last executing test programs: 3.35748775s ago: executing program 1 (id=5153): socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x75, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) r2 = socket(0x1d, 0x2, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13, @ANYRES64], 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffc}) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x8, 0x6, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x1, 0x5, 0x5, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}}) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x7, 0x8}, 0xc) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x210, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @multicast2, 0xff000000, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e20], [0x4e22, 0x4e24], [0x40, 0x3, 0x6, 0x8, 0x34, 0x0, 0x0, 0x5, 0x8000, 0x81, 0xfffffffd, 0xfffffffe, 0x8000, 0x7ff, 0x44, 0x58639972, 0x9, 0x10, 0x8, 0x3ff, 0xfffffff2, 0x91, 0x9, 0x1, 0x1ca8, 0xb96d, 0x100, 0x9, 0x80000000, 0x8, 0xe, 0x6, 0x26c, 0xb9ae, 0x80, 0x400, 0x99d8, 0x1, 0x10000, 0x7, 0x6, 0x3, 0x9, 0x5, 0xad3, 0x6, 0xff, 0x8, 0x8, 0x1, 0x0, 0x7, 0xb, 0xd, 0x6, 0xc, 0x5, 0x40000000, 0x10, 0x3, 0x3, 0x78, 0x9, 0x9], 0x0, [{0x0, 0x0, 0xd5}, {0x0, 0x51, 0x6}, {0x3, 0x3, 0xa}, {0x8, 0x80, 0x8}], 0x0, 0x4}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @broadcast, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@private=0xa010103, @loopback, 0xff000000, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x62, 0x1, 0x1}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0xd, 0x8, [0x8, 0x27, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x6, 0x31, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r7, &(0x7f0000000300)="63f54ac9b873b6b2ac58bceaddd8f66774505f2789b9867494636e6ad083306f82cbfa7a3544bbfb7af40683e4a0bcc0aad7b6024b00fd6fbae3aba4e16e33c3a095733ce32a5d93140d264b2724bbbdaf4dfee9667e5effde2688c6bc4d9842506baf7750af6201e621cf3ade701b0d4cf865cb55d4febaa3f770d0547bf742faf18226dad6ff69e4e726dd44c04f1863d1db56", &(0x7f00000003c0)=""/26, 0x4}, 0x20) sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x189576d0, 0x56d, 0x2, 0x10082}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000016000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000540)={r7, &(0x7f00000001c0)='\x00', 0x400402, &(0x7f0000000240)={@align=0x3, {0xc156, 0x6, 0x8, 0x7095232b}}, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x7}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r10, 0x110, 0x4, &(0x7f0000000580)=0x2, 0x4) recvmmsg(r4, &(0x7f0000003940)=[{{&(0x7f0000000900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000037c0)=[{&(0x7f0000000980)=""/194, 0xc2}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/240, 0xf0}, {&(0x7f0000002440)=""/134, 0x86}, {&(0x7f0000002500)=""/217, 0xd9}, {&(0x7f0000002600)=""/203, 0xcb}, {&(0x7f0000002700)=""/17, 0x11}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/115, 0x73}], 0x9, &(0x7f0000003880)=""/185, 0xb9}, 0x5}], 0x1, 0x0, 0x0) ioctl(r2, 0x65, &(0x7f0000000440)="6cb564982755c20f8ba45a814ec908007ff49896986456b13ffc76837cd8ed40c4cf9ef3a72e1686da47e49150e5ab47922ad6e552b7431b65ac0348a8896fb1eac78e3c99bf307bf3f2de862207ff83d8014f62eca5ee232b306a6b05") r11 = socket$inet_udplite(0x2, 0x2, 0x88) listen(r11, 0x0) ioctl(r3, 0x8b22, &(0x7f0000000040)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x0, 0x1000000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x400, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) 1.681159007s ago: executing program 1 (id=5161): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r2 = socket(0x2, 0x80805, 0x0) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) (async) close(0x3) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xffffffffffffff60, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (rerun: 32) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000040)={r4, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000000)=0x84) (async, rerun: 64) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100), &(0x7f0000000180)=0x4) (async, rerun: 64) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_ENABLE_SE(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="dfff", @ANYRES16=r9, @ANYBLOB="456d2dbd7000fbdbdf251100000008000100", @ANYRES32=0x0, @ANYBLOB="08001500020000000800150002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x440c0) (async, rerun: 32) r10 = openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) (rerun: 32) write$cgroup_subtree(r10, &(0x7f0000000180)=ANY=[@ANYBLOB='-1'], 0x27) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0xffffffffffffffff, @ANYBLOB="0100000000070000000009000000780003800800030004000000060007004e21000014000600fc010600000000010000000000000001060007004e20000008000100010000001400020076657468315f746f5f7465616d000000050008000100000008000500e0"], 0x8c}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESOCT=r11, @ANYBLOB="00032dbd7000fbdbdf250b0000001400028008000700030000000800060000000000cc14991b71e1b487a440f593ea11fa87559f1a181f25638d864523786e0975ad6be3492f744a83c9bec3dd0ce76bd5ddbf2411ae035c0dba15a6d86c593fa7481a8e92467d1f8ff439d835f6a56e4a3dee6eed2cf1c5ba431fb0d33123f27aa573a52d28b09bd9737508effa1bdd95daac99dd2ece2d83b31340f6923519ccf3c96f20dc0774044946fa23d84ba9b05fa1cf8421f444c8239fd0590196cffd99d8fb7d04c3b1594e6f821fac69eb1cc1c90a609f9d666c9f93798bb15d0410877f0c4e22b84dfdc2e42204c234ea2309b773"], 0x28}, 0x1, 0x0, 0x0, 0x20044040}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@deltaction={0x14, 0x31, 0x4, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10000) (rerun: 64) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) (async, rerun: 64) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x80000008, 0x10003}) (async, rerun: 64) socket$xdp(0x2c, 0x3, 0x0) 1.559182931s ago: executing program 2 (id=5162): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) poll(&(0x7f0000000040)=[{r0, 0x16842e9bd142d0d5}], 0x1, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0x503}, 0x18}}, 0x0) 1.530420997s ago: executing program 0 (id=5163): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)={0x13, 0x18, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4}]}, 0x18}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf25030040000800010000000000100007800c00018008000100", @ANYRES8=r6], 0x2c}, 0x1, 0x0, 0x0, 0x150}, 0x20008040) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f03000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) close(r2) 1.529989971s ago: executing program 3 (id=5164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000400)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5, 0x4, 0x6, 0xfffffffa}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x1, 0xffffffffffffffff, r1], &(0x7f0000000700)=[{0x4, 0x3, 0x6, 0x3}, {0x3, 0x3, 0x9, 0x9}, {0x0, 0x1, 0x5}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002740)={r6, 0x0, 0x33, 0x0, &(0x7f0000000a80)="a9ad6bc6e45e4bc0cc0afa0b9d22cca4d7f6620c882be21f52d74b8444d77fd97c16f3564586482051e4fe0b6d8a85dd833b34", &(0x7f0000000ac0), 0x4, 0x0, 0x1000, 0x51, &(0x7f00000016c0)="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", &(0x7f00000026c0)="bfdda0f9293d548e373b04064299763c10a59fadc60de9222235e9126a8467025fb29b626e194f195771ba9bd604ad35f2027f1221475add3387045902c0b67ebd9c23f829e91b4ca95db724cb3367190a", 0x5, 0x0, 0xe1}, 0x50) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000300)={0x4, &(0x7f0000000280)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @dev}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@ipv4_newnexthop={0x44, 0x68, 0x400, 0x70bd26, 0x25dfdbff, {0x2, 0x0, 0x3, 0x0, 0x6}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@private=0xa010100}, @NHA_ID={0x8}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073797a32000000000900010073797a300000000008000a40000000042c000000080a01080000000000000000010000000900020073797a32000004000900010073797a30"], 0xa8}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) (async) listen(r3, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) (async) accept4$unix(r3, 0x0, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000400)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5, 0x4, 0x6, 0xfffffffa}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x1, 0xffffffffffffffff, r1], &(0x7f0000000700)=[{0x4, 0x3, 0x6, 0x3}, {0x3, 0x3, 0x9, 0x9}, {0x0, 0x1, 0x5}], 0x10, 0x7}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002740)={r6, 0x0, 0x33, 0x0, &(0x7f0000000a80)="a9ad6bc6e45e4bc0cc0afa0b9d22cca4d7f6620c882be21f52d74b8444d77fd97c16f3564586482051e4fe0b6d8a85dd833b34", &(0x7f0000000ac0), 0x4, 0x0, 0x1000, 0x51, &(0x7f00000016c0)="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", &(0x7f00000026c0)="bfdda0f9293d548e373b04064299763c10a59fadc60de9222235e9126a8467025fb29b626e194f195771ba9bd604ad35f2027f1221475add3387045902c0b67ebd9c23f829e91b4ca95db724cb3367190a", 0x5, 0x0, 0xe1}, 0x50) (async) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000300)={0x4, &(0x7f0000000280)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @dev}]}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@ipv4_newnexthop={0x44, 0x68, 0x400, 0x70bd26, 0x25dfdbff, {0x2, 0x0, 0x3, 0x0, 0x6}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@private=0xa010100}, @NHA_ID={0x8}, @NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073797a32000000000900010073797a300000000008000a40000000042c000000080a01080000000000000000010000000900020073797a32000004000900010073797a30"], 0xa8}}, 0x0) (async) 1.321330638s ago: executing program 2 (id=5166): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000480)={@broadcast, @local, @val={@val={0x88a8, 0x1, 0x1, 0x3}, {0x8100, 0x0, 0x1, 0x2}}, {@canfd={0xd, {{0x2, 0x1, 0x0, 0x1}, 0x24, 0x2, 0x0, 0x0, "f11067288744afb47b6e15a8a13826c56b2019d7855962891508b2e7a118e6c6de1d1fc1bb1b6ac2c7ffeb05cde2ebd6df8c86a88e53a3a92438444892d206a6"}}}}, &(0x7f0000000500)={0x0, 0x3, [0x426, 0xf81, 0x89c, 0x299]}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@delnexthop={0x60, 0x69, 0x400, 0x70bd25, 0x25dfdbff, {}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0xfffffffe}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1000002}, {0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x80001}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}]}, 0x60}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r6 = socket(0xc, 0x5, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000380)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002000000acee14aa7f000001"], 0x18) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r8) sendmsg$IEEE802154_START_REQ(r8, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x3c, r9, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x14}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r11, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {}, {0xfff5}}}, 0x24}}, 0x0) 1.291848682s ago: executing program 4 (id=5167): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000400)=0x100, 0x4) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200000000000000000000007000014f194e20"], 0x52) 1.260235212s ago: executing program 1 (id=5168): socketpair(0x2b, 0x800, 0xfffffff7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r1, 0x400, 0x70bd29, 0x25dfdbff}, 0x14}}, 0x40001) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x12, 0x17}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) 1.140862768s ago: executing program 3 (id=5169): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r4}}, 0x40) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=r4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) pipe(&(0x7f0000000600)) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getpid() (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r4}}, 0x40) (async) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=r4) (async) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) (async) 1.109773248s ago: executing program 0 (id=5170): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x0, 0x0, 0x0, 0x2}}) 1.036697523s ago: executing program 4 (id=5171): r0 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b703000000090001db020a000000000007000000000000009500000000000a6682f0a61b01e4c027d252f602901b7cbbd5b9097bb8334a5541cf9e345af317e35f0ad53d857708f974879196ac07622b10548ccd2028eaf7610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd06ee929a27a5dedf301650960d8ae1cf339f6bda65bf6594c2839dcea6e419c9b8b7d17b9e49f392c857ccb0a3f64a59a87332ffa41c17b82700789b163bbc8507f171b46d2c569e75810e60a06b6f69ef41ca39a200"/212], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x2, &(0x7f000000cf3d)=""/195}, 0x23) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0xdd86, r2, 0x8000017}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000680)="8f4cd2c8fd09865e53d25ad3bfd9", 0xe}], 0x1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r7, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6, 0x1}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r7, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6, 0x1}, 0x20) close(r5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r9, 0x15b4}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r10, &(0x7f00000000c0), 0x0}, 0x20) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r10, &(0x7f00000000c0), 0x0}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x630, 0x1b8, 0x0, 0x428, 0x0, 0x0, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x8}}}, {{@ipv6={@mcast1, @local, [], [], 'xfrm0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x6, 0x72}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x2280], 0x4, 0x2}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) r11 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_int(r11, 0x1, 0x2b, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$sock_int(r11, 0x1, 0x2b, &(0x7f0000000000)=0x1, 0x4) sendmsg$sock(r11, &(0x7f0000000840)={&(0x7f0000000340)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x3, 0x4}}, 0x80, 0x0}, 0x40812) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd811000000140012800c0001006d6163767461700014000380080001"], 0x3c}}, 0x0) 973.484079ms ago: executing program 3 (id=5172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000010471"], 0x24}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f00000000c0)=0x3, 0x4) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000080)=0x3, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0xd1383000) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x2}}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x4}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000ffdbdf254400000008000300", @ANYRES32=r12, @ANYBLOB="0a001800240000000303000008002600f8160000"], 0x30}, 0x1, 0x0, 0x0, 0x40c5}, 0x44044) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x34, r9, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20004005) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) 885.849994ms ago: executing program 0 (id=5173): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006008847"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20048800) 873.009519ms ago: executing program 2 (id=5174): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x6}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x24, 0xff, 0x75}, 0x2c) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x89e1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8000000003c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r3, r3, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000040)=[@window={0x3, 0x6, 0x5}, @sack_perm, @window={0x3, 0xb}, @mss={0x2, 0x4}, @mss={0x2, 0x1}, @mss={0x2, 0x1ff}], 0x6) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 809.193522ms ago: executing program 1 (id=5175): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001540)=@newtfilter={0x1208, 0x2c, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x11d8, 0x2, [@TCA_CGROUP_POLICE={0x414, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000000, 0x101, 0x100, 0x4c150bd1, 0x7, 0x20eb77c9, 0x80000001, 0x3, 0x4, 0x125, 0x9, 0x9, 0x7, 0x401, 0x81, 0x7, 0x80000001, 0x9, 0xfffffbff, 0x0, 0x5, 0x4, 0x51c, 0x6, 0x0, 0x0, 0x4, 0x1d5f, 0x7fffffff, 0x3, 0x7fff, 0x7f, 0x2, 0xd6, 0x9, 0x8, 0x1, 0x5, 0xb2e4, 0x0, 0x0, 0x2, 0x9, 0x3, 0x1, 0x6, 0x6, 0xb, 0xfffffffe, 0x6, 0xfffffff7, 0x3, 0x100, 0xd, 0x1, 0x4, 0x5, 0xffffffb7, 0x5, 0xa61, 0x2, 0x8, 0x4, 0x6, 0x3b, 0x1, 0xb56, 0x3ff, 0x9, 0x7, 0xffffffff, 0x6, 0x8000, 0x9, 0x1, 0x3, 0x2, 0x5, 0x1, 0x9ae, 0x2, 0x2, 0x8, 0x2ff1, 0x24d, 0x3, 0x0, 0x0, 0x390, 0xd, 0x5c, 0x6, 0x3, 0xff, 0x9, 0x5, 0x8, 0x0, 0x6, 0x3, 0x6, 0xe, 0x3, 0x8aa, 0x0, 0x6, 0x3, 0x7f, 0x30000000, 0x2, 0xffff, 0x8761, 0xfffffff8, 0x58fd, 0x0, 0x4, 0xffffff5c, 0x7, 0x10001, 0x1, 0x8, 0x80000001, 0x8, 0x4c32, 0x10000, 0x80000000, 0x9, 0xc, 0xe, 0x800, 0x7fffffff, 0x917, 0x50db, 0x1, 0x3, 0x102, 0x8, 0xffff, 0xfffffff8, 0x4, 0xe, 0x9, 0xfffffffe, 0xfffffff5, 0x3, 0xfffff745, 0x0, 0x2, 0x492, 0x8, 0x1, 0x2, 0x10, 0x7ff, 0x5, 0x171c0000, 0x6, 0x7, 0x81, 0x5, 0x4, 0x1, 0xcc1e, 0x3, 0xffffffff, 0x7fff, 0x6, 0xffffffff, 0x2e1fde27, 0x80, 0x0, 0x7fff, 0x5, 0x677b, 0x1, 0x0, 0x1, 0x2, 0x734, 0x80, 0x7fff, 0x6, 0x9, 0x6, 0x4, 0x14, 0xfffffffe, 0xfffff122, 0x644, 0x1, 0x1, 0x7, 0xfffeffff, 0x1, 0x7, 0x8, 0xff, 0x9a, 0xaa, 0x400, 0x3, 0xfff, 0x400, 0x7, 0x0, 0x9, 0x2, 0x8, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1429a414, 0x0, 0x3, 0x1, 0x10001, 0x5, 0x2, 0x5a87f453, 0x9, 0x8001, 0x1, 0x7ff, 0x179, 0x8, 0x3f, 0x6, 0xa, 0x6, 0x2f, 0x4, 0xfffffffe, 0x2, 0x81, 0x171da000, 0x2, 0xfffffffa, 0x9, 0x0, 0x1b54, 0x0, 0x6, 0x8, 0xff, 0xb, 0x8, 0x7f, 0x10, 0x2, 0x8, 0x1, 0xa, 0x7fffffff, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000001}]}, @TCA_CGROUP_EMATCHES={0x170, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x108, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x6}, {0x4, 0xd21, 0xfff8, 0x2, 0x1, 0x1, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x8, 0x2, 0x8}, {0x2, 0x6, 0x1, "07f79343257c"}}}, @TCF_EM_META={0xc0, 0x1, 0x0, 0x0, {{0x44a, 0x4, 0x7ff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x7f, 0x1}, {0x6f34, 0x4, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x0, 0x2}, {0x10, 0x4, 0x1}}}, @TCA_EM_META_LVALUE={0x1a, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="c203c4e572", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="569be1a4", @TCF_META_TYPE_VAR="c7c4392bd0"]}, @TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="1c"]}, @TCA_EM_META_LVALUE={0x24, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="452315ae68b7f5985131", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="1c1207a7d88883b0", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="d65e"]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="4906c8", @TCF_META_TYPE_VAR='k']}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_VAR="6c4b5c09bb386a1339", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="c4fa4a6ba9", @TCF_META_TYPE_VAR="c1afcc2a258e"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="5d52be283132", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x6]}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x4, 0x2, 0x8}, {0x7, 0x2, 0x1, "bf45"}}}]}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x3, 0xfffc}, {0x7, 0x6, 0x8, 0xffffffff}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x200, 0x3, 0x100}, {0x5, 0x1, 0x9, 0xfffffffd}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x400, 0x1, 0x40}, {0x80000001, 0x4, 0x6, 0x3, 0x1, 0x2}}}]}]}, @TCA_CGROUP_EMATCHES={0xb90, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x130, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x68, 0x3, 0x0, 0x0, {{0x0, 0x0, 0x3}, "b6bb7558c30d1e30349543f4b7f7f269b79de2483a3770d7cee837e949aff039b07477b6b93ab2023670edfaa01cd6e1beb72c00028d223233df1673b18206635d9eb755148892f399932bb3257c4e43fea7a41ddfd0bc135e60"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x5}, {{0x2, 0x0, 0x1, 0x1}, {0x0, 0x1}}}}, @TCF_EM_IPT={0x7c, 0x1, 0x0, 0x0, {{0x6, 0x9, 0x401}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x54, 0x5, "ddaa5781ae46c952e929da4684162fd725eb1b71e9e4b3937b544613d7f717f58caf69d60fc3547db572bea881c063f47f0634d3450414494cf04eb9fe412d6b534b4e76d481ae4f2264629faf28c1b4"}]}}, @TCF_EM_IPT={0x20, 0x2, 0x0, 0x0, {{0x1, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6}, {{0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0xf8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xf4, 0x3, 0x0, 0x0, {{0xf7d, 0x0, 0xfffe}, "77b43ca64941636e68937900f843166ab7b9d64ecbd2d2eeba3ec315c7c0d01fed942af1d659d2920df886c0074ae541fb65261a77c51d9fe6db2a5d52497c73090f17965b1435b7c3d0e65742b170d5c977ffd05f289c0c909816e1654861c742aabfd5d8a6a4b884bad0eb7b9b2fa88894edcb455821307cedb8e68d974ee2547ac87b3e51134ba99b25b098c8a2380894dbadb7d7e8d72c7bf6c9e689664b43883297fe309e64d55c37852dbf89b964c10dcd71f561af0afb4ac35c3c4214e5835ef7eb0ae7a9c4da79057bc7b08eb5e6f45a6a78b857d9daed8ee08797ddafd7224b4e55"}}]}, @TCA_EMATCH_TREE_LIST={0x22c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xfbff, 0x3, 0x47b}, {0x6, 0xf, 0x6, 0x12d}}}, @TCF_EM_CONTAINER={0x78, 0x2, 0x0, 0x0, {{0xa10, 0x0, 0x9df2}, "f986e87da09c5610ced7da6da0df3bed9f13ac966d52da34d6124a7670f81adf06c7b1a7717d4d28feda569afa9270a0e17964303dad78d3bfb324315bc672197d15ba77185d75b922f539bfbd740aad14ad67710d27443995d460a1cb7d540f005580ea7095b79799"}}, @TCF_EM_META={0xa0, 0x3, 0x0, 0x0, {{0x0, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x2a, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="4a14", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x4, 0x1}, {0xe, 0xc, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x7, 0x1}, {0xfffb, 0x6, 0x2}}}, @TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_VAR="16356da9a8f0a2", @TCF_META_TYPE_VAR="2bad9f63206a", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="6f00c23f", @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0x1f, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="e2", @TCF_META_TYPE_VAR="0c43bb57ec", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="c0"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xff8c, 0x9, 0x3}, {0x8667, 0x80}}}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3ff, 0x8, 0xb14d}, {0x0, 0x1, 