000000840)=""/198, 0x40f00, 0xd, '\x00', r9, 0x25, r10, 0x8, &(0x7f0000000940)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x1, 0xf, 0x8000, 0x4}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000009c0)=[{0x4, 0x4, 0x2, 0x7}, {0x2, 0x1, 0xf}, {0x2, 0x5, 0x10}, {0x2, 0x1, 0xb, 0x8}, {0x0, 0x1, 0x2, 0x7}, {0x5, 0x3, 0xf, 0xb}], 0x10, 0x2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, 0x0, 0x30, 0x0, @val=@netkit={@void, @value=r11}}, 0x1c) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r12, 0x4) r13 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r13, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) getpeername$inet6(r10, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000280)=0x1c) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) 1m26.887083239s ago: executing program 1 (id=4100): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3300000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x78}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x12, &(0x7f0000000080)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "e3", "dd"}}}}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x40, 0x7800, 0x8, 0x80000001, {{0x1e, 0x4, 0x2, 0x4, 0x78, 0x67, 0x0, 0x2, 0x29, 0x0, @broadcast, @remote, {[@noop, @end, @timestamp={0x44, 0x28, 0x50, 0x0, 0x7, [0x7ff, 0x80000000, 0x5, 0x2bb, 0x8, 0x6, 0x4, 0x7, 0x100]}, @timestamp={0x44, 0x10, 0xc7, 0x0, 0x8, [0x3, 0x9, 0xfffff59d]}, @timestamp={0x44, 0x24, 0x28, 0x0, 0xd, [0x2d, 0x80000000, 0x0, 0x80000001, 0x401, 0xc, 0x1, 0x2]}, @ra={0x94, 0x4, 0x1}]}}}}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xb, 0x400, 0x6, 0x8, 0x40, r1, 0x336a, '\x00', r2, r3, 0x1, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) unshare(0x28000600) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5202) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f00000002c0)=0x1, 0x4) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x7, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x20000) mmap(&(0x7f00006bf000/0x3000)=nil, 0x3000, 0x4, 0x1011, r6, 0x0) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r7, 0x800442d3, &(0x7f000000eec0)={0x6, 0x7, 0x2a4, @random="d60fea76ac0e", 'veth1_vlan\x00'}) r8 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r8, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x18, 0xff, 0xfffffffe, 0x0, 0x8, 0x3, 0x4, 0x6, 0x0, 0x7, 0x80000003, 0x7fffffff, 0xfffb, 0x8, 0x5, 0x6, [0xe, 0xfd]}}) 37.278671415s ago: executing program 32 (id=4100): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3300000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x78}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x12, &(0x7f0000000080)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "e3", "dd"}}}}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x40, 0x7800, 0x8, 0x80000001, {{0x1e, 0x4, 0x2, 0x4, 0x78, 0x67, 0x0, 0x2, 0x29, 0x0, @broadcast, @remote, {[@noop, @end, @timestamp={0x44, 0x28, 0x50, 0x0, 0x7, [0x7ff, 0x80000000, 0x5, 0x2bb, 0x8, 0x6, 0x4, 0x7, 0x100]}, @timestamp={0x44, 0x10, 0xc7, 0x0, 0x8, [0x3, 0x9, 0xfffff59d]}, @timestamp={0x44, 0x24, 0x28, 0x0, 0xd, [0x2d, 0x80000000, 0x0, 0x80000001, 0x401, 0xc, 0x1, 0x2]}, @ra={0x94, 0x4, 0x1}]}}}}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xb, 0x400, 0x6, 0x8, 0x40, r1, 0x336a, '\x00', r2, r3, 0x1, 0x0, 0x2}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) unshare(0x28000600) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5202) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f00000002c0)=0x1, 0x4) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x7, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x20000) mmap(&(0x7f00006bf000/0x3000)=nil, 0x3000, 0x4, 0x1011, r6, 0x0) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r7, 0x800442d3, &(0x7f000000eec0)={0x6, 0x7, 0x2a4, @random="d60fea76ac0e", 'veth1_vlan\x00'}) r8 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r8, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x18, 0xff, 0xfffffffe, 0x0, 0x8, 0x3, 0x4, 0x6, 0x0, 0x7, 0x80000003, 0x7fffffff, 0xfffb, 0x8, 0x5, 0x6, [0xe, 0xfd]}}) 4.015369514s ago: executing program 3 (id=4556): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a30000000004c000000030a010200000000000000000a0000000900010073797a30000000000900030073797a31000000000a000700736f757465000000140004800800014000000000080002"], 0x94}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r2, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_ENABLE_SE(r3, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x24, r4, 0x9157cbf140e5b98c, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) r6 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000600)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3, "b60e81cef18f46"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001600)={{r7, 0x2, 0x6, 0x5, 0x9, 0x7, 0xe04, 0x2, 0x7, 0xfffffff7, 0x3, 0x5, 0x5, 0x1, 0x1}}) 4.014241024s ago: executing program 0 (id=4558): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000540)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0xb) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x200, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x88ac79b4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x48}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x13) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'dh\x00', 0x5, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0xf6c12eb8213c0b07, 0xcd, 0x1}}, 0x44) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, 0x0, 0x400c000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000000039000100faff0700ffdadf2501000000a092efdbdcca6b3df0bf1c5a2b4046a7b1f1cf08894ddb523dd68cf66dd17968cc1c807da468a2fbddd45e417c46760e09307f13a5756b15309b9eb1aded429047d34e42cc4c5d0fa29e6595bf9e41f689efcbc0ab4f55fa8327b154db8aea4d5d5944af24a6b74a0958fc45831bf869fc94622681521652f6d98c971d6e1351ac77ff5a297d08c13fc89fc294bac7c3a3cade3e4ae82ecfdd73815e5facc161e786230c20e082d87e32878979fb44773e5cc698fe67fff9aa9f679b130cc4e750b5a9d1c3fcf53101f2131263"], 0x20}, 0x1, 0x0, 0x0, 0x2400c800}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x5fe, 0x0, 0x1c, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x380, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xdd, 0x6, "441992d89c3b98c0713cb8f9af7717496326f5c0ec0af1401698e90e1027609e292218ae78441ac9da949d49014f98e7ef41f5e6e0ee1e363feec8e13d5fdb53653ed526dc2f099f234ecd85159c8f6d876ee5ee2d827e10e28d695c0c5a3d91dd8c6e6e221fa218b843e8938188bae4148b36506fa7c4796e24d0cf706a3a8d6298760e9eb3d468449dd7059f2b695060d54ca2096e507d1ce343f25887df668eb3a1821f7797a55009d9be760c7d1764fc1c492b0a46ecd41ddbaf8777dae24a814b1a0b5fad7a799ecffae7590ecbfe545475b9a6174489"}, @NFTA_TABLE_USERDATA={0xbd, 0x6, "fc27c08c99e7d373914ac488b1cb859a6d463ce624fa5d76546b51326f8a4c299bd40bd4e605a47cf979a515582d3becfa92be67e766d353199200e42b5b8998c93860f84bd12addc2711f9b69e5df0fd344c0530af04d50320107ca45cbf801c4842e82afd9787b4a806b5e6a7173722cb53dc42ac99755dadf54bfae03e595860022d3ace737ad11c99749794c8a681f1e9b8bb2f48ae5becece2422e63c8c85e6df06b5e9ed95a4a859ab1d75d55dcdac241ffd5226587a"}, @NFTA_TABLE_USERDATA={0xd1, 0x6, "104365a79e8eefeb245b62ab67ec5a2c4ea21ee06028a8267d72718cfc13b4cb5a4967b16de6f54a31a87cb97bedc8e17419d7d0623ed88f1db217bdf3fcbf09a291b674bbcebd9ff449053f4794004f372276cc3aabf2a6e7094186ddb067f552854bf72bf47865856c0c206f75256ce8f8201fd9f6190a68352730315ae21730d6c5f92d7d5c6ee1826fe9c8e587c97e52edd1a6ab52af2bf84add0f5e5bbeb11b194dcaf5db26bb91f38e0c1554681d075b8ea2917ed3e7b80db7fc4b48bfc9799f1a654f070a47042328a4"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xe1, 0x6, "f140f0e99d14f4f292fe9706fd0776899293ae3ea555d6dfd818e443773c3f52a703c395d63614ceb3d6f38c5033e8d5fc8459f6db2515fcb7a7cd8ff72f30740cb1f0f7d5a232cde3b65fcb42016526aea8697a62e0df1ddf5eb240d53f8aa9bc5e680925c1818faca08d99283957e174f8d3441dac25be36e038777c09a795a5dfc32c6eab5fc62ed4cba9a99ffee4bcab0de5de24b11acf500d626e8f2ae71c3b4b222ec9bfd30a55ddfa97039b1e610d0050a312ef37d3f543399f6cee30bdfd7c92fd9fe3fa8a2ad02f8bfa66196b3c1ef48b6cd5e0a33f21eb5b"}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x3f4}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x5, 0x0) 3.811676185s ago: executing program 2 (id=4562): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6aff9bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0xd, 0x41}, 0xffff, [0xde99, 0x8e9, 0xc, 0xc4, 0x43, 0xfffffffffffffffb, 0x28, 0x1, 0x7fffffffffffffff, 0x7ffffffffffffffb, 0x9, 0x5, 0x6, 0x8, 0x7, 0x4]}) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@ba={{}, {0x8}, @device_b, @broadcast, @multi={{0x1, 0x1, 0x1, 0x0, 0x4}, [{0x0, 0x1, {0x1, 0x9}, "8f08d05bf2b1a010"}, {0x0, 0x4, {0x5, 0x7f}, "de566c1519070ed6"}, {0x0, 0x2, {0x1, 0xf}, "ad7ab2dee75efab6"}, {0x0, 0x1, {0x3, 0x3}, "58538fb790d59d8c"}], {0x0, 0x1, {0x0, 0x2}, "624e773217f2f77e"}}}, 0x4e) 3.619924064s ago: executing program 3 (id=4563): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) epoll_create1(0x80000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000e42dbdf9e153778400000000000000000000440005002001000000000000000000000000000000000013c51a03a7a7c6897ddf02320000000a000000fc0100000000000000000000000000000000000004000000000000000000000000000000598b8d6137cc23494c8dfc3ea394d3e51b990a273b76df1f921500000000"], 0xfc}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x800000, @mcast1, 0x100}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20008045, &(0x7f0000000000)={0xa, 0x2, 0x1000, @empty, 0x3}, 0x1c) 3.048241484s ago: executing program 2 (id=4567): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000000600)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x19}, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="1a", 0x1}], 0x1}}, {{&(0x7f0000000a80)={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00', 0xeb}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000340)="94", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x3, 0x10, @private0, 0xb4a9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="9c", 0x1}], 0x1}}], 0x3, 0x20000040) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000300)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x10) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, 0x14, 0x220, 0x70bd2a, 0x25dfdbfe, {0x2c, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x24040040}, 0xc000) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r2}, 0x38) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/18, 0x12}, {&(0x7f0000000080)=""/62, 0x3e}], 0x2, &(0x7f0000000280)=""/168, 0xa8}, 0x40010000) 2.958225075s ago: executing program 3 (id=4569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x3, @private2, 0x7}}, 0x4000}, 0x90) r2 = socket(0x10, 0x803, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockname(r5, 0x0, &(0x7f0000000000)) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x837}], 0x3}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0xd8, 0x2c, 0x300, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {}, {0x5, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xa0, 0x2, [@TCA_CGROUP_ACT={0x9c, 0x1, [@m_xt={0x98, 0x0, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xe47e}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x2b, 0x6, "83513b09d4e42c310e505759c98cb582ddd44a2fa1cad559fc5d1155dbf284cbef52cae789d368"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x5}}]}, 0xd8}}, 0x20040054) 2.884062609s ago: executing program 0 (id=4570): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x4e03, 0x800008, @local, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000340)=0x32, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @private=0xa010100, {[@rr={0x7, 0x3, 0x6a}, @generic={0x44, 0x6, "06750100"}]}}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x0, @loopback, @multicast1, {[@rr={0x7, 0x3, 0x99}]}}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448cb, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x23, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @alu={0x4, 0x1, 0x3, 0x3, 0xa, 0x4, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x45}]}, &(0x7f0000000400)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000440)=""/12, 0x41000, 0xc, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)=[0xffffffffffffffff], &(0x7f0000000540)=[{0x3, 0x3, 0x3, 0x4}], 0x10, 0xc}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x12}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x21, @none}, 0xe) sendto$inet6(r1, &(0x7f0000000280)="823e", 0x2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)={0x2c, r10, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) 2.054758873s ago: executing program 2 (id=4577): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000008f0b000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000003850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xfffffffffffff4fb, 0x70bd25, 0x25de59f7, {0x0, 0x0, 0x0, 0x0, 0x2813, 0x2c31}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x40}, @IFLA_IPTUN_PMTUDISC={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20004800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000780)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbd8abc89b6f59ec", 0x0, 0x1ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000000606010100f5519db9d76bb3c1000092cb5c9800070000000900030073797a310b0000000900020073797a310000000002aed211dbb4f631b2ff97bd6f07ad10e1a80913b323e17910128c220865299c852291"], 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r7 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x3}, 0x7}) ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0xba98575a95aeb70d) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r8) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00defa0139070000", @ANYRES16=r9, @ANYBLOB="010025bd7000fcdbdf25050000000800020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r9, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4008080) ioctl$TUNSETLINK(r6, 0x400454cd, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) close(r10) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000900)=r2, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 1.969499432s ago: executing program 5 (id=4578): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000009111bc0000000000e8740fc100"/32], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f00000012c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="59b6c9", 0x3}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000200)="f87b", 0x2}], 0x1}}], 0x2, 0x4c040) shutdown(r0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x7, 0x5b, "0681df"}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b"], 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "cf"}]}, 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x9, 0x1}, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.827691571s ago: executing program 4 (id=4579): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, 0x0) 1.811154074s ago: executing program 3 (id=4580): r0 = socket(0x10, 0x80002, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000140)=@req={0x2, 0x1, 0x4, 0xb8}, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) (async) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}], 0x20) (async) sendmmsg$inet6(r4, &(0x7f0000002580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)="04f4", 0x2}], 0x1}}], 0x1, 0x4000040) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="008500000000000008002e000100000008001300", @ANYRES32=0x0, @ANYBLOB="fd78df642700110000000034d6b03b301e672da3ebcea5fae23c19177c8673031a34b342a0c7fb1570c3e4dca81f5778cfa96404ef7a75587d0b7a5200968a3976ab476d6a77d7c81122ae64"], 0x30}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) write$tun(r3, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x5, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0xc, 0xbdd, 0x65, 0x0, 0xd, 0x6c, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xbeb) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000000414642900010000e1ffff00ff000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10440}}}}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}}, 0x0) (async) unshare(0x200) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r9, 0x1, 0x1f, 0x0, &(0x7f00000000c0)) ioctl$AUTOFS_IOC_EXPIRE(r9, 0x810c9365, &(0x7f00000003c0)={{0xfffffff7, 0x3}, 0x100, './file0\x00'}) 1.708056863s ago: executing program 0 (id=4581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0}, &(0x7f0000cab000)=0xc) sendmsg$netlink(r0, &(0x7f0000000780)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x200}, 0x3, &(0x7f0000000680)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1d8}, {&(0x7f0000000640)={0x34, 0x3f, 0x400, 0x70bd25, 0x25dfdbfe, "", [@nested={0x1c, 0x2b}, @typed={0x8, 0x8, 0x0, 0x0, @u32=0x6}]}, 0x34}], 0x2, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x880d4}, 0x4) r3 = epoll_create1(0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000080)={0x2000001a}) shutdown(r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002cc0)=@newtaction={0x488, 0x30, 0x1, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x733e, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0xcff, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x5, 0x0, 0x8000, 0x0, 0xf23fd53b, 0x0, 0x0, 0x4, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0xfffffffc, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x80000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x1, 0xc, 0x0, 0x42000, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0xc192dfb, 0x0, 0x4120c65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0xad6, 0x0, 0x0, 0x5b3, 0x0, 0xfffff7fd, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x9, 0x1, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0xd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xb, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x6, 0x800, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x9, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2e, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x1, 0x4, 0x80000004, 0x4, {0x5, 0x0, 0x8, 0x1, 0x7, 0x1f7}, {0x8, 0x0, 0x6, 0x801, 0x21ff}, 0x3, 0x82e, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r5, &(0x7f0000000140)={0x2000200b}) 1.583851112s ago: executing program 5 (id=4582): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f0000000340)=""/242, 0xf2, 0x0, &(0x7f0000000500)=""/123, 0x7b}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x1}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="de2868a1b2020d4ea3ff033695eb", 0xe}], 0x1}}], 0x1, 0x1) r5 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000200)=0x2000c0, 0x4) write(r5, &(0x7f0000000000)="00000000000010000000", 0xffffffad) socket$alg(0x26, 0x5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f0000000340)=""/242, 0xf2, 0x0, &(0x7f0000000500)=""/123, 0x7b}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) (async) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) (async) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x1}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="de2868a1b2020d4ea3ff033695eb", 0xe}], 0x1}}], 0x1, 0x1) (async) accept4(r0, 0x0, 0x0, 0x80800) (async) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000200)=0x2000c0, 0x4) (async) write(r5, &(0x7f0000000000)="00000000000010000000", 0xffffffad) (async) 1.538437611s ago: executing program 4 (id=4583): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f00000000c0)=[{}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x6}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x2c, r0, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.386290968s ago: executing program 5 (id=4584): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x131080, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004bf00000400000002"], 0x48) (async) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r4, 0x4, 0x8}, 0xc) (async, rerun: 32) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (rerun: 32) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, 0x1a, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x6c, 0x30, 0x1, 0x70bd25, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x9, 0x4, 0x7, 0x8}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000002000000310a000008"], 0x50) (async, rerun: 32) bpf$PROG_LOAD(0x2, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="120000000000000029", @ANYRESDEC=r2, @ANYRES8=r1], 0x18}, 0x8000) (async) close(r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001340000001f0a03000000000000000000020000000900010073797a3000000000080003400000001e0c0006"], 0x98}}, 0x0) (async, rerun: 64) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0xf, 0x10}, 0xc) (rerun: 64) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r8, &(0x7f00000000c0)="6ae749bd99290ea502fcf2c1759139e9bbbe0397d9526961dcc7f44dd6e365a888014bb222d3ad43a7be021c86953233906feda19b935f70ce5f56cde94b7a22d4dc8595deef5d137f64ff73de12d42aa039e0b42a8f23"}, 0x20) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000800)={'lo\x00', 0x0}) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r9) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r11, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x28000805}, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r12, 