last executing test programs: 2.96540704s ago: executing program 0 (id=5295): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000000000000185d00000f00000000000000000000008500000028000000"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x7d, &(0x7f0000000200)=""/125, 0x41100, 0x40, '\x00', 0x0, @fallback=0x732890cc816647fd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x4, 0xb, 0x60f, 0x1ff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x1, 0x1, 0xb, 0x2}, {0x2, 0x5, 0x9, 0xc}], 0x10, 0x8}, 0x94) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071042b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000440)=""/248, 0xf8, 0x0, &(0x7f0000000540)=""/76, 0x4c}}, 0x10) (async, rerun: 32) r4 = socket(0x2a, 0x2, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000a80)={0x0, 0x6, 0x20, 0xffffffff, 0x3}, &(0x7f0000000ac0)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000b00)={r5}, &(0x7f0000000b40)=0x8) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) r7 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty, 0xb}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x68}}, 0x1) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f0000000740)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x3d, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=r8, 0x4) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r1, r2, 0xb60b2f1eb9e19b91, 0x0, @val=@target_btf_id=r3}, 0x14) (async) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r10, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e20, 0xfff, @empty, 0x5}, {0xa, 0x4e22, 0x8, @private1, 0x2}, 0x1, {[0x8, 0xa, 0x3, 0x6a3, 0x9, 0x1, 0x7, 0x6]}}, 0xfffffffffffffe36) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r11], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) (async) r12 = openat$cgroup_ro(r2, &(0x7f00000009c0)='pids.events\x00', 0x0, 0x0) getsockname$packet(r12, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a40)=0x14) 2.202065121s ago: executing program 0 (id=5305): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1018, 0x28, 0x107, 0x8000000, 0x0, {0x5, 0x7c}, [@nested={0x1004, 0x201, 0x0, 0x1, [@generic="8ad6cbe465a609df2a33bbfea4241af13c47e3be04899ca56d4d9f36606c62b5f85f84d4cdc403341ffe1c4ce8abcf8cceee225cb49715a5a8855afaa59c20b9d933aaa078425237a7c5e7f3691722ec91fe295d0593a9f12d2c897787dad1f8103d922edf02c586b451a9810c68830a20b9bfe371b327019914f35fb6c2679f5699985b5e94e3f8cf14c8372f5f695c8d9f0072f588d124fd6f6f1f1129b468d8dd1db4fc9ed13e28de8a1182564013366fd80deb404facdc792cc278bff30eb8e634a0fae7b91a39af4ebe8a2e27cfce28af4359e9664261344f3977c7473a2547f5117799e3cf5b534aa63c25f2f999e12b62461d1d3efb084f44a07771e6db1e939aaba2f6a7e3ed7314d02ae309118414df9d7bc654ce2ca5d8ac25d54ffabf7c4f10f1abed2a197989d32b7a78364c2046b3a7ccd2b5f28d71c1566c899521e80b2b273a3d4a991f58a38da7686a5390e7f8f8a9968a3485feb97b6eed955c411d485f9434fe0a721a77d7cfab13769a7c6204c7c0953df7b69661cffbe66b663085c07abe79ad38b8cc1ef0d8763aaea1c39800d8597dae7d3a6866070df93c8f957d1b3392a9a1daf9b5aa542e599f3360a27fca632193cd2583c5920a63e19dd4bd918d93e9b9a4a2610415e8d189fdcb04f10a88d707195467ac13850c1e6edf156ae687383e59dba11776de9bd1a5243d88be46861640730fded543b3383714a20fa07a65ba61a46e5df3798b2285a9839322b526202759862c15c565d1047e6b2db649739c0e61597daa73d1a0ff59cd4ef64b744399252638d0a55eba93444b5b2ebf9fbe4ea09df1744460150d75e409bb763d633e5748c4323f3638f68d02d8d4ca45332a23d46daa35781a45a6e50401819e40d387da8cc70a974a67416539e7beb189df6166ed9eea09c81ac79a662344d3a8dd54ecd8c90c20da27e416d0a89d417118955c54f806375641233f6e495f1c2128b4cbaebb92c1877e352529331b0da29f36a88de64cc9465351fbbe2ba28649706709005baf802de892affdc11f510f3779bec33ab2867f13f6b13a6756f65850838f09ef53fb50cd43f67bb09cd1989896b32215451bc02377634eeb1aa6283321977c15daad2c1d6d629dcdd204e4aa568156fa3d74a82beee5ad8fea98ac13d6a894a3f269e318993d9ca949961b80bf1720d2b1d1c000b0628956360fe35ec61184cc92d8fbc1b06c8ceca9ea5233693a51d6b65316d5715456a600701ddf4ff924676ab2c82b3752d22e1bfb2814ff0153c2132addfe0e0d38eed94c234b36ceef83c0d214f34201d8b0bc642c4c6afc55431d9c08d3208dad5adc233f2a94034ae95447559fa0b7746d53d13698ff8476c1312c3ee982fde6be7013c4390106a47452b2facb14ccba38d9da3e158e57e177965e22f0809287573ececf4a9fe0c5d133ef16149111e4cc11f7d152052ee43748f22fb070c2c0dfd1309fbd1b5c462d7827b894e108f0e1d4d34aca9426ad25e663abf8215e6d26a5d91d39120294dc075ce2884058cc34c729f287b4ed1e723ec40e085522fbe2305fd78e8f9ded6385e908d4a3bf0303bcf17187cc2305fe58b55da445448f4113c911abba954f173b885895419f0a9f199d7f7e39cda397390bb121f985481ea35e954d3b37d1f920cdbd224a693bf88d979ac4e9274334e3d6e089d84bbd4fee20a283942f2e957a569396d5f962779f0f4d62fe01ae7f626f8cfc84a5b9f60c94a5bd738b4b81587c937f4fbbe4a470faf3269fefa48e7e1accc1667aeffe0c81b893026621ed9770850607503a2598afe664a6f4d8cb098a313954005a43e93220861db3e976f9d07065d699f6dcec74d0d566a94293f7bf7b0a90a03492681e43b2d395815de6144c3da71f208d77b51197f7d63d47628670d8397abf222b1f797517bedd716e8e9151fed0d397b4c8f86d42b2b3327e460d7f37f1aa1daae424921f4938dfac84d2ca07e3116145f774672d10908d8be4b3467aef2ef538c6b15527cd7096001d234b5e962f92b4bede54645b0a83cae1ce6e84d3c0720771f661d56df3d60cde9791f66437673940530bbde605e4e9902b04ea2ca062e8bdef9d5b236919312a9bc44e56d4d4f134a9a4bec64e5fab367ba18c87aabef0944529f58f726460920d0fc33e2bac6238ce238f58aa3e8aa044a694b4aa1748d7da7a68f0de2c125e29d2f1c86dae151fcb1f0a94751ba237baf362bc5866efb0aed1db0a1e9445f18b8fd64ad90d6da633d209b50c17bb0804ccd02e765e5b46ffb077bda87037789b01ea1e47d019fc727ea4fbf625649d3f0214bfb0a5c8538614ca88df2c5a37dbee8828d37ff1f5aeb9b8cdaf1f43577cf4297409b73b6330866ac1ec97e96e6df39e4623f61e2b4d6643463faf5a0f25786d5a795ff18c4c6ef152be8f6dd2b6712d88d77c6378f9c384db6b4b8b6983ddd585a54a304bec0ea10cfd416d41256da4f4cbba00673c286affbaa325e34c9449977477338681e4dc90bf6f2d6959c50bc87f37568b582e5038c3553a411ce65a818d1acc05bb6253bded24941d36199ff62c4a26963ad97b1770409c9f5bad77abbf7a43badc3eab5615ce9836b709af4760c861e2d74ec07f989cae12b3f10ac549e58e263a35392ba3a488410f0c1d0b540e0e41aba5a44f89b1fa68b2ef014461300339838f328e72eff5d402159b0a9b9c199828ecbd0c1cd7ebd5426b8fbcbb3c9e35a7824e3a2a95338f9524134902816c4cfa285da7094f1d5947a76e5e684f1597a0642420b8ae3eec61234941f22d28eaf98e20a5853dd67b52ee63d8a58261870a180cbdba17d05e348ac0e7e7ea42a4b2191e329989262087a05cd3ea0480b1bd63f5db96bbc0482fab2b7829293612dae640e6148950fbd7dd99cc3a87a94cec2e9b440ecf34d2d2124a92e8c75a2011784859a2d7b4c02220453f591407153496fce531a16b3764a9044c80b0aeec5e9b04f9b6c00413d844915905515ca60bccdd33e4f92ebc2176303571ac1d5d49c98de36a2d44cce7a4c0c8229ce6e8bb1495827c9c10243aa4b86ff3764fce598d23a7a91527afc865d1f4718a4dc86903f6dca161c8766418b668c928e3d107b1375b51e59e385b665289a85dc86bfd71e6051840c7b85b31c5b62f824c881645601a461c4c7dee75e2f9e6ba80aefec41700d1df75b169da16375896770f40c3e6bcddfd6f4d525dffca9e234e732b1cdb0bc983f7931426e680c9082fcd1700aa358af0cbe5c19d05a4d71bb58280cc38ff76815c076d056570499dffa20f710907909a39b7afa898f0dc1912472eb285469a0f18da2ec71511f95a7b433d9e96b6885685b8ccad4179c4b43730d03a2bc469e32a5dd8e40c11915cddb5d45c05a1881f3b4ba27cf8be503eb1d9bf9d877b07ff4b7be6879bec12483321c1372b05c3183c6bd1b24f77ea36302c0c05e43875424bdeb977ac32bdd26d24162a838f7850747c686fde004d584f1d0641dcdb00d926ae447971a798b69e7310a2c170b712a87aa85d7626e632bccf1748d3d3093cf14f928a807e960052a99abbd033d8bcb4b71df997d273f6cb1f928ffd1052118c057165a6014b0b6f489c88c4e45ae7dc3e3a82854fcfdf9fd0323c2162e4c8dd2c090bdef8d10006af11a171be3c4cfcaef5d0dd0bf3ab250abb1c2fc41f60f86d41709080db1fbec5614de41ecfc030a07a8a9aff157a0c38a733792c72489eb563f7256ba3fac612161020404db9df023b71b046983aa8cae370a11371bdf10d5ded0ee085aa5ec25108f62952bcc06e9b2bc6f5001a5e67b7bd1c5ca72f50a015d6ffd02898228fc711fe9af9795624224ad1b283197979f1f45e6889a70c96f398a550ac6bb599e69424460844a60e52054193437e9f5a87a6253e0dc736e31e60cc699d3601155d3bef7de831ebb9b4637ef209e4c8bcad91987195a13319cfd36161fb56c7d3d0caeb4ff6f04ae86bc4ef4f5e13766dba828edc2422a03770ff38b4d11b67b6159356677f3046cba2ec04c4b252ae047429a2429db2fd66890c0836a16bba65cea1d90dc18fae4bca403a2fa32992e9e23c59aea1c65344c6610b6308454723385169041d3d2e5f52699cfd87597d47de4f0f96c1aac14d07a1e2fae498ddb83bec7831aeaa74a1b6f6ddebfa98f28c75d74e90396a96ee35b13dc04f7b5d9c064e74a5b22de81c4e574fc38460c8f3c9f3d5687e24d72e082f5b620e60cf4ed6f695e687c4f2af12eb57f58e5e4475366d0f2c4554bf8c95edf154dc77a06091b3ace856493308956ed8b69fce620e1a417465bf3410a53161963bc47608dee7312110c1091d9c89aed4afb94a73ce14ada5eb291d9e8f61dc6b8705fd87860f7cf345efcd9c4894e6261fe78eeb7efee86660a3707fd856226a9bc405fb49c0445d7aff52691a6020de7b2c6c8a4df5ccb22b1e4e9420b07142853a13712e72a621b4967e058ec64cb0da42a8157a5f59b44dcdfb6a386b30616efd8d098ee9500d4ce2be58b61ee5acd6a509a399d56bb09792a617b6114676b80ab85d53da5af61d51690b1178cfb1533b5bb405cf807be7ee51e24c1474c2f2bd4a72df04ea3323215d2612a0b976f49db72bb2bf770907a479d2509d20ccdca0ec21967d2c9761e905c25bb75ce2f26e3adf571eae105418a6ea49de943e014fc25d2a1f19db6edf155833ef021319553ef0fad34599abb8cea010352efe811a6fe35a6238f4ae30cf2bf194a370af06a4570f2d34ba000c26b0bba9614fc455e8a348baee664f928f2a343cd414737f8dc2a8da58b6f21b336c39eec181d9d2f43f5b17e01ba81b6937ffe49fc0a099b0802cb1008245d636b6758dff0082f6a95e2b0db6c1337e13c60c2470f514c0ac917db78b93abfee025e2c3261b4d41606f713bae78722740f1e2f64b7519e29da13f8f330997e4a5add2728332b998837fec57398599251db135b5b0714a4c3a92512e1481f5cde3aa2eb483b35a8c7b6f679f37a8b8b1181b89467a0cc6759279976dcbbdd0cc80f4f70df51d326dccd6e5a69254c38100c338a02e58c36118b5271df5815992b64461624b64227a248cc6f0692c2170ab7eb2fb8c238ce05ee519c872653a02ef5bc0de85f74c27a605e8c3d91d1049402e46298218ef92b8f6be892e532584a2345b96d210d9ea886ca9d9fc6978fc39d0f5e7c3713b2346c35308bccc44c5baf899db5027c69d20378fa8a5457113737e4a5cb41fe810e1285d14741664a4feec1d2e8e0bb919bcf551c1140693fd68fb8502a1a248bacbad643eedd997c1bb60a25439d1af2d53cc14e5b0e79f16e933741e235e7561aefddf460b8752948f551c65171e6fd755c97ba13c6064b32699c91360595964301445d250cf3a5ec9ce2ccfbd33167ed2e654f263e90f39d7916cc6bf48588d22d1a66621794215644cd7ac6321160ed3f7b9125118a3b7b9c9e51ad93f02d9a5d74b3dfa70d09a43fb1bd3c869c37901f462465fd34f3fc54b131cc177658706fe2397d32d35b734890ddb688368b1f0e216d8659d333bdcd5235da9ec6517da823fef73a721469c490523e5448bab07a0258cfc6afc13f1ab8c3c4b002d6bf53064c462a55297c42e28acac7874d1b42ae24b7ac3a8f4ce3328f143028b46db65d0aa780722c669a1ea47847b743dfa27c5455996f500f8ba454215da6b60ad807e1468f6bed5cc5fc1741fa5551ec0d90b95083e05665a9b798c5a2cdf1b69d2810735e75f45d9"]}]}, 0x1018}}, 0x40080c0) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1018, 0x28, 0x107, 0x8000000, 0x0, {0x5, 0x7c}, [@nested={0x1004, 0x201, 0x0, 0x1, [@generic="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"]}]}, 0x1018}}, 0x40080c0) (async) 2.1540745s ago: executing program 2 (id=5308): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f500140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='m\x00\x00\x00'], 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000014002101000000000000000023000000", @ANYRES32=0x0, @ANYBLOB="040002"], 0x2c}}, 0x0) 1.997566088s ago: executing program 0 (id=5310): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x88) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="4bafcd7ebae5f0def07fcee3888dd79853b9ece6de358600db1551c185e070e028fa0818037da842b28d42ca81e281e87483f9ba845046d5af66abc540e0cd73a0036bf756d117a318fb", 0x4a}], 0x1}], 0x1, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x9a) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000008a0000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe"], 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, r7, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) readv(r5, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/109, 0x6d}], 0x1) close(r6) sendmsg$inet(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4000044) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000015c0)=@security={'security\x00', 0x44, 0x4, 0x4d0, 0xffffffff, 0x0, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x400, 0x400, 0x400, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x200, 0x228, 0x8502, {}, [@common=@inet=@hashlimit3={{0x158}, {'ip6tnl0\x00', {0x7, 0x9, 0x42, 0x5, 0x7, 0xfd6, 0x5, 0x5, 0x18, 0x68}}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x6, 0x3}, {0x0, 0x4, 0x1}}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xffffffff, 0xff000000, 0xff000000], 0x0, 0x4e21, 0x0, 0x4e23, 0x0, 0x8000, 0x4000000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x530) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000017c0)=""/130, 0x94}, {0x0}], 0x2}, 0xa1}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000005800)=[{{&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/118, 0x76}, {&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000240)=""/221, 0xdd}, {&(0x7f0000000340)=""/235, 0xeb}, {&(0x7f0000000440)=""/133, 0x85}, {&(0x7f0000000500)=""/63, 0x3f}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x7, &(0x7f0000001b00)=""/254, 0xfe}}, {{&(0x7f0000001c00)=@ax25={{}, [@rose, @rose, @default, @bcast, @default, @bcast, @rose, @rose]}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001c80)=""/86, 0x56}, {&(0x7f0000001d00)=""/65, 0x41}], 0x2, &(0x7f0000001dc0)=""/198, 0xc6}, 0x9}, {{&(0x7f0000001ec0)=@caif, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001f40)=""/191, 0xbf}, {&(0x7f0000002000)=""/28, 0x1c}, {&(0x7f0000002040)=""/71, 0x47}], 0x3, &(0x7f0000002100)=""/135, 0x87}, 0x4a}, {{&(0x7f00000021c0)=@alg, 0x80, &(0x7f0000003540)=[{&(0x7f0000002240)=""/101, 0x65}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/124, 0x7c}, {&(0x7f0000003340)=""/194, 0xc2}, {&(0x7f0000003440)=""/173, 0xad}, {&(0x7f0000003500)=""/6, 0x6}], 0x6, &(0x7f00000035c0)=""/79, 0x4f}, 0x4}, {{&(0x7f0000003640)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f00000047c0)=[{&(0x7f00000036c0)=""/21, 0x15}, {&(0x7f0000003700)=""/185, 0xb9}, {&(0x7f00000037c0)=""/4096, 0x1000}], 0x3, &(0x7f0000004800)=""/164, 0xa4}, 0x6}, {{&(0x7f00000048c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000049c0)=[{&(0x7f0000004940)=""/75, 0x4b}], 0x1, &(0x7f0000004a00)=""/168, 0xa8}, 0x2}, {{0x0, 0x0, &(0x7f0000005080)=[{&(0x7f0000004ac0)=""/66, 0x42}, {&(0x7f0000004b40)=""/26, 0x1a}, {&(0x7f0000004b80)=""/244, 0xf4}, {&(0x7f0000004c80)=""/24, 0x18}, {&(0x7f0000004cc0)=""/92, 0x5c}, {&(0x7f0000004d40)=""/132, 0x84}, {&(0x7f0000004e00)=""/154, 0x9a}, {&(0x7f0000004ec0)=""/111, 0x6f}, {&(0x7f0000004f40)=""/25, 0x19}, {&(0x7f0000004f80)=""/195, 0xc3}], 0xa}, 0x8000}, {{0x0, 0x0, &(0x7f0000005240)=[{&(0x7f0000005140)=""/64, 0x40}, {&(0x7f0000005180)=""/141, 0x8d}], 0x2, &(0x7f0000005280)=""/188, 0xbc}}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000005340)=""/43, 0x2b}, {&(0x7f0000005380)=""/26, 0x1a}], 0x2, &(0x7f0000005400)=""/79, 0x4f}, 0xffffffff}, {{&(0x7f0000005480)=@can, 0x80, &(0x7f0000005600)=[{&(0x7f0000005500)=""/6, 0x6}, {&(0x7f0000005540)=""/129, 0x81}], 0x2}, 0x3}], 0xa, 0x40, &(0x7f0000005640)={0x0, 0x989680}) 1.980148098s ago: executing program 2 (id=5311): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback, 0x1}, 0x34) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x1d) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01000000000000000000340000000800730000000800"], 0x1c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r3, 0xfffffffc}, &(0x7f0000000180)=0x8) close(0x4) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000040)=0x80) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0x84, &(0x7f0000000380)={r3, @in6={{0xa, 0x4e20, 0x206ea, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, &(0x7f0000000200)=0x98) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) 1.656592557s ago: executing program 4 (id=5313): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x701, 0x1}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r2) r5 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r5, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000009c0)={'wpan0\x00', 0x0}) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000200000018260000", @ANYRES32=0x1, @ANYBLOB="0000000000183400000500000000000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x2d, &(0x7f0000000100)=""/45, 0x40f00, 0x8, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb, 0x2}, 0x10, 0x25c95, 0xffffffffffffffff, 0x6, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x2, 0x4, 0xe, 0x2}, {0x4, 0x3, 0xb, 0x7}, {0x2, 0x3, 0x2, 0xc}, {0x5, 0x1, 0x9, 0x4}, {0x4, 0x4, 0x4, 0x3}, {0x1, 0x5, 0x9, 0x8}], 0x10, 0x8}, 0x94) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r4, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r8 = socket(0x10, 0x2, 0x0) sendto$inet6(r8, &(0x7f00000004c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d07000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0xc090, 0x0, 0x0) close(r7) syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r2) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x40000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e0093132cbd7000fddbdf2507000000", @ANYRES32=0x0, @ANYBLOB="1ebc15146fbc28dd"], 0x20}}, 0x0) 1.453962021s ago: executing program 4 (id=5315): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x10000, 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000e08000340000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x6, &(0x7f0000000740)=ANY=[@ANYRES64=r1], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffc2}, 0x94) 1.446383726s ago: executing program 1 (id=5317): r0 = socket(0x1f, 0x3, 0xe981) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'pim6reg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x70, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0xfff3, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7b49, 0x20000000, 0x1, 0x2, 0xcd69, {0x92, 0x2, 0x2, 0x0, 0x7, 0x8}, {0x7, 0x1, 0xffff, 0x1, 0x1000, 0x10}, 0x7, 0x0, 0x101}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x8c4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x10, 0x700, 0x4, 0x3, {{0x23, 0x4, 0x2, 0x23, 0x8c, 0x68, 0x0, 0xb2, 0x4, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2e}, {[@lsrr={0x83, 0x27, 0x4d, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x34}, @loopback, @local, @multicast1, @empty, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @noop, @ssrr={0x89, 0x17, 0xaf, [@multicast2, @private=0xa010100, @local, @multicast2, @private=0xa010101]}, @generic={0x83, 0x5, "6453df"}, @lsrr={0x83, 0x13, 0x75, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010101]}, @noop, @cipso={0x86, 0x11, 0x0, [{0x6, 0xb, "666fa759eb10778965"}]}, @generic={0x83, 0xa, "d11a490fb62c991d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) r15 = socket(0x10, 0x3, 0x0) r16 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r17, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x47, 0x7, 0x47, @mcast1, @rand_addr=' \x01\x00', 0x8, 0x1, 0x3, 0x6}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x47, 0x7, 0x47, @mcast1, @rand_addr=' \x01\x00', 0x8, 0x1, 0x3, 0x6}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f00000009c0)={0x6fc, r1, 0xa08, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc47}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0xc0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7, 0x5}, {0xd, 0x7, 0x2, 0x7}, {0x3, 0x4, 0x4, 0x5}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xedf}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x261}}}]}}, {{0x8, 0x1, r8}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x1f4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x212e, 0x1, 0x9, 0x1000}, {0x100, 0x4, 0x2, 0xb7}, {0x0, 0x60, 0x3, 0x8}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}]}}, {{0x8, 0x1, r18}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}]}, 0x6fc}, 0x1, 0x0, 0x0, 0x8881}, 0x40010) socket$tipc(0x1e, 0x5, 0x0) (async) r19 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r19, &(0x7f0000000980)={&(0x7f0000000580)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc001}, 0x800) 1.398225757s ago: executing program 4 (id=5318): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x43000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000001000000014000000"], 0x0, 0x36, 0x0, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'nr0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000006800010025bd7000feffffff0a000000000000001800088014000100a432634e00000000870004001048a2f508000500", @ANYRES32=r0, @ANYBLOB="0100000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0) 1.28205779s ago: executing program 1 (id=5319): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000500)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}]}, 0x38}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) 1.279017816s ago: executing program 2 (id=5320): r0 = socket(0x200000000000011, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x11c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x81, 0x6, 0x6, 0x1, 0x80000001, 0xe, 0x8}}, {0x14, 0x2, [0x0, 0x1000, 0x4, 0x4, 0xab, 0x1, 0x2, 0x22]}}, {{0x1c, 0x1, {0xd5, 0x2, 0xa2f, 0x55, 0x0, 0x344, 0xffff, 0x8}}, {0x14, 0x2, [0xc, 0x5, 0xffff, 0x4, 0x9, 0x7, 0x8, 0x100]}}, {{0x1c, 0x1, {0x1, 0x3, 0x4, 0x401, 0x2, 0x7fffffff, 0x8, 0x2}}, {0x8, 0x2, [0x40, 0x2]}}, {{0x1c, 0x1, {0xfe, 0x3, 0xec, 0x1, 0x2, 0x3, 0x8, 0x4}}, {0xc, 0x2, [0x6af4, 0x81, 0x5, 0x2]}}, {{0x1c, 0x1, {0x8, 0x4, 0x1, 0xfffffffb, 0x2, 0x73f, 0x9, 0x1}}, {0x6, 0x2, [0xfffa]}}, {{0x1c, 0x1, {0x1, 0xf8, 0xffa5, 0x7fff, 0x0, 0xfffffff9, 0x8, 0x2}}, {0x8, 0x2, [0x287a, 0x0]}}]}]}, 0x11c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x11c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x81, 0x6, 0x6, 0x1, 0x80000001, 0xe, 0x8}}, {0x14, 0x2, [0x0, 0x1000, 0x4, 0x4, 0xab, 0x1, 0x2, 0x22]}}, {{0x1c, 0x1, {0xd5, 0x2, 0xa2f, 0x55, 0x0, 0x344, 0xffff, 0x8}}, {0x14, 0x2, [0xc, 0x5, 0xffff, 0x4, 0x9, 0x7, 0x8, 0x100]}}, {{0x1c, 0x1, {0x1, 0x3, 0x4, 0x401, 0x2, 0x7fffffff, 0x8, 0x2}}, {0x8, 0x2, [0x40, 0x2]}}, {{0x1c, 0x1, {0xfe, 0x3, 0xec, 0x1, 0x2, 0x3, 0x8, 