0x6}}}, @TCF_EM_CONTAINER={0xd4, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x93a2}, "eccf86c20de71902f4d3dfa1dfc1af7b2095a57c5c8822e9ed5080ae763fe1c2de095ed2dd30a8a926812f782aa5722b92f11c3736a3c2f0b1d05ccd4865c6afec54de76d71361d12f9520c8baa0286c5baace88b863cac11a77d5dd7ec1087fead49ea44cd71d540fb57b52f82cee4d7dfd396bcde702d908353d359176c36fe902deba97d072a13403865ff1c6fff4d1abba898cbd600ec57ad0a5cf0aee33d7465825370dd61c966a93f161b4ea5a77d47713bfff49a60946cffa36a38132175f8fde34"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8001, 0x8, 0x200}, {0x4, 0x0, 0x6}}}]}, @TCA_EMATCH_TREE_LIST={0x480, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc8, 0x3, 0x0, 0x0, {{0x800, 0x4, 0x8000}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xe, 0x8}, {0x4, 0x4}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x3}, {0x1, 0x8}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x7, 0x3}, {0x2, 0x5a, 0x2}}}, @TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="7ce1", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="b04599a2"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x7f}, {0x61, 0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x37, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="dc12ee", @TCF_META_TYPE_VAR="34bbc211af8b4345", @TCF_META_TYPE_VAR="d214be29a684b2cb", @TCF_META_TYPE_VAR="a1da2305", @TCF_META_TYPE_VAR="d03f445ec71d55", @TCF_META_TYPE_VAR="894cbfae9952c218b4", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x39, 0x3, [@TCF_META_TYPE_VAR="d9fc", @TCF_META_TYPE_VAR="2d31115a38db96", @TCF_META_TYPE_VAR="b30826271ec89f9324", @TCF_META_TYPE_VAR="6ce6aa4f21deb161a5ee", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="574ad1f6dca0c6deda", @TCF_META_TYPE_VAR="3425811ffd", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="6cdf80"]}]}}, @TCF_EM_META={0xa4, 0x2, 0x0, 0x0, {{0x4, 0x4, 0x2}, [@TCA_EM_META_LVALUE={0x3e, 0x2, [@TCF_META_TYPE_VAR="d4b82aaad769a6e1bc1b", @TCF_META_TYPE_VAR="404ac6ae", @TCF_META_TYPE_VAR="28ee31a91b1281", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="cdcfbcb9c9c8bcc3fc78", @TCF_META_TYPE_VAR="86d6bd9957", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="b477357219e88f833edf", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="55eeb2f729d765", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0xb, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="b41c02"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0xfb, 0x1}, {0xc, 0x8, 0x2}}}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="a215be55d6b4147285", @TCF_META_TYPE_INT=0x7]}]}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x6, 0x2, 0xfd6}, {0x800, 0x6, 0x0, "e448cd182d83"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x2, 0x7, 0x6}, {{0x0, 0x1}, {0x4, 0x1}}}}, @TCF_EM_IPT={0xa0, 0x2, 0x0, 0x0, {{0x7367, 0x9, 0xfa}, [@TCA_EM_IPT_MATCH_DATA={0x61, 0x5, "a0b3825a7dfa94bf0219897312bbe178f3156965322794c1543b59ec5eefdb5a63e891ddfaa69243c5e72a893d2172e2cc347ef256b02f2838cecdea8ae91648a38ba455f4c2ab09fd09b635f3e8a121dff9e3369956ebae264c3bdd62"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x10}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x7}, {0x0, 0x2, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9, 0x1, 0x6}, {0x9, 0x8, 0x816, 0x0, 0x0, 0x1, 0x2}}}, @TCF_EM_IPT={0x124, 0x2, 0x0, 0x0, {{0x3, 0x9, 0x401}, [@TCA_EM_IPT_MATCH_DATA={0x8e, 0x5, "1826fc09a7e4d6961a7cb13b8f01c6cc553ae9b7e93a591717514a62c6e8dd90f9af7827b80f0347eddb0bf6c755427be22eba9ab7d0f776e873721e8bf00b32ff093928824653a39fe3bbed6b24bc9d8212eeaec9fc059320c6700df906896eefed024a87a8642942cf78b27389a1c3d52e722af4b300d2a46b91a87436bde67b2eec40d2c6e6406068"}, @TCA_EM_IPT_MATCH_DATA={0x86, 0x5, "22efd6720f2dd1ff346b77eb774cc27118055b1c3693aa8e6249217d46c11025def2b2be0b21335ffdd5ae99a8d44d6ea385b3a54b5b451cff5dbbf4bee69209de277eca81cff8aea26644bd727f8ed6fd851421cf93d8eeb9370c2e4d8483d489c950a046ac120eaa79d9f2ef46335f047766d0909b46506da6a3cf6dd662d52e98"}]}}, @TCF_EM_META={0xdc, 0x2, 0x0, 0x0, {{0x5, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x28, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="4c91149b11ab01", @TCF_META_TYPE_VAR="6bdfb3a2302379ff27"]}, @TCA_EM_META_RVALUE={0xa, 0x3, [@TCF_META_TYPE_VAR="e018", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="bf"]}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="348b996b", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="aa123ae45500", @TCF_META_TYPE_VAR="106f", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="b6"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xf000, 0x8, 0x1}, {0x3, 0x2, 0x2}}}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="b6", @TCF_META_TYPE_VAR="4e34ad50"]}, @TCA_EM_META_LVALUE={0xb, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="266cf7"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x5, 0x2}, {0xce6, 0x8}}}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="4c4d3b03b60857a85497", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="fd12f3", @TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0x18, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="b348971ad707bb69", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT]}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7f, 0x3, 0x2}, {0x3800000, 0x1, 0x1, 0x100}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x60}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x164, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x84, 0x8, 0xc}, {0x2, 0x0, 0x7}}}, @TCF_EM_CONTAINER={0xa4, 0x1, 0x0, 0x0, {{0x471, 0x0, 0x7}, "001248a93591c1986a4a17d52d6cdd91571859f64ae31c5f898b0562d16a12678ef320be261229ab67f911147e4fb7ef21b290de48b1cb847b14b1bb0c198dc1e4f6c9f3335c325e59de9e8b4f0a9e27160628abf9ede49329d423b254214320cdc9f92603ce262d65487ff0bd97512a4a7fd71b202222a6e3cfa0706b97772e3859d8f05673f3a6ce43deec862879904c55fc8e1b4431"}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0xa47}, {{0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x4}, {0x80000001, 0x8, 0x4}}}, @TCF_EM_IPT={0x30, 0x3, 0x0, 0x0, {{0xbdaa, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x427}, {0x3, 0x9, 0x3, 0x5}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x3, 0x7, 0x2}, {{0x2, 0x1, 0x1}, {0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x4}, {0x6, 0xfffffff9, 0xc0, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0xd8, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0xfff8}, {0x2, 0x4}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x9, 0x2, 0x5}, {0xeed, 0x1, 0x1, "89"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0x800}, {0x5, 0x1, 0x3bd, 0x4}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x4}, {0x8, 0x7f, 0xf, 0xfff}}}, @TCF_EM_META={0x68, 0x3, 0x0, 0x0, {{0x7, 0x4, 0xfff}, [@TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="5416e474"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x0, 0x2}, {0x40, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x2, 0x1}, {0x401, 0xe, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0xc}, {0x1, 0x5, 0x1}}}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xfff, 0x8, 0x7}, {0xffffffffffffffff, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x64, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x5b, 0x2, 0x814}, {0x10, 0x1, 0x0, "14"}}}, @TCF_EM_META={0x30, 0x2, 0x0, 0x0, {{0x3, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x743, 0x10, 0x2}, {0x3ca3, 0xe2, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x4, 0x2}, {0xfffa, 0xf9, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x2}, {0x8, 0x4, 0x1}}}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x40}, {0x2, 0xa, 0x0, 0x8}}}]}]}, @TCA_CGROUP_ACT={0xc0, 0x1, [@m_simple={0xbc, 0x14, 0x0, 0x0, {{0xb}, {0x8c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffff9, 0x6, 0x3, 0x2a, 0x101}}, @TCA_DEF_PARMS={0x18, 0x2, {0x40, 0x7, 0x8, 0xfffffffa, 0x80}}, @TCA_DEF_PARMS={0x18, 0x2, {0xe, 0x0, 0x10000000, 0x0, 0x9}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x5, 0x4, 0x0, 0x7}}, @TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}]}, {0x5, 0x6, "b3"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x1208}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00118008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000010c0)=@assoc_value={r4, 0x2}, &(0x7f0000001100)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e40)={0x5, 0xe, 0x935, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000003c0)={0x0, 0x4}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r7) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r8, @ANYBLOB="00022abd7000fedbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030001000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000100706369001100020030304e303a30303a31302e300000000008000300030000002d0fc4d2b768cbc02a7b0fbf1a0fd536ac4868bed166855424f2736d92e565f59aec71189f9260b7ccbefa7764b83b822fb5a815b9a388ae10368c579cce5b84cc4d8ae9551c17d900"/252], 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x404c096) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket(0x840000000002, 0x3, 0x102) getsockopt$inet_pktinfo(r10, 0x0, 0x34, 0x0, &(0x7f0000000100)=0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r10, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000040801f925dc6e4a3f1cef9b6b08000000000000000200000106000100008000000000024022f00000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20044048) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r11) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000002780)={0x0, "e50e889b1bc096c00812cf0a6d91c170"}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000003780)={r14, "b6126e510a595ecb0a81fd8d96ad9635"}) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000bc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r13, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r12, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1}, {0x8, 0x0, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000081}, 0x20000040) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0200e507e50da200"/18, @ANYRES32=r15, @ANYBLOB="0c009900ffffffff1d0000000500d50001000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0xc044) 778.517111ms ago: executing program 4 (id=5176): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x81, 0x81, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000007c0), 0x402, r1}, 0x38) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x5, r1}, 0x38) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 689.884618ms ago: executing program 3 (id=5177): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90) recvmmsg(r0, &(0x7f0000002d40)=[{{&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001540)=[{&(0x7f00000002c0)=""/204, 0xcc}, {&(0x7f00000003c0)=""/229, 0xe5}, {&(0x7f00000004c0)=""/109, 0x6d}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x4}, 0x9}, {{&(0x7f0000001580)=@qipcrtr, 0x80, &(0x7f0000002740)=[{&(0x7f0000001600)=""/11, 0xb}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/215, 0xd7}], 0x3, &(0x7f0000002780)=""/44, 0x2c}, 0x81}, {{&(0x7f00000027c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002840)=""/244, 0xf4}], 0x1}, 0x4}, {{&(0x7f0000002980)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002a00)=""/202, 0xca}, {&(0x7f0000002b00)=""/255, 0xff}], 0x2, &(0x7f0000002c40)=""/195, 0xc3}, 0x3}], 0x4, 0x39fb63accb9712a8, &(0x7f0000002e40)={0x77359400}) socket(0x10, 0xa, 0x0) (async) r1 = socket(0x10, 0xa, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001200010a0000000000000000000002003e2f67d8d049648f7f588bb31011230341aa435c138254023e0a97756a9765847155d1417fd49ce7f0ae7381afeaa9e22a7cf6de7e2ac8"], 0x14}}, 0x0) 569.542837ms ago: executing program 2 (id=5178): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) r3 = syz_open_procfs$namespace(r2, &(0x7f0000001780)='ns/ipc\x00') r4 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r4, 0x0) poll(&(0x7f0000000200)=[{r4, 0x401}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r7, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r8, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500040004"], 0x138}}, 0x0) getpid() sendmmsg$unix(r1, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="73fdffff000000000100000001010000489de716f2abd538a27b483444b76eeaee6cbc05b31b862bfdbeaf68b65420e80d0affa0beb434e205559d14cb4c78769890f5f9dfa9d72ebf56212fb91c9c066dbf5a01bd205903a5a575851f5eea16457a9d85c44e151b7c12e6f85de07082de323118c698dd91c89824a091e4d2f16879e40c864a1478785b2b86a905589a3e6518a3103ea9e1af725b0cebec59cd611d1ae688019dc98bb1dc91cd1ef41e503d791eeb", @ANYRES32=r3, @ANYRES32=r0], 0x18, 0x800}}], 0x1, 0x4004844) 569.043077ms ago: executing program 1 (id=5179): r0 = socket(0x2, 0x80805, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x0, @broadcast}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@broadcast, @random="000000000400", @void, {@ipv4={0x800, @tipc={{0x7, 0x4, 0x3, 0x3, 0x3c, 0x64, 0x0, 0x5, 0x6, 0x0, @empty, @empty, {[@noop, @ra={0x94, 0x4, 0x400}]}}, @payload_direct={{{{0x20, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, 0x2, 0x0, 0x0, 0x2, 0x8, 0x4, 0x3, 0x8000, 0x4936, 0x0, 0x4e23, 0x4e21}, 0x3, 0x3}}}}}}}, 0x0) 568.610071ms ago: executing program 0 (id=5180): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x18) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x44c, 0x36, 0x1, 0x0, 0x0, "", [@nested={0x43b, 0x0, 0x0, 0x1, [@generic="4df5c87e1961eaf71bfab93809d24d122304a64f17e1153b1f5b8f7a941bb6edbf8dc65473770888e7b53eb70999ce7e2b41a2afd77646d302f3343a1cbec4a03b4be386c32fef7a4e2d3e", @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x3d5, 0xf6, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @u32=0x8}, @nested={0x179, 0x9d, 0x0, 0x1, [@nested={0x4, 0xe7}, @generic="b59d190010925eb7147e90a2bc54ba2f201083c8c02d77547eed2bad9bc24e0b52ac4e97e796c8495e2ad96c3930e246485782e99c89a27f3f0aa5c0fec8454f3db662bed08f4f366e822f3dc151b6a438d733286a13f92a9b4a023d9fe2660be2a222063dcbbbb80dfd90d1f436393912ffd0a7df3a06488b5a99b189ea0f812c3892448a2e08d5be85b2e07befb087b6a7d928a9cf99842d6060cdf1de966f169f74a5879f9b11ea982f7b0cba10bfaf5b93a959f15bd69f", @nested={0x4, 0xe}, @typed={0x14, 0x145, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x3}}, @typed={0x95, 0x13c, 0x0, 0x0, @binary="e9e40853ca4d08c7a411687124d4a36c1f442f04be7533fc15a729f09e58664511724be64313a5c4c3b48b8f6a3a24f3a8e6cde75e607ec6d8b2e01c775381a77b1187323336a0e161ac5503de7f7adfb387d58fbe4879b1de24c4480761395ee973a34cfedd5e5211bf7e1e62af504f6e6b8a3dd49e61e70cdb0f9adde35316375cb2866a79a63e6ca7f5638dae5af2ee"}, @typed={0x8, 0x47, 0x0, 0x0, @pid=r2}]}, @nested={0xcb, 0x95, 0x0, 0x1, [@typed={0x4, 0x126, 0x0, 0x0, @binary}, @generic="0155a0312bf3728d88752391dfb12e77806f9137d4e3fcae4c4a4a2c69004efb1169b41b29b937689c6f70d8067e763332f92679e20e0f1d804be513fd3317876614a3ef39f7d2b683031aec3511636eb5a40351fb9624e3e2fee8fc4b90749bfbf41cf5eacbc72657759cf1acce52ded7974420b3242eb3cc2023defd677c5e9f7536514c6ad6b6ddca956ec0ac31422ebc77bb1dcac6da2b6eb3381b8b264afe4f4bcf606832ae8857d64703e06a9531416c", @nested={0x4, 0x15b}, @nested={0x4, 0x11f}, @typed={0x5, 0x73, 0x0, 0x0, @binary="f1"}]}, @nested={0x8, 0xdf, 0x0, 0x1, [@nested={0x4, 0x76}]}, @generic="c1fc29f2cebb6ecf13db893b34c46be070aa2819bde6fd65d3b9ee810e5743ed0c1f32bfa7327014ee7df71eddc71b0b83342155b4905a376b75e7f3d4e80c6f68de9b750e23fbb268a931746c5dbc6857a61221a4c2c6f5cf802366c8a351820ffe5ebe0f74992002ad4e345a1993e20c946840805da96db6e3bd463744eb8077b00c8e2eba9fb61925453d87aae57f9b29f609147dd5cd8588d28944f1e970b28d7022106858e76f", @typed={0x8, 0x67, 0x0, 0x0, @uid}, @nested={0xc5, 0x150, 0x0, 0x1, [@typed={0x4, 0x155}, @generic="25d4f3d5aad2629f3bb2be3abcc9cb1c9cc5ba0c8df2c0f2361f5b2714330207064e5d1763cfbd2f2d53fb7f5a29d6dbbf0c3814d180248bf5398e819258ad3923dfe520d9fc27a8bf828817d7d1e3b928387ee7c0d17aa978e81b8fd6d28f4c154536845feb801504fe4b1bded096cc51fc3e1c8baf5297e0efb03ba5", @typed={0x8, 0xda, 0x0, 0x0, @uid}, @typed={0x2d, 0xb4, 0x0, 0x0, @binary="f5e296b8cdf1eb0204a1691ad0bf1066897c60d49efb06f5de60b6b6ae9827abb6c8c85d252c237ac6"}, @typed={0x8, 0xf5, 0x0, 0x0, @pid}]}]}]}]}, 0x44c}], 0x1, 0x0, 0x0, 0xc1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x110}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) 540.976272ms ago: executing program 4 (id=5181): syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00102b00fc020000000000000000000000000000fe8000000000000000000000000000aa0600031867000000000000000008907821106f844cf8323692cecf9253"], 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r0, 0x2f, 0x3, 0x85, 0x1, 0x10, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x1, 0x200, 0x81}}) 474.932938ms ago: executing program 3 (id=5182): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x21}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) (async, rerun: 64) close(0x4) (async, rerun: 64) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) socket$inet(0x2, 0xa, 0x400) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) (async, rerun: 64) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) (rerun: 64) close(0x4) 345.479497ms ago: executing program 2 (id=5183): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x6, 0xa, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x80, 0x8}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r2, 0x8}, 0x8) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0xcd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) sendmmsg(r0, &(0x7f0000007fc0), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast2}}) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) recvmmsg(r0, &(0x7f0000002e80)=[{{&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x80, &(0x7f0000002640)=[{&(0x7f0000000100)=""/171, 0xab}, {&(0x7f0000000240)=""/94, 0x5e}, {&(0x7f00000002c0)=""/164, 0xa4}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/140, 0x8c}, {&(0x7f0000001580)=""/113, 0x71}, {&(0x7f0000001600)=""/10, 0xa}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x9}, 0x80000000}, {{&(0x7f0000002700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000440)=""/39, 0x27}, {&(0x7f00000027c0)=""/46, 0x2e}, {&(0x7f0000002800)=""/233, 0xe9}, {&(0x7f0000000400)=""/16, 0x10}, {&(0x7f0000002940)=""/186, 0x111}, {&(0x7f0000002a00)=""/47, 0x2f}, {&(0x7f0000002a40)=""/245, 0xf5}], 0x7, &(0x7f0000002bc0)=""/223, 0xdf}, 0xced}, {{&(0x7f0000002cc0)=@qipcrtr, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002d40)=""/1, 0x1}], 0x1, &(0x7f0000002dc0)=""/136, 0x88}, 0x9}], 0x3, 0x45833af92e4b39ff, 0x0) 323.725933ms ago: executing program 0 (id=5184): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x3, 0x10, 0x42, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x7, 0x8, 0x7, 0x400}}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000100)={r0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000071119e00000000008510000002000000850000007d00000095000000000000009500a5050000000082380a6c16cb23efcad64db91e674db95df8d0896824cb2691d06528024707d13584c797578afdc601c7f4a6f818b7f25410420f86e4b78db803197e79375fd430e64a4ed0ec3494217ffe488acb70e2fc2a3ed88e4e93d3"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 238.06215ms ago: executing program 1 (id=5185): ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000011c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6d, 0x2001, 0x4, 0xffff, 0xc, "e198704241f5ffffffffffffffff005d47e18a5c05ffa06d53871bf48938c66ed463d4af30059fdd233c1346433e20cf35a8b0e84a69be3f2e00f3791277623fcbae95e3c42d3928ec5f984151d2de7fae35f5213532f2a7290cc4dde090f1e09860ad0ea8a4dd6b290000000000fff400"}) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x2, 0x1, 0x1}}, {{0x4, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}], 0x10) (async) write(r2, &(0x7f0000000000)="2400000011005f0414f9f6070009041f810000000e000000000000ea08000f0001000000", 0x24) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000240)={{r3, &(0x7f0000000080)='$\x00', 0x2, &(0x7f00000000c0)={@align=0xf6, {0x5, 0x1, 0x4, 0x8}}, 0xf, &(0x7f0000000100), &(0x7f0000000140)=0x9}, {[0xfffffff9, 0x9, 0x9, 0xc0]}, 0xff, 0xb3, &(0x7f0000000180)=""/179}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0xb1, 0x0, 0x0, 0xfffffffd}, {0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710445000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) ioctl$XFS_IOC_SCRUB_METADATA(r4, 0xc040583c, &(0x7f00000002c0)={0x8, 0xae, 0xfffffffffffffffd, 0x8, 0xfffffff9}) (async) r6 = socket(0x29, 0x2, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00'}, 0x80) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async, rerun: 32) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async, rerun: 32) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9, 0x1000000}, 0x10) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x30) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x200008c0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) r10 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r10, 0x84, 0x72, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000380)={0x400, 0x9, 0xfffffffe, 0x6, 0x3ff}, 0x14) 235.993105ms ago: executing program 4 (id=5186): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x43, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000001240), 0x0}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r2, 0x952de000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x297b, 0x0, 0x4, 0x2080, r0, 0x19, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0xb}, 0x50) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000008c0)={@initdev, 0x0}, &(0x7f0000000900)=0x14) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000a40)={r0, &(0x7f0000000940)='%[\x00', 0x2c003, &(0x7f0000000980)={@_ha_fsid={[0x36af2ad3, 0x9]}, {0xec, 0x8d9, 0x7, 0x5}}, 0x8, &(0x7f00000009c0), &(0x7f0000000a00)=0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x14, &(0x7f0000000780)=@raw=[@ldst={0x3, 0x2, 0x6, 0xb, 0x6, 0x6, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x20}, @alu={0x7, 0x0, 0x0, 0xa, 0xd, 0x30, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}], &(0x7f0000000840)='GPL\x00', 0xd, 0x31, &(0x7f0000000880)=""/49, 0x41000, 0x11, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000a80)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x5, 0x10, 0xffff0001, 0x8}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000b00)=[r0, r0], &(0x7f0000000b40)=[{0x1, 0x3, 0x1, 0x6}, {0x3, 0x2, 0x4, 0x9}, {0x5, 0x1, 0xb, 0xc}, {0x0, 0x5, 0xb, 0xc61ff4e6419912d4}, {0x3, 0x5, 0x0, 0x4}, {0x0, 0x3, 0xf, 0x2}, {0x5, 0x4, 0xc, 0x4}, {0x1, 0x2, 0xe}, {0x0, 0x2, 0x7, 0x8}], 0x10, 0x3}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x27, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x39}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @map_fd={0x18, 0x8, 0x1, 0x0, r6}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x81}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1000}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0xce, 0x3f, &(0x7f0000000340)=""/63, 0x41100, 0x41, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f0000000380)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x2, 0x8721, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000480)=[r9], &(0x7f00000004c0)=[{0x0, 0x2, 0x9, 0xc}, {0x1, 0x2, 0xd, 0x2}, {0x1, 0x2, 0xf, 0x1}, {0x4, 0x2, 0xa}], 0x10, 0x60000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa0}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r6, 0x8000}], 0x1, &(0x7f0000000600)={r10, r11+60000000}, &(0x7f0000000640), 0x8) ioctl$XFS_IOC_GETPARENTS(r9, 0xc028583e, &(0x7f00000006c0)={{[0x481, 0x1000, 0x100, 0x5]}, 0x0, 0x3, 0x5, 0x0, &(0x7f0000000680)=[{{@align=0x8, {0xfff6, 0xbd, 0x47a, 0xffffffff}}, 0x9, 0x0, '-.!