0x29, 0x39, &(0x7f00000001c0)={0x21, 0x0, 0x2, 0xc}, 0x8) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xb, 0xb}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x15181b09c6bdc4c6}, 0x20008004) 1.385484067s ago: executing program 0 (id=4585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400810}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x1, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4040004) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x70bd28, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1000}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x38}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.374214776s ago: executing program 2 (id=4586): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x4e1d, 0x0, @mcast2, 0x8}}, {{0xa, 0x4e1e, 0x20007, @mcast2}}}, 0x108) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000103a00fc000000000000000000000000000100ff020000000000000000000b00000001"], 0x0) 1.22695124s ago: executing program 3 (id=4587): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xfffffffffffffe1a, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYBLOB="01002bbd7000000000001400000018000180140002006e65746465"], 0x34}}, 0x8000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x20004094) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4008011) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d968119f68f58d94773b9ab884100003c"], 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x67476000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000008900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c3e6b85c80000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0xc045}, 0x20050841) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) accept(r4, &(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000002c0)=0x80) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c00008fd910014e006113fb216b3bea6dd8626a80181dad441652eac05234d38c55d2493af7083e3b6b0bf6122b0f04146d3aa1721b6a283be09bcc85374c9a2bc7a4d364b7ca0e810c81cf39867cd45827678c2a98c205b35de2bbe90b256814280b78c57cba9b6f192ff9e7eae1e09eb653f587b0e4593c0f2149779b0651edf57d71dc579e65941355695f900bdba9b8ac35e003bfaf06e3632e", @ANYRESDEC=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRESOCT=r6, @ANYBLOB="c288e89aadbfb38c4a8bab8540c71c42"], 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xac, r7, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x2}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x3}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x2b}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xe}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x2f}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xfffb}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}]}, @NL80211_ATTR_KEYS={0x1c, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "d2bade4d985ffe125c00f65590"}]}]}, @NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0x10, 0x24, [{0x6c}, {0x1, 0x1}, {0x4b}, {0x30}, {0x55}, {0x12}, {0x1b}, {0x1b, 0x1}, {0x18, 0x1}, {0xc, 0x1}, {0x4, 0x1}, {0x6c, 0x1}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0xac}}, 0x40001) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r7, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xf}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5a}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xd}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) 1.225499775s ago: executing program 0 (id=4588): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r3 = socket(0x1d, 0x6, 0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r5 = socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000480)={0x0, 'veth0_to_hsr\x00', {0x2}, 0x51}) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000e88a800008100007eab91b32dd80cffd20adf8cf828782802010045fc006953d778f6c9a77f00"], 0x32) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r8, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) recvmmsg$unix(r2, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) readv(r10, &(0x7f0000000780)=[{&(0x7f0000000100)=""/39}, {&(0x7f0000000380)=""/210}, {&(0x7f0000000540)=""/139}, {&(0x7f0000000600)=""/47}, {&(0x7f0000000280)=""/90}, {&(0x7f0000000740)=""/49}], 0x1000000000000149) recvmmsg(r2, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/55, 0x37}], 0x1}, 0x8}], 0x1, 0x40000180, 0x0) preadv(0xffffffffffffffff, &(0x7f0000003c00)=[{&(0x7f0000001480)=""/255, 0xff}, {&(0x7f00000000c0)=""/1, 0x1}, {0x0}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/4096, 0x1000}], 0x5, 0x23a1, 0x1) close(r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 1.198368678s ago: executing program 2 (id=4589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160aef070000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000170a010800000000000000000200000809000200735d7a300a0000000900010073797a30"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x6, 0x8012, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c300000000033e0000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180109000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, &(0x7f0000000940)="ebd4d29bd5ba394b6fc9cd8fa4a860190c00751e56aba9de406b6b22b36351e31dffc60cd8770dadac52c548be03e5e76af1672ef2285e407666278429a9bd4381024e4d2cf18ce17d6c6e0bc550d7c056ab163492863cc5901daab14bd4aac8dcf1fb3a27a59baa6643ecd35ee0f1cf6017f397a3d6b18ffa73a8eb45043bc56773cbad78c3f6356987ec4eb871cbc1256f0b260ba497a2a1eec9aa828865e8c6e0ebf3", 0x0}, 0x20) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x7f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) bind$unix(r4, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @broadcast}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000000500)=""/135, 0x87, 0x0, &(0x7f00000005c0)=""/153, 0x99}}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000ff00000300000000000000000000000000cdb9d2c34d0704b5caec9bfb874e63ddde1808d68c5867bda0e6c094940e0d9f40b5752d", @ANYRES32, @ANYBLOB="00e56c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000300"/28], 0x50) r8 = socket$inet6(0xa, 0x2, 0x3a) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) sendfile(r8, r10, 0x0, 0x400000013) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @jmp={0x5, 0x1, 0x2, 0xa, 0x5, 0x80, 0xaec6946e026f26f7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000001c0)='GPL\x00', 0xe0ed, 0x9c, &(0x7f0000000200)=""/156, 0x41000, 0x41, '\x00', r5, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xc, 0x0, 0x85}, 0x10, r6, 0x0, 0x2, &(0x7f0000000780)=[r7, r10], &(0x7f00000007c0)=[{0x0, 0x1, 0xb}, {0x0, 0x5, 0xf}], 0x10, 0x8}, 0x94) 1.165665184s ago: executing program 5 (id=4590): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b7050000080000df850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES64=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x28) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100)={r3}, &(0x7f0000000280)=0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000040000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r7, 0x80089419, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x7, 0x4, 0x30, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, 0x8000, 0x8000, 0x6, 0x7}}) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r10) write$nci(r10, &(0x7f0000000480)=ANY=[@ANYBLOB="9ddf5880"], 0x6f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0xb5f}, [@call={0x85, 0x0, 0x0, 0x7f}, @map_fd={0x18, 0x9, 0x1, 0x0, r7}]}, &(0x7f00000002c0)='GPL\x00', 0x3, 0x85, &(0x7f0000000400)=""/133, 0x41100, 0x0, '\x00', r9, 0x0, r10, 0x8, &(0x7f0000000900)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0x2, 0x5, 0xffffffff}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000980)=[{0x4, 0x5, 0x8, 0x8}, {0x2, 0x5, 0x1, 0x3}, {0x1, 0x3, 0x2, 0x5}], 0x10, 0x101}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b979ff03076003008cb89e08f086", 0x0, 0x20fe8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 969.173279ms ago: executing program 4 (id=4591): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) 962.803358ms ago: executing program 5 (id=4592): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x34, r1, 0x1, 0x0, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 855.729777ms ago: executing program 2 (id=4593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) (async) sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, &(0x7f0000000400)) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) (async) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 851.000088ms ago: executing program 4 (id=4594): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010000009d168b57bb75aed80000000000000000000000000000ac1414aa00"/56], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ec000000210001000000008000000000fc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac14140c000000000000000000000000fc000000000000000000000000000001e0000001000000000000000000000000fe87ca000000000000000000000000aa32020000ffffffff0200020000000000000000000000ffff7f000001fc0200000000000000000000005f000000fc020e00000000000000000000000001fc0200000000000000000000000700003c000000000000000a"], 0xec}}, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\x00\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x490, 0x30, 0xffff, 0x0, 0x25dfdbff, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x3, 0x5, 0x3, 0x5, 0x1, 0x401, 0x4, 0x9, 0x800, 0x0, 0x81, 0x9e, 0x4, 0x6, 0x5, 0x8, 0xd897, 0x7f, 0x4, 0x3, 0x9, 0x1346, 0x5, 0x8001, 0x3, 0x8, 0xdb, 0x1, 0x3f9, 0x7ff, 0x10001, 0xf5, 0x4, 0x2, 0x3, 0x9, 0x1, 0x3, 0x610, 0x8001, 0xc66, 0x6, 0x4, 0x10000, 0x80000001, 0x80000001, 0x6, 0x3a6, 0xffff3779, 0x5, 0xd, 0x4, 0x70, 0x800, 0x9, 0x401, 0x1, 0xb5, 0x8, 0xe3f, 0x9, 0x4, 0x810c, 0xa8, 0xfffffffb, 0x70, 0x2, 0x8c2f, 0x4, 0x2, 0xa, 0x100, 0xffff, 0x1, 0x6b0, 0x2, 0x6, 0x0, 0x77, 0x99, 0x7, 0x6, 0xe, 0xd5, 0x4000000, 0x7, 0x81, 0x5, 0x80, 0x4, 0x2, 0x5, 0x7, 0x3, 0x7, 0x2, 0xf, 0xebc0, 0x7, 0x6, 0xffff0001, 0xff, 0x8000, 0x0, 0x40, 0x200, 0x1, 0x7, 0xb, 0x7fff, 0xfff, 0x7, 0x1, 0xfffffff0, 0x9, 0xa92, 0x7, 0x1, 0x101, 0x8, 0x1, 0x1, 0xf91c, 0x6, 0xff, 0x6, 0xfffff001, 0x2, 0x26, 0x2, 0x90c, 0x5111, 0x2, 0x1, 0x6, 0x6, 0x9, 0xffffffff, 0x7, 0x4, 0x0, 0xc, 0x0, 0x7, 0x7, 0x8a, 0x5, 0xfffffffc, 0x80000001, 0x9, 0x7, 0xe, 0x8, 0x7, 0x8, 0x6, 0x3, 0x9, 0x4, 0x101, 0x4, 0x4c4, 0x3, 0x6, 0x9, 0x5, 0xa06, 0x0, 0x1e, 0x6, 0x4, 0x4, 0xb90, 0x5, 0xffff, 0xffff880e, 0x80000000, 0x101, 0x4, 0x1, 0xfffffff1, 0x1, 0x4, 0x800, 0xfffffdc1, 0xffffffff, 0x8, 0x5854, 0x2, 0xb81, 0x0, 0xfffff001, 0x4, 0x6, 0x8, 0x0, 0x7, 0x40, 0x6, 0x7, 0xc0e, 0x6, 0x81, 0x7, 0x37b1, 0x7c, 0xfe06409, 0x6c, 0x0, 0x2da1, 0x4, 0x0, 0x9, 0xff, 0x4, 0x1ff, 0xd, 0x2, 0x80000001, 0x8, 0x81, 0x7, 0x6, 0x20080, 0x7, 0x1, 0x1c3d4fab, 0x6, 0x3, 0xeaa7, 0x0, 0x3, 0x7f, 0x3, 0xa6, 0x1, 0x1, 0x8, 0x2, 0x8a1, 0x3, 0x3, 0x10000, 0x5, 0xd, 0x7, 0x23, 0x3, 0xc0000000, 0x7, 0x5, 0x7f, 0x3ff, 0x38, 0x1000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x3, 0xfffffff8, 0x8, 0xffff0000, {0xf, 0x2, 0x3, 0x5, 0x0, 0x8}, {0x8, 0x0, 0x6, 0x7, 0x8}, 0x1a496f8d, 0x9, 0x6}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x490}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000000), &(0x7f00000000c0)=0x30) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff01, 0x600}}, {{0x0, 0x0, &(0x7f0000000380), 0x5}, 0x10}, {{0x0, 0x0, 0x0}, 0x1}], 0x4000000000001b2, 0x48, 0x0) 439.573579ms ago: executing program 5 (id=4595): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x1, 0x100, 0x100, 0x6, 0x0, 0x3}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) socket(0x11, 0x800000003, 0x9) bind$packet(r4, &(0x7f0000000d00)={0x11, 0x5, r3, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x3000003, 0x100010, r5, 0x49546000) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 226.458568ms ago: executing program 3 (id=4596): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffab, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x8002, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x0, 0x2000000543}, {0x4, 0x7fffffffffffffff}, {0x3}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@private1}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "ffffcb7a0000000000000008000000000000"}}]}, 0x16c}}, 0x48080) syz_emit_ethernet(0x256, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9202203afffe8000000000000000000000000000bbff02000000000000000000000000000186009078000000000000000000000000030aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0x7fffffff, {0x3, 0x6, "7b7f79", 0x4, 0xff, 0x1, @empty, @empty, [], "ea073fefe7252061"}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012800b000100627269646765000014000280080008008100"], 0x44}}, 0x4) 150.979211ms ago: executing program 4 (id=4597): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1b8, 0x240, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @private=0xa010101, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {0xff}, 0x88, 0x3, 0x10}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket1={{0x28}}, @common=@inet=@set2={{0x28}, {{0x0, 0x4, 0x6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0xffffff00, 0x0, 0xffffff00], 0x4e21, 0x4e23, 0x4e20, 0x4e23, 0x8, 0x4, 0x5f4a, 0x100, 0x6}}}, {{@ip={@empty, @empty, 0xff000000, 0xff000000, 'wlan0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0xc, 0x0, 0x60}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "c3b4fa629327614a", "fd6fd0497ed47299712c60a0166eff7d", "91ad32eb", "4bc4dd698a2fb3db"}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x4e, &(0x7f0000000440)=ANY=[@ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 47.143922ms ago: executing program 4 (id=4598): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500c3f0541f"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) syz_emit_ethernet(0x134, &(0x7f0000000340)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@val={0x88a8, 0x1, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @dccp={{0x15, 0x4, 0x0, 0x2f, 0x11e, 0x66, 0x0, 0xf, 0x21, 0x0, @private=0xa010100, @private=0xa010102, {[@noop, @lsrr={0x83, 0x1b, 0x13, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x32}, @multicast1, @local]}, @cipso={0x86, 0x12, 0x3, [{0x0, 0xc, "876fd6ade1f50b63bd6f"}]}, @rr={0x7, 0x7, 0x85, [@broadcast]}, @rr={0x7, 0x7, 0x7b, [@broadcast]}, @noop]}}, {{0x4e24, 0x4e24, 0x4, 0x1, 0x9, 0x0, 0x0, 0x4, 0x5, "b1ea8b", 0x8, "943026"}, "80c7167a5cad5317609d4afb049a03387537335e644ed6665e2ec083a2df5119479118a003498d018a3ecaad20641d3d3bb7fd91a806daddaf2ecb24117869df57e98253a9d7ee54eccdc0353704b3d6ce84fc4ace197b99a1fe3dbd9c2b99d4cff834ac76196ebc3810545dcb8c0e41060a89d36e15b168dc5788101da658aa7599a0188287f3285cd95fbc5915a90aa3e7895d0013a9b525b54a134a58cb707ddc1d7e801b0bbcf181ccf94da3f4e46c0d94838fbb302ada72"}}}}}, &(0x7f0000000480)={0x0, 0x3, [0xe85, 0xde0, 0x726, 0xdcc]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) socket$netlink(0x10, 0x3, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500c3f0541f"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) (async) syz_emit_ethernet(0x134, &(0x7f0000000340)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@val={0x88a8, 0x1, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @dccp={{0x15, 0x4, 0x0, 0x2f, 0x11e, 0x66, 0x0, 0xf, 0x21, 0x0, @private=0xa010100, @private=0xa010102, {[@noop, @lsrr={0x83, 0x1b, 0x13, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x32}, @multicast1, @local]}, @cipso={0x86, 0x12, 0x3, [{0x0, 0xc, "876fd6ade1f50b63bd6f"}]}, @rr={0x7, 0x7, 0x85, [@broadcast]}, @rr={0x7, 0x7, 0x7b, [@broadcast]}, @noop]}}, {{0x4e24, 0x4e24, 0x4, 0x1, 0x9, 0x0, 0x0, 0x4, 0x5, "b1ea8b", 0x8, "943026"}, "80c7167a5cad5317609d4afb049a03387537335e644ed6665e2ec083a2df5119479118a003498d018a3ecaad20641d3d3bb7fd91a806daddaf2ecb24117869df57e98253a9d7ee54eccdc0353704b3d6ce84fc4ace197b99a1fe3dbd9c2b99d4cff834ac76196ebc3810545dcb8c0e41060a89d36e15b168dc5788101da658aa7599a0188287f3285cd95fbc5915a90aa3e7895d0013a9b525b54a134a58cb707ddc1d7e801b0bbcf181ccf94da3f4e46c0d94838fbb302ada72"}}}}}, &(0x7f0000000480)={0x0, 0x3, [0xe85, 0xde0, 0x726, 0xdcc]}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) (async) 0s ago: executing program 0 (id=4599): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) socket$inet6(0xa, 0x4, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x250, 0xc8, 0x8, 0x250, 0x5803, 0x340, 0x2e8, 0x2e8, 0x340, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xff], [], 'batadv0\x00', 'wlan0\x00', {0xff}, {}, 0x11, 0x1, 0x2}, 0x0, 0x230, 0x250, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'gre0\x00', {0x1, 0x1, 0x0, 0x5, 0x7ff, 0x7, 0x6, 0xfffffffd, 0x40, 0x20}, {0x100000000}}}, @common=@inet=@udp={{0x30}, {[0x4e24, 0x4e23], [0x4e23, 0x4e24]}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0xfffffffc, 0x800, 'snmp_trap\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @local, 0x20000}, 0xffffffffffffff4b) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delneigh={0x30, 0x1a, 0x1, 0x70bd28, 0xfffffffd, {0xa, 0x0, 0x0, 0x0, 0x80}, [@NDA_DST_IPV6={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x240008c1}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x17, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000850000005000000018010000ad6bd6539fe73ce000586e9be0090ef55b2f1156511717c30ea7b70c3c221722729e1ff7bd0efa0773102fc30000e67bf0122cc1aee0e0581f5be3005b3bf37bc44ffd399060bdfbf3d9b13de1a79ccceb169d454664a9c767261304a4e3731e2395f4fb8b1f6e8c1a98a01a12aba9f1b5ee5cfb512b938f49f3a85a63242864ec5d145508ab6921c534ac9dae9b34c5286fcfb52a8d3d05f50e5965631b79d40036a896d26ef328f2182ba0507f105c98001d9571fa82aacfdcebeb0d455582b95e886589737732496656df8593b8f0b40a6c6400"/247, @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000001900000095"], &(0x7f0000000540)='GPL\x00', 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) kernel console output (not intermixed with test programs): ter parsing attributes in process `syz.0.3236'. [ 452.140280][T19131] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.158744][T19375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3237'. [ 452.164268][ T6524] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.174811][ T6524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.209085][T19375] bond3: entered allmulticast mode [ 452.231841][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.239092][ T6525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.255550][T19377] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3237'. [ 452.592406][T19391] xt_connbytes: Forcing CT accounting to be enabled [ 452.622320][T19391] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 452.637567][T19397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.761959][T19402] vxcan2: entered allmulticast mode [ 452.823832][T19404] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3243'. [ 452.823863][T19406] tipc: Enabling of bearer rejected, failed to enable media [ 452.881434][T19411] netlink: 'syz.0.3245': attribute type 1 has an invalid length. [ 452.891440][T19411] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3245'. [ 452.907746][T19406] netlink: 'syz.1.3244': attribute type 1 has an invalid length. [ 452.915828][T19406] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3244'. [ 452.934343][T19406] NCSI netlink: No device for ifindex 0 [ 452.940388][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 453.107030][T19426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3244'. [ 453.175383][T19426] vlan0: entered promiscuous mode [ 453.191639][T19426] geneve1: entered promiscuous mode [ 453.231788][T19426] vlan0: entered allmulticast mode [ 453.281358][T19426] geneve1: entered allmulticast mode [ 453.431748][T19438] netlink: 'syz.2.3249': attribute type 1 has an invalid length. [ 453.573164][T19449] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3252'. [ 453.594979][T19131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.690018][T19453] netlink: 'syz.3.3253': attribute type 58 has an invalid length. [ 453.825579][T19466] netlink: 'syz.2.3254': attribute type 14 has an invalid length. [ 453.936730][T19475] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 454.140169][ T5634] Bluetooth: hci0: command tx timeout [ 454.418062][T19131] veth0_vlan: entered promiscuous mode [ 454.454994][T19131] veth1_vlan: entered promiscuous mode [ 454.580284][T19131] veth0_macvtap: entered promiscuous mode [ 454.602839][T19131] veth1_macvtap: entered promiscuous mode [ 454.664592][T19131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.710436][T19507] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 454.834112][T19131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.912989][ T6525] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.945754][ T6525] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.006648][ T6525] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.046105][ T6525] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.301088][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.347021][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.464111][ T6524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.507267][ T6524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.955721][T19580] xt_CT: You must specify a L4 protocol and not use inversions on it [ 455.959489][T19580] netlink: 'syz.3.3278': attribute type 3 has an invalid length. [ 456.282749][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 456.304532][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 456.316287][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 456.333527][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 456.345265][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 456.474004][T19604] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 456.893522][T19622] __nla_validate_parse: 19 callbacks suppressed [ 456.893543][T19622] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3284'. [ 456.962719][T19622] gretap0: entered promiscuous mode [ 457.024097][T19622] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3284'. [ 457.083643][T19622] 0ªî{X¹¦: renamed from gretap0 [ 457.094404][T19622] 0ªî{X¹¦: left promiscuous mode [ 457.104499][T19622] 0ªî{X¹¦: entered allmulticast mode [ 457.126054][T19622] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 457.406680][ T3347] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.419606][ T3347] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.430049][ T3347] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 457.540958][T19640] ip6tnl0: Caught tx_queue_len zero misconfig [ 457.556697][T19640] netlink: 'syz.3.3290': attribute type 3 has an invalid length. [ 457.724451][ T3347] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.760901][ T3347] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.789762][ T3347] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 457.960160][T19670] netlink: 276 bytes leftover after parsing attributes in process `syz.3.3297'. [ 458.015706][T19666] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3295'. [ 458.025689][T19666] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3295'. [ 458.036196][T19666] netlink: 'syz.0.3295': attribute type 5 has an invalid length. [ 458.044401][T19666] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3295'. [ 458.045928][T19661] syzkaller0: entered promiscuous mode [ 458.061118][T19661] syzkaller0: entered allmulticast mode [ 458.140441][ T3347] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.152312][ T3347] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.183195][ T3347] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 458.464134][ T49] Bluetooth: hci4: command tx timeout [ 460.545459][ T49] Bluetooth: hci4: command tx timeout [ 461.294392][ T3347] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.305082][ T3347] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.315790][ T3347] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 461.814897][ T29] audit: type=1107 audit(1781471368.590:11): pid=19709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 461.818404][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 461.925018][T19734] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.3306'. [ 462.064630][T19732] syzkaller0: entered promiscuous mode [ 462.082369][T19732] syzkaller0: entered allmulticast mode [ 462.253387][T19729] tipc: Started in network mode [ 462.262792][T19729] tipc: Node identity 9a243b42be93, cluster identity 4711 [ 462.271516][T19729] tipc: Enabled bearer , priority 0 [ 462.287647][T19735] tipc: Resetting bearer [ 462.381143][T19728] tipc: Resetting bearer [ 462.472540][T19728] tipc: Disabling bearer [ 462.516815][T19754] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3309'. [ 462.617711][ T49] Bluetooth: hci4: command tx timeout [ 462.785015][T19759] netlink: 'syz.2.3310': attribute type 2 has an invalid length. [ 462.793227][T19759] netlink: 'syz.2.3310': attribute type 9 has an invalid length. [ 462.801216][T19759] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3310'. [ 463.122239][ T3347] bond0 (unregistering): Released all slaves [ 463.132811][ T3347] bond1 (unregistering): Released all slaves [ 463.146730][ T3347] bond2 (unregistering): Released all slaves [ 463.168754][ T3347] bond3 (unregistering): Released all slaves [ 463.182341][ T3347] bond4 (unregistering): Released all slaves [ 463.199252][ T3347] bond5 (unregistering): Released all slaves [ 463.215791][ T3347] bond6 (unregistering): Released all slaves [ 463.262064][ T3347] bond7 (unregistering): Released all slaves [ 463.276086][ T3347] bond8 (unregistering): Released all slaves [ 463.289989][ T3347] bond9 (unregistering): Released all slaves [ 463.305198][ T3347] bond10 (unregistering): Released all slaves [ 463.323810][ T3347] bond11 (unregistering): Released all slaves [ 463.344817][ T3347] bond12 (unregistering): Released all slaves [ 463.361877][ T3347] bond13 (unregistering): (slave bond14): Releasing backup interface [ 463.371338][ T3347] bond13 (unregistering): Released all slaves [ 463.385041][ T3347] bond14 (unregistering): Released all slaves [ 463.405877][ T3347] bond15 (unregistering): Released all slaves [ 463.593938][T19766] bond2 (unregistering): Released all slaves [ 463.770882][ T3347] tipc: Left network mode [ 463.825009][ T3347] IPVS: stopping master sync thread 15246 ... [ 464.051656][T19787] netlink: 'syz.3.3315': attribute type 1 has an invalid length. [ 464.093297][T19789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3314'. [ 464.119206][T19788] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 464.278678][T19787] bond4: entered promiscuous mode [ 464.291974][T19787] 8021q: adding VLAN 0 to HW filter on device bond4 [ 464.425974][T19809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3321'. [ 464.612631][ T5775] IPVS: starting estimator thread 0... [ 464.621608][T19819] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 464.665715][T19809] vlan3: entered promiscuous mode [ 464.678580][T19809] syz_tun: entered promiscuous mode [ 464.697245][ T49] Bluetooth: hci4: command tx timeout [ 464.727578][T19821] IPVS: using max 39 ests per chain, 93600 per kthread [ 464.754936][T19594] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.783256][T19594] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.807887][T19594] bridge_slave_0: entered allmulticast mode [ 464.826850][T19594] bridge_slave_0: entered promiscuous mode [ 464.863306][T19818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3320'. [ 464.887578][T19810] syzkaller1: entered promiscuous mode [ 464.911615][T19810] syzkaller1: entered allmulticast mode [ 465.135224][T19839] netlink: 'syz.2.3325': attribute type 1 has an invalid length. [ 465.149476][T19839] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3325'. [ 465.160413][T19839] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3325'. [ 465.182743][T19839] netlink: 658 bytes leftover after parsing attributes in process `syz.2.3325'. [ 465.196718][T19594] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.213629][T19594] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.229391][T19594] bridge_slave_1: entered allmulticast mode [ 465.245372][T19594] bridge_slave_1: entered promiscuous mode [ 465.261988][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 465.384082][T19842] netlink: 320 bytes leftover after parsing attributes in process `syz.0.3326'. [ 465.401825][T19594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.553743][T19594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.859929][T19594] team0: Port device team_slave_0 added [ 465.884401][T19594] team0: Port device team_slave_1 added [ 466.149419][T19893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.694312][T19594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.728749][T19594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.766210][T19594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.946787][T19594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.967222][T19594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.019871][T19594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.063930][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 467.159991][ T3347] veth1_macvtap: left promiscuous mode [ 467.214066][T19919] __nla_validate_parse: 3 callbacks suppressed [ 467.214088][T19919] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3341'. [ 467.561844][T19947] sctp: [Deprecated]: syz.4.3347 (pid 19947) Use of struct sctp_assoc_value in delayed_ack socket option. [ 467.561844][T19947] Use struct sctp_sack_info instead [ 467.594362][T19947] block nbd4: NBD_DISCONNECT [ 468.190624][T19931] netlink: 'syz.0.3342': attribute type 12 has an invalid length. [ 468.211233][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3342'. [ 468.236416][T19943] macsec0: entered promiscuous mode [ 468.242886][T19943] macsec0: left promiscuous mode [ 468.263487][T19952] syzkaller0: entered promiscuous mode [ 468.270697][T19952] syzkaller0: entered allmulticast mode [ 468.278614][T19961] netlink: 'syz.4.3348': attribute type 4 has an invalid length. [ 468.309756][T19594] hsr_slave_0: entered promiscuous mode [ 468.325667][T19594] hsr_slave_1: entered promiscuous mode [ 468.332419][T19594] debugfs: 'hsr0' already exists in 'hsr' [ 468.338312][T19594] Cannot create hsr debugfs directory [ 468.458684][T19969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3350'. [ 468.498872][T19971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3351'. [ 468.704106][T19976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3353'. [ 468.739396][T19979] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3352'. [ 468.748783][T19978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3353'. [ 468.766489][T19979] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3352'. [ 468.822667][T19980] lo: Caught tx_queue_len zero misconfig [ 468.965155][ T3347] IPVS: stop unused estimator thread 0... [ 469.195456][T20002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3355'. [ 469.319938][T19993] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 469.552063][T19993] bond2 (unregistering): Released all slaves [ 469.622788][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3 [ 469.896255][T20023] syzkaller0: entered promiscuous mode [ 469.910445][T20023] syzkaller0: entered allmulticast mode [ 470.085400][T20033] netlink: 63 bytes leftover after parsing attributes in process `syz.0.3363'. [ 470.490387][T20055] netlink: 'syz.4.3365': attribute type 1 has an invalid length. [ 470.516047][T20055] netlink: 'syz.4.3365': attribute type 1 has an invalid length. [ 470.573538][T20059] IPv6: NLM_F_REPLACE set, but no existing node found! [ 470.613848][T20063] IPv6: NLM_F_REPLACE set, but no existing node found! [ 470.643383][T19594] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 470.673490][T19594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 470.731303][T19594] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 470.776624][T19594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 470.904028][T20066] bond2: down delay (5) is not a multiple of miimon (2), value rounded to 4 ms [ 470.928685][T20066] bond2: entered promiscuous mode [ 470.936929][T19594] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 470.973745][T19594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 470.986617][T19594] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 471.001396][T19594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 471.056406][T20072] netlink: 'syz.2.3371': attribute type 1 has an invalid length. [ 471.136833][ T29] audit: type=1107 audit(1781471377.910:12): pid=20086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 471.240600][ T61] nci: nci_ntf_packet: unknown ntf opcode 0x227 [ 471.374575][T19594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.417851][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 471.448033][T19594] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.495948][ T3347] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.503191][ T3347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.582330][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.589548][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.935871][T20089] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 472.284933][T20148] __nla_validate_parse: 4 callbacks suppressed [ 472.284953][T20148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3381'. [ 472.555849][T20154] netlink: set zone limit has 4 unknown bytes [ 472.647330][T20155] netlink: set zone limit has 4 unknown bytes [ 473.250119][T20198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3388'. [ 473.304283][T20198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3388'. [ 473.403570][T19594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.677127][T19594] veth0_vlan: entered promiscuous mode [ 473.759616][T19594] veth1_vlan: entered promiscuous mode [ 473.874960][T19594] veth0_macvtap: entered promiscuous mode [ 473.915730][T19594] veth1_macvtap: entered promiscuous mode [ 473.966972][T20221] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3392'. [ 474.106858][T20231] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3397'. [ 474.202989][T20214] batadv_slave_0: Caught tx_queue_len zero misconfig [ 474.228100][T19594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.241781][T20233] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 474.336903][T20233] veth0: entered promiscuous mode [ 474.348904][T20233] vlan2: entered promiscuous mode [ 474.450326][T19594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.504382][ T6525] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.532629][ T6525] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.576753][ T6525] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.622476][ T6525] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.778651][T20257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3399'. [ 474.883201][T20260] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3400'. [ 474.909447][ T6528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.918553][T20259] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3400'. [ 474.945692][ T6528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.007012][T20259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3400'. [ 475.039362][T20259] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3400'. [ 475.129015][ T6528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.149066][ T6528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.698010][T20301] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 476.013140][T20309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 476.024959][ T6480] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 476.140518][T20327] hsr0: entered promiscuous mode [ 476.663403][T20350] IPVS: length: 4096 != 24 [ 476.812985][T20359] openvswitch: netlink: Flow actions attr not present in new flow. [ 476.849297][T20360] openvswitch: netlink: Flow actions attr not present in new flow. [ 477.224742][T20382] netlink: 'syz.4.3426': attribute type 3 has an invalid length. [ 477.353964][T20400] __nla_validate_parse: 11 callbacks suppressed [ 477.353984][T20400] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3430'. [ 477.402500][T20400] netlink: 'syz.4.3430': attribute type 1 has an invalid length. [ 477.477410][T20404] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3429'. [ 477.760516][ T5764] IPVS: starting estimator thread 0... [ 477.857261][T20425] IPVS: using max 33 ests per chain, 79200 per kthread [ 478.003705][T20411] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3432'. [ 478.016885][T20411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3432'. [ 478.036891][T20405] vlan0: entered promiscuous mode [ 478.220995][T20440] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.3436'. [ 478.286322][T20444] netlink: 'syz.0.3438': attribute type 5 has an invalid length. [ 478.426888][T20428] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.434643][T20428] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.581287][T20462] netlink: 496 bytes leftover after parsing attributes in process `syz.0.3438'. [ 478.654235][T20428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.692756][T20428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.080375][ T6525] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.123417][ T6525] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.212048][ T6525] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.255099][ T6525] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.598790][T20505] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 479.679919][T20510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3447'. [ 479.689589][T20512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3446'. [ 480.252455][T20546] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3454'. [ 480.287655][T20546] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3454'. [ 480.553929][T20561] debugfs: '1ùà^!‚Y‡°”õËí [ 480.553929][T20561] 3ìUH†5rºBnœæ\' already exists in 'ieee80211' [ 480.705297][T20571] netlink: 'syz.2.3460': attribute type 1 has an invalid length. [ 480.743660][T20560] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20001 [ 480.812929][T20574] netlink: 'syz.1.3462': attribute type 13 has an invalid length. [ 523.066951][T20665] __nla_validate_parse: 5 callbacks suppressed [ 523.066968][T20665] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3467'. [ 523.268547][T20665] Cannot find add_set index 4 as target [ 523.278638][T20674] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3469'. [ 523.300458][T20674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3469'. [ 523.796393][T20700] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3474'. [ 524.058200][T20654] Bluetooth: hci5: command 0x0406 tx timeout [ 524.191991][T20707] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.3475'. [ 524.254025][T20710] tipc: Enabling of bearer rejected, failed to enable media [ 524.420128][T20715] netlink: 'syz.3.3478': attribute type 1 has an invalid length. [ 524.569662][T20723] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 524.639717][T20720] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 524.669377][T20715] bond5: entered promiscuous mode [ 524.689966][T20715] 8021q: adding VLAN 0 to HW filter on device bond5 [ 524.716892][T20729] netlink: 'syz.0.3481': attribute type 12 has an invalid length. [ 524.752536][T20729] netlink: 'syz.0.3481': attribute type 5 has an invalid length. [ 525.037488][T20745] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 525.244970][T20753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3485'. [ 525.515146][T20767] netlink: 16170 bytes leftover after parsing attributes in process `syz.3.3487'. [ 525.590324][ T5744] hid-generic 0005:15C2:0008.0002: item fetching failed at offset 12/21 [ 525.599782][ T5744] hid-generic 0005:15C2:0008.0002: probe with driver hid-generic failed with error -22 [ 525.751468][T20784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3491'. [ 526.167042][T20797] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 526.298332][T20803] netlink: 'syz.1.3495': attribute type 1 has an invalid length. [ 526.471246][T20812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3495'. [ 526.526781][T20805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3495'. [ 527.253522][T20809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 527.481318][T20844] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.517769][T20844] bridge_slave_0 (unregistering): left allmulticast mode [ 527.523832][T20847] netlink: 'syz.1.3508': attribute type 1 has an invalid length. [ 527.525833][T20844] bridge_slave_0 (unregistering): left promiscuous mode [ 527.544736][T20844] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.590709][T20847] netlink: 'syz.1.3508': attribute type 1 has an invalid length. [ 527.798045][T20853] 8021q: adding VLAN 0 to HW filter on device bond2 [ 527.849992][T20864] xt_cgroup: invalid path, errno=-2 [ 527.877441][T20853] bond1: (slave bond2): making interface the new active one [ 527.911046][T20853] bond1: (slave bond2): Enslaving as an active interface with an up link [ 527.961621][T20875] x_tables: duplicate underflow at hook 1 [ 528.161416][T20883] bond2: entered allmulticast mode [ 528.921972][T20914] __nla_validate_parse: 6 callbacks suppressed [ 528.921992][T20914] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3526'. [ 528.956569][T20914] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3526'. [ 528.970709][T20914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3526'. [ 528.981868][T20914] hsr_slave_0: left promiscuous mode [ 528.995480][T20914] hsr_slave_1: left promiscuous mode [ 529.337596][T20932] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3531'. [ 529.369491][T20932] netlink: 223 bytes leftover after parsing attributes in process `syz.4.3531'. [ 529.382381][T20932] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3531'. [ 529.394184][T20932] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3531'. [ 