0x4}}, {0xc, 0x2, [0x6af4, 0x81, 0x5, 0x2]}}, {{0x1c, 0x1, {0x8, 0x4, 0x1, 0xfffffffb, 0x2, 0x73f, 0x9, 0x1}}, {0x6, 0x2, [0xfffa]}}, {{0x1c, 0x1, {0x1, 0xf8, 0xffa5, 0x7fff, 0x0, 0xfffffff9, 0x8, 0x2}}, {0x8, 0x2, [0x287a, 0x0]}}]}]}, 0x11c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xd, 0xf}, {}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x9f}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0xa}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xd, 0xf}, {}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x9f}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0xa}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) (async) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x40, r6, 0x1, 0xfffffffe, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x100}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x2040}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fddbdf25010000000c0005002f010000040000000c0002000000000000000000100007800c00018008000100"], 0x3c}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fddbdf25010000000c0005002f010000040000000c0002000000000000000000100007800c00018008000100"], 0x3c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socket(0x400000000010, 0x3, 0x0) (async) r13 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00'}) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000980)=@gettaction={0x160, 0x32, 0xe5853de96dcd632b, 0x70bd26, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x10}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc69b}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x160}}, 0xc0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8, 0x6, r16}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0x104, r10, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '-\xb9@$\']'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000}, @NBD_ATTR_SOCKETS={0x7c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r17}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffa}]}, 0x104}, 0x1, 0x0, 0x0, 0xc084}, 0x20008080) 1.171201242s ago: executing program 1 (id=5321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x1, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x81}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc99}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x211}]}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xc}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xd}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1000}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x140}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000140)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r3, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x44a27643, 0xce, 0x401}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x400) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000340)={0xfffffffffffffff8, 0x30, '\x00', 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xf8, r2, 0x180, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x5}, 0x8010) ioctl$int_out(r1, 0x2, &(0x7f0000000540)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x188, r2, 0x20, 0x70bd26, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x7d}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x188}, 0x1, 0x0, 0x0, 0x20}, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r5, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}}, 0x5) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), r4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000b80)={'erspan0\x00', &(0x7f0000000a40)={'sit0\x00', 0x0, 0x700, 0x7800, 0x7, 0x800, {{0x3a, 0x4, 0x3, 0x4, 0xe8, 0x64, 0x0, 0x3f, 0x29, 0x0, @broadcast, @rand_addr=0x64010100, {[@rr={0x7, 0x13, 0x9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x1e, 0x1, [{0x6, 0xd, "1e81fa35e6c373b60d980f"}, {0x5, 0xb, "0f5c2dda16e898598f"}]}, @timestamp_addr={0x44, 0x4c, 0x11, 0x1, 0x1, [{@remote, 0xfffffff9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@remote}, {@remote, 0x9}, {@private=0xa010102, 0xff}, {@local, 0x3}, {@multicast2, 0x8}, {@private=0xa010100}, {@empty, 0x839c}]}, @lsrr={0x83, 0xf, 0xf8, [@empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0xc, "07f5e2a70a2b642db1ae"}, @cipso={0x86, 0x36, 0xffffffffffffffff, [{0x1, 0xe, "fc3aca5a9f557eebec567cc9"}, {0x0, 0x8, "50f7a6a8cb34"}, {0xf, 0x12, "6ef94423f82b8de74b4f48b0ab102dfc"}, {0x0, 0x8, "3280dbff1794"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000d00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0xc0, r7, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x44040}, 0x40804) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d80)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000e80)=0xe8) sendmsg$nl_xfrm(r10, &(0x7f0000001040)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000ec0)=@expire={0x114, 0x18, 0x8, 0x70bd2a, 0x25dfdbfc, {{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0x80, 0x4e24, 0x7, 0xa, 0x0, 0xa0, 0x6, r9, r11}, {@in=@multicast1, 0x4d3, 0x32}, @in6=@local, {0x4, 0x0, 0x2, 0x3, 0x4, 0x3, 0x3ff, 0x80000000}, {0x0, 0x80000001, 0x8, 0xfffffffffffffffb}, {0x101, 0x4, 0x7fc}, 0x70bd26, 0x3502, 0xa, 0x3, 0xa, 0x2}, 0x8}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @srcaddr={0x14, 0xd, @in=@rand_addr=0x64010101}]}, 0x114}, 0x1, 0x0, 0x0, 0x4080}, 0x40001) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000001080), 0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r12, 0x84, 0x12, &(0x7f00000010c0)=0x10, 0x4) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000001300)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001140)={0x174, r5, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x49, 0xac, "7d60d77a2ba6f159ea41b0cc5e145530da7c11d47d463034eaf6f6e1737d3c06b8bca7f7e337ec16a8592c6df99f9d4c36db325b2467b52805116580a6794388561a78c8d9"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xfe2}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x2dd}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xda, 0xbe, "d584f8e3a0b3d3d96c5b1a25ed57ffdc9e00d344c4a1f3d460a4d7b158ded10a96d07de0029178e4d1813a4e507af811da8bdc8629dceafef620385246a518007b4ae904dad8b4eb7a42b703ab30c4e486789b0d901f0879d10f9a3f06b85e246bbe0b8a1356a4c6887ff329e09cdf965a5068efed3e76c9e8fd4faf975f4653a941e08f0bc8d5087a86797ec334cfa9e709fd5d23f6a2a7ebee0a5f093e39a9691d2b489cc5272c4b3e3c3dea399cd5b183ccbca7646db5e0dc99f28907125d8aefb917ce3b9102d8b1e5c6c3be74b455defd8ae393"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r13 = socket(0x5, 0x0, 0x0) sendto$inet6(r13, &(0x7f0000001340)="825ff053950c2f5c5353ef6a098cab88e53b536ff1924c1d20f3444b40ac55859314f2bc9a8a7be971ec2654fe45627e11205b57c278d7a9a9177766954ca5d0acd37bfee5ebc17c8dc21ffdbf272eca2fe700d2072f349ab16bafcd2d0241deded51c609dee5972ec7b7f11e29c1000fabf9b01b8c51dde6a2d3354a37f1ccbc02854a72b11f8ed36d652f46c01e958968911e9828af134282d0ff4f43e6f", 0x9f, 0x4, &(0x7f0000001400)={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000001440), 0x2100, 0x0) listen(0xffffffffffffffff, 0x3) 1.126806573s ago: executing program 4 (id=5322): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_getanyicast={0x14, 0x3e, 0x800, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x14000084}, 0x20004080) 1.034009953s ago: executing program 3 (id=5323): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080", @ANYRES32=0x0], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080", @ANYRES32=0x0], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private2, 0x0, 0x0, 0x0, 0x1, 0xa, 0x40, 0x20, 0x0, 0x0, 0xee01}, {}, {0x4, 0x200, 0x0, 0x1}}}, 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x8, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 995.231489ms ago: executing program 4 (id=5324): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000004c0)="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", 0x132}], 0x1) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090010000000e925000000000000030006000000000002000000000000000000000000000000020001000000000000fd000300000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x5452, &(0x7f0000000080)) sendmsg$kcm(r7, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x200000c1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRES8=r3], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffcba, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = socket$inet6(0xa, 0x6, 0x1000) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x2}, 0x8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e26, 0xfffffffc, @empty, 0xffffffff}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="50ba0100", 0x4}], 0x1}}], 0x1, 0x24000000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000200025a72bbd7000fddbdf250a0000cdef00000100008000050013000800000014000200ff020000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 948.603651ms ago: executing program 2 (id=5325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, r1, 0x4d19a7fc91fb5a1b, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f2033cf5e4a56363"}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)={0x38, r4, 0x1, 0x70bd28, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040004}, 0x8000) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38}}) 882.051633ms ago: executing program 0 (id=5326): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000600)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000003c0)=r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0xc00) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c *:', @ANYRESOCT=r3], 0xa) r4 = accept4(r0, 0x0, 0x0, 0x800) write$bt_hci(r4, 0x0, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) accept$inet(r4, &(0x7f0000000080)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000240)={0xb0, r6, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x94, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 881.271238ms ago: executing program 3 (id=5327): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) (async) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x18) (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x2, 0x7fff, 0x80, 0x100, r5, 0x0, '\x00', r2, r6, 0x2, 0x0, 0x5}, 0x50) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a010100000000000000000100fffd0900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000c0800054000000000080004400000002205000200070000002c0001800c00010062697477697365001c0002800800034000000004080001400000001408"], 0x100}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) (async) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r10, 0x4010744d, &(0x7f0000000180)) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async, rerun: 64) socket$inet6(0xa, 0x3, 0x7) (rerun: 64) 873.575907ms ago: executing program 1 (id=5328): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x5, 0x0, 0x1, 0x81, r2}, &(0x7f0000000240)=0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000300), &(0x7f00000002c0)=0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x10000}, 0x28) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000002cc0), r3) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r5}, &(0x7f0000000140), &(0x7f0000000100)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000200)=""/157, 0x9d}], 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000100)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000800) 764.039219ms ago: executing program 3 (id=5329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r1, 0x11a, 0x3, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x5}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000073797a30000000000900030073797a30000000004c000000060a010400000000000000000100000008000b400000000024000480200001800e000100627974656f726465720000000c00028008000140000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xc0}}, 0x0) 705.819069ms ago: executing program 2 (id=5330): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x228, 0xc0, 0x190, 0x228, 0x2c0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@ip={@private=0xa010101, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffff, [0x11, 0x7]}, {0x0, [0x2, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8000, 0x400, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}, @IFLA_BOND_MIN_LINKS={0x8}]}}}]}, 0x44}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8af4a65d633706ee}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0xe}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x7d}, @L2TP_ATTR_VLAN_ID={0x6}]}, 0x38}}, 0x4000) 473.983639ms ago: executing program 3 (id=5331): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x51006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfffffffe}]}, 0x3c}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @rand_addr=0x64010101}, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000000614010027bd7000fbdbdf25080001000100000008000100020000000800010002000000080008"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 472.154982ms ago: executing program 0 (id=5332): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000080)) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000100)={0x0, 0x0, "441a16f4ad02511fd7257433b0286f8f"}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) bind$nfc_llcp(r1, &(0x7f0000000180)={0x27, r2, 0x0, 0x5, 0x8, 0x1, "78cc30fbbd66b957c3b22d1da7e115287f87724debbef5512a9ddb5f03b9fb8c2d32b4391c38d7b1687ac3bbecbdd0344717f7f0d28ec33a3e4665cbbfa537", 0x30}, 0x60) (async) r3 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x10, 0x80800) accept$phonet_pipe(r3, &(0x7f0000000280), &(0x7f00000002c0)=0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) (async) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000380)="dc543a8f2e08bab0b35bbfbdc829784850d3f800719fb0bb3079cdff085d8e295dc923a93ea6ea9045549b77e62613538f623a50cf0e6ff60268e6e0750b0ddbe484df851671176b8cb81279ab9f39dc5ea47fe885cd642e51038e16e07d419742ae74863dab41f1651766174731d46d385a20a25fc2ce4d419b367506d9570deeed484986cbeee6dfe3194325f5a28abeb9885ddb98396865fe5f68c6620aca1a64a4047ce36b2e14a2c7b54fa1108b467f355e60d05afde3c100f9aa67f67522679053deacfff7448a77460f7bf31def54f8ad39e6bf0f", 0xd8}, {&(0x7f0000000480)="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", 0xff}], 0x2) (async) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f00000005c0)=0x4946, 0x4) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x7, 0x8, 0xe004, 0x9, {{0xd, 0x4, 0x0, 0x4, 0x34, 0x67, 0x0, 0xc9, 0x29, 0x0, @broadcast, @broadcast, {[@end, @lsrr={0x83, 0x1f, 0x84, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast, @private=0xa010101, @private=0xa010102, @private=0xa010101]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000800)={'gretap0\x00', &(0x7f00000006c0)={'erspan0\x00', r6, 0x8, 0x40, 0x1b, 0x5, {{0x42, 0x4, 0x1, 0x4, 0x108, 0x66, 0x0, 0x8, 0x4, 0x0, @loopback, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4c, 0xf9, 0x1, 0x1, [{@rand_addr=0x64010101, 0x1}, {@private=0xa010100, 0x7}, {@local, 0x5}, {@broadcast, 0x7}, {@multicast2, 0x3}, {@remote, 0x41}, {@loopback, 0x400}, {@rand_addr=0x64010101, 0x7f}, {@rand_addr=0x64010101, 0x7}]}, @ssrr={0x89, 0x13, 0x6f, [@broadcast, @local, @rand_addr=0x64010101, @multicast2]}, @lsrr={0x83, 0x27, 0xb0, [@remote, @private=0xa010101, @private=0xa010101, @rand_addr=0x64010101, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x1a}, @remote, @private=0xa010101]}, @lsrr={0x83, 0x2b, 0xff, [@broadcast, @loopback, @private=0xa010102, @loopback, @loopback, @multicast1, @loopback, @rand_addr=0x64010100, @loopback, @multicast1]}, @timestamp_prespec={0x44, 0x3c, 0x76, 0x3, 0x4, [{@remote, 0x8}, {@local, 0x5914}, {@multicast2, 0x8}, {@broadcast, 0x101}, {@empty, 0x5}, {@private=0xa010102, 0x5a40}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}]}}}}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r8, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, 0x0, 0x504, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7f}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1c}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x26}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r9, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, r10, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x44) socket$inet6(0xa, 0x3, 0x4) (async) r11 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r11, 0x400442c9, &(0x7f0000000b00)={0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}) r12 = socket$packet(0x11, 0x2, 0x300) recvmsg(r12, &(0x7f0000000e40)={&(0x7f0000000b40)=@pppoe, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000bc0)=""/170, 0xaa}, {&(0x7f0000000c80)=""/102, 0x66}, {&(0x7f0000000d00)=""/94, 0x5e}], 0x3, &(0x7f0000000dc0)=""/95, 0x5f}, 0x40012020) r13 = socket$igmp6(0xa, 0x3, 0x2) ioctl$FS_IOC_SETFSLABEL(r13, 0x41009432, &(0x7f0000000e80)="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") r14 = syz_genetlink_get_family_id$team(&(0x7f0000000fc0), r8) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000001740)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001700)={&(0x7f00000012c0)={0x428, r14, 0x4, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x188, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7, 0xfb, 0x2}, {0x1, 0x9, 0x3, 0x3}, {0x6, 0x1, 0x3}, {0x0, 0xb, 0x0, 0x7}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x9, 0x3, 0x5}, {0x4, 0x1, 0x1, 0x10000}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x4, 0x0, 0x8b}, {0x9, 0x2, 0x6, 0x4}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x428}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 459.371182ms ago: executing program 1 (id=5333): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x100, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x99a}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x884) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = socket(0xa, 0x1, 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000100)={'veth1_vlan\x00', 0xe0}) (async) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000100)={'veth1_vlan\x00', 0xe0}) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800f000100626f6e645f736c617665000001840580060005001000000008000500", @ANYRES32=r4, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 313.518891ms ago: executing program 3 (id=5334): syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @val={@void, {0x8100, 0x4, 0x1, 0x1}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000ca9a4c510d6537f10727f3ef7b538fad0b465d96f23a5af2f72974f2b9075855f85a357c1133da64b20175fc75b87fd9204dae476131eeb1903686dd1d35dd3d0e621345259305cfbe"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x215, 0x30000}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}, 0x1, 0xba01, 0x0, 0x400c014}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0xd4}}, 0x4000010) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x74, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:getty_etc_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dbusd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x74}, 0x2, 0x34005}, 0x40001) 221.849284ms ago: executing program 2 (id=5335): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x4}}, 0x10) sendmsg$tipc(r2, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) (async, rerun: 64) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 64) sendmsg$inet_sctp(r3, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='+', 0xffe0}], 0x1, &(0x7f0000000180)=[@init={0x18, 0x84, 0x0, {0x7, 0x3, 0x6, 0x400}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0xb, 0xffff7ffe, 0xff}}], 0x38, 0x4014}, 0x2c0408d0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_QUANTUM={0x8, 0x2, 0x700}]}}]}, 0x48}}, 0x0) 220.385928ms ago: executing program 0 (id=5336): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x48, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x48, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x64}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x83}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x448d4}, 0x0) 105.318541ms ago: executing program 3 (id=5337): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000b80)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x12be01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r3, &(0x7f0000000840)={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x94) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0xfa3b6b2883b6fee3) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001d0001373af255d8fcc80000000000487007fdee839c3359c6906cb0fefc4b8ffd66a1fc51e043f9aee76d7c79e081a085eba953e46885a75c2a0b0f9def1e572c1baf0dec15d4cc5ec58c41e5c94e6fdffe7559c23ed8e419ca10da1097c2669cefa9142f11eed6436e5bab115f15981bbc"], 0x14}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000009500ede0000000000000000000000000f000000000000000a565e085b26ad6511204d45c1cc27c68bfe3b65c99fbf4cfd8ce5c86001780089e3dfb735f1aaf9b3fe8be2ec29e4eb22d18539c108de228cb33e29602ded48fd915d180ed3a5a18a436bdeff0324f45f3e128a2fa66eb24a4ba4c8a0520df13ee8d6f9dc795b2d402e488e40e6a6817680934f2f5697c28523e3b37f3be26bf8a945c756a6a8d00aaecaed89b490a1e06f10df0e46d70c21d198db038faaf0eb874e4830f31504ef6673aa39606632d71e76960"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r6, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, 0x0}}], 0x1, 0x2c000011) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000001000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r4}, 0x8) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), r4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000a00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040040) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls}, 0x94) 26.095678ms ago: executing program 1 (id=5338): syz_emit_ethernet(0x8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c2"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xc99, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r2 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f00000002c0)={0x0, 