^\x00'}]}) 169.45646ms ago: executing program 3 (id=5187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x18, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0x1, 0x0, 0xffd, {[@window={0x3, 0x3, 0x7}]}}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r2, 0x5, 0x70bd27, 0x25df9bfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9008882}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5c}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x82}, 0x20000004) (async) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9008882}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5c}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x82}, 0x20000004) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000001771108400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 167.598762ms ago: executing program 0 (id=5188): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x40}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 108.660024ms ago: executing program 2 (id=5189): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x0, 0xff, 0x0, 0xff, 0x0, 0x400}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x5c, 0x0, 0x4, 0x0, 0x2, 0x58, 0x7}}}}}]}, 0x44}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="08008863040002"], 0xfce) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0xf) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x3) ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r7, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0xc044) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd22, 0x6000000, {0x0, 0x0, 0x0, r12, {0x0, 0xffe0}, {}, {0x7, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x7f}}, @filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfbfffc00, 0x4, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0xfffffffffffffe0a}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, 0x0) 0s ago: executing program 4 (id=5190): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="000000000101040008e11a0000000000001b44235cdefc9a6cce97740d00"], 0x28}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x1, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x1, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) recvmsg$qrtr(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000002c0)=""/238, 0xee}], 0x2, 0x0, 0x0, 0x2}, 0x38, 0x100) socketpair(0x10, 0x4, 0xffffffff, &(0x7f0000000080)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="34000000400007012bbd7000fedbdf25037c00000400c280150009800c00ff8008000d00d460ec78ee25f078f35b87cb4e61725ff8985655572283379eaa1f987bda5c4aa08742eb36911a83f58945648d51246d34a6ac8629ddee76988deaa988b3601c93df68a3d391a71ede270f2f0489f6294aad513005bf90239f03c4f6e453597808c492345f280acec74a0b7907fa4c215fa0f884a00ff43d76706f5f979d171334b2479a8f78bf26d1a5c0e15174045efcf88690f967733a052cbe", @ANYRES32, @ANYBLOB="1ebadb1f5e00000004000800"], 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) unshare(0xa6030a80) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001000000000008000200002000000c00028005000100000000002400038014000180080001000000000008000200ac1414000c0002800500010000000000240001801400018008000100ac1414bb08000200ac1414000c0002800500010000000000"], 0x80}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r8, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000020000000304000000d600fcffffff00000000", @ANYRES32=r8, @ANYBLOB="7fff000000000000"], 0x20}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd24, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0x10}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x64004081}, 0x0) kernel console output (not intermixed with test programs): 0000000000000000 R09: 0000000000000000 [ 437.496003][T17860] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 437.496015][T17860] R13: 00007fef22c16038 R14: 00007fef22c15fa0 R15: 00007ffeb7c77258 [ 437.496047][T17860] [ 437.687441][T17599] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 437.931301][T17599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 437.945010][ T5841] Bluetooth: hci3: command tx timeout [ 437.952668][T17599] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 437.977894][T17599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 437.988456][T17599] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 438.007624][T17599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 438.015817][T17599] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 438.042104][T17599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 438.061084][T17823] lo speed is unknown, defaulting to 1000 [ 438.151868][T17881] openvswitch: netlink: IP tunnel dst address not specified [ 438.638403][T17318] IPVS: stop unused estimator thread 0... [ 438.672819][T17599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.709850][T17910] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3262'. [ 438.768689][T17599] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.811976][T17316] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.819255][T17316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.872616][T17862] lo speed is unknown, defaulting to 1000 [ 438.898639][T17316] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.905907][T17316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.267118][T17922] sctp: [Deprecated]: syz.3.3264 (pid 17922) Use of int in max_burst socket option. [ 439.267118][T17922] Use struct sctp_assoc_value instead [ 439.628575][T17933] delete_channel: no stack [ 439.904212][T17599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.058553][T17953] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.3272'. [ 440.261713][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.268254][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.482133][T17980] netlink: 'syz.0.3275': attribute type 4 has an invalid length. [ 440.553757][T17980] netlink: 'syz.0.3275': attribute type 4 has an invalid length. [ 440.598932][T17980] xt_bpf: check failed: parse error [ 440.680127][T17599] veth0_vlan: entered promiscuous mode [ 440.713876][T17599] veth1_vlan: entered promiscuous mode [ 440.788813][T17599] veth0_macvtap: entered promiscuous mode [ 440.823479][T17599] veth1_macvtap: entered promiscuous mode [ 440.843518][T17996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3281'. [ 440.856970][T17996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3281'. [ 440.868613][T17996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3281'. [ 440.884198][T17996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3281'. [ 440.905715][T17996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3281'. [ 440.918346][T17996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3281'. [ 440.929459][T17996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3281'. [ 440.948887][T17996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3281'. [ 440.981655][T17599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.005547][T17599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.024305][T17320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.036592][T17320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.060800][T17320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.069922][T17320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.219077][T18003] netlink: 'syz.3.3284': attribute type 10 has an invalid length. [ 441.227331][T17316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.240004][T17316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.263503][T18003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.288813][T18003] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 441.405907][T17316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.428863][T17316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.772854][T18034] team1: entered promiscuous mode [ 441.781287][T18034] team1: entered allmulticast mode [ 441.847523][T18042] veth0_to_batadv: mtu less than device minimum [ 441.875847][T18042] xt_hashlimit: size too large, truncated to 1048576 [ 441.905777][T18044] netlink: 'syz.3.3294': attribute type 9 has an invalid length. [ 441.976619][T18051] netlink: 'syz.4.3298': attribute type 1 has an invalid length. [ 442.212070][T18055] bridge_slave_0 (unregistering): left allmulticast mode [ 442.241240][T18055] bridge_slave_0 (unregistering): left promiscuous mode [ 442.250368][T18055] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.552072][T18074] bond1 (unregistering): Released all slaves [ 443.028007][T18112] netlink: 'syz.1.3314': attribute type 26 has an invalid length. [ 443.129134][T18120] netlink: 'syz.4.3316': attribute type 1 has an invalid length. [ 443.229772][T18128] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 443.288121][T18124] netlink: 'syz.3.3317': attribute type 19 has an invalid length. [ 443.297148][T18136] netlink: 'syz.0.3320': attribute type 1 has an invalid length. [ 443.408524][T18143] bond1 (unregistering): Released all slaves [ 443.752675][T18165] netlink: 'syz.0.3330': attribute type 9 has an invalid length. [ 443.833671][T18153] syz.1.3326 (18153) used greatest stack depth: 17128 bytes left [ 443.893145][T18171] __nla_validate_parse: 68 callbacks suppressed [ 443.893174][T18171] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3332'. [ 444.048702][T18177] xt_cgroup: xt_cgroup: no path or classid specified [ 444.133634][T18185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3337'. [ 444.343317][T18199] bond1: entered promiscuous mode [ 444.376871][T18199] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.423328][T18202] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3343'. [ 444.491928][T18205] ipvlan2: entered allmulticast mode [ 444.506626][T18205] bond1: entered allmulticast mode [ 444.524080][T18199] ipvlan3: entered allmulticast mode [ 444.557972][T18216] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3346'. [ 444.567465][T18219] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3346'. [ 444.597520][T18205] bond1: (slave bridge1): making interface the new active one [ 444.626661][T18205] bridge1: entered promiscuous mode [ 444.632253][T18205] bridge1: entered allmulticast mode [ 444.640828][T18205] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 444.840879][T18236] sctp: [Deprecated]: syz.2.3351 (pid 18236) Use of struct sctp_assoc_value in delayed_ack socket option. [ 444.840879][T18236] Use struct sctp_sack_info instead [ 444.941730][T18247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3353'. [ 445.034899][T18254] syzkaller0: entered promiscuous mode [ 445.040584][T18254] syzkaller0: entered allmulticast mode [ 445.077439][T18256] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3355'. [ 445.087044][T18256] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3355'. [ 445.096262][T18256] netlink: 43 bytes leftover after parsing attributes in process `syz.4.3355'. [ 445.316130][T18267] openvswitch: netlink: EtherType 50a is less than min 600 [ 445.328056][T18267] 8021q: VLANs not supported on caif0 [ 445.337001][T18268] openvswitch: netlink: EtherType 50a is less than min 600 [ 445.529763][T18275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3361'. [ 445.544619][T18275] geneve2: entered promiscuous mode [ 445.552166][T18275] geneve2: entered allmulticast mode [ 445.559268][T17315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.568698][T17315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.577688][T17315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.586825][T17315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.539458][T18218] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 447.700220][T18282] Bluetooth: MGMT ver 1.23 [ 447.889809][T18292] syzkaller0: entered promiscuous mode [ 447.901189][T18292] syzkaller0: entered allmulticast mode [ 448.090811][T18307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.100354][T18309] netlink: zone id is out of range [ 448.119837][T18309] netlink: zone id is out of range [ 448.125908][T18309] netlink: zone id is out of range [ 448.131159][T18309] netlink: zone id is out of range [ 448.137065][T18309] netlink: zone id is out of range [ 448.164532][T18309] netlink: zone id is out of range [ 448.177648][T18309] netlink: zone id is out of range [ 448.184631][T18309] netlink: zone id is out of range [ 448.190454][T18309] netlink: zone id is out of range [ 448.270359][T18322] validate_nla: 6 callbacks suppressed [ 448.270379][T18322] netlink: 'syz.0.3376': attribute type 1 has an invalid length. [ 448.284032][T18322] netlink: 'syz.0.3376': attribute type 1 has an invalid length. [ 448.484285][T18333] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.550602][T18330] ipt_REJECT: TCP_RESET invalid for non-tcp [ 448.570277][T18343] ipt_REJECT: TCP_RESET invalid for non-tcp [ 448.615397][T18333] bridge_slave_0 (unregistering): left allmulticast mode [ 448.666869][T18333] bridge_slave_0 (unregistering): left promiscuous mode [ 448.674658][T18333] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.936771][T18338] syzkaller0: entered promiscuous mode [ 448.943213][T18338] syzkaller0: entered allmulticast mode [ 449.088969][T18375] netlink: 'syz.0.3387': attribute type 1 has an invalid length. [ 449.112196][T18374] __nla_validate_parse: 3 callbacks suppressed [ 449.112220][T18374] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3389'. [ 449.257853][T18379] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 450.619663][T18373] netlink: 'syz.3.3388': attribute type 12 has an invalid length. [ 450.654514][T18375] bond1: entered promiscuous mode [ 450.661815][T18375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 450.669563][T18381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.689852][T18381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.717048][T18381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.724511][T18381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.881609][T18395] bond2: option fail_over_mac: invalid value (16) [ 450.933303][T18395] bond2 (unregistering): Released all slaves [ 451.021095][T18400] syz.0.3393 (18400) used obsolete PPPIOCDETACH ioctl [ 451.173761][T18402] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.181704][T18402] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.333793][T18402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.350292][T18402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.361022][T18402] tipc: Resetting bearer [ 451.453477][T18402] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 451.507534][T18423] ip6gretap1: entered promiscuous mode [ 451.515536][T18423] ip6gretap1: entered allmulticast mode [ 451.546709][T18433] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 451.563381][T18430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3399'. [ 451.573004][T17315] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 451.592872][T17315] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 451.633345][T17315] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 451.643384][T17315] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 451.676139][T17315] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 451.709610][T17315] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 451.726657][T17315] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 451.744477][T17315] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 451.942827][T18453] netlink: 'syz.3.3406': attribute type 11 has an invalid length. [ 451.951339][T18453] netlink: 'syz.3.3406': attribute type 11 has an invalid length. [ 451.971573][T18453] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3406'. [ 452.151544][T18463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3409'. [ 452.175111][T18463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3409'. [ 452.386396][T18479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3412'. [ 452.392072][T18481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3415'. [ 452.407697][T18481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3415'. [ 452.731995][T18492] netlink: 'syz.1.3419': attribute type 10 has an invalid length. [ 452.746761][T18492] veth0_vlan: left promiscuous mode [ 452.753459][T18492] veth0_vlan: entered promiscuous mode [ 452.766250][T18492] team0: Device veth0_vlan failed to register rx_handler [ 452.848177][T18504] netlink: 3556 bytes leftover after parsing attributes in process `syz.4.3423'. [ 452.860370][T18504] netlink: 2184 bytes leftover after parsing attributes in process `syz.4.3423'. [ 452.873031][T18504] netlink: 'syz.4.3423': attribute type 1 has an invalid length. [ 452.881991][T18504] netlink: 'syz.4.3423': attribute type 3 has an invalid length. [ 452.890335][T18504] NCSI netlink: No device for ifindex 813332851 [ 452.989649][T18511] bridge2: entered promiscuous mode [ 452.995814][T18511] bridge2: entered allmulticast mode [ 453.130721][T18519] bond2: entered promiscuous mode [ 453.136386][T18519] bond2: entered allmulticast mode [ 453.185346][T18523] netlink: 'syz.0.3429': attribute type 1 has an invalid length. [ 453.197267][T18518] tunl0: entered promiscuous mode [ 453.206096][T18518] netlink: 'syz.4.3427': attribute type 3 has an invalid length. [ 453.584513][T18545] tipc: Enabling of bearer rejected, failed to enable media [ 453.620885][ T29] audit: type=1107 audit(1776192296.638:6): pid=18548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':( ' [ 453.622131][T18550] nbd: nbd0 already in use [ 453.664845][ T29] audit: type=1107 audit(1776192296.638:7): pid=18548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':( ' [ 453.674851][T18550] block nbd0: NBD_DISCONNECT [ 453.703405][T18550] block nbd0: Send disconnect failed -32 [ 453.735664][ T29] audit: type=1107 audit(1776192296.638:8): pid=18548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':( ' [ 453.737466][T18550] block nbd0: Send disconnect failed -32 [ 453.794914][ T29] audit: type=1107 audit(1776192296.638:9): pid=18548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':( ' [ 453.854876][ T29] audit: type=1107 audit(1776192296.638:10): pid=18548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':( ' [ 453.894339][T18550] netlink: 'syz.0.3436': attribute type 1 has an invalid length. [ 453.930751][ T29] audit: type=1107 audit(1776192296.638:11): pid=18548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':( ' [ 453.973355][ T29] audit: type=1107 audit(1776192296.638:12): pid=18548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':( ' [ 454.029220][ T29] audit: type=1107 audit(1776192296.638:13): pid=18548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':( ' [ 454.083660][ T29] audit: type=1107 audit(1776192296.638:14): pid=18548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':( ' [ 454.126180][ T29] audit: type=1107 audit(1776192296.678:15): pid=18548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':( ' [ 454.169275][T18584] IPVS: length: 53 != 8 [ 454.176651][T18584] IPVS: set_ctl: invalid protocol: 92 10.1.1.1:20003 [ 454.361075][T18594] netlink: 'syz.0.3446': attribute type 4 has an invalid length. [ 454.527412][T18609] __nla_validate_parse: 4 callbacks suppressed [ 454.527433][T18609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3447'. [ 454.928318][T18624] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3455'. [ 455.273650][T18646] ip6gre0: Master is either lo or non-ether device [ 455.309128][T18648] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3465'. [ 455.448294][T18655] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3467'. [ 455.473439][T18655] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3467'. [ 455.499444][T18655] gretap0: entered promiscuous mode [ 455.523166][T18655] gretap0: left promiscuous mode [ 455.603453][T18666] batman_adv: batadv0: Adding interface: dummy0 [ 455.614421][T18666] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.666321][T18670] netlink: 'syz.4.3472': attribute type 2 has an invalid length. [ 455.670905][T18666] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 455.732118][T18670] 9: entered promiscuous mode [ 456.061756][T18688] syzkaller1: entered promiscuous mode [ 456.067602][T18688] syzkaller1: entered allmulticast mode [ 456.507909][ T6831] IPVS: starting estimator thread 0... [ 456.527447][T18715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3488'. [ 456.674902][T18719] IPVS: using max 25 ests per chain, 60000 per kthread [ 456.860619][T18738] bond1: (slave gre0): Device is not bonding slave [ 456.868405][T18738] bond1: option active_slave: invalid value (gre0) [ 456.887786][T18738] bond1 (unregistering): Released all slaves [ 456.938295][T18748] netlink: 'syz.0.3496': attribute type 4 has an invalid length. [ 457.002374][T18748] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 457.287148][T18764] netlink: 'syz.1.3499': attribute type 83 has an invalid length. [ 457.310001][T18763] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 457.541962][T18778] netlink: 'syz.3.3505': attribute type 1 has an invalid length. [ 457.555287][T18778] netlink: 'syz.3.3505': attribute type 2 has an invalid length. [ 457.563078][T18778] netlink: 'syz.3.3505': attribute type 1 has an invalid length. [ 457.671021][T18787] tipc: Started in network mode [ 457.687569][T18787] tipc: Node identity ac14140f, cluster identity 4711 [ 457.703291][T18787] tipc: New replicast peer: 255.255.255.255 [ 457.724318][T18787] tipc: Enabled bearer , priority 10 [ 457.771985][T18791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3507'. [ 