last executing test programs: 2.971485779s ago: executing program 4 (id=6160): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a0000020000002400018014000180080001"], 0x64}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.8761238s ago: executing program 4 (id=6302): getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000080), 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x8, 'ip6tnl0\x00', {'veth0_to_team\x00'}, 0x8}) socketpair(0x2, 0x6, 0x9, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000240)=0x1, 0x4) r2 = accept4(r0, &(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000300)=0x80, 0x80800) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x5, 0x30, 0xfffffffffffffff8, 0x1}, &(0x7f0000000380)=0x18) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000003c0)={r3, 0x0, 0x6, 0x40}, 0x10) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000400), &(0x7f0000000440)=0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x74, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x3}}]}, 0x74}}, 0x40800) syz_emit_ethernet(0x83, &(0x7f0000000600)={@empty, @empty, @val={@void, {0x8100, 0x1, 0x1}}, {@generic={0x16, "220916759ab2e751dbbbe64a9d1255724adafb7fb68cda6c792531b8b6956e4960c051607a558d53ff8bbf2a3b0f0b41b56b9bf73de8e2be9bf36ce4c20bedda2e52ee3915e819add4df78aa68147766f61816fcf280422540ccc42b22a431baf55e0b4f2fdd3356165a466abe39465f77"}}}, &(0x7f00000006c0)={0x1, 0x1, [0x39f, 0x95b, 0x2e9, 0xbcf]}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000700)={r3, 0x9b, "9ef711cf345b470228e354d6cd38152067b93081162c6bc7dce0a815655c2d2a9f5c09471d3b26987e7b46fe743b717b3ed38e47794cc5528d2e89d17236ef086d548bcbfdff57a1fc06abf12acfb92292673a3b94fc91fcf2ebbfde6b3147bfb5392528a9f9980c942f9ba8475eef9a8d92dbe5ee6dc05b31be9fbca774eaf9ec2476d0f35d46f8291c7fdd628d7bde1e52417dda0a091f2ac43c"}, &(0x7f00000007c0)=0xa3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000840), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x6c, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xb}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a00), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000a40)={'wg1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000b80)={'sit0\x00', &(0x7f0000000b00)={'tunl0\x00', 0x0, 0x40, 0x0, 0x2, 0x2, {{0xd, 0x4, 0x1, 0xc, 0x34, 0x68, 0x0, 0xa, 0x4, 0x0, @multicast2, @local, {[@ra={0x94, 0x4}, @rr={0x7, 0x7, 0xc7, [@multicast2]}, @rr={0x7, 0x13, 0xc9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty, @private=0xa010101]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={0xffffffffffffffff, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000bc0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000c00)=[0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f0000000c80)=[{}, {}], 0x10, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000ec0)={@empty, 0x0}, &(0x7f0000000f00)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000f40)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000001100)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f80)={0x114, r9, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x114}, 0x1, 0x0, 0x0, 0xc1}, 0x1) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000001140)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000011c0)='net_prio.prioidx\x00', 0x0, 0x0) 2.798885918s ago: executing program 2 (id=6304): r0 = socket$inet6(0xa, 0x800, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x3d, 0x7, 0x1, 0x1, 0x0, 0x2, 0xbf}, &(0x7f0000000100)=0x9c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r2, 0x1ff, 0x8d00}, 0x8) (async) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000180)={r0, 0x660a, 0x1, "6c333539e1814e5400204ff75ff560d9d2a9db1fab0815490302897b0bdf9bbe5cde2b34c1abb3a3f285cf6eca2163dd5ff38957d90c9c06a296d1c75d567bb164d8f139d8612e872f13358272d1156ee5b32caaf72fa6d1ec221170be6177f8594ce98068972a51604c3316d29df52857c317561530a8d8fac071da6bca1c88ae82b341cdc50633aa21ad3d0b47dcafdc7e13b87257541ab57ecfcd8b994fb9944aca1a27ef03cf79acb5217a0b0cfab8f61579c86e6df63911dd2ef5dca2124464e24e41a2"}) (async) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000280)=0x6ec379da) (async) r3 = socket$kcm(0x29, 0x4, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000002c0)={r0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) ioctl$SIOCX25GSUBSCRIP(r4, 0x89e0, &(0x7f0000000300)={'vlan1\x00', 0x2, 0x6d00}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3a08146f779c"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000580)={0x0, {{0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfff}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000640)={0xc, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x2, [{{0x2, 0x4e23, @remote}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x190) (async) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000800)=0x9, 0x4) (async) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000840)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000880)=0x80000001, 0x4) (async, rerun: 64) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f00000008c0)={0x5e}, 0x8) (async, rerun: 64) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000900)={'ip6tnl0\x00'}) (async) syz_emit_ethernet(0x84, &(0x7f0000000940)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @remote, @void, {@llc={0x4, {@snap={0xab, 0x1, 'F\t', "13f40a", 0x88e7, "2d056a5369d214719d410848142186584b08a999b585dfa1b0dbe0628f331cb367eeb2e6cbb753cf4cbdf59a33cd38b4f88a6d44b40a0b6f1fa4f2457b40e70d7be95d649fe06a7e8586fc581959f0c14ada3b11f473539ed474b5e822a7e9ce5bd07d8ba2a58743ea0ec8c766"}}}}}, &(0x7f0000000a00)={0x0, 0x1, [0x241, 0x4bf, 0xc1b, 0xbbe]}) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000a40)="bdeb685da00b936dc425f12ed1077489", 0x10) (async) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000a80)={'broute\x00', 0x0, 0x0, 0x0, [0xb, 0x7, 0x1, 0x6, 0x7fff, 0x4]}, &(0x7f0000000b00)=0x78) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000b40)={'mangle\x00', 0x8b, "f6a89dcde644f77e035cf9bbfa505136b7014b639bc770f66def338eae7fe517d36a8b260a446a38763cb3616629d94c1b7228eec708a9a72b5e13b0facb0e6df027128c61154b2d5d2af6b1fe6afd7fbd1f7ae6bc0c876a27c138d3dccd6009465b48aa6fa7938798975c6342faee2838cdb4cdd22bf7cbfdaea9f81187ff5bff202fc99f8e69562313aa"}, &(0x7f0000000c00)=0xaf) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20040010) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000d40)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000d80)={0x1d, r7, 0x2, {0x0, 0xff, 0x4}, 0xff}, 0x18) (async) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000dc0), &(0x7f0000000e00)=0x40) (async) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0xd, 0x4, 0x4, 0x6, 0x21084, 0xffffffffffffffff, 0xfffff199, '\x00', r1, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) ioctl$BTRFS_IOC_SEND(r5, 0x40489426, &(0x7f0000000f00)={{r8}, 0x2, &(0x7f0000000ec0)=[0x4, 0xfbe], 0x7, 0x0, 0x1}) 2.552264095s ago: executing program 3 (id=6307): syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) accept(0xffffffffffffffff, &(0x7f0000000000)=@rc, &(0x7f00000001c0)=0x80) 2.484665053s ago: executing program 4 (id=6308): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x12, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@ldst={0x3, 0x2, 0x3, 0x4, 0x0, 0x4, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0xffff, 0xad, &(0x7f0000000100)=""/173, 0x100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x1, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x1, 0x1], &(0x7f0000000280)=[{0x0, 0x4, 0xe, 0x4}, {0x1, 0x1}, {0x3, 0x5, 0xe, 0x8}], 0x10, 0xff}, 0x94) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000380)={0x3, 0x7, 0xff, 0x2, 0x5}) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x4d, 0x0, 0x4f, 0x4}, @func={0x8, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x30, 0x61, 0x5f, 0x5f, 0x30, 0x61, 0x5f]}}, &(0x7f0000000600)=""/148, 0x3d, 0x94, 0x0, 0x8, 0x10000}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0x0, 0x800000, 0x18}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x17, 0x11, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='GPL\x00', 0x10001, 0x41, &(0x7f0000000540)=""/65, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, &(0x7f0000000700)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x7, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000800)=[r4, 0x1, r5, r1, r0], &(0x7f0000000840)=[{0x3, 0x4, 0x3}, {0x3, 0x3, 0x5, 0x7}, {0x0, 0x2, 0x3, 0x2}, {0x5, 0x3, 0xa, 0x3}, {0x1, 0x3, 0xf, 0xa77b361ff2452a1d}], 0x10, 0x2}, 0x94) r7 = socket$inet6(0xa, 0x0, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet6(r7, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="f0f3852f6fd2449af94e882c86dc839c5145c2d33f7c07824376a771fdaac70e9cdd63e0deea", 0x26}], 0x2, &(0x7f0000001a40)=[@dstopts={{0x168, 0x29, 0x37, {0x0, 0x29, '\x00', [@jumbo={0xc2, 0x4, 0xfb85}, @calipso={0x7, 0x20, {0x2, 0x6, 0x9, 0x9, [0x400, 0x9, 0x5]}}, @generic={0x7, 0x53, "c8ef878f5e4465c307af5a776078ed301e88734383e50d7fb21e5e2cb2ab9382cf65160841b11b3b28bd6d580975b8ac2b312302e7ba2e08eb6716cc150484bbd04303b1c6c018663be13f707d7764820b8b9e"}, @ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x28, {0x3, 0x8, 0x3, 0xfa, [0xf, 0x1ff, 0x8, 0xe]}}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7}, @generic={0xb, 0x91, "2cad9ed3c07d31382c3ce226f7ed53b1e1827354a762a48d8e5755bf803b4aaf50c5011801965869b48314c72949e5ca687675673bf551b7aa21198e180cf14fca2d07e8cd410d6cfd5521ec26208aa6d11945d0c72199a87487faa985a3d47eca205740a80550dc8a9c44d7a43c09699686ae0cedb382cacb48dea8aa6850363970069505c9b63c3f717c5f04c6f12575"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2b, 0x2, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x16}]}}}, @dstopts={{0x50, 0x29, 0x37, {0x21, 0x6, '\x00', [@hao={0xc9, 0x10, @private1}, @padn, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @jumbo, @jumbo={0xc2, 0x4, 0x7}]}}}], 0x210}}], 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001cc0)={"bbd22565faf0852cdd3854051ba0cde0", 0x0, 0x0, {0xef91, 0x3}, {0xe65, 0x5}, 0x40, [0x3, 0xa, 0x5, 0x1, 0xcedf, 0x0, 0xd, 0x7, 0x0, 0x5, 0x101, 0x2, 0x1, 0xc, 0xfffffffffffffffe, 0x7]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r7, 0x50009418, &(0x7f0000001e40)={{r8}, r9, 0x12, @inherit={0x58, &(0x7f0000001dc0)={0x1, 0x2, 0x9, 0x0, {0x1c, 0x7, 0x6, 0x1, 0x2}, [0xa, 0x0]}}, @subvolid=0x2}) r10 = socket(0x2c, 0x800, 0x5) syz_genetlink_get_family_id$tipc(&(0x7f0000002e40), r10) r11 = accept4$unix(0xffffffffffffffff, &(0x7f0000002e80)=@abs, &(0x7f0000002f00)=0x6e, 0x800) recvmsg$unix(r11, &(0x7f0000003240)={&(0x7f0000002f40)=@abs, 0x6e, &(0x7f00000031c0)=[{&(0x7f0000002fc0)=""/152, 0x98}, {&(0x7f0000003080)=""/153, 0x99}, {&(0x7f0000003140)=""/119, 0x77}], 0x3, &(0x7f0000003200)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x12021) getsockopt$PNPIPE_HANDLE(r10, 0x113, 0x3, &(0x7f0000003280), &(0x7f00000032c0)=0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003380)={{r1, 0xffffffffffffffff}, &(0x7f0000003300), &(0x7f0000003340)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003440)={{r12}, &(0x7f00000033c0), &(0x7f0000003400)=r0}, 0x20) socket$xdp(0x2c, 0x3, 0x0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000034c0), r10) getsockopt$inet6_mreq(r10, 0x29, 0x15, &(0x7f0000003500)={@dev, 0x0}, &(0x7f0000003540)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000003600)={'syztnl2\x00', &(0x7f0000003580)={'syztnl2\x00', 0x0, 0x29, 0xf9, 0x8, 0x10, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}, @dev={0xfe, 0x80, '\x00', 0x33}, 0x700, 0x40, 0x0, 0x3ff2}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r10, &(0x7f0000003700)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000036c0)={&(0x7f0000003640)={0x60, r13, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x44020) sendto$inet6(r10, &(0x7f0000003740)="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", 0x1000, 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r10, &(0x7f0000004800)={&(0x7f0000004740)={0x10, 0x0, 0x0, 0x2089}, 0xc, &(0x7f00000047c0)={&(0x7f0000004780)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004880), r10) sendmsg$NL80211_CMD_GET_WIPHY(r10, &(0x7f0000004940)={&(0x7f0000004840)={0x10, 0x0, 0x0, 0x4800000}, 0xc, &(0x7f0000004900)={&(0x7f00000048c0)={0x14, r16, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000004a00)={r12, &(0x7f0000004980)="56dcaa30498504078ebab576a34ddab32b3eed82b56f8f120c8285b383ab", &(0x7f00000049c0)=@tcp6=r10, 0x4}, 0x20) 2.357761103s ago: executing program 0 (id=6309): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x64}}, 0x0) 2.357496314s ago: executing program 2 (id=6310): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e}, 0x20) (async) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) (async) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @multicast, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "080108", 0x14, 0x2f, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, {[], {{0x0, 0x8902, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) 2.354953312s ago: executing program 3 (id=6311): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x7) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) listen(r2, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffc, 0x0, 0xd4}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0xe, 0x0, 0x4}, 0x9c) (async) listen(r3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x7) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) (async) listen(r10, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x8000000004) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000380)={r8, &(0x7f00000001c0)='\xff\xff', 0x8821, &(0x7f0000000240)={@_ha_fsid={[0x3, 0x2]}, {0x4, 0x8, 0x0, 0x2}}, 0x600000, &(0x7f0000000300), &(0x7f0000000340)=0x3}) (async) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b004e"], 0x24}}, 0x0) (async) writev(r11, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) (async) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="38000000011401000000000000000000090002007379736977"], 0x38}}, 0x0) 2.209603696s ago: executing program 2 (id=6312): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x19200, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xfffc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xe}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=@ethtool_regs={0x4, 0x0, 0xb, "f42a97b96d02674f51eae4"}}) 2.179038988s ago: executing program 0 (id=6313): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b402000000400000611178000000000085000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="000325bd7100fedbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000080001007063690011000200303030303a30303a31302e30000000000800030000000000080001007073690011000200303030303a30303a31302e30000000000800030001000000"], 0x84}, 0x1, 0x0, 0x0, 0x5}, 0x1) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) listen(r3, 0x0) (async, rerun: 64) connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @none}, 0x8) (rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c01b00002e000b0000000000000000000200000008000300040001000c000180060000008048000001020580"], 0x1bc0}}, 0x8000) 2.067001418s ago: executing program 1 (id=6314): r0 = socket(0x26, 0x803, 0x2) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x786c4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 2.066498586s ago: executing program 3 (id=6315): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0xc9, 0x4, 0x4e25, 0x4, 0x3, 0x1, 0x4a69, {0x0, @in6={{0xa, 0x4e24, 0x7fff, @empty}}, 0x400, 0xffffff7b, 0x9, 0x4, 0x3}}, &(0x7f0000000480)=0xb0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x430, 0x228, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x208, 0x228, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@rt={{0x138}, {0x5, [0x8, 0x39], 0x8, 0x1, 0x2, [@empty, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @remote, @private2, @ipv4={'\x00', '\xff\xff', @loopback}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1], 0x7}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xff000000, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xff000000, 0xffffff00], 'wlan1\x00', 'wlan1\x00', {0xff}, {0xff}, 0x0, 0xf9, 0x0, 0x14}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x51, 0x101, 0x8001, 'netbios-ns\x00', 'syz1\x00', {0x10000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x4e23, @remote}}, 0x0, 0x7ffe}, 0x90) 2.027530166s ago: executing program 1 (id=6316): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111ab00000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, '\r\x00', "8a36c47a9c625dfaf08ace81c500", "f8ffffff", "362d3017f069109d"}, 0x28) close(0x3) 2.023534827s ago: executing program 4 (id=6317): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x4}, 0x10) close(r0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x60, 0x18, 0x1, 0x70bd2b, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x1c) getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) close(0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0x20, 0x70bd29, 0x25ffdbfc, {0x0, 0x0, 0x0, r5, {0xffff, 0x2}, {0x0, 0xa}, {0x17, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x2f2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084494) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r6, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x59}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x28}}, 0x4010) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$kcm(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x11d, 0xf, 0x0, &(0x7f0000000240)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r9, @ANYRES16=r8], 0x1c}}, 0x20008000) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x44, r8, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xdf}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x24041000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000f0ffffff0000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.817284706s ago: executing program 3 (id=6318): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@rc={0x1f, @any, 0x3}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bf000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000000ce830100000f00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000001640)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x10, 0x0, 0x0, @local, @remote, {[@dstopts={0x0, 0x1, '\x00', [@calipso={0x7, 0x0, {0x1, 0x0, 0x7, 0x5e4, [0x9, 0x6, 0xad1000]}}, @padn={0x1, 0x2}, @padn={0x1, 0x5a}]}]}}}}}, 0x0) 1.737418507s ago: executing program 2 (id=6319): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40333f042ec405dd, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x18, @loopback}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x60}}, 0x0) 1.736778955s ago: executing program 0 (id=6320): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608", 0xc1}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711003000000500a0000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x110, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0xa, 0x3, 0x1) getsockopt(r2, 0xff, 0x0, 0x0, &(0x7f0000000040)) (async) getsockopt(r2, 0xff, 0x0, 0x0, &(0x7f0000000040)) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd70000000000002000001000000000000000008001f0004000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0, @ANYBLOB="b58979"], 0x14c}}, 0x4810) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r5) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000a40)={0x184, r8, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0xb441, 0x53}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6b472ac68f6ef2b0e27f3bfa9ea4258b34cab8abe2663856"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b2f723ac432c3e0edd43936ad8ed3ab8dae372538b6c9d44"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ac3ba38bd52c2a6795b83b59a50e375e9d87e079ecaf19d1"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7d2db2609d5008e80916142b4ef5408256b3ed054fb70f34"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "65e4a3d38da51404f3dd07f286271a0af83567bee2b9e536"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5aaffd528057435b278fbcff86bc050ad0a3ea7f402c2780"}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8c6b43e5b609c1ee32da183772e5e0200117101a4553f99c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x184}, 0x1, 0x0, 0x0, 0x40004}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xd0, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x30}, @void, @val={0xc, 0x99, {0x6, 0x2f}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "68c133c8439e91a817910a2e0d97509b4e78ca3690e8d5f0"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xd0, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x30}, @void, @val={0xc, 0x99, {0x6, 0x2f}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "68c133c8439e91a817910a2e0d97509b4e78ca3690e8d5f0"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) (async) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) write$nci(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="61030295060002"], 0xa) listen(r3, 0x0) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x2, &(0x7f00000005c0)=""/225, &(0x7f0000000080)=0xe1) r11 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r11, 0x0, 0x3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="000a040000", @ANYRES32=0x0, @ANYBLOB="08000900000000000800080000000000140001000000000000000000000000000000000014000200000000000000000000000000000000003e000600"/76], 0x64}}, 0x0) 1.588317381s ago: executing program 4 (id=6321): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000240)={0x3ffd}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @private1}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r0], 0x158}, 