529.422418][T20932] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3531'. [ 529.438166][T20932] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 529.451807][T20932] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 529.518407][T20940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3534'. [ 530.420029][T20963] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3539'. [ 530.475139][T20960] hsr0: left promiscuous mode [ 530.496015][T20969] netlink: 'syz.2.3540': attribute type 11 has an invalid length. [ 530.512431][T20960] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 530.529983][T20960] vlan0: left promiscuous mode [ 530.684471][T20960] bond1: left promiscuous mode [ 530.731919][T20960] 8021q: adding VLAN 0 to HW filter on device bond2 [ 530.732614][T20979] netlink: 'syz.1.3543': attribute type 10 has an invalid length. [ 530.760405][T20960] 8021q: adding VLAN 0 to HW filter on device bond3 [ 530.772587][T20960] bond4: left promiscuous mode [ 530.791680][T20960] bond5: left promiscuous mode [ 530.947976][T20967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.987001][T20967] 8021q: adding VLAN 0 to HW filter on device bond2 [ 531.236478][T20996] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 531.259986][T20996] 0ªî{X¹¦: entered allmulticast mode [ 531.272658][T20996] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 531.378449][T21009] netlink: 'syz.3.3549': attribute type 1 has an invalid length. [ 531.644580][T21009] bond6: (slave gretap2): making interface the new active one [ 531.680421][T21009] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 531.789502][T21023] macvlan2: entered promiscuous mode [ 531.805787][T21023] macvlan2: entered allmulticast mode [ 531.834433][T21023] bond6: entered promiscuous mode [ 531.854893][T21023] gretap2: entered promiscuous mode [ 531.869284][T21023] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 531.880979][T21023] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 531.897934][T21023] bond6: left promiscuous mode [ 531.903224][T21023] gretap2: left promiscuous mode [ 532.120232][T21054] openvswitch: netlink: Missing valid actions attribute. [ 532.137848][T21054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.159483][T21054] netlink: 'syz.3.3560': attribute type 9 has an invalid length. [ 532.299586][T21058] tipc: Failed to remove unknown binding: 66,0,0/0:2054874469/2054874471 [ 532.330400][T21058] tipc: Failed to remove unknown binding: 66,0,0/0:2054874469/2054874470 [ 532.356207][T21071] tipc: Failed to remove unknown binding: 66,0,0/0:2054874469/2054874471 [ 532.387530][T21071] tipc: Failed to remove unknown binding: 66,0,0/0:2054874469/2054874470 [ 532.659538][T21092] netlink: 'syz.2.3571': attribute type 3 has an invalid length. [ 532.677861][T21092] netlink: 'syz.2.3571': attribute type 2 has an invalid length. [ 534.144388][T21164] pim6reg1: entered promiscuous mode [ 534.170250][T21164] pim6reg1: entered allmulticast mode [ 534.353427][T21196] __nla_validate_parse: 10 callbacks suppressed [ 534.353446][T21196] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3601'. [ 534.430616][T21200] Cannot find del_set index 1 as target [ 534.623257][T21201] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 534.658724][ T89] IPVS: starting estimator thread 0... [ 534.778888][T21211] IPVS: using max 30 ests per chain, 72000 per kthread [ 534.799529][T21209] syzkaller0: entered promiscuous mode [ 534.805148][T21209] syzkaller0: entered allmulticast mode [ 534.903608][T21222] netlink: 'syz.1.3610': attribute type 23 has an invalid length. [ 534.939013][T21222] netlink: 'syz.1.3610': attribute type 21 has an invalid length. [ 534.959608][T21222] IPv6: NLM_F_CREATE should be specified when creating new route [ 534.983529][T21226] netlink: 'syz.0.3611': attribute type 10 has an invalid length. [ 535.022200][T21230] netlink: 'syz.0.3611': attribute type 10 has an invalid length. [ 535.124047][T21226] veth0_vlan: left promiscuous mode [ 535.157045][T21226] veth0_vlan: entered promiscuous mode [ 535.230623][T21226] team0: Device veth0_vlan failed to register rx_handler [ 535.275884][T21230] bond0: (slave netdevsim1): Releasing backup interface [ 535.295590][T21230] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 535.316486][T21230] team0: Port device netdevsim1 added [ 535.426403][T21243] 8021q: adding VLAN 0 to HW filter on device bond6 [ 535.443791][T21246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3616'. [ 535.468784][T21249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3616'. [ 535.934205][T21267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3623'. [ 535.944462][T21271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3624'. [ 535.978387][T21267] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 536.119420][T21284] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 536.164000][T21287] tipc: Enabling of bearer rejected, failed to enable media [ 536.191523][T21291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3629'. [ 536.205755][T21284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3628'. [ 536.221519][T21292] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3630'. [ 536.280168][T21284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3628'. [ 536.290045][T21295] validate_nla: 1 callbacks suppressed [ 536.290060][T21295] netlink: 'syz.1.3630': attribute type 11 has an invalid length. [ 536.490716][T21302] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 536.632457][T21313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3634'. [ 536.822451][T21325] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 536.930806][T21329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 537.040546][T21331] bond1: (slave veth3): Enslaving as an active interface with an up link [ 537.305704][T21331] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 537.339098][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 537.642945][T21356] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.651842][T21356] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.824885][T21356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.852311][T21356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.070741][T21370] syzkaller1: entered promiscuous mode [ 538.077854][T21370] syzkaller1: entered allmulticast mode [ 538.097062][ T61] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.140283][ T61] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.279775][ T61] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.327911][ T61] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.620615][T21415] 0·: renamed from hsr0 [ 539.029070][T21415] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 539.057240][T21415] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 539.087336][T21415] 0·: entered allmulticast mode [ 539.092398][T21415] hsr_slave_0: entered allmulticast mode [ 539.103267][T21415] hsr_slave_1: entered allmulticast mode [ 539.111050][T21415] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 539.191714][T21430] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 539.202229][T21417] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 539.202229][T21417] Please contact the netfilter-devel mailing list or update your nftables rules. [ 539.272491][ T89] IPVS: starting estimator thread 0... [ 539.278193][T21412] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 539.303207][T21435] netlink: 'syz.0.3664': attribute type 1 has an invalid length. [ 539.326113][T21435] netlink: 'syz.0.3664': attribute type 1 has an invalid length. [ 539.377191][T21439] IPVS: using max 37 ests per chain, 88800 per kthread [ 539.387321][T21442] netlink: 'syz.4.3665': attribute type 11 has an invalid length. [ 539.417486][T20654] Bluetooth: hci2: command 0x0406 tx timeout [ 539.773324][T21458] __nla_validate_parse: 171 callbacks suppressed [ 539.773351][T21458] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3668'. [ 539.926236][T21469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3671'. [ 541.114831][T21505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3684'. [ 541.192490][T21505] netlink: 'syz.4.3684': attribute type 9 has an invalid length. [ 541.291666][ T3347] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.344272][ T3347] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.362292][T21515] syzkaller0: entered promiscuous mode [ 541.388357][T21515] syzkaller0: entered allmulticast mode [ 541.398572][T21522] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3688'. [ 541.419333][T21522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3688'. [ 541.512256][ T3347] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.545273][T21531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3688'. [ 541.561910][ T3347] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.582801][T21531] nbd: must specify a size in bytes for the device [ 541.725792][T21542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3688'. [ 541.749696][T21535] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3691'. [ 541.850596][T21550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3695'. [ 541.890412][T21550] netlink: 'syz.1.3695': attribute type 11 has an invalid length. [ 541.966463][T21554] x_tables: duplicate underflow at hook 1 [ 542.020108][T21552] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 542.405363][T21572] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3702'. [ 542.547013][T21578] Bluetooth: MGMT ver 1.23 [ 542.556865][T21578] Bluetooth: hci1: too big key_count value 29096 [ 542.765075][T21575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.789012][T21575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.804960][T21575] bond0 (unregistering): Released all slaves [ 543.088122][T21597] netlink: 'syz.3.3712': attribute type 5 has an invalid length. [ 543.148612][T21605] Cannot find del_set index 4 as target [ 543.691662][T21632] gretap0: entered promiscuous mode [ 543.916240][T21639] bridge_slave_0: left allmulticast mode [ 543.942961][T21639] bridge_slave_0: left promiscuous mode [ 543.972871][T21639] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.013238][T21639] bridge_slave_1: left allmulticast mode [ 544.027792][T21639] bridge_slave_1: left promiscuous mode [ 544.045275][T21639] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.074518][T21639] bond0: (slave bond_slave_0): Releasing backup interface [ 544.096445][T21639] bond0: (slave bond_slave_1): Releasing backup interface [ 544.107853][T21657] sctp: [Deprecated]: syz.3.3730 (pid 21657) Use of int in max_burst socket option deprecated. [ 544.107853][T21657] Use struct sctp_assoc_value instead [ 544.203834][T21639] team0: Port device team_slave_0 removed [ 544.217001][T21639] team0: Port device team_slave_1 removed [ 544.223757][T21639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.233420][T21639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.246305][T21639] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 544.267587][T21648] tipc: Started in network mode [ 544.272574][T21648] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 544.280589][T21648] tipc: Enabled bearer , priority 0 [ 544.297949][T21663] tipc: Started in network mode [ 544.305812][T21663] tipc: Node identity ae6236f941a, cluster identity 4711 [ 544.313398][T21663] tipc: Enabled bearer , priority 0 [ 544.320531][T21664] syzkaller0: entered promiscuous mode [ 544.326580][T21664] syzkaller0: entered allmulticast mode [ 544.396300][T21664] tipc: Resetting bearer [ 544.426859][T21664] tipc: Disabling bearer [ 544.625417][T21680] syzkaller1: entered promiscuous mode [ 544.646361][T21680] syzkaller1: entered allmulticast mode [ 544.672185][T21682] netlink: 'syz.0.3737': attribute type 1 has an invalid length. [ 545.104239][T21682] 8021q: adding VLAN 0 to HW filter on device bond3 [ 545.178505][T21696] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 545.229751][ T6489] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 545.330056][T21705] bridge1: entered allmulticast mode [ 545.360028][ T61] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 545.364428][T21702] __nla_validate_parse: 6 callbacks suppressed [ 545.364444][T21702] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3740'. [ 545.535957][ T10] tipc: Node number set to 11578026 [ 545.709810][T21724] netlink: 'syz.0.3747': attribute type 1 has an invalid length. [ 545.736206][T21724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3747'. [ 545.755948][T21728] batadv_slave_1: entered promiscuous mode [ 545.796187][T21725] batadv_slave_1: left promiscuous mode [ 545.956455][T21745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3753'. [ 545.984152][T21748] tipc: Enabled bearer , priority 0 [ 546.005545][T21747] tipc: Enabling of bearer rejected, already enabled [ 546.043264][T21748] syzkaller0: entered promiscuous mode [ 546.049107][T21745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3753'. [ 546.076477][T21748] syzkaller0: entered allmulticast mode [ 546.098663][T21748] tipc: Resetting bearer [ 546.120750][T21746] tipc: Resetting bearer [ 546.159262][T21746] tipc: Disabling bearer [ 546.170304][T21756] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3756'. [ 546.404052][T21772] netlink: 'syz.4.3759': attribute type 1 has an invalid length. [ 546.419601][T21767] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 546.574810][T21776] ÿ: renamed from bond_slave_0 (while UP) [ 546.681964][ T3347] nci: nci_rx_work: unknown MT 0x1 [ 546.750748][T21787] bridge0: entered allmulticast mode [ 546.770331][T21788] geneve0: entered promiscuous mode [ 546.784689][T21788] geneve0: left promiscuous mode [ 547.225467][T21813] can: request_module (can-proto-5) failed. [ 547.232304][T21813] netlink: 'syz.3.3772': attribute type 1 has an invalid length. [ 547.373538][T21778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 547.385570][T21793] netlink: 'syz.2.3765': attribute type 1 has an invalid length. [ 547.394205][T21793] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3765'. [ 547.553930][T21822] netlink: 'syz.3.3776': attribute type 4 has an invalid length. [ 547.553933][T21825] netlink: 'syz.3.3776': attribute type 4 has an invalid length. [ 547.588167][T21824] netlink: 'syz.2.3774': attribute type 1 has an invalid length. [ 547.608088][T21824] netlink: 'syz.2.3774': attribute type 2 has an invalid length. [ 547.628069][T21824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3774'. [ 547.704493][T21833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3779'. [ 547.761757][T21835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3781'. [ 547.785357][T21835] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 547.792683][T21835] IPv6: NLM_F_CREATE should be set when creating new route [ 547.800053][T21835] IPv6: NLM_F_CREATE should be set when creating new route [ 548.025082][T21848] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 548.152921][T21863] syzkaller0: entered promiscuous mode [ 548.168113][T21863] syzkaller0: entered allmulticast mode [ 548.545932][T21887] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3795'. [ 548.684441][T21895] syzkaller0: entered promiscuous mode [ 548.690441][T21895] syzkaller0: entered allmulticast mode [ 548.850054][T21900] 8021q: adding VLAN 0 to HW filter on device bond4 [ 548.912099][T21901] bond4: (slave veth3): Enslaving as an active interface with an up link [ 549.092190][T21908] bridge0: entered allmulticast mode [ 549.166444][T21913] x_tables: duplicate underflow at hook 2 [ 549.319797][T21923] tap0: tun_chr_ioctl cmd 1074025677 [ 549.331061][T21923] tap0: linktype set to 774 [ 549.451694][T21927] syzkaller0: entered promiscuous mode [ 549.474667][T21927] syzkaller0: entered allmulticast mode [ 549.502151][T21928] tipc: Started in network mode [ 549.519109][T21928] tipc: Node identity 269b6d0921a1, cluster identity 4711 [ 549.558059][T21928] tipc: Enabled bearer , priority 0 [ 549.583556][T21927] tipc: Enabling of bearer rejected, already enabled [ 549.677245][T21927] tipc: Resetting bearer [ 549.751911][T21927] tipc: Disabling bearer [ 550.198914][T21966] bridge0: port 1(vlan2) entered blocking state [ 550.205465][T21966] bridge0: port 1(vlan2) entered disabled state [ 550.212114][T21966] vlan2: entered allmulticast mode [ 550.217995][T21966] geneve0: entered allmulticast mode [ 550.330272][T21976] syzkaller0: entered allmulticast mode [ 550.343632][T21976] validate_nla: 1 callbacks suppressed [ 550.343650][T21976] netlink: 'syz.2.3826': attribute type 10 has an invalid length. [ 550.820316][T22000] __nla_validate_parse: 8 callbacks suppressed [ 550.820336][T22000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3832'. [ 552.920549][ T6524] vlan3: left allmulticast mode [ 552.930715][ T6524] geneve0: left allmulticast mode [ 552.939453][ T6524] bridge0: port 1(vlan3) entered disabled state [ 553.234379][T22022] openvswitch: netlink: IPv4 tun info is not correct [ 553.250888][T22025] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3836'. [ 553.364812][T22023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3834'. [ 553.408396][ T6524] bond7 (unregistering): (slave bridge1): Removing an active aggregator [ 553.421783][ T6524] bond7 (unregistering): (slave bridge1): Releasing backup interface [ 553.451984][ T6524] bond1 (unregistering): Released all slaves [ 553.470433][ T6524] bond2 (unregistering): (slave veth5): Releasing backup interface [ 553.479353][ T6524] bond2 (unregistering): Released all slaves [ 553.499397][ T6524] bond3 (unregistering): Released all slaves [ 553.513298][ T6524] bond4 (unregistering): Released all slaves [ 553.527049][ T6524] bond5 (unregistering): Released all slaves [ 553.548175][ T6524] bond6 (unregistering): Released all slaves [ 553.562275][ T6524] bond7 (unregistering): Released all slaves [ 553.589477][ T6524] bond8 (unregistering): Released all slaves [ 553.774018][ T6524] tipc: Left network mode [ 553.836527][T22032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3839'. [ 553.858426][T22032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3839'. [ 553.870092][T22032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3839'. [ 553.879363][T22032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3839'. [ 553.879871][ T6524] IPVS: stopping backup sync thread 12253 ... [ 554.250433][T22050] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3843'. [ 554.366946][T22061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3845'. [ 554.396357][T22061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3845'. [ 555.302818][ T6524] hsr_slave_0: left promiscuous mode [ 555.322502][ T6524] hsr_slave_1: left promiscuous mode [ 555.734508][T22133] Bluetooth: hci1: too big key_count value 29096 [ 555.927704][T22139] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 556.670857][T22160] __nla_validate_parse: 7 callbacks suppressed [ 556.670875][T22160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3869'. [ 556.925205][ T6524] IPVS: stop unused estimator thread 0... [ 557.000568][T22179] netlink: 'syz.1.3875': attribute type 1 has an invalid length. [ 557.031379][T22176] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 557.040485][T22179] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3875'. [ 557.048103][T22176] pim6reg0: persist enabled [ 557.109858][T22180] 0ªî{X¹¦: left allmulticast mode [ 557.271870][T22180] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.440816][T22180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.464850][T22180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.599319][T22194] syzkaller1: entered promiscuous mode [ 557.629079][T22194] syzkaller1: entered allmulticast mode [ 557.691067][T22201] bridge1: entered promiscuous mode [ 557.711331][T22201] bridge1: entered allmulticast mode [ 557.722480][T22201] team0: Port device bridge1 added [ 557.733629][ T6480] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.756678][ T6480] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.771211][ T6480] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.780466][ T6480] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.793073][ T6480] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.802692][ T6480] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.828563][T22201] bridge2: entered promiscuous mode [ 557.847209][T22201] bridge2: entered allmulticast mode [ 557.855407][T22211] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3880'. [ 557.883461][T22201] team0: Port device bridge2 added [ 557.926119][ T6480] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.946939][ T6480] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.047527][T22226] netlink: 'syz.0.3882': attribute type 16 has an invalid length. [ 558.055420][T22225] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3883'. [ 558.056486][T22219] netlink: 'syz.0.3882': attribute type 16 has an invalid length. [ 558.083141][T22225] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3883'. [ 558.097930][ T6480] bond3: (slave dummy0): link status up again