457.791555][T18793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3509'. [ 457.811523][T18791] tipc: Disabling bearer [ 457.829984][T18787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3507'. [ 457.840968][T18787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3507'. [ 457.902503][T18787] macvtap0: mtu less than device minimum [ 457.909981][T18786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.970249][T18801] netlink: 'syz.0.3511': attribute type 1 has an invalid length. [ 458.045910][T18806] netlink: 'syz.1.3513': attribute type 1 has an invalid length. [ 458.094250][T18804] bond2: entered promiscuous mode [ 458.107351][T18804] bond2: entered allmulticast mode [ 458.128088][T18804] 8021q: adding VLAN 0 to HW filter on device bond2 [ 458.180376][T18801] bond2 (unregistering): Released all slaves [ 458.267330][T18806] 8021q: adding VLAN 0 to HW filter on device bond2 [ 458.299560][T18817] vlan2: entered promiscuous mode [ 458.307559][T18817] bond2: entered promiscuous mode [ 458.312802][T18817] vlan2: entered allmulticast mode [ 458.318898][T18817] bond2: entered allmulticast mode [ 458.342497][T18820] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 458.352235][T18820] bond2: (slave batadv1): making interface the new active one [ 458.360376][T18820] batadv1: entered promiscuous mode [ 458.366539][T18820] batadv1: entered allmulticast mode [ 458.372879][T18820] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 458.385575][T17315] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.500872][T17315] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.521126][T18830] macsec1: entered promiscuous mode [ 458.530435][T18830] bridge0: entered promiscuous mode [ 458.536234][T18830] macsec1: entered allmulticast mode [ 458.541648][T18830] bridge0: entered allmulticast mode [ 458.548234][T18830] bridge0: port 3(macsec1) entered blocking state [ 458.555790][T18830] bridge0: port 3(macsec1) entered disabled state [ 458.622294][T18830] bridge0: left allmulticast mode [ 458.628559][T18830] bridge0: left promiscuous mode [ 458.679380][T17315] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.707993][T17315] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.932453][T18849] virt_wifi0 speed is unknown, defaulting to 1000 [ 459.326092][T18865] team0: No ports can be present during mode change [ 459.370809][T18865] syzkaller1: entered promiscuous mode [ 459.376625][T18865] syzkaller1: entered allmulticast mode [ 459.502437][T18849] lo speed is unknown, defaulting to 1000 [ 459.683169][T18877] syzkaller0: entered promiscuous mode [ 459.693138][T18877] syzkaller0: entered allmulticast mode [ 459.714216][T18877] TC_ACT_REPEAT abuse ? [ 459.824876][T18888] __nla_validate_parse: 9 callbacks suppressed [ 459.824900][T18888] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3539'. [ 460.206090][T18899] validate_nla: 2 callbacks suppressed [ 460.206110][T18899] netlink: 'syz.4.3542': attribute type 1 has an invalid length. [ 460.230818][T18904] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3544'. [ 460.369430][T18899] bond1: entered promiscuous mode [ 460.375275][T18899] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.471156][T18910] bond1: (slave bridge1): making interface the new active one [ 460.480589][T18910] bridge1: entered promiscuous mode [ 460.487334][T18910] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 460.838790][T18929] : renamed from hsr0 [ 460.889404][T18931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3552'. [ 460.967909][T18933] netlink: 'syz.2.3554': attribute type 142 has an invalid length. [ 461.214318][T18953] netlink: 'syz.0.3558': attribute type 11 has an invalid length. [ 461.233318][T18955] SET target dimension over the limit! [ 461.250826][T18955] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3557'. [ 461.338179][T18961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3559'. [ 461.347774][T18961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3559'. [ 461.380529][T18963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3561'. [ 461.417291][T18963] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3561'. [ 461.450346][T18963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3561'. [ 461.467867][T18963] netlink: 'syz.2.3561': attribute type 4 has an invalid length. [ 461.545504][T18970] netlink: 'syz.0.3562': attribute type 1 has an invalid length. [ 461.553310][T18970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3562'. [ 461.581741][T18969] netlink: 'syz.1.3563': attribute type 1 has an invalid length. [ 461.590499][T18969] netlink: 'syz.1.3563': attribute type 2 has an invalid length. [ 461.774001][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a8bac00: rx timeout, send abort [ 461.782765][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a8ba400: rx timeout, send abort [ 461.953748][T18989] IPVS: ip_vs_edit_dest(): server weight less than zero [ 462.088866][T19004] netlink: 'syz.0.3575': attribute type 1 has an invalid length. [ 462.282333][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a8bac00: abort rx timeout. Force session deactivation [ 462.293315][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a8ba400: abort rx timeout. Force session deactivation [ 462.411218][T19022] netlink: 'syz.0.3581': attribute type 7 has an invalid length. [ 462.431070][T19022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 462.460035][T19021] netlink: 'syz.1.3580': attribute type 1 has an invalid length. [ 462.676559][T19030] virt_wifi0 speed is unknown, defaulting to 1000 [ 463.031929][T19030] lo speed is unknown, defaulting to 1000 [ 463.372062][T19078] netlink: 'syz.0.3599': attribute type 1 has an invalid length. [ 463.815667][T19097] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 463.937267][T19109] tipc: Enabled bearer , priority 10 [ 464.206948][T17315] tipc: Subscription rejected, illegal request [ 464.493138][T19143] syzkaller1: entered promiscuous mode [ 464.502185][T19143] syzkaller1: entered allmulticast mode [ 464.511362][T19142] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 464.738338][T19150] sctp: Trying to GSO but underlying device doesn't support it. [ 464.877355][T19171] __nla_validate_parse: 21 callbacks suppressed [ 464.877376][T19171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3622'. [ 465.059625][ T5943] tipc: Node number set to 2886997007 [ 465.281483][T19186] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3627'. [ 467.758647][T19160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 467.950477][T19203] 8021q: VLANs not supported on syzkaller1 [ 467.962439][T19210] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3633'. [ 468.774999][T19206] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 468.933526][T19243] validate_nla: 1 callbacks suppressed [ 468.933548][T19243] netlink: 'syz.0.3644': attribute type 21 has an invalid length. [ 468.968956][T19243] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3644'. [ 468.980003][T19243] netlink: 'syz.0.3644': attribute type 1 has an invalid length. [ 469.029728][T19253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3643'. [ 469.507225][T19287] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3656'. [ 469.645699][T19292] veth1_macvtap: renamed from ip6gretap0 [ 469.700534][T19300] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3658'. [ 469.700929][T19297] netlink: 'syz.0.3655': attribute type 11 has an invalid length. [ 469.740520][T19300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3658'. [ 469.826240][T19298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3655'. [ 469.973549][T19309] team0: Port device gretap1 added [ 470.079754][T19314] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 470.100368][T19314] bond3: (slave lo): Enslaving as an active interface with an up link [ 470.109851][T19314] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 470.143531][T19322] netlink: 'syz.2.3661': attribute type 29 has an invalid length. [ 470.278976][T19322] netlink: 'syz.2.3661': attribute type 29 has an invalid length. [ 470.387942][T19322] netlink: 'syz.2.3661': attribute type 32 has an invalid length. [ 470.400321][T19322] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3661'. [ 470.422375][T19339] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3665'. [ 470.502375][T19347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3666'. [ 470.585537][T19344] netlink: 'syz.3.3665': attribute type 1 has an invalid length. [ 470.611610][T19344] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3665'. [ 470.671898][T19356] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 470.726486][T19356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3668'. [ 470.780033][T19356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3668'. [ 470.989943][T19368] syzkaller0: entered promiscuous mode [ 470.997990][T19371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3674'. [ 471.014854][T19368] syzkaller0: entered allmulticast mode [ 471.090859][T19368] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3673'. [ 471.252999][T19379] netlink: 'syz.3.3677': attribute type 2 has an invalid length. [ 471.393523][T19391] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3678'. [ 471.436929][T19393] netlink: 'syz.0.3681': attribute type 2 has an invalid length. [ 471.517876][T19393] macvtap1: entered promiscuous mode [ 471.523537][T19393] macvtap1: entered allmulticast mode [ 471.538421][T19393] veth1_vlan: entered allmulticast mode [ 471.588184][T19400] macvtap2: entered promiscuous mode [ 471.594487][T19400] macvtap2: entered allmulticast mode [ 471.702870][T19405] netlink: 'syz.1.3684': attribute type 1 has an invalid length. [ 471.898977][T19418] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 472.042438][T19421] bond4 (unregistering): Released all slaves [ 472.646986][T19455] netlink: 'syz.4.3694': attribute type 10 has an invalid length. [ 472.828189][T19455] team0 (unregistering): Port device team_slave_0 removed [ 472.846305][T19465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3697'. [ 472.860198][T19455] team0 (unregistering): Port device team_slave_1 removed [ 473.031953][T19463] syzkaller0: entered promiscuous mode [ 473.061210][T19463] syzkaller0: entered allmulticast mode [ 473.294813][ T5841] Bluetooth: hci3: command tx timeout [ 473.360482][T19499] ip6gre0: entered promiscuous mode [ 473.408109][T19490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 473.438151][T19501] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 473.472569][T19498] ip6gre0: left promiscuous mode [ 473.889280][T19529] : renamed from hsr0 (while UP) [ 473.987791][T19535] validate_nla: 3 callbacks suppressed [ 473.987812][T19535] netlink: 'syz.0.3719': attribute type 1 has an invalid length. [ 474.330345][T19557] syzkaller0: entered promiscuous mode [ 474.337431][T19557] syzkaller0: entered allmulticast mode [ 474.750086][T19581] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 475.030488][T19598] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 475.064132][T19598] bond3: (slave lo): Enslaving as an active interface with an up link [ 475.092561][T19598] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 475.958279][T19653] __nla_validate_parse: 12 callbacks suppressed [ 475.958301][T19653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3749'. [ 476.029913][T19640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3747'. [ 476.147054][T19666] netlink: 'syz.4.3752': attribute type 39 has an invalid length. [ 476.183213][T19657] bond4: option lp_interval: invalid value (0) [ 476.190993][T19657] bond4: option lp_interval: allowed values 1 - 2147483647 [ 476.209630][T19657] bond4 (unregistering): Released all slaves [ 476.771836][T19697] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3759'. [ 476.859413][T19700] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3760'. [ 476.900417][T19700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3760'. [ 476.968964][T19703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3760'. [ 477.032093][T19703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3760'. [ 477.315748][T19724] : entered promiscuous mode [ 477.436032][T19724] bond4: invalid ARP target 0.0.0.0 specified for addition [ 477.487563][T19724] bond4: option arp_ip_target: invalid value (0) [ 477.557913][T19724] bond4 (unregistering): Released all slaves [ 478.080176][T19776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3776'. [ 478.546504][T19804] netlink: 'syz.4.3784': attribute type 10 has an invalid length. [ 478.575106][T19804] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3784'. [ 478.586037][T19798] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 478.607885][T19804] dummy0: entered promiscuous mode [ 478.610457][T19808] netlink: 'syz.4.3784': attribute type 1 has an invalid length. [ 478.642168][T19804] bridge0: port 3(dummy0) entered blocking state [ 478.662089][T19804] bridge0: port 3(dummy0) entered disabled state [ 478.689713][T19804] dummy0: entered allmulticast mode [ 478.728908][T19804] bridge0: port 3(dummy0) entered blocking state [ 478.735559][T19804] bridge0: port 3(dummy0) entered forwarding state [ 478.837722][T19808] bond2: entered promiscuous mode [ 478.843495][T19808] 8021q: adding VLAN 0 to HW filter on device bond2 [ 478.943067][T19826] netlink: 'syz.3.3789': attribute type 1 has an invalid length. [ 478.973530][T19809] bond2: (slave bridge3): making interface the new active one [ 479.006105][T19809] bridge3: entered promiscuous mode [ 479.019920][T19809] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 479.126491][T19836] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3791'. [ 479.180760][T19826] bond1: entered promiscuous mode [ 479.200263][T19826] 8021q: adding VLAN 0 to HW filter on device bond1 [ 479.416595][T19848] netlink: 'syz.3.3796': attribute type 8 has an invalid length. [ 479.440740][T19848] bond0: entered promiscuous mode [ 479.450597][T19848] bond_slave_0: entered promiscuous mode [ 479.461173][T19848] bond_slave_1: entered promiscuous mode [ 479.479475][T19848] mac80211_hwsim hwsim26 wlan1: entered promiscuous mode [ 479.497150][T19848] batadv0: entered promiscuous mode [ 479.520371][T19848] gretap0: entered promiscuous mode [ 479.546827][T19848] bond0: left promiscuous mode [ 479.551669][T19848] bond_slave_0: left promiscuous mode [ 479.588192][T19848] bond_slave_1: left promiscuous mode [ 479.594425][T19848] mac80211_hwsim hwsim26 wlan1: left promiscuous mode [ 479.619494][T19848] batadv0: left promiscuous mode [ 479.637975][T19848] gretap0: left promiscuous mode [ 479.979382][T19881] syzkaller1: entered promiscuous mode [ 479.999642][T19881] syzkaller1: entered allmulticast mode [ 480.020985][T19887] netlink: 'syz.4.3800': attribute type 2 has an invalid length. [ 480.286759][T19897] syzkaller0: entered promiscuous mode [ 480.309563][T19897] syzkaller0: entered allmulticast mode [ 480.372521][T19903] syzkaller1: entered promiscuous mode [ 480.378434][T19903] syzkaller1: entered allmulticast mode [ 480.439782][T19901] netlink: 'syz.2.3806': attribute type 58 has an invalid length. [ 480.506470][T19908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.078672][T19943] __nla_validate_parse: 10 callbacks suppressed [ 481.078695][T19943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3819'. [ 481.111981][T19949] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3821'. [ 481.227078][T19958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3817'. [ 481.238802][T19958] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 481.290545][T19962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3822'. [ 482.021100][T19991] IPv6: NLM_F_CREATE should be specified when creating new route [ 483.294973][ T5144] Bluetooth: hci5: command 0x0406 tx timeout [ 484.041959][T19942] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 484.192670][T20001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3829'. [ 484.653038][T20034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3837'. [ 484.674284][T20031] syzkaller1: entered promiscuous mode [ 484.710739][T20031] syzkaller1: entered allmulticast mode [ 484.760345][T20038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3838'. [ 484.772102][T20038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3838'. [ 484.928813][T20050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3838'. [ 485.062553][T20050] bridge0: port 3(dummy0) entered disabled state [ 485.083951][T20050] dummy0 (unregistering): left allmulticast mode [ 485.104031][T20061] netlink: 'syz.2.3842': attribute type 8 has an invalid length. [ 485.116122][T20050] bridge0: port 3(dummy0) entered disabled state [ 485.362611][T20075] netlink: 'syz.3.3849': attribute type 13 has an invalid length. [ 485.375513][T20071] lo: Caught tx_queue_len zero misconfig [ 485.562103][T20091] Bluetooth: MGMT ver 1.23 [ 485.811930][T20082] virt_wifi0 speed is unknown, defaulting to 1000 [ 485.923884][T20103] erspan0: entered promiscuous mode [ 485.943924][T20103] erspan0: entered allmulticast mode [ 486.169732][T20082] lo speed is unknown, defaulting to 1000 [ 486.294900][T20119] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3856'. [ 486.383065][T20124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3857'. [ 486.411954][T20124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3857'. [ 486.940168][T20156] netlink: 'syz.0.3864': attribute type 83 has an invalid length. [ 487.036134][T20161] netlink: 'syz.1.3865': attribute type 3 has an invalid length. [ 487.084243][T20161] netlink: 'syz.1.3865': attribute type 1 has an invalid length. [ 487.111584][T20161] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3865'. [ 487.635854][T20178] netlink: 'syz.2.3867': attribute type 8 has an invalid length. [ 488.002148][T20189] Dead loop on virtual device ip6_vti0, fix it urgently! [ 488.027608][T20191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3870'. [ 488.122646][T20197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3874'. [ 488.143895][T20196] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3871'. [ 488.149204][T20198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3873'. [ 488.165541][T20197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3874'. [ 488.185933][T20196] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3871'. [ 488.267217][T17320] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.285522][T17320] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.314465][T17320] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.337692][T17320] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.364517][T20205] xt_TPROXY: Can be used only with -p tcp or -p udp [ 488.491113][T20213] netlink: 'syz.4.3877': attribute type 1 has an invalid length. [ 488.754902][T20229] netlink: 'syz.4.3882': attribute type 4 has an invalid length. [ 488.920688][T20242] lo: Caught tx_queue_len zero misconfig [ 489.084343][T20253] netlink: 'syz.4.3887': attribute type 1 has an invalid length. [ 489.101269][T20253] netlink: 'syz.4.3887': attribute type 2 has an invalid length. [ 489.287486][T20275] ip6tnl0: Caught tx_queue_len zero misconfig [ 489.353170][T20284] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20004 [ 492.027566][T20249] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 492.055088][T20264] validate_nla: 1 callbacks suppressed [ 492.055108][T20264] netlink: 'syz.4.3891': attribute type 1 has an invalid length. [ 492.080008][T20264] netlink: 'syz.4.3891': attribute type 1 has an invalid length. [ 492.262790][T20332] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 492.288618][T20328] xt_l2tp: v2 tid > 0xffff: 1114244 [ 492.318518][T20327] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 492.373923][T20327] bond4 (unregistering): Released all slaves [ 492.410031][T20342] __nla_validate_parse: 5 callbacks suppressed [ 492.410051][T20342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3911'. [ 492.418408][T20345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3912'. [ 492.435453][T20345] nbd: must specify at least one socket [ 492.441122][T20342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3911'. [ 492.471362][T20342] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3911'. [ 492.528432][T20345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3912'. [ 492.678169][T20352] syzkaller1: entered promiscuous mode [ 492.694174][T20352] syzkaller1: entered allmulticast mode [ 492.798383][T20367] openvswitch: netlink: IP tunnel TTL not specified. [ 492.799765][T20368] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3919'. [ 492.907098][T20373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3920'. [ 493.016090][T20385] netlink: 'syz.2.3923': attribute type 1 has an invalid length. [ 493.042326][T20385] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3923'. [ 493.080420][T20385] netlink: 658 bytes leftover after parsing attributes in process `syz.2.3923'. [ 493.101147][T20385] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3923'. [ 493.411266][T20405] syzkaller0: entered promiscuous mode [ 493.420616][T20405] syzkaller0: entered allmulticast mode [ 493.568601][T20419] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20000 [ 493.652850][T20423] tipc: Failed to remove unknown binding: 66,0,0/0:2712461131/2712461132 [ 493.678383][T20423] tipc: Failed to remove unknown binding: 66,0,0/0:2712461131/2712461132 [ 493.826709][T20439] pimreg1: entered allmulticast mode [ 493.980520][T20446] delete_channel: no stack [ 494.183526][T20459] netlink: 'syz.2.3943': attribute type 10 has an invalid length. [ 494.878060][T20507] netlink: 'syz.4.3956': attribute type 1 has an invalid length. [ 494.951245][T20507] 8021q: adding VLAN 0 to HW filter on device bond3 [ 494.968574][T20513] bond3: entered promiscuous mode [ 494.983787][T20513] bond3: entered allmulticast mode [ 495.076796][T20518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.183099][T20523] netlink: 'syz.1.3962': attribute type 1 has an invalid length. [ 495.294276][T20523] 8021q: adding VLAN 0 to HW filter on device bond4 [ 495.442324][T20532] bond4: (slave gretap1): making interface the new active one [ 495.451622][T20532] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 495.471096][T20527] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 