0x1, 0xba01}, 0x44) 1.57445477s ago: executing program 1 (id=6322): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0xffff}}]}, 0x24}}, 0x840) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x28, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000002180)={@loopback={0xfec0ffff00000000}, @empty, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020013}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xec, r6, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xa3e2a3e3218e3be2, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x6}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x52, 0xa9, @random="8062b9f1362090b78429c3b9fab0359d0bcc57265b629231a442f8369353b8221f0ac27b954a8767f1e3a25b928c11a46c2a58160c461f14cb21b0a3b5095a0b890595fbcdb26cfe149dbf7a6fe5"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7f}]}, 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.485494562s ago: executing program 3 (id=6323): getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={r0, 0x7}, &(0x7f00000000c0)=0x8) r2 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x3b, "826922536f603592dfecdbf50fb38899efccecbfdbbc92d4b2832a88d6f45f004782210b1497a8834a134cbb4b7d6055fdb69ba912af8c5adb4273"}, &(0x7f0000000180)=0x43) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={r1, 0x2, 0x9, 0xffff, 0x2, 0x8}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={r3, 0x4}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000002c0)={r1}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000340)={r5, 0x79, "6700c71d97bff9e4f756aef34d5868aa1e24e0458b53854793197e944276d3ea82e84e46ac95fcc0033209706715a56b2d4ace88ceadcdbc62f8405ecc7bb14dd0fe79a665a5512defef2320c48a0688df7d77b9e629d8bfa877c57db637dca4cfc39d02a045ca0d2a3f043971ff5c97107bc873846ebf4ae8"}, &(0x7f0000000400)=0x81) getsockname$packet(r2, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000f80)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000010c0)={'syztnl1\x00', &(0x7f0000000fc0)={'erspan0\x00', 0x0, 0x700, 0x20, 0x5, 0xe65f, {{0x30, 0x4, 0x1, 0x5, 0xc0, 0x64, 0x0, 0x1, 0x2f, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x1c, 0x50, 0x0, 0x0, [0x200000, 0x2, 0x380, 0x1, 0x5, 0x5]}, @timestamp={0x44, 0x1c, 0x4e, 0x0, 0x8, [0x7, 0x8cd2, 0x1, 0xa2, 0x6, 0x9]}, @lsrr={0x83, 0x1f, 0xc9, [@loopback, @dev={0xac, 0x14, 0x14, 0x24}, @remote, @local, @broadcast, @remote, @loopback]}, @cipso={0x86, 0x52, 0x2, [{0x7, 0xf, "58c777dc25e935ed84e6d946de"}, {0x7, 0xc, "2b5b8d0ea40291b90309"}, {0x1, 0x10, "7a89d52a82e1157d96b68533fb52"}, {0x6, 0x12, "65bd414cc0415e3469ab1055add52a0b"}, {0x6, 0xa, "011b79d62c824360"}, {0x5, 0x5, "ea0ab8"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001280)={'ip6_vti0\x00', &(0x7f0000001200)={'syztnl2\x00', 0x0, 0x2f, 0xd6, 0x7, 0x2, 0x21, @mcast1, @mcast1, 0x700, 0x700, 0x4, 0xffffffff}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0xe0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000012c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000001300)=[0x0], &(0x7f0000001340)=[0x0, 0x0], 0x0, 0xdb, &(0x7f0000001380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000013c0), &(0x7f0000001400), 0x8, 0x97, 0x8, 0x8, &(0x7f0000001440)}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001780)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001840)={'syztnl2\x00', &(0x7f00000017c0)={'ip6tnl0\x00', 0x0, 0x0, 0x7, 0x2, 0x80, 0x40, @local, @private0, 0x40, 0x40, 0x8, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001d80)={'gretap0\x00', &(0x7f0000001d00)={'syztnl2\x00', 0x0, 0x10, 0x0, 0x3, 0x2, {{0xf, 0x4, 0x0, 0x7, 0x3c, 0x68, 0x3, 0x6, 0x4, 0x0, @broadcast, @remote, {[@ssrr={0x89, 0xb, 0x65, [@remote, @private=0xa010101]}, @timestamp={0x44, 0x1c, 0x8c, 0x0, 0x2, [0x2, 0x0, 0x8, 0x8, 0x4, 0x8000]}]}}}}}) sendmmsg$inet(r2, &(0x7f0000001e40)=[{{&(0x7f0000000440)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)="102a5c8fe67c348e27c5d8a398b2aefbbec3334633be499dce9d1ee45101b25a24e3ed3960086cf776f82af42e19d0d50ec9dbdf2d23fe031f2ec909c8f44918f0b0253995e96c8c139f6a57fa2e067c5666bd4dde0b777bc31b687e9e7df78cafbe8a2c03e9116d21bdc0e0074358e05a78c606c5806a046d1d95c6a4a23175ec2d65e3207ed18fa5284c17848179ba17e15908fd892bf3b34065af7a3d158e53ae56b3c6a115b99338ca3bf895194cd4dc33605007a62ed0f760be5cd6b8d5466a58c72fc54e2e5e9f82d20ff261be090683", 0xd3}, {&(0x7f0000000580)="8c753a4303a46a7adfb5cceba53e54", 0xf}, {&(0x7f00000005c0)="776e4a35bef821c474cc4fc8225726818f4e308f9456bc846ac38fac37085b8ff6e081a1f301e3df1422358588804bec09a0857e0dadd8188ea5b6bdd5c166208a2ec3ec809945b6c2d5d1106e2c2b60b3864a5a7cf6140b5778ec2f4e8e5891e20b09be197b7ce207bc9de414517b403f97caf22dee8d06", 0x78}], 0x3, &(0x7f0000000680)=[@ip_ttl={{0x14}}], 0x18}}, {{&(0x7f00000006c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000700)="d6c438e638a355efa32410a82c526a130ba11b6b959d2c3ff9e9e9a8846b47315de0bdd8127a0684f854ca51666998292dec74432816f3a88c487656940023f51afcfadccaa838f728dbf396b1b93ec106bb7d1eb7d97dc362189a45e7059d2002658f85605fbc2c", 0x68}, {&(0x7f0000000780)="0fdb75cf1eafafbce559e3a4b919be8da5ef80d6c48f27", 0x17}, {&(0x7f00000007c0)="cf604ca935f9fb0eb15ab3b2ccfb936218d55ef95bda2bbb9fbd99fa033eb72890d9642381aef2a226b9e5bbf747c1c2b89ba98c5f05080500abec0bf064f8a0b7e7416596a496ea95bb4e90c316eaf296501fb55d844e8d0d644c846149e0a306173a62a5dce94ccaf71fbb88ab128298e4bbb8257b760230779fba3cacaaec6374575f4dd298578ab9fd96f9c33b05666c5fb7986d2899dd77a4a8f40da77e3508833927ef66feeb2994106958399c2de38422764b570025f4c52d16fde265e5d7d3afcfa057b10dc72abb9b67ff4ae73eff9bcb0d68", 0xd7}, {&(0x7f00000008c0)="21e2858c0cc3e0259448e391545cc85fa61d8b908339a1c56ca68f00a663", 0x1e}, {&(0x7f0000000900)="e451c5767892aee0b1aed7d97acbb4371496cd1da3ce301ea980edce42790a21e3771a2af2019aa76debbd9935c1228ee60a90b3f16b947dcf9d6163be8eccf8398babbf383102d0688481c97dd14f730f6316e588eee776d6bb532900ae246785981fa6e1d318f213b6406462af42e9d404ac35e9448c9648107df478f181b5f47cee", 0x83}, {&(0x7f00000009c0)="5cd03b526b3138d801880de7670d5d72adced45562def0d076e84c2452541d10702a783314502f557b5cb8fa704de616fffab128b5f62ad672f2f7851d53ff7495074d3e5397e0667f2705e08c682cc8160bd572186135ce769deff3819fa29fd7e123ac743abaedf22ac2fdf022aaf01f1e7d328b16c0a3fabc87db64a3fe3f25bec070e1670ffcb3f96f5995ed8c6b3a3a2828056cda9ec1cf330e7398c5dcc558fa9c169e88803a11dd6095d2036fc4", 0xb1}, {&(0x7f0000000a80)="31a49ed2e125f3", 0x7}], 0x7}}, {{&(0x7f0000000b40)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000b80)="a8f67105a3ddea1c8ef62a714a5396df9bfd36eeb4e83b91acd0b761db5b62d734812c81beb731114dede2fb0320493ded13bcd4c6c3a8af17f602201b31d63cad3b3db084385ae82f415b7031e4c40d7872df08c445b4136578eb4c73ab1e06ac630f44eb6d2f2687fd82a25e93a2ffbd02da1354fe5062a08d1101", 0x7c}, {&(0x7f0000000c00)="2d7ba298a0ece32f4e2cc8b455c858063964b18a78cca01f7658a70a70ecefcb0c97b32e86060efe8f7991d40d1732929a1fd0a56f57b27459466d988a01e9380a25df1501d1e1c448340bc8e28d03c2e0106c3cfad3633fea0ac97fb679a1c87c6a9b0ebd8003db61240804997da7a11d96696d59b229030de1515c8d6dfe79ffb084f9c991d91a3e75698c10c7a61190cd6d6cea9851be9cca65cfa53cfe8aaa76691bdabce407e412999ef9dbe57d454e4fab1e82595f9efd0a8617bd26ae30487dc7ae405a40774d795ac0aee72a10c858fb76e28708c36db10ad8428158d3708e5767f7acbc8bceb8a1ecfa9713a49fcb09f0", 0xf5}, {&(0x7f0000000d00)="43ddc861e551a17d77036937c458e09499721e818af241d8eaaa696e355149b36ba097faed2dc9e01420ccbfe8eb796ff3cbba86fa4062d71831e9084b97773976c38ee20463928e4b958f1d8c8556ad2581fb63c36074dc2f904333147566", 0x5f}, {&(0x7f0000000d80)="87a3a8480c2bc7c09cd569c2ea6e155c222bb485f03fb770ec3ab05d57e5ff0d9942bf8770d1641b878b1849d248813f6d681d3067bb00da1528f709b797dbaf56d09c0c7b9f80ea625bf956d38be6c4d0d1aa43fecebeb9e901e0b6823d01812838277916f75aa6e421af8d47561fa62eaf25e99f4ba2a6d86dda5cd840a95efab6334e5a63d2", 0x87}, {&(0x7f0000000e40)="9e53cca397b99822542cd860f3d1a67d0c4f323e685b861a7c485c6e4725cb4cc8a84915ad31bfc365059bde6a8ac03efe87008fac8f743e9dbcc97e8526e71af36dac32e3acfc082cd2f2d6588600d4842da08cd46cb707f9a65f69837b", 0x5e}], 0x5, &(0x7f0000001100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private=0xa010100, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast1, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @empty}}}], 0x60}}, {{&(0x7f0000001180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f00000011c0), 0x0, &(0x7f00000015c0)=[@ip_retopts={{0x40, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xf0, [@local, @loopback, @rand_addr=0x64010101, @rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x3b, [@dev={0xac, 0x14, 0x14, 0x13}, @broadcast, @remote, @broadcast, @remote]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0xf8}}, {{&(0x7f00000016c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001700), 0x0, &(0x7f0000001880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3de}}, @ip_retopts={{0x100, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0x24, 0xc0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x9e36}, {@rand_addr=0x64010100, 0xe6}, {@multicast2, 0x80000000}, {@remote, 0x80}]}, @rr={0x7, 0xf, 0xef, [@empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0x42, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@rand_addr=0x64010101, 0xd}]}, @timestamp_addr={0x44, 0x2c, 0xc0, 0x1, 0x6, [{@empty, 0xab4}, {@loopback, 0x9}, {@empty, 0x7fff}, {@remote, 0x9}, {@multicast2, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x79, 0x3, 0x6, [{@multicast2, 0x2cc}, {@local, 0x7}, {@multicast1, 0x800}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1e}, {@empty, 0x9}, {@multicast2}]}, @timestamp_prespec={0x44, 0x34, 0xbb, 0x3, 0x8, [{@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x400}, {@multicast1, 0x3}, {@empty, 0x4}, {@multicast1, 0xff}, {@rand_addr=0x64010100, 0x7fff}]}, @lsrr={0x83, 0xb, 0x83, [@multicast2, @multicast1]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @local, @multicast2}}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x70, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x1b, 0xaf, [@loopback, @private=0xa010101, @rand_addr=0x64010102, @multicast1, @multicast1, @multicast2]}, @end, @rr={0x7, 0x13, 0x95, [@multicast1, @local, @dev={0xac, 0x14, 0x14, 0x23}, @multicast1]}, @cipso={0x86, 0x20, 0xffffffffffffffff, [{0x0, 0xf, "8fca75f34a95cd075adf3e7974"}, {0x0, 0xb, "7973d9802924bd445c"}]}, @lsrr={0x83, 0xf, 0x57, [@loopback, @local, @remote]}]}}}], 0x1e0}}, {{&(0x7f0000001a80)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000001ac0)="5615976c77baff1cf8c3c3bfde9c3830bf825701d7e0541c3935ffbd3b92ea3b373c1f7deb03fb0527611c89a0e8e8524e15aad911081974e2ea775c36483abe15837be235ca35db5f38c0c0c2ca89a2a3455922eb8a69e7bf0a17019cba7f985b518bdbd9f428125c2923231576052d8f6e7f4f1839b5ce7aa67b6831589aea4920499e086582af032b1b6ef0b4d841fda1c9a0111819cac143cf71a2a771dea99a93079d608a2f863b65d28ff366824cdcfdea0db7056efc9fcacd757f91", 0xbf}, {&(0x7f0000001b80)="b5a740ded33ef0999e965f6ad3f3ab74ba6b8a1267d237c5760b7727fe3f125773c84e91f709d4585a2be8eee0e2cb", 0x2f}, {&(0x7f0000001bc0)="af249293111bf0d44822ca27ec8a5a587f56275f3a88040b185d1b2fa83d7ef130eb968190b7b4ac9576f3f8c4e9a3e094af8e976d745873e53c4110ff8a5ee94be8f045d22b3d6d122cb5a9883a64137c4665d751b22d9177d8decf4d2b06b22655e12d9f7e6c8b1e3aa7c993714005ab2728102a2a8ea8efd9e682cd720ad3763c733ceb023fcf0534e21bf3f79121c3bbc6e500e6be1023dfed51b41b314ffb91d2f4d982666f77e4d7e230f585200ec7c24c2500ae93cf6953655a1c102395ad441fea2904e93b604972d2115c60687b7181c8902d7a31fb972107782be932", 0xe1}], 0x3, &(0x7f0000001dc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xe}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @multicast1, @local}}}], 0x50}}], 0x6, 0x24044880) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f0000002040)={'ip6tnl0\x00', &(0x7f0000001fc0)={'ip6_vti0\x00', r6, 0x29, 0x6, 0x4, 0xfffffffb, 0x28, @rand_addr=' \x01\x00', @mcast2, 0x10, 0xa8, 0x1, 0x5e3}}) r15 = accept4$tipc(0xffffffffffffffff, &(0x7f0000002080), &(0x7f00000020c0)=0x10, 0x80000) bind$tipc(r15, &(0x7f0000002100)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x3}}, 0x10) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r16, &(0x7f0000002380)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f0000002340)={&(0x7f00000021c0)={0x178, r17, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x40000}, 0x40050) r18 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r18, 0x84, 0x1a, &(0x7f00000023c0)={r4, 0x1f, "1108201aabe3d005ca138cac766a6f47a1e7c52db06cc11c75d83c2036ba9a"}, &(0x7f0000002400)=0x27) socketpair(0x1a, 0x800, 0x2, &(0x7f0000002440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT6_ADD_MIF(r19, 0x29, 0xca, &(0x7f0000002480)={0xffffffffffffffff, 0x1, 0x2, r10, 0x80}, 0xc) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000024c0)={0x1, 0x2}, 0x8) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002600)={&(0x7f0000002540)={0xb8, r17, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 1.449910645s ago: executing program 2 (id=6324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0xff01, 0x7, 0x9, 0xa93, {{0x9, 0x4, 0x2, 0x1c, 0x24, 0x68, 0x0, 0x62, 0x2f, 0x0, @rand_addr=0x64010102, @broadcast, {[@lsrr={0x83, 0xf, 0x83, [@local, @loopback, @broadcast]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd4, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040001) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x519, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x67}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffffd, 0x5d}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff) 1.340683263s ago: executing program 1 (id=6325): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x8000, 0x20, 0xfff, 0x1984, {{0x26, 0x4, 0x1, 0x7, 0x98, 0x1, 0x0, 0x7, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x1d, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc}]}, @noop, @timestamp={0x44, 0x1c, 0xf8, 0x0, 0x6, [0x6, 0x4, 0xfffff245, 0x5772, 0xa, 0x9]}, @timestamp_prespec={0x44, 0x4c, 0xfb, 0x3, 0x2, [{@private=0xa010102, 0x908b}, {@rand_addr=0x64010102, 0x1ff}, {@local, 0xfffffffb}, {@empty}, {@rand_addr=0x64010102, 0x9}, {@dev={0xac, 0x14, 0x14, 0x16}, 0xd}, {@private=0xa010100, 0xfffffffa}, {@multicast2, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x8}]}, @generic={0x89, 0xd, "e1e87f7da8d88df01a2b1e"}]}}}}}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000001c0)={0x1, 0x0, 0x0, r3, 0x7}, 0xc) (async) r4 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x1402, 0x400, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}]}, 0x48}}, 0xb15d4fd30e40f670) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r6, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x800) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r2) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'erspan0\x00', &(0x7f0000000580)={'syztnl0\x00', r3, 0x7, 0x8, 0x5, 0x401, {{0x18, 0x4, 0x2, 0x5, 0x60, 0x68, 0x0, 0x81, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0x25, [@local, @private=0xa010101, @loopback, @remote, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x2b, 0xbe, [@loopback, @dev={0xac, 0x14, 0x14, 0x3a}, @local, @multicast2, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, @multicast1, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x23}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'syztnl1\x00', r3, 0x0, 0x6, 0x3, 0x10000, 0x1a, @dev={0xfe, 0x80, '\x00', 0xe}, @local, 0x8, 0xbc137b8e0ef51021, 0x4, 0x7}}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000a00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x9000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000700)={0x290, r7, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x4000080}, 0x4880) (async) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a80), r2) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r10, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc0) (async) sendmsg$nl_route(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@newlinkprop={0x20, 0x6c, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x0, 0xb000}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$can_bcm(r2, &(0x7f0000000d80)={&(0x7f0000000c80)={0x1d, r3}, 0x10, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x6, 0x0, 0x9, {0x0, 0xea60}, {0x0, 0xea60}, {0x2, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "69b6ef6f65b42db8"}}, 0x48}, 0x1, 0x0, 0x0, 0xd4}, 0x24000000) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000dc0)=0xffffffffffffffff, 0x4) (async, rerun: 32) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NFC_CMD_GET_SE(r11, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x81) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000f00)={'batadv0\x00', 0x0}) (async) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000000f40)={0x6, 0x1, 0x3, 0x2, 0x37}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000f80), r2) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000012c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20000002}, 0xc, &(0x7f0000001280)={&(0x7f0000001000)={0x250, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x234, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}]}, 0x250}}, 0x10) (async, rerun: 32) r13 = openat$cgroup_ro(r2, &(0x7f0000001300)='io.stat\x00', 0x0, 0x0) (rerun: 32) sendmsg$nl_route(r13, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)=@mpls_getnetconf={0x34, 0x52, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xa43}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xc00000}, @NETCONFA_IFINDEX={0x8, 0x1, r3}]}, 0x34}}, 0x10040000) (async) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000001440)={'wpan4\x00'}) 1.258069786s ago: executing program 0 (id=6326): r0 = socket(0x10, 0x803, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) r6 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newnexthop={0x30, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x30}}, 0x40000) (async) r7 = socket(0x11, 0x3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd70000000000002000001000000000000000008001f0004000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0, @ANYBLOB="b58979"], 0x14c}}, 0x4810) (async) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) (async) sendmsg$netlink(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3b844100d5432f"], 0xdd12}], 0x1}, 0x20040890) (async) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES16=r2, @ANYRESHEX=r3, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}, 0x1, 0x0, 0x0, 0xf9612d57cd99e519}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={0x0, 0xffffffffffffff9e, &(0x7f0000000140)={&(0x7f00000013c0)={0x24, r5, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x1ff}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r11, 0x1}, &(0x7f0000000180)=0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRESHEX=r3, @ANYBLOB="56836879936820d5e94de178a28a416c9d95e3db6f56cb436ba22ef8b17a8bc5c24e40bf7933cb5d597755802fb44a840100000000000000185de721151d4372266704e533500d901ab7a7148ac3a6f7ec483565e029739c64e23cb887d306cbce53b701ec99abd0c7d28fc973a34873d0f7ca107aa675b5b122b06e28a3c76cd8eb3c8bcc1f818290325fb821321af9", @ANYRESDEC=r4, @ANYRES16=r5], 0x5c}}, 0x0) 1.211732056s ago: executing program 1 (id=6327): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmmsg(r2, &(0x7f0000000c80)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x2, @multicast, 'team_slave_0\x00'}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000004c0)="a0ae5f38048d2e21d89e36a00a30b00448aaf775ae1dadaa85e525f1a177561f33dfd9f156baf572319eb3ff9e9bcb379780ef64b43df215e413b68ee643fcea17f80cb7e1d9c61dba2a14103d115f4bc988ec3b72319580ce1a0fe69caf4f6134fe796ef1e33b214b9514494b7dbdeb08eb9770757fb5844d1c462c754d2aa69724a5c4dc4b039ecaef7c0fdd275c2214b534350d6d886c70b0f65468fc7d6a5fbf3b35d0a3b65ab6c73c2b6e2ab88aa7", 0xb1}, {&(0x7f0000000580)="16881ba166b2a7fb6c75969f228ef549ca1a123ff47f699306a26f75e22ba27049518ae5bf27246882001b6afb077d46de69e3f05889f9a6ef4b4889f731bfb8c3e981f1f243", 0x46}], 0x2, &(0x7f0000000640)}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000680)="9e5af8b88dbeff1d0aa91a1c483dc40053e04b5db2366687639d235b99752f4d453eaa64713485c0bae22b8b009db33fe2cde98cd3dcde1a193de729bb7de885d8050a4d47f10e1deb842bd547da8046a873ca32ca21cbb1394100093587cf400804fe4362292e8ccf825bb522f095162d9cb198abca0295064fc9848e5eda0aba4cbbf64923ed617281b4bb754de50828797f38a8f9597c732f45f71e2fe9b149e36bae0ce6c730bcfac849be967109baed47a8052085f5bf6f200996746eb01c5228ca5a8a19013299a15cf78f715d1f3409c4c45eef7c32c1c64c26c34b794af570a0008942", 0xe7}, {&(0x7f0000000780)="59d3d9ab5122a8c0e520045c28ea", 0xe}, {&(0x7f00000007c0)="928a2f692533718244147448d59864e14777dc6d0aaa5c37e12b634e4037fa08257cd593fa1372298030bb38acd8e287ea1b6e31d8a83e6ac361288f02e893d29c4c5348513f318098da262579404a0d8d31adec17e50ba2a6da3c7bb64dfea8dc75f539b84a35a2eb0b69586cbc6af10452e07e44ef25b2a8c9474e202d47d87ae902ca876de79124c94a7e0234a11a001c0f4e3ebff73fd0db", 0x9a}, {&(0x7f0000000880)="47b67e9fd26d5a9cea01409df3d20d69b9858e91c0a71c25247b79ec7d27f5adcd6b4a297dbc0fdffa9d2968f49a34cf403c2c0c12810cdf259b07ac1777d046777fc447f31c3536396a37a78eb3dafe595a1ee960dbf78087b87ddc11b07f9733d48cc43398e787f34b763fd6cc995359ecc42539deeeaf3cbc8d24", 0x7c}], 0x4}}, {{&(0x7f0000000940)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x3, 0x1, 0x2, 0x4, {0xa, 0x4e23, 0x9, @local, 0x5}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000009c0)="b9de3bf250a957948a72ddc33065da598560671af0193af68d999592542272f0bc09dfc68a7a812ec3839a8a23dd4e08090259d2d9179c42ac5557746500a864973f1ccbd57e04952644c94486c2ea7bc400738bc57a52b3020fb4340abfbf8346aaba8ec4188fe8242922bfdb16abb4c53028216d1a13d33d7cac35d433f72f3b1f09", 0x83}, {&(0x7f0000000a80)="ec8cc62ce09251d005d842c82c3b3a95d9255dafb9a3dfa1e7304e2d9f513c184a8d4064f3668ac3d8e13b91fb1e4a5aa4a2a1743af47b605cc158c37af65b9aa88e0a026486e8aec4c74ddde36af311da63f1ebde8933d5c427ffa30d2590415321c2f9b306fd988223", 