0x200, 0x0, 0x0, 0x7, 0x0, [{0xe3f, 0x6b1f3c96, 0x43a, '\x00', 0x3d04}, {0x1, 0x5, 0x4, '\x00', 0xa}, {0x1, 0x8000000000000001, 0xa9, '\x00', 0x3b04}, {0x4, 0x8, 0x4, '\x00', 0x3085}, {0x5, 0xd351, 0x6, '\x00', 0x2008}, {0x9, 0x0, 0x7fff}, {0x6, 0xce, 0x1, '\x00', 0x289}]}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x2c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x46}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r1}, 0x14) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r8, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000009440)={0x0, 0x0, &(0x7f0000009400)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14}}, 0x80}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="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"], 0x27e0}, 0x1, 0x0, 0x0, 0x801}, 0x1) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES8=r4, @ANYRES32=r5, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) 0s ago: executing program 4 (id=5339): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="20a0", 0x2}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f088a8acc05024", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) kernel console output (not intermixed with test programs): ode=101 'no such error' [ 464.091904][T18805] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 464.099217][T18805] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 464.106538][T18805] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 464.113882][T18805] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 464.141952][T18811] __nla_validate_parse: 13 callbacks suppressed [ 464.141974][T18811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3502'. [ 464.163010][T18811] tipc: Enabling of bearer rejected, failed to enable media [ 464.410674][T18816] syzkaller0: entered promiscuous mode [ 464.416576][T18816] syzkaller0: entered allmulticast mode [ 466.227090][T18825] netlink: 'syz.0.3507': attribute type 1 has an invalid length. [ 466.235071][T18825] netlink: 784 bytes leftover after parsing attributes in process `syz.0.3507'. [ 466.305793][T18825] netlink: 'syz.0.3507': attribute type 1 has an invalid length. [ 466.327171][T18825] netlink: 784 bytes leftover after parsing attributes in process `syz.0.3507'. [ 466.347448][T18825] netlink: 'syz.0.3507': attribute type 1 has an invalid length. [ 466.365520][T18825] netlink: 784 bytes leftover after parsing attributes in process `syz.0.3507'. [ 466.407255][T18825] netlink: 'syz.0.3507': attribute type 1 has an invalid length. [ 466.428465][T18825] netlink: 784 bytes leftover after parsing attributes in process `syz.0.3507'. [ 466.457860][T18825] netlink: 'syz.0.3507': attribute type 1 has an invalid length. [ 466.465875][T18825] netlink: 784 bytes leftover after parsing attributes in process `syz.0.3507'. [ 466.480791][T18825] netlink: 'syz.0.3507': attribute type 1 has an invalid length. [ 466.489098][T18825] netlink: 784 bytes leftover after parsing attributes in process `syz.0.3507'. [ 466.515739][T18829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3509'. [ 466.543447][T18825] netlink: 'syz.0.3507': attribute type 1 has an invalid length. [ 466.557718][T18825] netlink: 784 bytes leftover after parsing attributes in process `syz.0.3507'. [ 466.582817][T18825] netlink: 'syz.0.3507': attribute type 1 has an invalid length. [ 466.598496][T18825] netlink: 784 bytes leftover after parsing attributes in process `syz.0.3507'. [ 466.626081][T18825] netlink: 'syz.0.3507': attribute type 1 has an invalid length. [ 466.645592][T18825] netlink: 'syz.0.3507': attribute type 1 has an invalid length. [ 467.378762][T18861] bond1: (slave geneve2): making interface the new active one [ 467.393816][T18861] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 467.410858][T10625] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 467.437682][T10625] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 467.482739][T10625] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 467.535108][T10625] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 467.594353][T18869] team0: Device veth1_macvtap failed to register rx_handler [ 468.283663][T18899] sctp: [Deprecated]: syz.3.3528 (pid 18899) Use of int in max_burst socket option. [ 468.283663][T18899] Use struct sctp_assoc_value instead [ 469.238806][T18934] __nla_validate_parse: 61 callbacks suppressed [ 469.238828][T18934] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3542'. [ 469.304394][T18939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3543'. [ 469.335342][T18937] block nbd4: Unsupported socket: should be TCP or UNIX. [ 469.420934][T18942] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3544'. [ 469.485330][T18942] vlan0: entered allmulticast mode [ 469.529302][T18942] erspan0: entered allmulticast mode [ 469.552390][T18944] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3545'. [ 469.633770][T18950] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3547'. [ 469.656141][T18950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3547'. [ 470.163604][T18982] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3559'. [ 470.199748][T18980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3560'. [ 470.364534][T18999] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3565'. [ 470.404578][T18999] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3565'. [ 470.555476][T19012] tipc: Started in network mode [ 470.565220][T19012] tipc: Node identity c6760ecab051, cluster identity 4711 [ 470.582895][T19012] tipc: Enabled bearer , priority 0 [ 470.680612][T19012] tipc: Disabling bearer [ 470.771229][T19022] lo: entered allmulticast mode [ 470.788042][T19022] tunl0: entered allmulticast mode [ 470.808157][T19022] gre0: entered allmulticast mode [ 470.835742][T19022] gretap0: entered allmulticast mode [ 470.877663][T19022] ip_vti0: entered allmulticast mode [ 470.891164][T19022] ip6_vti0: entered allmulticast mode [ 470.912619][T19022] sit0: entered allmulticast mode [ 470.929712][T19022] ip6tnl0: entered allmulticast mode [ 470.940435][T19022] ip6gre0: entered allmulticast mode [ 470.970131][T19022] bridge0: port 3(syz_tun) entered disabled state [ 470.988823][T19022] ip6gretap0: entered allmulticast mode [ 471.009719][T19022] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.017133][T19022] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.026566][T19022] bridge0: entered allmulticast mode [ 471.038250][T19022] vcan0: entered allmulticast mode [ 471.050765][T19022] bond0: entered allmulticast mode [ 471.055951][T19022] bond_slave_0: entered allmulticast mode [ 471.063062][T19022] bond_slave_1: entered allmulticast mode [ 471.084775][T19022] team0: entered allmulticast mode [ 471.090379][T19022] team_slave_0: entered allmulticast mode [ 471.096534][T19022] team_slave_1: entered allmulticast mode [ 471.112193][T19022] dummy0: entered allmulticast mode [ 471.126172][T19022] nlmon0: entered allmulticast mode [ 471.135514][T19022] caif0: entered allmulticast mode [ 471.143529][T19022] batadv0: entered allmulticast mode [ 471.154290][T19022] vxcan0: entered allmulticast mode [ 471.163846][T19022] vxcan1: entered allmulticast mode [ 471.173247][T19022] veth0: entered allmulticast mode [ 471.185367][T19022] veth1: entered allmulticast mode [ 471.198072][T19022] wg0: entered allmulticast mode [ 471.208489][T19022] wg1: entered allmulticast mode [ 471.221566][T19022] wg2: entered allmulticast mode [ 471.232434][T19022] veth0_to_bridge: entered allmulticast mode [ 471.252007][T19022] veth1_to_bridge: entered allmulticast mode [ 471.265848][T19022] veth0_to_bond: entered allmulticast mode [ 471.278064][T19022] veth1_to_bond: entered allmulticast mode [ 471.290110][T19022] veth0_to_team: entered allmulticast mode [ 471.303768][T19022] veth1_to_team: entered allmulticast mode [ 471.318170][T19022] veth0_to_batadv: entered allmulticast mode [ 471.328786][T19022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.337553][T19022] batadv_slave_0: entered allmulticast mode [ 471.348364][T19022] veth1_to_batadv: entered allmulticast mode [ 471.358377][T19022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.366790][T19022] batadv_slave_1: entered allmulticast mode [ 471.377983][T19022] xfrm0: entered allmulticast mode [ 471.388422][T19022] veth0_to_hsr: entered allmulticast mode [ 471.399103][T19022] hsr_slave_0: entered allmulticast mode [ 471.417888][T19022] veth1_to_hsr: entered allmulticast mode [ 471.430647][T19022] hsr_slave_1: entered allmulticast mode [ 471.445619][T19022] hsr0: entered allmulticast mode [ 471.456115][T19022] veth1_virt_wifi: entered allmulticast mode [ 471.468423][T19022] veth0_virt_wifi: entered allmulticast mode [ 471.477615][T19022] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 471.486610][T19022] veth1_macvtap: entered allmulticast mode [ 471.501008][T19022] veth0_macvtap: entered allmulticast mode [ 471.515508][T19022] macvtap0: entered allmulticast mode [ 471.537237][T19022] macsec0: entered allmulticast mode [ 471.558435][T19022] geneve0: entered allmulticast mode [ 471.572811][T19022] geneve1: entered allmulticast mode [ 471.583678][T19022] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 471.596091][T19022] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 471.610241][T19022] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 471.624326][T19022] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 471.643278][T19022] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 471.663312][T19022] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 471.674958][T19022] mac80211_hwsim hwsim30 syzkaller0: left promiscuous mode [ 471.683137][T19022] bond1: entered allmulticast mode [ 471.689725][T19022] gretap1: left promiscuous mode [ 471.696453][T19022] bond2: entered allmulticast mode [ 471.702452][T19022] gretap2: entered allmulticast mode [ 471.709802][T19022] syztnl0: entered allmulticast mode [ 471.715273][T19022] ip6tnl1: entered allmulticast mode [ 471.721556][T19022] bond3: left promiscuous mode [ 471.726457][T19022] macvlan0: left promiscuous mode [ 471.732820][T19022] bond0: left promiscuous mode [ 471.738301][T19022] bond_slave_0: left promiscuous mode [ 471.744051][T19022] bond_slave_1: left promiscuous mode [ 471.750504][T19022] bond3: entered allmulticast mode [ 471.755657][T19022] macvlan0: entered allmulticast mode [ 471.766140][T19022] ip6erspan0: entered allmulticast mode [ 471.788635][T19034] macvtap1: entered promiscuous mode [ 471.794135][T19034] vlan0: entered promiscuous mode [ 471.801530][T19034] macvtap1: entered allmulticast mode [ 471.807868][T19034] vlan0: entered allmulticast mode [ 471.813541][T19034] veth0_vlan: entered allmulticast mode [ 471.823943][ T7710] syz1: Port: 1 Link DOWN [ 471.835187][T19036] macvtap2: entered promiscuous mode [ 471.841880][T19036] macvtap2: entered allmulticast mode [ 471.901991][T10625] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.922246][T19055] validate_nla: 62 callbacks suppressed [ 471.922269][T19055] netlink: 'syz.4.3579': attribute type 10 has an invalid length. [ 471.939662][T10625] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.975080][T19055] wg0: left allmulticast mode [ 471.988105][T10625] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.084212][T10625] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.164221][T19068] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 472.240631][T19073] bridge_slave_0: invalid flags given to default FDB implementation [ 472.293726][T19076] netlink: 'syz.2.3586': attribute type 10 has an invalid length. [ 472.330394][T19076] team0: Port device dummy0 added [ 472.349044][T19074] dummy0: Caught tx_queue_len zero misconfig [ 472.352301][T19079] netlink: 'syz.3.3587': attribute type 1 has an invalid length. [ 472.450230][T19081] bond2: (slave gretap2): making interface the new active one [ 472.459783][T19081] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 472.474046][T19079] netlink: 'syz.3.3587': attribute type 1 has an invalid length. [ 473.075222][T19128] vxcan1: tx address claim with different name [ 473.315803][T19135] macvtap1: entered allmulticast mode [ 473.322216][T19135] veth0_macvtap: entered allmulticast mode [ 473.444434][T19152] xt_TCPMSS: Only works on TCP SYN packets [ 473.732075][T19168] net_ratelimit: 3258 callbacks suppressed [ 473.732100][T19168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.122112][T19185] dvmrp0: entered allmulticast mode [ 474.181838][T19190] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 474.265028][T19189] __nla_validate_parse: 10 callbacks suppressed [ 474.265052][T19189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3619'. [ 474.291035][T19196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3621'. [ 474.313679][T19193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3620'. [ 474.779155][T19229] netlink: 'syz.1.3628': attribute type 13 has an invalid length. [ 474.831118][T19232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3630'. [ 474.918848][T19240] netlink: 'syz.1.3628': attribute type 1 has an invalid length. [ 475.241661][T19229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 475.342568][T19258] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3634'. [ 475.840752][T19267] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3635'. [ 475.884476][T19267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3635'. [ 476.441019][T19276] team0: Port device dummy0 removed [ 476.501100][T19276] bridge_slave_0: left allmulticast mode [ 476.507387][T19276] bridge_slave_0: left promiscuous mode [ 476.513660][T19276] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.545361][T19276] bridge_slave_1: left allmulticast mode [ 476.551782][T19276] bridge_slave_1: left promiscuous mode [ 476.560182][T19276] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.585678][T19276] bond0: (slave bond_slave_0): Releasing backup interface [ 476.609934][T19276] bond0: (slave bond_slave_1): Releasing backup interface [ 476.630963][T19276] team0: Port device team_slave_0 removed [ 476.650647][T19276] team0: Port device team_slave_1 removed [ 476.682423][T19276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.698144][T19276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.738665][T19276] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 477.000569][T19301] dvmrp1: entered allmulticast mode [ 477.121033][T19306] bond2: (slave bond_slave_1): Device is not our slave [ 477.133868][T19318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3651'. [ 477.144755][T19306] bond2: option active_slave: invalid value (bond_slave_1) [ 477.148639][T19318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3651'. [ 477.161707][T19318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3651'. [ 477.177478][T19306] bond2 (unregistering): Released all slaves [ 477.489300][T19342] netlink: 'syz.2.3660': attribute type 1 has an invalid length. [ 477.491950][T19331] sctp: [Deprecated]: syz.1.3656 (pid 19331) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.491950][T19331] Use struct sctp_sack_info instead [ 477.519600][T19342] netlink: 'syz.2.3660': attribute type 1 has an invalid length. [ 477.535304][T19342] netlink: 'syz.2.3660': attribute type 1 has an invalid length. [ 477.545227][T19342] netlink: 'syz.2.3660': attribute type 2 has an invalid length. [ 477.570520][T19331] netlink: 'syz.1.3656': attribute type 12 has an invalid length. [ 477.781927][T19363] netlink: 'syz.1.3665': attribute type 4 has an invalid length. [ 477.795943][T19363] wlan1: mtu less than device minimum [ 478.015720][T19383] netlink: 'syz.4.3667': attribute type 1 has an invalid length. [ 478.026487][T19370] bond4: invalid ARP target 0.0.0.0 specified for addition [ 478.102887][T19370] bond4: option arp_ip_target: invalid value (0) [ 478.124163][T19370] bond4 (unregistering): Released all slaves [ 478.959074][T19416] lo: left allmulticast mode [ 478.980763][T19416] tunl0: left allmulticast mode [ 478.986372][T19416] gre0: left allmulticast mode [ 479.005010][T19416] gretap0: left allmulticast mode [ 479.011099][T19416] ip_vti0: left allmulticast mode [ 479.038570][T19416] ip6_vti0: left allmulticast mode [ 479.047587][T19421] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:20002 [ 479.055287][T19416] sit0: left allmulticast mode [ 479.061107][T19416] ip6tnl0: left allmulticast mode [ 479.068798][T19416] ip6gre0: left allmulticast mode [ 479.079537][T19416] ip6gretap0: left allmulticast mode [ 479.094248][T19416] vcan0: left allmulticast mode [ 479.105579][T19416] bond0: left allmulticast mode [ 479.117598][T19416] bridge0: left allmulticast mode [ 479.129714][T19416] team0: left allmulticast mode [ 479.156183][T19416] dummy0: left allmulticast mode [ 479.163374][T19416] nlmon0: left allmulticast mode [ 479.169935][T19416] caif0: left allmulticast mode [ 479.175553][T19416] batadv0: left allmulticast mode [ 479.181530][T19416] vxcan0: left allmulticast mode [ 479.188295][T19416] vxcan1: left allmulticast mode [ 479.193743][T19416] veth0: left allmulticast mode [ 479.201554][T19416] veth1: left allmulticast mode [ 479.222236][T19416] wg1: left allmulticast mode [ 479.243478][T19416] wg2: left allmulticast mode [ 479.270983][T19416] veth0_to_bridge: left allmulticast mode [ 479.288777][T19416] veth1_to_bridge: left allmulticast mode [ 479.391752][T19416] veth0_to_bond: left allmulticast mode [ 479.401285][T19416] bond_slave_0: left allmulticast mode [ 479.408406][T19416] veth1_to_bond: left allmulticast mode [ 479.416158][T19416] bond_slave_1: left allmulticast mode [ 479.429319][T19416] veth0_to_team: left allmulticast mode [ 479.436793][T19416] team_slave_0: left allmulticast mode [ 479.445325][T19416] veth1_to_team: left allmulticast mode [ 479.451819][T19416] team_slave_1: left allmulticast mode [ 479.458995][T19416] veth0_to_batadv: left allmulticast mode [ 479.465336][T19416] batadv_slave_0: left allmulticast mode [ 479.475550][T19416] veth1_to_batadv: left allmulticast mode [ 479.482374][T19416] batadv_slave_1: left allmulticast mode [ 479.489616][T19416] xfrm0: left allmulticast mode [ 479.495164][T19416] veth0_to_hsr: left allmulticast mode [ 479.502060][T19416] veth1_to_hsr: left allmulticast mode [ 479.508427][T19416] hsr0: left allmulticast mode [ 479.513611][T19416] hsr_slave_0: left allmulticast mode [ 479.520047][T19416] hsr_slave_1: left allmulticast mode [ 479.526298][T19416] veth1_virt_wifi: left allmulticast mode [ 479.533044][T19416] veth0_virt_wifi: left allmulticast mode [ 479.542549][T19416] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 479.550735][T19416] veth1_macvtap: left allmulticast mode [ 479.557881][T19416] veth0_macvtap: left allmulticast mode [ 479.563902][T19416] macvtap0: left allmulticast mode [ 479.570306][T19416] macsec0: left allmulticast mode [ 479.575658][T19416] geneve0: left allmulticast mode [ 479.586046][T19416] geneve1: left allmulticast mode [ 479.592002][T19416] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 479.600253][T19416] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 479.608518][T19416] netdevsim netdevsim4 netdevsim2: left allmulticast mode [ 479.616329][T19416] netdevsim netdevsim4 netdevsim3: left allmulticast mode [ 479.624357][T19416] mac80211_hwsim hwsim30 wlan0: left allmulticast mode [ 479.632136][T19416] mac80211_hwsim hwsim31 wlan1: left allmulticast mode [ 479.643573][T19416] mac80211_hwsim hwsim30 syzkaller0: left allmulticast mode [ 479.653653][T19416] bond1: left allmulticast mode [ 479.659258][T19416] gretap1: left allmulticast mode [ 479.664826][T19416] bond2: left allmulticast mode [ 479.671004][T19416] gretap2: left allmulticast mode [ 479.676572][T19416] syztnl0: left allmulticast mode [ 479.682632][T19416] ip6tnl1: left allmulticast mode [ 479.691555][T19416] bond3: left allmulticast mode [ 479.696761][T19416] macvlan0: left allmulticast mode [ 479.703318][T19416] vlan0: left allmulticast mode [ 479.708811][T19416] erspan0: left allmulticast mode [ 479.714531][T19416] ip6erspan0: left allmulticast mode [ 479.741648][T19429] veth1_to_bond: entered allmulticast mode [ 479.760751][T19426] veth1_to_bond: left allmulticast mode [ 479.961398][ T97] block nbd3: Possible stuck request ffff8880254de000: control (read@0,1024B). Runtime 120 seconds [ 479.972814][ T97] block nbd3: Possible stuck request ffff8880254de1c0: control (read@1024,1024B). Runtime 120 seconds [ 479.985592][ T97] block nbd3: Possible stuck request ffff8880254de380: control (read@2048,1024B). Runtime 120 seconds [ 479.997598][ T97] block nbd3: Possible stuck request ffff8880254de540: control (read@3072,1024B). Runtime 120 seconds [ 480.059121][T19452] __nla_validate_parse: 16 callbacks suppressed [ 480.059143][T19452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3684'. [ 480.506814][T19471] netlink: 'syz.0.3690': attribute type 12 has an invalid length. [ 480.596523][T19474] Cannot find add_set index 0 as target [ 480.721451][T19484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3692'. [ 482.102318][T19530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3706'. [ 482.496154][T19567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3716'. [ 482.521962][T19570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3714'. [ 482.563512][T19567] bond4: Unable to set up delay as MII monitoring is disabled [ 482.575002][T19567] bond4 (unregistering): Released all slaves [ 482.816408][T19587] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3721'. [ 482.929721][T19595] Cannot find add_set index 1 as target [ 483.073586][T19607] netlink: 652 bytes leftover after parsing attributes in process `syz.3.3726'. [ 483.230226][T19617] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3729'. [ 483.257179][T19617] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3729'. [ 483.272281][T19621] netlink: 