after 0 ms [ 558.112041][T22226] netlink: 'syz.0.3882': attribute type 17 has an invalid length. [ 558.131825][T22219] netlink: 'syz.0.3882': attribute type 17 has an invalid length. [ 558.147824][ T36] bond3: (slave dummy0): link status up again after 0 ms [ 558.177271][ T6480] bond3: (slave dummy0): link status up again after 0 ms [ 558.201106][T22226] gretap0: left promiscuous mode [ 558.213135][ T6480] bond3: (slave dummy0): link status up again after 0 ms [ 558.257333][ T6524] bond3: (slave dummy0): link status up again after 0 ms [ 558.271690][T22226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.285114][T22226] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.298030][ T6524] bond3: (slave dummy0): link status up again after 0 ms [ 558.308825][T22226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.321332][ T6524] bond3: (slave dummy0): link status up again after 0 ms [ 558.357046][T22241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3887'. [ 558.357278][ T6524] bond3: (slave dummy0): link status up again after 0 ms [ 558.382812][T22226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.400675][T22226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.414805][T22226] 0·: left allmulticast mode [ 558.419862][ T36] bond3: (slave dummy0): link status up again after 0 ms [ 558.420558][T22226] hsr_slave_0: left allmulticast mode [ 558.432534][T22226] hsr_slave_1: left allmulticast mode [ 558.443298][T22226] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 558.468342][ T6489] bond3: (slave dummy0): link status up again after 0 ms [ 558.479942][T22219] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 558.498168][ T6489] bond3: (slave dummy0): link status up again after 0 ms [ 558.537678][ T6489] bond3: (slave dummy0): link status up again after 0 ms [ 558.643983][ T6480] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.651128][ T6480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.663950][ T6480] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.671168][ T6480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.702821][T22241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3887'. [ 558.976587][T22267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3895'. [ 559.021272][T22270] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3897'. [ 559.036322][T22269] batadv_slave_1: entered promiscuous mode [ 559.250192][T22277] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3898'. [ 559.267010][T22277] netlink: 'syz.4.3898': attribute type 1 has an invalid length. [ 559.307012][T22277] 8021q: adding VLAN 0 to HW filter on device bond2 [ 559.339716][T22279] bond2: (slave geneve2): making interface the new active one [ 559.363104][T22279] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 559.374882][ T61] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.389081][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.406627][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.418820][T22281] tipc: Enabled bearer , priority 0 [ 559.436253][ T6480] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.469399][T22281] syzkaller0: entered promiscuous mode [ 559.475054][T22281] syzkaller0: entered allmulticast mode [ 559.492871][T22281] tipc: Resetting bearer [ 559.509403][T22280] tipc: Resetting bearer [ 559.534692][T22280] tipc: Disabling bearer [ 559.722116][T22303] geneve0: entered promiscuous mode [ 559.733518][T22303] macvlan2: entered promiscuous mode [ 559.754850][T22303] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 559.931680][T22307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.964310][T22307] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.023623][T22307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.058828][T22316] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 560.146981][T22307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.181497][T22307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.229461][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.236673][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.029684][T22367] netlink: 'syz.2.3921': attribute type 4 has an invalid length. [ 561.070557][T22367] netlink: 'syz.2.3921': attribute type 4 has an invalid length. [ 561.089173][T22370] syzkaller0: entered promiscuous mode [ 561.101627][T22370] syzkaller0: entered allmulticast mode [ 561.122236][T22367] netlink: 'syz.2.3921': attribute type 3 has an invalid length. [ 561.672718][T22395] netlink: 'syz.4.3930': attribute type 24 has an invalid length. [ 561.809756][T22395] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 561.864642][T22395] bond3 (unregistering): Released all slaves [ 561.959574][T22415] __nla_validate_parse: 5 callbacks suppressed [ 561.959592][T22415] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3935'. [ 561.980760][T22397] syzkaller0: entered promiscuous mode [ 561.986552][T22397] syzkaller0: entered allmulticast mode [ 562.240641][T22424] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 562.455251][T22441] tc action pedit 'at' offset -4096 out of bounds [ 562.463039][T22441] tc action pedit 'at' offset -4096 out of bounds [ 562.469545][T22441] tc action pedit 'at' offset -4096 out of bounds [ 562.475989][T22441] tc action pedit 'at' offset -4096 out of bounds [ 562.482483][T22441] tc action pedit 'at' offset -4096 out of bounds [ 562.488950][T22441] tc action pedit 'at' offset -4096 out of bounds [ 562.495372][T22441] tc action pedit 'at' offset -4096 out of bounds [ 562.501830][T22441] tc action pedit 'at' offset -4096 out of bounds [ 562.508318][T22441] tc action pedit 'at' offset -4096 out of bounds [ 562.514783][T22441] tc action pedit 'at' offset -4096 out of bounds [ 562.545594][T22443] syzkaller0: entered promiscuous mode [ 562.551791][T22443] syzkaller0: entered allmulticast mode [ 563.076233][T22466] sctp: [Deprecated]: syz.3.3948 (pid 22466) Use of int in max_burst socket option. [ 563.076233][T22466] Use struct sctp_assoc_value instead [ 563.129692][T22471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3948'. [ 563.341810][T22481] syzkaller0: entered promiscuous mode [ 563.348805][T22481] syzkaller0: entered allmulticast mode [ 563.479628][T22491] nbd: must specify at least one socket [ 563.487223][ T61] net_ratelimit: 45 callbacks suppressed [ 563.487241][ T61] bond3: (slave dummy0): failed to get link speed/duplex [ 563.571895][T22494] 8021q: VLANs not supported on vcan0 [ 563.629172][ T36] bond3: (slave dummy0): failed to get link speed/duplex [ 563.859113][T22503] syzkaller0: entered promiscuous mode [ 563.864805][T22503] syzkaller0: entered allmulticast mode [ 564.269398][T22535] xt_hashlimit: size too large, truncated to 1048576 [ 565.025183][T20654] Bluetooth: hci1: command 0x0406 tx timeout [ 566.482108][T22522] syz_tun: entered allmulticast mode [ 566.501636][T22527] syz_tun (unregistering): left allmulticast mode [ 566.513253][T22533] vlan0: entered promiscuous mode [ 566.597691][ T61] bond3: (slave dummy0): failed to get link speed/duplex [ 566.729365][ T3378] bond3: (slave dummy0): failed to get link speed/duplex [ 566.780002][T22563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3974'. [ 566.837813][T22569] sctp: [Deprecated]: syz.3.3972 (pid 22569) Use of struct sctp_assoc_value in delayed_ack socket option. [ 566.837813][T22569] Use struct sctp_sack_info instead [ 566.883306][T22574] syz_tun: entered allmulticast mode [ 566.922361][T22574] dvmrp8: entered allmulticast mode [ 566.935856][T22579] netlink: 'syz.1.3976': attribute type 29 has an invalid length. [ 566.947732][T22579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3976'. [ 566.984689][T22566] syz_tun: left allmulticast mode [ 567.007717][ T36] bond3: (slave dummy0): failed to get link speed/duplex [ 567.157251][ T3378] bond3: (slave dummy0): failed to get link speed/duplex [ 567.232522][T22606] batadv1: entered promiscuous mode [ 567.238597][T22606] batadv1: entered allmulticast mode [ 567.277238][ T61] bond3: (slave dummy0): failed to get link speed/duplex [ 567.319813][T22612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3982'. [ 567.388032][ T36] bond3: (slave dummy0): failed to get link speed/duplex [ 567.450828][T22618] macsec1: entered allmulticast mode [ 567.460255][T22618] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 567.492082][T22623] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3983'. [ 567.507585][ T36] bond3: (slave dummy0): failed to get link speed/duplex [ 567.610090][T22629] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3986'. [ 567.619584][ T3378] bond3: (slave dummy0): failed to get link speed/duplex [ 568.517261][ T6528] net_ratelimit: 7 callbacks suppressed [ 568.517281][ T6528] bond3: (slave dummy0): failed to get link speed/duplex [ 568.637453][ T3378] bond3: (slave dummy0): failed to get link speed/duplex [ 568.747332][ T61] bond3: (slave dummy0): failed to get link speed/duplex [ 568.857665][ T61] bond3: (slave dummy0): failed to get link speed/duplex [ 568.967366][ T3378] bond3: (slave dummy0): failed to get link speed/duplex [ 569.077253][ T61] bond3: (slave dummy0): failed to get link speed/duplex [ 569.187404][ T61] bond3: (slave dummy0): failed to get link speed/duplex [ 569.297257][ T3378] bond3: (slave dummy0): failed to get link speed/duplex [ 569.417248][ T61] bond3: (slave dummy0): failed to get link speed/duplex [ 569.527328][ T3378] bond3: (slave dummy0): failed to get link speed/duplex [ 569.780164][T22568] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 570.000920][T22633] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 570.051792][T22638] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3990'. [ 570.095644][T22633] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3987'. [ 570.134462][T22643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3991'. [ 570.165420][T22646] netlink: 'syz.0.3989': attribute type 13 has an invalid length. [ 570.251469][T22643] vlan2: entered promiscuous mode [ 570.267396][T22643] dummy0: entered promiscuous mode [ 570.313299][T22652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3993'. [ 570.323874][T22652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3993'. [ 570.335537][T22652] netlink: 'syz.3.3993': attribute type 4 has an invalid length. [ 570.861378][T22677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3998'. [ 571.540934][T22710] sctp: [Deprecated]: syz.3.4005 (pid 22710) Use of struct sctp_assoc_value in delayed_ack socket option. [ 571.540934][T22710] Use struct sctp_sack_info instead [ 571.690282][T22715] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4007'. [ 571.805037][T22719] hmac(sha2: entered promiscuous mode [ 571.953315][T22738] xt_hashlimit: Unknown mode mask 1D8, kernel too old? [ 572.116092][T22745] netlink: 'syz.1.4012': attribute type 1 has an invalid length. [ 572.762465][T22777] netlink: 'syz.0.4020': attribute type 12 has an invalid length. [ 572.772364][T22777] __nla_validate_parse: 1 callbacks suppressed [ 572.772381][T22777] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.4020'. [ 573.061672][T22784] netlink: 'syz.1.4022': attribute type 1 has an invalid length. [ 573.196259][T22790] netlink: 'syz.4.4023': attribute type 3 has an invalid length. [ 573.229412][T22790] netlink: 'syz.4.4023': attribute type 1 has an invalid length. [ 573.262198][T22790] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4023'. [ 573.287444][T22800] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4024'. [ 573.311184][T22800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4024'. [ 573.316245][T22790] NCSI netlink: No device for ifindex 0 [ 573.521887][T22810] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4 [ 573.539828][ T6528] net_ratelimit: 27 callbacks suppressed [ 573.539845][ T6528] bond3: (slave dummy0): failed to get link speed/duplex [ 573.553987][T22804] tipc: Enabled bearer , priority 0 [ 573.562853][T22815] syzkaller0: entered promiscuous mode [ 573.569020][T22815] syzkaller0: entered allmulticast mode [ 573.608789][T22804] tipc: Resetting bearer [ 573.693959][T22804] tipc: Disabling bearer [ 573.723567][T22817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4030'. [ 573.732663][ T6480] bond3: (slave dummy0): failed to get link speed/duplex [ 573.759963][T22828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4031'. [ 573.788867][T22804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4026'. [ 573.838550][ T36] bond3: (slave dummy0): failed to get link speed/duplex [ 573.968023][ T36] bond3: (slave dummy0): failed to get link speed/duplex [ 574.217984][ T6528] bond3: (slave dummy0): failed to get link speed/duplex [ 574.328228][ T6480] bond3: (slave dummy0): failed to get link speed/duplex [ 574.392684][T22861] netlink: 'syz.2.4037': attribute type 1 has an invalid length. [ 574.448374][ T6528] bond3: (slave dummy0): failed to get link speed/duplex [ 574.598053][ T6528] bond3: (slave dummy0): failed to get link speed/duplex [ 574.717216][ T3378] bond3: (slave dummy0): failed to get link speed/duplex [ 574.878451][ T6528] bond3: (slave dummy0): failed to get link speed/duplex [ 574.952317][T22888] netlink: 'syz.2.4043': attribute type 1 has an invalid length. [ 574.999377][T22892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4044'. [ 575.071065][T22901] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4043'. [ 575.291862][T22888] bond5: entered promiscuous mode [ 575.307854][T22888] 8021q: adding VLAN 0 to HW filter on device bond5 [ 575.507543][T22914] syzkaller1: entered promiscuous mode [ 575.526786][T22914] syzkaller1: entered allmulticast mode [ 575.852823][T22945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4053'. [ 576.012064][T22947] IPVS: Scheduler module ip_vs_sip not found [ 576.288393][T22968] ip6gre1: entered promiscuous mode [ 576.293980][T22968] ip6gre1: entered allmulticast mode [ 576.305064][T22973] netlink: 'syz.1.4061': attribute type 1 has an invalid length. [ 576.387017][T22975] bond3 (unregistering): Released all slaves [ 577.307486][T23007] vlan2: entered promiscuous mode [ 577.440706][T23010] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 577.482514][T23010] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 577.516791][T23010] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 577.784867][T23020] –: renamed from dummy0 (while UP) [ 578.055315][T23030] netlink: 'syz.4.4079': attribute type 1 has an invalid length. [ 578.086887][T23030] __nla_validate_parse: 10 callbacks suppressed [ 578.086906][T23030] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4079'. [ 578.132586][T23028] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4078'. [ 578.178567][T23037] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4080'. [ 578.374140][T23041] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4081'. [ 578.579022][T23051] tipc: Enabling of bearer rejected, failed to enable media [ 579.042658][ T6480] net_ratelimit: 24 callbacks suppressed [ 579.042677][ T6480] bond3: (slave –): failed to get link speed/duplex [ 579.207469][ T6489] bond3: (slave –): failed to get link speed/duplex [ 579.340212][ T3378] bond3: (slave –): failed to get link speed/duplex [ 579.386522][T23092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4094'. [ 579.388978][T23093] netlink: 'syz.0.4095': attribute type 9 has an invalid length. [ 579.406692][T23094] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 579.413987][T23094] IPv6: NLM_F_CREATE should be set when creating new route [ 579.421308][T23094] IPv6: NLM_F_CREATE should be set when creating new route [ 579.448132][T23093] netlink: 'syz.0.4095': attribute type 6 has an invalid length. [ 579.473104][T23094] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4096'. [ 579.487758][ T6489] bond3: (slave –): failed to get link speed/duplex [ 579.571354][T23098] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4097'. [ 579.608212][ T6480] bond3: (slave –): failed to get link speed/duplex [ 579.626779][T23098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4097'. [ 579.728560][ T6528] bond3: (slave –): failed to get link speed/duplex [ 579.847507][ T6489] bond3: (slave –): failed to get link speed/duplex [ 579.883306][T23111] netlink: 'syz.2.4101': attribute type 3 has an invalid length. [ 579.905742][T23111] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4101'. [ 579.977390][ T6489] bond3: (slave –): failed to get link speed/duplex [ 580.087822][ T6480] bond3: (slave –): failed to get link speed/duplex [ 580.207668][ T6528] bond3: (slave –): failed to get link speed/duplex [ 580.366349][T23132] netlink: 'syz.3.4107': attribute type 1 has an invalid length. [ 580.478626][T23137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4110'. [ 580.617855][T23143] netlink: 'syz.0.4113': attribute type 10 has an invalid length. [ 580.636630][T23141] ip6gre1: entered promiscuous mode [ 580.652487][T23141] ip6gre1: entered allmulticast mode [ 582.005163][T23190] netlink: 'syz.2.4130': attribute type 41 has an invalid length. [ 582.525480][T23206] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 582.594594][T23210] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 582.682756][T23219] veth0_to_bridge: entered promiscuous mode [ 582.698816][T23219] macvtap1: entered allmulticast mode [ 582.710210][T23219] veth0_to_bridge: entered allmulticast mode [ 582.825022][T23224] xt_CT: You must specify a L4 protocol and not use inversions on it [ 582.836242][T23225] IPVS: Unknown mcast interface: vcan0 [ 582.843916][T23226] netlink: 'syz.3.4140': attribute type 30 has an invalid length. [ 583.164209][T23245] netlink: 'syz.2.4147': attribute type 1 has an invalid length. [ 583.197811][T23245] netlink: 'syz.2.4147': attribute type 2 has an invalid length. [ 583.259437][ T5634] Bluetooth: hci4: command 0x0405 tx timeout [ 583.294353][T23253] syzkaller0: entered promiscuous mode [ 583.307205][T23253] syzkaller0: entered allmulticast mode [ 583.583838][T23260] __nla_validate_parse: 11 callbacks suppressed [ 583.583861][T23260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4152'. [ 583.645389][T23263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4153'. [ 583.664183][T23260] bond3 (unregistering): Released all slaves [ 583.902822][T23271] netlink: 'syz.0.4155': attribute type 1 has an invalid length. [ 583.951677][T23280] netlink: 'syz.4.4157': attribute type 1 has an invalid length. [ 583.988759][T23271] 8021q: adding VLAN 0 to HW filter on device bond4 [ 584.058182][T23283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.070322][T23283] bond4: (slave bond0): Enslaving as a backup interface with an up link [ 584.070489][T23286] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4157'. [ 584.129723][T23280] bond3: entered promiscuous mode [ 584.135309][T23280] 8021q: adding VLAN 0 to HW filter on device bond3 [ 584.147323][ T6525] net_ratelimit: 27 callbacks suppressed [ 584.147344][ T6525] bond3: (slave –): failed to get link speed/duplex [ 584.321680][T23297] netlink: 'syz.2.4159': attribute type 1 has an invalid length. [ 584.340594][T23280] 8021q: adding VLAN 0 to HW filter on device bond4 [ 584.357797][T23299] netlink: 'syz.3.4160': attribute type 27 has an invalid length. [ 584.365603][T23280] bridge0: port 1(bond4) entered blocking state [ 584.372244][T23280] bridge0: port 1(bond4) entered disabled state [ 584.379124][T23280] bond4: entered allmulticast mode [ 584.386898][T23280] bond4: entered promiscuous mode [ 584.392930][T23280] bridge0: port 1(bond4) entered blocking state [ 584.402023][T23280] bridge0: port 1(bond4) entered forwarding state [ 584.402818][T23299] netlink: 'syz.3.4160': attribute type 1 has an invalid length. [ 584.584431][T23301] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 584.670349][T23311] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4162'. [ 584.684529][ T6528] bridge0: port 1(bond4) entered disabled state [ 584.699458][T23292] bond6 (unregistering): Released all slaves [ 584.811662][ T6525] bond3: (slave –): failed to get link speed/duplex [ 584.915023][T23318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4165'. [ 584.948268][ T6528] bond3: (slave –): failed to get link speed/duplex [ 584.965048][T23321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4166'. [ 585.067241][ T6528] bond3: (slave –): failed to get link speed/duplex [ 585.141049][T23328] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4168'. [ 585.177411][ T6525] bond3: (slave –): failed to get link speed/duplex [ 585.209808][T23328] netlink: 'syz.0.4168': attribute type 11 has an invalid length. [ 585.209808][T23329] netlink: 'syz.0.4168': attribute type 11 has an invalid length. [ 585.285361][T23335] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4169'. [ 585.297176][ T6525] bond3: (slave –): failed to get link speed/duplex [ 585.407235][ T6525] bond3: (slave –): failed to get link speed/duplex [ 585.527218][ T6525] bond3: (slave –): failed to get link speed/duplex [ 585.647178][ T6525] bond3: (slave –): failed to get link speed/duplex [ 585.738726][T23342] netlink: 'syz.0.4172': attribute type 1 has an invalid