last executing test programs: 3.944000901s ago: executing program 1 (id=4655): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071124f000000000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0xd42c142798a188e2, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400003}, 0x94) read(r0, &(0x7f0000000040)=""/185, 0xb9) 3.937344205s ago: executing program 1 (id=4658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x16}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r3 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000006c0)="b9ff05000000000c5c26fc000000", 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x3}]}, @int={0x5, 0x0, 0x0, 0x1, 0x5, 0x20}, @enum={0x7}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x61, 0x2e, 0x0, 0x5f]}}, 0x0, 0x58}, 0x28) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 3.776077663s ago: executing program 2 (id=4662): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)={0x18, 0x2f, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x4, 0x10f3}, @typed={0x4, 0x1e}]}, 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r1, 0x1f4d2000) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f0000000080)='xfrm0\x00', 0x20000, &(0x7f0000000100)={@align=0x6, {0x9, 0x2, 0x5, 0x4}}, 0x280000, &(0x7f0000000140), &(0x7f0000000180)=0x3}) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipmr_delroute={0x38, 0x19, 0x400, 0x70bd2c, 0x25dfdbfc, {0x80, 0x14, 0x10, 0x28, 0xff, 0x4, 0xfd, 0x8, 0x7000}, [@RTA_SPORT={0x6, 0x1c, 0x4e23}, @RTA_TABLE={0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0xfffffffffffffe74, 0x8, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x24008880) 3.674932812s ago: executing program 1 (id=4664): r0 = socket$inet6(0xa, 0x1, 0x2) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000002c0)={'mangle\x00', 0x62, "dad2c769e1ab7e7960c6e6a64ef1db30d31ea7965556285a40b234820de328819f1414112376df502abea08845b8f3b3432216b71206c44bbab22b87ccbbeee6531c1d816c1d0b44434bba6c0e574f284672acd7bfb73587f1e254ea5cedf159e0e6"}, &(0x7f0000000380)=0x86) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0x6, 0x0, 0x9, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) r2 = socket(0x23, 0x80002, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x40880}, 0x4000) syz_genetlink_get_family_id$team(&(0x7f0000000500), r2) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000003c0)={0x9, {{0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @local}, 0x9}}, {{0xa, 0x4e24, 0xfff, @mcast1, 0x8000}}}, 0x108) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4) 3.39140904s ago: executing program 3 (id=4666): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000007c40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000011}], 0x1, 0x24000040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x80, 0x40, 0x8, 0x9, {{0x8, 0x4, 0x1, 0x2d, 0x20, 0x66, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010100, @loopback, {[@rr={0x7, 0x7, 0xa9, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @end]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xbc, r4, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) recvmmsg(r2, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/102, 0x66}], 0x1}, 0xb}], 0x1, 0x2120, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x4c, r9, 0x1, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x30, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x1}, {0x5, 0x4}, {0x3, 0x4}, {0x2}, {0x7, 0x1}, {0x3, 0x7}, {0x2, 0x2}, {0x1, 0x1}, {0x3, 0x7}, {}, {0x2, 0x6}, {0x0, 0x7}, {0x5, 0x3}, {0x3, 0x2}, {0x2, 0x5}, {0x2, 0x3}, {0x4, 0x5}, {0x6, 0x8}, {0x6, 0x7}, {0x6, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF, @NL80211_TXRATE_VHT={0x0, 0x3, {[0x8, 0x69df, 0x3ff, 0x2, 0x9, 0x9, 0x6, 0x38]}}, @NL80211_TXRATE_HE_LTF={0x0, 0x7, 0x2}, @NL80211_TXRATE_GI={0x0, 0x4, 0x2}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.322308349s ago: executing program 2 (id=4667): r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x7a, &(0x7f0000002200)={@local, @random="7a873d3d6474", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "063f36", 0x44, 0x2f, 0x0, @remote, @loopback={0xff00000000000000}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x806}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r1, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @remote}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) syz_emit_ethernet(0x7a, &(0x7f0000002200)={@local, @random="7a873d3d6474", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "063f36", 0x44, 0x2f, 0x0, @remote, @loopback={0xff00000000000000}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x806}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}}}}}}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00'}) (async) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r1, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @remote}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) (async) 3.199585868s ago: executing program 1 (id=4668): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20004040) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001c40)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x4210}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x6}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}}, 0x20000040) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000002bc0), 0x2a0, 0x20004840) 3.119277973s ago: executing program 3 (id=4669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000003600000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000100), &(0x7f0000000040)}, 0x20) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x322b76563e7f957d, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x210}]}, 0x34}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)={0x94, r6, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x37, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x94}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000a80)={0x0, 0x0, "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"}, &(0x7f0000000180)=0xfebd) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000005400010026bd70010000000007000000", @ANYRES32=r11, @ANYBLOB="20000100", @ANYRES32=r11, @ANYBLOB="0000020000000000000000000000fbffaed7ff0008000000"], 0x38}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f00000001c0)={@loopback, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x101, 0x3, 0x0, 0x400, 0x5, 0x4100200, r11}) socket$nl_route(0x10, 0x3, 0x0) 2.975683628s ago: executing program 2 (id=4670): unshare(0xa020480) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x8000001, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0xe, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0502ecfffffffddbdf25120000001800018014000200626f6e645f736c6176655f3100000000080007000001000008000600"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@mpls_delroute={0x1c, 0x19, 0x1, 0x70bd2c, 0x25dfdbfd, {0x1c, 0x14, 0x0, 0x0, 0xff, 0x3, 0x31ca61870d49e4b8, 0x6, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8}]}}]}, 0x44}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, &(0x7f0000000040)=0x1000004, 0x4) 2.936138378s ago: executing program 4 (id=4671): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r1 = socket(0xa, 0x3, 0xff) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4c26, 0x6, @mcast2, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x8010800000000084) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc8, 0x14, 0x4, 0x70bd29, 0x25dfdbfb, {0x27, 0xd}, [@INET_DIAG_REQ_BYTECODE={0x2a, 0x1, "3eb06b7bb33128ca44eb89def7052f9c47885075a80e0006a048a39844f81a7e82a99837441c"}, @INET_DIAG_REQ_BYTECODE={0x87, 0x1, "4448465f9640c6f04d0d17b7b8f80c2c6c05650d998384bba32e33784fa192f43e5548b08051110093303ddb62b73e037b17d704728a4a596ee96a3a3e45e7766fff80cd001934072a747234561b51bd492fbb7dc27a2e3c446e1ee54745ed99407a28f773852ca0344b15de24ebddacb2e6e2049eac51f63d84427d2d3d740a17b15f"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4008820}, 0x20008804) sendmmsg$inet6(r2, &(0x7f0000001f00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000380)="4c518b70fb0fe133fa61ed2ca5c22360bdf3f03405f57b3ca53b617df652d98b976956d4bb64ccb954b037fbc34ac55b80ad858a73b4835bb6ed48bcb63f05c35bca6a9b7d6f26a2f88e79680b6f6ea7805b7b5fc00034b52e7a4b372187535df068461111212b68499861f1c4e2e28dc137", 0x72}, {&(0x7f0000000680)="d023e4dcca0a7478e7afdaec1ead0936ab0364d7d88a474f837da7226607a0b11afc86d020b963acb38a79b89f86277dde3865a6ca6390b8cd09c84fc0d300f2c13b6cd5063ff8b4822323d947897497d0715706775919fbb68424bbb917ab62945f7f07ad8c2f65fe7355a2e29b73a435e2cfd8492c36296445d59257abd4f3436138cdcbc847866aa984040646018fd70cd366f242fceb359734cb1046ab5c8edb8bf89a1112e5560c", 0xaa}, {&(0x7f0000000d40)="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", 0x1000}], 0x3, &(0x7f0000001d80)=[@dstopts_2292={{0x110, 0x29, 0x4, {0x0, 0x1e, '\x00', [@pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x504f}, @enc_lim={0x4, 0x1, 0x40}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}, @generic={0x4, 0xd1, "9eee01ba33a34982117e78db2e9a139c078fc5eb1174d2971e31afcfbbf001687cf3f821bf37678381848056af7e7d4ba3b7852688d24574bd45db87f47ac8e33c24c29aca84d3fa59a9da92282abfd8d0e303be0e5b56c5de11c6a75bc5b3495e453c3362b19b7ac7b46b3ed8a365a7e05e6dc602676b1b4f5f80739911908c199a6bcd044c64782d6e43cc38f30c8ed7333470589460d0f34953f4604c50842c9c44c4a123084f3676937bb0ccef4db9947b6b1413559f1002e842e7242392753a3398397652f2c3a493d567b7ca9635"}, @padn={0x1, 0x1, [0x0]}, @generic={0x3}]}}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x33, 0x4, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x5d, 0xccdb, [0x9, 0x6, 0xbc]}}]}}}], 0x150}}], 0x3, 0x4008040) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x2}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x22, 0x0, 0x0, 0x0, 0x2b}, 0x94) 2.679326216s ago: executing program 4 (id=4672): socket(0x10, 0x3, 0x0) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4) (async) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000020000000000000", 0x1b) (async) r2 = socket$kcm(0xa, 0x2, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x7) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r3, 0x0, 0x2, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x4) (async) socket(0x2, 