0x6a}], 0x2, &(0x7f0000000b40)=[{0x58, 0x118, 0xf, "d5e3418dc6658bfda44673976dc6e6d3f41c1dc082692c17623ee6a9bfee93b31b9180698c96c6ad350a00c216c30f5b1ec99e90c9e2f8ab5ad602ed5dec4c6d51f09cd5"}, {0x38, 0x29, 0x10, "21a5e14caafc836a1c7a31e6701fc33da0c8c3a95001bbb40bfe38b1a03f73182b3fb19cbf"}, {0x38, 0x1, 0x4, "64cbe20c08a20a6fe49a41250ed0ff1fb1f964dd390addcab82b4cbe6bb16dafa981"}, {0x70, 0x10f, 0x1, "ef5696b2ae51ead4bb3111e43470b1bcdddfe3b2b986afa7dc259c076a849d3e9da3e816952c0194ef8608dca687b4a609119e5f7e0a3fcda22b5e0f46109c5b238617e7b0c28059c1f6866c38d4a87a779018ae1719568c3b4cdf6f84bd39"}], 0x138}}], 0x3, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.065595422s ago: executing program 0 (id=6328): syz_emit_ethernet(0xbe, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000180c20000000800450000b0000000000011907800000000e0000001000017c1009c907801000000000000000b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b265e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce6a9f3a451dd7eb4523c02c2a4a00f81073727f3ac9f91e284b975a328f865412904b133eebafc6eb170fb00621144ab13a642475fc21552dce5cda9ce5302e1e3f89b58fd40672e63f3e1aec"], 0x0) (async) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x40, 0x80, 0x4, 0xe, {{0xb, 0x4, 0x0, 0x9, 0x2c, 0x65, 0x0, 0x1, 0x4, 0x0, @local, @remote, {[@timestamp_addr={0x44, 0xc, 0x39, 0x1, 0x4, [{@private=0xa010101, 0x24}]}, @end, @ra={0x94, 0x4}, @generic={0x94, 0x6, "91d21ba6"}]}}}}}) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@mcast1, 0x6c, r1}) 817.501191ms ago: executing program 1 (id=6329): socket$kcm(0x21, 0x2, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0xffffffff004) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20044081) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x6, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 128.007857ms ago: executing program 2 (id=6330): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100003600010000000000000000000201"], 0x114}], 0x1, 0x0, 0x0, 0x2000000}, 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x10, 0x10, 0x1, 0x4, {{0x7, 0x4, 0x3, 0x1a, 0x1c, 0x64, 0x0, 0x5, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) (async) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) readv(r4, &(0x7f0000000580)=[{&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000000300)=""/104, 0x68}, {&(0x7f0000000a80)=""/237, 0xed}, {&(0x7f00000000c0)=""/15, 0xf}, {&(0x7f0000000380)=""/20, 0x14}, {&(0x7f00000003c0)=""/52, 0x34}], 0x6) (async) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e24, 0x80000002, @remote, 0x9}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e21, 0x9, @remote, 0x400}}, [0x6, 0x7fffffffffffffff, 0x2f2, 0x4, 0x0, 0x0, 0x6, 0x2e, 0x7, 0x8, 0x7ff, 0xc, 0x8000, 0x4, 0x4]}, &(0x7f0000000540)=0x100) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000600)={r6, 0x0, 0x20, 0x4, 0x5}, &(0x7f0000000640)=0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="440000001f0001"], 0x44}], 0x1}, 0x0) (async) r8 = socket$nl_crypto(0x10, 0x3, 0x15) recvmsg(r8, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x1) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000680)="e342321a89cb3a1b281e5ea3e3fd7912cf8d589c43a694ae96f292d08aec62ba13079697706f1b27d0c24e43c68cde343f1a5f37a2ec40cdf6b53a134278b4d0ccbcffe3a79f112a18bd37314a64e7d4ee568fc683c1a9a97378e290651240b5f3765cf29e69fb9951ba75fa85300b0599ff72ddefae63b6397a4732704ac88c6710f523dae622b9125516b078c4002694572573791e5ea7f16deb0202f0432a9cd9a420927b3c2d9d42f24fa9154a3262804a57592300a206329835b0188c6d5fe5c870551186812afe62e688b3551fb9f250c1ad85acc662", 0xd9, 0x20000081, &(0x7f0000000780)={0x11, 0x5, r3, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000400)={r7, &(0x7f0000000140)='-:.]{&\\({\x00', 0x900, &(0x7f0000000180)={@align=0x708, {0xd, 0x1, 0x1}}, 0x6, &(0x7f0000000240), &(0x7f00000002c0)=0x10001}) tee(r4, r9, 0x7, 0xc) 89.267493ms ago: executing program 4 (id=6331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00883ebbbbbbbbbbbbaaaaaaaaaa2986dd679ba79600088800fc010000000000000000000000000000200100000000000000000000000000013a00010400000000d989c782e92298e2c81fe6a1e5f04b1d0cb46a0a2ba24fec9e308b07024ebf35e230e7ad17e65b26ac7f1d9ed910039447bc8c30d75a06"], 0x42) 2.023373ms ago: executing program 3 (id=6332): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000280)=0xd1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) 0s ago: executing program 0 (id=6333): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$unix(0x1, 0x1, 0x0) listen(r0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800"/547], 0x610) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x20, 0x0, 0x0, 0xfffff00a}]}, 0x10) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) kernel console output (not intermixed with test programs): ngth. [ 594.565585][T22373] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 594.968253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.015999][T22401] netlink: 'syz.3.4342': attribute type 1 has an invalid length. [ 595.495726][T22418] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 595.521540][T22421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4346'. [ 595.530956][T22418] batadv1: entered promiscuous mode [ 595.531042][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.531130][T22418] batadv1: entered allmulticast mode [ 595.531363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.531567][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.531768][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.531965][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.532201][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.533584][T22418] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 595.579954][T22421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4346'. [ 595.620511][T22427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4345'. [ 595.623846][T22418] team0: Failed to send options change via netlink (err -105) [ 595.640158][T22425] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4346'. [ 595.695781][T22425] netlink: 'syz.3.4346': attribute type 1 has an invalid length. [ 595.725800][T22425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4346'. [ 595.766544][T22418] team0: Port device batadv1 added [ 595.846136][T22426] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4347'. [ 595.898352][T22426] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4347'. [ 595.968394][T10419] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 595.978932][T10419] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 595.997261][T22447] xt_hashlimit: overflow, try lower: 3/0 [ 596.008429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.169687][T22449] bond6: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 596.210836][T22456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4353'. [ 596.262035][T22449] bond6 (unregistering): Released all slaves [ 596.727870][T22484] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 596.929740][T22493] netlink: 'syz.4.4364': attribute type 3 has an invalid length. [ 597.631476][T22533] netlink: 'syz.3.4376': attribute type 30 has an invalid length. [ 597.683057][T22539] xt_hashlimit: size too large, truncated to 1048576 [ 597.734324][T22533] bond6: option arp_missed_max: invalid value (0) [ 597.764599][T22533] bond6: option arp_missed_max: allowed values 1 - 255 [ 597.796943][T22533] bond6 (unregistering): Released all slaves [ 598.331249][T10410] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 598.473969][T20034] IPVS: starting estimator thread 0... [ 598.588541][T22583] IPVS: using max 36 ests per chain, 86400 per kthread [ 599.569811][T22618] net_ratelimit: 10 callbacks suppressed [ 599.569826][T22618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 600.168151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.197137][T22567] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 601.218151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.471869][T22644] Bluetooth: MGMT ver 1.23 [ 601.504755][T22646] __nla_validate_parse: 8 callbacks suppressed [ 601.504774][T22646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4403'. [ 601.508910][T22650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4405'. [ 601.546150][T22646] netlink: 'syz.2.4403': attribute type 4 has an invalid length. [ 601.638005][T22653] xt_hashlimit: size too large, truncated to 1048576 [ 601.749040][T22668] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.4409'. [ 601.765262][T22661] bridge_slave_0 (unregistering): left allmulticast mode [ 601.772791][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.773028][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.773248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.773485][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.773702][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.773943][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.774158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.890962][T22661] bridge_slave_0 (unregistering): left promiscuous mode [ 601.898889][T22661] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.966203][T22673] siw: device registration error -23 [ 602.270086][T22683] netlink: 'syz.3.4414': attribute type 3 has an invalid length. [ 602.320121][T22683] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4414'. [ 602.996945][T22719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4426'. [ 603.021080][T22719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4426'. [ 603.202091][T22735] syzkaller0: entered promiscuous mode [ 603.218559][T22735] syzkaller0: entered allmulticast mode [ 603.457195][T22741] xt_limit: Overflow, try lower: 604147548/4200216962 [ 603.466454][T22746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4435'. [ 603.670476][T22757] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4438'. [ 603.922043][T22777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4441'. [ 603.957646][T22775] xt_policy: too many policy elements [ 604.206834][T22788] netlink: 'syz.2.4448': attribute type 1 has an invalid length. [ 604.383478][T22798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 604.633391][T22810] tipc: Enabled bearer , priority 0 [ 604.660616][T22810] syzkaller0: entered promiscuous mode [ 604.682790][T22810] syzkaller0: entered allmulticast mode [ 604.728199][ C1] net_ratelimit: 4 callbacks suppressed [ 604.728217][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.729097][T22812] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 604.813912][T22812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4454'. [ 604.854033][T22809] tipc: Resetting bearer [ 604.929805][T22809] tipc: Disabling bearer [ 604.946947][T22825] netlink: 'syz.2.4460': attribute type 1 has an invalid length. [ 604.968449][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.976883][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.985290][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.993667][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.307006][T22825] 8021q: adding VLAN 0 to HW filter on device bond10 [ 605.417016][T22846] xt_l2tp: v2 doesn't support IP mode [ 605.449205][T22845] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 605.467080][T22829] bond10: (slave geneve4): making interface the new active one [ 605.496903][T22829] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 605.769370][T22850] vlan0: entered promiscuous mode [ 605.781333][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.796993][T22850] vlan0: entered allmulticast mode [ 605.826591][T22850] veth0_vlan: entered allmulticast mode [ 605.928804][ T5647] Bluetooth: hci3: command tx timeout [ 606.518878][T22878] __nla_validate_parse: 24 callbacks suppressed [ 606.518898][T22878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4473'. [ 606.577452][T22878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4473'. [ 606.625168][T22878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4473'. [ 606.654537][T22878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4473'. [ 606.677608][T22878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4473'. [ 606.689463][T22901] netlink: 'syz.3.4481': attribute type 1 has an invalid length. [ 606.697530][T22878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4473'. [ 606.735584][T22878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4473'. [ 606.765491][T22878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4473'. [ 606.791375][T22901] 8021q: adding VLAN 0 to HW filter on device bond6 [ 606.799222][T22878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4473'. [ 606.808457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.821934][T22878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4473'. [ 606.883811][T22903] bond6: (slave geneve3): making interface the new active one [ 606.915478][T22903] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 606.946807][ T1156] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 606.981229][ T1156] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 607.073304][ T1156] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 607.102408][ T1156] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 607.249949][T22923] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20003 [ 607.301710][T22923] openvswitch: netlink: IPv4 tun info is not correct [ 607.354881][T22929] vet: renamed from veth0_vlan (while UP) [ 607.823517][T22946] syzkaller0: entered promiscuous mode [ 607.847687][T22946] syzkaller0: entered allmulticast mode [ 607.858423][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.092326][T22968] siw: device registration error -23 [ 609.930894][ C1] net_ratelimit: 6 callbacks suppressed [ 609.930914][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.978408][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.288423][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.296925][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.305316][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.313605][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.321948][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.949477][T23007] veth0: entered promiscuous mode [ 611.963220][T23039] __nla_validate_parse: 38 callbacks suppressed [ 611.963242][T23039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4523'. [ 611.985579][T23007] veth0: left promiscuous mode [ 612.019484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.179016][T23055] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4528'. [ 612.478525][T23071] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4533'. [ 612.519782][T23070] netlink: 'syz.0.4532': attribute type 4 has an invalid length. [ 612.532360][T23076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4534'. [ 612.559935][T23070] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4532'. [ 612.585948][T23081] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.4532'. [ 612.782274][T23089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4537'. [ 612.824868][T23089] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 612.872169][T23096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4537'. [ 612.899511][T23096] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 612.916150][T23093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4538'. [ 612.956651][T23093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4538'. [ 613.822212][T23144] pimreg3: entered allmulticast mode [ 613.895718][T23146] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 613.974661][T23150] xt_hashlimit: size too large, truncated to 1048576 [ 614.127978][T23158] sctp: [Deprecated]: syz.0.4559 (pid 23158) Use of int in maxseg socket option. [ 614.127978][T23158] Use struct sctp_assoc_value instead [ 614.654035][T12387] block nbd1: Possible stuck request ffff888027225080: control (read@0,1024B). Runtime 360 seconds [ 614.665709][T12387] block nbd1: Possible stuck request ffff888027225240: control (read@1024,1024B). Runtime 360 seconds [ 614.677115][T12387] block nbd1: Possible stuck request ffff888027225400: control (read@2048,1024B). Runtime 360 seconds [ 614.688396][T12387] block nbd1: Possible stuck request ffff8880272255c0: control (read@3072,1024B). Runtime 360 seconds [ 614.919528][T23199] syzkaller0: entered promiscuous mode [ 614.931016][T23199] syzkaller0: entered allmulticast mode [ 615.131574][ C1] net_ratelimit: 6 callbacks suppressed [ 615.131597][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.539557][T23243] ip6t_srh: unknown srh match flags 4000 [ 615.683672][T23249] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 615.699772][T23254] xt_hashlimit: overflow, try lower: 3/0 [ 615.708971][T20036] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 615.974966][T23268] veth1_to_bond: entered allmulticast mode [ 616.002357][T23268] veth1_to_bond: left allmulticast mode [ 616.168541][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.184617][T20036] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 616.201156][T23289] netlink: 'syz.4.4597': attribute type 1 has an invalid length. [ 616.475176][T23289] 8021q: adding VLAN 0 to HW filter on device bond6 [ 616.660940][T23314] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 617.218200][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.405529][T23316] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 617.411982][T23316] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 617.608285][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.616776][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.625216][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.839811][T23373] xt_socket: unknown flags 0x8 [ 618.016121][T23381] __nla_validate_parse: 6 callbacks suppressed [ 618.016153][T23381] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4617'. [ 619.613279][T23472] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.4635'. [ 619.872990][T23491] netlink: 'syz.4.4640': attribute type 11 has an invalid length. [ 619.918215][T23491] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4640'. [ 619.934756][T23491] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4640'. [ 619.982090][T23494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4641'. [ 620.617752][T23531] bridge_slave_1: left allmulticast mode [ 620.648402][T23531] bridge_slave_1: left promiscuous mode [ 620.669199][T23531] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.677795][T23536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4652'. [ 620.716412][T23540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4649'. [ 620.808272][ C0] net_ratelimit: 5 callbacks suppressed [ 620.808288][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.822034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.830189][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.838348][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.846464][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.854617][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.984856][T23555] netlink: 'syz.0.4654': attribute type 2 has an invalid length. [ 621.007591][T23555] netlink: 'syz.0.4654': attribute type 1 has an invalid length. [ 621.079249][T23540] lo speed is unknown, defaulting to 1000 [ 621.191458][T23563] netlink: 'syz.3.4656': attribute type 10 has an invalid length. [ 621.234150][T23563] ipvlan0: entered allmulticast mode [ 621.252303][T23563] veth0_vlan: entered allmulticast mode [ 621.274372][T23563] team0: Device ipvlan0 failed to register rx_handler [ 621.519668][T23574] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 621.559320][T23576] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4659'. [ 621.674139][T23583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4662'. [ 621.727906][T23588] Cannot find map_set index 135 as target [ 621.763897][T23590] veth0: entered promiscuous mode [ 621.793562][T23589] veth0: left promiscuous mode [ 621.813895][T23583] syzkaller0: entered promiscuous mode [ 621.835134][T23583] syzkaller0: entered allmulticast mode [ 621.848144][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.859135][T23595] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4665'. [ 622.156204][T23610] atomic_op ffff88802ad9e998 conn xmit_atomic 0000000000000000 [ 622.276029][T23614] openvswitch: netlink: Invalid VLAN frame [ 622.386218][T23623] netlink: 'syz.4.4672': attribute type 1 has an invalid length. [ 622.631007][T23627] netlink: 'syz.4.4672': attribute type 12 has an invalid length. [ 622.836722][T23650] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 622.888414][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.355852][T23673] tipc: New replicast peer: 0.0.0.0 [ 623.369312][T23673] tipc: Enabled bearer , priority 10 [ 623.459597][T23672] tipc: Enabling of bearer rejected, already enabled [ 623.591086][T23701] netlink: 'syz.0.4693': attribute type 13 has an invalid length. [ 623.599708][T23701] __nla_validate_parse: 7 callbacks suppressed [ 623.599726][T23701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4693'. [ 623.634710][T23703] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4694'. [ 623.669973][T23703] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4694'. [ 623.685382][T23703] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4694'. [ 623.705155][T23709] nbd: couldn't find device at index 2958377 [ 623.744790][T10410] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.773622][T10410] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.814767][T10410] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.829610][T23715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4696'. [ 