495.502198][T20527] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 495.523955][T20527] gretap1: entered promiscuous mode [ 495.545195][T20527] gretap1: entered allmulticast mode [ 495.642258][T20548] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 495.661185][T20553] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 496.077847][T20577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.079439][T20578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.131507][T20582] openvswitch: netlink: IPv4 tun info is not correct [ 496.397972][T20604] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 496.496650][T20611] xt_policy: neither incoming nor outgoing policy selected [ 496.719841][T20622] netlink: 'syz.0.3992': attribute type 4 has an invalid length. [ 496.771853][T20629] netlink: 'syz.0.3992': attribute type 4 has an invalid length. [ 497.095992][T20644] syzkaller0: entered promiscuous mode [ 499.222871][T20697] dummy0: Caught tx_queue_len zero misconfig [ 500.102456][T20657] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 500.352274][T20708] __nla_validate_parse: 16 callbacks suppressed [ 500.352298][T20708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4009'. [ 500.384868][T20708] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4009'. [ 500.427981][T20708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4009'. [ 500.445134][T17308] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.455280][T20708] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4009'. [ 500.457005][T20706] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4011'. [ 500.473876][T17308] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.494500][T17308] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.533415][T17308] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.550056][T20706] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4011'. [ 500.756662][T20726] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4017'. [ 500.757563][T20727] netlink: 'syz.2.4018': attribute type 4 has an invalid length. [ 500.843887][T20727] netlink: 'syz.2.4018': attribute type 4 has an invalid length. [ 500.947804][T20740] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 501.260795][T20759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4026'. [ 501.279249][T20762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4030'. [ 501.287434][T20763] x_tables: unsorted underflow at hook 3 [ 501.290438][T20762] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4030'. [ 501.698348][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.705293][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.004156][T20795] netlink: 'syz.3.4038': attribute type 29 has an invalid length. [ 502.012905][T20797] netlink: 'syz.3.4038': attribute type 29 has an invalid length. [ 502.021172][T20797] netlink: 'syz.3.4038': attribute type 29 has an invalid length. [ 502.029681][T20797] netlink: 'syz.3.4038': attribute type 29 has an invalid length. [ 502.038114][T20797] netlink: 'syz.3.4038': attribute type 29 has an invalid length. [ 502.047426][T20797] netlink: 'syz.3.4038': attribute type 29 has an invalid length. [ 504.087168][T20749] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 504.685474][T20836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.950232][T20851] netlink: 'syz.0.4051': attribute type 32 has an invalid length. [ 504.962178][T20847] 0: renamed from hsr_slave_1 (while UP) [ 504.971656][T20847] 0: entered allmulticast mode [ 504.977404][T20847] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 505.042258][T20851] bond4: Setting coupled_control to off (0) [ 505.193261][T20861] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.255653][T20861] team0: Cannot enslave team device to itself [ 505.584821][ C0] hrtimer: interrupt took 724228 ns [ 507.605960][T20901] __nla_validate_parse: 6 callbacks suppressed [ 507.606021][T20901] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4060'. [ 507.625857][T20901] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4060'. [ 507.671170][T20904] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4066'. [ 507.909146][T20877] virt_wifi0 speed is unknown, defaulting to 1000 [ 507.944927][T20911] bridge4: entered promiscuous mode [ 507.950200][T20911] bridge4: entered allmulticast mode [ 508.140206][T20923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.166180][T20923] netlink: 580 bytes leftover after parsing attributes in process `syz.2.4072'. [ 508.176357][T20928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4073'. [ 508.195739][T20923] openvswitch: netlink: IP tunnel TTL not specified. [ 508.364075][T20877] lo speed is unknown, defaulting to 1000 [ 508.387559][T20935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4077'. [ 508.582889][T20944] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4080'. [ 508.597246][T20944] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4080'. [ 508.619401][T20946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4081'. [ 508.644857][T20946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4081'. [ 508.678200][T20946] netlink: 'syz.2.4081': attribute type 15 has an invalid length. [ 508.712507][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ee23800: rx timeout, send abort [ 508.746065][T20952] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 508.771579][T17308] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 508.790468][T20946] netlink: 'syz.2.4081': attribute type 15 has an invalid length. [ 508.799004][T17308] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 508.815186][T17308] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 508.826065][T17308] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 508.907106][T20954] : entered promiscuous mode [ 509.212581][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ee23400: rx timeout, send abort [ 509.221513][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ee23800: abort rx timeout. Force session deactivation [ 509.239997][T20976] batadv_slave_0: Caught tx_queue_len zero misconfig [ 509.329640][T20979] netlink: 'syz.3.4092': attribute type 11 has an invalid length. [ 509.720941][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ee23400: abort rx timeout. Force session deactivation [ 509.755573][T21002] tipc: Started in network mode [ 509.760522][T21002] tipc: Node identity 6ea1596892d6, cluster identity 4711 [ 509.776658][T21002] tipc: Enabled bearer , priority 0 [ 509.930519][T21002] syzkaller0: entered promiscuous mode [ 509.938755][T21002] syzkaller0: entered allmulticast mode [ 509.953480][T21002] tipc: Resetting bearer [ 509.961114][T21017] nbd: device at index 64 is going down [ 509.971437][T21000] tipc: Resetting bearer [ 510.133959][T13224] udevd[13224]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 510.175921][T12142] udevd[12142]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 511.781297][T21000] tipc: Disabling bearer [ 511.815988][ T6839] tipc: Node number set to 4235680104 [ 512.046273][ T5943] IPVS: starting estimator thread 0... [ 512.116431][T21060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 512.150780][T21057] IPVS: using max 29 ests per chain, 69600 per kthread [ 512.445762][T21065] nbd0: detected capacity change from 0 to 127 [ 512.460276][ T5841] block nbd0: Receive control failed (result -32) [ 512.466429][T12142] block nbd0: Send control failed (result -32) [ 512.492512][T12142] block nbd0: Request send failed, requeueing [ 512.548703][T12142] block nbd0: Dead connection, failed to find a fallback [ 512.573143][T21079] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 512.583816][T12142] block nbd0: shutting down sockets [ 512.590728][ T1732] blk_print_req_error: 285 callbacks suppressed [ 512.590746][ T1732] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 512.609965][ T1732] buffer_io_error: 286 callbacks suppressed [ 512.609980][ T1732] Buffer I/O error on dev nbd0, logical block 0, async page read [ 512.627026][T12142] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 512.637112][T12142] Buffer I/O error on dev nbd0, logical block 1, async page read [ 512.645648][T12142] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 512.656325][T12142] Buffer I/O error on dev nbd0, logical block 2, async page read [ 512.664152][T12142] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 512.674324][T12142] Buffer I/O error on dev nbd0, logical block 3, async page read [ 512.682550][T12142] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 512.692892][T12142] Buffer I/O error on dev nbd0, logical block 0, async page read [ 512.705195][T12142] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 512.725133][T12142] Buffer I/O error on dev nbd0, logical block 1, async page read [ 512.732973][T12142] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 512.742992][T12142] Buffer I/O error on dev nbd0, logical block 2, async page read [ 512.751608][T12142] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 512.761703][T12142] Buffer I/O error on dev nbd0, logical block 3, async page read [ 512.769969][T12142] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 512.780087][T12142] Buffer I/O error on dev nbd0, logical block 0, async page read [ 512.788412][T12142] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 512.799698][T12142] Buffer I/O error on dev nbd0, logical block 1, async page read [ 512.809778][T12142] ldm_validate_partition_table(): Disk read failed. [ 512.818233][T12142] Dev nbd0: unable to read RDB block 0 [ 512.824537][T12142] nbd0: unable to read partition table [ 512.856585][T12142] ldm_validate_partition_table(): Disk read failed. [ 512.863903][T12142] Dev nbd0: unable to read RDB block 0 [ 512.872263][T12142] nbd0: unable to read partition table [ 512.934211][T21102] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 512.968209][T21104] netlink: 'syz.2.4123': attribute type 4 has an invalid length. [ 513.021125][T21106] sctp: [Deprecated]: syz.1.4124 (pid 21106) Use of struct sctp_assoc_value in delayed_ack socket option. [ 513.021125][T21106] Use struct sctp_sack_info instead [ 513.035877][T21107] tipc: Enabled bearer , priority 10 [ 513.175073][T21119] __nla_validate_parse: 14 callbacks suppressed [ 513.175096][T21119] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.4127'. [ 513.289584][T21126] netlink: 'syz.1.4129': attribute type 2 has an invalid length. [ 513.326775][T21128] netlink: 516 bytes leftover after parsing attributes in process `syz.3.4130'. [ 513.379029][T21134] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4129'. [ 513.785381][T21157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4137'. [ 515.042322][ T5901] IPVS: starting estimator thread 0... [ 515.145455][T21196] IPVS: using max 28 ests per chain, 67200 per kthread [ 515.339931][T21216] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4153'. [ 515.703197][T21223] netlink: zone id is out of range [ 515.708669][T21223] netlink: zone id is out of range [ 515.713822][T21223] netlink: zone id is out of range [ 515.719273][T21223] netlink: zone id is out of range [ 515.724409][T21223] netlink: zone id is out of range [ 515.729794][T21223] netlink: zone id is out of range [ 515.735287][T21223] netlink: zone id is out of range [ 515.740489][T21223] netlink: set zone limit has 4 unknown bytes [ 516.374514][T21139] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 516.384407][T21146] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 516.525939][T21227] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4157'. [ 516.543648][T21229] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 516.676847][T21237] netlink: 'syz.3.4161': attribute type 1 has an invalid length. [ 516.699657][T21237] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4161'. [ 516.730254][T21237] netlink: 'syz.3.4161': attribute type 1 has an invalid length. [ 516.739108][T21237] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4161'. [ 516.748821][T21237] netlink: 'syz.3.4161': attribute type 1 has an invalid length. [ 516.757338][T21237] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4161'. [ 516.787100][T21237] netlink: 'syz.3.4161': attribute type 1 has an invalid length. [ 516.799625][T21237] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4161'. [ 516.828903][T21239] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 516.839192][T21237] netlink: 'syz.3.4161': attribute type 1 has an invalid length. [ 516.847696][T21237] netlink: 'syz.3.4161': attribute type 1 has an invalid length. [ 516.855995][T21237] netlink: 'syz.3.4161': attribute type 1 has an invalid length. [ 516.864082][T21237] netlink: 'syz.3.4161': attribute type 1 has an invalid length. [ 516.873450][T21237] netlink: 'syz.3.4161': attribute type 1 has an invalid length. [ 516.883072][T21237] netlink: 'syz.3.4161': attribute type 1 has an invalid length. [ 516.913247][T21244] team0: Port device team_slave_0 removed [ 516.939846][T21239] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.017280][T21249] tap0: tun_chr_ioctl cmd 2148553947 [ 517.026734][T21239] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.137962][T21239] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.268319][T17314] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.309550][T17314] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.355451][T17314] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.410963][T17320] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 518.025651][T21284] syzkaller1: entered allmulticast mode [ 518.181137][T17314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.209076][T17314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.661064][T21322] bond4: entered promiscuous mode [ 518.672414][T21322] 8021q: adding VLAN 0 to HW filter on device bond4 [ 518.716244][T21334] __nla_validate_parse: 36 callbacks suppressed [ 518.716265][T21334] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4191'. [ 518.879456][T21343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4193'. [ 518.945388][T21343] hsr_slave_0: left promiscuous mode [ 518.966920][T21349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4195'. [ 518.995161][T21343] hsr_slave_1: left promiscuous mode [ 519.074420][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 519.142992][T21355] openvswitch: netlink: Message has 1 unknown bytes. [ 519.174828][T21355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.348413][T21361] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 519.486668][T21385] syzkaller0: entered promiscuous mode [ 519.511461][T21385] syzkaller0: entered allmulticast mode [ 519.679088][T21397] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4206'. [ 519.948490][T21408] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4209'. [ 520.034587][T21420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4213'. [ 520.085155][T21420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4213'. [ 520.090456][T21424] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 520.095136][T21426] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4216'. [ 520.153710][T21426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4216'. [ 520.195213][T21426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4216'. [ 520.497802][ T5489] 8021q: adding VLAN 0 to HW filter on device eth2 [ 520.627857][T21442] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 520.994555][T21466] : entered promiscuous mode [ 521.029367][T21468] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 521.144475][T21470] vlan3: entered allmulticast mode [ 521.165477][T21470] bond0: entered allmulticast mode [ 521.170841][T21470] bond_slave_0: entered allmulticast mode [ 521.185007][T21470] bond_slave_1: entered allmulticast mode [ 521.203943][T21476] openvswitch: netlink: Invalid VLAN frame [ 521.351469][T21471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.373529][T21471] bond_slave_0: left allmulticast mode [ 521.393821][T21471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.433206][T21471] bond_slave_1: left allmulticast mode [ 521.459982][T21471] bond0 (unregistering): Released all slaves [ 521.666081][T21491] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.668663][T21459] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 521.690831][T21459] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 521.698313][T21491] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 521.724747][T21491] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.818189][T21459] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 521.833813][T21513] netlink: get zone limit has 4 unknown bytes [ 521.842100][T21459] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 521.933132][T21491] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.951885][T21491] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 521.975334][T21491] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.023305][ T5489] 8021q: adding VLAN 0 to HW filter on device eth3 [ 522.069618][T21491] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.082984][T21491] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 522.093988][T21491] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.105278][T21517] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 522.132503][T21459] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 522.149891][T21459] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 522.202551][T21522] validate_nla: 25 callbacks suppressed [ 522.202572][T21522] netlink: 'syz.0.4240': attribute type 21 has an invalid length. [ 522.267848][T21459] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 522.276332][T21459] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 522.312352][T21491] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.323417][T21491] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 522.334834][T21491] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.438017][T21459] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 522.455976][T21459] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 522.713032][T17310] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.748220][T17310] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 522.770074][T17310] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.839187][T17320] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.849966][T17320] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 522.860493][T17320] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.891669][T17320] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.902403][T17320] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 522.911478][T17320] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.984217][T17315] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.993335][T17315] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 523.026264][T17315] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.159331][T21568] netlink: 'syz.2.4251': attribute type 8 has an invalid length. [ 523.283188][ T5489] 8021q: adding VLAN 0 to HW filter on device eth4 [ 523.712327][T21592] syzkaller0: entered promiscuous mode [ 523.718260][T21592] syzkaller0: entered allmulticast mode [ 523.912797][T21604] sctp: [Deprecated]: syz.3.4258 (pid 21604) Use of int in max_burst socket option. [ 523.912797][T21604] Use struct sctp_assoc_value instead [ 524.229808][T21617] __nla_validate_parse: 10 callbacks suppressed [ 524.229834][T21617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4262'. [ 524.352704][T21625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 524.360058][T21625] IPv6: NLM_F_CREATE should be set when creating new route [ 524.367411][T21625] IPv6: NLM_F_CREATE should be set when creating new route [ 524.374705][T21625] IPv6: NLM_F_CREATE should be set when creating new route [ 524.443719][T21629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4264'. [ 524.826424][T21651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4268'. [ 525.071647][T21669] netlink: 'syz.1.4272': attribute type 2 has an invalid length. [ 525.086741][T21667] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4273'. [ 525.110751][T21668] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4274'. [ 525.251307][T21676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4275'. [ 525.463464][T21687] netlink: 'syz.0.4276': attribute type 33 has an invalid length. [ 525.480575][T21690] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4276'. [ 525.565953][T21692] nbd2: detected capacity change from 0 to 127 [ 525.600753][ T5841] block nbd2: Receive control failed (result -32) [ 525.618245][T12142] block nbd2: Dead connection, failed to find a fallback [ 525.652222][T12142] block nbd2: shutting down sockets [ 525.668284][T12142] blk_print_req_error: 138 callbacks suppressed [ 525.668306][T12142] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 525.697829][T12142] buffer_io_error: 138 callbacks suppressed [ 525.697849][T12142] Buffer I/O error on dev nbd2, logical block 0, async page read [ 525.719432][T12142] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 525.754857][T12142] Buffer I/O error on dev nbd2, logical block 1, async page read [ 525.762774][T12142] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 525.815555][T12142] Buffer I/O error on dev nbd2, logical block 2, async page read [ 525.823600][T12142] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 525.864331][T21712] team0 (unregistering): Port device team_slave_1 removed [ 525.891453][T12142] Buffer I/O error on dev nbd2, logical block 3, async page read [ 525.903670][T12142] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 525.926501][T12142] Buffer I/O error on dev nbd2, logical block 0, async page read [ 525.941491][T12142] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 525.962230][T12142] Buffer I/O error on dev nbd2, logical block 1, async page read [ 526.001673][T12142] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 526.039561][T12142] Buffer I/O error on dev nbd2, logical block 2, async page read [ 526.070534][T12142] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 526.115863][T21728] netlink: 'syz.0.4284': attribute type 1 has an invalid length. [ 526.144784][T12142] Buffer I/O error on dev nbd2, logical block 3, async page read [ 526.167768][T12142] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 526.198077][T21731] nbd: must specify a device to reconfigure [ 526.210030][T12142] Buffer I/O error on dev