0x80805, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r8 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r8, 0x110, 0x5, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'rr\x00', 0x1, 0x80005, 0x6f}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000100)={{0x84, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x4e21, 0x3, 'nq\x00', 0x5, 0x7, 0x77}, {@rand_addr=0x64010102, 0x4e20, 0x2, 0xcd, 0x7, 0x43}}, 0x44) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000400)=@in6={0x2, 0x4e23, 0x0, @dev, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x40800) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) 2.653806521s ago: executing program 2 (id=4673): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES8=r0, @ANYRES16=r1, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYRESHEX=r1, @ANYRES8=r2, @ANYRES64, @ANYBLOB="4e61d09ff12905cb2aba45ca1d6bd18a971dcc507d15e2aa133a33b2be3391c3d6f5093080e3ea979520339fe5278eff11707a30a6cfe81c5783cdb73bd7ed056b59", @ANYBLOB="a7225765c3981718803087aecfb330bfcf6218e37a8cc4f8d9b0cc8e935fc14261c1652cc2095d9d5ea0bf76588cdeb3a5db6876ebc32bd990c59cc8c42ea6a8814e7229bd628dab5f40439044437630e67008c7985672f74448929bf574432a5972a95f493090179a2dbd2903ce9d671ecd62b73035213634ab48c2969d264031589742c4b92e848f2578bf2031a729f3908de759648a2234226ef291affe07dbac4ca9f11f2b2c384818cb93", @ANYRES64=r3], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000040000000000000000000b708110000000800001e0000007b8af0ff0006067f2f0000e5ffffbfa400000000000007040000f0ffffffb7020000080000000000000000000000000000175e987a4cc6a64da800", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r7, r4}) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$kcm(0x29, 0x5, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendfile(r9, 0xffffffffffffffff, 0x0, 0x8000000000004) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r12, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) socket$kcm(0x29, 0x5, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) 2.642990723s ago: executing program 1 (id=4674): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000d00)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec587547"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r6) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000082f00fe88a43de1a400000000000000027d01ff0200000000000000000000000000010000883e"], 0xfdef) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="09a00100068100001c0012800b000100773931948dc86fb7061a1709e68462726964676500000c00028005000200000000000a0001000000aaaaaaaa00005da5b7afd69380c16dff87a06c4de4bef5077c71bfdbc6902dcacc323b2745be4d23601f37e3be1ba59f9230784b5800abd9f7f29b435b7de73a4b129236872affde9742ee32df62cc2a0611e4610405ed6ef968682128df08a3b45b26489f7888a348046fa92183e1a0747c"], 0x48}}, 0x20000000) sendmsg$nl_xfrm(r0, 0x0, 0x8008010) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000300000a00000029000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000007c20445ba0621e00000000000007000000000000000000000000400000000000000200000b0200000000000000ffffffffffffff5a04ff00000000000000000000000000000000000000000000000000000000000000ffffffffffffff000000100000000000000000000000000029225d09a0407a1e07ec"], 0xb8}}, 0x4008004) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340)={0x0, 0xa}, 0xd58495bc, 0x0, 0xffffffffffffffff, 0x2dc2c9024f5022d2}, 0x29) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r11, 0x2000012, 0xffffffffffffffca, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.45942405s ago: executing program 4 (id=4676): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x4c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_SSID={0xb, 0x34, @random="2831317553a560"}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002f00090027bd7000000000000400000004001900040018"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r5) sendmsg$NFC_CMD_DEP_LINK_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fcdbdf250400000008000100", @ANYRES32=0x0, @ANYBLOB="05000a00f4"], 0x24}, 0x1, 0x0, 0x0, 0x200080c4}, 0x8000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000cb760c4047652b638d00000000000000000000000000000000000000000000000046fa3acf4f26"], 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000002000000850000006c000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 2.371587571s ago: executing program 3 (id=4677): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000600)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001700)={"3f94b8dd5df7d3c518f041d434864da8", r3, r4, {0xde06, 0x4}, {0x2, 0x80}, 0x3, [0x8, 0x0, 0x4, 0x2, 0x1, 0x5, 0x5, 0x89d, 0x4, 0x3, 0x29e1, 0x4, 0xa, 0x0, 0xfffffffffffff801, 0x8]}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000340)={0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}]}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x7, 0x0, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="310330bd7000fbdbdf250b00000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0xc0) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000002060108000034e4000000000000000005b22300a5a6c500010006000000050004000000e9000900020073797a3100000000050005000a0000001100030068617315a7354ba26577f823683a69702c706f7274000000000c00078008000640000002"], 