length. [ 585.805010][T23344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4172'. [ 585.834156][T23342] bond5: entered promiscuous mode [ 585.854529][T23342] 8021q: adding VLAN 0 to HW filter on device bond5 [ 585.863578][T23344] bond5: entered allmulticast mode [ 585.923707][T23342] bond5: (slave bridge2): making interface the new active one [ 585.939226][T23342] bridge2: entered promiscuous mode [ 585.952004][T23342] bridge2: entered allmulticast mode [ 585.981242][T23342] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 586.272162][T23348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4173'. [ 586.742047][T23373] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 586.868963][T23383] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.877798][T23383] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.325181][T23381] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.990494][T23381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.092278][T23381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.529527][ T6489] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.563972][ T6489] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.688729][T23404] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 588.724594][T23404] bond5 (unregistering): Released all slaves [ 588.750624][T23410] __nla_validate_parse: 184 callbacks suppressed [ 588.750645][T23410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4194'. [ 588.785741][ T6480] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.797374][ T6480] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.812129][T23410] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001 [ 588.826981][T23410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4194'. [ 588.838417][T23413] xt_l2tp: v2 doesn't support IP mode [ 589.023295][T23423] validate_nla: 1 callbacks suppressed [ 589.023609][T23423] netlink: 'syz.0.4196': attribute type 2 has an invalid length. [ 589.040903][T23423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4196'. [ 589.159184][T23421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4195'. [ 589.371673][ T6525] nci: nci_ntf_packet: unknown ntf opcode 0x227 [ 589.594095][T23435] bond3: left allmulticast mode [ 589.605484][T23435] bridge1: left promiscuous mode [ 589.614069][T23435] bridge1: left allmulticast mode [ 589.619314][T23443] syz.0.4201: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 589.620744][T23435] bridge2: left promiscuous mode [ 589.641920][T23435] bridge2: left allmulticast mode [ 589.649326][T23435] ip6gre1: left promiscuous mode [ 589.649731][T23443] CPU: 1 UID: 0 PID: 23443 Comm: syz.0.4201 Not tainted syzkaller #0 PREEMPT(full) [ 589.649750][T23443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 589.649764][T23443] Call Trace: [ 589.649771][T23443] [ 589.649781][T23443] dump_stack_lvl+0xe8/0x150 [ 589.649808][T23443] warn_alloc+0x249/0x340 [ 589.649834][T23443] ? __pfx_stack_trace_save+0x10/0x10 [ 589.649863][T23443] ? __pfx_warn_alloc+0x10/0x10 [ 589.649908][T23443] ? __kasan_kmalloc+0x93/0xb0 [ 589.649931][T23443] ? __kmalloc_cache_noprof+0x318/0x660 [ 589.649953][T23443] ? xskq_create+0x56/0x170 [ 589.650058][T23443] ? xsk_init_queue+0x8a/0xe0 [ 589.650109][T23443] ? xsk_setsockopt+0x52a/0x960 [ 589.650131][T23443] ? do_sock_setsockopt+0x17c/0x1b0 [ 589.650181][T23443] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 589.650197][T23443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.650243][T23443] __vmalloc_node_range_noprof+0x12c/0x1730 [ 589.650296][T23443] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 589.650326][T23443] ? __kasan_kmalloc+0x93/0xb0 [ 589.650356][T23443] vmalloc_user_noprof+0xad/0xe0 [ 589.650378][T23443] ? xskq_create+0xbf/0x170 [ 589.650394][T23443] xskq_create+0xbf/0x170 [ 589.650412][T23443] xsk_init_queue+0x8a/0xe0 [ 589.650439][T23443] xsk_setsockopt+0x52a/0x960 [ 589.650462][T23443] ? __fget_files+0x2a/0x420 [ 589.650483][T23443] ? __pfx_xsk_setsockopt+0x10/0x10 [ 589.650508][T23443] ? __pfx_aa_sk_perm+0x10/0x10 [ 589.650574][T23443] ? aa_sock_opt_perm+0xff/0x1a0 [ 589.650629][T23443] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 589.650652][T23443] ? __pfx_xsk_setsockopt+0x10/0x10 [ 589.650677][T23443] do_sock_setsockopt+0x17c/0x1b0 [ 589.650699][T23443] __x64_sys_setsockopt+0x13d/0x1b0 [ 589.650719][T23443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.650740][T23443] do_syscall_64+0x174/0x580 [ 589.650811][T23443] ? trace_irq_disable+0x3b/0x140 [ 589.650835][T23443] ? clear_bhb_loop+0x40/0x90 [ 589.650858][T23443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.650875][T23443] RIP: 0033:0x7f269199ce59 [ 589.650898][T23443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.650912][T23443] RSP: 002b:00007f268fbee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 589.650931][T23443] RAX: ffffffffffffffda RBX: 00007f2691c15fa0 RCX: 00007f269199ce59 [ 589.650943][T23443] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 589.650954][T23443] RBP: 00007f2691a32d6f R08: 0000000000000004 R09: 0000000000000000 [ 589.650965][T23443] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.650975][T23443] R13: 00007f2691c16038 R14: 00007f2691c15fa0 R15: 00007ffc781cdc68 [ 589.651006][T23443] [ 589.652209][T23443] Mem-Info: [ 589.654558][T23435] ip6gre1: left allmulticast mode [ 589.680301][T23443] active_anon:6097 inactive_anon:0 isolated_anon:0 [ 589.680301][T23443] active_file:3153 inactive_file:40186 isolated_file:0 [ 589.680301][T23443] unevictable:768 dirty:132 writeback:0 [ 589.680301][T23443] slab_reclaimable:12444 slab_unreclaimable:169468 [ 589.680301][T23443] mapped:29729 shmem:1313 pagetables:3503 [ 589.680301][T23443] sec_pagetables:0 bounce:0 [ 589.680301][T23443] kernel_misc_reclaimable:0 [ 589.680301][T23443] free:840991 free_pcp:24494 free_cma:0 [ 589.699925][ T6480] net_ratelimit: 12 callbacks suppressed [ 589.699945][ T6480] bond3: (slave –): failed to get link speed/duplex [ 589.928498][T23441] vlan3: entered promiscuous mode [ 589.946814][T23443] Node 0 active_anon:24488kB inactive_anon:0kB active_file:12612kB inactive_file:160536kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:78036kB dirty:528kB writeback:0kB shmem:3716kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14524kB pagetables:13856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 590.039464][T23441] bridge0: entered promiscuous mode [ 590.046904][T23449] netlink: 'syz.3.4202': attribute type 1 has an invalid length. [ 590.047483][T23443] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40960kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 590.055632][T23449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4202'. [ 590.098649][T23449] netlink: 'syz.3.4202': attribute type 1 has an invalid length. [ 590.111657][T23431] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 590.120663][ T6525] bond3: (slave –): failed to get link speed/duplex [ 590.130047][T23444] netlink: 'syz.2.4200': attribute type 10 has an invalid length. [ 590.140058][T23444] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4200'. [ 590.175234][T23443] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 590.231859][T23443] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 590.237895][ T6480] bond3: (slave –): failed to get link speed/duplex [ 590.245236][T23443] Node 0 DMA32 free:1125916kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24488kB inactive_anon:0kB active_file:12612kB inactive_file:160536kB unevictable:1536kB writepending:528kB zspages:0kB present:3129332kB managed:2552904kB mlocked:0kB bounce:0kB free_pcp:38760kB local_pcp:21248kB free_cma:0kB [ 590.281155][T23443] lowmem_reserve[]: 0 0 0 0 0 [ 590.286006][T23443] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 590.347206][ T36] bond3: (slave –): failed to get link speed/duplex [ 590.364885][T23443] lowmem_reserve[]: 0 0 0 0 0 [ 590.377406][T23443] Node 1 Normal free:2277768kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:64196kB local_pcp:29688kB free_cma:0kB [ 590.413718][T23443] lowmem_reserve[]: 0 0 0 0 0 [ 590.420755][T23443] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 590.452234][T23443] Node 0 DMA32: 9845*4kB (UME) 6771*8kB (UME) 3681*16kB (UME) 1116*32kB (UM) 539*64kB (UME) 872*128kB (UME) 887*256kB (UM) 478*512kB (UME) 207*1024kB (UME) 53*2048kB (UM) 0*4096kB = 1126588kB [ 590.478308][ T6528] bond3: (slave –): failed to get link speed/duplex [ 590.547278][T23443] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 590.571765][T23457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4204'. [ 590.602442][T23443] Node 1 Normal: 4*4kB (UM) 6*8kB (UM) 6*16kB (UM) 11*32kB (UM) 7*64kB (UM) 6*128kB (UM) 4*256kB (UM) 9*512kB (UM) 5*1024kB (UM) 4*2048kB (U) 555*4096kB (UM) = 2293952kB [ 590.629974][ T36] bond3: (slave –): failed to get link speed/duplex [ 590.651442][T23455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4203'. [ 590.659690][T23443] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 590.694818][T23443] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 590.716736][T23443] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 590.737914][T23443] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 590.747437][T23443] 44698 total pagecache pages [ 590.752330][T23443] 0 pages in swap cache [ 590.756515][T23443] Free swap = 124996kB [ 590.761642][ T6525] bond3: (slave –): failed to get link speed/duplex [ 590.769640][T23443] Total swap = 124996kB [ 590.773925][T23443] 2097051 pages RAM [ 590.797589][T23443] 0 pages HighMem/MovableOnly [ 590.806484][T23443] 427040 pages reserved [ 590.814657][T23443] 0 pages cma reserved [ 590.877614][ T36] bond3: (slave –): failed to get link speed/duplex [ 590.997205][ T6525] bond3: (slave –): failed to get link speed/duplex [ 591.036528][T23472] Bluetooth: MGMT ver 1.23 [ 591.177809][ T36] bond3: (slave –): failed to get link speed/duplex [ 591.189360][T23470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4210'. [ 591.223660][T23477] netlink: 'syz.2.4213': attribute type 1 has an invalid length. [ 591.236371][T23477] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4213'. [ 591.421800][T23488] netlink: 'syz.2.4215': attribute type 2 has an invalid length. [ 591.495292][T23490] Cannot find set identified by id 0 to match [ 591.650441][T23497] sock: sock_timestamping_bind_phc: sock not bind to device [ 592.393671][T23519] netlink: 'syz.2.4224': attribute type 18 has an invalid length. [ 592.590449][T23528] x_tables: duplicate entry at hook 2 [ 592.699515][T23533] xt_bpf: check failed: parse error [ 592.812318][T23537] tipc: Enabled bearer , priority 10 [ 592.936855][T23539] team0: entered promiscuous mode [ 592.943029][T23546] netlink: 'syz.0.4230': attribute type 1 has an invalid length. [ 592.954793][T23539] team_slave_0: entered promiscuous mode [ 592.971968][T23539] team_slave_1: entered promiscuous mode [ 592.989604][T23539] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 593.168834][T23554] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 593.808613][ T5764] tipc: Node number set to 121269513 [ 594.717272][ T6525] net_ratelimit: 27 callbacks suppressed [ 594.717293][ T6525] bond3: (slave –): failed to get link speed/duplex [ 594.867247][ T6525] bond3: (slave –): failed to get link speed/duplex [ 594.977288][ T3378] bond3: (slave –): failed to get link speed/duplex [ 595.087548][ T6489] bond3: (slave –): failed to get link speed/duplex [ 595.197279][ T3378] bond3: (slave –): failed to get link speed/duplex [ 595.307275][ T6525] bond3: (slave –): failed to get link speed/duplex [ 595.417620][ T6489] bond3: (slave –): failed to get link speed/duplex [ 595.527320][ T6489] bond3: (slave –): failed to get link speed/duplex [ 595.637297][ T6525] bond3: (slave –): failed to get link speed/duplex [ 595.747653][ T6525] bond3: (slave –): failed to get link speed/duplex [ 599.727265][ T6489] net_ratelimit: 35 callbacks suppressed [ 599.727284][ T6489] bond3: (slave –): failed to get link speed/duplex [ 599.847251][ T3378] bond3: (slave –): failed to get link speed/duplex [ 599.957256][ T6528] bond3: (slave –): failed to get link speed/duplex [ 600.067456][ T6489] bond3: (slave –): failed to get link speed/duplex [ 600.177210][ T3378] bond3: (slave –): failed to get link speed/duplex [ 600.287274][ T3378] bond3: (slave –): failed to get link speed/duplex [ 600.397447][ T6528] bond3: (slave –): failed to get link speed/duplex [ 600.507304][ T6489] bond3: (slave –): failed to get link speed/duplex [ 600.617326][ T6528] bond3: (slave –): failed to get link speed/duplex [ 600.727429][ T3378] bond3: (slave –): failed to get link speed/duplex [ 604.827327][ T6528] net_ratelimit: 36 callbacks suppressed [ 604.827348][ T6528] bond3: (slave –): failed to get link speed/duplex [ 604.947439][ T6528] bond3: (slave –): failed to get link speed/duplex [ 605.057282][ T6528] bond3: (slave –): failed to get link speed/duplex [ 605.167255][ T36] bond3: (slave –): failed to get link speed/duplex [ 605.277276][ T6528] bond3: (slave –): failed to get link speed/duplex [ 605.387269][ T6489] bond3: (slave –): failed to get link speed/duplex [ 605.498072][ T6489] bond3: (slave –): failed to get link speed/duplex [ 605.607253][ T6489] bond3: (slave –): failed to get link speed/duplex [ 605.717348][ T36] bond3: (slave –): failed to get link speed/duplex [ 605.827414][ T36] bond3: (slave –): failed to get link speed/duplex [ 609.937500][ T6525] net_ratelimit: 36 callbacks suppressed [ 609.937521][ T6525] bond3: (slave –): failed to get link speed/duplex [ 610.057726][ T6489] bond3: (slave –): failed to get link speed/duplex [ 610.167347][ T6525] bond3: (slave –): failed to get link speed/duplex [ 610.277430][ T6525] bond3: (slave –): failed to get link speed/duplex [ 610.387531][ T6489] bond3: (slave –): failed to get link speed/duplex [ 610.497330][ T36] bond3: (slave –): failed to get link speed/duplex [ 610.617984][ T6525] bond3: (slave –): failed to get link speed/duplex [ 610.727241][ T6489] bond3: (slave –): failed to get link speed/duplex [ 610.837358][ T6489] bond3: (slave –): failed to get link speed/duplex [ 610.947292][ T6525] bond3: (slave –): failed to get link speed/duplex [ 615.037501][ T36] net_ratelimit: 36 callbacks suppressed [ 615.037522][ T36] bond3: (slave –): failed to get link speed/duplex [ 615.157468][ T36] bond3: (slave –): failed to get link speed/duplex [ 615.267283][ T36] bond3: (slave –): failed to get link speed/duplex [ 615.377247][ T36] bond3: (slave –): failed to get link speed/duplex [ 615.487522][ T6489] bond3: (slave –): failed to get link speed/duplex [ 615.597305][ T6489] bond3: (slave –): failed to get link speed/duplex [ 615.707326][ T6489] bond3: (slave –): failed to get link speed/duplex [ 615.827340][ T6489] bond3: (slave –): failed to get link speed/duplex [ 615.937441][ T3378] bond3: (slave –): failed to get link speed/duplex [ 616.047343][ T3378] bond3: (slave –): failed to get link speed/duplex [ 620.087402][ T6489] net_ratelimit: 35 callbacks suppressed [ 620.087423][ T6489] bond3: (slave –): failed to get link speed/duplex [ 620.207262][ T6525] bond3: (slave –): failed to get link speed/duplex [ 620.317517][ T6489] bond3: (slave –): failed to get link speed/duplex [ 620.427324][ T6525] bond3: (slave –): failed to get link speed/duplex [ 620.537924][ T6489] bond3: (slave –): failed to get link speed/duplex [ 620.657280][ T6525] bond3: (slave –): failed to get link speed/duplex [ 620.767464][ T36] bond3: (slave –): failed to get link speed/duplex [ 620.887460][ T36] bond3: (slave –): failed to get link speed/duplex [ 620.997475][ T36] bond3: (slave –): failed to get link speed/duplex [ 621.117245][ T36] bond3: (slave –): failed to get link speed/duplex [ 625.127968][ T6489] net_ratelimit: 35 callbacks suppressed [ 625.127989][ T6489] bond3: (slave –): failed to get link speed/duplex [ 625.247185][ T6525] bond3: (slave –): failed to get link speed/duplex [ 625.357385][ T6525] bond3: (slave –): failed to get link speed/duplex [ 625.467252][ T6489] bond3: (slave –): failed to get link speed/duplex [ 625.577309][ T6525] bond3: (slave –): failed to get link speed/duplex [ 625.687551][ T6489] bond3: (slave –): failed to get link speed/duplex [ 625.797224][ T36] bond3: (slave –): failed to get link speed/duplex [ 625.907273][ T36] bond3: (slave –): failed to get link speed/duplex [ 626.017244][ T36] bond3: (slave –): failed to get link speed/duplex [ 626.127251][ T36] bond3: (slave –): failed to get link speed/duplex [ 629.297587][T23580] __nla_validate_parse: 7 callbacks suppressed [ 629.297606][T23580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4233'. [ 629.358472][T23587] netlink: 'syz.2.4235': attribute type 10 has an invalid length. [ 629.382499][T23587] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4235'. [ 629.469932][T20654] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 629.494017][T20654] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 629.506475][T20654] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 629.533165][T20654] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 629.541375][T20654] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 629.577541][T23604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4239'. [ 629.620635][T23604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4239'. [ 629.626543][T23608] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 629.649408][T23604] netlink: 'syz.0.4239': attribute type 20 has an invalid length. [ 629.811610][T23617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4241'. [ 629.877542][T23617] macsec1: entered promiscuous mode [ 629.883006][T23617] bridge0: entered promiscuous mode [ 629.906603][T23618] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 629.932383][T23618] bond8: (slave lo): Enslaving as an active interface with an up link [ 630.232382][T23593] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.239671][T23593] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.247161][T23593] bridge_slave_0: entered allmulticast mode [ 630.254351][T23593] bridge_slave_0: entered promiscuous mode [ 630.262564][T23593] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.270000][T23593] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.277688][T23593] bridge_slave_1: entered allmulticast mode [ 630.285074][T23593] bridge_slave_1: entered promiscuous mode [ 630.312617][T23593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.327302][T23593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.356240][T23593] team0: Port device team_slave_0 added [ 630.364299][T23593] team0: Port device team_slave_1 added [ 630.391038][T23593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.398213][T23593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.425006][T23593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.437235][T23593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.444202][T23593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.472494][T23593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.516234][T23593] hsr_slave_0: entered promiscuous mode [ 630.523997][T23593] hsr_slave_1: entered promiscuous mode [ 630.530714][T23593] debugfs: 'hsr0' already exists in 'hsr' [ 630.536459][T23593] Cannot create hsr debugfs directory [ 630.627412][ T6525] net_ratelimit: 35 callbacks suppressed [ 630.627429][ T6525] bond3: (slave –): failed to get link speed/duplex [ 630.747428][ T36] bond3: (slave –): failed to get link speed/duplex [ 630.857373][ T3378] bond3: (slave –): failed to get link speed/duplex [ 630.967543][ T3378] bond3: (slave –): failed to get link speed/duplex [ 631.077281][ T3378] bond3: (slave –): failed to get link speed/duplex [ 631.187460][ T3378] bond3: (slave –): failed to get link speed/duplex [ 631.297395][ T3378] bond3: (slave –): failed to get link speed/duplex [ 631.407276][ T3378] bond3: (slave –): failed to get link speed/duplex [ 631.517395][ T36] bond3: (slave –): failed to get link speed/duplex [ 631.577544][T20654] Bluetooth: hci3: command tx timeout [ 631.627265][ T3378] bond3: (slave –): failed to get link speed/duplex [ 632.301340][T23587] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 632.314658][T23608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4240'. [ 632.382402][T23593] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 632.450937][T23593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 632.491895][T23640] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4243'. [ 632.516467][T23593] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 632.548339][T23593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 632.564804][T23593] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 632.607568][T23593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 632.633335][T23593] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 632.661250][T23593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 632.795736][T23663] syzkaller1: entered promiscuous mode [ 632.813043][T23663] syzkaller1: entered allmulticast mode [ 632.916689][T23673] netlink: 