'syz.4.3731': attribute type 3 has an invalid length. [ 483.291162][T19621] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3731'. [ 483.337344][T19623] netlink: 'syz.4.3731': attribute type 3 has an invalid length. [ 483.369385][T19633] netlink: 'syz.1.3733': attribute type 1 has an invalid length. [ 483.707242][T19652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 483.851371][T19663] netlink: 'syz.4.3743': attribute type 21 has an invalid length. [ 484.213815][T19686] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 484.231890][T19680] bond4 (unregistering): Released all slaves [ 484.640406][T19704] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 485.306062][T19725] __nla_validate_parse: 5 callbacks suppressed [ 485.306085][T19725] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3757'. [ 485.336653][T19726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3759'. [ 485.346602][T19723] tipc: Invalid UDP bearer configuration [ 485.346670][T19723] tipc: Enabling of bearer rejected, failed to enable media [ 485.370268][T19724] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3758'. [ 485.635183][T19745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3763'. [ 485.666302][T19741] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3763'. [ 485.802512][T19764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3768'. [ 485.889638][T19764] netlink: 788 bytes leftover after parsing attributes in process `syz.2.3768'. [ 486.051892][T19772] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3771'. [ 486.055795][T19774] netlink: del zone limit has 4 unknown bytes [ 486.070316][T19775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3770'. [ 486.079143][T19774] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3772'. [ 486.323140][T19777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.361122][T19777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.388715][T19777] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 486.411792][T19777] bond0 (unregistering): Released all slaves [ 486.662512][T19809] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 486.916030][T19825] bridge_slave_1: default FDB implementation only supports local addresses [ 487.449848][T19844] macsec1: entered promiscuous mode [ 487.455345][T19844] bridge0: entered promiscuous mode [ 487.461395][T19844] macsec1: entered allmulticast mode [ 487.467349][T19844] bridge0: entered allmulticast mode [ 487.474062][T19844] bridge0: port 3(macsec1) entered blocking state [ 487.482214][T19844] bridge0: port 3(macsec1) entered disabled state [ 487.495201][T19844] bridge0: left allmulticast mode [ 487.502124][T19844] bridge0: left promiscuous mode [ 487.525959][T19843] veth0: entered promiscuous mode [ 487.542334][T19852] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 487.568029][T19852] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 487.660984][T19853] netlink: 'syz.2.3791': attribute type 12 has an invalid length. [ 487.748251][T19853] bond1: option primary_reselect: invalid value (206) [ 487.758346][T19853] bond1 (unregistering): Released all slaves [ 488.240043][T19841] veth0: left promiscuous mode [ 488.859152][T19885] netlink: 'syz.1.3801': attribute type 24 has an invalid length. [ 489.104989][T19904] netlink: 'syz.3.3806': attribute type 4 has an invalid length. [ 489.179872][T19900] C speed is unknown, defaulting to 1000 [ 489.193110][T19904] netlink: 'syz.3.3806': attribute type 1 has an invalid length. [ 489.254986][T19902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.983475][T19953] sctp: [Deprecated]: syz.4.3823 (pid 19953) Use of int in maxseg socket option. [ 489.983475][T19953] Use struct sctp_assoc_value instead [ 490.047779][T19953] gtp0: entered promiscuous mode [ 490.074065][T19953] gtp0: entered allmulticast mode [ 490.175204][T19964] sctp: [Deprecated]: syz.2.3824 (pid 19964) Use of int in max_burst socket option. [ 490.175204][T19964] Use struct sctp_assoc_value instead [ 490.275808][T19968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.423270][ T5840] Bluetooth: hci1: link tx timeout [ 490.431230][ T5840] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 490.818906][T19991] netlink: 'syz.0.3833': attribute type 1 has an invalid length. [ 490.861286][T19991] netlink: 'syz.0.3833': attribute type 1 has an invalid length. [ 490.961098][T20000] __nla_validate_parse: 144 callbacks suppressed [ 490.961119][T20000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3836'. [ 490.992105][T20002] netlink: 'syz.3.3837': attribute type 4 has an invalid length. [ 491.016163][T20000] syz_tun: left allmulticast mode [ 491.018018][T20004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3836'. [ 491.033751][T20000] syz_tun: left promiscuous mode [ 491.047368][T20000] bridge0: port 3(syz_tun) entered disabled state [ 491.081906][T20000] bridge_slave_1: left allmulticast mode [ 491.091331][T20000] bridge_slave_1: left promiscuous mode [ 491.123409][T20000] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.170697][T20000] bridge_slave_0: left allmulticast mode [ 491.201386][T20000] bridge_slave_0: left promiscuous mode [ 491.218345][T20000] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.289173][T20000] bond0: (slave bridge0): Releasing backup interface [ 491.383178][T20031] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3845'. [ 491.438813][T20030] netlink: 'syz.0.3844': attribute type 11 has an invalid length. [ 491.742150][T20050] tipc: Enabled bearer , priority 2 [ 491.898406][T20062] netlink: 'syz.3.3854': attribute type 2 has an invalid length. [ 491.917871][T20062] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3854'. [ 492.397990][T20089] netlink: 'syz.0.3864': attribute type 11 has an invalid length. [ 492.500004][T20099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3867'. [ 492.524741][ T5843] Bluetooth: hci1: command 0x0405 tx timeout [ 492.576250][T20099] netlink: 'syz.3.3867': attribute type 3 has an invalid length. [ 492.584862][T20099] netlink: 630 bytes leftover after parsing attributes in process `syz.3.3867'. [ 492.731705][T20111] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3870'. [ 492.747540][ T7712] tipc: Node number set to 1982271178 [ 492.769322][T20111] netlink: 'syz.4.3870': attribute type 1 has an invalid length. [ 492.784952][T20117] bridge2: entered allmulticast mode [ 492.821560][T20120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3870'. [ 492.844137][T20118] bridge3: entered allmulticast mode [ 492.874773][T20125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3874'. [ 492.877522][T20126] Bluetooth: MGMT ver 1.23 [ 492.920881][T20119] bond4 (unregistering): Released all slaves [ 492.929173][T20130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3874'. [ 492.983979][T20127] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 493.177645][T20136] team_slave_0: mtu greater than device maximum [ 493.309642][T20144] IPVS: length: 231 != 24 [ 493.491904][T20158] dvmrp0: entered allmulticast mode [ 493.497909][ T5951] IPVS: starting estimator thread 0... [ 493.597342][T20163] IPVS: using max 28 ests per chain, 67200 per kthread [ 493.686069][T20179] 8ÿ: entered promiscuous mode [ 493.872195][T20188] validate_nla: 32 callbacks suppressed [ 493.872216][T20188] netlink: 'syz.0.3895': attribute type 1 has an invalid length. [ 494.053273][T20196] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 494.070865][T20196] bond4 (unregistering): Released all slaves [ 494.103872][ T7712] IPVS: starting estimator thread 0... [ 494.145336][T20205] sctp: [Deprecated]: syz.0.3901 (pid 20205) Use of struct sctp_assoc_value in delayed_ack socket option. [ 494.145336][T20205] Use struct sctp_sack_info instead [ 494.237356][T20203] IPVS: using max 29 ests per chain, 69600 per kthread [ 494.831679][T20239] bond0: Removing last arp target with arp_interval on [ 494.850520][T20243] netlink: 'syz.4.3913': attribute type 10 has an invalid length. [ 494.896997][T20243] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 494.904877][T20250] netlink: 'syz.3.3914': attribute type 1 has an invalid length. [ 494.908468][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.955086][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.985016][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.999635][T20252] netlink: 'syz.3.3915': attribute type 1 has an invalid length. [ 495.007972][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.101042][T20257] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 495.113564][T20257] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 495.184863][T20252] bond4: (slave bridge4): Enslaving as an active interface with a down link [ 495.233650][T20266] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 495.417833][T20280] netlink: 'syz.0.3920': attribute type 1 has an invalid length. [ 495.440188][T20280] netlink: 'syz.0.3920': attribute type 1 has an invalid length. [ 495.717931][T20299] netlink: 'syz.0.3927': attribute type 2 has an invalid length. [ 495.747806][T20296] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 495.771888][T20306] siw: device registration error -23 [ 496.644381][T20315] openvswitch: netlink: Flow actions attr not present in new flow. [ 496.661961][T20315] tipc: Enabled bearer , priority 0 [ 496.671011][T20316] __nla_validate_parse: 15 callbacks suppressed [ 496.671031][T20316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3932'. [ 496.692536][T20315] syzkaller0: entered promiscuous mode [ 496.698583][T20315] syzkaller0: entered allmulticast mode [ 496.726708][ T37] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.749112][T20323] netlink: 'syz.1.3934': attribute type 10 has an invalid length. [ 496.757470][ T37] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.807544][ T37] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.834440][ T37] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.884977][T20313] tipc: Resetting bearer [ 496.955476][T20313] tipc: Disabling bearer [ 497.156477][T20345] tipc: Started in network mode [ 497.172498][T20345] tipc: Node identity 080211, cluster identity 4711 [ 497.186049][T20345] tipc: Enabled bearer , priority 0 [ 497.212690][T20345] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 497.223157][T20345] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 497.233384][T20345] tipc: Resetting bearer [ 497.242153][T20351] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3942'. [ 497.250614][T20345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3939'. [ 497.263703][T20347] tipc: Enabled bearer , priority 0 [ 497.272061][T20347] syzkaller0: entered promiscuous mode [ 497.279243][T20347] syzkaller0: entered allmulticast mode [ 497.434298][T20345] macvtap1: entered promiscuous mode [ 497.445604][T20368] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3946'. [ 497.456427][T20345] vlan0: entered promiscuous mode [ 497.465637][T20345] erspan0: entered promiscuous mode [ 497.472059][T20345] macvtap1: entered allmulticast mode [ 497.478867][T20345] vlan0: entered allmulticast mode [ 497.484324][T20345] erspan0: entered allmulticast mode [ 497.493822][T20354] veth0_to_bond: entered allmulticast mode [ 497.512860][T20358] tipc: Resetting bearer [ 497.594417][T20374] nftables ruleset with unbound chain [ 497.680548][T20368] bond0 (unregistering): Released all slaves [ 497.700646][T20346] tipc: Resetting bearer [ 497.716258][T20346] tipc: Disabling bearer [ 497.741995][ T60] tipc: Resetting bearer [ 498.036078][T20391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3953'. [ 498.111651][T20382] netlink: 'syz.1.3949': attribute type 39 has an invalid length. [ 498.257110][ T5903] tipc: Node number set to 134353152 [ 498.433926][T20415] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.798669][T20436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3967'. [ 499.211588][T20468] tipc: Enabling of bearer rejected, failed to enable media [ 499.238164][T20465] sctp: [Deprecated]: syz.0.3978 (pid 20465) Use of int in max_burst socket option deprecated. [ 499.238164][T20465] Use struct sctp_assoc_value instead [ 499.282170][T20465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3978'. [ 499.312277][T20465] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3978'. [ 499.334625][T20465] gretap1: entered promiscuous mode [ 499.341635][T20465] gretap1: entered allmulticast mode [ 499.404086][T20480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3983'. [ 499.415309][T20484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3984'. [ 499.649344][T20498] bond3: entered promiscuous mode [ 499.665738][T20498] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 499.676205][T20498] bond3: (slave macvlan3): Enslaving as an active interface with a down link [ 499.688080][T20498] netlink: 'syz.1.3989': attribute type 10 has an invalid length. [ 499.703058][T20498] rdma_rxe: rxe_newlink: failed to add syz_tun [ 500.232076][T20508] 8021q: adding VLAN 0 to HW filter on device bond5 [ 501.080867][T20570] syzkaller1: entered promiscuous mode [ 501.115601][T20570] syzkaller1: entered allmulticast mode [ 501.509758][T20596] xt_CT: You must specify a L4 protocol and not use inversions on it [ 501.903268][T20620] : entered promiscuous mode [ 502.009869][T20623] __nla_validate_parse: 5 callbacks suppressed [ 502.009891][T20623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4018'. [ 502.033239][T20626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4020'. [ 502.044737][T20623] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 502.075314][T20628] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4021'. [ 502.107919][T20623] team1: entered promiscuous mode [ 502.116488][T20623] team1: entered allmulticast mode [ 502.364098][T20601] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 502.583087][T20658] netlink: 'syz.0.4027': attribute type 1 has an invalid length. [ 502.618474][T20658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4027'. [ 502.661366][T20656] veth3: entered allmulticast mode [ 502.811661][T20668] netlink: 'syz.0.4032': attribute type 7 has an invalid length. [ 503.415818][T20703] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 503.527956][T20711] syzkaller1: entered promiscuous mode [ 503.557908][ T5840] Bluetooth: hci1: command 0x0405 tx timeout [ 503.583239][T20711] syzkaller1: entered allmulticast mode [ 503.605761][T20713] xt_hashlimit: invalid rate [ 503.900190][T20727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4043'. [ 503.945598][T20727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4043'. [ 504.074940][T20735] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4045'. [ 504.123809][T20740] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20004 [ 504.132020][T20736] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4045'. [ 504.340208][T20750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4049'. [ 504.420743][T20759] netlink: 'syz.4.4051': attribute type 64 has an invalid length. [ 504.429467][T20759] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4051'. [ 504.502936][T20767] netlink: 'syz.3.4054': attribute type 10 has an invalid length. [ 504.527961][T20767] bridge0: port 3(team0) entered blocking state [ 504.541301][T20767] bridge0: port 3(team0) entered disabled state [ 504.552700][T20767] team0: entered allmulticast mode [ 504.563712][T20767] C: entered allmulticast mode [ 504.579280][T20767] team_slave_1: entered allmulticast mode [ 504.598946][T20767] team0: entered promiscuous mode [ 504.604492][T20767] C: entered promiscuous mode [ 504.610835][T20767] team_slave_1: entered promiscuous mode [ 504.875343][T20787] bond6: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 504.890843][T20787] bond6 (unregistering): Released all slaves [ 505.615607][T20841] sctp: [Deprecated]: syz.1.4076 (pid 20841) Use of int in max_burst socket option. [ 505.615607][T20841] Use struct sctp_assoc_value instead [ 505.888465][ T44] IPVS: starting estimator thread 0... [ 506.021911][T20856] IPVS: using max 29 ests per chain, 69600 per kthread [ 506.353769][T20883] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 506.379961][T20883] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 506.390829][T20883] gretap1: entered promiscuous mode [ 506.396197][T20883] gretap1: entered allmulticast mode [ 507.008505][T20922] syzkaller1: entered promiscuous mode [ 507.016066][T20922] syzkaller1: entered allmulticast mode [ 507.024843][T20926] 8021q: VLANs not supported on ip6_vti0 [ 507.041326][T20925] tipc: Enabling of bearer rejected, media not registered [ 507.136631][T20931] 8021q: VLANs not supported on ip6tnl0 [ 507.167177][T20931] netlink: 'syz.0.4106': attribute type 1 has an invalid length. [ 507.212428][T20931] bond2: entered promiscuous mode [ 507.226487][T20931] 8021q: adding VLAN 0 to HW filter on device bond2 [ 507.264735][T20940] __nla_validate_parse: 10 callbacks suppressed [ 507.264758][T20940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4108'. [ 507.295122][T20931] 8021q: adding VLAN 0 to HW filter on device bond2 [ 507.308405][T20931] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 507.319270][T20931] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 507.335440][T20931] bond2: (slave wireguard0): making interface the new active one [ 507.343601][T20931] wireguard0: entered promiscuous mode [ 507.351357][T20931] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 507.362643][T20943] tipc: Enabling of bearer rejected, already enabled [ 507.391506][T20943] tipc: Resetting bearer [ 507.420533][T20943] mac80211_hwsim hwsim30 syzkaller0: left promiscuous mode [ 507.455522][T20943] tipc: Resetting bearer [ 507.687992][T20961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4115'. [ 507.702393][T20960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4115'. [ 507.702645][T20961] ip6t_REJECT: ECHOREPLY is not supported [ 508.035900][T20981] netlink: 'syz.3.4121': attribute type 1 has an invalid length. [ 508.045444][T20982] netlink: 'syz.2.4119': attribute type 5 has an invalid length. [ 508.169138][T20985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4122'. [ 508.207189][T20985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4122'. [ 508.216229][T20985] netlink: 'syz.4.4122': attribute type 20 has an invalid length. [ 508.263637][T20993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4124'. [ 508.312533][ T1010] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.312641][T20985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4122'. [ 508.330962][T20993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4124'. [ 508.331868][ T1010] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.371414][ T1010] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.390856][ T1010] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.392908][T20985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4122'. [ 508.434952][T20985] netlink: 'syz.4.4122': attribute type 20 has an invalid length. [ 508.656742][T21013] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 508.708491][T21017] netlink: 'syz.2.4131': attribute type 29 has an invalid length. [ 508.749382][T21019] netlink: 'syz.2.4131': attribute type 29 has an invalid length. [ 508.758307][T21017] netlink: 'syz.2.4131': attribute type 29 has an invalid length. [ 508.926115][T21027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4134'. [ 509.162487][T21040] tipc: Enabled bearer , priority 0 [ 509.207522][T21040] syzkaller0: entered promiscuous mode [ 509.213099][T21040] syzkaller0: entered allmulticast mode [ 509.386482][T21038] tipc: Resetting bearer [ 509.444785][T21038] tipc: Disabling bearer [ 509.773556][T21067] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 510.042103][ T97] block nbd3: Possible stuck request ffff8880254de000: control (read@0,1024B). Runtime 150 seconds [ 510.053840][ T97] block nbd3: Possible stuck request ffff8880254de1c0: control (read@1024,1024B). Runtime 150 seconds [ 510.069746][ T97] block nbd3: Possible stuck request ffff8880254de380: control (read@2048,1024B). Runtime 150 seconds [ 510.081227][ T97] block nbd3: Possible stuck request ffff8880254de540: control (read@3072,1024B). Runtime 150 seconds [ 510.748111][T21108] bond6: entered promiscuous mode [ 510.816680][T21112] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 510.855789][T21112] bond6: (slave macvlan2): making interface the new active one [ 510.885534][T21112] macvlan2: entered promiscuous mode [ 510.892506][T21121] netlink: 'syz.3.4160': attribute type 10 has an invalid length. [ 510.893032][T21112] bond0: entered promiscuous mode [ 510.906377][T21112] bond_slave_0: entered promiscuous mode [ 510.916060][T21112] bond_slave_1: entered promiscuous mode [ 510.924925][T21112] mac80211_hwsim hwsim33 wlan1: entered promiscuous mode [ 510.939212][T21112] bond6: (slave macvlan2): Enslaving as an active interface with an up link [ 510.950943][T21108] bridge0: port 4(syz_tun) entered blocking state [ 510.969817][T21108] bridge0: port 4(syz_tun) entered disabled state [ 510.978967][T21108] syz_tun: entered allmulticast mode [ 510.987851][T21108] syz_tun: entered promiscuous mode [ 511.000758][T21120] x_tables: duplicate underflow at hook 1 [ 511.007385][T21117] mac80211_hwsim hwsim30 syzkaller0: left allmulticast mode [ 511.030317][T21117] tipc: Resetting bearer [ 511.067471][T21112] rdma_rxe: rxe_newlink: failed to add syz_tun [ 511.101017][T21121] bridge0: entered promiscuous mode [ 511.120928][T21121] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 512.203113][T21196] syzkaller1: entered promiscuous mode [ 512.208832][T21196] syzkaller1: entered allmulticast mode [ 512.572066][T21228] pim6reg1: entered promiscuous mode [ 512.601225][T21228] pim6reg1: entered allmulticast mode [ 513.063487][T21255] __nla_validate_parse: 12 callbacks suppressed [ 513.063511][T21255] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.4198'. [ 513.102246][T21255] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 513.206082][T21262] netlink: 'syz.1.4201': attribute type 1 has an invalid length. [ 513.215043][T21262] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4201'. [ 519.157271][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 522.213043][T10626] batadv1: left allmulticast mode [ 522.218817][T10626] batadv1: left promiscuous mode [ 522.225152][T10626] bridge0: port 1(batadv1) entered disabled state [ 522.448808][T10626] bond9 (unregistering): (slave gretap1): Releasing active interface [ 522.501577][T10626] dvmrp0 (unregistering): left allmulticast mode [ 522.520519][T10626] dvmrp1 (unregistering): left allmulticast mode [ 522.649692][T10626] bond5 (unregistering): (slave bridge2): Releasing active interface [ 522.871968][T10626] bond1 (unregistering): Released all slaves [ 522.886285][T10626] bond2 (unregistering): Released all slaves [ 522.994627][T10626] bond3 (unregistering): (slave veth5): Releasing active interface [ 523.007588][T10626] bond3 (unregistering): Released all slaves [ 523.022483][T10626] bond4 (unregistering): Released all slaves [ 523.040205][T10626] bond5 (unregistering): Released all slaves [ 523.073094][T10626] bond0 (unregistering): Released all slaves [ 523.174616][T10626] bond6 (unregistering): Released all slaves [ 523.279230][T10626] bond7 (unregistering): (slave veth7): Releasing active interface [ 523.290223][T10626] bond7 (unregistering): (slave veth9): Releasing active interface [ 523.300472][T10626] bond7 (unregistering): Released all slaves [ 523.315237][T10626] bond8 (unregistering): Released all slaves [ 523.425266][T10626] bond9 (unregistering): Released all slaves [ 523.532765][T10626] bond10 (unregistering): (slave veth13): Releasing backup interface [ 523.544030][T10626] bond10 (unregistering): Released all slaves [ 523.681695][T10626] tipc: Left network mode [ 523.939538][T10626] hsr_slave_0: left promiscuous mode [ 523.946267][T10626] hsr_slave_1: left promiscuous mode [ 525.325301][T10626] IPVS: stop unused estimator thread 0... [ 537.724011][T10629] tipc: Disabling bearer [ 537.769579][T10629] dvmrp1 (unregistering): left allmulticast mode [ 538.481018][T10629] bond1 (unregistering): Released all slaves [ 538.495204][T10629] bond2 (unregistering): Released all slaves [ 538.510361][T10629] bond3 (unregistering): Released all slaves [ 538.529251][T10629] bond4 (unregistering): Released all slaves [ 538.546962][T10629] bond0 (unregistering): Released all slaves [ 538.636802][T10629] 8ÿ: left promiscuous mode [ 538.758212][T21307] netlink: 'syz.2.4205': attribute type 1 has an invalid length. [ 538.855898][T10629] tipc: Left network mode [ 538.880689][T21317] bond1: (slave gretap1): making interface the new active one [ 538.889563][T21317] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 538.990935][T21324] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4208'. [ 539.001206][T21326] x_tables: duplicate underflow at hook 1 [ 539.035599][T21324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4208'. [ 539.075253][T21324] netlink: 'syz.1.4208': attribute type 8 has an invalid length. [ 539.207022][T21333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4213'. [ 539.373101][T21344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4218'. [ 539.611189][T10629] hsr_slave_0: left promiscuous mode [ 539.640761][T10629] hsr_slave_1: left promiscuous mode [ 539.658071][T10629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.806820][T21358] netlink: 'syz.3.4222': attribute type 83 has an invalid length. [ 540.119414][ T97] block nbd3: Possible stuck request ffff8880254de000: control (read@0,1024B). Runtime 180 seconds [ 540.131828][ T97] block nbd3: Possible stuck request ffff8880254de1c0: control (read@1024,1024B). Runtime 180 seconds [ 540.143912][ T97] block nbd3: Possible stuck request ffff8880254de380: control (read@2048,1024B). Runtime 180 seconds [ 540.159640][ T97] block nbd3: Possible stuck request ffff8880254de540: control (read@3072,1024B). Runtime 180 seconds [ 540.388433][T21371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.400280][T21371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.401889][T21372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.412811][T21371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.433495][T21371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.446413][T21371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.459297][T21371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.471910][T21371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.484627][T21371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.496761][T21371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.510272][T21371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.523321][T21371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.535786][T21371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.548638][T21371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.562752][T21371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.574872][T21371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.590629][T21371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.669308][T21370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.796055][T21378] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4227'. [ 540.820960][T21374] macvtap1: left promiscuous mode [ 540.826066][T21374] macvtap1: left allmulticast mode [ 540.835635][T21374] vlan0: left allmulticast mode [ 540.848537][T21374] veth0_vlan: left allmulticast mode [ 540.855272][T21374] vlan0: left promiscuous mode [ 540.861246][T21374] macvtap2: left promiscuous mode [ 540.866322][T21374] macvtap2: left allmulticast mode [ 540.885450][T21383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4228'. [ 540.905589][T21374] bond6: left promiscuous mode [ 540.910864][T21374] macvlan2: left promiscuous mode [ 540.916111][T21374] bond0: left promiscuous mode [ 540.921395][T21374] bond_slave_0: left promiscuous mode [ 540.928140][T21374] bond_slave_1: left promiscuous mode [ 540.933838][T21374] mac80211_hwsim hwsim33 wlan1: left promiscuous mode [ 540.941503][T21374] bridge0: left promiscuous mode [ 540.950688][T10622] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.953451][T21384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4229'. [ 540.977394][T10622] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 541.007080][T10622] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.016653][T10622] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 541.086305][T21391] Bluetooth: MGMT ver 1.23 [ 541.113276][T10629] IPVS: stop unused estimator thread 0... [ 541.127725][T10622] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.140387][T10622] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 541.167393][T10622] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.176333][T10622] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 541.372521][T21409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4234'. [ 541.375133][T21408] netlink: 'syz.1.4236': attribute type 1 has an invalid length. [ 541.390676][T21408] netlink: 'syz.1.4236': attribute type 3 has an invalid length. [ 541.400061][T21408] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4236'. [ 541.419067][T21411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4234'. [ 541.671072][T21419] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 541.678031][T21419] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 541.698929][T21423] netlink: 'syz.4.4240': attribute type 23 has an invalid length. [ 541.783209][T21428] gtp1: entered promiscuous mode [ 541.788532][T21428] gtp1: entered allmulticast mode [ 541.808462][ T37] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.820756][ T37] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.830681][ T37] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.854358][ T37] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 541.882624][T21433] netlink: 'syz.4.4244': attribute type 4 has an invalid length. [ 541.887122][T21431] vlan3: entered promiscuous mode [ 541.896488][T21431] vlan3: entered allmulticast mode [ 541.903121][T21431] hsr_slave_1: entered allmulticast mode [ 542.046702][T21440] pim6reg1: entered promiscuous mode [ 542.053375][T21440] pim6reg1: entered allmulticast mode [ 542.083872][T21443] netem: change failed [ 542.374305][T21459] syzkaller0: entered promiscuous mode [ 542.380116][T21459] syzkaller0: entered allmulticast mode [ 542.823054][T21472] tipc: Enabling of bearer rejected, already enabled [ 542.836663][T21472] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 542.857123][T21472] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 542.865306][T21472] tipc: Resetting bearer [ 542.938027][T21477] C speed is unknown, defaulting to 1000 [ 543.230081][T21499] netlink: 'syz.3.4268': attribute type 1 has an invalid length. [ 543.240213][T21500] netlink: 'syz.3.4268': attribute type 1 has an invalid length. [ 543.812754][T21531] xt_CT: You must specify a L4 protocol and not use inversions on it [ 544.214526][T21546] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 544.288781][T21553] __nla_validate_parse: 12 callbacks suppressed [ 544.288803][T21553] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4283'. [ 544.339062][T21554] netlink: 'syz.0.4281': attribute type 1 has an invalid length. [ 544.633919][T21566] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4288'. [ 544.672525][T21564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4287'. [ 544.755629][T21573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4290'. [ 544.769298][T21573] netlink: 'syz.1.4290': attribute type 1 has an invalid length. [ 544.779494][T21573] netlink: 'syz.1.4290': attribute type 2 has an invalid length. [ 544.900901][T21576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4291'. [ 544.920411][T21575] veth1_macvtap: left promiscuous mode [ 544.966477][T21579] xt_CT: No such helper "pptp" [ 545.155587][T21591] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4297'. [ 545.400104][T21606] veth0_to_bond: entered allmulticast mode [ 545.457104][T21615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4305'. [ 545.486760][T21615] netlink: 'syz.1.4305': attribute type 2 has an invalid length. [ 545.616606][T21625] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4308'. [ 545.883902][T21641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4312'. [ 546.301271][T21666] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4315'. [ 546.350123][T21674] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.357573][T21674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.429945][T21680] IPVS: length: 32 != 8 [ 546.442454][T21680] IPVS: length: 32 != 8 [ 547.016794][T21719] netlink: 'syz.3.4333': attribute type 10 has an invalid length. [ 547.028066][T21719] netlink: 'syz.3.4333': attribute type 2 has an invalid length. [ 547.036022][T21719] netlink: 'syz.3.4333': attribute type 1 has an invalid length. [ 547.047706][T21719] netlink: 'syz.3.4333': attribute type 1 has an invalid length. [ 547.055768][T21719] netlink: 'syz.3.4333': attribute type 2 has an invalid length. [ 547.065036][T21719] netlink: 'syz.3.4333': attribute type 2 has an invalid length. [ 547.545226][T21739] bond3 (unregistering): Released all slaves [ 547.877829][T21761] IPVS: ip_vs_edit_dest(): server weight less than zero [ 547.999840][T21768] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 548.006515][T21768] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 548.071815][T21773] C speed is unknown, defaulting to 1000 [ 548.690876][T21785] 8021q: adding VLAN 0 to HW filter on device bond3 [ 548.768314][T21793] 8021q: adding VLAN 0 to HW filter on device bond3 [ 548.785641][T21793] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 548.797850][T21793] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 549.169898][T21795] veth0: Caught tx_queue_len zero misconfig [ 549.246147][T21800] vlan2: entered allmulticast mode [ 549.252252][T21800] bond3: entered allmulticast mode [ 549.319641][T21804] tipc: Enabled bearer , priority 0 [ 549.331253][T21806] syzkaller0: entered promiscuous mode [ 549.346015][T21806] syzkaller0: entered allmulticast mode [ 549.359353][T21799] tipc: Resetting bearer [ 549.408915][T21794] tipc: Resetting bearer [ 549.455414][T21794] tipc: Disabling bearer [ 549.607102][ T5198] udevd[5198]: worker [14362] /devices/virtual/block/nbd3 timeout; kill it [ 549.615982][ T5198] udevd[5198]: seq 19800 '/devices/virtual/block/nbd3' killed [ 549.664490][T21832] rdma_op ffff88801cb079f0 conn xmit_rdma 0000000000000000 [ 549.887235][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 550.120404][T21856] __nla_validate_parse: 5 callbacks suppressed [ 550.120426][T21856] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4368'. [ 550.143238][T21855] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 550.153933][T21855] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 550.192201][T21859] U×È: renamed from macvlan0 [ 550.192855][T21860] validate_nla: 3 callbacks suppressed [ 550.192872][T21860] netlink: 'syz.4.4370': attribute type 2 has an invalid length. [ 550.248706][T21860] netlink: 'syz.4.4370': attribute type 9 has an invalid length. [ 550.262371][T21860] netlink: 'syz.4.4370': attribute type 1 has an invalid length. [ 550.272882][T21860] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.4370'. [ 550.414137][T21869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4372'. [ 551.102415][T21908] bond7 (unregistering): Released all slaves [ 551.120817][T21904] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4383'. [ 551.510563][T21942] netlink: 'syz.2.4392': attribute type 2 has an invalid length. [ 551.537494][T21942] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4392'. [ 551.549620][T21942] nbd: must specify at least one socket [ 551.624589][T21942] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4392'. [ 551.634151][T21947] netlink: 'syz.1.4394': attribute type 8 has an invalid length. [ 551.634179][T21947] netlink: 'syz.1.4394': attribute type 35 has an invalid length. [ 551.648526][T21950] netlink: 'syz.1.4394': attribute type 8 has an invalid length. [ 551.693467][T21942] netlink: 'syz.2.4392': attribute type 5 has an invalid length. [ 551.737027][T21950] netlink: 'syz.1.4394': attribute type 35 has an invalid length. [ 551.841875][T21959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4397'. [ 551.868466][T21959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4397'. [ 552.334333][T21992] vcan0: entered allmulticast mode [ 552.341895][T21994] tipc: Enabling of bearer rejected, already enabled [ 552.448672][T22001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4410'. [ 552.758778][T22013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4415'. [ 553.232152][T22011] veth1_to_bond: entered allmulticast mode [ 553.391443][T22013] veth1_to_bond (unregistering): left allmulticast mode [ 553.980696][T22068] netlink: 'syz.4.4433': attribute type 1 has an invalid length. [ 554.997401][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 555.732222][T22076] __nla_validate_parse: 3 callbacks suppressed [ 555.732244][T22076] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4436'. [ 556.175701][T22109] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4446'. [ 556.246409][T22112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4445'. [ 556.298486][T22117] syzkaller1: entered promiscuous mode [ 556.304312][T22117] syzkaller1: entered allmulticast mode [ 556.319582][T22114] IPVS: Scheduler module ip_vs_sip not found [ 556.337778][T22111] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4447'. [ 556.852038][T22127] netlink: 'syz.3.4452': attribute type 5 has an invalid length. [ 557.080938][T22136] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4455'. [ 557.296997][T22145] SET target dimension over the limit! [ 557.441959][T22155] nbd: couldn't find a device at index 0 [ 557.461299][T22153] geneve2: entered promiscuous mode [ 557.469570][T22155] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4463'. [ 557.472872][T22158] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4462'. [ 557.480037][T22153] geneve2: entered allmulticast mode [ 557.507685][ T1010] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 557.539422][T10626] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 557.571895][T10626] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 557.590100][T10626] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 557.812426][T22174] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4469'. [ 558.234841][T22187] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4474'. [ 558.250242][T22203] xt_cluster: node mask cannot exceed total number of nodes [ 558.252120][T22202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4480'. [ 558.349612][T22212] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 558.582866][T22232] netlink: 'syz.0.4488': attribute type 5 has an invalid length. [ 558.729746][T22220] team0 (unregistering): Port device team_slave_0 removed [ 558.740508][T22220] team0 (unregistering): Port device team_slave_1 removed [ 558.916943][T22243] netlink: 'syz.3.4492': attribute type 1 has an invalid length. [ 558.983315][T22243] bond8: (slave ip6gretap1): making interface the new active one [ 558.993265][T22243] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 559.002287][T22243] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 559.011098][T22243] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 559.021643][T22240] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 559.442501][T22272] netlink: 'syz.2.4503': attribute type 21 has an invalid length. [ 559.450819][T22272] netlink: 'syz.2.4503': attribute type 6 has an invalid length. [ 560.009462][ T5843] block nbd4: Receive control failed (result -107) [ 560.110944][T22309] netlink: 'syz.1.4513': attribute type 8 has an invalid length. [ 560.497935][T22334] netlink: 'syz.3.4520': attribute type 3 has an invalid length. [ 560.824404][T22350] __nla_validate_parse: 11 callbacks suppressed [ 560.824427][T22350] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4526'. [ 561.057837][T22369] vlan0: entered promiscuous mode [ 561.063521][T22369] vlan0: entered allmulticast mode [ 561.130028][T22369] hsr_slave_1: entered allmulticast mode [ 561.725215][T22419] netlink: 'syz.2.4542': attribute type 1 has an invalid length. [ 561.753432][T22419] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4542'. [ 561.836517][T22427] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4545'. [ 561.947027][T22433] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4546'. [ 561.950728][T22432] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4546'. [ 562.340151][T22453] netem: incorrect gi model size [ 562.359704][T22453] netem: change failed [ 562.366390][T22451] netlink: 'syz.0.4552': attribute type 12 has an invalid length. [ 562.399558][T22451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4552'. [ 562.416328][T22451] veth0_vlan: left promiscuous mode [ 563.421233][T22502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4563'. [ 563.630519][T22512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4567'. [ 563.734749][ T5843] Bluetooth: hci1: link tx timeout [ 563.740158][ T5843] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 563.809418][T22521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4571'. [ 564.080451][T22540] C speed is unknown, defaulting to 1000 [ 564.108503][T22542] x_tables: duplicate underflow at hook 3 [ 564.205599][T22547] vcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 564.438791][T22561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4584'. [ 564.452648][T22562] tipc: Enabled bearer , priority 0 [ 564.497469][T22562] syzkaller0: entered promiscuous mode [ 564.509024][T22562] syzkaller0: entered allmulticast mode [ 564.569172][T22562] tipc: Resetting bearer [ 564.651745][T22559] tipc: Resetting bearer [ 564.720382][T22559] tipc: Disabling bearer [ 564.947610][T22595] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 565.038557][T22592] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 565.054961][T22592] bond3 (unregistering): Released all slaves [ 565.408606][T22623] netlink: 'syz.1.4602': attribute type 21 has an invalid length. [ 565.506493][T22627] syzkaller0: entered promiscuous mode [ 565.513677][T22627] syzkaller0: entered allmulticast mode [ 565.567391][T22634] chnl_net:caif_netlink_parms(): no params data found [ 565.625678][T22638] netlink: 'syz.1.4606': attribute type 7 has an invalid length. [ 565.709690][T22640] netlink: 'syz.2.4607': attribute type 1 has an invalid length. [ 565.798957][ T5840] Bluetooth: hci1: command 0x0405 tx timeout [ 565.920576][T22662] __nla_validate_parse: 10 callbacks suppressed [ 565.920602][T22662] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4611'. [ 566.210864][T22672] IPv6: sit3: Disabled Multicast RS [ 566.251093][T22672] sit3: entered allmulticast mode [ 566.590337][T22689] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4619'. [ 566.613393][T10629] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.623815][T10629] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.653968][T10629] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.687152][T10629] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.144049][T22727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4628'. [ 567.193432][T22726] ip6erspan0: entered promiscuous mode [ 567.211062][T22726] ip6erspan0: entered allmulticast mode [ 567.705558][T22755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4636'. [ 567.730170][T22755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4636'. [ 