0x58}}, 0x2) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r9, 0x8008f513, &(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000300)={0x8000000c}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001140)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000700)={0x2, 0x2, @start={r10, 0x1, "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", "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"}, [0x0, 0x3, 0x3, 0x2, 0x2, 0xb859, 0x8, 0x5, 0x4, 0x5, 0x6, 0x3, 0x86, 0x0, 0x8, 0x37, 0x0, 0x5, 0x8, 0x3, 0x80000000, 0x0, 0x8, 0x9, 0xccfb, 0x6, 0xa8f3, 0x0, 0x100000001, 0x6, 0x0, 0xff, 0x3, 0x0, 0x9081, 0x400, 0x6, 0x7e, 0x3, 0x5, 0x40, 0xfffffffffffffffc, 0x100000001, 0x10000000, 0x5, 0x3, 0xd, 0x6375, 0x9, 0x4, 0x6f39, 0xfffffffffffffc00, 0x6, 0x7, 0x3, 0x7, 0x4, 0x3, 0x5, 0x6, 0x7, 0xe93, 0x100000000, 0xffffffffffffff9b]}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000740)={r10, "81dcd6030d800b0499d2aebbaee94030"}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000d80)={{r2}, r3, 0x8, @unused=[0x5ec4f821, 0x1, 0x7, 0x100000001], @devid=r10}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES32=r11, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@delchain={0x3a0, 0x64, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x374, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xe4}, @TCA_U32_HASH={0x8, 0x2, 0x7fff}, @TCA_U32_INDEV={0x14, 0x8, 'batadv_slave_0\x00'}, @TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_SEL={0x344, 0x5, {0xc, 0x8, 0x1, 0xa, 0xdc30, 0xde54, 0xb06, 0x2, [{0x6, 0xc0000000, 0x7, 0xf13b}, {0x2, 0x0, 0x10001, 0x4}, {0x8, 0x8000, 0x2}, {0xfffff001, 0x80000001, 0xf, 0x7}, {0x8, 0x2, 0x7, 0x840}, {0x1ff, 0x3ff, 0x8, 0x99}, {0x4, 0x101, 0x3, 0x6}, {0x3, 0x0, 0x3, 0x3}, {0x0, 0x6, 0xfffffffe, 0xacb}, {0xfffffffe, 0x8, 0x1b02, 0x6a}, {0x5, 0x101, 0x400, 0xd}, {0x5, 0x2, 0x1}, {0x7f, 0x7ff, 0xfffff6dd, 0x5}, {0x2c, 0x0, 0x8, 0x8}, {0x2, 0xffffff26, 0x6, 0x7}, {0x7b34, 0x0, 0x4608, 0x8}, {0x6, 0x6, 0x2a}, {0x8, 0xf, 0x4, 0x8}, {0x5, 0xfffff94c, 0x30, 0x81}, {0x8, 0x7ff, 0x8, 0x3}, {0x2, 0xfffffffc, 0x7077d285, 0x3b08a83c}, {0x26000000, 0x47f65e65, 0x1, 0x7}, {0x32, 0x2, 0x4, 0xfffffffc}, {0x1, 0x4, 0x9, 0xe}, {0x4, 0x400, 0x0, 0x5}, {0xb0da, 0xf9bb, 0xc, 0x6}, {0x0, 0x2d516a15, 0x7, 0x7}, {0xffffffff, 0x7, 0x4, 0x3ff}, {0x3, 0x1, 0xb21, 0x1}, {0x6, 0x19f667fb, 0x6, 0x5bee}, {0x7fffffff, 0x0, 0x3, 0x7ef}, {0x3, 0x7, 0x7fffffff, 0x8000}, {0x33bb, 0x799192c1, 0xff, 0x3ff}, {0x1ff, 0x1c8, 0x6, 0x2}, {0x2c1, 0x2, 0xbc, 0x1}, {0x3, 0x88, 0x9, 0x2283}, {0x8, 0x9, 0x6, 0x10}, {0x8, 0x5, 0x1634, 0x200}, {0xe, 0x5, 0xb, 0x2}, {0x6, 0x8, 0x9, 0x7}, {0x0, 0x8, 0x1000, 0x7}, {0x3, 0x7, 0x8, 0x1}, {0x256f, 0x10001, 0x3, 0x9}, {0x0, 0x7fff, 0x5, 0x7}, {0x7, 0x9, 0x6, 0xfffffffa}, {0x5, 0x101, 0x1, 0x6}, {0x9, 0x8de8, 0x3, 0x9}, {0x5, 0x9, 0xf1, 0xfffff520}, {0x0, 0x20, 0x8, 0x9}, {0x44a, 0x6, 0x5, 0x1}, {0xfffffff7, 0x0, 0x2, 0x8000}]}}]}}]}, 0x3a0}}, 0x4040004) socket$nl_route(0x10, 0x3, 0x0) 2.104564694s ago: executing program 0 (id=4678): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x39d0c0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0x4}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x0, 0x5, 0x0, 0xdab, 0x6}, {0x6, 0x0, 0x8, 0x79a, 0x10}, 0x8, 0x6, 0xb3f}}, @TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x6, 0x6, 0x6, 0x76de, 0xfff, 0x9, 0x1, 0x5, 0x9, 0x9, 0xb4a, 0x40db, 0x3, 0xfffffff7, 0xf, 0x1, 0x7fffffff, 0x0, 0x3, 0x4, 0x3, 0x9, 0x8001, 0xc, 0x6123, 0x9, 0x6, 0x9, 0xffff0000, 0x9, 0x9, 0x6, 0xfff, 0x7ff, 0xfffffff8, 0x1, 0xbb, 0x2, 0x4, 0x8, 0x0, 0x800, 0xc, 0x8, 0x4, 0x1ff, 0x3ef, 0xffffffa3, 0x8, 0x9, 0xd, 0x9, 0x101, 0x6, 0x6, 0x394, 0x2, 0x8, 0xe0, 0x3, 0xfffffffa, 0x800, 0x2, 0x5, 0x10066, 0x0, 0x6, 0xc0000000, 0x8, 0x32, 0x5, 0x3, 0x7fff, 0xffff7fff, 0x9, 0x9, 0x2c, 0x9, 0x1bf4, 0x661, 0x8, 0x9, 0x57, 0x1000, 0x101, 0x6, 0x4, 0xfffffff6, 0x6, 0x849b, 0x7, 0x36cd, 0x5, 0x4, 0x888, 0x2, 0x9, 0x2, 0xfff, 0xec3, 0x1, 0x7, 0x7, 0x4, 0x80, 0x101, 0x5, 0x3, 0x2, 0x10001, 0xfffffffa, 0xc89, 0xca53, 0x3, 0x2, 0x5, 0x5, 0x9, 0xd40, 0x0, 0x7, 0x6, 0x8, 0x58, 0x4, 0x10, 0xffffff00, 0x24c00, 0x1, 0xffff4f22, 0x7, 0x432e, 0xe, 0x2, 0x7, 0x1ff, 0x2, 0x9, 0x6, 0x8, 0x9, 0x3, 0x4, 0x40000004, 0x9, 0x1, 0xf, 0x4, 0x80000000, 0x5, 0x7, 0xfffffff9, 0x7, 0x4, 0x3f, 0x3, 0x5d23, 0x3, 0x9, 0x2a, 0xff9, 0x8, 0x9, 0xffe3, 0x5, 0x3, 0x50000000, 0x1, 0x4, 0x11, 0x4, 0x11, 0x1, 0x1, 0xe618, 0xd, 0x8cf9, 0x6, 0x6, 0x4, 0x2, 0x5, 0x81, 0x8, 0x10001, 0xe8, 0x5, 0x6, 0x7, 0x2, 0x9, 0x9, 0x0, 0x2, 0x800, 0x3, 0x1, 0x80000000, 0x1, 0x3, 0x7, 0x7fffffff, 0x2e, 0x2a0, 0x4, 0x3, 0x8, 0x7ff, 0xf3ad, 0x8, 0x8, 0x7, 0x5, 0x400, 0x58, 0x7f, 0x2, 0x401, 0x5, 0xce61, 0xb40, 0x4, 0xd, 0x9e1, 0x3, 0x777b379a, 0xffffff00, 0x7, 0xc, 0x8, 0x28, 0x6, 0x4f, 0x100, 0x9, 0x7, 0x6, 0x7f, 0x5, 0x9, 0x5, 0x24, 0x3, 0xb, 0x6, 0x1, 0x37, 0x4, 0x2, 0x1, 0x7, 0x9, 0x8, 0x1, 0xe3a]}]}}]}, 0x45c}}, 0x0) (async, rerun: 64) r4 