nbd2, logical block 0, async page read [ 526.241899][T12142] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 526.271809][T12142] Buffer I/O error on dev nbd2, logical block 1, async page read [ 526.308209][T12142] ldm_validate_partition_table(): Disk read failed. [ 526.355360][T12142] Dev nbd2: unable to read RDB block 0 [ 526.375763][T12142] nbd2: unable to read partition table [ 526.380155][T21738] IPVS: set_ctl: invalid protocol: 120 10.1.1.1:20001 [ 526.398466][T12142] ldm_validate_partition_table(): Disk read failed. [ 526.455916][T12142] Dev nbd2: unable to read RDB block 0 [ 526.462116][T12142] nbd2: unable to read partition table [ 526.871272][T21767] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20003 [ 527.282563][T21793] netlink: 'syz.0.4303': attribute type 7 has an invalid length. [ 527.301842][T21788] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4301'. [ 527.356146][T21793] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4303'. [ 527.536169][T21806] netlink: 'syz.3.4305': attribute type 1 has an invalid length. [ 527.599495][T21811] netlink: 'syz.1.4306': attribute type 3 has an invalid length. [ 527.608928][T21811] netlink: 'syz.1.4306': attribute type 1 has an invalid length. [ 527.617484][T21811] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4306'. [ 527.668872][T21806] 8021q: adding VLAN 0 to HW filter on device bond3 [ 527.692906][T21808] virt_wifi0 speed is unknown, defaulting to 1000 [ 527.701993][T21822] bond3: option mode: unable to set because the bond device is up [ 527.780570][T21820] bond5: Removing last arp target with arp_interval on [ 527.936870][T21830] netlink: 'syz.3.4310': attribute type 1 has an invalid length. [ 528.171394][T21846] mac80211_hwsim hwsim26 : renamed from wlan1 [ 528.206053][T21808] lo speed is unknown, defaulting to 1000 [ 528.589118][T21867] netlink: 'syz.1.4321': attribute type 1 has an invalid length. [ 528.601687][T21867] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 528.741005][T21877] netlink: 'syz.3.4323': attribute type 1 has an invalid length. [ 528.877783][T21877] 8021q: adding VLAN 0 to HW filter on device bond4 [ 528.965722][T21888] openvswitch: netlink: IP tunnel dst address not specified [ 528.986354][T21875] syzkaller0: entered promiscuous mode [ 528.992023][T21875] syzkaller0: entered allmulticast mode [ 529.039304][T21885] bond4: (slave geneve3): making interface the new active one [ 529.051619][T21885] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 529.524608][T21915] __nla_validate_parse: 4 callbacks suppressed [ 529.524631][T21915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4331'. [ 529.541212][T21915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4331'. [ 530.938662][T21915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4331'. [ 530.957758][T21915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4331'. [ 530.967218][T21918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.979607][T21918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.026545][T21918] bond0: (slave batadv0): Releasing backup interface [ 531.061637][T21923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4334'. [ 531.140741][T21930] netlink: 'syz.0.4336': attribute type 3 has an invalid length. [ 531.484381][T21937] netlink: set zone limit has 4 unknown bytes [ 531.517072][T21956] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 531.806421][T21961] virt_wifi0 speed is unknown, defaulting to 1000 [ 531.897388][T21969] netlink: 'syz.0.4348': attribute type 21 has an invalid length. [ 531.915850][T21969] IPv6: NLM_F_CREATE should be specified when creating new route [ 532.095264][T21978] netlink: 'syz.4.4350': attribute type 142 has an invalid length. [ 532.327824][T21961] lo speed is unknown, defaulting to 1000 [ 532.341184][T21995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4355'. [ 532.485302][T21995] vlan2: entered allmulticast mode [ 532.490509][T21995] mac80211_hwsim hwsim32 wlan0: entered allmulticast mode [ 532.731071][T21993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4356'. [ 532.780998][T22019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4361'. [ 532.806856][T22020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4361'. [ 532.988200][T22032] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20001 [ 532.998605][T22020] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 533.139495][T22039] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4366'. [ 533.207098][T22039] 1: renamed from c0 (while UP) [ 533.226129][T22039] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check. [ 533.590836][T22058] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.602262][T22058] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.628908][T22061] netlink: 'syz.1.4373': attribute type 4 has an invalid length. [ 533.777977][T22058] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.795132][T22058] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.951206][T22058] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.962618][T22058] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.063602][T22058] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.082721][T22058] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.261749][T17314] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.317108][T17314] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.385772][T17314] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.413198][T17314] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.447265][T17308] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.467686][T17308] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.526724][T17308] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.535910][T17308] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.677490][T22128] __nla_validate_parse: 1 callbacks suppressed [ 534.677513][T22128] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4392'. [ 534.697768][T22121] tipc: Started in network mode [ 534.702696][T22121] tipc: Node identity d6bc3f6cecf3, cluster identity 4711 [ 534.734337][T22121] tipc: Enabled bearer , priority 0 [ 534.760412][T22131] syzkaller0: entered promiscuous mode [ 534.773660][T22131] syzkaller0: entered allmulticast mode [ 534.859859][T22131] tipc: Resetting bearer [ 534.920131][T22119] tipc: Resetting bearer [ 534.955737][T22119] tipc: Disabling bearer [ 535.131129][T22159] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4400'. [ 535.152237][T22159] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4400'. [ 535.252653][T22165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4403'. [ 535.306166][T22165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4403'. [ 535.318175][T22165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4403'. [ 535.346451][T22169] netlink: 'syz.1.4404': attribute type 11 has an invalid length. [ 535.368725][T22173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4404'. [ 535.401217][T22174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4404'. [ 535.623172][T22194] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4412'. [ 535.762715][T22200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4414'. [ 535.878799][T22200] 8021q: adding VLAN 0 to HW filter on device bond6 [ 535.884023][T22210] netlink: 'syz.1.4416': attribute type 10 has an invalid length. [ 535.980291][T22200] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 536.403630][T22233] bond5: option lp_interval: invalid value (0) [ 536.410296][T22233] bond5: option lp_interval: allowed values 1 - 2147483647 [ 536.424249][T22233] bond5 (unregistering): Released all slaves [ 536.450715][T22239] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 536.612655][T22249] tipc: Enabling of bearer rejected, failed to enable media [ 536.626778][T22252] netlink: 'syz.3.4427': attribute type 1 has an invalid length. [ 536.723865][T22256] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 536.879818][T22261] netlink: 'syz.0.4432': attribute type 1 has an invalid length. [ 536.923122][T22265] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.158826][T22274] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 537.178425][T22274] macvlan3: entered promiscuous mode [ 537.183788][T22274] macvlan3: entered allmulticast mode [ 537.191578][T22274] bond6: entered promiscuous mode [ 537.197197][T22274] bridge4: entered promiscuous mode [ 537.203606][T22274] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 537.213226][T22274] bond6: left promiscuous mode [ 537.222549][T22274] bridge4: left promiscuous mode [ 537.354288][T22286] bridge5: entered promiscuous mode [ 537.367407][T22286] bridge5: entered allmulticast mode [ 537.392240][T22296] unsupported nlmsg_type 40 [ 537.460063][T22306] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 537.467443][T22306] IPv6: NLM_F_CREATE should be set when creating new route [ 540.239440][T22284] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 540.587303][T22391] syzkaller0: entered promiscuous mode [ 540.607897][T22391] syzkaller0: entered allmulticast mode [ 540.748094][T22400] __nla_validate_parse: 7 callbacks suppressed [ 540.748119][T22400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4450'. [ 540.794798][T22394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4450'. [ 540.927610][T22414] netlink: 'syz.3.4457': attribute type 1 has an invalid length. [ 540.933956][T22416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4456'. [ 540.944759][T22416] netlink: 50 bytes leftover after parsing attributes in process `syz.1.4456'. [ 540.953967][T22416] netlink: 50 bytes leftover after parsing attributes in process `syz.1.4456'. [ 541.058941][T22424] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 541.094006][T22414] 8021q: adding VLAN 0 to HW filter on device bond5 [ 541.223240][T22436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4460'. [ 541.421465][T22436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4460'. [ 541.439557][T22447] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4464'. [ 541.726710][T22455] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4467'. [ 541.806107][T22466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4469'. [ 541.869190][T22469] block nbd4: not configured, cannot reconfigure [ 542.004290][T22462] delete_channel: no stack [ 542.015283][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 542.166546][T22483] IPVS: Error connecting to the multicast addr [ 542.284397][T22483] virt_wifi0 speed is unknown, defaulting to 1000 [ 542.831709][T22483] lo speed is unknown, defaulting to 1000 [ 543.054837][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 544.095309][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 544.272484][T22541] netlink: 'syz.2.4488': attribute type 10 has an invalid length. [ 544.372150][T22538] syzkaller0: entered promiscuous mode [ 544.378095][T22538] syzkaller0: entered allmulticast mode [ 544.390334][T22541] bond0: (slave wlan1): Opening slave failed [ 544.415871][T22537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.139686][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 546.148382][ T5193] udevd[5193]: worker [12236] /devices/virtual/block/nbd1 timeout; kill it [ 546.158748][ T5193] udevd[5193]: seq 19362 '/devices/virtual/block/nbd1' killed [ 546.179011][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 546.257574][T22572] __nla_validate_parse: 7 callbacks suppressed [ 546.257595][T22572] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4492'. [ 546.317197][T22576] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4494'. [ 546.452124][T22583] x_tables: unsorted underflow at hook 4 [ 546.463710][T22583] sit0: entered promiscuous mode [ 546.469650][T22583] netlink: 'syz.1.4497': attribute type 1 has an invalid length. [ 546.479121][T22583] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4497'. [ 546.576867][T22587] netlink: 'syz.1.4499': attribute type 83 has an invalid length. [ 546.767918][T22602] mac80211_hwsim hwsim25 wlan0: Caught tx_queue_len zero misconfig [ 546.843192][T22602] ip6tnl3: entered promiscuous mode [ 547.020811][T22618] netlink: 'syz.2.4510': attribute type 3 has an invalid length. [ 547.084123][T22618] netlink: 'syz.2.4510': attribute type 3 has an invalid length. [ 547.214860][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 547.301140][T22631] bridge_slave_0 (unregistering): left allmulticast mode [ 547.331604][T22631] bridge_slave_0 (unregistering): left promiscuous mode [ 547.358258][T22631] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.405535][T22637] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4514'. [ 547.416634][T22637] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 548.145734][T22671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4526'. [ 548.177487][T22671] syzkaller1: entered promiscuous mode [ 548.183135][T22671] syzkaller1: entered allmulticast mode [ 548.254045][T22668] virt_wifi0 speed is unknown, defaulting to 1000 [ 548.260824][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 548.558548][T22668] lo speed is unknown, defaulting to 1000 [ 548.610361][T22677] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4527'. [ 548.631415][T22677] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.759126][T22683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4529'. [ 548.820910][T22683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4529'. [ 548.885212][T22683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4529'. [ 549.105237][T22696] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 549.182229][T22699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4534'. [ 549.213724][T22699] veth0_virt_wifi: entered promiscuous mode [ 549.294771][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 549.840586][T22732] netlink: 'syz.4.4543': attribute type 7 has an invalid length. [ 549.913805][T22735] syzkaller0: entered promiscuous mode [ 549.934771][T22735] 0: reclassify loop, rule prio 0, protocol 800 [ 550.129713][T22741] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 550.266744][T22748] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 550.323107][T22752] sctp: [Deprecated]: syz.2.4548 (pid 22752) Use of struct sctp_assoc_value in delayed_ack socket option. [ 550.323107][T22752] Use struct sctp_sack_info instead [ 550.348936][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 550.383609][T22755] netlink: 'syz.1.4549': attribute type 10 has an invalid length. [ 550.754984][T22774] syzkaller1: entered promiscuous mode [ 550.760797][T22774] syzkaller1: entered allmulticast mode [ 551.016486][T22781] bond7: Removing last arp target with arp_interval on [ 551.201902][T22789] FAULT_INJECTION: forcing a failure. [ 551.201902][T22789] name failslab, interval 1, probability 0, space 0, times 0 [ 551.216568][T22789] CPU: 1 UID: 0 PID: 22789 Comm: syz.2.4560 Not tainted syzkaller #0 PREEMPT(full) [ 551.216597][T22789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 551.216610][T22789] Call Trace: [ 551.216618][T22789] [ 551.216627][T22789] dump_stack_lvl+0xe8/0x150 [ 551.216661][T22789] should_fail_ex+0x412/0x560 [ 551.216696][T22789] ? __d_alloc+0x37/0x6f0 [ 551.216718][T22789] should_failslab+0xa8/0x100 [ 551.216747][T22789] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 551.216779][T22789] __d_alloc+0x37/0x6f0 [ 551.216798][T22789] ? rcu_is_watching+0x15/0xb0 [ 551.216831][T22789] d_alloc_pseudo+0x21/0xc0 [ 551.216853][T22789] alloc_file_pseudo+0xdd/0x240 [ 551.216881][T22789] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 551.216905][T22789] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 551.216932][T22789] ? evm_inode_alloc_security+0x40/0xb0 [ 551.216960][T22789] ? security_inode_alloc+0xd5/0x310 [ 551.216994][T22789] sock_alloc_file+0xb8/0x2e0 [ 551.217020][T22789] do_accept+0x3a0/0x760 [ 551.217050][T22789] ? __pfx_do_accept+0x10/0x10 [ 551.217098][T22789] __sys_accept4+0x139/0x230 [ 551.217125][T22789] ? __pfx___sys_accept4+0x10/0x10 [ 551.217148][T22789] ? __pfx_ksys_write+0x10/0x10 [ 551.217181][T22789] __x64_sys_accept+0x7d/0x90 [ 551.217215][T22789] do_syscall_64+0x14d/0xf80 [ 551.217243][T22789] ? trace_irq_disable+0x3b/0x150 [ 551.217262][T22789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.217282][T22789] ? clear_bhb_loop+0x40/0x90 [ 551.217309][T22789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.217328][T22789] RIP: 0033:0x7ff24dd9c819 [ 551.217349][T22789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.217365][T22789] RSP: 002b:00007ff24ece5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 551.217387][T22789] RAX: ffffffffffffffda RBX: 00007ff24e015fa0 RCX: 00007ff24dd9c819 [ 551.217402][T22789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 551.217414][T22789] RBP: 00007ff24ece5090 R08: 0000000000000000 R09: 0000000000000000 [ 551.217426][T22789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.217438][T22789] R13: 00007ff24e016038 R14: 00007ff24e015fa0 R15: 00007ffe94c84218 [ 551.217472][T22789] [ 551.451584][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 551.798175][T22817] openvswitch: netlink: Invalid VLAN frame [ 552.025290][T22819] __nla_validate_parse: 11 callbacks suppressed [ 552.025315][T22819] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4568'. [ 552.494842][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 552.582124][T22856] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4579'. [ 552.631405][T22863] tipc: Enabling of bearer rejected, failed to enable media [ 552.757540][T22863] syzkaller0: entered allmulticast mode [ 553.040035][T22884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4587'. [ 553.090375][T22885] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4586'. [ 553.126890][T22892] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4586'. [ 553.156798][T22885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4586'. [ 553.227054][T22895] netlink: 'syz.0.4589': attribute type 11 has an invalid length. [ 553.249478][T22895] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4589'. [ 553.259494][T22894] netlink: 'syz.0.4589': attribute type 11 has an invalid length. [ 553.309225][T22894] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4589'. [ 553.534918][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 553.639752][T22923] netlink: 'syz.2.4596': attribute type 1 has an invalid length. [ 553.649468][T22923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4596'. [ 553.668312][T22923] netlink: 'syz.2.4596': attribute type 1 has an invalid length. [ 553.677637][T22923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4596'. [ 554.205474][T22965] netlink: 'syz.3.4608': attribute type 1 has an invalid length. [ 554.267221][T22966] syzkaller0: entered promiscuous mode [ 554.286276][T22966] syzkaller0: entered allmulticast mode [ 554.481309][T22977] netlink: 'syz.2.4611': attribute type 2 has an invalid length. [ 554.574846][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 554.709848][T22993] erspan0: left allmulticast mode [ 554.783036][T23000] SET target dimension over the limit! [ 555.153933][T23021] hsr_slave_0 (unregistering): left promiscuous mode [ 555.624919][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 556.390885][T23106] netlink: 'syz.4.4656': attribute type 10 has an invalid length. [ 556.427151][T23106] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.450459][T23106] bridge_slave_1: left allmulticast mode [ 556.465139][T23106] bridge_slave_1: left promiscuous mode [ 556.476507][T23106] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.512682][T23106] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 556.654834][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 557.697526][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 558.460578][T23109] vlan2: entered allmulticast mode [ 558.466047][T23109] bridge3: entered allmulticast mode [ 558.466125][T23132] __nla_validate_parse: 11 callbacks suppressed [ 558.466140][T23132] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4662'. [ 558.473149][T23120] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4661'. [ 558.497398][T23120] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4661'. [ 558.507706][T23124] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 558.730555][T23151] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4665'. [ 558.744818][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 558.812802][T23151] netlink: Conntrack attr has 4 unknown bytes [ 558.874203][T23151] syzkaller0: entered promiscuous mode [ 558.880658][T23151] syzkaller0: entered allmulticast mode [ 558.934315][T23164] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4670'. [ 559.005523][T23168] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 559.027780][T23164] netem: incorrect gi model size [ 559.033481][T23164] netem: change failed [ 559.160211][T23168] syzkaller0: entered promiscuous mode [ 559.167520][T23168] syzkaller0: entered allmulticast mode [ 559.433351][T23189] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4674'. [ 559.777206][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 560.824751][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 561.227459][T23202] netlink: 'syz.4.4679': attribute type 1 has an invalid length. [ 561.259008][T23207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4681'. [ 561.332463][T23212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4682'. [ 561.339458][T23210] bond4: (slave bridge6): making interface the new active one [ 561.350653][T23210] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 561.434420][T23216] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20002 [ 561.600407][T23229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4685'. [ 561.632656][T23231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4689'. [ 561.865328][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 561.918660][T23238] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 562.124546][T23252] veth0_macvtap: left promiscuous mode [ 562.754605][T23295] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 562.769952][T23294] syzkaller0: entered promiscuous mode [ 562.814874][T23294] syzkaller0: entered allmulticast mode [ 562.895211][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 562.903157][T23298] netlink: 'syz.0.4708': attribute type 1 has an invalid length. [ 563.090838][T23304] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 