623.866423][T10410] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.928118][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.254711][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.456904][T23747] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4704'. [ 624.793297][T23762] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4708'. [ 624.912703][T23769] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4709'. [ 625.104574][T23782] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4711'. [ 625.138830][T23782] bond0: entered promiscuous mode [ 625.158743][T23782] bond_slave_0: entered promiscuous mode [ 625.171410][T23782] bond_slave_1: entered promiscuous mode [ 625.204746][T23729] netlink: 'syz.0.4699': attribute type 13 has an invalid length. [ 625.595557][T23798] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 625.641721][T23808] netlink: 'syz.3.4717': attribute type 9 has an invalid length. [ 625.657265][T23798] bond5 (unregistering): Released all slaves [ 626.008507][ C0] net_ratelimit: 2 callbacks suppressed [ 626.008525][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.048166][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.060350][T23884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4732'. [ 627.829187][T23913] ip6tnl3: entered promiscuous mode [ 628.026520][ T29] audit: type=1804 audit(1780728514.765:12): pid=23939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4744" name="/newroot/236/cgroup.controllers" dev="tmpfs" ino=1222 res=1 errno=0 [ 628.088178][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.130677][ T29] audit: type=1800 audit(1780728514.765:13): pid=23939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4744" name="cgroup.controllers" dev="tmpfs" ino=1222 res=0 errno=0 [ 628.387737][T23949] netlink: 'syz.0.4748': attribute type 1 has an invalid length. [ 628.431718][T23949] tunl0: Caught tx_queue_len zero misconfig [ 628.502139][T23966] tipc: Enabling of bearer rejected, failed to enable media [ 628.624897][T23967] __nla_validate_parse: 4 callbacks suppressed [ 628.624918][T23967] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4753'. [ 628.726864][T23967] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4753'. [ 628.785071][T23989] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20003 [ 628.824332][T23988] xt_CT: You must specify a L4 protocol and not use inversions on it [ 629.035602][T23994] syzkaller1: entered promiscuous mode [ 629.072232][T23994] syzkaller1: entered allmulticast mode [ 629.178302][T24004] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4760'. [ 629.295746][T24012] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4762'. [ 629.403741][T24018] netlink: 'syz.0.4763': attribute type 1 has an invalid length. [ 629.640347][T24029] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4767'. [ 629.915520][T24033] ip6gretap0: entered promiscuous mode [ 629.931704][T24033] ip6gretap0: entered allmulticast mode [ 630.299812][T24067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4776'. [ 630.422868][T10429] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.432070][T24067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4776'. [ 630.446605][T10410] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.520552][T10410] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.540926][T10410] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.606440][T24079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4777'. [ 630.780829][T24079] team0 (unregistering): Port device geneve1 removed [ 630.893485][T24071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 631.219204][T24111] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4786'. [ 631.734233][T24135] xt_nat: multiple ranges no longer supported [ 631.829366][T24131] netlink: 'syz.1.4790': attribute type 12 has an invalid length. [ 631.844863][T24136] netlink: 'syz.1.4790': attribute type 12 has an invalid length. [ 631.956594][T24148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.636862][T24177] lo: Caught tx_queue_len zero misconfig [ 632.738547][T24182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4800'. [ 632.787075][T24185] bond0: entered allmulticast mode [ 632.949250][T24191] netlink: 'syz.0.4803': attribute type 3 has an invalid length. [ 633.125492][T24194] bond9 (unregistering): Released all slaves [ 633.442901][T24227] netlink: 'syz.1.4808': attribute type 39 has an invalid length. [ 633.544605][T24227] hsr_slave_0: left promiscuous mode [ 633.643372][T24227] hsr_slave_1: left promiscuous mode [ 633.781451][T24235] team0: Caught tx_queue_len zero misconfig [ 633.885417][T24235] __nla_validate_parse: 5 callbacks suppressed [ 633.885459][T24235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4812'. [ 634.134279][T24257] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4819'. [ 634.257786][T24269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4820'. [ 634.284296][T24271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4820'. [ 634.323472][T24268] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4821'. [ 634.641894][T24283] veth0_macvtap: Caught tx_queue_len zero misconfig [ 634.692238][T24287] netlink: 'syz.2.4825': attribute type 1 has an invalid length. [ 634.702557][T24283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4823'. [ 634.833126][T24291] netlink: 'syz.2.4826': attribute type 1 has an invalid length. [ 635.155494][T24303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4829'. [ 635.463949][T24326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4835'. [ 635.475954][T24320] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 635.881504][T24355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4844'. [ 635.910194][T24348] netlink: 'syz.0.4841': attribute type 1 has an invalid length. [ 635.941850][T24355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4844'. [ 636.132686][T24358] bond2: (slave veth5): Enslaving as an active interface with a down link [ 636.145340][T24348] 8021q: adding VLAN 0 to HW filter on device bond2 [ 636.155158][T24369] netlink: 'syz.1.4848': attribute type 32 has an invalid length. [ 636.206403][T24348] x_tables: duplicate underflow at hook 1 [ 636.263420][T24369] bond5: option coupled_control: invalid value (192) [ 636.301254][T24369] bond5 (unregistering): Released all slaves [ 636.545571][T24385] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 636.764032][T24399] netlink: 'syz.0.4856': attribute type 5 has an invalid length. [ 636.791517][ T29] audit: type=1804 audit(1780728523.535:14): pid=24399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4856" name="/newroot/285/cgroup.controllers" dev="tmpfs" ino=1470 res=1 errno=0 [ 636.880568][ T29] audit: type=1800 audit(1780728523.555:15): pid=24399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4856" name="cgroup.controllers" dev="tmpfs" ino=1470 res=0 errno=0 [ 637.045741][T24418] netlink: 'syz.0.4863': attribute type 83 has an invalid length. [ 637.071779][T24418] ip6tnl0: Caught tx_queue_len zero misconfig [ 637.687919][T24422] veth0_to_bond: left allmulticast mode [ 637.864785][T24422] macvlan0: left promiscuous mode [ 638.067203][T24422] vlan2: left promiscuous mode [ 638.077323][T24422] geneve1: left promiscuous mode [ 638.083419][T24422] vlan2: left allmulticast mode [ 638.089400][T24422] geneve1: left allmulticast mode [ 638.123166][T24422] bond8: left promiscuous mode [ 638.133640][T24422] bond9: left promiscuous mode [ 638.145622][T24422] geneve3: left promiscuous mode [ 638.154190][T24422] geneve3: left allmulticast mode [ 638.252357][ T138] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.269271][ T138] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 638.295383][ T138] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.338308][ T138] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 638.360707][ T138] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.385750][ T138] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 638.612166][T24462] ip6_vti0: entered promiscuous mode [ 638.687763][T24462] netlink: 'syz.1.4873': attribute type 15 has an invalid length. [ 638.722668][T24464] netlink: 'syz.2.4874': attribute type 50 has an invalid length. [ 638.899761][T24484] netlink: 'syz.1.4878': attribute type 8 has an invalid length. [ 639.033565][T24489] __nla_validate_parse: 15 callbacks suppressed [ 639.033584][T24489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4881'. [ 639.203045][T24508] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4884'. [ 639.383591][T24519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4886'. [ 639.535110][T24525] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4890'. [ 639.590632][T24527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4891'. [ 639.631809][T24527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4891'. [ 639.682022][T24530] netlink: 'syz.4.4892': attribute type 3 has an invalid length. [ 639.705318][T24530] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4892'. [ 640.285943][T24564] netlink: 'syz.2.4901': attribute type 64 has an invalid length. [ 640.312082][T24564] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4901'. [ 640.575572][T24579] syzkaller0: entered promiscuous mode [ 640.581601][T24579] syzkaller0: entered allmulticast mode [ 640.595501][T24579] tipc: Enabled bearer , priority 0 [ 640.628359][T24579] tipc: Resetting bearer [ 640.644727][T24576] tipc: Resetting bearer [ 640.697342][T24576] tipc: Disabling bearer [ 641.033873][T24604] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4916'. [ 641.980817][T24665] veth0_virt_wifi: mtu less than device minimum [ 642.119580][T24667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4933'. [ 642.400843][T24687] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 642.556996][T24696] xfrm1: entered promiscuous mode [ 642.565219][T24696] xfrm1: entered allmulticast mode [ 642.682839][T24703] netlink: 'syz.1.4943': attribute type 1 has an invalid length. [ 643.164047][T24712] macvlan3: entered promiscuous mode [ 643.169886][T24712] macvlan3: entered allmulticast mode [ 643.176249][T24712] bond6: (slave macvlan3): Opening slave failed [ 643.333304][T24726] tipc: Enabled bearer , priority 0 [ 643.340783][T24733] syzkaller0: entered promiscuous mode [ 643.351054][T24733] syzkaller0: entered allmulticast mode [ 643.366721][T24741] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 643.451115][T24743] syz_tun (unregistering): left allmulticast mode [ 643.485797][T24741] tipc: Resetting bearer [ 643.530672][T24724] tipc: Resetting bearer [ 643.604457][T24724] tipc: Disabling bearer [ 643.612945][T24755] netlink: 'syz.2.4959': attribute type 1 has an invalid length. [ 643.621791][T24755] netlink: 'syz.2.4959': attribute type 1 has an invalid length. [ 643.630622][T24754] netlink: 'syz.1.4958': attribute type 4 has an invalid length. [ 643.742684][T24761] netlink: 'syz.2.4963': attribute type 1 has an invalid length. [ 643.818342][T24765] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 643.956608][T24775] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 644.062385][T24781] tipc: Started in network mode [ 644.081730][T24781] tipc: Node identity 6e0221938ece, cluster identity 4711 [ 644.111558][T24781] tipc: Enabled bearer , priority 0 [ 644.190617][T24781] __nla_validate_parse: 9 callbacks suppressed [ 644.190636][T24781] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4967'. [ 644.207739][T24784] syzkaller0: entered promiscuous mode [ 644.213794][T24784] syzkaller0: entered allmulticast mode [ 644.220883][T24784] tipc: Resetting bearer [ 644.233573][T24780] tipc: Resetting bearer [ 644.738015][T12387] block nbd1: Possible stuck request ffff888027225080: control (read@0,1024B). Runtime 390 seconds [ 644.750433][T12387] block nbd1: Possible stuck request ffff888027225240: control (read@1024,1024B). Runtime 390 seconds [ 644.761613][T12387] block nbd1: Possible stuck request ffff888027225400: control (read@2048,1024B). Runtime 390 seconds [ 644.773131][T12387] block nbd1: Possible stuck request ffff8880272255c0: control (read@3072,1024B). Runtime 390 seconds [ 645.396411][T24817] netlink: 'syz.3.4973': attribute type 1 has an invalid length. [ 647.142001][T24780] tipc: Disabling bearer [ 647.159943][T20036] tipc: Node number set to 3771474323 [ 647.295975][T24820] netlink: 'syz.2.4974': attribute type 3 has an invalid length. [ 647.498898][T24832] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4974'. [ 647.797926][T24850] netlink: 1024 bytes leftover after parsing attributes in process `syz.4.4981'. [ 648.603217][T24870] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4986'. [ 648.615621][T24884] netlink: 165 bytes leftover after parsing attributes in process `syz.2.4988'. [ 648.639035][T24870] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4986'. [ 648.866704][T24870] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 649.196411][T24908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4993'. [ 649.219096][T24907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4994'. [ 649.284067][T24908] bridge0: entered promiscuous mode [ 649.305593][T24908] bridge0: entered allmulticast mode [ 649.395303][T24911] bridge1: entered promiscuous mode [ 649.426528][T24920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4996'. [ 649.432842][T24911] bridge1: entered allmulticast mode [ 649.455330][T24922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4996'. [ 649.532420][T24920] bond7: entered promiscuous mode [ 649.538694][T24920] 8021q: adding VLAN 0 to HW filter on device bond7 [ 649.546557][T24931] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 649.665210][T24920] 8021q: adding VLAN 0 to HW filter on device bond7 [ 649.699036][T24920] bond7: (slave sit1): The slave device specified does not support setting the MAC address [ 649.750199][T24920] bond7: (slave sit1): Error -95 calling set_mac_address [ 649.861569][T24943] 8021q: VLANs not supported on xfrm0 [ 650.079347][T24961] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5007'. [ 650.122594][T24961] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5007'. [ 650.264024][T24976] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5011'. [ 650.290671][T24976] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5011'. [ 650.462692][T24980] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 650.487202][T24982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5013'. [ 650.502675][T24982] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5013'. [ 650.579826][T24980] bond7 (unregistering): Released all slaves [ 650.849754][T24984] IPv6: sit1: Disabled Multicast RS [ 650.894119][T24993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5016'. [ 651.368622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.484739][T25017] netlink: 'syz.0.5025': attribute type 10 has an invalid length. [ 651.541270][T25017] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 651.562302][T25017] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 651.610663][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.720424][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.774391][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.882154][T25039] netlink: 'syz.0.5031': attribute type 1 has an invalid length. [ 651.947094][T25039] bond3: entered promiscuous mode [ 651.965275][T25039] 8021q: adding VLAN 0 to HW filter on device bond3 [ 651.998909][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.028949][T25039] bond3: (slave bridge2): making interface the new active one [ 652.036848][T25039] bridge2: entered promiscuous mode [ 652.051590][T25039] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 652.102526][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.148733][T20039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.209086][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.278426][T20039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.103781][T25104] team0: entered promiscuous mode [ 653.110863][T25104] team0: entered allmulticast mode [ 653.795579][T25147] SET target dimension over the limit! [ 653.817761][T25143] 8021q: adding VLAN 0 to HW filter on device bond8 [ 654.105409][T25137] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20003 [ 654.291543][T25166] __nla_validate_parse: 14 callbacks suppressed [ 654.291562][T25166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5066'. [ 654.356485][T25166] lo speed is unknown, defaulting to 1000 [ 654.488615][ C1] net_ratelimit: 8 callbacks suppressed [ 654.488633][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.724362][T25177] xt_l2tp: unknown flags: 10 [ 655.053033][T25202] sctp: [Deprecated]: syz.2.5075 (pid 25202) Use of int in max_burst socket option deprecated. [ 655.053033][T25202] Use struct sctp_assoc_value instead [ 655.054709][T25205] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 655.472994][T25220] netlink: 13 bytes leftover after parsing attributes in process `syz.4.5081'. [ 655.528226][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.636741][T25228] netlink: 516 bytes leftover after parsing attributes in process `syz.4.5083'. [ 655.986686][T25247] syzkaller0: entered promiscuous mode [ 655.995943][T25247] syzkaller0: entered allmulticast mode [ 656.034972][T25250] syzkaller1: entered promiscuous mode [ 656.044919][T25253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5091'. [ 656.049834][T25250] syzkaller1: entered allmulticast mode [ 656.393085][T25276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5097'. [ 656.430703][T25279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5099'. [ 656.470908][T25282] x_tables: duplicate entry at hook 1 [ 656.530764][T25276] bond7 (unregistering): Released all slaves [ 656.568260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.581737][T25291] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5101'. [ 656.642326][T25291] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5101'. [ 656.904733][T25301] 8021q: VLANs not supported on vcan0 [ 656.963545][T25309] netlink: 'syz.3.5109': attribute type 9 has an invalid length. [ 657.211082][T25316] bridge3: entered promiscuous mode [ 657.232220][T25316] bridge3: entered allmulticast mode [ 657.264004][T25327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5115'. [ 657.342671][T25316] netlink: 'syz.1.5111': attribute type 2 has an invalid length. [ 657.374002][T25333] pim6reg: entered allmulticast mode [ 657.520547][T25338] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5120'. [ 657.608240][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.676726][T25347] syzkaller0: entered promiscuous mode [ 657.683006][T25347] syzkaller0: entered allmulticast mode [ 658.012202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.146326][T25366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 658.310040][T25370] xt_TCPMSS: Only works on TCP SYN packets [ 658.334321][T25370] netlink: 'syz.1.5128': attribute type 2 has an invalid length. [ 658.655313][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.694135][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.732191][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.390861][T25402] netlink: 'syz.3.5137': attribute type 1 has an invalid length. [ 661.409606][T25402] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5137'. [ 661.440063][T25402] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5137'. [ 661.460037][T25402] netlink: 'syz.3.5137': attribute type 1 has an invalid length. [ 661.477485][T25402] netlink: 634 bytes leftover after parsing attributes in process `syz.3.5137'. [ 661.768252][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.038859][T25429] syzkaller0: entered promiscuous mode [ 662.071149][T25429] syzkaller0: entered allmulticast mode [ 662.578390][T25466] openvswitch: netlink: IP tunnel dst address not specified [ 662.808316][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.876542][T25485] x_tables: duplicate underflow at hook 2 [ 663.103255][T25493] blkio.reset_stats is deprecated [ 663.193127][T25493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5163'. [ 663.279359][T25516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5170'. [ 663.293616][T25516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5170'. [ 663.343204][T25516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5170'. [ 663.391698][T10410] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.416436][T25516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5170'. [ 663.436744][T10410] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.536983][T10410] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.619052][T25530] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 663.742994][T25532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5173'. [ 663.848384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.220801][T25557] netlink: 'syz.0.5180': attribute type 10 has an invalid length. [ 664.293179][T25561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.544250][T25574] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5185'. [ 664.888325][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.116881][T25605] netlink: 'syz.3.5197': attribute type 1 has an invalid length. [ 665.598390][T25633] pim6reg: entered allmulticast mode [ 665.928153][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.940920][T25650] veth0: Caught tx_queue_len zero misconfig [ 666.417239][T25671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.488419][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.582497][T25680] netlink: 'syz.3.5218': attribute type 21 has an invalid length. [ 666.597600][T25682] netlink: 'syz.1.5220': attribute type 11 has an invalid length. [ 666.614106][T25680] __nla_validate_parse: 7 callbacks suppressed [ 