'syz.0.4253': attribute type 12 has an invalid length. [ 632.926664][T23673] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 633.062603][T23677] netlink: 'syz.4.4254': attribute type 61 has an invalid length. [ 633.100331][T23677] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.4254'. [ 633.221764][T23593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.276151][T23593] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.293268][ T3378] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.300424][ T3378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.342237][T23687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4255'. [ 633.370779][ T6528] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.378021][ T6528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.652874][T23697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4258'. [ 633.663009][T20654] Bluetooth: hci3: command tx timeout [ 633.759392][T23697] veth5: entered promiscuous mode [ 634.564864][T23729] netlink: 192 bytes leftover after parsing attributes in process `syz.4.4266'. [ 634.808874][ T6524] tipc: Subscription rejected, illegal request [ 635.010830][T23593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.747506][T20654] Bluetooth: hci3: command tx timeout [ 637.758573][ T6528] net_ratelimit: 16 callbacks suppressed [ 637.758593][ T6528] bond3: (slave –): failed to get link speed/duplex [ 637.822530][T20654] Bluetooth: hci3: command tx timeout [ 637.851213][T23766] netlink: 'syz.2.4273': attribute type 4 has an invalid length. [ 637.881104][T23593] veth0_vlan: entered promiscuous mode [ 637.901788][T23768] xt_l2tp: unknown flags: 51 [ 637.903919][T23769] netlink: 'syz.2.4273': attribute type 4 has an invalid length. [ 637.927672][ T61] bond3: (slave –): failed to get link speed/duplex [ 637.954267][T23593] veth1_vlan: entered promiscuous mode [ 638.005781][T23772] netlink: 'syz.0.4274': attribute type 1 has an invalid length. [ 638.033973][T23593] veth0_macvtap: entered promiscuous mode [ 638.055972][T23593] veth1_macvtap: entered promiscuous mode [ 638.098496][T23593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.126299][T23775] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4277'. [ 638.150069][T23777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4276'. [ 638.151392][T23593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.178458][ T3378] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.189392][ T3378] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.204174][ T3378] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.225254][T23781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4276'. [ 638.251747][ T3378] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.280266][ T61] bond3: (slave –): failed to get link speed/duplex [ 638.389982][ T3378] bond3: (slave –): failed to get link speed/duplex [ 638.460450][T23793] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4281'. [ 638.514847][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.536795][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.600447][T23789] bond4: (slave bond0): Removing an active aggregator [ 638.608400][T23789] bond4: (slave bond0): Releasing backup interface [ 638.624967][T23789] bond3: (slave –): Removing an active aggregator [ 638.632945][T23789] bond3: (slave –): Releasing backup interface [ 638.655613][T23789] bridge_slave_0: left allmulticast mode [ 638.673250][T23789] bridge_slave_0: left promiscuous mode [ 638.680342][T23789] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.695591][T23789] bridge_slave_1: left allmulticast mode [ 638.712637][T23789] bridge_slave_1: left promiscuous mode [ 638.718943][T23789] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.733076][T23789] bond0: (slave bond_slave_0): Releasing backup interface [ 638.751577][T23789] bond0: (slave bond_slave_1): Releasing backup interface [ 638.768800][T23789] team_slave_0: left promiscuous mode [ 638.785070][T23789] team0: Port device team_slave_0 removed [ 638.794603][T23789] team_slave_1: left promiscuous mode [ 638.806990][T23789] team0: Port device team_slave_1 removed [ 638.813804][T23789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.821781][T23789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.830258][T23789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.838323][T23789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.848776][T23789] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 638.878084][T23800] vlan0: entered promiscuous mode [ 638.919262][ T6489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.939405][ T6489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.066114][T23814] openvswitch: netlink: Message has 4 unknown bytes. [ 639.080541][T23815] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4287'. [ 639.090206][T23814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.143999][T23814] openvswitch: netlink: Message has 4 unknown bytes. [ 639.213838][T23814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.240356][T23826] netlink: 'syz.2.4289': attribute type 8 has an invalid length. [ 639.600044][T23851] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4294'. [ 639.625832][T23852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4296'. [ 639.677935][T23853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4296'. [ 640.290267][T23874] openvswitch: netlink: Flow actions attr not present in new flow. [ 640.470662][T23876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4301'. [ 640.579674][T23876] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4301'. [ 640.611652][T23876] netlink: 'syz.0.4301': attribute type 1 has an invalid length. [ 640.662644][T23881] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4303'. [ 640.849820][T23893] netlink: 'syz.3.4307': attribute type 58 has an invalid length. [ 640.940073][T23893] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4307'. [ 641.039607][T23899] tipc: Started in network mode [ 641.044626][T23899] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 641.052289][T23899] tipc: Enabled bearer , priority 29 [ 641.102185][T23904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4311'. [ 641.129584][T23904] tipc: Enabled bearer , priority 0 [ 641.150860][T23909] netlink: 'syz.4.4313': attribute type 10 has an invalid length. [ 641.161880][T23904] syzkaller0: entered promiscuous mode [ 641.176959][T23904] syzkaller0: entered allmulticast mode [ 641.196649][T23909] team0: Port device dummy0 added [ 641.223036][T23909] netlink: 'syz.4.4313': attribute type 10 has an invalid length. [ 641.239749][T23903] tipc: Resetting bearer [ 641.262607][T23914] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4315'. [ 641.290005][T23903] tipc: Disabling bearer [ 641.329087][T23909] team0: Port device dummy0 removed [ 641.503631][T23915] veth9: entered promiscuous mode [ 641.582336][T23934] tipc: New replicast peer: 255.255.255.255 [ 641.608562][T23934] tipc: Enabled bearer , priority 26 [ 641.647851][T23934] netlink: 'syz.2.4318': attribute type 2 has an invalid length. [ 641.728905][T23947] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4321'. [ 641.751228][T23947] 0·: renamed from hsr0 (while UP) [ 641.796016][T23947] 0·: entered allmulticast mode [ 641.834691][T23947] hsr_slave_0: entered allmulticast mode [ 641.844779][T23947] hsr_slave_1: entered allmulticast mode [ 641.860155][T20654] block nbd4: Receive control failed (result -1) [ 642.112791][T23964] syzkaller0: entered promiscuous mode [ 642.119853][T23964] syzkaller0: entered allmulticast mode [ 642.620568][T23951] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 643.898389][T20654] Bluetooth: hci1: command 0x0406 tx timeout [ 645.315567][T23393] tipc: Node number set to 10922666 [ 645.334531][T23998] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 645.481498][T24017] tipc: Enabling of bearer rejected, failed to enable media [ 645.681541][T24032] __nla_validate_parse: 1 callbacks suppressed [ 645.681562][T24032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4342'. [ 645.732586][T24032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4342'. [ 645.869087][T24050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4347'. [ 646.017380][T24059] netlink: 'syz.5.4349': attribute type 11 has an invalid length. [ 646.043783][T24059] netlink: 'syz.5.4349': attribute type 11 has an invalid length. [ 646.062282][T24059] netlink: 204 bytes leftover after parsing attributes in process `syz.5.4349'. [ 646.387866][T24073] netlink: 'syz.4.4353': attribute type 58 has an invalid length. [ 646.899059][T24110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4364'. [ 646.956149][T24105] bond5: entered allmulticast mode [ 647.065864][T24102] bond5: left allmulticast mode [ 647.326309][T24134] netlink: 'syz.5.4369': attribute type 1 has an invalid length. [ 647.522124][T24142] geneve2: entered promiscuous mode [ 647.793895][T24161] net_ratelimit: 26 callbacks suppressed [ 647.793913][T24161] openvswitch: netlink: IPv4 tunnel dst address is zero [ 647.977350][T20654] Bluetooth: hci3: command tx timeout [ 648.171855][T24187] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 648.209440][T24190] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 648.235399][T24191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4381'. [ 648.268705][T24193] netlink: 'syz.2.4382': attribute type 2 has an invalid length. [ 648.294851][T24193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4382'. [ 648.474456][T24200] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4384'. [ 648.499217][T24200] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4384'. [ 648.515476][T24205] syzkaller0: entered promiscuous mode [ 648.523591][T24205] syzkaller0: entered allmulticast mode [ 648.662233][T24211] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4388'. [ 648.724750][T24212] netlink: 'syz.3.4387': attribute type 10 has an invalid length. [ 648.759854][T24212] team0: Device vxcan1 is of different type [ 648.951803][T24219] bridge0: port 2(dummy0) entered blocking state [ 648.982103][T24219] bridge0: port 2(dummy0) entered disabled state [ 648.993618][T24216] Bluetooth: MGMT ver 1.23 [ 649.008597][T24219] dummy0: entered allmulticast mode [ 649.057736][T24219] dummy0: entered promiscuous mode [ 649.097526][T24219] vlan2: entered promiscuous mode [ 649.116194][T24219] geneve0: entered promiscuous mode [ 649.141534][T24226] dummy0: left allmulticast mode [ 649.148343][T24226] dummy0: left promiscuous mode [ 649.153566][T24226] bridge0: port 2(dummy0) entered disabled state [ 649.161847][T24226] vlan2: left promiscuous mode [ 649.166943][T24226] geneve0: left promiscuous mode [ 649.324009][T24237] openvswitch: netlink: IP tunnel dst address not specified [ 649.403982][T24241] netlink: 'syz.3.4397': attribute type 18 has an invalid length. [ 649.509477][T24248] netlink: 'syz.5.4400': attribute type 12 has an invalid length. [ 649.542364][ T61] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.551669][T24248] netlink: 'syz.5.4400': attribute type 12 has an invalid length. [ 649.561004][ T61] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.578363][ T61] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.599052][ T61] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.625418][T24250] syzkaller0: entered promiscuous mode [ 649.638032][T24250] syzkaller0: entered allmulticast mode [ 649.794542][T24259] netlink: 'syz.4.4403': attribute type 39 has an invalid length. [ 649.923553][T24269] IPv6: Can't replace route, no match found [ 650.235269][T24281] netlink: 'syz.4.4409': attribute type 13 has an invalid length. [ 650.253043][T24281] netlink: 'syz.4.4409': attribute type 17 has an invalid length. [ 650.503674][T24281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.520984][T24281] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.588244][T24281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.664024][T24281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.688559][T24281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.763338][T24281] veth1_vlan: left promiscuous mode [ 650.779353][T24281] vlan0: left promiscuous mode [ 650.799157][T24281] veth1_vlan: entered promiscuous mode [ 650.823194][T24281] veth1_macvtap: left promiscuous mode [ 650.839106][T24281] veth0_macvtap: left promiscuous mode [ 650.852553][T24281] veth0_macvtap: entered promiscuous mode [ 650.888278][T24281] veth1_macvtap: entered promiscuous mode [ 650.913910][T24281] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 650.926642][T24281] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 650.940433][T24281] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 650.953060][T24281] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 650.973898][T24281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 650.999467][T24281] mac80211_hwsim hwsim66 wlan0: entered promiscuous mode [ 651.017741][T24281] 8021q: adding VLAN 0 to HW filter on device bond2 [ 651.161617][T24281] bond3: left promiscuous mode [ 651.170529][T24281] 8021q: adding VLAN 0 to HW filter on device bond3 [ 651.184556][T24281] 8021q: adding VLAN 0 to HW filter on device bond4 [ 651.206237][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.213459][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.315477][ T6528] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.325106][ T6528] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.334388][ T6528] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.343763][ T6528] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.362712][T24306] syzkaller0: entered promiscuous mode [ 651.382332][T24306] syzkaller0: entered allmulticast mode [ 651.430303][ T6528] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.442445][ T6528] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.604977][T24334] __nla_validate_parse: 14 callbacks suppressed [ 651.604996][T24334] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4419'. [ 651.632073][T24336] netlink: 'syz.4.4422': attribute type 1 has an invalid length. [ 651.647518][T24334] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4419'. [ 651.664706][T24334] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4419'. [ 651.667085][ T6528] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.716659][ T6528] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.743778][T24339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4421'. [ 651.773142][T24345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4424'. [ 651.798741][T24345] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4424'. [ 651.853194][T24352] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4425'. [ 651.946042][T24348] bond5: (slave gretap2): making interface the new active one [ 651.956571][T24348] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 651.973146][T24341] macvlan3: entered promiscuous mode [ 652.009600][T24341] macvlan3: entered allmulticast mode [ 652.021904][T24341] bond5: entered promiscuous mode [ 652.028628][T24341] gretap2: entered promiscuous mode [ 652.040347][T24341] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 652.051927][T24341] bond5: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 652.069169][T24341] bond5: left promiscuous mode [ 652.074075][T24341] gretap2: left promiscuous mode [ 655.690494][T24412] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 655.963409][T24483] bond0: option miimon: invalid value (18446744073709551615) [ 655.990729][T24483] bond0: option miimon: allowed values 0 - 2147483647 [ 656.043749][T24488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4454'. [ 656.063609][T24488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4454'. [ 656.075156][T24488] netlink: 'syz.2.4454': attribute type 1 has an invalid length. [ 656.083718][T24488] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4454'. [ 656.271057][T24496] netlink: 'syz.0.4458': attribute type 1 has an invalid length. [ 656.340549][T24503] Unknown options in mask 6 [ 656.377182][T24505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.393141][T24496] 8021q: adding VLAN 0 to HW filter on device bond7 [ 656.444136][T24508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.469203][T24497] bond7: (slave bridge1): Enslaving as a backup interface with an up link [ 656.497464][ T6480] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 656.556842][T24507] geneve0: entered promiscuous mode [ 656.568968][T24507] geneve0: left promiscuous mode [ 656.641132][ T6524] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 656.671993][T24505] bridge0: port 2(syz_tun) entered blocking state [ 656.688915][T24505] bridge0: port 2(syz_tun) entered disabled state [ 656.710613][T24505] syz_tun: entered allmulticast mode [ 656.752217][T24505] vlan2: entered promiscuous mode [ 656.767704][T24505] geneve0: entered promiscuous mode [ 656.802084][T24522] __nla_validate_parse: 2 callbacks suppressed [ 656.802103][T24522] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4465'. [ 656.912722][T24522] 8021q: adding VLAN 0 to HW filter on device bond1 [ 656.932451][T24518] syzkaller1: entered promiscuous mode [ 656.945066][T24518] syzkaller1: entered allmulticast mode [ 656.983581][T24529] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4467'. [ 657.096109][T24530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4468'. [ 657.141509][T24539] Bluetooth: MGMT ver 1.23 [ 657.368326][T24555] netlink: 'syz.3.4474': attribute type 15 has an invalid length. [ 657.575313][T24559] ip6erspan0: entered allmulticast mode [ 657.642809][T24580] netlink: 'syz.5.4479': attribute type 11 has an invalid length. [ 657.682867][T24580] netlink: 'syz.5.4479': attribute type 11 has an invalid length. [ 657.727176][T24580] netlink: 204 bytes leftover after parsing attributes in process `syz.5.4479'. [ 657.952578][T24595] bridge_slave_0: default FDB implementation only supports local addresses [ 658.036063][T24605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4481'. [ 658.126748][T24612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4485'. [ 658.148412][T24612] ip6tnl1: entered allmulticast mode [ 658.163384][T24612] netlink: 'syz.0.4485': attribute type 11 has an invalid length. [ 658.268976][T24620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4487'. [ 658.581756][T24631] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4492'. [ 658.732747][T24637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4493'. [ 658.741987][T24637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4493'. [ 658.765847][T24637] geneve2: entered promiscuous mode [ 658.772773][T24637] geneve2: entered allmulticast mode [ 658.781029][ T6524] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.803737][ T6524] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.840247][ T6524] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.854620][ T6524] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.015826][T24647] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 659.205914][T24670] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 659.355489][T24674] netlink: 'syz.5.4502': attribute type 3 has an invalid length. [ 659.480503][T24685] netlink: 'syz.4.4505': attribute type 1 has an invalid length. [ 659.569028][T24685] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 659.779098][T24691] syzkaller1: entered promiscuous mode [ 659.803253][T24691] syzkaller1: entered allmulticast mode [ 660.131741][T24713] netlink: 'syz.0.4510': attribute type 1 has an invalid length. [ 660.286838][T24713] 8021q: adding VLAN 0 to HW filter on device bond8 [ 660.354008][T24722] bond8: (slave veth11): Enslaving as an active interface with a down link [ 660.505972][T24734] netlink: 'syz.0.4519': attribute type 1 has an invalid length. [ 661.470571][T24798] syzkaller0: entered promiscuous mode [ 661.484834][T24798] syzkaller0: entered allmulticast mode [ 661.986623][T24820] __nla_validate_parse: 9 callbacks suppressed [ 661.986644][T24820] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4544'. [ 662.048243][T24820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4544'. [ 662.125316][T24831] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 662.311655][T24839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4553'. [ 662.355473][T24844] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4552'. [ 662.605584][T24852] netlink: 'syz.4.4557': attribute type 1 has an invalid length. [ 662.628548][T24852] netlink: 'syz.4.4557': attribute type 1 has an invalid length. [ 662.755075][T24869] netlink: 'syz.4.4557': attribute type 10 has an invalid length. [ 662.850129][T24852] 8021q: adding VLAN 0 to HW filter on device bond6 [ 662.875223][T24869] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4557'. [ 662.955424][T24865] bond6: (slave dummy0): making interface the new active one [ 662.979446][T24865] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 662.991167][T24884] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4563'. [ 663.055003][T24884] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 