563.143388][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.306773][T23309] netlink: 'syz.2.4711': attribute type 3 has an invalid length. [ 563.508996][T23318] virt_wifi0 speed is unknown, defaulting to 1000 [ 563.550851][T23325] __nla_validate_parse: 9 callbacks suppressed [ 563.550872][T23325] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4714'. [ 563.833856][T23329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4716'. [ 563.889118][T23329] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 563.904610][T23340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4720'. [ 563.917940][T23329] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 563.931112][T23329] team0: Failed to send options change via netlink (err -105) [ 563.938853][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 563.946766][T23329] team0: Port device batadv1 added [ 563.955197][T23338] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4719'. [ 564.019568][T23346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4721'. [ 564.063900][T23346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4721'. [ 564.121958][T23318] lo speed is unknown, defaulting to 1000 [ 564.279858][T23358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4724'. [ 564.316580][T23358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4724'. [ 564.347896][T23370] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4726'. [ 564.503455][T23370] syzkaller0: entered promiscuous mode [ 564.513879][T23370] syzkaller0: entered allmulticast mode [ 564.586351][T23379] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 564.680453][T23386] netlink: 'syz.0.4730': attribute type 3 has an invalid length. [ 564.849227][T23394] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 564.865744][T23393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4732'. [ 564.957077][T23400] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 564.975937][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 565.299227][T23416] netlink: 'syz.1.4741': attribute type 10 has an invalid length. [ 565.722801][T23436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 566.014928][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 566.521491][T23493] 8021q: adding VLAN 0 to HW filter on device bond9 [ 566.552557][T23493] macvlan3: entered promiscuous mode [ 566.562292][T23493] macvlan3: entered allmulticast mode [ 566.568339][T23493] bond9: entered allmulticast mode [ 566.573941][T23493] bond9: entered promiscuous mode [ 566.584211][T23493] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 566.598112][T23493] team0: Port device macvlan3 added [ 567.054737][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 567.608716][T23566] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 567.721596][T23566] bond8 (unregistering): Released all slaves [ 567.850622][T23583] netlink: 'syz.1.4789': attribute type 1 has an invalid length. [ 568.012151][T23594] netlink: 'syz.1.4794': attribute type 1 has an invalid length. [ 568.095049][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 568.105835][T23598] openvswitch: netlink: Flow actions attr not present in new flow. [ 568.479600][T23622] 8021q: VLANs not supported on ip6_vti0 [ 568.511388][T23622] netlink: 'syz.0.4801': attribute type 1 has an invalid length. [ 568.800258][T23645] netlink: 'syz.4.4808': attribute type 5 has an invalid length. [ 568.857854][T23652] netlink: 'syz.4.4808': attribute type 12 has an invalid length. [ 568.878932][T23652] __nla_validate_parse: 19 callbacks suppressed [ 568.878951][T23652] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.4808'. [ 569.100125][T23674] netlink: 49 bytes leftover after parsing attributes in process `syz.3.4809'. [ 569.134715][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 569.242636][T23642] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.184834][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 570.270998][T23685] tap0: tun_chr_ioctl cmd 2148553947 [ 570.306016][T17320] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.334760][T17320] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.439384][T17320] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.449601][T17320] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.737450][T23721] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4819'. [ 570.873270][T23728] netlink: 'syz.2.4820': attribute type 4 has an invalid length. [ 570.903779][T23728] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4820'. [ 570.933347][T23728] .`: renamed from bond0 (while UP) [ 571.014528][T23740] syzkaller0: entered promiscuous mode [ 571.021234][T23740] syzkaller0: entered allmulticast mode [ 571.052826][T23742] netlink: 'syz.3.4826': attribute type 62 has an invalid length. [ 571.214802][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 571.221869][ C1] af_packet: tpacket_rcv: packet too big, clamped from 76 to 4294967272. macoff=96 [ 571.349481][T23760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4830'. [ 571.387707][T23760] geneve3: entered promiscuous mode [ 571.401040][T23752] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4830'. [ 571.571117][T23776] netlink: 'syz.2.4833': attribute type 1 has an invalid length. [ 571.595795][T23776] netlink: 'syz.2.4833': attribute type 2 has an invalid length. [ 571.780212][T23792] netlink: 'syz.0.4838': attribute type 11 has an invalid length. [ 571.791505][T23792] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.4838'. [ 572.254902][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 572.670346][T23859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4854'. [ 572.687079][T23859] openvswitch: netlink: Unknown nsh attribute 0 [ 572.893166][T23874] netlink: 'syz.3.4859': attribute type 1 has an invalid length. [ 572.947581][T23874] bond6: entered promiscuous mode [ 572.952797][T23874] bond6: entered allmulticast mode [ 572.959514][T23874] 8021q: adding VLAN 0 to HW filter on device bond6 [ 572.976949][T23874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4859'. [ 573.011136][T23874] bond6 (unregistering): Released all slaves [ 573.294827][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 573.390575][T23901] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 573.586350][T23911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4867'. [ 573.637257][T23911] netlink: 'syz.1.4867': attribute type 10 has an invalid length. [ 573.811727][T23918] virt_wifi0 speed is unknown, defaulting to 1000 [ 573.877840][T23926] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.907150][T23925] __nla_validate_parse: 2 callbacks suppressed [ 573.907171][T23925] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4871'. [ 573.923540][T23926] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.161129][T23926] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.174495][T23940] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 574.191836][T23926] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.334813][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 574.366627][T23926] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.416067][T23926] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.680823][T23918] lo speed is unknown, defaulting to 1000 [ 574.706428][T23926] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.741853][T23926] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.147976][T17308] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.156579][T17308] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.352361][T17314] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.361740][T17314] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.374701][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 575.429656][T17314] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.442910][T17314] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.469699][T23997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4887'. [ 575.480536][T17314] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 575.483549][T23993] netlink: 'syz.1.4886': attribute type 18 has an invalid length. [ 575.489039][T17314] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.500734][T23997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4887'. [ 575.580237][T23993] netlink: 'syz.1.4886': attribute type 18 has an invalid length. [ 575.796369][T24009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4890'. [ 575.819758][T24011] tipc: Started in network mode [ 575.827672][T24011] tipc: Node identity , cluster identity 4711 [ 575.833941][T24011] tipc: Failed to set node id, please configure manually [ 575.842187][T24011] tipc: Enabling of bearer rejected, failed to enable media [ 575.853460][T24011] netlink: 'syz.4.4891': attribute type 12 has an invalid length. [ 575.936707][T24018] netlink: 'syz.2.4893': attribute type 10 has an invalid length. [ 575.945181][T24018] bridge_slave_1: left allmulticast mode [ 575.951419][T24018] bridge_slave_1: left promiscuous mode [ 575.958922][T24018] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.979637][T24018] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 576.130973][T24030] FAULT_INJECTION: forcing a failure. [ 576.130973][T24030] name failslab, interval 1, probability 0, space 0, times 0 [ 576.148260][T24030] CPU: 0 UID: 0 PID: 24030 Comm: syz.4.4898 Not tainted syzkaller #0 PREEMPT(full) [ 576.148290][T24030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 576.148302][T24030] Call Trace: [ 576.148310][T24030] [ 576.148319][T24030] dump_stack_lvl+0xe8/0x150 [ 576.148354][T24030] should_fail_ex+0x412/0x560 [ 576.148391][T24030] should_failslab+0xa8/0x100 [ 576.148419][T24030] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 576.148443][T24030] ? __alloc_skb+0x186/0x7d0 [ 576.148467][T24030] ? __alloc_skb+0x1d0/0x7d0 [ 576.148488][T24030] ? __local_bh_enable_ip+0xd0/0x130 [ 576.148519][T24030] __alloc_skb+0x1d0/0x7d0 [ 576.148549][T24030] netlink_sendmsg+0x5d4/0xb40 [ 576.148583][T24030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 576.148609][T24030] ? aa_sock_msg_perm+0xf1/0x1b0 [ 576.148642][T24030] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 576.148670][T24030] ____sys_sendmsg+0x972/0x9f0 [ 576.148707][T24030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 576.148741][T24030] ? import_iovec+0x73/0xa0 [ 576.148770][T24030] ___sys_sendmsg+0x2a5/0x360 [ 576.148803][T24030] ? __pfx____sys_sendmsg+0x10/0x10 [ 576.148867][T24030] ? __fget_files+0x2a/0x420 [ 576.148885][T24030] ? __fget_files+0x3a0/0x420 [ 576.148915][T24030] __x64_sys_sendmsg+0x1bd/0x2a0 [ 576.148943][T24030] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 576.148978][T24030] ? __pfx_ksys_write+0x10/0x10 [ 576.149011][T24030] do_syscall_64+0x14d/0xf80 [ 576.149038][T24030] ? trace_irq_disable+0x3b/0x150 [ 576.149055][T24030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.149076][T24030] ? clear_bhb_loop+0x40/0x90 [ 576.149101][T24030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.149121][T24030] RIP: 0033:0x7f485a39c819 [ 576.149141][T24030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.149159][T24030] RSP: 002b:00007f485b21b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.149181][T24030] RAX: ffffffffffffffda RBX: 00007f485a615fa0 RCX: 00007f485a39c819 [ 576.149205][T24030] RDX: 0000000004000000 RSI: 0000200000000600 RDI: 0000000000000005 [ 576.149218][T24030] RBP: 00007f485b21b090 R08: 0000000000000000 R09: 0000000000000000 [ 576.149230][T24030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.149241][T24030] R13: 00007f485a616038 R14: 00007f485a615fa0 R15: 00007ffe3d29f448 [ 576.149274][T24030] [ 576.415026][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 576.433701][T24037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4899'. [ 576.541548][T24037] IPVS: Unknown mcast interface: netdevsim0 [ 576.557038][T24041] netlink: 'syz.0.4900': attribute type 16 has an invalid length. [ 576.565887][T24041] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4900'. [ 576.772944][T24063] netlink: 'syz.4.4907': attribute type 4 has an invalid length. [ 576.858867][T24068] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4909'. [ 576.896807][T24056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4903'. [ 576.927941][T24056] ieee802154 phy1 wpan1: encryption failed: -22 [ 576.953402][T24074] netlink: 'syz.2.4910': attribute type 1 has an invalid length. [ 576.961480][T24074] netlink: 'syz.2.4910': attribute type 3 has an invalid length. [ 576.973049][T24074] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4910'. [ 576.992724][T24074] NCSI netlink: No device for ifindex 813332851 [ 577.153155][T24083] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4914'. [ 577.336466][T24090] bond0: entered promiscuous mode [ 577.352255][T24090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.430026][T24098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.445817][T24098] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 577.464710][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 577.473212][T24098] bond0: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 577.501610][T24098] bond0: (slave vti0): making interface the new active one [ 577.512457][T24098] vti0: entered promiscuous mode [ 577.519999][T24098] bond0: (slave vti0): Enslaving as an active interface with an up link [ 577.992403][T24142] ip6gre1: entered promiscuous mode [ 577.999456][T24142] ip6gre1: entered allmulticast mode [ 578.022155][T24142] validate_nla: 3 callbacks suppressed [ 578.022177][T24142] netlink: 'syz.0.4932': attribute type 83 has an invalid length. [ 578.282516][T24162] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 578.416536][T24168] ip6tnl0: Caught tx_queue_len zero misconfig [ 578.496366][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 578.926307][T24195] __nla_validate_parse: 9 callbacks suppressed [ 578.926332][T24195] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4951'. [ 578.950004][T24190] netlink: 'syz.4.4949': attribute type 4 has an invalid length. [ 578.957241][T24195] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4951'. [ 578.996047][T24195] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4951'. [ 578.998511][T24196] netlink: 'syz.4.4949': attribute type 4 has an invalid length. [ 579.068530][T24199] netem: change failed [ 579.186922][T24206] bond0: Caught tx_queue_len zero misconfig [ 579.408731][T24218] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 579.439715][T24223] openvswitch: netlink: Message has 8 unknown bytes. [ 579.449432][T24223] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 579.534906][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 579.588324][T24229] netlink: 'syz.3.4962': attribute type 10 has an invalid length. [ 580.133732][T24261] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4967'. [ 580.213017][T24270] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2138716343/2138716345 [ 580.426392][T24286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.493384][T24281] syzkaller0: entered promiscuous mode [ 580.512519][T24281] syzkaller0: entered allmulticast mode [ 580.520535][T24285] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4973'. [ 580.574846][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 581.624906][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 582.377654][T24317] netlink: 'syz.3.4982': attribute type 1 has an invalid length. [ 582.404585][T24321] netlink: 'syz.4.4983': attribute type 4 has an invalid length. [ 582.421446][T24317] netlink: 'syz.3.4982': attribute type 2 has an invalid length. [ 582.421724][T24321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4983'. [ 582.464886][T24317] netlink: 'syz.3.4982': attribute type 1 has an invalid length. [ 582.494882][T24317] netlink: 'syz.3.4982': attribute type 3 has an invalid length. [ 582.510087][T24317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4982'. [ 582.592164][T24333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4987'. [ 582.650871][T24326] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4985'. [ 582.665006][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 582.780936][T24337] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 583.049935][T24359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4991'. [ 583.201626][T24362] netlink: 'syz.2.4994': attribute type 4 has an invalid length. [ 583.545964][T24386] netem: change failed [ 583.627595][T24384] xfrm0: entered allmulticast mode [ 583.694700][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 583.705396][T24390] tipc: Enabled bearer , priority 0 [ 583.768476][T24394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.951129][T24390] syzkaller0: entered promiscuous mode [ 583.959035][T24390] syzkaller0: entered allmulticast mode [ 584.019311][T24390] tipc: Resetting bearer [ 584.043244][T24404] vlan3: entered promiscuous mode [ 584.048602][T24404] geneve1: entered promiscuous mode [ 584.054126][T24404] vlan3: entered allmulticast mode [ 584.060708][T24404] geneve1: entered allmulticast mode [ 584.105483][T24389] tipc: Resetting bearer [ 584.281735][T24425] Can't find ip_set type hask:ip,port,net [ 584.741205][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 585.789289][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 585.958486][T24389] tipc: Disabling bearer [ 586.253231][T24454] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 586.296641][T24454] bond8 (unregistering): Released all slaves [ 586.324418][T24463] __nla_validate_parse: 2 callbacks suppressed [ 586.324440][T24463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5016'. [ 586.341684][T24463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5016'. [ 586.569622][T24482] tunl0: left promiscuous mode [ 586.604325][T24482] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 586.636067][T24482] bond1: left promiscuous mode [ 586.647331][T24480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5022'. [ 586.657295][T24482] bridge1: left promiscuous mode [ 586.662603][T24482] bond2: left promiscuous mode [ 586.691843][T24482] bridge3: left promiscuous mode [ 586.717844][T24482] bond3: left promiscuous mode [ 586.733344][T24482] bridge4: left promiscuous mode [ 586.753403][T24482] bridge5: left promiscuous mode [ 586.791766][T24501] netlink: 'syz.2.5025': attribute type 2 has an invalid length. [ 586.815459][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 586.850166][T24498] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5025'. [ 586.875737][T24505] netlink: 'syz.1.5026': attribute type 16 has an invalid length. [ 586.883747][T24505] netlink: 'syz.1.5026': attribute type 3 has an invalid length. [ 586.889980][T24491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5023'. [ 586.901528][T24501] netlink: 'syz.2.5025': attribute type 2 has an invalid length. [ 586.940496][T24505] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5026'. [ 586.954469][T24509] netlink: 'syz.1.5026': attribute type 16 has an invalid length. [ 586.963604][T23696] IPVS: starting estimator thread 0... [ 587.027616][T24509] netlink: 'syz.1.5026': attribute type 3 has an invalid length. [ 587.045444][T24513] IPVS: using max 28 ests per chain, 67200 per kthread [ 587.045624][T24517] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5028'. [ 587.052477][T24509] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5026'. [ 587.231408][T24528] xt_hashlimit: size too large, truncated to 1048576 [ 587.233590][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 587.233608][ T29] audit: type=1804 audit(1776192430.248:39): pid=24525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5030" name="/newroot/427/cgroup.controllers" dev="tmpfs" ino=2192 res=1 errno=0 [ 587.240244][T24525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5030'. [ 587.259322][ T29] audit: type=1800 audit(1776192430.258:40): pid=24525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5030" name="cgroup.controllers" dev="tmpfs" ino=2192 res=0 errno=0 [ 587.298865][T24525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5030'. [ 587.298903][T24525] netlink: 'syz.3.5030': attribute type 15 has an invalid length. [ 587.323601][T17310] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 587.347381][T24525] netlink: 'syz.3.5030': attribute type 15 has an invalid length. [ 587.365526][T17310] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 587.413491][T17310] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 587.452086][T17310] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 587.854797][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 588.036139][T24574] syzkaller1: entered promiscuous mode [ 588.063331][T24574] syzkaller1: entered allmulticast mode [ 588.797283][T24604] bond0: option min_links: invalid value (18446744073709551614) [ 588.807331][T24604] bond0: option min_links: allowed values 0 - 2147483647 [ 588.822465][T24604] bond0 (unregistering): Released all slaves [ 588.894964][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 588.972028][T24611] tipc: New replicast peer: 172.20.20.187 [ 588.997152][T24611] tipc: Enabled bearer , priority 10 [ 589.108820][T24628] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 589.212230][T24636] nbd: socks must be embedded in a SOCK_ITEM attr [ 589.382251][T24638] syzkaller0: entered promiscuous mode [ 589.406710][T24638] syzkaller0: entered allmulticast mode [ 589.766373][T24662] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 589.934910][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 590.010361][T24671] syzkaller1: entered promiscuous mode [ 590.017711][T24671] syzkaller1: entered allmulticast mode [ 590.028937][T24671] syzkaller0: entered promiscuous mode [ 590.035245][T24671] syzkaller0: entered allmulticast mode [ 590.045590][T24671] tcf_pedit_act: 7 callbacks suppressed [ 590.045610][T24671] tc action pedit offset must be on 32 bit boundaries [ 590.059034][T24671] tc action pedit offset must be on 32 bit boundaries [ 590.065972][T24671] tc action pedit offset must be on 32 bit boundaries [ 590.072777][T24671] tc action pedit offset must be on 32 bit boundaries [ 590.079613][T24671] tc action pedit offset must be on 32 bit boundaries [ 590.086429][T24671] tc action pedit offset must be on 32 bit boundaries [ 590.093223][T24671] tc action pedit offset must be on 32 bit boundaries [ 590.100167][T24671] tc action pedit