666.614124][T25680] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5218'. [ 666.615644][T25682] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5220'. [ 666.639277][T25680] netlink: 'syz.3.5218': attribute type 5 has an invalid length. [ 666.639298][T25680] netlink: 'syz.3.5218': attribute type 6 has an invalid length. [ 666.639312][T25680] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5218'. [ 666.776696][T25688] tipc: Enabling of bearer rejected, failed to enable media [ 666.968458][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.297627][T25716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5227'. [ 667.314312][T25720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.533936][T25702] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5224'. [ 667.564047][T25702] netlink: 'syz.4.5224': attribute type 4 has an invalid length. [ 667.705432][T25740] siw: device registration error -23 [ 668.008244][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.304336][T25788] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 668.333740][ T29] audit: type=1804 audit(1780728555.065:16): pid=25781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5243" name="/newroot/428/cgroup.controllers" dev="tmpfs" ino=2214 res=1 errno=0 [ 668.397274][ T29] audit: type=1800 audit(1780728555.065:17): pid=25781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5243" name="cgroup.controllers" dev="tmpfs" ino=2214 res=0 errno=0 [ 668.581288][T25793] syzkaller1: entered promiscuous mode [ 668.586860][T25793] syzkaller1: entered allmulticast mode [ 668.604909][T25803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5247'. [ 668.919765][ T2175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.920542][T25822] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5250'. [ 668.990958][ T2175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.048329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.202577][T25837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5257'. [ 669.233060][T25840] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20001 [ 669.338954][T25847] netlink: 165 bytes leftover after parsing attributes in process `syz.4.5260'. [ 669.399478][T25853] netlink: 'syz.1.5263': attribute type 6 has an invalid length. [ 669.410793][T25851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5262'. [ 669.871043][T25882] H: renamed from dummy0 (while UP) [ 670.088232][ C1] net_ratelimit: 4 callbacks suppressed [ 670.088249][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.102675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.122835][ T29] audit: type=1107 audit(1780728556.815:18): pid=25892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 670.384570][T25918] netlink: 'syz.2.5283': attribute type 21 has an invalid length. [ 670.757967][T25947] veth0: entered promiscuous mode [ 670.764931][T25950] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 670.893148][T25949] veth0: left promiscuous mode [ 671.128214][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.137742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.805722][T26001] __nla_validate_parse: 11 callbacks suppressed [ 671.805742][T26001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5312'. [ 671.854680][T26001] syzkaller0: entered promiscuous mode [ 671.863936][T26004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5313'. [ 671.879092][T26001] syzkaller0: entered allmulticast mode [ 671.890704][T26007] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 672.021425][T26001] netlink: 'syz.0.5312': attribute type 13 has an invalid length. [ 672.031061][T26001] netlink: 'syz.0.5312': attribute type 58 has an invalid length. [ 672.039324][T26001] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5312'. [ 672.077452][T26001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5312'. [ 672.146847][T26001] netlink: 'syz.0.5312': attribute type 2 has an invalid length. [ 672.168248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.177068][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.232351][T26018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5319'. [ 672.241575][T26020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5320'. [ 672.251896][T26020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5320'. [ 672.270735][T26018] IPVS: Unknown mcast interface: vcan0 [ 672.279791][T26024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5319'. [ 672.290002][T26024] IPVS: Unknown mcast interface: vcan0 [ 672.483848][T26035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5325'. [ 672.495491][T26035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5325'. [ 672.722614][T26050] netlink: 'syz.3.5330': attribute type 1 has an invalid length. [ 672.754370][T26052] 8021q: VLANs not supported on ip_vti0 [ 672.760624][T26050] netlink: 'syz.3.5330': attribute type 1 has an invalid length. [ 672.805826][T26050] netlink: 'syz.3.5330': attribute type 1 has an invalid length. [ 672.838317][T26050] netlink: 'syz.3.5330': attribute type 1 has an invalid length. [ 672.863633][T26050] netlink: 'syz.3.5330': attribute type 1 has an invalid length. [ 672.984636][T26064] bond9: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 673.001085][T26064] bond9 (unregistering): Released all slaves [ 673.131314][T26073] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 673.202710][T26079] ieee802154 phy1 wpan1: encryption failed: -22 [ 673.211824][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.221462][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.245245][T26080] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ2 [ 673.832845][T26129] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 674.494851][T26166] validate_nla: 61 callbacks suppressed [ 674.494869][T26166] netlink: 'syz.2.5361': attribute type 8 has an invalid length. [ 674.509826][T26166] sch_fq: defrate 0 ignored. [ 674.810559][T12387] block nbd1: Possible stuck request ffff888027225080: control (read@0,1024B). Runtime 420 seconds [ 674.821652][T12387] block nbd1: Possible stuck request ffff888027225240: control (read@1024,1024B). Runtime 420 seconds [ 674.832794][T12387] block nbd1: Possible stuck request ffff888027225400: control (read@2048,1024B). Runtime 420 seconds [ 674.848476][T12387] block nbd1: Possible stuck request ffff8880272255c0: control (read@3072,1024B). Runtime 420 seconds [ 674.979346][T26192] lo speed is unknown, defaulting to 1000 [ 675.242224][T26218] net_ratelimit: 3 callbacks suppressed [ 675.242244][T26218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.288250][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.297115][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.564889][T26232] netlink: 'syz.0.5379': attribute type 24 has an invalid length. [ 676.049744][T26263] bond0 (unregistering): Released all slaves [ 676.192847][T26268] openvswitch: netlink: Message has 1 unknown bytes. [ 676.254816][T26268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 676.328217][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.337795][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.788464][T26309] 0·: renamed from hsr0 [ 676.800064][T26309] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 676.812759][T26309] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 676.832056][T26309] 0·: entered allmulticast mode [ 676.837195][T26309] hsr_slave_0: entered allmulticast mode [ 676.864112][T26309] hsr_slave_1: entered allmulticast mode [ 676.887155][T26309] 8021q: adding VLAN 0 to HW filter on device c0· [ 676.895973][T26309] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 676.979901][T26306] bond9: option packets_per_slave: invalid value (18446744073709551615) [ 676.989397][T26306] bond9: option packets_per_slave: allowed values 0 - 65535 [ 677.000100][T26306] bond9 (unregistering): Released all slaves [ 677.142733][T26328] __nla_validate_parse: 79 callbacks suppressed [ 677.142752][T26328] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5407'. [ 677.334577][T26337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5409'. [ 677.389779][T26340] ip6_vti0: left promiscuous mode [ 677.422182][T26340] bond0: left promiscuous mode [ 677.436051][T26340] bond_slave_0: left promiscuous mode [ 677.453687][T26340] bond_slave_1: left promiscuous mode [ 677.484150][T26340] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 677.596394][T25772] bond2: (slave veth0_to_bond): link status definitely down, disabling slave [ 677.637110][T25772] bond2: now running without any active interface! [ 677.735509][T26345] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 677.752207][T26353] syzkaller0: entered promiscuous mode [ 677.757949][T26353] syzkaller0: entered allmulticast mode [ 677.865017][ T29] audit: type=1800 audit(1780728564.605:19): pid=26364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5416" name="memory.events" dev="tmpfs" ino=2355 res=0 errno=0 [ 678.126413][T26385] 8021q: VLANs not supported on lo [ 678.167332][T26387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 678.206959][T26387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5424'. [ 678.231660][T26387] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5424'. [ 678.381287][T26398] netlink: 'syz.3.5428': attribute type 29 has an invalid length. [ 678.390453][T26398] netlink: 'syz.3.5428': attribute type 29 has an invalid length. [ 678.400453][T26399] netlink: 500 bytes leftover after parsing attributes in process `syz.3.5428'. [ 678.410841][T26398] netlink: 'syz.3.5428': attribute type 29 has an invalid length. [ 678.834639][T26428] Cannot find add_set index 46338 as target [ 678.934168][T26433] netlink: 'syz.0.5436': attribute type 1 has an invalid length. [ 678.945397][T26435] syzkaller0: entered promiscuous mode [ 678.957105][T26435] syzkaller0: entered allmulticast mode [ 678.961765][T26433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5436'. [ 678.983242][T26436] IPv6: NLM_F_REPLACE set, but no existing node found! [ 679.041515][T26435] tipc: Enabled bearer , priority 0 [ 679.041846][T26439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5438'. [ 679.062680][T26434] tipc: Resetting bearer [ 679.107628][T26434] tipc: Disabling bearer [ 679.255085][T26439] bond0: entered promiscuous mode [ 679.276279][T26439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.336164][T26457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.377651][T26457] bond0: (slave sit4): The slave device specified does not support setting the MAC address [ 679.391320][T26469] xt_ecn: cannot match TCP bits for non-tcp packets [ 679.414151][T26457] bond0: (slave sit4): Error -95 calling set_mac_address [ 679.420969][T26471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5444'. [ 679.431910][T26471] netlink: 'syz.1.5444': attribute type 7 has an invalid length. [ 679.444144][T26471] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5444'. [ 679.472814][T26473] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5445'. [ 679.731476][T26485] syzkaller0: entered promiscuous mode [ 679.767408][T26485] syzkaller0: entered allmulticast mode [ 679.865748][T26485] tipc: Enabled bearer , priority 0 [ 679.936486][T26483] tipc: Resetting bearer [ 680.031191][T26483] tipc: Disabling bearer [ 680.090417][T26499] netlink: 'syz.3.5453': attribute type 1 has an invalid length. [ 680.605047][T26545] syzkaller0: entered promiscuous mode [ 680.613303][T26545] syzkaller0: entered allmulticast mode [ 680.807728][T26551] veth0: entered promiscuous mode [ 680.917992][T26550] veth0: left promiscuous mode [ 680.974580][T26569] netlink: 'syz.0.5477': attribute type 1 has an invalid length. [ 681.043987][T26576] netlink: 'syz.2.5479': attribute type 23 has an invalid length. [ 681.523438][T26607] netlink: 'syz.0.5490': attribute type 5 has an invalid length. [ 681.570770][T26607] netlink: 'syz.0.5490': attribute type 1 has an invalid length. [ 681.583949][T26612] Bluetooth: MGMT ver 1.23 [ 681.610867][T26607] ip6gretap1: entered promiscuous mode [ 681.624447][T26607] ip6gretap1: entered allmulticast mode [ 681.876183][T26626] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 681.895464][T26626] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 681.918604][T26626] team0: Failed to send options change via netlink (err -105) [ 681.938733][T26626] team0: Port device batadv1 added [ 682.109033][T26643] bridge_slave_0: default FDB implementation only supports local addresses [ 682.283478][T26658] __nla_validate_parse: 8 callbacks suppressed [ 682.283496][T26658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5506'. [ 682.344817][T26661] H: renamed from dummy0 [ 682.752649][T26689] sit4: entered promiscuous mode [ 682.763512][T26689] sit4: entered allmulticast mode [ 683.099674][T26707] IPv6: NLM_F_REPLACE set, but no existing node found! [ 683.267091][T26711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5523'. [ 683.282495][T26711] openvswitch: netlink: Flow actions attr not present in new flow. [ 683.417939][T26717] tipc: Enabling of bearer rejected, failed to enable media [ 683.441584][T26719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5525'. [ 683.466709][T26719] openvswitch: netlink: Unknown nsh attribute 0 [ 683.793225][T26734] syzkaller0: entered promiscuous mode [ 683.810719][T26738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5532'. [ 683.827017][T26734] syzkaller0: entered allmulticast mode [ 683.880437][T26738] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 684.281251][T26768] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5538'. [ 684.318689][T26768] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5538'. [ 684.355110][T26770] netlink: 'syz.3.5539': attribute type 8 has an invalid length. [ 684.521509][T26775] veth0: entered promiscuous mode [ 684.553607][T26775] veth0: left promiscuous mode [ 684.731223][T26782] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5544'. [ 684.753356][T26785] netlink: 'syz.4.5545': attribute type 62 has an invalid length. [ 684.861693][T26795] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5550'. [ 684.882550][T26796] netem: change failed [ 685.300851][T26828] netlink: 'syz.3.5558': attribute type 1 has an invalid length. [ 685.703533][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.535306][T26829] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 687.536883][T26828] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 688.040538][T26877] bond0: Caught tx_queue_len zero misconfig [ 688.089781][T26879] syzkaller0: entered promiscuous mode [ 688.107534][T26879] syzkaller0: entered allmulticast mode [ 688.160713][T26884] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 688.227668][T26890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.439496][T26905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5582'. [ 688.684898][T26919] syzkaller0: entered promiscuous mode [ 688.713913][T26919] syzkaller0: entered allmulticast mode [ 688.855457][T26938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5587'. [ 689.014503][T26947] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5589'. [ 689.124548][T26951] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5591'. [ 689.223741][T26958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5590'. [ 689.317473][T26964] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5595'. [ 689.320471][T26965] tipc: Enabled bearer , priority 0 [ 689.795117][T27001] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20004 [ 689.968948][T26963] tipc: Disabling bearer [ 690.441160][T27030] bridge0: port 1(veth1_to_bridge) entered blocking state [ 690.489711][T27030] bridge0: port 1(veth1_to_bridge) entered disabled state [ 690.525205][T27030] veth1_to_bridge: entered allmulticast mode [ 690.567732][T27030] veth1_to_bridge: entered promiscuous mode [ 690.645820][T27040] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5611'. [ 691.063631][T27066] netlink: 'syz.2.5614': attribute type 1 has an invalid length. [ 691.207421][T27066] 8021q: adding VLAN 0 to HW filter on device bond12 [ 691.274271][T27069] bond12: (slave team_slave_0): Enslaving as a backup interface with a down link [ 691.461921][T27089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5618'. [ 691.534234][T27093] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5620'. [ 691.601717][T27098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5621'. [ 691.657369][T27101] netlink: 'syz.1.5621': attribute type 1 has an invalid length. [ 692.034609][T27116] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 692.073629][T27120] netlink: 'syz.1.5630': attribute type 58 has an invalid length. [ 693.255544][T27186] xt_hashlimit: invalid rate [ 693.559949][T27197] bond9 (unregistering): Released all slaves [ 693.662618][T27203] bond13: option all_slaves_active: invalid value (222) [ 693.686766][T27203] bond13 (unregistering): Released all slaves [ 693.844843][T27192] __nla_validate_parse: 3 callbacks suppressed [ 693.844863][T27192] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5648'. [ 693.903787][T27192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5648'. [ 693.998698][T27220] bond1: (slave ip6gretap1): making interface the new active one [ 694.007851][T27220] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 694.146626][T27233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5659'. [ 694.252069][T27235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5660'. [ 694.447204][T27253] SET target dimension over the limit! [ 694.544121][T27264] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5669'. [ 695.046147][T27297] netlink: 'syz.0.5679': attribute type 21 has an invalid length. [ 695.054654][T27297] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5679'. [ 695.068528][T27297] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5679'. [ 695.080127][T27297] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 695.087717][T27294] x_tables: unsorted entry at hook 2 [ 695.179917][T27301] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5680'. [ 695.658168][T27315] nbd2: detected capacity change from 0 to 63 [ 695.671416][ T5638] block nbd2: Receive control failed (result -32) [ 695.671466][ T5647] block nbd2: Receive control failed (result -32) [ 695.692101][ T5657] block nbd2: Dead connection, failed to find a fallback [ 695.720808][ T5657] block nbd2: shutting down sockets [ 695.749165][ T5657] blk_print_req_error: 138 callbacks suppressed [ 695.749182][ T5657] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 695.764923][ T5657] buffer_io_error: 138 callbacks suppressed [ 695.764937][ T5657] Buffer I/O error on dev nbd2, logical block 0, async page read [ 695.788794][ T5657] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 695.800023][ T5657] Buffer I/O error on dev nbd2, logical block 1, async page read [ 695.807975][ T5657] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 695.817654][ T5657] Buffer I/O error on dev nbd2, logical block 2, async page read [ 695.833679][ T5657] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 695.846644][ T5657] Buffer I/O error on dev nbd2, logical block 3, async page read [ 695.856306][ T5657] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 695.866409][ T5657] Buffer I/O error on dev nbd2, logical block 0, async page read [ 695.875079][ T5657] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 695.884967][ T5657] Buffer I/O error on dev nbd2, logical block 1, async page read [ 695.923187][ T5657] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 695.962266][ T5657] Buffer I/O error on dev nbd2, logical block 2, async page read [ 695.990721][ T5657] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.011330][ T5657] Buffer I/O error on dev nbd2, logical block 3, async page read [ 696.043152][ T5657] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.067816][ T5657] Buffer I/O error on dev nbd2, logical block 0, async page read [ 696.101559][ T5657] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 696.127901][ T5657] Buffer I/O error on dev nbd2, logical block 1, async page read [ 696.154977][T27341] syzkaller1: entered promiscuous mode [ 696.171562][T27341] syzkaller1: entered allmulticast mode [ 696.180625][ T5657] ldm_validate_partition_table(): Disk read failed. [ 696.207308][ T5657] Dev nbd2: unable to read RDB block 0 [ 696.240091][ T5657] nbd2: unable to read partition table [ 696.277805][T27341] netlink: set zone limit has 4 unknown bytes [ 696.322341][ T5657] ldm_validate_partition_table(): Disk read failed. [ 696.350002][ T5657] Dev nbd2: unable to read RDB block 0 [ 696.359231][ T5657] nbd2: unable to read partition table [ 696.703113][T27380] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.716796][T27371] syzkaller0: entered promiscuous mode [ 696.729761][T27371] syzkaller0: entered allmulticast mode [ 696.766637][T27382] tipc: Enabled bearer , priority 0 [ 696.822386][T27386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5704'. [ 699.548819][T27382] tipc: Disabling bearer [ 699.620326][T27406] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5710'. [ 699.687428][T27414] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5712'. [ 699.803337][T27416] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5713'. [ 699.857217][T27426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5716'. [ 699.923251][T27429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5718'. [ 699.962161][T27423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5715'. [ 700.182725][T27441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5720'. [ 700.228724][T27441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5720'. [ 700.304660][T27451] IPVS: length: 118 != 24 [ 700.474601][T27468] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.5728'. [ 