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000980)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b0, 0xe8, 0x1c8, 0x1c8, 0x290, 0x378, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x200, 0x0, @loopback, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xde}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfe}}}, {{@ip={@multicast2, @local, 0xff, 0xffffffff, 'pimreg\x00', 'ip6erspan0\x00', {}, {0xff}, 0x32, 0x2, 0x48}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2a}}}, {{@ip={@broadcast, @broadcast, 0x3c1f00084daf9c0a, 0xffffffff, 'pim6reg0\x00', 'dvmrp1\x00', {0xff}, {0x101}, 0x62, 0x3, 0x1f}, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "03722f53329555cbf1c4cb9313a5bc155d175e3901afd36d28847eece9d9"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005e00000429bd7000fedbdf2500000000", @ANYRES32=r5, @ANYBLOB="03000200"], 0x1c}}, 0x4000) (async, rerun: 32) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 32) accept4(r7, 0x0, 0x0, 0x80000) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x1ff) 1.931551601s ago: executing program 3 (id=4679): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000002e000000000000005c000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb=0xffffff7f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@type_tag={0xe, 0x0, 0x0, 0x12, 0x5}, @ptr={0x3, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x5f, 0x51, 0x2e]}}, &(0x7f00000000c0)=""/137, 0x35, 0x89, 0x0, 0x9, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, r0, 0x4, 0x3, 0x4}, 0x50) 1.727138017s ago: executing program 4 (id=4680): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x25dfdbfe, {{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x80, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000500)="7cf13307000000000008000081001a", 0x0, 0xffedfff0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r5, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x8}}}}, [@NL80211_ATTR_KEY_SEQ={0xe, 0xa, "96dbbe5112803b4a0fdb"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f18367db2ab524304eab23fcbb"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c135fda928"}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x1000}, 0xc) 1.677390585s ago: executing program 3 (id=4681): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b1109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000001100), r0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000000)=ANY=[@ANYBLOB="e4010000", @ANYRES16=r3, @ANYBLOB="010004000000fddbdf251300000008000100", @ANYRESOCT=r0, @ANYRES32=r0], 0x1e4}, 0x1, 0x0, 0x0, 0x4000004}, 0x844) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 1.568119154s ago: executing program 0 (id=4682): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x40, 0x5, 0x5, 0x9, 0x2, 0x8, 0x0, 0xc6, 0x2, 0x80, 0x8, 0xa, 0x7, 0x3}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001680)={0x0, @in6={{0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7518}}, 0x3, 0x101, 0x400, 0x1000, 0x81, 0x3, 0x8}, &(0x7f0000001740)=0x9c) sendmmsg$inet_sctp(r0, &(0x7f0000001d00)=[{&(0x7f0000000040)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="d03da97ea227c0089a226c860cbcd6a6b2fd755dce7dc8aab84454bedc1f30e26ffc37b5bbb9b1ac1b64182207ae3e71f402eb561f96281b077c3202eb42da6d6f4b1f3de697a31b451825589fbb1fe61008c64b2733a80321e364f5168e1f8891880f685e5c57e540a032bab6930047ad887a9a8dfa6f1b13debe77b82b3d901713f8ca5229e099cf710e454c2ad3413f9554bdc21ae44655c18572f93e15d00db0c853c060e83df808ec9e63261dc469310e", 0xb3}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="6732bfd930b5", 0x6}, {&(0x7f0000001540)="dcbc68d4534884a382a0fb7b02f151457c37c7522c63845fe6f18d6f83650bf1da4b1a27f60d9b457296ff24f6243d509fdc54acfde759b3061e3fae9807d6d444c20e1373ebcf52", 0x48}, {&(0x7f00000015c0)="c8b556f04f7bd4d0af176b19daa567527bb35c7e3009535cee1e552a9ab55da3b00085aed09063fe636b833bd7057ee13c5e10b8", 0x34}], 0x5, &(0x7f0000001780)=[@dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @sndrcv={0x30, 0x84, 0x1, {0x14b, 0x6, 0xf, 0x6, 0x9, 0x4, 0xe86a, 0x1, r1}}], 0x50, 0x20040000}, {&(0x7f0000001800)=@in6={0xa, 0x4e22, 0x6, @loopback, 0x7}, 0x1c, &(0x7f0000001c00)=[{&(0x7f0000001840)="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", 0xfb}, {&(0x7f0000001940)="e60e99ab4879478cb972561a63fc7f12", 0x10}, {&(0x7f0000001980)}, {&(0x7f00000019c0)="2c48de27170717a06e217e173e2e88a51fc18ecade98481f62f4516a3210eb1eee05ca9909b67fbf5bb2883ea5d3b659e99bd200c0d86b2f6cf66ea4cf83dcd1", 0x40}, {&(0x7f0000001a00)="4be7e72867e28e68fd71fcea58aa27f28749bbbecbbe65c4d48cf4cea491645d2e0204a1d8b166a91e68b7eaba4795471d5cffd00fa162a0fbcca664770ded439322e2b92da382642fb7310f11dc87f3977668466ac0a99ed42a7eff72bc6bfa846624af9945fd14d8868d7c434e960c7c72cb76276c69709c5a2f619abeebdf0e0f1e7bbf8fe9b458a61f82b394314469e87cefea87747c2613937ee54ebf97b12ccd4a75349e6a7d95ca7a328e7db072ca51e37d7fb471bda66eb3e889043591d34a23eb1d754f3a0f534c4a4967", 0xcf}, {&(0x7f0000001b00)="b24a4260f704e5f8f6540219764dbab2f71be6da839b860028fe1d456949c1b0683c0ec2ba2fc9d80cf3d1d85ada6f8a96deb58a02f1601f08e2479c46f85cbd9bbd94df929ad7abe565ac642c29cd6794ca6b97851535c42fe0e21de4f1dbe66f34f0dc91258b47511e2181567bd36d6475b9e201bf8dd879d3580a08354d68ddc75f3dedec42da61442e2c8f8cec472eb3c0604231016e06590edf9bf22a568fbeaa2989c06470c521b40b3be9b8f1934f829ccd80b95d203bc92f827d5fc9da567ae8e69a67857b9df9ef2d", 