offset must be on 32 bit boundaries [ 590.107010][T24671] tc action pedit offset must be on 32 bit boundaries [ 590.113886][T24671] tc action pedit offset must be on 32 bit boundaries [ 590.120720][T24671] 0: reclassify loop, rule prio 0, protocol 800 [ 590.989234][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 592.024831][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 592.145339][T24702] __nla_validate_parse: 7 callbacks suppressed [ 592.145362][T24702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5080'. [ 592.254223][T24709] netlink: 'syz.3.5081': attribute type 1 has an invalid length. [ 592.312764][T24716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5081'. [ 592.358201][T24709] bond6: entered promiscuous mode [ 592.385554][T24709] 8021q: adding VLAN 0 to HW filter on device bond6 [ 592.408609][T24720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5084'. [ 592.419929][T24709] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5081'. [ 592.437363][T24709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5081'. [ 592.640305][T24734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5088'. [ 592.685931][T24737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5089'. [ 592.686257][T24738] bridge0: port 2(ipvlan2) entered blocking state [ 592.701793][T24738] bridge0: port 2(ipvlan2) entered disabled state [ 592.710579][T24738] ipvlan2: entered allmulticast mode [ 592.715777][T24737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5089'. [ 592.725018][T24738] bridge0: entered allmulticast mode [ 592.727684][T24738] ipvlan2: left allmulticast mode [ 592.739508][T24738] bridge0: left allmulticast mode [ 592.914060][T24749] netlink: 'syz.0.5096': attribute type 21 has an invalid length. [ 593.055289][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 593.087973][T24758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5099'. [ 593.098781][T24758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5099'. [ 593.109126][T24758] netlink: 'syz.3.5099': attribute type 3 has an invalid length. [ 593.678906][T24779] netlink: 'syz.1.5105': attribute type 10 has an invalid length. [ 593.697674][T24775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.792320][T24782] veth5: entered allmulticast mode [ 593.819495][T24787] IPv6: sit1: Disabled Multicast RS [ 593.950749][T24791] netlink: 'syz.1.5109': attribute type 1 has an invalid length. [ 594.096320][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 595.135086][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 596.174770][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 596.507381][T24895] ip6tnl1: entered allmulticast mode [ 596.523010][T24899] F: renamed from ip6tnl0 [ 596.563497][T24899] F: entered allmulticast mode [ 596.580500][T24904] openvswitch: netlink: IPv6 tunnel dst address is zero [ 596.631778][T24899] netlink: 'syz.1.5139': attribute type 1 has an invalid length. [ 596.680730][T24908] team0: No ports can be present during mode change [ 596.981401][T24926] vlan1: entered promiscuous mode [ 596.994782][T24926] bridge0: entered promiscuous mode [ 597.119190][T24936] tipc: Enabling of bearer rejected, failed to enable media [ 597.215100][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 597.417535][T24951] __nla_validate_parse: 13 callbacks suppressed [ 597.417556][T24951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5152'. [ 597.986515][T17308] bond0 (unregistering): (slave ip6gre3): Releasing backup interface [ 598.118767][T24982] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5160'. [ 598.129102][T24982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5160'. [ 598.173612][T24983] xt_connbytes: Forcing CT accounting to be enabled [ 598.254927][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 598.720594][T17308] bond1 (unregistering): Released all slaves [ 598.735475][T17308] bond2 (unregistering): Released all slaves [ 598.749305][T17308] bond3 (unregistering): Released all slaves [ 598.768327][T17308] bond4 (unregistering): Released all slaves [ 598.785952][T17308] bond5 (unregistering): Released all slaves [ 598.801546][T17308] bond6 (unregistering): Released all slaves [ 598.822718][T17308] bond7 (unregistering): Released all slaves [ 598.837182][T17308] bond8 (unregistering): Released all slaves [ 598.851148][T17308] bond9 (unregistering): Released all slaves [ 598.876503][T17308] bond0 (unregistering): Released all slaves [ 598.891456][T17308] bond10 (unregistering): Released all slaves [ 598.916090][T24966] tipc: Enabling of bearer rejected, failed to enable media [ 599.165883][T17308] 9: left promiscuous mode [ 599.242924][T24997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5165'. [ 599.264053][T24998] netlink: 65011 bytes leftover after parsing attributes in process `syz.4.5165'. [ 599.297791][T24995] block nbd0: reconnected socket [ 599.305112][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 599.325120][T24995] xt_HMARK: proto mask must be zero with L3 mode [ 599.331973][T17308] tipc: Disabling bearer [ 599.362950][T17308] tipc: Left network mode [ 599.401539][T25004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5166'. [ 599.436187][ T5841] block nbd0: Receive control failed (result -32) [ 599.567704][T25008] vlan4: entered promiscuous mode [ 599.572826][T25008] bridge0: entered promiscuous mode [ 599.633291][T25004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5166'. [ 599.664984][T25021] xt_TPROXY: Can be used only with -p tcp or -p udp [ 599.672804][T25019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5171'. [ 599.673982][T25023] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5172'. [ 599.873544][T25029] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 599.915880][T25029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.936437][T25030] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.5173'. [ 599.956599][T25030] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 600.334828][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 600.452771][ T29] audit: type=1800 audit(1776192443.468:41): pid=25057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5186" name="memory.events" dev="tmpfs" ino=1905 res=0 errno=0 [ 600.535325][ T29] audit: type=1804 audit(1776192443.468:42): pid=25057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5186" name="/newroot/369/memory.events" dev="tmpfs" ino=1905 res=1 errno=0 [ 600.619747][T17308] veth1_macvtap: left promiscuous mode [ 600.644276][T17308] veth1_vlan: left promiscuous mode [ 600.663654][T17308] veth0_vlan: left promiscuous mode [ 600.705302][T25077] netlink: 'syz.2.5189': attribute type 1 has an invalid length. [ 600.948842][T25092] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 600.967253][T25092] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 601.007250][T25092] netlink: 'syz.4.5190': attribute type 1 has an invalid length. [ 601.375096][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 601.492851][T17310] [ 601.495241][T17310] ====================================================== [ 601.502269][T17310] WARNING: possible circular locking dependency detected [ 601.509548][T17310] syzkaller #0 Not tainted [ 601.513962][T17310] ------------------------------------------------------ [ 601.521055][T17310] kworker/u8:22/17310 is trying to acquire lock: [ 601.527373][T17310] ffff88801badda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 601.538121][T17310] [ 601.538121][T17310] but task is already holding lock: [ 601.545597][T17310] ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 601.555889][T17310] [ 601.555889][T17310] which lock already depends on the new lock. [ 601.555889][T17310] [ 601.566298][T17310] [ 601.566298][T17310] the existing dependency chain (in reverse order) is: [ 601.575418][T17310] [ 601.575418][T17310] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 601.583474][T17310] down_write+0x96/0x200 [ 601.588347][T17310] kernfs_add_one+0x41/0x5c0 [ 601.593474][T17310] kernfs_create_dir_ns+0xde/0x130 [ 601.599144][T17310] internal_create_group+0x425/0x1180 [ 601.605077][T17310] cpuhp_invoke_callback+0x445/0x860 [ 601.610902][T17310] cpuhp_issue_call+0x430/0x7a0 [ 601.616470][T17310] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 601.623116][T17310] __cpuhp_setup_state+0x3f/0x60 [ 601.628585][T17310] do_one_initcall+0x250/0x8d0 [ 601.633880][T17310] do_initcall_level+0x104/0x190 [ 601.639356][T17310] do_initcalls+0x59/0xa0 [ 601.644212][T17310] kernel_init_freeable+0x2a6/0x3e0 [ 601.650109][T17310] kernel_init+0x1d/0x1d0 [ 601.654965][T17310] ret_from_fork+0x51e/0xb90 [ 601.660091][T17310] ret_from_fork_asm+0x1a/0x30 [ 601.665415][T17310] [ 601.665415][T17310] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 601.673258][T17310] [ 601.673258][T17310] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 601.681003][T17310] cpus_read_lock+0x42/0x160 [ 601.686134][T17310] static_key_slow_inc+0x12/0x30 [ 601.691609][T17310] nbd_genl_reconfigure+0x132f/0x1ea0 [ 601.697522][T17310] genl_family_rcv_msg_doit+0x22a/0x330 [ 601.703625][T17310] genl_rcv_msg+0x61c/0x7a0 [ 601.708691][T17310] netlink_rcv_skb+0x232/0x4b0 [ 601.713993][T17310] genl_rcv+0x28/0x40 [ 601.718520][T17310] netlink_unicast+0x80f/0x9b0 [ 601.723851][T17310] netlink_sendmsg+0x813/0xb40 [ 601.729167][T17310] ____sys_sendmsg+0x972/0x9f0 [ 601.734473][T17310] ___sys_sendmsg+0x2a5/0x360 [ 601.739780][T17310] __x64_sys_sendmsg+0x1bd/0x2a0 [ 601.745258][T17310] do_syscall_64+0x14d/0xf80 [ 601.750383][T17310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.756806][T17310] [ 601.756806][T17310] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 601.764507][T17310] __mutex_lock+0x19f/0x1300 [ 601.769730][T17310] nbd_queue_rq+0x37b/0x1100 [ 601.774875][T17310] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 601.780957][T17310] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 601.787848][T17310] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 601.794494][T17310] blk_mq_run_hw_queue+0x348/0x4f0 [ 601.800149][T17310] blk_mq_dispatch_list+0xd16/0xe10 [ 601.806058][T17310] blk_mq_flush_plug_list+0x48d/0x570 [ 601.811965][T17310] __blk_flush_plug+0x3ed/0x4d0 [ 601.817344][T17310] __submit_bio+0x28d/0x580 [ 601.822375][T17310] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 601.828624][T17310] block_read_full_folio+0x599/0x830 [ 601.834438][T17310] filemap_read_folio+0x137/0x3b0 [ 601.839992][T17310] do_read_cache_folio+0x358/0x590 [ 601.845633][T17310] read_part_sector+0xb6/0x2b0 [ 601.850923][T17310] adfspart_check_ICS+0xa5/0xa40 [ 601.856394][T17310] bdev_disk_changed+0x7ba/0x1550 [ 601.861944][T17310] blkdev_get_whole+0x380/0x510 [ 601.867325][T17310] bdev_open+0x31e/0xd30 [ 601.872120][T17310] blkdev_open+0x470/0x610 [ 601.877070][T17310] do_dentry_open+0x785/0x14e0 [ 601.882363][T17310] vfs_open+0x3b/0x340 [ 601.886971][T17310] path_openat+0x2e08/0x3860 [ 601.892090][T17310] do_file_open+0x23e/0x4a0 [ 601.897131][T17310] do_sys_openat2+0x113/0x200 [ 601.902343][T17310] __x64_sys_openat+0x138/0x170 [ 601.907735][T17310] do_syscall_64+0x14d/0xf80 [ 601.912855][T17310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.919360][T17310] [ 601.919360][T17310] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 601.926580][T17310] __mutex_lock+0x19f/0x1300 [ 601.931705][T17310] nbd_queue_rq+0xc6/0x1100 [ 601.936751][T17310] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 601.942824][T17310] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 601.949680][T17310] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 601.956203][T17310] blk_mq_run_hw_queue+0x348/0x4f0 [ 601.961930][T17310] blk_mq_dispatch_list+0xd16/0xe10 [ 601.967662][T17310] blk_mq_flush_plug_list+0x48d/0x570 [ 601.973650][T17310] __blk_flush_plug+0x3ed/0x4d0 [ 601.979036][T17310] __submit_bio+0x28d/0x580 [ 601.984067][T17310] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 601.990530][T17310] block_read_full_folio+0x599/0x830 [ 601.996363][T17310] filemap_read_folio+0x137/0x3b0 [ 602.001919][T17310] do_read_cache_folio+0x358/0x590 [ 602.007680][T17310] read_part_sector+0xb6/0x2b0 [ 602.012977][T17310] adfspart_check_ICS+0xa5/0xa40 [ 602.018527][T17310] bdev_disk_changed+0x7ba/0x1550 [ 602.024101][T17310] blkdev_get_whole+0x380/0x510 [ 602.029483][T17310] bdev_open+0x31e/0xd30 [ 602.034340][T17310] blkdev_open+0x470/0x610 [ 602.039298][T17310] do_dentry_open+0x785/0x14e0 [ 602.044592][T17310] vfs_open+0x3b/0x340 [ 602.049282][T17310] path_openat+0x2e08/0x3860 [ 602.054493][T17310] do_file_open+0x23e/0x4a0 [ 602.059528][T17310] do_sys_openat2+0x113/0x200 [ 602.064741][T17310] __x64_sys_openat+0x138/0x170 [ 602.070160][T17310] do_syscall_64+0x14d/0xf80 [ 602.075296][T17310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.081719][T17310] [ 602.081719][T17310] -> #4 (set->srcu){.+.+}-{0:0}: [ 602.088868][T17310] __synchronize_srcu+0xca/0x300 [ 602.094386][T17310] elevator_switch+0x1e8/0x7a0 [ 602.099801][T17310] elevator_change+0x2cc/0x450 [ 602.105112][T17310] elevator_set_default+0x36c/0x430 [ 602.110942][T17310] blk_register_queue+0x366/0x430 [ 602.116688][T17310] __add_disk+0x677/0xd50 [ 602.121645][T17310] add_disk_fwnode+0xfb/0x480 [ 602.126860][T17310] nbd_dev_add+0x72c/0xb50 [ 602.131908][T17310] nbd_init+0x168/0x1f0 [ 602.136604][T17310] do_one_initcall+0x250/0x8d0 [ 602.142034][T17310] do_initcall_level+0x104/0x190 [ 602.147610][T17310] do_initcalls+0x59/0xa0 [ 602.152490][T17310] kernel_init_freeable+0x2a6/0x3e0 [ 602.158230][T17310] kernel_init+0x1d/0x1d0 [ 602.163095][T17310] ret_from_fork+0x51e/0xb90 [ 602.168214][T17310] ret_from_fork_asm+0x1a/0x30 [ 602.173520][T17310] [ 602.173520][T17310] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 602.181356][T17310] __mutex_lock+0x19f/0x1300 [ 602.186497][T17310] elevator_change+0x1b3/0x450 [ 602.191792][T17310] elevator_set_none+0xb5/0x140 [ 602.197171][T17310] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 602.203520][T17310] nbd_start_device+0x17f/0xb10 [ 602.208896][T17310] nbd_genl_connect+0x165b/0x1cf0 [ 602.214539][T17310] genl_family_rcv_msg_doit+0x22a/0x330 [ 602.220794][T17310] genl_rcv_msg+0x61c/0x7a0 [ 602.225830][T17310] netlink_rcv_skb+0x232/0x4b0 [ 602.231121][T17310] genl_rcv+0x28/0x40 [ 602.235633][T17310] netlink_unicast+0x80f/0x9b0 [ 602.240936][T17310] netlink_sendmsg+0x813/0xb40 [ 602.246224][T17310] ____sys_sendmsg+0x972/0x9f0 [ 602.251523][T17310] ___sys_sendmsg+0x2a5/0x360 [ 602.256726][T17310] __x64_sys_sendmsg+0x1bd/0x2a0 [ 602.262193][T17310] do_syscall_64+0x14d/0xf80 [ 602.267314][T17310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.273732][T17310] [ 602.273732][T17310] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 602.282470][T17310] blk_alloc_queue+0x546/0x680 [ 602.287784][T17310] __blk_mq_alloc_disk+0x197/0x390 [ 602.293511][T17310] nbd_dev_add+0x499/0xb50 [ 602.298461][T17310] nbd_init+0x168/0x1f0 [ 602.303148][T17310] do_one_initcall+0x250/0x8d0 [ 602.308446][T17310] do_initcall_level+0x104/0x190 [ 602.313909][T17310] do_initcalls+0x59/0xa0 [ 602.318863][T17310] kernel_init_freeable+0x2a6/0x3e0 [ 602.324590][T17310] kernel_init+0x1d/0x1d0 [ 602.329448][T17310] ret_from_fork+0x51e/0xb90 [ 602.334771][T17310] ret_from_fork_asm+0x1a/0x30 [ 602.340086][T17310] [ 602.340086][T17310] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 602.347396][T17310] fs_reclaim_acquire+0x71/0x100 [ 602.352861][T17310] kmem_cache_alloc_noprof+0x40/0x650 [ 602.358756][T17310] __kernfs_iattrs+0xdf/0x340 [ 602.364050][T17310] kernfs_iop_setattr+0xea/0x3f0 [ 602.369514][T17310] notify_change+0xc1a/0xf40 [ 602.374740][T17310] do_truncate+0x1c2/0x250 [ 602.379693][T17310] path_openat+0x2f89/0x3860 [ 602.384895][T17310] do_file_open+0x23e/0x4a0 [ 602.389931][T17310] do_sys_openat2+0x113/0x200 [ 602.395138][T17310] __x64_sys_openat+0x138/0x170 [ 602.400611][T17310] do_syscall_64+0x14d/0xf80 [ 602.405743][T17310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.412162][T17310] [ 602.412162][T17310] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 602.420682][T17310] __lock_acquire+0x15a5/0x2cf0 [ 602.426077][T17310] lock_acquire+0xf0/0x2e0 [ 602.431050][T17310] down_write+0x96/0x200 [ 602.435830][T17310] kernfs_unlink_sibling+0x71/0x180 [ 602.441558][T17310] __kernfs_remove+0x3e7/0x660 [ 602.446854][T17310] kernfs_remove_by_name_ns+0xaf/0x130 [ 602.452887][T17310] sysfs_unmerge_group+0xd4/0x140 [ 602.458451][T17310] dpm_sysfs_remove+0x76/0xd0 [ 602.463669][T17310] device_del+0x250/0x8f0 [ 602.468717][T17310] srp_remove_one+0x81/0x280 [ 602.473837][T17310] remove_client_context+0xb9/0x1e0 [ 602.479613][T17310] disable_device+0x137/0x330 [ 602.484827][T17310] __ib_unregister_device+0x2cb/0x3f0 [ 602.490731][T17310] ib_unregister_work+0x19/0x30 [ 602.496105][T17310] process_scheduled_works+0xb6e/0x18c0 [ 602.502180][T17310] worker_thread+0xa53/0xfc0 [ 602.507296][T17310] kthread+0x388/0x470 [ 602.511888][T17310] ret_from_fork+0x51e/0xb90 [ 602.517004][T17310] ret_from_fork_asm+0x1a/0x30 [ 602.522314][T17310] [ 602.522314][T17310] other info that might help us debug this: [ 602.522314][T17310] [ 602.532543][T17310] Chain exists of: [ 602.532543][T17310] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 602.532543][T17310] [ 602.546981][T17310] Possible unsafe locking scenario: [ 602.546981][T17310] [ 602.554514][T17310] CPU0 CPU1 [ 602.560050][T17310] ---- ---- [ 602.565417][T17310] lock(&root->kernfs_rwsem); [ 602.570199][T17310] lock(cpuhp_state_mutex); [ 602.577328][T17310] lock(&root->kernfs_rwsem); [ 602.584632][T17310] lock(&root->kernfs_iattr_rwsem); [ 602.589944][T17310] [ 602.589944][T17310] *** DEADLOCK *** [ 602.589944][T17310] [ 602.598092][T17310] 4 locks held by kworker/u8:22/17310: [ 602.603733][T17310] #0: ffff88801afc6948 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 602.615200][T17310] #1: ffffc9000218fc40 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 602.628462][T17310] #2: ffff88807c764718 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 602.639912][T17310] #3: ffff88801badd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 602.650633][T17310] [ 602.650633][T17310] stack backtrace: [ 602.656617][T17310] CPU: 1 UID: 0 PID: 17310 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT(full) [ 602.656636][T17310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 602.656648][T17310] Workqueue: ib-unreg-wq ib_unregister_work [ 602.656668][T17310] Call Trace: [ 602.656677][T17310] [ 602.656693][T17310] dump_stack_lvl+0xe8/0x150 [ 602.656716][T17310] print_circular_bug+0x2e1/0x300 [ 602.656742][T17310] check_noncircular+0x12e/0x150 [ 602.656768][T17310] __lock_acquire+0x15a5/0x2cf0 [ 602.656791][T17310] ? __lock_acquire+0x6b5/0x2cf0 [ 602.656815][T17310] lock_acquire+0xf0/0x2e0 [ 602.656833][T17310] ? kernfs_unlink_sibling+0x71/0x180 [ 602.656853][T17310] down_write+0x96/0x200 [ 602.656868][T17310] ? kernfs_unlink_sibling+0x71/0x180 [ 602.656883][T17310] ? __pfx_down_write+0x10/0x10 [ 602.656897][T17310] ? kernfs_root+0x1c/0x230 [ 602.656918][T17310] ? kernfs_root+0x1c/0x230 [ 602.656939][T17310] ? kernfs_root+0x1c/0x230 [ 602.656961][T17310] ? kernfs_root+0x1ea/0x230 [ 602.656983][T17310] kernfs_unlink_sibling+0x71/0x180 [ 602.657001][T17310] __kernfs_remove+0x3e7/0x660 [ 602.657018][T17310] kernfs_remove_by_name_ns+0xaf/0x130 [ 602.657036][T17310] sysfs_unmerge_group+0xd4/0x140 [ 602.657060][T17310] dpm_sysfs_remove+0x76/0xd0 [ 602.657084][T17310] device_del+0x250/0x8f0 [ 602.657106][T17310] ? xa_load+0x60/0x210 [ 602.657128][T17310] ? __pfx_device_del+0x10/0x10 [ 602.657150][T17310] ? remove_client_context+0x79/0x1e0 [ 602.657167][T17310] ? __pfx_srp_remove_one+0x10/0x10 [ 602.657189][T17310] srp_remove_one+0x81/0x280 [ 602.657211][T17310] ? __pfx_srp_remove_one+0x10/0x10 [ 602.657231][T17310] remove_client_context+0xb9/0x1e0 [ 602.657250][T17310] disable_device+0x137/0x330 [ 602.657269][T17310] ? __pfx_disable_device+0x10/0x10 [ 602.657291][T17310] __ib_unregister_device+0x2cb/0x3f0 [ 602.657311][T17310] ib_unregister_work+0x19/0x30 [ 602.657326][T17310] ? process_scheduled_works+0xa8d/0x18c0 [ 602.657345][T17310] process_scheduled_works+0xb6e/0x18c0 [ 602.657375][T17310] ? __pfx_process_scheduled_works+0x10/0x10 [ 602.657397][T17310] ? assign_work+0x3d5/0x5e0 [ 602.657418][T17310] worker_thread+0xa53/0xfc0 [ 602.657447][T17310] kthread+0x388/0x470 [ 602.657462][T17310] ? __pfx_worker_thread+0x10/0x10 [ 602.657481][T17310] ? __pfx_kthread+0x10/0x10 [ 602.657495][T17310] ret_from_fork+0x51e/0xb90 [ 602.657517][T17310] ? __pfx_ret_from_fork+0x10/0x10 [ 602.657536][T17310] ? __switch_to+0xc7d/0x1450 [ 602.657554][T17310] ? __pfx_kthread+0x10/0x10 [ 602.657568][T17310] ret_from_fork_asm+0x1a/0x30 [ 602.657596][T17310] [ 602.909373][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 602.964455][T23698] lo speed is unknown, defaulting to 1000 [ 602.974042][T23698] infiniband syz0: ib_query_port failed (-19) [ 603.249309][T17308] IPVS: stop unused estimator thread 0... [ 603.934981][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 604.282631][T17308] erspan0 (unregistering): left allmulticast mode [ 604.320930][T17308] dvmrp0 (unregistering): left allmulticast mode [ 604.338318][T17308] bond3 (unregistering): (slave geneve2): Releasing active interface [ 604.627844][T17308] bond0 (unregistering): Released all slaves [ 604.636401][T17308] bond1 (unregistering): Released all slaves [ 604.646097][T17308] bond2 (unregistering): Released all slaves [ 604.655412][T17308] bond3 (unregistering): Released all slaves [ 604.697397][T17308] v: left promiscuous mode [ 604.773315][T17308] tipc: Left network mode [ 604.975681][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 605.051894][T17308] hsr0: left allmulticast mode [ 605.057934][T17308] veth0_macvtap: left promiscuous mode [ 605.100754][T17308] pim6reg527 (unregistering): left allmulticast mode [ 605.216559][T17308] lo (unregistering): left allmulticast mode [ 605.410282][T17308] IPVS: stop unused estimator thread 0... [ 606.015006][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 607.064868][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 608.095107][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 609.144896][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 610.175017][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 611.214877][ C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available