700.497490][T27468] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 700.498104][T27462] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.5726'. [ 700.557460][T27462] openvswitch: netlink: Message has 5 unknown bytes. [ 700.660219][T27478] tunl0: entered promiscuous mode [ 700.675145][T27478] netlink: 'syz.2.5732': attribute type 3 has an invalid length. [ 700.705891][T27478] netlink: 'syz.2.5732': attribute type 3 has an invalid length. [ 700.874867][T27491] netlink: 'syz.4.5735': attribute type 21 has an invalid length. [ 700.921758][T27497] vet: renamed from veth0_vlan (while UP) [ 701.253455][T27515] xt_socket: unknown flags 0x8 [ 701.263274][T27514] xt_socket: unknown flags 0x8 [ 701.310862][T27513] syzkaller0: entered promiscuous mode [ 701.358573][T27513] syzkaller0: entered allmulticast mode [ 701.738833][T27537] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode [ 702.036775][T27555] openvswitch: netlink: Duplicate or invalid key (type 0). [ 702.060943][T27555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 702.087894][T27557] tipc: Enabling of bearer rejected, already enabled [ 702.194773][T27557] 8021q: adding VLAN 0 to HW filter on device bond9 [ 702.255179][T27561] 8021q: adding VLAN 0 to HW filter on device bond10 [ 702.278813][T27561] bond9: (slave bond10): Enslaving as an active interface with an up link [ 702.329717][T27557] bond9 (unregistering): (slave bond10): Releasing backup interface [ 702.405245][T27557] bond9 (unregistering): Released all slaves [ 702.455664][T27576] netlink: 'syz.3.5759': attribute type 3 has an invalid length. [ 703.106722][T27619] netlink: 'syz.2.5771': attribute type 10 has an invalid length. [ 703.137743][T27621] xt_HMARK: spi-set and port-set can't be combined [ 703.199293][T27624] sctp: [Deprecated]: syz.1.5773 (pid 27624) Use of struct sctp_assoc_value in delayed_ack socket option. [ 703.199293][T27624] Use struct sctp_sack_info instead [ 703.687733][T27655] netlink: 'syz.1.5778': attribute type 83 has an invalid length. [ 704.102992][T27672] netlink: 'syz.3.5786': attribute type 21 has an invalid length. [ 704.221162][T27676] tipc: Enabled bearer , priority 0 [ 704.250701][T27676] syzkaller0: entered promiscuous mode [ 704.266479][T27676] syzkaller0: entered allmulticast mode [ 704.422479][T27684] vlan1: Caught tx_queue_len zero misconfig [ 704.511775][T27681] tipc: Resetting bearer [ 704.546821][T27706] syzkaller0: entered promiscuous mode [ 704.554821][T27706] syzkaller0: entered allmulticast mode [ 704.662383][T27710] __nla_validate_parse: 16 callbacks suppressed [ 704.662402][T27710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5792'. [ 704.827610][T27722] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5796'. [ 704.868434][T27725] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5795'. [ 704.891692][T12387] block nbd1: Possible stuck request ffff888027225080: control (read@0,1024B). Runtime 450 seconds [ 704.902605][T12387] block nbd1: Possible stuck request ffff888027225240: control (read@1024,1024B). Runtime 450 seconds [ 704.913883][T12387] block nbd1: Possible stuck request ffff888027225400: control (read@2048,1024B). Runtime 450 seconds [ 704.922729][T27727] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5795'. [ 704.925347][T12387] block nbd1: Possible stuck request ffff8880272255c0: control (read@3072,1024B). Runtime 450 seconds [ 704.950346][T27728] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.5797'. [ 704.971237][T27725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5795'. [ 705.005544][T27728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5797'. [ 705.019163][T27675] tipc: Resetting bearer [ 705.081471][T27675] tipc: Disabling bearer [ 705.111748][T27734] kthread_run failed with err -4 [ 705.285016][T27751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5805'. [ 705.502449][T27775] ieee802154 phy1 wpan1: encryption failed: -22 [ 706.187336][T27824] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5821'. [ 706.212562][T27821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 706.559769][T27855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 706.762568][T27867] 0: reclassify loop, rule prio 0, protocol 700 [ 706.793913][T27867] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5831'. [ 706.915355][T27876] netlink: 'syz.3.5835': attribute type 11 has an invalid length. [ 707.080755][T27885] erspan0: entered allmulticast mode [ 707.147181][T27892] sctp: [Deprecated]: syz.4.5836 (pid 27892) Use of struct sctp_assoc_value in delayed_ack socket option. [ 707.147181][T27892] Use struct sctp_sack_info instead [ 707.173143][ T5638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 707.191678][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 707.202834][ T5638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 707.216886][ T5638] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 707.226712][ T5638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 707.322424][ T5647] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 707.333169][ T5647] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 707.341933][ T5647] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 707.356668][ T5647] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 707.367217][ T5647] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 707.633714][T27910] netlink: 'syz.0.5842': attribute type 2 has an invalid length. [ 707.794438][T27920] netlink: 'syz.3.5844': attribute type 1 has an invalid length. [ 707.803463][T27920] netlink: 'syz.3.5844': attribute type 1 has an invalid length. [ 707.917037][T27922] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 708.055420][T27928] netlink: 'syz.3.5847': attribute type 1 has an invalid length. [ 708.155710][T27938] bond7: (slave geneve4): making interface the new active one [ 708.174352][T27938] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 708.192815][T25773] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 708.202770][T27931] openvswitch: netlink: Flow actions attr not present in new flow. [ 708.240225][T25773] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 708.281804][T27928] 8021q: adding VLAN 0 to HW filter on device bond7 [ 708.310123][T27931] netlink: 'syz.0.5848': attribute type 3 has an invalid length. [ 708.336294][T25773] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 708.371604][T25773] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 708.472175][T27891] lo speed is unknown, defaulting to 1000 [ 708.973687][T27984] ip6_vti0: entered promiscuous mode [ 709.022245][T27981] netlink: 'syz.1.5861': attribute type 1 has an invalid length. [ 709.052064][T27991] netlink: 'syz.4.5864': attribute type 9 has an invalid length. [ 709.061065][T27984] : entered promiscuous mode [ 709.131199][T27981] 8021q: adding VLAN 0 to HW filter on device bond9 [ 709.301908][T27997] bond9: (slave ip6gretap1): making interface the new active one [ 709.341875][T27997] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 709.454605][ T5647] Bluetooth: hci4: command tx timeout [ 709.576063][T28025] openvswitch: netlink: IPv6 tunnel dst address is zero [ 709.796263][T28037] tipc: Enabling not permitted [ 709.802175][T28037] tipc: Enabling of bearer rejected, failed to enable media [ 710.127217][T28051] __nla_validate_parse: 5 callbacks suppressed [ 710.127236][T28051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5878'. [ 710.217405][T28058] netlink: 'syz.0.5880': attribute type 5 has an invalid length. [ 710.271602][T28061] xt_CT: You must specify a L4 protocol and not use inversions on it [ 710.295366][T28065] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5879'. [ 711.529874][ T5647] Bluetooth: hci4: command tx timeout [ 713.155882][ T5000] udevd[5000]: worker [5639] /devices/virtual/block/nbd1 timeout; kill it [ 713.166122][ T5000] udevd[5000]: seq 15537 '/devices/virtual/block/nbd1' killed [ 713.340291][T27891] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.347662][T27891] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.356092][T27891] bridge_slave_0: entered allmulticast mode [ 713.371863][T27891] bridge_slave_0: entered promiscuous mode [ 713.396707][T27891] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.419622][T27891] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.429801][T27891] bridge_slave_1: entered allmulticast mode [ 713.439740][T27891] bridge_slave_1: entered promiscuous mode [ 713.447780][T28072] netlink: 'syz.3.5883': attribute type 4 has an invalid length. [ 713.485855][T28080] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5885'. [ 713.608824][ T5647] Bluetooth: hci4: command tx timeout [ 713.700705][T28086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5886'. [ 713.731664][T28090] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5887'. [ 713.816780][T27891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.840598][T28086] netlink: 284 bytes leftover after parsing attributes in process `syz.3.5886'. [ 713.881923][T28101] macsec0: entered promiscuous mode [ 713.904454][T28101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5888'. [ 713.907862][T27891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.946228][T28101] veth1_macvtap: left promiscuous mode [ 713.979573][T28101] macsec0 (unregistering): left promiscuous mode [ 714.046993][T27891] team0: Port device team_slave_0 added [ 714.056259][T27891] team0: Port device team_slave_1 added [ 714.107805][T27891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.125060][T27891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.164418][T27891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.193382][T27891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.202277][T27891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.231231][T27891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.414057][T27891] hsr_slave_0: entered promiscuous mode [ 714.435520][T27891] hsr_slave_1: entered promiscuous mode [ 714.459869][T27891] debugfs: 'hsr0' already exists in 'hsr' [ 714.496078][T27891] Cannot create hsr debugfs directory [ 714.580181][T28133] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 714.960043][T27891] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.076721][T27891] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.237679][T27891] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.688274][ T5647] Bluetooth: hci4: command tx timeout [ 715.765664][T28171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5903'. [ 715.783421][T28171] vlan2: entered allmulticast mode [ 715.789507][T28171] veth1_virt_wifi: entered allmulticast mode [ 717.186573][T28114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 717.251676][T27891] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 717.348981][T27891] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 717.369117][T27891] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 717.402179][T27891] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 717.419131][T27891] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 717.470330][T27891] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 717.496511][T27891] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 717.522284][T27891] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 717.632826][T28201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5908'. [ 717.782173][T10416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.807724][T10416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.971933][T27891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.021547][T28220] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5915'. [ 718.021557][T28222] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5915'. [ 718.022081][T28222] 0·: renamed from hsr0 (while UP) [ 718.033278][T28223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5913'. [ 718.063908][T28222] 0·: entered allmulticast mode [ 718.069303][T28222] hsr_slave_0: entered allmulticast mode [ 718.075999][T28222] hsr_slave_1: entered allmulticast mode [ 718.082685][T28222] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 718.101274][T28220] 1·: renamed from c0· (while UP) [ 718.107040][T28222] netlink: 'syz.3.5915': attribute type 2 has an invalid length. [ 718.115590][T28222] netlink: 'syz.3.5915': attribute type 1 has an invalid length. [ 718.128697][T28220] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 718.280351][T27891] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.326340][T10434] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.333573][T10434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.417110][T10434] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.424383][T10434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.507238][T28248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5922'. [ 718.735881][T28261] netlink: 'syz.4.5927': attribute type 20 has an invalid length. [ 718.772589][T28261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5927'. [ 718.860545][T28261] netlink: 'syz.4.5927': attribute type 20 has an invalid length. [ 718.868831][T28261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5927'. [ 719.234331][T28290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5931'. [ 719.264071][T27891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.354492][T27891] veth0_vlan: entered promiscuous mode [ 719.372197][T27891] veth1_vlan: entered promiscuous mode [ 719.409405][T28293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 719.452378][T27891] veth0_macvtap: entered promiscuous mode [ 719.476679][T27891] veth1_macvtap: entered promiscuous mode [ 719.526461][T27891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 719.565527][T27891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 719.603173][T25767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.628925][T25767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.653077][T25767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.681919][T25767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.773106][T28310] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 719.967705][T28313] veth1_macvtap: left promiscuous mode [ 720.103858][T25772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.123442][T25772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.169455][T28319] veth1_virt_wifi: entered promiscuous mode [ 720.225010][T25773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.243182][T28323] FAULT_INJECTION: forcing a failure. [ 720.243182][T28323] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 720.247140][T25773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.265474][T28324] veth1_virt_wifi: left promiscuous mode [ 720.278509][T28323] CPU: 1 UID: 0 PID: 28323 Comm: syz.4.5941 Not tainted syzkaller #0 PREEMPT(full) [ 720.278532][T28323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 720.278544][T28323] Call Trace: [ 720.278551][T28323] [ 720.278560][T28323] dump_stack_lvl+0xe8/0x150 [ 720.278589][T28323] should_fail_ex+0x412/0x560 [ 720.278709][T28323] _copy_from_iter+0x1d3/0x1670 [ 720.278734][T28323] ? rcu_is_watching+0x15/0xb0 [ 720.278773][T28323] ? __pfx__copy_from_iter+0x10/0x10 [ 720.278800][T28323] ? netlink_sendmsg+0x650/0xb40 [ 720.278908][T28323] ? skb_put+0x11b/0x210 [ 720.278978][T28323] netlink_sendmsg+0x6c0/0xb40 [ 720.279011][T28323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 720.279038][T28323] ? aa_sock_msg_perm+0xf1/0x1b0 [ 720.279140][T28323] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 720.279181][T28323] ____sys_sendmsg+0x972/0x9f0 [ 720.279225][T28323] ? __might_fault+0xaf/0x130 [ 720.279251][T28323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 720.279270][T28323] ? import_iovec+0x73/0xa0 [ 720.279285][T28323] ___sys_sendmsg+0x2a5/0x360 [ 720.279294][T28323] ? __lock_acquire+0x6b5/0x2cf0 [ 720.279309][T28323] ? __pfx____sys_sendmsg+0x10/0x10 [ 720.279336][T28323] ? __fget_files+0x2a/0x420 [ 720.279355][T28323] ? __fget_files+0x3a0/0x420 [ 720.279372][T28323] __x64_sys_sendmsg+0x1bd/0x2a0 [ 720.279384][T28323] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 720.279399][T28323] ? __pfx_ksys_write+0x10/0x10 [ 720.279422][T28323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.279434][T28323] do_syscall_64+0x174/0x580 [ 720.279451][T28323] ? trace_irq_disable+0x3b/0x140 [ 720.279474][T28323] ? clear_bhb_loop+0x40/0x90 [ 720.279492][T28323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.279503][T28323] RIP: 0033:0x7fc4a0d9ce59 [ 720.279514][T28323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.279522][T28323] RSP: 002b:00007fc4a1d1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 720.279534][T28323] RAX: ffffffffffffffda RBX: 00007fc4a1015fa0 RCX: 00007fc4a0d9ce59 [ 720.279541][T28323] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 720.279547][T28323] RBP: 00007fc4a1d1c090 R08: 0000000000000000 R09: 0000000000000000 [ 720.279553][T28323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.279559][T28323] R13: 00007fc4a1016038 R14: 00007fc4a1015fa0 R15: 00007ffd241b6308 [ 720.279575][T28323] [ 720.706637][T28332] xt_policy: too many policy elements [ 720.765768][T28332] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 720.774868][T28332] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 720.785312][T28332] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 720.795397][T28333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5944'. [ 721.020492][T28361] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5953'. [ 721.271722][T28380] tc_dump_action: action bad kind [ 721.294728][T28379] tc_dump_action: action bad kind [ 721.535526][T28396] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5961'. [ 721.576925][T28396] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5961'. [ 721.668900][T28411] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5965'. [ 721.681362][T28411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 721.877049][T28427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 721.899545][T28427] openvswitch: netlink: Key type 8198 is out of range max 32 [ 721.921284][T28427] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5969'. [ 721.943965][T28429] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5968'. [ 721.946248][T28427] netlink: 'syz.1.5969': attribute type 1 has an invalid length. [ 721.978836][T28427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5969'. [ 721.994476][T28427] netlink: 658 bytes leftover after parsing attributes in process `syz.1.5969'. [ 722.026547][T28427] netlink: 'syz.1.5969': attribute type 1 has an invalid length. [ 722.092623][T28435] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5972'. [ 722.737322][T28465] netlink: 'syz.3.5978': attribute type 39 has an invalid length. [ 722.781940][T28468] netlink: 'syz.2.5981': attribute type 29 has an invalid length. [ 722.792475][T28468] netlink: 'syz.2.5981': attribute type 29 has an invalid length. [ 723.130023][T28489] sctp: [Deprecated]: syz.0.5988 (pid 28489) Use of struct sctp_assoc_value in delayed_ack socket option. [ 723.130023][T28489] Use struct sctp_sack_info instead [ 723.163085][T28493] netlink: 'syz.1.5987': attribute type 10 has an invalid length. [ 723.217208][T28493] team0: Port device geneve1 added [ 723.308978][T28497] netlink: 'syz.4.5990': attribute type 13 has an invalid length. [ 723.445322][T28504] netlink: 'syz.0.5993': attribute type 1 has an invalid length. [ 723.505336][T28504] bond4: entered promiscuous mode [ 723.511159][T28504] 8021q: adding VLAN 0 to HW filter on device bond4 [ 723.707547][T28513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 723.762329][T28516] tc_dump_action: action bad kind [ 723.844618][T28516] IPv6: sit2: Disabled Multicast RS [ 723.869985][T28516] sit2: entered allmulticast mode [ 724.134794][T28537] ip6t_srh: unknown srh match flags 5F28 [ 724.248255][T28544] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 724.275619][T28547] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 724.386682][T28550] validate_nla: 1 callbacks suppressed [ 724.386703][T28550] netlink: 'syz.2.6006': attribute type 1 has an invalid length. [ 724.423946][T28552] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 724.884538][T28569] netlink: 'syz.2.6011': attribute type 4 has an invalid length. [ 724.962464][ T5827] IPVS: starting estimator thread 0... [ 725.062694][T28574] IPVS: using max 39 ests per chain, 93600 per kthread [ 725.082141][ T5638] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 725.098487][ T5638] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 725.114306][ T5638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 725.127617][ T5638] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 725.140421][ T5638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 725.977355][T28629] __nla_validate_parse: 22 callbacks suppressed [ 725.977375][T28629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6022'. [ 726.393748][T10418] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.428908][T10418] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 726.460176][T10418] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 726.584148][ T5295] veth1_vlan: left promiscuous mode [ 726.953550][T10418] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.988147][T10418] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 727.028357][T10418] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 727.089921][T28674] ip6t_REJECT: ECHOREPLY is not supported [ 727.145399][T28577] lo speed is unknown, defaulting to 1000 [ 727.213327][ T5647] Bluetooth: hci5: command tx timeout [ 727.252059][T28679] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 