0xcd}], 0x6, &(0x7f0000001c80)=[@sndrcv={0x30, 0x84, 0x1, {0xf28, 0x111, 0x4, 0xffff, 0x80000001, 0x6, 0x9, 0x6}}, @dstaddrv6={0x20, 0x84, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}], 0x70, 0x20000010}], 0x2, 0x0) 1.393284341s ago: executing program 0 (id=4683): socket$inet(0x2, 0x1, 0x0) (async) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x44, &(0x7f0000000140)=0x1, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/pid_for_children\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000300)={'veth1_vlan\x00', &(0x7f0000000240)=@ethtool_flash={0x33, 0x80000000, './file0\x00'}}) unshare(0x16000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004800) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xff7fffff000) r4 = gettid() write$cgroup_pid(r3, &(0x7f0000000340)=r4, 0x12) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x38, 0x1, 0x70bd26, 0x25dddbff, {0x5}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x8c0) (async) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x38, 0x1, 0x70bd26, 0x25dddbff, {0x5}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x8c0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x4000}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000001c0)={'xfrm0\x00', 0x400}) socket$inet_sctp(0x2, 0x1, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) (async) socket$kcm(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8b0b, &(0x7f0000000200)={'pimreg\x00', @random}) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002f00090027bd7000fddbdf250600000008000a00", @ANYRES32=0x0, @ANYBLOB="baa892e9d7e7d2eb5d85016c78587c6455c1d7a650fcfc1da43f03a073f6f100e4d4fd22e2077291586bafccdb5dbe353596f1e5dbc08d714d64ab604b8df678f070901a80492773285ba7fce2a0fe256123b89ccc32e1f1c19063da7270dd94aec000ddd179930200ea0a6a0638737307b068d6d53ead026be1ef04937ee81256b1bb1134bffdfebca147387484b8896a4656d8c87c63d54d5de24a476ecfe52d4e9989c05ee228a68db4610ec0b642fc4ed553e1a70e51195033aa95fecc29e66e6aefa9b9b4b952032a000000b38194d5925890ba10abb6674aa507a4b340bb181d3d4f8056911c93fee03ccb424047ee5a8783fd562b0b54f6b6a8f8cae66f752400cefa325f587615be081410ed0e2217cfc903b603754a00"/292], 0x1c}, 0x1, 0x0, 0x0, 0x44002}, 0x0) 1.299631572s ago: executing program 4 (id=4684): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x9, 0x5f, 0xc08, 0x3ff, 0xc3, 0x1, 0x62, 'syz1\x00'}) (async, rerun: 32) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000140)="0c03573afa64193f5c0c67f7ed0f08ef102566dce7ec5f66a648201426236ae476434d7c6d4dbb49b6af27b75412ff599713d2", 0x33}, {&(0x7f0000000180)="47b6b1bcf13967b3c4bf3cc68f653effb380625761263b1720c5cb1c081f2af91cfebdad5d8f59f17b8a1d71b9c27079e4fe363d15d9fd80591447d7dce56e707f13b3168cd1dbb94cbf2a21264246d1b563d39bab7e3e105e9956260704ea72f04250aa97c76a1683207d3de919bc0b5196b965553881bb5e792e93c42885cd11f181ac41811b073e5dcf5bc549aaa4181bdd03fe1d7da63aa4b13b67e45f868047a7dd0fae16b9536264269ed9fe79b1824b17e0d5d95fe641338a1eee0e4612e6cc974a1f8d80a731d91569", 0xcd}, {&(0x7f0000000500)="eb11946c3eeac60839553f9e6003a7c6fa8120c1cc9efcc39e37b1bce4396dd05c5d8b881233767b08e8d4faf922b5f13e172ba3252675cd4c3c79d7e7a894d0eb054e2b86e58662a4e723650cf1599026f93144176c144695c1e409dcf247c0", 0x60}, {&(0x7f0000000680)="396b0b2d92a081c10b34f3708c065b93255ae169ced3036d77380fdfb4a44fcdf0", 0x21}, {0x0}, {&(0x7f0000000840)="581f06a617594d1244e24b1ad08297c3a93ec8741db357cf2f47105e5a0830d4aa12743c45893332326216118c82631b2dd8ee154e7e9c12ab9ef8ea571f29a31fb97fc052ed5e49683e157e8ff4708c88924e4ff8a5076d28e610007b056699eeb30f42451b99257e4e19157baff11811710a05bbd87e7911c77ff0172fcd4e83bd2644d6c92acde5cdcfa70eefccc0d73b31c7458c7b26bf7372cc551e7b2aa542261c", 0xa4}], 0x6}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000d40)="f82a370b33b81ccf7e1c527ebda2", 0xe}], 0x1}}], 0x2, 0x40080) (async, rerun: 32) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000806d, 0x0, 0x0) 1.160224734s ago: executing program 2 (id=4685): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x6, 0x5, 0x0, 0x1, 0x4, 0x3, 0xc0, 0x6, 0x3, 0x4, 0x0, 0x0, 0x1, 0xd3}, 0xe) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x4}, &(0x7f0000000140)=0x8) 1.029506033s ago: executing program 3 (id=4686): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket(0x2d, 0x2, 0x0) connect$qrtr(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ZERO(r10, 0x0, 0x48f, &(0x7f0000000040)={0x6, @private=0xa010102, 0x4e23, 0x2, 'lc\x00', 0x10, 0xffff, 0x77}, 0x2c) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="340000001900010900000000fbdbdf25029058a618"], 0x34}}, 0x40810) close(r9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xdc0, &(0x7f0000002dc0)=ANY=[], 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=@newtfilter={0x4e3a345e825ed4c2, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x74, 0x2, [@TCA_MATCHALL_ACT={0x70, 0x2, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x66, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xffff0425}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x0, 