567.763672][T22755] ªªªªªª: renamed from lo [ 567.856596][T22761] nbd: couldn't find a device at index 0 [ 568.019497][T22767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4639'. [ 568.098376][T22774] netlink: 'syz.4.4641': attribute type 3 has an invalid length. [ 568.160984][T22776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4640'. [ 568.177713][T22776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4640'. [ 568.189966][T22774] netlink: 'syz.4.4641': attribute type 1 has an invalid length. [ 568.329204][T22774] bond7: entered promiscuous mode [ 568.349370][T22774] 8021q: adding VLAN 0 to HW filter on device bond7 [ 568.498843][T22779] 8021q: adding VLAN 0 to HW filter on device bond8 [ 568.510341][T22797] netlink: 'syz.2.4645': attribute type 1 has an invalid length. [ 568.533900][T22779] bond7: (slave bond8): making interface the new active one [ 568.554633][T22779] bond8: entered promiscuous mode [ 568.598401][T22779] bond7: (slave bond8): Enslaving as an active interface with an up link [ 568.633569][T22797] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4645'. [ 568.872715][T22814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4649'. [ 568.915237][T22817] syz_tun: entered allmulticast mode [ 568.979720][T22823] openvswitch: netlink: Flow key attr not present in new flow. [ 569.018165][T22817] syz_tun: left allmulticast mode [ 569.583545][T22856] IPv6: NLM_F_CREATE should be specified when creating new route [ 569.750412][T22862] sctp: [Deprecated]: syz.1.4661 (pid 22862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 569.750412][T22862] Use struct sctp_sack_info instead [ 569.963264][T22871] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 569.965760][T22885] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 570.200031][ T97] block nbd3: Possible stuck request ffff8880254de000: control (read@0,1024B). Runtime 210 seconds [ 570.222444][ T97] block nbd3: Possible stuck request ffff8880254de1c0: control (read@1024,1024B). Runtime 210 seconds [ 570.234323][ T97] block nbd3: Possible stuck request ffff8880254de380: control (read@2048,1024B). Runtime 210 seconds [ 570.245773][ T97] block nbd3: Possible stuck request ffff8880254de540: control (read@3072,1024B). Runtime 210 seconds [ 570.421039][T22909] x_tables: duplicate underflow at hook 1 [ 570.427429][T22910] x_tables: duplicate underflow at hook 1 [ 570.825717][T22932] lo speed is unknown, defaulting to 1000 [ 570.862390][T22932] lo speed is unknown, defaulting to 1000 [ 570.916027][T22932] lo speed is unknown, defaulting to 1000 [ 570.970140][T22944] __nla_validate_parse: 3 callbacks suppressed [ 570.970169][T22944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4677'. [ 571.055491][ T30] audit: type=1804 audit(1760216644.980:6): pid=22947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4674" name="/newroot/322/cgroup.controllers" dev="tmpfs" ino=1667 res=1 errno=0 [ 571.215855][ T30] audit: type=1800 audit(1760216644.980:7): pid=22947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4674" name="cgroup.controllers" dev="tmpfs" ino=1667 res=0 errno=0 [ 571.438760][T22959] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4680'. [ 571.654943][T22971] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4682'. [ 571.702929][T22932] infiniband syz0: set active [ 571.728180][ T44] lo speed is unknown, defaulting to 1000 [ 571.740271][T22974] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4682'. [ 571.752351][T22932] infiniband syz0: added lo [ 571.768103][T22932] syz0: rxe_create_cq: returned err = -12 [ 571.798421][T22932] infiniband syz0: Couldn't create ib_mad CQ [ 571.804918][T22932] infiniband syz0: Couldn't open port 1 [ 571.913811][T22932] RDS/IB: syz0: added [ 571.938807][T22932] smc: adding ib device syz0 with port count 1 [ 571.967991][T22932] smc: ib device syz0 port 1 has pnetid SYZ0 (user defined) [ 571.977124][ T5903] lo speed is unknown, defaulting to 1000 [ 571.983805][T22932] lo speed is unknown, defaulting to 1000 [ 572.062110][T22993] netlink: 'syz.2.4689': attribute type 1 has an invalid length. [ 572.071351][T22993] netlink: 'syz.2.4689': attribute type 1 has an invalid length. [ 572.080004][T22993] netlink: 216 bytes leftover after parsing attributes in process `syz.2.4689'. [ 572.150625][T22999] netlink: 'syz.3.4690': attribute type 1 has an invalid length. [ 572.159476][T22999] netlink: 'syz.3.4690': attribute type 3 has an invalid length. [ 572.173258][T22999] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4690'. [ 572.291339][T23003] xt_NFQUEUE: number of queues (16) out of range (got 65549) [ 572.378866][T23010] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4693'. [ 572.522755][T23015] tipc: Enabled bearer , priority 0 [ 572.534856][T23015] syzkaller0: entered promiscuous mode [ 572.552778][T23015] syzkaller0: entered allmulticast mode [ 572.582170][T23015] tipc: Resetting bearer [ 572.626785][T23022] netlink: 'syz.4.4696': attribute type 11 has an invalid length. [ 572.637562][T23014] tipc: Resetting bearer [ 572.676579][T23014] tipc: Disabling bearer [ 572.696012][T23022] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4696'. [ 572.735499][T22932] lo speed is unknown, defaulting to 1000 [ 573.036831][T23032] tipc: Enabled bearer , priority 0 [ 573.058109][T23032] syzkaller0: entered promiscuous mode [ 573.078363][T23032] syzkaller0: entered allmulticast mode [ 573.193328][T23032] tipc: Resetting bearer [ 574.057093][ T5888] tipc: Node number set to 1412940826 [ 574.146086][ T37] bond1 (unregistering): (slave gretap1): Releasing active interface [ 574.598594][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.610551][ T37] bond0 (unregistering): Released all slaves [ 574.630633][ T37] bond1 (unregistering): Released all slaves [ 574.650196][ T37] bond2 (unregistering): Released all slaves [ 574.684921][T23029] tipc: Resetting bearer [ 574.696619][T22932] lo speed is unknown, defaulting to 1000 [ 574.724146][T23029] tipc: Disabling bearer [ 574.898905][ T37] tipc: Disabling bearer [ 574.947509][ T37] tipc: Disabling bearer [ 575.049122][ T37] tipc: Disabling bearer [ 575.108844][ T37] tipc: Left network mode [ 575.285177][T23114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4712'. [ 575.474362][T22932] lo speed is unknown, defaulting to 1000 [ 575.831544][T23134] netlink: 'syz.2.4717': attribute type 1 has an invalid length. [ 575.870704][T23134] netlink: 'syz.2.4717': attribute type 1 has an invalid length. [ 576.077707][T23137] bond9: entered promiscuous mode [ 576.082922][T23137] bond9: entered allmulticast mode [ 576.088770][T23137] 8021q: adding VLAN 0 to HW filter on device bond9 [ 576.171363][T22932] lo speed is unknown, defaulting to 1000 [ 576.435633][T23150] tipc: Enabling of bearer rejected, already enabled [ 576.676620][T22932] lo speed is unknown, defaulting to 1000 [ 576.774560][T23171] 8021q: VLANs not supported on caif0 [ 576.789642][T23166] netlink: 'syz.1.4726': attribute type 1 has an invalid length. [ 576.842950][T23166] netlink: 'syz.1.4726': attribute type 2 has an invalid length. [ 576.869253][T23166] netlink: 'syz.1.4726': attribute type 1 has an invalid length. [ 576.910734][T23166] netlink: 'syz.1.4726': attribute type 2 has an invalid length. [ 576.932881][T23171] tipc: Resetting bearer [ 577.340763][T23200] netlink: 'syz.4.4733': attribute type 23 has an invalid length. [ 577.426006][T22932] lo speed is unknown, defaulting to 1000 [ 577.452927][T23201] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4732'. [ 577.942848][T23230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4739'. [ 577.958909][T23229] vlan0: entered promiscuous mode [ 577.971859][T23229] vlan0: entered allmulticast mode [ 577.979402][T23229] veth0_vlan: entered allmulticast mode [ 578.068108][T23233] xt_hashlimit: max too large, truncated to 1048576 [ 578.075031][T23230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4739'. [ 578.193558][T22932] lo speed is unknown, defaulting to 1000 [ 579.753091][T23299] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4761'. [ 579.820360][T23298] --map-set only usable from mangle table [ 579.834317][T23298] netlink: 'syz.3.4759': attribute type 9 has an invalid length. [ 579.841243][T23294] syzkaller0: entered promiscuous mode [ 579.849765][T23294] syzkaller0: entered allmulticast mode [ 579.882031][T23300] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4761'. [ 579.930759][T23299] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4761'. [ 580.361634][T23335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4764'. [ 580.388282][T23335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4764'. [ 580.411227][T23332] netlink: 'syz.1.4766': attribute type 21 has an invalid length. [ 580.427596][ T37] hsr_slave_0: left promiscuous mode [ 580.474510][ T37] veth0_macvtap: left promiscuous mode [ 580.487836][ T37] veth1_vlan: left promiscuous mode [ 580.504113][ T37] veth0_vlan: left promiscuous mode [ 581.164051][ T37] vlan1 (unregistering): left allmulticast mode [ 581.171135][ T37] veth0_vlan (unregistering): left allmulticast mode [ 581.667496][ T37] team0 (unregistering): Port device team_slave_1 removed [ 581.723141][ T37] team0 (unregistering): Port device team_slave_0 removed [ 582.160485][T23341] warn_alloc: 1 callbacks suppressed [ 582.160506][T23341] syz.3.4769: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 582.185995][T23341] CPU: 0 UID: 0 PID: 23341 Comm: syz.3.4769 Not tainted syzkaller #0 PREEMPT(full) [ 582.186029][T23341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 582.186049][T23341] Call Trace: [ 582.186059][T23341] [ 582.186070][T23341] dump_stack_lvl+0x189/0x250 [ 582.186119][T23341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 582.186144][T23341] ? __pfx__printk+0x10/0x10 [ 582.186168][T23341] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 582.186201][T23341] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 582.186236][T23341] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 582.186272][T23341] warn_alloc+0x214/0x310 [ 582.186314][T23341] ? __pfx_warn_alloc+0x10/0x10 [ 582.186358][T23341] ? __get_vm_area_node+0x28f/0x300 [ 582.186391][T23341] ? fq_pie_init+0x435/0x840 [ 582.186427][T23341] __vmalloc_node_range_noprof+0x690/0x12d0 [ 582.186462][T23341] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 582.186515][T23341] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 582.186552][T23341] ? fq_pie_init+0x435/0x840 [ 582.186588][T23341] ? rcu_is_watching+0x15/0xb0 [ 582.186616][T23341] ? fq_pie_init+0x435/0x840 [ 582.186647][T23341] __kvmalloc_node_noprof+0x674/0x910 [ 582.186683][T23341] ? fq_pie_init+0x435/0x840 [ 582.186723][T23341] ? tcf_block_get+0x67/0xa0 [ 582.186744][T23341] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 582.186773][T23341] fq_pie_init+0x435/0x840 [ 582.186816][T23341] ? __pfx_fq_pie_init+0x10/0x10 [ 582.186849][T23341] qdisc_create+0x7ac/0xea0 [ 582.186896][T23341] tc_modify_qdisc+0x1538/0x20e0 [ 582.186946][T23341] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 582.187014][T23341] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 582.187045][T23341] rtnetlink_rcv_msg+0x77c/0xb70 [ 582.187068][T23341] ? __lock_acquire+0xab9/0xd20 [ 582.187093][T23341] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 582.187115][T23341] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 582.187156][T23341] netlink_rcv_skb+0x205/0x470 [ 582.187178][T23341] ? __lock_acquire+0xab9/0xd20 [ 582.187200][T23341] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 582.187225][T23341] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 582.187263][T23341] ? netlink_deliver_tap+0x2e/0x1b0 [ 582.187296][T23341] netlink_unicast+0x82f/0x9e0 [ 582.187342][T23341] ? __pfx_netlink_unicast+0x10/0x10 [ 582.187379][T23341] ? netlink_sendmsg+0x642/0xb30 [ 582.187401][T23341] ? skb_put+0x11b/0x210 [ 582.187429][T23341] netlink_sendmsg+0x805/0xb30 [ 582.187465][T23341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.187493][T23341] ? aa_sock_msg_perm+0xf1/0x1d0 [ 582.187533][T23341] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 582.187555][T23341] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.187581][T23341] __sock_sendmsg+0x21c/0x270 [ 582.187619][T23341] ____sys_sendmsg+0x505/0x830 [ 582.187653][T23341] ? __pfx_____sys_sendmsg+0x10/0x10 [ 582.187691][T23341] ? import_iovec+0x74/0xa0 [ 582.187718][T23341] ___sys_sendmsg+0x21f/0x2a0 [ 582.187748][T23341] ? __pfx____sys_sendmsg+0x10/0x10 [ 582.187824][T23341] ? __fget_files+0x2a/0x420 [ 582.187844][T23341] ? __fget_files+0x3a0/0x420 [ 582.187877][T23341] __x64_sys_sendmsg+0x19b/0x260 [ 582.187908][T23341] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 582.187956][T23341] ? do_syscall_64+0xbe/0xfa0 [ 582.187988][T23341] do_syscall_64+0xfa/0xfa0 [ 582.188015][T23341] ? lockdep_hardirqs_on+0x9c/0x150 [ 582.188043][T23341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.188065][T23341] ? clear_bhb_loop+0x60/0xb0 [ 582.188093][T23341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.188124][T23341] RIP: 0033:0x7f625e38eec9 [ 582.188148][T23341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.188170][T23341] RSP: 002b:00007f625f142038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 582.188195][T23341] RAX: ffffffffffffffda RBX: 00007f625e5e5fa0 RCX: 00007f625e38eec9 [ 582.188212][T23341] RDX: 000000002000400c RSI: 0000200000000300 RDI: 0000000000000005 [ 582.188229][T23341] RBP: 00007f625e411f91 R08: 0000000000000000 R09: 0000000000000000 [ 582.188243][T23341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.188257][T23341] R13: 00007f625e5e6038 R14: 00007f625e5e5fa0 R15: 00007ffffc0d1238 [ 582.188296][T23341] [ 582.621763][T23341] Mem-Info: [ 582.625622][T23341] active_anon:6506 inactive_anon:0 isolated_anon:0 [ 582.625622][T23341] active_file:2704 inactive_file:40041 isolated_file:0 [ 582.625622][T23341] unevictable:768 dirty:67 writeback:0 [ 582.625622][T23341] slab_reclaimable:12783 slab_unreclaimable:135512 [ 582.625622][T23341] mapped:32434 shmem:1367 pagetables:1311 [ 582.625622][T23341] sec_pagetables:0 bounce:0 [ 582.625622][T23341] kernel_misc_reclaimable:0 [ 582.625622][T23341] free:1284372 free_pcp:15348 free_cma:0 [ 582.673355][T23341] Node 0 active_anon:26024kB inactive_anon:0kB active_file:10816kB inactive_file:159956kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129736kB dirty:268kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15104kB pagetables:4976kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 582.707538][T23341] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 582.741043][T23341] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 582.747186][T23388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4775'. [ 582.781751][T23341] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 582.789106][T23341] Node 0 DMA32 free:1228868kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26024kB inactive_anon:0kB active_file:10816kB inactive_file:159956kB unevictable:1536kB writepending:268kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:43660kB local_pcp:22300kB free_cma:0kB [ 582.824182][T23341] lowmem_reserve[]: 0 0 1 1 1 [ 582.829359][T23341] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 582.862659][T23341] lowmem_reserve[]: 0 0 0 0 0 [ 582.867618][T23341] Node 1 Normal free:3893260kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17848kB local_pcp:9792kB free_cma:0kB [ 582.902633][T23341] lowmem_reserve[]: 0 0 0 0 0 [ 582.907724][T23341] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 582.920858][T23341] Node 0 DMA32: 814*4kB (UME) 211*8kB (M) 171*16kB (UME) 642*32kB (UME) 170*64kB (UME) 42*128kB (UM) 20*256kB (UME) 20*512kB (UME) 22*1024kB (UM) 8*2048kB (UME) 276*4096kB (UM) = 1229248kB [ 582.939772][T23341] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 582.952215][T23341] Node 1 Normal: 239*4kB (UE) 60*8kB (UME) 55*16kB (UME) 120*32kB (UME) 38*64kB (UME) 9*128kB (UME) 4*256kB (UME) 3*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3893260kB [ 582.970930][T23341] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 582.981982][T23341] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 582.991633][T23341] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 583.002787][T23341] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 583.013112][T23341] 44108 total pagecache pages [ 583.018035][T23341] 0 pages in swap cache [ 583.022353][T23341] Free swap = 124996kB [ 583.026827][T23341] Total swap = 124996kB [ 583.031363][T23341] 2097051 pages RAM [ 583.035210][T23341] 0 pages HighMem/MovableOnly [ 583.040499][T23341] 424543 pages reserved [ 583.044947][T23341] 0 pages cma reserved [ 583.312482][T23399] tc_dump_action: action bad kind [ 583.398065][T23410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4780'. [ 583.520202][T23415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4781'. [ 583.647875][T23422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4782'. [ 583.657094][T23422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4782'. [ 583.707985][T23427] netlink: 'syz.2.4785': attribute type 7 has an invalid length. [ 583.745095][T23429] netlink: 'syz.1.4784': attribute type 7 has an invalid length. [ 583.770956][T23429] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4784'. [ 584.049258][T23443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4789'. [ 584.139683][ T37] IPVS: stop unused estimator thread 0... [ 584.156032][T23443] syzkaller1: entered promiscuous mode [ 584.196961][T23443] syzkaller1: entered allmulticast mode [ 584.262897][T23458] netlink: 'syz.4.4791': attribute type 1 has an invalid length. [ 584.295558][T23459] netlink: 'syz.3.4788': attribute type 10 has an invalid length. [ 584.783000][ T7715] lo speed is unknown, defaulting to 1000 [ 584.792806][ T7715] syz0: Port: 1 Link DOWN [ 584.897311][ T44] lo speed is unknown, defaulting to 1000 [ 584.966355][T23476] syzkaller0: entered promiscuous mode [ 584.973102][T23476] syzkaller0: entered allmulticast mode [ 585.081646][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.093180][T23483] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4796'. [ 585.097085][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.128886][T23476] syzkaller1: entered promiscuous mode [ 585.134581][T23476] syzkaller1: entered allmulticast mode [ 585.156810][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.201256][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.217889][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.247655][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.255964][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.309559][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.339547][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.366658][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.397369][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.404162][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.469590][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.476453][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.537967][T23501] tipc: Enabled bearer , priority 0 [ 585.552240][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.563755][T23501] syzkaller0: entered promiscuous mode [ 585.576345][T23501] syzkaller0: entered allmulticast mode [ 585.587524][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.599398][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.607465][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.630314][T23501] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 585.633479][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.645295][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.674592][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.702265][T23504] tipc: Enabling of bearer rejected, failed to enable media [ 585.714015][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.724630][T23501] tipc: Resetting bearer [ 585.736331][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.752973][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.761893][T23499] tipc: Resetting bearer [ 585.778993][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.797936][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.816186][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.823333][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.832009][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.839251][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.846394][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.886338][T23484] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 585.912585][T23499] tipc: Disabling bearer [ 585.971024][T23522] mac80211_hwsim hwsim36 ÿ: renamed from wlan1 [ 586.078240][T23529] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4806'. [ 586.143672][T23529] gretap0: entered promiscuous mode [ 586.170393][T23534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4807'. [ 586.426526][T23551] delete_channel: no stack [ 586.465940][ T37] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.475209][ T37] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.485892][ T37] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.503540][ T37] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.525733][T23560] netlink: 'syz.1.4813': attribute type 8 has an invalid length. [ 586.758263][T23577] mac80211_hwsim hwsim30 syzkaller0: left promiscuous mode [ 586.797051][T23577] mac80211_hwsim hwsim30 syzkaller0: left allmulticast mode [ 586.965649][T23592] netlink: 'syz.1.4819': attribute type 12 has an invalid length. [ 586.985954][T23591] netlink: 'syz.2.4818': attribute type 1 has an invalid length. [ 587.074372][T23591] bond4: entered promiscuous mode [ 587.107356][ T1010] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.146614][ T1010] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.251027][T23608] netlink: 'syz.2.4818': attribute type 10 has an invalid length. [ 587.254231][T23604] bridge0: port 1(syz_tun) entered blocking state [ 587.307446][T23604] bridge0: port 1(syz_tun) entered disabled state [ 587.326001][T23604] syz_tun: entered allmulticast mode [ 587.337560][T23604] syz_tun: entered promiscuous mode [ 587.347561][ T1010] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.358050][ T1010] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.247201][T23678] netlink: 'syz.2.4840': attribute type 11 has an invalid length. [ 588.274886][T23678] __nla_validate_parse: 7 callbacks suppressed [ 588.274910][T23678] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4840'. [ 588.374750][T23681] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4841'. [ 588.422241][T23682] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 588.755211][T23701] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4847'. [ 588.866743][T23709] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4849'. [ 588.896688][T23710] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4849'. [ 588.936926][ T30] audit: type=1107 audit(1760216662.860:8): pid=23711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='œ' [ 588.976999][ T30] audit: type=1107 audit(1760216662.870:9): pid=23711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='œ' [ 589.077548][T23720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4853'. [ 589.107949][T23720] bridge_slave_1: default FDB implementation only supports local addresses [ 589.357315][T23728] netlink: 'syz.0.4852': attribute type 10 has an invalid length. [ 589.535314][T23728] team0: Port device macvlan1 added [ 589.546826][T23742] veth1_to_hsr: entered allmulticast mode [ 589.738833][T23756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4862'. [ 589.852164][T23761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4861'. [ 589.993655][T23755] IPv6: sit2: Disabled Multicast RS [ 590.006594][T23755] sit2: entered allmulticast mode [ 590.123515][T23758] veth0_to_team: entered promiscuous mode [ 590.130613][T23758] veth0_to_team: entered allmulticast mode [ 590.253977][T23767] netlink: 'syz.4.4863': attribute type 1 has an invalid length. [ 590.326778][T23775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4864'. [ 590.342434][T23779] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4865'. [ 590.353707][T23767] 8021q: adding VLAN 0 to HW filter on device bond9 [ 590.419613][T23768] bond9: (slave veth3): Enslaving as an active interface with a down link [ 590.480553][T23769] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 590.594772][T23767] bond9: (slave veth5): Enslaving as an active interface with a down link [ 590.882784][T23805] syzkaller0: entered promiscuous mode [ 590.908495][T23805] syzkaller0: entered allmulticast mode [ 590.958809][T23805] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 591.056092][T23821] tipc: Enabling of bearer rejected, failed to enable media [ 591.126471][T23821] tipc: Enabling of bearer rejected, failed to enable media [ 591.281271][T23835] netlink: 'syz.3.4880': attribute type 7 has an invalid length. [ 591.305249][T23835] netlink: 'syz.3.4880': attribute type 8 has an invalid length. [ 591.559678][T23848] nbd5: detected capacity change from 0 to 127 [ 591.573837][ T5843] block nbd5: Receive control failed (result -32) [ 591.581949][T16656] block nbd5: Send control failed (result -32) [ 591.613912][T16656] block nbd5: Request send failed, requeueing [ 591.656638][ T56] block nbd5: Dead connection, failed to find a fallback [ 591.665149][ T56] block nbd5: shutting down sockets [ 591.670731][ T56] blk_print_req_error: 138 callbacks suppressed [ 591.670754][ T56] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 591.690860][ T56] buffer_io_error: 138 callbacks suppressed [ 591.690881][ T56] Buffer I/O error on dev nbd5, logical block 0, async page read [ 591.717148][T16656] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 591.760112][T16656] Buffer I/O error on dev nbd5, logical block 1, async page read [ 591.768896][T16656] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 591.778249][T16656] Buffer I/O error on dev nbd5, logical block 2, async page read [ 591.796545][T16656] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 591.821177][T16656] Buffer I/O error on dev nbd5, logical block 3, async page read [ 591.851172][T16656] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 591.891895][T16656] Buffer I/O error on dev nbd5, logical block 0, async page read [ 591.919173][T16656] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 591.951379][T16656] Buffer I/O error on dev nbd5, logical block 1, async page read [ 591.996383][T16656] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 592.043675][T16656] Buffer I/O error on dev nbd5, logical block 2, async page read [ 592.064166][T16656] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 592.105738][T16656] Buffer I/O error on dev nbd5, logical block 3, async page read [ 592.126418][T16656] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 592.160347][T16656] Buffer I/O error on dev nbd5, logical block 0, async page read [ 592.177265][T16656] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 592.229383][T16656] Buffer I/O error on dev nbd5, logical block 1, async page read [ 592.250978][T16656] ldm_validate_partition_table(): Disk read failed. [ 592.276384][T16656] Dev nbd5: unable to read RDB block 0 [ 592.298834][T16656] nbd5: unable to read partition table [ 592.332083][T16656] ldm_validate_partition_table(): Disk read failed. [ 592.364663][T16656] Dev nbd5: unable to read RDB block 0 [ 592.393945][T16656] nbd5: unable to read partition table [ 592.997816][ T5843] Bluetooth: hci0: command tx timeout [ 593.150723][T23918] syzkaller0: entered promiscuous mode [ 593.180815][T23918] syzkaller0: entered allmulticast mode [ 593.196286][T23928] sctp: [Deprecated]: syz.4.4903 (pid 23928) Use of int in maxseg socket option. [ 593.196286][T23928] Use struct sctp_assoc_value instead [ 593.211988][T23920] tipc: Enabled bearer , priority 0 [ 593.296101][T23920] __nla_validate_parse: 9 callbacks suppressed [ 593.296124][T23920] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4901'. [ 593.339523][T23920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4901'. [ 593.382601][T23920] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 593.394644][T23942] xt_l2tp: invalid flags combination: 8 [ 593.410520][T23942] netlink: 'syz.4.4907': attribute type 1 has an invalid length. [ 593.495080][T23917] tipc: Resetting bearer [ 593.550484][T23917] tipc: Disabling bearer [ 593.561784][T23947] tc_dump_action: action bad kind [ 593.701642][T23957] netlink: 'syz.1.4913': attribute type 12 has an invalid length. [ 594.131864][T23978] erspan0: entered allmulticast mode [ 594.224294][T23982] netlink: 'syz.3.4923': attribute type 83 has an invalid length. [ 594.305523][T23988] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4922'. [ 594.345040][T23988] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4922'. [ 594.536761][T24004] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4927'. [ 594.822728][T24023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4935'. [ 594.857906][T24023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4935'. [ 594.993904][T24023] bond10: Unable to set down delay as MII monitoring is disabled [ 595.005471][T24023] bond10 (unregistering): Released all slaves [ 595.055548][T24039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4940'. [ 595.301309][T24045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4942'. [ 595.347128][T24045] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4942'. [ 595.385755][T24045] geneve3: entered promiscuous mode [ 595.395875][T24045] geneve3: entered allmulticast mode [ 596.058547][T24105] syzkaller0: entered promiscuous mode [ 596.064212][T24105] syzkaller0: entered allmulticast mode [ 596.644429][T24125] tipc: Failed to remove unknown binding: 66,1,1/0:3356297494/3356297496 [ 597.069186][T24150] macvtap2: entered promiscuous mode [ 597.087278][T24150] macvtap2: entered allmulticast mode [ 597.121517][T24150] macvtap3: entered promiscuous mode [ 597.131491][T24150] macvtap3: entered allmulticast mode [ 597.213298][T24160] netlink: 'syz.1.4979': attribute type 1 has an invalid length. [ 597.221763][T24160] netlink: 'syz.1.4979': attribute type 4 has an invalid length. [ 597.235574][T24160] netlink: 'syz.1.4979': attribute type 1 has an invalid length. [ 597.246676][T24160] netlink: 'syz.1.4979': attribute type 4 has an invalid length. [ 597.291485][T24166] netlink: 'syz.4.4985': attribute type 21 has an invalid length. [ 597.395707][T24171] netlink: 'syz.3.4988': attribute type 30 has an invalid length. [ 597.461525][T24171] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 597.617577][T24189] x_tables: duplicate underflow at hook 1 [ 597.955641][T24217] macvlan0: entered promiscuous mode [ 597.963773][T24217] batadv0: entered promiscuous mode [ 597.970645][T24217] debugfs: 'hsr1' already exists in 'hsr' [ 597.976672][T24217] Cannot create hsr debugfs directory [ 597.983439][T24217] hsr1: entered allmulticast mode [ 597.988968][T24217] macvlan0: entered allmulticast mode [ 597.995662][T24217] veth1_vlan: entered allmulticast mode [ 598.002713][T24217] batadv0: entered allmulticast mode [ 598.020698][T24217] macvlan0: left promiscuous mode [ 598.029774][T24217] batadv0: left promiscuous mode [ 598.131919][T24230] warn_alloc: 1 callbacks suppressed [ 598.131942][T24230] syz.2.5001: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 598.159219][T24230] CPU: 0 UID: 0 PID: 24230 Comm: syz.2.5001 Not tainted syzkaller #0 PREEMPT(full) [ 598.159254][T24230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 598.159269][T24230] Call Trace: [ 598.159279][T24230] [ 598.159289][T24230] dump_stack_lvl+0x189/0x250 [ 598.159325][T24230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.159351][T24230] ? __pfx__printk+0x10/0x10 [ 598.159375][T24230] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 598.159408][T24230] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 598.159442][T24230] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 598.159478][T24230] warn_alloc+0x214/0x310 [ 598.159512][T24230] ? stack_depot_save_flags+0x40/0x860 [ 598.159546][T24230] ? __pfx_warn_alloc+0x10/0x10 [ 598.159582][T24230] ? kasan_save_track+0x3e/0x80 [ 598.159612][T24230] ? __kasan_kmalloc+0x93/0xb0 [ 598.159647][T24230] ? xsk_setsockopt+0x4dc/0x8d0 [ 598.159669][T24230] ? do_sock_setsockopt+0x179/0x1b0 [ 598.159693][T24230] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 598.159717][T24230] ? do_syscall_64+0xfa/0xfa0 [ 598.159745][T24230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.159780][T24230] __vmalloc_node_range_noprof+0x125/0x12d0 [ 598.159849][T24230] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 598.159897][T24230] ? __kasan_kmalloc+0x93/0xb0 [ 598.159938][T24230] vmalloc_user_noprof+0xad/0xf0 [ 598.159971][T24230] ? xskq_create+0xbf/0x170 [ 598.159997][T24230] xskq_create+0xbf/0x170 [ 598.160026][T24230] xsk_init_queue+0xb0/0x110 [ 598.160055][T24230] xsk_setsockopt+0x4dc/0x8d0 [ 598.160082][T24230] ? __pfx_xsk_setsockopt+0x10/0x10 [ 598.160110][T24230] ? __pfx_aa_sk_perm+0x10/0x10 [ 598.160142][T24230] ? aa_sock_opt_perm+0xff/0x1b0 [ 598.160177][T24230] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 598.160198][T24230] ? __pfx_xsk_setsockopt+0x10/0x10 [ 598.160225][T24230] do_sock_setsockopt+0x179/0x1b0 [ 598.160261][T24230] __x64_sys_setsockopt+0x13f/0x1b0 [ 598.160294][T24230] do_syscall_64+0xfa/0xfa0 [ 598.160321][T24230] ? lockdep_hardirqs_on+0x9c/0x150 [ 598.160349][T24230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.160372][T24230] ? clear_bhb_loop+0x60/0xb0 [ 598.160400][T24230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.160422][T24230] RIP: 0033:0x7f2b3f98eec9 [ 598.160444][T24230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.160465][T24230] RSP: 002b:00007f2b40780038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 598.160489][T24230] RAX: ffffffffffffffda RBX: 00007f2b3fbe5fa0 RCX: 00007f2b3f98eec9 [ 598.160506][T24230] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 598.160521][T24230] RBP: 00007f2b3fa11f91 R08: 0000000000000004 R09: 0000000000000000 [ 598.160535][T24230] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.160550][T24230] R13: 00007f2b3fbe6038 R14: 00007f2b3fbe5fa0 R15: 00007ffd60aed238 [ 598.160587][T24230] [ 598.161415][T24230] Mem-Info: [ 598.316998][T24230] active_anon:5952 inactive_anon:0 isolated_anon:0 [ 598.316998][T24230] active_file:2703 inactive_file:40047 isolated_file:0 [ 598.316998][T24230] unevictable:768 dirty:80 writeback:0 [ 598.316998][T24230] slab_reclaimable:13010 slab_unreclaimable:135534 [ 598.316998][T24230] mapped:29176 shmem:1368 pagetables:1175 [ 598.316998][T24230] sec_pagetables:0 bounce:0 [ 598.316998][T24230] kernel_misc_reclaimable:0 [ 598.316998][T24230] free:1287190 free_pcp:13576 free_cma:0 [ 598.337469][T24235] tipc: Enabled bearer , priority 0 [ 598.379318][T24230] Node 0 active_anon:24008kB inactive_anon:0kB active_file:10812kB inactive_file:159980kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116704kB dirty:320kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14512kB pagetables:4432kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 598.467766][T24241] __nla_validate_parse: 9 callbacks suppressed [ 598.467790][T24241] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5002'. [ 598.527822][T24230] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 598.608411][T24235] tipc: Disabling bearer [ 598.620992][T24230] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 598.687477][T24230] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 598.694113][T24230] Node 0 DMA32 free:1240696kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20608kB inactive_anon:0kB active_file:10812kB inactive_file:159980kB unevictable:1536kB writepending:320kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:39408kB local_pcp:22024kB free_cma:0kB [ 598.736002][T24230] lowmem_reserve[]: 0 0 1 1 1 [ 598.741288][T24230] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 598.775573][T24245] xt_ecn: cannot match TCP bits for non-tcp packets [ 598.819583][T24230] lowmem_reserve[]: 0 0 0 0 0 [ 598.837515][T24230] Node 1 Normal free:3893260kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17848kB local_pcp:8056kB free_cma:0kB [ 598.918297][T24230] lowmem_reserve[]: 0 0 0 0 0 [ 598.923147][T24230] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 598.972804][T24230] Node 0 DMA32: 1756*4kB (UME) 573*8kB (UM) 346*16kB (UME) 848*32kB (UME) 208*64kB (UME) 52*128kB (UM) 25*256kB (UME) 23*512kB (UME) 22*1024kB (UM) 13*2048kB (UME) 271*4096kB (UM) = 1241592kB [ 599.026440][T24230] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 599.039452][T24230] Node 1 Normal: 239*4kB (UE) 60*8kB (UME) 55*16kB (UME) 120*32kB (UME) 38*64kB (UME) 9*128kB (UME) 4*256kB (UME) 3*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 946*4096kB (M) = 3893260kB [ 599.058428][T24230] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 599.069162][T24230] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 599.071103][T24261] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5011'. [ 599.079092][T24230] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 599.079122][T24230] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 599.079361][T24230] 44165 total pagecache pages [ 599.079375][T24230] 0 pages in swap cache [ 599.079384][T24230] Free swap = 124996kB [ 599.079394][T24230] Total swap = 124996kB [ 599.079407][T24230] 2097051 pages RAM [ 599.079416][T24230] 0 pages HighMem/MovableOnly [ 599.079426][T24230] 424543 pages reserved [ 599.079436][T24230] 0 pages cma reserved [ 599.219279][T24266] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5013'. [ 599.331458][T10625] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 599.351206][T10625] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 599.382543][T10625] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 599.416003][T10625] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 599.500730][T24283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5019'. [ 599.527987][T24283] vlan1: entered allmulticast mode [ 599.533646][T24283] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode [ 599.556688][T24286] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 599.576408][T24286] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 599.676170][T24293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5022'. [ 599.899542][T24306] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5024'. [ 599.973801][T24313] netlink: 'syz.1.5026': attribute type 8 has an invalid length. [ 600.012382][T24311] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.023566][T24311] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.077943][T24318] netlink: 'syz.0.5025': attribute type 16 has an invalid length. [ 600.085988][T24318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5025'. [ 600.138225][T24273] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 600.144199][T24273] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 600.201147][T24311] netlink: 'syz.0.5025': attribute type 16 has an invalid length. [ 600.212295][T24273] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 600.234788][T24273] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 600.247325][T24311] netlink: 'syz.0.5025': attribute type 17 has an invalid length. [ 600.264764][T24325] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5031'. [ 600.278924][ T97] block nbd3: Possible stuck request ffff8880254de000: control (read@0,1024B). Runtime 240 seconds [ 600.291910][ T97] block nbd3: Possible stuck request ffff8880254de1c0: control (read@1024,1024B). Runtime 240 seconds [ 600.307512][ T97] block nbd3: Possible stuck request ffff8880254de380: control (read@2048,1024B). Runtime 240 seconds [ 600.319297][ T97] block nbd3: Possible stuck request ffff8880254de540: control (read@3072,1024B). Runtime 240 seconds [ 600.339267][T24311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 600.355881][ T5951] lo speed is unknown, defaulting to 1000 [ 600.356012][T24273] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 600.362434][ T5951] syz0: Port: 1 Link ACTIVE [ 600.373506][ T5903] lo speed is unknown, defaulting to 1000 [ 600.407019][T24273] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 600.435801][T24273] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 600.438780][T24329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5032'. [ 600.451514][T24273] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 600.455031][T24329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5032'. [ 600.528714][T24334] tipc: Enabling of bearer rejected, already enabled [ 600.605608][T24339] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 601.204098][T24383] wg2: entered promiscuous mode [ 601.209707][T24383] wg2: entered allmulticast mode [ 601.341940][T24390] xt_l2tp: wrong L2TP version: 0 [ 601.486793][T24398] hsr_slave_1 (unregistering): left promiscuous mode [ 601.510377][T24405] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 601.871054][T24427] netem: change failed [ 602.187063][T24441] xt_l2tp: missing protocol rule (udp|l2tpip) [ 602.593361][T24473] validate_nla: 1 callbacks suppressed [ 602.593379][T24473] netlink: 'syz.0.5073': attribute type 15 has an invalid length. [ 602.632301][T24464] smc: adding net device geneve0 with user defined pnetid SYZ0 [ 602.923734][T24469] lo speed is unknown, defaulting to 1000 [ 603.414351][T24480] IPVS: Scheduler module ip_vs_sip not found [ 603.498638][T24492] netlink: 'syz.3.5077': attribute type 1 has an invalid length. [ 603.506572][T24492] __nla_validate_parse: 13 callbacks suppressed [ 603.506594][T24492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5077'. [ 603.658102][ C0] vcan0: j1939_tp_rxtimer: 0xffff888064b0d000: rx timeout, send abort [ 603.762468][T24496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5079'. [ 603.890629][T24507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5086'. [ 603.982244][T24510] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5084'. [ 604.158040][ C0] vcan0: j1939_tp_rxtimer: 0xffff888064b0e400: rx timeout, send abort [ 604.168382][ C0] vcan0: j1939_tp_rxtimer: 0xffff888064b0d000: abort rx timeout. Force session deactivation [ 604.328293][T24526] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.5091'. [ 604.666298][ C0] vcan0: j1939_tp_rxtimer: 0xffff888064b0e400: abort rx timeout. Force session deactivation [ 605.126449][T24572] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5105'. [ 605.162177][T24573] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5105'. [ 605.481099][T24595] A link change request failed with some changes committed already. Interface ªªªªªª may have been left with an inconsistent configuration, please check. [ 605.565666][T24599] syzkaller1: entered promiscuous mode [ 605.576103][T24599] syzkaller1: entered allmulticast mode [ 605.707909][T24614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5120'. [ 605.864251][T24623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5124'. [ 605.877741][T24623] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5124'. [ 605.935297][T24624] netlink: 'syz.2.5125': attribute type 1 has an invalid length. [ 605.947914][T24624] netlink: 'syz.2.5125': attribute type 1 has an invalid length. [ 606.529629][T24667] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 606.697232][T24670] bond5: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 606.728481][T24670] bond5 (unregistering): Released all slaves [ 607.201682][T24703] tipc: Enabled bearer , priority 0 [ 607.243907][T24702] tipc: Resetting bearer [ 608.943090][T24702] tipc: Disabling bearer [ 608.975093][T24720] bond0: (slave wlan1): Releasing backup interface [ 609.013619][T24727] mac80211_hwsim hwsim30 syzkaller0: left promiscuous mode [ 609.031353][T24727] mac80211_hwsim hwsim30 syzkaller0: left allmulticast mode [ 609.117834][T24729] __nla_validate_parse: 10 callbacks suppressed [ 609.117857][T24729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5154'. [ 609.163483][T24729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5154'. [ 609.231202][T24735] team0: Device ip6gre2 is of different type [ 609.292761][T24741] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5158'. [ 609.668630][T24766] netlink: 'syz.4.5167': attribute type 1 has an invalid length. [ 609.676811][T24766] netlink: 'syz.4.5167': attribute type 1 has an invalid length. [ 609.793792][T24772] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5170'. [ 610.103321][T24787] netlink: 'syz.4.5177': attribute type 4 has an invalid length. [ 610.119428][T24787] netlink: 'syz.4.5177': attribute type 1 has an invalid length. [ 610.127785][T24787] netlink: 5624 bytes leftover after parsing attributes in process `syz.4.5177'. [ 610.148769][T24787] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5177'. [ 610.546688][T24816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5186'. [ 610.557596][T24816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5186'. [ 610.576121][T24819] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 610.593944][T24816] netlink: 'syz.4.5186': attribute type 14 has an invalid length. [ 610.605050][T24816] netlink: 'syz.4.5186': attribute type 13 has an invalid length. [ 610.859858][T24835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.879232][T24839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5197'. [ 611.419404][T24837] lo speed is unknown, defaulting to 1000 [ 611.869819][T24886] x_tables: duplicate underflow at hook 2 [ 612.317263][T24906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5226'. [ 612.698995][T24922] netlink: 'syz.0.5232': attribute type 6 has an invalid length. [ 613.320160][T24938] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 613.852245][T24973] 8021q: VLANs not supported on gre0 [ 614.053559][T24994] batadv0: entered promiscuous mode [ 614.079550][T24994] bond0: entered promiscuous mode [ 614.092330][T24994] bond_slave_0: entered promiscuous mode [ 614.108746][T24994] bond_slave_1: entered promiscuous mode [ 614.122571][T24994] geneve1: entered promiscuous mode [ 614.130461][T24994] bond0: left promiscuous mode [ 614.135315][T24994] bond_slave_0: left promiscuous mode [ 614.145054][T24994] bond_slave_1: left promiscuous mode [ 614.154008][T24994] geneve1: left promiscuous mode [ 614.164094][T24994] batadv0: left promiscuous mode [ 614.180654][T24998] __nla_validate_parse: 5 callbacks suppressed [ 614.180675][T24998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5255'. [ 614.207943][T25004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5259'. [ 614.233476][T24997] vlan5: entered allmulticast mode [ 614.243561][T24997] bridge_slave_0: entered allmulticast mode [ 614.395248][T25008] syzkaller0: entered promiscuous mode [ 614.428579][T25008] syzkaller0: entered allmulticast mode [ 614.541662][T25014] ip6erspan0: entered promiscuous mode [ 614.554247][T25014] ip6erspan0: entered allmulticast mode [ 614.914894][T25033] bond5: Unable to set down delay as MII monitoring is disabled [ 614.931703][T25033] bond5 (unregistering): Released all slaves [ 614.934512][T25041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5268'. [ 614.963032][T25043] netlink: 'syz.1.5270': attribute type 1 has an invalid length. [ 614.982967][T25036] macvtap4: entered promiscuous mode [ 614.992975][T25036] macvtap4: entered allmulticast mode [ 615.038900][T25043] bond6: entered promiscuous mode [ 615.044659][T25043] 8021q: adding VLAN 0 to HW filter on device bond6 [ 615.086351][T25036] netlink: 'syz.4.5267': attribute type 7 has an invalid length. [ 615.128863][T25041] 8021q: adding VLAN 0 to HW filter on device bond3 [ 615.139440][T25054] netlink: 'syz.2.5271': attribute type 1 has an invalid length. [ 615.281383][T25054] 8021q: adding VLAN 0 to HW filter on device bond5 [ 615.611468][T25080] netlink: 'syz.4.5278': attribute type 11 has an invalid length. [ 615.614016][T25075] syzkaller1: entered promiscuous mode [ 615.619608][T25080] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5278'. [ 615.651195][T25075] syzkaller1: entered allmulticast mode [ 616.183672][T25109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5289'. [ 616.200439][T25110] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5289'. [ 616.260408][T25114] netlink: 'syz.0.5290': attribute type 3 has an invalid length. [ 616.302763][T25114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5290'. [ 616.318539][T25118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5293'. [ 616.331264][T25114] netlink: 684 bytes leftover after parsing attributes in process `syz.0.5290'. [ 616.376680][T10626] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.400962][T10626] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.474596][T25125] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5296'. [ 616.884619][T25124] team0 (unregistering): Port device team_slave_0 removed [ 616.904504][T25124] team0 (unregistering): Port device team_slave_1 removed [ 616.924408][T25124] team0 (unregistering): Port device macvlan1 removed [ 617.122547][T25156] netlink: 'syz.2.5304': attribute type 10 has an invalid length. [ 617.131204][T25156] mac80211_hwsim hwsim28 wlan1: left allmulticast mode [ 617.225163][T25158] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 617.245486][T25164] netlink: 'syz.2.5308': attribute type 2 has an invalid length. [ 617.259409][T25166] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 617.280695][T25161] dvmrp0: left allmulticast mode [ 617.706996][T25188] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 617.707955][T25188] xt_NFQUEUE: number of total queues is 0 [ 617.835305][T25186] sctp: [Deprecated]: syz.2.5311 (pid 25186) Use of struct sctp_assoc_value in delayed_ack socket option. [ 617.835305][T25186] Use struct sctp_sack_info instead [ 618.485065][T25244] bpq0: left promiscuous mode [ 618.743755][T25266] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 618.791589][T25266] bond6: option lp_interval: invalid value (0) [ 618.800416][T25266] bond6: option lp_interval: allowed values 1 - 2147483647 [ 618.851675][T25266] bond6 (unregistering): Released all slaves [ 618.910875][T25278] netlink: 'syz.3.5331': attribute type 4 has an invalid length. [ 619.005064][T25285] tipc: Enabling of bearer rejected, failed to enable media [ 619.345088][T25300] __nla_validate_parse: 6 callbacks suppressed [ 619.345108][T25300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5337'. [ 619.387899][T25295] [ 619.390291][T25295] ====================================================== [ 619.397329][T25295] WARNING: possible circular locking dependency detected [ 619.404383][T25295] syzkaller #0 Not tainted [ 619.408818][T25295] ------------------------------------------------------ [ 619.415949][T25295] syz.0.5336/25295 is trying to acquire lock: [ 619.422226][T25295] ffff888024ed40c8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1e5/0x4c0 [ 619.431743][T25295] [ 619.431743][T25295] but task is already holding lock: [ 619.439134][T25295] ffff888024ed3b88 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 619.449427][T25295] [ 619.449427][T25295] which lock already depends on the new lock. [ 619.449427][T25295] [ 619.459857][T25295] [ 619.459857][T25295] the existing dependency chain (in reverse order) is: [ 619.468881][T25295] [ 619.468881][T25295] -> #6 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 619.477683][T25295] lock_acquire+0x120/0x360 [ 619.482862][T25295] blk_alloc_queue+0x538/0x620 [ 619.488536][T25295] __blk_mq_alloc_disk+0x15c/0x340 [ 619.494853][T25295] nbd_dev_add+0x46c/0xae0 [ 619.500260][T25295] nbd_init+0x168/0x1f0 [ 619.505564][T25295] do_one_initcall+0x233/0x820 [ 619.510905][T25295] do_initcall_level+0x104/0x190 [ 619.516505][T25295] do_initcalls+0x59/0xa0 [ 619.521676][T25295] kernel_init_freeable+0x334/0x4b0 [ 619.527596][T25295] kernel_init+0x1d/0x1d0 [ 619.532664][T25295] ret_from_fork+0x4bc/0x870 [ 619.537972][T25295] ret_from_fork_asm+0x1a/0x30 [ 619.543289][T25295] [ 619.543289][T25295] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 619.550541][T25295] lock_acquire+0x120/0x360 [ 619.555857][T25295] fs_reclaim_acquire+0x72/0x100 [ 619.561347][T25295] kmem_cache_alloc_node_noprof+0x48/0x710 [ 619.567709][T25295] __alloc_skb+0x112/0x2d0 [ 619.572658][T25295] __ip6_append_data+0x2c16/0x3f30 [ 619.578503][T25295] ip6_append_data+0x1c1/0x380 [ 619.583907][T25295] rawv6_sendmsg+0x1286/0x1830 [ 619.589311][T25295] __sock_sendmsg+0x19c/0x270 [ 619.594781][T25295] ____sys_sendmsg+0x505/0x830 [ 619.600161][T25295] ___sys_sendmsg+0x21f/0x2a0 [ 619.605367][T25295] __x64_sys_sendmsg+0x19b/0x260 [ 619.610910][T25295] do_syscall_64+0xfa/0xfa0 [ 619.615975][T25295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.622489][T25295] [ 619.622489][T25295] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 619.630698][T25295] lock_acquire+0x120/0x360 [ 619.636135][T25295] lock_sock_nested+0x48/0x100 [ 619.641985][T25295] inet_shutdown+0x6a/0x390 [ 619.647050][T25295] nbd_mark_nsock_dead+0x2e9/0x560 [ 619.652801][T25295] recv_work+0x2138/0x24f0 [ 619.657844][T25295] process_scheduled_works+0xae1/0x17b0 [ 619.663949][T25295] worker_thread+0x8a0/0xda0 [ 619.669161][T25295] kthread+0x711/0x8a0 [ 619.673762][T25295] ret_from_fork+0x4bc/0x870 [ 619.678980][T25295] ret_from_fork_asm+0x1a/0x30 [ 619.684362][T25295] [ 619.684362][T25295] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 619.692017][T25295] lock_acquire+0x120/0x360 [ 619.697051][T25295] __mutex_lock+0x187/0x1350 [ 619.702196][T25295] nbd_queue_rq+0x257/0xf10 [ 619.707317][T25295] blk_mq_dispatch_rq_list+0x4bd/0x1900 [ 619.713750][T25295] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 619.720722][T25295] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 619.727337][T25295] blk_mq_run_hw_queue+0x348/0x4f0 [ 619.733181][T25295] blk_mq_dispatch_list+0xd0c/0xe00 [ 619.738919][T25295] blk_mq_flush_plug_list+0x469/0x550 [ 619.744833][T25295] __blk_flush_plug+0x3d3/0x4b0 [ 619.750673][T25295] __submit_bio+0x2d3/0x5a0 [ 619.755725][T25295] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 619.761972][T25295] block_read_full_folio+0x599/0x830 [ 619.768501][T25295] filemap_read_folio+0x114/0x380 [ 619.774231][T25295] do_read_cache_folio+0x350/0x590 [ 619.780071][T25295] read_part_sector+0xb6/0x2b0 [ 619.785371][T25295] adfspart_check_ICS+0xa4/0xa50 [ 619.791107][T25295] bdev_disk_changed+0x75f/0x14b0 [ 619.796839][T25295] blkdev_get_whole+0x380/0x510 [ 619.802267][T25295] bdev_open+0x31e/0xd30 [ 619.807149][T25295] blkdev_open+0x457/0x600 [ 619.812276][T25295] do_dentry_open+0x953/0x13f0 [ 619.817565][T25295] vfs_open+0x3b/0x340 [ 619.822165][T25295] path_openat+0x2ee5/0x3830 [ 619.827720][T25295] do_filp_open+0x1fa/0x410 [ 619.833186][T25295] do_sys_openat2+0x121/0x1c0 [ 619.838502][T25295] __x64_sys_openat+0x138/0x170 [ 619.844368][T25295] do_syscall_64+0xfa/0xfa0 [ 619.849510][T25295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.856136][T25295] [ 619.856136][T25295] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 619.863463][T25295] lock_acquire+0x120/0x360 [ 619.868580][T25295] __mutex_lock+0x187/0x1350 [ 619.874052][T25295] nbd_queue_rq+0xc8/0xf10 [ 619.879086][T25295] blk_mq_dispatch_rq_list+0x4bd/0x1900 [ 619.885162][T25295] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 619.892021][T25295] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 619.898540][T25295] blk_mq_run_hw_queue+0x348/0x4f0 [ 619.904462][T25295] blk_mq_dispatch_list+0xd0c/0xe00 [ 619.910307][T25295] blk_mq_flush_plug_list+0x469/0x550 [ 619.916390][T25295] __blk_flush_plug+0x3d3/0x4b0 [ 619.921799][T25295] __submit_bio+0x2d3/0x5a0 [ 619.926925][T25295] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 619.933189][T25295] block_read_full_folio+0x599/0x830 [ 619.939139][T25295] filemap_read_folio+0x114/0x380 [ 619.944751][T25295] do_read_cache_folio+0x350/0x590 [ 619.950404][T25295] read_part_sector+0xb6/0x2b0 [ 619.955886][T25295] adfspart_check_ICS+0xa4/0xa50 [ 619.961373][T25295] bdev_disk_changed+0x75f/0x14b0 [ 619.967125][T25295] blkdev_get_whole+0x380/0x510 [ 619.973053][T25295] bdev_open+0x31e/0xd30 [ 619.977873][T25295] blkdev_open+0x457/0x600 [ 619.982856][T25295] do_dentry_open+0x953/0x13f0 [ 619.988157][T25295] vfs_open+0x3b/0x340 [ 619.992757][T25295] path_openat+0x2ee5/0x3830 [ 619.997917][T25295] do_filp_open+0x1fa/0x410 [ 620.003503][T25295] do_sys_openat2+0x121/0x1c0 [ 620.008730][T25295] __x64_sys_openat+0x138/0x170 [ 620.014370][T25295] do_syscall_64+0xfa/0xfa0 [ 620.019427][T25295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.025953][T25295] [ 620.025953][T25295] -> #1 (set->srcu){.+.+}-{0:0}: [ 620.033447][T25295] lock_sync+0xba/0x160 [ 620.038147][T25295] __synchronize_srcu+0x96/0x3a0 [ 620.043698][T25295] elevator_switch+0x12b/0x640 [ 620.049005][T25295] elevator_change+0x315/0x4c0 [ 620.054311][T25295] elevator_set_default+0x186/0x260 [ 620.060151][T25295] blk_register_queue+0x34e/0x3f0 [ 620.065772][T25295] __add_disk+0x677/0xd50 [ 620.071241][T25295] add_disk_fwnode+0xfc/0x480 [ 620.076658][T25295] nbd_dev_add+0x717/0xae0 [ 620.081719][T25295] nbd_init+0x168/0x1f0 [ 620.086406][T25295] do_one_initcall+0x233/0x820 [ 620.091788][T25295] do_initcall_level+0x104/0x190 [ 620.097351][T25295] do_initcalls+0x59/0xa0 [ 620.102211][T25295] kernel_init_freeable+0x334/0x4b0 [ 620.108052][T25295] kernel_init+0x1d/0x1d0 [ 620.113116][T25295] ret_from_fork+0x4bc/0x870 [ 620.118550][T25295] ret_from_fork_asm+0x1a/0x30 [ 620.123854][T25295] [ 620.123854][T25295] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 620.131955][T25295] validate_chain+0xb9b/0x2140 [ 620.137883][T25295] __lock_acquire+0xab9/0xd20 [ 620.143108][T25295] lock_acquire+0x120/0x360 [ 620.148328][T25295] __mutex_lock+0x187/0x1350 [ 620.153478][T25295] elevator_change+0x1e5/0x4c0 [ 620.158825][T25295] elevator_set_none+0x42/0xb0 [ 620.164127][T25295] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 620.170471][T25295] nbd_start_device+0x17f/0xb10 [ 620.175954][T25295] nbd_genl_connect+0x135b/0x18f0 [ 620.181728][T25295] genl_family_rcv_msg_doit+0x212/0x300 [ 620.187988][T25295] genl_rcv_msg+0x60e/0x790 [ 620.193025][T25295] netlink_rcv_skb+0x205/0x470 [ 620.198537][T25295] genl_rcv+0x28/0x40 [ 620.203331][T25295] netlink_unicast+0x82f/0x9e0 [ 620.209106][T25295] netlink_sendmsg+0x805/0xb30 [ 620.215010][T25295] __sock_sendmsg+0x21c/0x270 [ 620.220252][T25295] ____sys_sendmsg+0x505/0x830 [ 620.225615][T25295] ___sys_sendmsg+0x21f/0x2a0 [ 620.230962][T25295] __x64_sys_sendmsg+0x19b/0x260 [ 620.236614][T25295] do_syscall_64+0xfa/0xfa0 [ 620.242278][T25295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.249182][T25295] [ 620.249182][T25295] other info that might help us debug this: [ 620.249182][T25295] [ 620.259899][T25295] Chain exists of: [ 620.259899][T25295] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#55 [ 620.259899][T25295] [ 620.273749][T25295] Possible unsafe locking scenario: [ 620.273749][T25295] [ 620.281900][T25295] CPU0 CPU1 [ 620.287357][T25295] ---- ---- [ 620.292724][T25295] lock(&q->q_usage_counter(io)#55); [ 620.298143][T25295] lock(fs_reclaim); [ 620.304956][T25295] lock(&q->q_usage_counter(io)#55); [ 620.313396][T25295] lock(&q->elevator_lock); [ 620.318095][T25295] [ 620.318095][T25295] *** DEADLOCK *** [ 620.318095][T25295] [ 620.326244][T25295] 6 locks held by syz.0.5336/25295: [ 620.331648][T25295] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 620.340723][T25295] #1: ffffffff8f545228 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 620.350406][T25295] #2: ffff88802541b1c8 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1ab0 [ 620.361832][T25295] #3: ffff88802541b0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1ab0 [ 620.372908][T25295] #4: ffff888024ed3b88 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 620.383573][T25295] #5: ffff888024ed3bc0 (&q->q_usage_counter(queue)#39){+.+.}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 620.394577][T25295] [ 620.394577][T25295] stack backtrace: [ 620.400507][T25295] CPU: 0 UID: 0 PID: 25295 Comm: syz.0.5336 Not tainted syzkaller #0 PREEMPT(full) [ 620.400537][T25295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 620.400549][T25295] Call Trace: [ 620.400559][T25295] [ 620.400567][T25295] dump_stack_lvl+0x189/0x250 [ 620.400590][T25295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 620.400607][T25295] ? __pfx__printk+0x10/0x10 [ 620.400626][T25295] ? print_lock_name+0xde/0x100 [ 620.400643][T25295] print_circular_bug+0x2ee/0x310 [ 620.400666][T25295] check_noncircular+0x134/0x160 [ 620.400690][T25295] validate_chain+0xb9b/0x2140 [ 620.400719][T25295] __lock_acquire+0xab9/0xd20 [ 620.400738][T25295] ? elevator_change+0x1e5/0x4c0 [ 620.400760][T25295] lock_acquire+0x120/0x360 [ 620.400775][T25295] ? elevator_change+0x1e5/0x4c0 [ 620.400809][T25295] __mutex_lock+0x187/0x1350 [ 620.400832][T25295] ? elevator_change+0x1e5/0x4c0 [ 620.400855][T25295] ? xa_find_after+0xae/0x430 [ 620.400881][T25295] ? xa_find_after+0x402/0x430 [ 620.400903][T25295] ? elevator_change+0x1e5/0x4c0 [ 620.400924][T25295] ? xa_find_after+0xae/0x430 [ 620.400948][T25295] ? __pfx___mutex_lock+0x10/0x10 [ 620.400971][T25295] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 620.401002][T25295] elevator_change+0x1e5/0x4c0 [ 620.401028][T25295] elevator_set_none+0x42/0xb0 [ 620.401052][T25295] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 620.401088][T25295] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 620.401123][T25295] ? sysfs_add_file_mode_ns+0x259/0x300 [ 620.401144][T25295] nbd_start_device+0x17f/0xb10 [ 620.401170][T25295] ? device_create_file+0xf4/0x1c0 [ 620.401195][T25295] nbd_genl_connect+0x135b/0x18f0 [ 620.401221][T25295] ? __pfx_nbd_genl_connect+0x10/0x10 [ 620.401244][T25295] ? rcu_is_watching+0x15/0xb0 [ 620.401265][T25295] ? __nla_parse+0x40/0x60 [ 620.401290][T25295] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 620.401318][T25295] genl_family_rcv_msg_doit+0x212/0x300 [ 620.401345][T25295] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 620.401374][T25295] ? stack_trace_save+0x9c/0xe0 [ 620.401399][T25295] genl_rcv_msg+0x60e/0x790 [ 620.401423][T25295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 620.401445][T25295] ? __pfx_nbd_genl_connect+0x10/0x10 [ 620.401472][T25295] netlink_rcv_skb+0x205/0x470 [ 620.401488][T25295] ? __lock_acquire+0xab9/0xd20 [ 620.401503][T25295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 620.401526][T25295] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 620.401552][T25295] ? down_read+0x1ad/0x2e0 [ 620.401576][T25295] genl_rcv+0x28/0x40 [ 620.401596][T25295] netlink_unicast+0x82f/0x9e0 [ 620.401625][T25295] ? __pfx_netlink_unicast+0x10/0x10 [ 620.401651][T25295] ? netlink_sendmsg+0x642/0xb30 [ 620.401667][T25295] ? skb_put+0x11b/0x210 [ 620.401686][T25295] netlink_sendmsg+0x805/0xb30 [ 620.401707][T25295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.401726][T25295] ? aa_sock_msg_perm+0xf1/0x1d0 [ 620.401750][T25295] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 620.401767][T25295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.401784][T25295] __sock_sendmsg+0x21c/0x270 [ 620.401815][T25295] ____sys_sendmsg+0x505/0x830 [ 620.401837][T25295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 620.401860][T25295] ? import_iovec+0x74/0xa0 [ 620.401877][T25295] ___sys_sendmsg+0x21f/0x2a0 [ 620.401897][T25295] ? __pfx____sys_sendmsg+0x10/0x10 [ 620.401932][T25295] ? __fget_files+0x2a/0x420 [ 620.401946][T25295] ? __fget_files+0x3a0/0x420 [ 620.401965][T25295] __x64_sys_sendmsg+0x19b/0x260 [ 620.401986][T25295] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 620.402013][T25295] ? do_syscall_64+0xbe/0xfa0 [ 620.402034][T25295] do_syscall_64+0xfa/0xfa0 [ 620.402054][T25295] ? lockdep_hardirqs_on+0x9c/0x150 [ 620.402074][T25295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.402091][T25295] ? clear_bhb_loop+0x60/0xb0 [ 620.402110][T25295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.402126][T25295] RIP: 0033:0x7ff52d98eec9 [ 620.402142][T25295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.402158][T25295] RSP: 002b:00007ff52e8cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 620.402177][T25295] RAX: ffffffffffffffda RBX: 00007ff52dbe5fa0 RCX: 00007ff52d98eec9 [ 620.402190][T25295] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 620.402201][T25295] RBP: 00007ff52da11f91 R08: 0000000000000000 R09: 0000000000000000 [ 620.402212][T25295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.402222][T25295] R13: 00007ff52dbe6038 R14: 00007ff52dbe5fa0 R15: 00007ffd3d278f78 [ 620.402242][T25295] [ 620.978704][T25295] nbd6: detected capacity change from 0 to 127 [ 621.187379][T25296] nbd7: detected capacity change from 0 to 127 [ 621.195240][T25312] netlink: 'syz.1.5338': attribute type 1 has an invalid length. [ 621.203432][T25312] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5338'. [ 621.213186][ T5840] block nbd6: Receive control failed (result -104) [ 621.219918][ T5843] block nbd6: Receive control failed (result -32) [ 621.219985][T17120] block nbd7: Receive control failed (result -32) [ 621.226690][T17083] block nbd7: Receive control failed (result -32)