727.332485][T10418] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.363710][T10418] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 727.392300][T10418] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 727.416792][T28666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6032'. [ 727.585233][T10418] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.609326][T10418] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 727.634199][T10418] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 727.870508][T28698] Can't find ip_set type [ 728.083017][T28707] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.6041'. [ 728.360960][T10418] pimreg3: left allmulticast mode [ 728.589925][T28722] netlink: 336 bytes leftover after parsing attributes in process `syz.0.6042'. [ 728.637740][T10418] bond7 (unregistering): (slave geneve4): Releasing active interface [ 728.654562][T10418] bond6 (unregistering): (slave geneve3): Releasing active interface [ 728.891679][T10418] bond0 (unregistering): Released all slaves [ 728.903804][T10418] bond1 (unregistering): Released all slaves [ 728.917424][T10418] bond2 (unregistering): Released all slaves [ 728.939201][T10418] bond3 (unregistering): (slave bond4): Releasing backup interface [ 728.947970][T10418] bond3 (unregistering): Released all slaves [ 728.962547][T10418] bond4 (unregistering): Released all slaves [ 728.981507][T10418] bond5 (unregistering): Released all slaves [ 729.000408][T10418] bond6 (unregistering): Released all slaves [ 729.015453][T10418] bond7 (unregistering): Released all slaves [ 729.070296][T28715] syzkaller0: entered promiscuous mode [ 729.096469][T28715] syzkaller0: entered allmulticast mode [ 729.281929][T10418] tipc: Disabling bearer [ 729.288783][ T5647] Bluetooth: hci5: command tx timeout [ 729.302561][T10418] tipc: Left network mode [ 729.980910][T28760] openvswitch: netlink: IP tunnel dst address not specified [ 730.327308][T28577] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.351259][T28577] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.378487][T28577] bridge_slave_0: entered allmulticast mode [ 730.400866][T28577] bridge_slave_0: entered promiscuous mode [ 730.524432][T28774] syzkaller0: entered promiscuous mode [ 730.538824][T28774] syzkaller0: entered allmulticast mode [ 730.557340][T28577] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.565219][T28577] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.576722][T28577] bridge_slave_1: entered allmulticast mode [ 730.585474][T28577] bridge_slave_1: entered promiscuous mode [ 730.592793][T28784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6054'. [ 730.602526][T28784] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6054'. [ 730.613741][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 730.670184][T28577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.699536][T28753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 730.703096][T28577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.910260][T28577] team0: Port device team_slave_0 added [ 730.932016][T28577] team0: Port device team_slave_1 added [ 731.010781][T28577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.032349][T28577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.098938][T28577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.344321][T28821] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6065'. [ 731.346117][T28824] netlink: 'syz.2.6066': attribute type 61 has an invalid length. [ 731.368751][ T5647] Bluetooth: hci5: command tx timeout [ 731.383701][T28821] netlink: 'syz.1.6065': attribute type 9 has an invalid length. [ 731.414446][T28824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6066'. [ 731.431225][T28577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.451760][T28577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.492672][T28577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.910388][T28577] hsr_slave_0: entered promiscuous mode [ 731.935030][T28577] hsr_slave_1: entered promiscuous mode [ 731.951355][T28847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6070'. [ 731.967787][T28577] debugfs: 'hsr0' already exists in 'hsr' [ 731.980039][T28577] Cannot create hsr debugfs directory [ 732.122049][T28852] netlink: 'syz.1.6072': attribute type 30 has an invalid length. [ 732.242739][T28862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6074'. [ 732.273964][T28862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6074'. [ 732.442075][T28854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6073'. [ 732.505160][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 732.613559][T10418] hsr_slave_0: left promiscuous mode [ 732.624885][T10418] hsr_slave_1: left promiscuous mode [ 732.658694][T10418] veth1_vlan: left promiscuous mode [ 732.679842][T10418] veth0_vlan: left promiscuous mode [ 733.377701][T28897] netlink: 'syz.2.6080': attribute type 3 has an invalid length. [ 733.448745][ T5647] Bluetooth: hci5: command tx timeout [ 733.455737][T28900] netlink: 'syz.4.6082': attribute type 11 has an invalid length. [ 733.725805][T10418] IPVS: stop unused estimator thread 0... [ 733.917247][T28917] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6085'. [ 734.164792][T28892] xt_l2tp: v2 doesn't support IP mode [ 734.343108][T28914] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.371110][T28914] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.673907][T28938] vlan2: entered allmulticast mode [ 734.680105][T28938] veth1_virt_wifi: entered allmulticast mode [ 734.815037][T28914] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.854511][T28914] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.970095][T12387] block nbd1: Possible stuck request ffff888027225080: control (read@0,1024B). Runtime 480 seconds [ 734.981626][T12387] block nbd1: Possible stuck request ffff888027225240: control (read@1024,1024B). Runtime 480 seconds [ 734.993215][T12387] block nbd1: Possible stuck request ffff888027225400: control (read@2048,1024B). Runtime 480 seconds [ 735.004588][T12387] block nbd1: Possible stuck request ffff8880272255c0: control (read@3072,1024B). Runtime 480 seconds [ 735.019668][T28962] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 735.153073][T28940] syzkaller0: entered promiscuous mode [ 735.161365][T28940] syzkaller0: entered allmulticast mode [ 735.183990][T28970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6093'. [ 735.193934][T28970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6093'. [ 735.213557][T28970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6093'. [ 735.223742][T28914] bond0: (slave netdevsim1): Releasing backup interface [ 735.236137][T28914] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.246951][T28914] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.912778][T28914] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 738.925164][T28914] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.488787][T29042] __nla_validate_parse: 3 callbacks suppressed [ 739.488805][T29042] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6100'. [ 739.516698][T29044] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 739.636207][T28577] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 739.679605][T28577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 739.687552][T28577] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 739.730506][T29058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6104'. [ 739.736968][T28577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 739.785019][T28577] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 739.798005][T28577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 739.809680][T28577] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 739.825073][T28577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 740.207603][T28577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.294565][T28577] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.353091][T25765] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.360286][T25765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.417828][T26895] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.425098][T26895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.853842][T29111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6121'. [ 741.017943][T29126] netlink: 'syz.2.6125': attribute type 14 has an invalid length. [ 741.051535][T29126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6125'. [ 741.072215][T29126] bond0: option xmit_hash_policy: invalid value (9) [ 742.083043][T28577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.273627][T28577] veth0_vlan: entered promiscuous mode [ 742.330901][T28577] veth1_vlan: entered promiscuous mode [ 742.436021][T29191] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6144'. [ 742.453179][T28577] veth0_macvtap: entered promiscuous mode [ 742.495775][T28577] veth1_macvtap: entered promiscuous mode [ 742.586939][T28577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.602670][T29191] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6144'. [ 742.632900][T28577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.715884][T25773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.745874][T25773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.791268][T25773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.811319][T29191] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6144'. [ 742.821767][T25773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.156225][T10435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.191228][T10435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.280429][T25773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.306941][T25773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.646155][T29222] netlink: 'syz.3.6012': attribute type 1 has an invalid length. [ 743.807696][T29219] veth1_macvtap: entered promiscuous mode [ 743.926257][T29219] 8021q: adding VLAN 0 to HW filter on device bond3 [ 743.999306][T29219] hsr1: left promiscuous mode [ 744.010805][T29219] bond4: left promiscuous mode [ 744.031471][T29219] ipvlan0: left promiscuous mode [ 744.077385][T29219] 8021q: adding VLAN 0 to HW filter on device bond5 [ 744.122029][T29219] 8021q: adding VLAN 0 to HW filter on device bond7 [ 744.145998][T29219] 8021q: adding VLAN 0 to HW filter on device bond8 [ 744.160897][T29219] xfrm1: left promiscuous mode [ 744.171686][T29219] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 744.321111][T29232] syzkaller1: entered promiscuous mode [ 744.329303][T29232] syzkaller1: entered allmulticast mode [ 744.676126][T29267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6163'. [ 744.747055][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 744.765146][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 744.776964][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 744.787911][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 744.796091][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 745.571826][T25772] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 745.585328][T25772] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 745.596468][T25772] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.781173][T29309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6170'. [ 746.012112][T25772] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 746.045523][T25772] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 746.060735][T25772] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.217597][T25772] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 746.237713][T25772] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 746.267944][T25772] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.590265][T25772] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 746.612279][T29347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6182'. [ 746.640544][T25772] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 746.673713][T25772] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.710279][T29352] sctp: [Deprecated]: syz.2.6184 (pid 29352) Use of struct sctp_assoc_value in delayed_ack socket option. [ 746.710279][T29352] Use struct sctp_sack_info instead [ 746.786847][T29269] lo speed is unknown, defaulting to 1000 [ 746.890497][ T5647] Bluetooth: hci2: command tx timeout [ 747.131446][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.285547][T29388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 747.535802][T29401] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6198'. [ 747.589790][T29401] netlink: 22 bytes leftover after parsing attributes in process `syz.1.6198'. [ 747.605935][T29408] nbd: illegal input index 2958377 [ 747.722381][T25772] team0: left promiscuous mode [ 747.743538][T25772] team_slave_0: left promiscuous mode [ 747.750824][T25772] team_slave_1: left promiscuous mode [ 747.763137][T25772] batadv1: left promiscuous mode [ 747.789503][T25772] bridge0: port 3(team0) entered disabled state [ 747.827747][T25772] bridge_slave_1: left promiscuous mode [ 747.839682][T25772] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.862721][T25772] bridge_slave_0: left allmulticast mode [ 747.874644][T25772] bridge_slave_0: left promiscuous mode [ 747.887037][T25772] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.904997][T29424] Cannot find del_set index 4 as target [ 747.946530][T25772] tipc: Resetting bearer [ 748.399841][T25772] tipc: Disabling bearer [ 748.411220][T25772] gretap0 (unregistering): left promiscuous mode [ 748.536953][T25772] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 748.633221][T25772] bond5 (unregistering): (slave bridge3): Releasing active interface [ 748.817461][T25772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.829719][T25772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.841092][T25772] bond0 (unregistering): Released all slaves [ 748.854909][T25772] bond1 (unregistering): Released all slaves [ 748.868646][T25772] bond2 (unregistering): Released all slaves [ 748.882350][T25772] bond3 (unregistering): Released all slaves [ 748.897398][T25772] bond4 (unregistering): Released all slaves [ 748.914713][T25772] bond5 (unregistering): Released all slaves [ 748.931903][T25772] bond6 (unregistering): Released all slaves [ 748.946325][T25772] bond7 (unregistering): Released all slaves [ 748.964156][T25772] bond8 (unregistering): Released all slaves [ 748.968790][ T5647] Bluetooth: hci2: command tx timeout [ 748.983345][T25772] bond9 (unregistering): Released all slaves [ 749.013456][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 749.186274][T29438] netlink: 'syz.3.6204': attribute type 1 has an invalid length. [ 749.264481][T29438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6204'. [ 749.315388][T25772] tipc: Left network mode [ 749.532387][T29459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6208'. [ 749.534035][T29461] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6209'. [ 749.555032][T25772] IPVS: stopping backup sync thread 20805 ... [ 749.597011][T29461] nbd: must specify at least one socket [ 749.625995][T29459] ipvlan2: entered promiscuous mode [ 749.800059][T29461] netlink: 'syz.1.6209': attribute type 3 has an invalid length. [ 749.886047][T29479] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6211'. [ 749.899031][T29465] block nbd3: server does not support multiple connections per device. [ 749.976562][T29465] block nbd3: shutting down sockets [ 749.986967][T29480] netlink: 'syz.2.6211': attribute type 10 has an invalid length. [ 750.026101][T29480] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6211'. [ 750.182801][T29480] team0: Port device geneve1 added [ 750.489366][T29269] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.517640][T29269] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.526872][T29269] bridge_slave_0: entered allmulticast mode [ 750.548749][T29269] bridge_slave_0: entered promiscuous mode [ 750.613330][T29269] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.621351][T29269] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.634660][T29269] bridge_slave_1: entered allmulticast mode [ 750.643207][T29269] bridge_slave_1: entered promiscuous mode [ 750.715310][T29512] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6218'. [ 750.735148][T29513] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 750.746337][T29269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.877769][T29269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.042959][T29531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 751.055215][ T5647] Bluetooth: hci2: command tx timeout [ 751.367175][T29269] team0: Port device team_slave_0 added [ 751.500541][T29269] team0: Port device team_slave_1 added [ 751.598492][T29557] netlink: 212 bytes leftover after parsing attributes in process `syz.3.6229'. [ 753.128894][ T5647] Bluetooth: hci2: command tx timeout [ 755.205783][T29269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.213548][T29269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.242295][T29269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.256042][T29269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.276649][T29269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.305327][T29269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.318946][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 755.330291][T29578] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6233'. [ 755.723481][T29269] hsr_slave_0: entered promiscuous mode [ 755.730980][T29269] hsr_slave_1: entered promiscuous mode [ 755.737586][T29269] debugfs: 'hsr0' already exists in 'hsr' [ 755.744730][T29269] Cannot create hsr debugfs directory [ 755.865517][T29609] xt_HMARK: proto mask must be zero with L3 mode [ 756.039272][T29621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6245'. [ 756.097252][T29627] Cannot find set identified by id 0 to match [ 756.233227][T29610] netlink: 'syz.2.6243': attribute type 2 has an invalid length. [ 756.253989][T29635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6247'. [ 756.263039][T29627] bond0: option ad_select: unable to set because the bond device is up [ 756.306631][T29635] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 756.435546][T29641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6248'. [ 756.663361][T29651] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6250'. [ 757.054277][ T5295] 8021q: adding VLAN 0 to HW filter on device eth3 [ 757.275004][T29672] netlink: 'syz.0.6255': attribute type 1 has an invalid length. [ 757.313671][T29672] netlink: 'syz.0.6255': attribute type 1 has an invalid length. [ 757.339551][T29672] netlink: 'syz.0.6255': attribute type 1 has an invalid length. [ 757.351620][T29672] netlink: 'syz.0.6255': attribute type 1 has an invalid length. [ 757.354571][T25772] veth1_to_team: left promiscuous mode [ 757.361956][T29672] netlink: 'syz.0.6255': attribute type 2 has an invalid length. [ 757.395729][T29672] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6255'. [ 757.416497][T25772] hsr_slave_0: left promiscuous mode [ 757.464636][T25772] hsr_slave_1: left promiscuous mode [ 757.489958][T25772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 757.518442][T25772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.545719][T25772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 757.564373][T25772] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.629993][T25772] veth1_macvtap: left promiscuous mode [ 757.645510][T25772] veth0_macvtap: left promiscuous mode [ 757.792381][T29694] netlink: 'syz.2.6261': attribute type 16 has an invalid length. [ 757.802603][T29694] netlink: 'syz.2.6261': attribute type 3 has an invalid length. [ 757.811220][T29694] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6261'. [ 757.874125][T25772] pim6reg (unregistering): left allmulticast mode [ 757.923316][T25772] batadv1 (unregistering): left allmulticast mode [ 757.931770][T25772] team0 (unregistering): Port device batadv1 removed [ 757.939612][T29701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6261'. [ 758.125023][T25772] team_slave_1 (unregistering): left allmulticast mode [ 758.132806][T25772] team0 (unregistering): Port device team_slave_1 removed [ 758.146920][T25772] team_slave_0 (unregistering): left allmulticast mode [ 758.156078][T25772] team0 (unregistering): Port device team_slave_0 removed [ 758.342583][T29694] veth0: entered promiscuous mode [ 758.770628][T29718] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6264'. [ 758.782047][T29722] netlink: 'syz.1.6266': attribute type 1 has an invalid length. [ 758.812090][T29723] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6266'. [ 759.169482][T29710] nbd3: detected capacity change from 0 to 63 [ 759.301421][T25772] IPVS: stop unused estimator thread 0... [ 759.449438][ T5647] block nbd3: Receive control failed (result -104) [ 759.449890][ T5638] block nbd3: Receive control failed (result -32) [ 759.533873][T29269] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 759.561000][T29269] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 759.587239][T29269] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 759.643388][T29269] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 759.658668][T29269] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 759.708121][T29269] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 759.811625][T29269] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 759.835694][T29269] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 760.224764][T29785] erspan0: entered promiscuous mode [ 