0x9, 0x4e20}]}, {0x4, 0x6, "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"}, {0x50, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r13, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) 1.013795209s ago: executing program 1 (id=4687): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200008a0000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa10000000000000701000004ffffffb702000008000000b70300000002000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000520e0000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="0000000000000000009dc9000000", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000001600000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550901000000000095000000000000009f99010000000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x27}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001800dd8d0000000000000000020000000000000500000000060015000200000014001680100008800c00018006000100009a00"], 0x38}}, 0x0) ioctl$sock_proto_private(r3, 0x89ed, &(0x7f0000000600)="b2b01c1bf89d841aa9621f5c781d1129a6bd76fd6e4a1d0ab89ff617dcd631e0985f46f72f27a1523e93aa5c41b850d9ec3bd1a531339a3dc1e28f0a848dbd2f6eda7ff0e3fdb2546d527d9e84bd30eca43e3e367217204c9c7afff0f700abfe603a675def2db9497d2e74dea1c15f86d3b2d9a3b3d69597ded9b4c524cfee98053dbe3b2a0e21756af82ad34ffed3b3488696e4b5c4e9a0d71a8e6a80be9d29") r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f00000001c0)={0x0, 0x4}, 0x8) r6 = socket$netlink(0x10, 0x3, 0xb) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000008280), 0x0, 0x4) socket$inet(0x2, 0xa, 0x400) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x1f4, 0xe, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0015"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000280)={0x1, 0x3, 0xb}) accept4(r6, 0x0, 0x0, 0x800) 828.645009ms ago: executing program 0 (id=4688): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r0, 0x0, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004800)=[{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001180)="937ed53af62c83ae406275c8e57c8f3f7be606", 0x13}], 0x1, &(0x7f00000023c0)=[@assoc={0x18, 0x117, 0x4, 0x3}], 0x18, 0x840}], 0x1, 0x40) read(r1, &(0x7f00000006c0)=""/32, 0x20) (async) read(r1, &(0x7f00000006c0)=""/32, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xa8, r3, 0x100, 0x4, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x50, 0x8, 0x0, 0x1, [{0x4}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x204b105d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31fcc07f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48218c7a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62f51db7}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x45bf3c16e68e268e}, 0x3000c000) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xa8, r3, 0x100, 0x4, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x50, 0x8, 0x0, 0x1, [{0x4}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x204b105d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31fcc07f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48218c7a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62f51db7}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x45bf3c16e68e268e}, 0x3000c000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) (async) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x404d300}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r5, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0x20004844) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r4) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x810) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r7, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040050}, 0x4008080) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000080)=0x1000000, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000080)=0x1000000, 0x4) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r8, &(0x7f0000000040)={0x23, 0x0, 0x7, 0x81}, 0x10) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x14, &(0x7f0000000400)=@raw=[@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0x1, 0x2, 0x4, 0x18, 0xffffffffffffffff}, @alu={0x4, 0x1, 0x2, 0x3, 0x0, 0x2, 0xfffffffffffffffc}, @generic={0xfd, 0x0, 0x6, 0x4, 0xd}], &(0x7f00000004c0)='GPL\x00', 0xa3, 0x31, &(0x7f0000000500)=""/49, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x4, 0xe, 0x6, 0x4}, 0x10, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x5, 0x4, 0x1, 0x4}, {0x0, 0x5, 0x1, 0x8}, {0x1, 0x4, 0xe, 0x2}, {0x2, 0x2, 0x6, 0x2}, {0x0, 0x5, 0xa, 0x3}, {0x2, 0x2, 0xc, 0x5}, {0x5, 0x4, 0x1}, {0x3, 0x2, 0x8, 0x3}, {0x5, 0x5, 0x8, 0x7}], 0x10, 0xc}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000007c0)={r0, r9}) connect$phonet_pipe(r8, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r8, 0x89ed, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r10, &(0x7f0000000000), 0x2a979d) (async) write$cgroup_pid(r10, &(0x7f0000000000), 0x2a979d) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x25, &(0x7f0000001500)={0x0, @in6={{0xa, 0x4e21, 0x8000008, @empty, 