663.074275][T24869] bond6: (slave dummy0): Releasing active interface [ 663.084929][T24884] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 663.116058][T24884] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 663.148541][T24884] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 663.174591][T24884] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 663.196192][T24884] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 663.203958][T24884] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 663.211743][T24884] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 663.220365][T24884] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 663.291008][T24893] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4565'. [ 663.409719][T24902] netlink: 'syz.4.4565': attribute type 8 has an invalid length. [ 663.758879][T24919] netlink: 'syz.2.4567': attribute type 12 has an invalid length. [ 663.806809][T24919] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4567'. [ 664.168116][T24945] syzkaller0: entered promiscuous mode [ 664.179804][T24945] syzkaller0: entered allmulticast mode [ 664.186649][T24950] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4574'. [ 664.601921][T24970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4577'. [ 664.754544][T24970] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 664.775053][T24970] syzkaller1: Refused to change device type [ 665.020806][T24980] syzkaller1: entered promiscuous mode [ 665.039532][T24980] syzkaller1: entered allmulticast mode [ 665.521557][T25011] can: request_module (can-proto-3) failed. [ 665.717683][T25026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.740468][T25026] team0: left promiscuous mode [ 665.751136][T25026] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 665.768747][T25026] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.823247][T25026] veth1_vlan: left promiscuous mode [ 665.839666][T25026] vlan0: left promiscuous mode [ 665.846924][T25026] veth1_vlan: entered promiscuous mode [ 665.864486][T25026] veth0_macvtap: left promiscuous mode [ 665.874316][T25011] nbd0: detected capacity change from 0 to 63 [ 665.883192][T25026] veth0_macvtap: entered promiscuous mode [ 665.893779][T25018] block nbd0: NBD_DISCONNECT [ 665.911548][T25018] block nbd0: Disconnected due to user request. [ 665.919317][T25018] block nbd0: shutting down sockets [ 665.926253][T23792] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 665.939064][T25026] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 665.947898][T23792] Buffer I/O error on dev nbd0, logical block 0, async page read [ 665.959439][T25026] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 665.970418][T25026] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 665.981325][T25026] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 665.992592][T25026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 666.004427][T25026] bond2: left promiscuous mode [ 666.010459][T25026] 8021q: adding VLAN 0 to HW filter on device bond2 [ 666.020100][ T1689] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 666.033296][ T1689] Buffer I/O error on dev nbd0, logical block 1, async page read [ 666.042733][ T1689] Buffer I/O error on dev nbd0, logical block 2, async page read [ 666.045629][T25026] macvlan2: left promiscuous mode [ 666.051130][ T1689] Buffer I/O error on dev nbd0, logical block 3, async page read [ 666.068221][T23792] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.079552][T25026] bond5: left promiscuous mode [ 666.091205][T23792] Buffer I/O error on dev nbd0, logical block 0, async page read [ 666.100073][T25026] bridge2: left promiscuous mode [ 666.115599][T23792] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.147119][T25026] 8021q: adding VLAN 0 to HW filter on device bond6 [ 666.151977][T23792] Buffer I/O error on dev nbd0, logical block 1, async page read [ 666.169914][T25026] macsec1: left promiscuous mode [ 666.186719][T25026] veth9: left promiscuous mode [ 666.196726][T23792] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.214909][T23792] Buffer I/O error on dev nbd0, logical block 2, async page read [ 666.230939][T25026] geneve2: left promiscuous mode [ 666.231178][T23792] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.252012][T25040] netlink: 'syz.5.4595': attribute type 4 has an invalid length. [ 666.252213][T23792] Buffer I/O error on dev nbd0, logical block 3, async page read [ 666.268867][T23792] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.278609][T23792] Buffer I/O error on dev nbd0, logical block 0, async page read [ 666.286800][T23792] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.296368][T23792] Buffer I/O error on dev nbd0, logical block 1, async page read [ 666.305339][T25041] netlink: 'syz.5.4595': attribute type 4 has an invalid length. [ 666.314080][T23792] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.324556][T23792] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.340744][T23792] ldm_validate_partition_table(): Disk read failed. [ 666.366196][T23792] Dev nbd0: unable to read RDB block 0 [ 666.386945][T23792] nbd0: unable to read partition table [ 666.408158][T25043] netlink: 'syz.3.4596': attribute type 8 has an invalid length. [ 666.426015][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 666.475569][T23792] ldm_validate_partition_table(): Disk read failed. [ 666.486974][T23792] Dev nbd0: unable to read RDB block 0 [ 666.506731][T23792] nbd0: unable to read partition table [ 666.534856][T23792] [ 666.537318][T23792] ====================================================== [ 666.544339][T23792] WARNING: possible circular locking dependency detected [ 666.551378][T23792] syzkaller #0 Not tainted [ 666.555795][T23792] ------------------------------------------------------ [ 666.562817][T23792] udevd/23792 is trying to acquire lock: [ 666.568452][T23792] ffffffff8ea84d80 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x680 [ 666.578278][T23792] [ 666.578278][T23792] but task is already holding lock: [ 666.585622][T23792] ffffffff9016b200 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 666.596222][T23792] [ 666.596222][T23792] which lock already depends on the new lock. [ 666.596222][T23792] [ 666.606702][T23792] [ 666.606702][T23792] the existing dependency chain (in reverse order) is: [ 666.615699][T23792] [ 666.615699][T23792] -> #9 (uevent_sock_mutex){+.+.}-{4:4}: [ 666.623500][T23792] __mutex_lock+0x19d/0x1590 [ 666.628674][T23792] kobject_uevent_net_broadcast+0x27e/0x560 [ 666.635077][T23792] kobject_uevent_env+0x566/0x9e0 [ 666.640652][T23792] device_add+0x544/0xb90 [ 666.645582][T23792] device_create+0x269/0x300 [ 666.650677][T23792] msr_device_create+0x33/0x50 [ 666.655948][T23792] cpuhp_invoke_callback+0x448/0x860 [ 666.661740][T23792] cpuhp_thread_fun+0x362/0x780 [ 666.667098][T23792] smpboot_thread_fn+0x57c/0xa80 [ 666.672548][T23792] kthread+0x389/0x470 [ 666.677123][T23792] ret_from_fork+0x514/0xb70 [ 666.682233][T23792] ret_from_fork_asm+0x1a/0x30 [ 666.687596][T23792] [ 666.687596][T23792] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 666.695579][T23792] cpuhp_thread_fun+0x127/0x780 [ 666.700942][T23792] smpboot_thread_fn+0x57c/0xa80 [ 666.706391][T23792] kthread+0x389/0x470 [ 666.710971][T23792] ret_from_fork+0x514/0xb70 [ 666.716070][T23792] ret_from_fork_asm+0x1a/0x30 [ 666.721343][T23792] [ 666.721343][T23792] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 666.729061][T23792] cpus_read_lock+0x42/0x160 [ 666.734169][T23792] static_key_slow_inc+0x12/0x30 [ 666.739614][T23792] setup_udp_tunnel_sock+0x2df/0x4f0 [ 666.745516][T23792] l2tp_tunnel_register+0xe77/0x1570 [ 666.751347][T23792] pppol2tp_connect+0x8e3/0x18b0 [ 666.756792][T23792] __sys_connect+0x323/0x460 [ 666.761945][T23792] __x64_sys_connect+0x7a/0x90 [ 666.767226][T23792] do_syscall_64+0x174/0x580 [ 666.772326][T23792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.778726][T23792] [ 666.778726][T23792] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 666.786439][T23792] lock_sock_nested+0x41/0x100 [ 666.791788][T23792] inet_shutdown+0x6a/0x390 [ 666.796877][T23792] nbd_mark_nsock_dead+0x2cb/0x550 [ 666.802542][T23792] recv_work+0x1cef/0x1e10 [ 666.807469][T23792] process_scheduled_works+0xa8e/0x14e0 [ 666.813523][T23792] worker_thread+0xa47/0xfb0 [ 666.818618][T23792] kthread+0x389/0x470 [ 666.823193][T23792] ret_from_fork+0x514/0xb70 [ 666.828291][T23792] ret_from_fork_asm+0x1a/0x30 [ 666.833560][T23792] [ 666.833560][T23792] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 666.841187][T23792] __mutex_lock+0x19d/0x1590 [ 666.846294][T23792] nbd_queue_rq+0x373/0x1150 [ 666.851393][T23792] blk_mq_dispatch_rq_list+0x499/0x1990 [ 666.857517][T23792] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 666.864394][T23792] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 666.870881][T23792] blk_mq_run_hw_queue+0x348/0x4f0 [ 666.876499][T23792] blk_mq_dispatch_list+0xd11/0xe10 [ 666.882202][T23792] blk_mq_flush_plug_list+0x45f/0x540 [ 666.888084][T23792] __blk_flush_plug+0x3ed/0x4d0 [ 666.893515][T23792] __submit_bio+0x465/0x560 [ 666.898525][T23792] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 666.904663][T23792] block_read_full_folio+0x599/0x830 [ 666.910452][T23792] filemap_read_folio+0x12c/0x3a0 [ 666.915985][T23792] do_read_cache_folio+0x354/0x590 [ 666.921603][T23792] read_part_sector+0xb6/0x2b0 [ 666.926938][T23792] adfspart_check_ICS+0xb1/0x960 [ 666.932380][T23792] bdev_disk_changed+0x82b/0x1780 [ 666.937911][T23792] blkdev_get_whole+0x372/0x510 [ 666.943323][T23792] bdev_open+0x324/0xd70 [ 666.948072][T23792] blkdev_open+0x461/0x600 [ 666.952997][T23792] do_dentry_open+0x816/0x1380 [ 666.958267][T23792] vfs_open+0x3b/0x340 [ 666.962839][T23792] path_openat+0x2e3b/0x3890 [ 666.967939][T23792] do_file_open+0x23e/0x4a0 [ 666.972953][T23792] do_sys_openat2+0x113/0x200 [ 666.978140][T23792] __x64_sys_openat+0x138/0x170 [ 666.983499][T23792] do_syscall_64+0x174/0x580 [ 666.988599][T23792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.994997][T23792] [ 666.994997][T23792] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 667.002226][T23792] __mutex_lock+0x19d/0x1590 [ 667.007326][T23792] nbd_queue_rq+0xc1/0x1150 [ 667.012344][T23792] blk_mq_dispatch_rq_list+0x499/0x1990 [ 667.018395][T23792] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 667.025229][T23792] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 667.031715][T23792] blk_mq_run_hw_queue+0x348/0x4f0 [ 667.037334][T23792] blk_mq_dispatch_list+0xd11/0xe10 [ 667.043048][T23792] blk_mq_flush_plug_list+0x45f/0x540 [ 667.048931][T23792] __blk_flush_plug+0x3ed/0x4d0 [ 667.054288][T23792] __submit_bio+0x465/0x560 [ 667.059295][T23792] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 667.065433][T23792] block_read_full_folio+0x599/0x830 [ 667.071227][T23792] filemap_read_folio+0x12c/0x3a0 [ 667.076763][T23792] do_read_cache_folio+0x354/0x590 [ 667.082383][T23792] read_part_sector+0xb6/0x2b0 [ 667.087652][T23792] adfspart_check_ICS+0xb1/0x960 [ 667.093108][T23792] bdev_disk_changed+0x82b/0x1780 [ 667.098661][T23792] blkdev_get_whole+0x372/0x510 [ 667.104021][T23792] bdev_open+0x324/0xd70 [ 667.108773][T23792] blkdev_open+0x461/0x600 [ 667.113700][T23792] do_dentry_open+0x816/0x1380 [ 667.118972][T23792] vfs_open+0x3b/0x340 [ 667.123551][T23792] path_openat+0x2e3b/0x3890 [ 667.128648][T23792] do_file_open+0x23e/0x4a0 [ 667.133660][T23792] do_sys_openat2+0x113/0x200 [ 667.138842][T23792] __x64_sys_openat+0x138/0x170 [ 667.144228][T23792] do_syscall_64+0x174/0x580 [ 667.149328][T23792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.155725][T23792] [ 667.155725][T23792] -> #3 (set->srcu){.+.+}-{0:0}: [ 667.162831][T23792] __synchronize_srcu+0xc9/0x2f0 [ 667.168273][T23792] elevator_switch+0x1e8/0x7b0 [ 667.173712][T23792] elevator_change+0x2fa/0x480 [ 667.178983][T23792] elevator_set_default+0x375/0x440 [ 667.184688][T23792] blk_register_queue+0x3f3/0x4e0 [ 667.190222][T23792] __add_disk+0x6cb/0xe30 [ 667.195061][T23792] add_disk_fwnode+0xfb/0x4b0 [ 667.200244][T23792] nbd_dev_add+0x733/0xb60 [ 667.205220][T23792] nbd_init+0x15f/0x1e0 [ 667.209882][T23792] do_one_initcall+0x250/0x870 [ 667.215153][T23792] do_initcall_level+0x10a/0x1a0 [ 667.220597][T23792] do_initcalls+0x59/0xa0 [ 667.225428][T23792] kernel_init_freeable+0x29d/0x3e0 [ 667.231129][T23792] kernel_init+0x1d/0x1d0 [ 667.235966][T23792] ret_from_fork+0x514/0xb70 [ 667.241062][T23792] ret_from_fork_asm+0x1a/0x30 [ 667.246358][T23792] [ 667.246358][T23792] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 667.254161][T23792] __mutex_lock+0x19d/0x1590 [ 667.259265][T23792] elevator_change+0x1af/0x480 [ 667.264544][T23792] elevator_set_none+0xb5/0x140 [ 667.269900][T23792] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 667.276312][T23792] nbd_start_device+0x189/0xb30 [ 667.281691][T23792] nbd_genl_connect+0x1597/0x1c10 [ 667.287253][T23792] genl_family_rcv_msg_doit+0x233/0x340 [ 667.293446][T23792] genl_rcv_msg+0x614/0x7a0 [ 667.298472][T23792] netlink_rcv_skb+0x226/0x4a0 [ 667.303749][T23792] genl_rcv+0x28/0x40 [ 667.308260][T23792] netlink_unicast+0x7bb/0x940 [ 667.313534][T23792] netlink_sendmsg+0x813/0xb40 [ 667.318802][T23792] ____sys_sendmsg+0x9b9/0xa20 [ 667.324081][T23792] ___sys_sendmsg+0x2a5/0x360 [ 667.329263][T23792] __x64_sys_sendmsg+0x1bd/0x2a0 [ 667.334705][T23792] do_syscall_64+0x174/0x580 [ 667.339804][T23792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.346212][T23792] [ 667.346212][T23792] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 667.354836][T23792] blk_alloc_queue+0x544/0x690 [ 667.360110][T23792] __blk_mq_alloc_disk+0x194/0x390 [ 667.365728][T23792] nbd_dev_add+0x494/0xb60 [ 667.370655][T23792] nbd_init+0x15f/0x1e0 [ 667.375321][T23792] do_one_initcall+0x250/0x870 [ 667.380599][T23792] do_initcall_level+0x10a/0x1a0 [ 667.386052][T23792] do_initcalls+0x59/0xa0 [ 667.390887][T23792] kernel_init_freeable+0x29d/0x3e0 [ 667.396594][T23792] kernel_init+0x1d/0x1d0 [ 667.401435][T23792] ret_from_fork+0x514/0xb70 [ 667.406532][T23792] ret_from_fork_asm+0x1a/0x30 [ 667.411804][T23792] [ 667.411804][T23792] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 667.419001][T23792] __lock_acquire+0x1520/0x2cd0 [ 667.424361][T23792] lock_acquire+0x106/0x350 [ 667.429371][T23792] fs_reclaim_acquire+0x71/0x100 [ 667.434821][T23792] kmem_cache_alloc_node_noprof+0x4a/0x680 [ 667.441136][T23792] __alloc_skb+0x1d7/0x7a0 [ 667.446067][T23792] alloc_uevent_skb+0x7d/0x230 [ 667.451341][T23792] kobject_uevent_net_broadcast+0x2fa/0x560 [ 667.457744][T23792] kobject_uevent_env+0x566/0x9e0 [ 667.463275][T23792] nbd_config_put+0x185/0x660 [ 667.468460][T23792] nbd_release+0xfe/0x140 [ 667.473298][T23792] bdev_release+0x571/0x690 [ 667.478306][T23792] blkdev_release+0x15/0x20 [ 667.483316][T23792] __fput+0x418/0xa50 [ 667.487817][T23792] fput_close_sync+0x11f/0x240 [ 667.493095][T23792] __x64_sys_close+0x7e/0x110 [ 667.498280][T23792] do_syscall_64+0x174/0x580 [ 667.503382][T23792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.509782][T23792] [ 667.509782][T23792] other info that might help us debug this: [ 667.509782][T23792] [ 667.519989][T23792] Chain exists of: [ 667.519989][T23792] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 667.519989][T23792] [ 667.532661][T23792] Possible unsafe locking scenario: [ 667.532661][T23792] [ 667.540092][T23792] CPU0 CPU1 [ 667.545441][T23792] ---- ---- [ 667.550789][T23792] lock(uevent_sock_mutex); [ 667.555365][T23792] lock(cpuhp_state-up); [ 667.562202][T23792] lock(uevent_sock_mutex); [ 667.569302][T23792] lock(fs_reclaim); [ 667.573268][T23792] [ 667.573268][T23792] *** DEADLOCK *** [ 667.573268][T23792] [ 667.581392][T23792] 3 locks held by udevd/23792: [ 667.586133][T23792] #0: ffff888091f4d350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1b8/0x690 [ 667.595705][T23792] #1: ffff888066ac4a60 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0 [ 667.606480][T23792] #2: ffffffff9016b200 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 667.617433][T23792] [ 667.617433][T23792] stack backtrace: [ 667.623334][T23792] CPU: 0 UID: 0 PID: 23792 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 667.623350][T23792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 667.623359][T23792] Call Trace: [ 667.623365][T23792] [ 667.623373][T23792] dump_stack_lvl+0xe8/0x150 [ 667.623389][T23792] print_circular_bug+0x2e1/0x300 [ 667.623408][T23792] check_noncircular+0x12e/0x150 [ 667.623426][T23792] __lock_acquire+0x1520/0x2cd0 [ 667.623440][T23792] ? lockdep_unlock+0x5d/0xd0 [ 667.623457][T23792] ? kmem_cache_alloc_node_noprof+0x4a/0x680 [ 667.623475][T23792] lock_acquire+0x106/0x350 [ 667.623487][T23792] ? kmem_cache_alloc_node_noprof+0x4a/0x680 [ 667.623505][T23792] ? lock_acquire+0x106/0x350 [ 667.623520][T23792] fs_reclaim_acquire+0x71/0x100 [ 667.623538][T23792] ? kmem_cache_alloc_node_noprof+0x4a/0x680 [ 667.623555][T23792] kmem_cache_alloc_node_noprof+0x4a/0x680 [ 667.623572][T23792] ? __alloc_skb+0x1d7/0x7a0 [ 667.623591][T23792] ? __local_bh_enable_ip+0xd0/0x130 [ 667.623606][T23792] __alloc_skb+0x1d7/0x7a0 [ 667.623626][T23792] alloc_uevent_skb+0x7d/0x230 [ 667.623646][T23792] kobject_uevent_net_broadcast+0x2fa/0x560 [ 667.623666][T23792] kobject_uevent_env+0x566/0x9e0 [ 667.623687][T23792] nbd_config_put+0x185/0x660 [ 667.623708][T23792] nbd_release+0xfe/0x140 [ 667.623726][T23792] ? __pfx_nbd_release+0x10/0x10 [ 667.623743][T23792] bdev_release+0x571/0x690 [ 667.623762][T23792] ? __pfx_blkdev_release+0x10/0x10 [ 667.623778][T23792] blkdev_release+0x15/0x20 [ 667.623793][T23792] __fput+0x418/0xa50 [ 667.623812][T23792] fput_close_sync+0x11f/0x240 [ 667.623827][T23792] ? __pfx_fput_close_sync+0x10/0x10 [ 667.623843][T23792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.623857][T23792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.623870][T23792] __x64_sys_close+0x7e/0x110 [ 667.623887][T23792] do_syscall_64+0x174/0x580 [ 667.623901][T23792] ? trace_irq_disable+0x3b/0x140 [ 667.623919][T23792] ? clear_bhb_loop+0x40/0x90 [ 667.623934][T23792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.623947][T23792] RIP: 0033:0x7f68104a7407 [ 667.623960][T23792] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 667.623972][T23792] RSP: 002b:00007fff168c3730 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 667.623985][T23792] RAX: ffffffffffffffda RBX: 00007f6810bc8880 RCX: 00007f68104a7407 [ 667.623995][T23792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 667.624003][T23792] RBP: 00007f6810bc86e8 R08: 0000000000000000 R09: 0000000000000000 [ 667.624011][T23792] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 667.624019][T23792] R13: 000055eb55879190 R14: 0000000000000008 R15: 000055eb5587fba0 [ 667.624044][T23792] [ 667.841126][T25051] __nla_validate_parse: 3 callbacks suppressed [ 667.841144][T25051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4598'. [ 667.867623][ T61] net_ratelimit: 592 callbacks suppressed [ 667.867643][ T61] bond7: (slave bridge1): link status up again after 0 ms [ 667.949273][ T6528] bond8: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 667.959561][ T6525] bond7: (slave bridge1): link status up again after 0 ms [ 668.001873][ T6528] bond8: (slave veth11): making interface the new active one [ 668.016349][ T6528] bond8: active interface up! [ 668.023185][ T6480] bond7: (slave bridge1): link status up again after 0 ms [ 668.034595][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.043417][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.057140][ T6528] bond7: (slave bridge1): link status up again after 0 ms [ 668.074099][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 668.082938][ T3347] bond7: (slave bridge1): link status up again after 0 ms [ 668.097467][ T6477] bond7: (slave bridge1): link status up again after 0 ms [ 668.104681][ T6477] bond7: (slave bridge1): failed to get link speed/duplex [ 668.227509][ T6477] bond7: (slave bridge1): failed to get link speed/duplex [ 668.337430][ T6480] bond7: (slave bridge1): failed to get link speed/duplex [ 668.447318][ T6477] bond7: (slave bridge1): failed to get link speed/duplex [ 670.458124][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 672.917237][ T6480] net_ratelimit: 39 callbacks suppressed [ 672.917259][ T6480] bond7: (slave bridge1): failed to get link speed/duplex [ 673.037160][ T6480] bond7: (slave bridge1): failed to get link speed/duplex [ 673.147168][ T36] bond7: (slave bridge1): failed to get link speed/duplex [ 673.267497][ T6480] bond7: (slave bridge1): failed to get link speed/duplex [ 673.377202][ T6528] bond7: (slave bridge1): failed to get link speed/duplex [ 673.497615][ T6528] bond7: (slave bridge1): failed to get link speed/duplex [ 673.607198][ T6528] bond7: (slave bridge1): failed to get link speed/duplex [ 673.717306][ T6528] bond7: (slave bridge1): failed to get link speed/duplex [ 673.827290][ T6480] bond7: (slave bridge1): failed to get link speed/duplex [ 673.937270][ T6528] bond7: (slave bridge1): failed to get link speed/duplex