760.383010][T29269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.461271][T29269] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.506422][T10435] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.513670][T10435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.561423][T10419] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.568697][T10419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.590360][T29808] __nla_validate_parse: 3 callbacks suppressed [ 760.590378][T29808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6282'. [ 760.614423][T29800] pim6reg527: entered allmulticast mode [ 760.691179][T29800] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 760.703225][T29800] bond1 (unregistering): Released all slaves [ 760.751417][T29808] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6282'. [ 761.009386][T29818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6283'. [ 761.354306][T29841] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6288'. [ 761.450498][T29854] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6287'. [ 761.521440][T29856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6291'. [ 761.561549][T29856] ip6t_srh: unknown srh invflags 4000 [ 761.615649][T29863] netlink: 'syz.3.6293': attribute type 1 has an invalid length. [ 761.667571][T29863] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 761.684459][T29863] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6293'. [ 761.713562][T29863] 8021q: adding VLAN 0 to HW filter on device bond2 [ 761.715314][T10419] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 761.850939][T10435] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 761.871120][T29875] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 762.033405][T29269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.366509][T29269] veth0_vlan: entered promiscuous mode [ 762.393457][T29269] veth1_vlan: entered promiscuous mode [ 762.439197][T29269] veth0_macvtap: entered promiscuous mode [ 762.452851][T29269] veth1_macvtap: entered promiscuous mode [ 762.479061][T29269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.531490][T29269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.012798][T25765] bond9 (unregistering): (slave ip6gre2): Releasing backup interface [ 763.169233][T25765] bond11 (unregistering): (slave gretap0): Releasing active interface [ 763.604159][T25765] bond0 (unregistering): Released all slaves [ 763.614978][T25765] bond1 (unregistering): Released all slaves [ 763.628969][T25765] bond2 (unregistering): Released all slaves [ 763.643767][T25765] bond3 (unregistering): (slave veth3): Releasing active interface [ 763.651804][T25765] batadv1: entered promiscuous mode [ 763.669836][T25765] bond3 (unregistering): (slave batadv1): Releasing active interface [ 763.680372][T25765] bond3 (unregistering): Released all slaves [ 763.694126][T25765] bond4 (unregistering): Released all slaves [ 763.709781][T25765] bond5 (unregistering): Released all slaves [ 763.723452][T25765] bond6 (unregistering): Released all slaves [ 763.743741][T25765] bond7 (unregistering): Released all slaves [ 763.758617][T25765] bond8 (unregistering): Released all slaves [ 763.774626][T25765] bond9 (unregistering): Released all slaves [ 763.793488][T25765] bond10 (unregistering): Released all slaves [ 763.807236][T25765] bond11 (unregistering): Released all slaves [ 763.822010][T25765] bond12 (unregistering): Released all slaves [ 763.835916][T25765] bond13 (unregistering): Released all slaves [ 763.874927][T25767] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.883847][T25767] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.895934][T25767] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.906792][T25767] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.202521][T25765] : left promiscuous mode [ 764.234194][T29837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 764.269111][T25765] tipc: Disabling bearer [ 764.300865][T25765] tipc: Left network mode [ 764.425618][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.442867][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.521899][T29924] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6298'. [ 764.576260][T29926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6299'. [ 764.581502][T10435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.621303][T10435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.635208][T29926] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6299'. [ 764.667543][T25765] IPVS: stopping backup sync thread 13741 ... [ 765.049449][T12387] block nbd1: Possible stuck request ffff888027225080: control (read@0,1024B). Runtime 510 seconds [ 765.060605][T12387] block nbd1: Possible stuck request ffff888027225240: control (read@1024,1024B). Runtime 510 seconds [ 765.072780][T12387] block nbd1: Possible stuck request ffff888027225400: control (read@2048,1024B). Runtime 510 seconds [ 765.084101][T12387] block nbd1: Possible stuck request ffff8880272255c0: control (read@3072,1024B). Runtime 510 seconds [ 765.359061][T29968] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 765.601687][T29984] bridge0: port 3(syz_tun) entered blocking state [ 765.634208][T29986] netlink: 'syz.0.6313': attribute type 11 has an invalid length. [ 765.653317][T29984] bridge0: port 3(syz_tun) entered disabled state [ 765.678412][T29984] syz_tun: entered allmulticast mode [ 765.687895][T29986] netlink: 'syz.0.6313': attribute type 5 has an invalid length. [ 765.728883][T29986] __nla_validate_parse: 5 callbacks suppressed [ 765.728900][T29986] netlink: 6548 bytes leftover after parsing attributes in process `syz.0.6313'. [ 765.747302][T29991] x_tables: duplicate underflow at hook 3 [ 765.756853][T29984] syz_tun: entered promiscuous mode [ 765.773497][T29984] bridge0: port 3(syz_tun) entered blocking state [ 765.780180][T29984] bridge0: port 3(syz_tun) entered forwarding state [ 765.803586][T29995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6316'. [ 766.007961][T30007] netlink: 'syz.2.6319': attribute type 24 has an invalid length. [ 766.177162][T25765] hsr_slave_0: left promiscuous mode [ 766.201504][T25765] hsr_slave_1: left promiscuous mode [ 766.228867][T25765] veth0_macvtap: left promiscuous mode [ 766.234611][T25765] veth1_vlan: left promiscuous mode [ 766.259537][T30023] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6321'. [ 766.736036][T25765] team0 (unregistering): Port device batadv3 removed [ 766.880882][T25765] team0 (unregistering): Port device batadv2 removed [ 766.884188][T30060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6329'. [ 766.947057][ T5638] block nbd4: Receive control failed (result -1) [ 767.115572][ T13] smc: removing ib device syz2 [ 767.185746][T25765] team0 (unregistering): Port device vlan0 removed [ 767.487028][T26895] smbdirect: ib_dev[syś2] removed [ 767.506910][T30023] vlan2: entered allmulticast mode [ 767.512783][T30023] gretap0: entered allmulticast mode [ 767.513788][T20039] syz2: Port: 1 Link DOWN [ 767.733625][T30070] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6330'. [ 767.753228][ T13] [ 767.755609][ T13] ====================================================== [ 767.762633][ T13] WARNING: possible circular locking dependency detected [ 767.769675][ T13] syzkaller #0 Not tainted [ 767.774098][ T13] ------------------------------------------------------ [ 767.781119][ T13] kworker/u8:1/13 is trying to acquire lock: [ 767.787103][ T13] ffff88801be852a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 767.797013][ T13] [ 767.797013][ T13] but task is already holding lock: [ 767.804392][ T13] ffffffff8f390260 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 767.813228][ T13] [ 767.813228][ T13] which lock already depends on the new lock. [ 767.813228][ T13] [ 767.823642][ T13] [ 767.823642][ T13] the existing dependency chain (in reverse order) is: [ 767.832667][ T13] [ 767.832667][ T13] -> #11 (gdp_mutex){+.+.}-{4:4}: [ 767.839898][ T13] __mutex_lock+0x1a3/0x1550 [ 767.845033][ T13] get_device_parent+0x16f/0x3a0 [ 767.850504][ T13] device_add+0x2e1/0xbb0 [ 767.855369][ T13] device_create+0x269/0x300 [ 767.860494][ T13] msr_device_create+0x33/0x50 [ 767.865819][ T13] cpuhp_invoke_callback+0x445/0x860 [ 767.871629][ T13] cpuhp_thread_fun+0x36b/0x780 [ 767.876989][ T13] smpboot_thread_fn+0x541/0xa50 [ 767.882434][ T13] kthread+0x389/0x470 [ 767.887011][ T13] ret_from_fork+0x514/0xb70 [ 767.892131][ T13] ret_from_fork_asm+0x1a/0x30 [ 767.897413][ T13] [ 767.897413][ T13] -> #10 (cpuhp_state-up){+.+.}-{0:0}: [ 767.905060][ T13] cpuhp_thread_fun+0x127/0x780 [ 767.910428][ T13] smpboot_thread_fn+0x541/0xa50 [ 767.915879][ T13] kthread+0x389/0x470 [ 767.920461][ T13] ret_from_fork+0x514/0xb70 [ 767.925562][ T13] ret_from_fork_asm+0x1a/0x30 [ 767.930840][ T13] [ 767.930840][ T13] -> #9 (cpu_hotplug_lock){++++}-{0:0}: [ 767.938557][ T13] cpus_read_lock+0x42/0x160 [ 767.943664][ T13] static_key_slow_inc+0x12/0x30 [ 767.949151][ T13] ipv6_flowlabel_opt+0x1b94/0x29c0 [ 767.954951][ T13] do_ipv6_setsockopt+0xd9f/0x3150 [ 767.960618][ T13] ipv6_setsockopt+0x59/0x170 [ 767.965812][ T13] rawv6_setsockopt+0x276/0x5f0 [ 767.971240][ T13] do_sock_setsockopt+0x17c/0x1b0 [ 767.976830][ T13] __x64_sys_setsockopt+0x13d/0x1b0 [ 767.982567][ T13] do_syscall_64+0x174/0x580 [ 767.987675][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.994082][ T13] [ 767.994082][ T13] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 768.001804][ T13] lock_sock_nested+0x41/0x100 [ 768.007094][ T13] inet_shutdown+0x6a/0x390 [ 768.012203][ T13] nbd_mark_nsock_dead+0x2e9/0x560 [ 768.017943][ T13] recv_work+0x1c2e/0x1d40 [ 768.022868][ T13] process_scheduled_works+0xb5d/0x1860 [ 768.028922][ T13] worker_thread+0xa53/0xfc0 [ 768.034022][ T13] kthread+0x389/0x470 [ 768.038600][ T13] ret_from_fork+0x514/0xb70 [ 768.043700][ T13] ret_from_fork_asm+0x1a/0x30 [ 768.048977][ T13] [ 768.048977][ T13] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 768.056611][ T13] __mutex_lock+0x1a3/0x1550 [ 768.061715][ T13] nbd_queue_rq+0x37b/0x1100 [ 768.066820][ T13] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 768.072987][ T13] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 768.079881][ T13] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 768.086374][ T13] blk_mq_run_hw_queue+0x348/0x4f0 [ 768.091999][ T13] blk_mq_dispatch_list+0xd16/0xe10 [ 768.097715][ T13] blk_mq_flush_plug_list+0x48d/0x570 [ 768.103598][ T13] __blk_flush_plug+0x3ed/0x4d0 [ 768.109049][ T13] __submit_bio+0x28d/0x580 [ 768.114069][ T13] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 768.120212][ T13] block_read_full_folio+0x599/0x830 [ 768.126016][ T13] filemap_read_folio+0x137/0x3b0 [ 768.131558][ T13] do_read_cache_folio+0x358/0x590 [ 768.137183][ T13] read_part_sector+0xb6/0x2b0 [ 768.142539][ T13] adfspart_check_ICS+0xb1/0x960 [ 768.147989][ T13] bdev_disk_changed+0x817/0x1770 [ 768.153748][ T13] blkdev_get_whole+0x380/0x510 [ 768.159210][ T13] bdev_open+0x31e/0xd30 [ 768.163970][ T13] blkdev_open+0x470/0x610 [ 768.168900][ T13] do_dentry_open+0x822/0x13a0 [ 768.174174][ T13] vfs_open+0x3b/0x340 [ 768.178750][ T13] path_openat+0x2e08/0x3860 [ 768.183854][ T13] do_file_open+0x23e/0x4a0 [ 768.188868][ T13] do_sys_openat2+0x113/0x200 [ 768.194052][ T13] __x64_sys_openat+0x138/0x170 [ 768.199408][ T13] do_syscall_64+0x174/0x580 [ 768.204506][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.210912][ T13] [ 768.210912][ T13] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 768.218117][ T13] __mutex_lock+0x1a3/0x1550 [ 768.223220][ T13] nbd_queue_rq+0xc6/0x1100 [ 768.228238][ T13] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 768.234293][ T13] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 768.241134][ T13] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 768.247630][ T13] blk_mq_run_hw_queue+0x348/0x4f0 [ 768.253257][ T13] blk_mq_dispatch_list+0xd16/0xe10 [ 768.258968][ T13] blk_mq_flush_plug_list+0x48d/0x570 [ 768.264853][ T13] __blk_flush_plug+0x3ed/0x4d0 [ 768.270217][ T13] __submit_bio+0x28d/0x580 [ 768.275231][ T13] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 768.281372][ T13] block_read_full_folio+0x599/0x830 [ 768.287167][ T13] filemap_read_folio+0x137/0x3b0 [ 768.292705][ T13] do_read_cache_folio+0x358/0x590 [ 768.298333][ T13] read_part_sector+0xb6/0x2b0 [ 768.303608][ T13] adfspart_check_ICS+0xb1/0x960 [ 768.309068][ T13] bdev_disk_changed+0x817/0x1770 [ 768.314610][ T13] blkdev_get_whole+0x380/0x510 [ 768.319977][ T13] bdev_open+0x31e/0xd30 [ 768.324734][ T13] blkdev_open+0x470/0x610 [ 768.329670][ T13] do_dentry_open+0x822/0x13a0 [ 768.334950][ T13] vfs_open+0x3b/0x340 [ 768.339527][ T13] path_openat+0x2e08/0x3860 [ 768.344633][ T13] do_file_open+0x23e/0x4a0 [ 768.349649][ T13] do_sys_openat2+0x113/0x200 [ 768.354842][ T13] __x64_sys_openat+0x138/0x170 [ 768.360206][ T13] do_syscall_64+0x174/0x580 [ 768.365309][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.371713][ T13] [ 768.371713][ T13] -> #5 (set->srcu){.+.+}-{0:0}: [ 768.378830][ T13] __synchronize_srcu+0xca/0x300 [ 768.384285][ T13] elevator_switch+0x1e8/0x7a0 [ 768.389561][ T13] elevator_change+0x2cc/0x450 [ 768.394833][ T13] elevator_set_default+0x36c/0x430 [ 768.400542][ T13] blk_register_queue+0x3e9/0x4e0 [ 768.406081][ T13] __add_disk+0x677/0xd50 [ 768.410932][ T13] add_disk_fwnode+0xfb/0x480 [ 768.416125][ T13] nbd_dev_add+0x72c/0xb50 [ 768.421060][ T13] nbd_init+0x168/0x1f0 [ 768.425854][ T13] do_one_initcall+0x250/0x870 [ 768.431135][ T13] do_initcall_level+0x104/0x190 [ 768.436643][ T13] do_initcalls+0x59/0xa0 [ 768.441479][ T13] kernel_init_freeable+0x2a6/0x3e0 [ 768.447184][ T13] kernel_init+0x1d/0x1d0 [ 768.452080][ T13] ret_from_fork+0x514/0xb70 [ 768.457181][ T13] ret_from_fork_asm+0x1a/0x30 [ 768.462465][ T13] [ 768.462465][ T13] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 768.470275][ T13] __mutex_lock+0x1a3/0x1550 [ 768.475372][ T13] elevator_change+0x1b3/0x450 [ 768.480651][ T13] elevator_set_none+0xb5/0x140 [ 768.486021][ T13] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 768.492340][ T13] nbd_start_device+0x17f/0xb10 [ 768.497709][ T13] nbd_genl_connect+0x165b/0x1cf0 [ 768.503252][ T13] genl_family_rcv_msg_doit+0x22a/0x330 [ 768.509313][ T13] genl_rcv_msg+0x61c/0x7a0 [ 768.514325][ T13] netlink_rcv_skb+0x232/0x4b0 [ 768.519602][ T13] genl_rcv+0x28/0x40 [ 768.524099][ T13] netlink_unicast+0x75c/0x8e0 [ 768.529374][ T13] netlink_sendmsg+0x813/0xb40 [ 768.534655][ T13] ____sys_sendmsg+0x972/0x9f0 [ 768.539925][ T13] ___sys_sendmsg+0x2a5/0x360 [ 768.545117][ T13] __x64_sys_sendmsg+0x1bd/0x2a0 [ 768.550561][ T13] do_syscall_64+0x174/0x580 [ 768.555658][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.562062][ T13] [ 768.562062][ T13] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 768.570659][ T13] blk_alloc_queue+0x546/0x680 [ 768.575938][ T13] __blk_mq_alloc_disk+0x197/0x390 [ 768.581565][ T13] nbd_dev_add+0x499/0xb50 [ 768.586495][ T13] nbd_init+0x168/0x1f0 [ 768.591165][ T13] do_one_initcall+0x250/0x870 [ 768.596436][ T13] do_initcall_level+0x104/0x190 [ 768.601884][ T13] do_initcalls+0x59/0xa0 [ 768.606722][ T13] kernel_init_freeable+0x2a6/0x3e0 [ 768.612438][ T13] kernel_init+0x1d/0x1d0 [ 768.617287][ T13] ret_from_fork+0x514/0xb70 [ 768.622388][ T13] ret_from_fork_asm+0x1a/0x30 [ 768.627669][ T13] [ 768.627669][ T13] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 768.634867][ T13] fs_reclaim_acquire+0x71/0x100 [ 768.640326][ T13] kmem_cache_alloc_lru_noprof+0x45/0x640 [ 768.646556][ T13] alloc_inode+0xb8/0x1b0 [ 768.651392][ T13] iget_locked+0x131/0x6a0 [ 768.656318][ T13] kernfs_get_inode+0x4f/0x780 [ 768.661604][ T13] kernfs_get_tree+0x5cd/0x980 [ 768.666881][ T13] sysfs_get_tree+0x46/0x110 [ 768.671987][ T13] vfs_get_tree+0x92/0x2a0 [ 768.676919][ T13] do_new_mount+0x341/0xd30 [ 768.681933][ T13] __se_sys_mount+0x31d/0x420 [ 768.687121][ T13] do_syscall_64+0x174/0x580 [ 768.692220][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.698628][ T13] [ 768.698628][ T13] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 768.706612][ T13] down_write+0x96/0x200 [ 768.711369][ T13] kernfs_remove_by_name_ns+0x4e/0x140 [ 768.717347][ T13] device_links_driver_bound+0x54f/0x14e0 [ 768.723648][ T13] driver_bound+0xd8/0x2e0 [ 768.728628][ T13] really_probe+0x789/0xaf0 [ 768.733643][ T13] __driver_probe_device+0x1ef/0x380 [ 768.739439][ T13] driver_probe_device+0x4f/0x240 [ 768.744976][ T13] __device_attach_driver+0x279/0x430 [ 768.750860][ T13] bus_for_each_drv+0x258/0x2f0 [ 768.756228][ T13] __device_attach+0x2c5/0x450 [ 768.761517][ T13] device_initial_probe+0xa1/0xd0 [ 768.767055][ T13] bus_probe_device+0x12a/0x220 [ 768.772423][ T13] device_add+0x7e9/0xbb0 [ 768.777262][ T13] faux_device_create_with_groups+0x189/0x290 [ 768.783899][ T13] regulator_dummy_init+0x19/0x40 [ 768.789431][ T13] regulator_init+0xca/0x110 [ 768.794541][ T13] do_one_initcall+0x250/0x870 [ 768.799833][ T13] do_initcall_level+0x104/0x190 [ 768.805292][ T13] do_initcalls+0x59/0xa0 [ 768.810134][ T13] kernel_init_freeable+0x2a6/0x3e0 [ 768.815845][ T13] kernel_init+0x1d/0x1d0 [ 768.820694][ T13] ret_from_fork+0x514/0xb70 [ 768.825800][ T13] ret_from_fork_asm+0x1a/0x30 [ 768.831072][ T13] [ 768.831072][ T13] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 768.839693][ T13] __lock_acquire+0x15a5/0x2cf0 [ 768.845058][ T13] lock_acquire+0x106/0x350 [ 768.850071][ T13] down_read+0x47/0x2e0 [ 768.854739][ T13] kernfs_remove+0x35/0x80 [ 768.859689][ T13] __kobject_del+0xe1/0x330 [ 768.864818][ T13] kobject_del+0x45/0x60 [ 768.869569][ T13] cleanup_glue_dir+0x1a3/0x220 [ 768.874929][ T13] device_del+0x780/0x8f0 [ 768.879765][ T13] cdev_device_del+0x27/0xf0 [ 768.884867][ T13] ib_umad_kill_port+0xf9/0x320 [ 768.890338][ T13] ib_umad_remove_one+0x160/0x270 [ 768.895879][ T13] remove_client_context+0xb9/0x1e0 [ 768.901706][ T13] disable_device+0x137/0x330 [ 768.906900][ T13] __ib_unregister_device+0x2cb/0x3f0 [ 768.912797][ T13] ib_unregister_work+0x19/0x30 [ 768.918187][ T13] process_scheduled_works+0xb5d/0x1860 [ 768.924258][ T13] worker_thread+0xa53/0xfc0 [ 768.929358][ T13] kthread+0x389/0x470 [ 768.933939][ T13] ret_from_fork+0x514/0xb70 [ 768.939039][ T13] ret_from_fork_asm+0x1a/0x30 [ 768.944312][ T13] [ 768.944312][ T13] other info that might help us debug this: [ 768.944312][ T13] [ 768.954609][ T13] Chain exists of: [ 768.954609][ T13] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 768.954609][ T13] [ 768.967987][ T13] Possible unsafe locking scenario: [ 768.967987][ T13] [ 768.975421][ T13] CPU0 CPU1 [ 768.980770][ T13] ---- ---- [ 768.986116][ T13] lock(gdp_mutex); [ 768.989997][ T13] lock(cpuhp_state-up); [ 768.996837][ T13] lock(gdp_mutex); [ 769.003238][ T13] rlock(&root->kernfs_supers_rwsem); [ 769.008686][ T13] [ 769.008686][ T13] *** DEADLOCK *** [ 769.008686][ T13] [ 769.016820][ T13] 4 locks held by kworker/u8:1/13: [ 769.021930][ T13] #0: ffff88801aff5140 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 769.033321][ T13] #1: ffffc90000127c40 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 769.046531][ T13] #2: ffff888058c446f8 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 769.057925][ T13] #3: ffffffff8f390260 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 769.067056][ T13] [ 769.067056][ T13] stack backtrace: [ 769.072959][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 769.072982][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 769.072992][ T13] Workqueue: ib-unreg-wq ib_unregister_work [ 769.073015][ T13] Call Trace: [ 769.073022][ T13] [ 769.073030][ T13] dump_stack_lvl+0xe8/0x150 [ 769.073047][ T13] print_circular_bug+0x2e1/0x300 [ 769.073066][ T13] check_noncircular+0x12e/0x150 [ 769.073084][ T13] __lock_acquire+0x15a5/0x2cf0 [ 769.073102][ T13] ? irqentry_exit+0x218/0x8b0 [ 769.073116][ T13] ? lockdep_hardirqs_on+0x7a/0x110 [ 769.073129][ T13] ? __pfx___schedule+0x10/0x10 [ 769.073149][ T13] ? kernfs_remove+0x35/0x80 [ 769.073168][ T13] lock_acquire+0x106/0x350 [ 769.073180][ T13] ? kernfs_remove+0x35/0x80 [ 769.073202][ T13] down_read+0x47/0x2e0 [ 769.073216][ T13] ? kernfs_remove+0x35/0x80 [ 769.073234][ T13] kernfs_remove+0x35/0x80 [ 769.073252][ T13] __kobject_del+0xe1/0x330 [ 769.073269][ T13] kobject_del+0x45/0x60 [ 769.073283][ T13] cleanup_glue_dir+0x1a3/0x220 [ 769.073298][ T13] device_del+0x780/0x8f0 [ 769.073313][ T13] ? __pfx_device_del+0x10/0x10 [ 769.073327][ T13] ? xa_load+0x60/0x210 [ 769.073415][ T13] cdev_device_del+0x27/0xf0 [ 769.073429][ T13] ib_umad_kill_port+0xf9/0x320 [ 769.073446][ T13] ? remove_client_context+0x79/0x1e0 [ 769.073464][ T13] ib_umad_remove_one+0x160/0x270 [ 769.073482][ T13] ? __pfx_ib_umad_remove_one+0x10/0x10 [ 769.073497][ T13] remove_client_context+0xb9/0x1e0 [ 769.073516][ T13] disable_device+0x137/0x330 [ 769.073528][ T13] ? __pfx_disable_device+0x10/0x10 [ 769.073547][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 769.073565][ T13] ? process_scheduled_works+0xa70/0x1860 [ 769.073580][ T13] __ib_unregister_device+0x2cb/0x3f0 [ 769.073601][ T13] ib_unregister_work+0x19/0x30 [ 769.073616][ T13] ? process_scheduled_works+0xa70/0x1860 [ 769.073628][ T13] process_scheduled_works+0xb5d/0x1860 [ 769.073651][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 769.073672][ T13] ? assign_work+0x3d5/0x5e0 [ 769.073686][ T13] worker_thread+0xa53/0xfc0 [ 769.073709][ T13] kthread+0x389/0x470 [ 769.073725][ T13] ? __pfx_worker_thread+0x10/0x10 [ 769.073737][ T13] ? __pfx_kthread+0x10/0x10 [ 769.073753][ T13] ret_from_fork+0x514/0xb70 [ 769.073768][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 769.073781][ T13] ? __switch_to+0xc79/0x1410 [ 769.073800][ T13] ? __pfx_kthread+0x10/0x10 [ 769.073816][ T13] ret_from_fork_asm+0x1a/0x30 [ 769.073837][ T13] [ 769.381859][T30070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6330'. [ 769.381948][ T13] smbdirect: ib_dev[syz2] removed