0x28f9fed5}}, 0xfffe}, 0x90) write$cgroup_int(r10, 0x0, 0x0) 821.649833ms ago: executing program 4 (id=4689): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0x3, 0x10, 0x9, 0xf, 0x0, 0x4, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0xfffffffd, @remote, 0x7fffffff}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x40000000}, @sadb_address={0x5, 0x5, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1, 0x7ff}}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x78}}, 0x4000000) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x44}}, 0x40c0000) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, r3, 0x0, 0x20000000002) socket$inet_tcp(0x2, 0x1, 0x0) 724.635791ms ago: executing program 2 (id=4690): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x894a, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="64000000100098e8401f708e75552c54c803072c", @ANYRES32=0x0, @ANYBLOB="9980030004000000300012800e00010069703665727370616e0000001c00028014000700fc02000000000000000000000000000002001200140003006e696376663000"/76], 0x64}, 0x1, 0x0, 0x0, 0x40881}, 0x0) (async, rerun: 64) r2 = socket$kcm(0x1e, 0x1, 0x0) (rerun: 64) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) (async) recvmsg(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0xfeff, 0x4, 0x200, 0x2, 0x400, 0x9, 0xffff29a3, 0xffff7ea2, r4}, &(0x7f0000000040)=0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) (async, rerun: 64) r6 = socket$kcm(0xf, 0x3, 0x2) (rerun: 64) setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x2, 0x0, 0x0) (async) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xff], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3ff, 0xf}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x31d}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a0, 0xffffffff, 0xffffffff, 0x3a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00', {}, {}, 0x0, 0x8, 0x2, 0x21}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x2, 0x3}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x62, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x1, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000440)=""/87, &(0x7f00000003c0), &(0x7f00000003c0), 0x7a, 0xffffffffffffffff, 0x0, 0x7}, 0x38) (async) ioctl$OCFS2_IOC_MOVE_EXT(r5, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4}) (async) close(0x3) (async) syz_emit_ethernet(0x153, &(0x7f0000000680)={@multicast, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x7, 0x6, "804775", 0x11d, 0x6, 0x1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@dstopts={0x3c, 0x1e, '\x00', [@ra={0x5, 0x2, 0x5}, @generic={0x3, 0xec, "21b2a428ebf60e665188fb8bb1abdcac50cdaca3a2ca23c8ac90388f02c066ef05da96f5786f042d45cc76b298666d7d4af9954c97071284b4f8e722500a3a74e7c98fb05a8d4cd82ada1fd1da4bce47c579d53235fc5e55794b5849fa2959a930e8407abe9c749f6af6830ad314b9a15b68f1f959441395d3190671a98f4c00ce8a4d2bb1c61573dbf6a138d0985f7f58f8084fcaeecd35e9ae32bf7c65cb28e47717c53ed0820f554853c8fc46299356a711e654fc10deb8732ec1e2b0f9965ba3221168476fd1e15232a2b709df3d9dede8578c4c4a7fefb82d48229dfb8c0dac29d9ede0c813fb275e47"}]}], @payload_conn={{{0x1d, 0x0, 0x1, 0x1, 0x1, 0x6, 0x2, 0x2, 0x4, 0x0, 0x1, 0x8, 0x3, 0x0, 0x7, 0x1bb7, 0x4, 0x4e22, 0x4e22}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) (async, rerun: 32) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000001921000000000000", @ANYRES32, @ANYBLOB="0900000000000000009e7e27bb00"/23, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000500"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="060400000002000000070000200000000000000064c769a8215288e1092a4a9d5bc77a3c3e66", @ANYRES32=0x1, @ANYBLOB="920e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={0x0, 0x0, 0x4000}, 0x18) 471.947023ms ago: executing program 0 (id=4691): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x4a, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x44) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000cc0)=@filter={'filter\x00', 0x42, 0x4, 0x340, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, &(0x7f00000025c0), &(0x7f0000000600), 0x80, 0xffffffffffffffff, 0x0, 0x7}, 0x38) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0x3) r3 = socket(0x8, 0x800, 0xdf5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYRES8=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40050) r5 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x110000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x11) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0xfffffffd, 0x32}, 0x0, @in=@broadcast, 0x10000, 0x0, 0x1, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) 0s ago: executing program 0 (id=4692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x10c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0x5, 0x10}, {0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xdc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xd}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x8}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xb, [0xb, 0xb, 0x9, 0x5, 0xf, 0x9, 0xb, 0x8, 0x7, 0x1, 0xb, 0x10, 0xb, 0x4, 0xf, 0x6], 0x0, [0x8d, 0x2, 0xabb5, 0x6, 0x95, 0x100, 0x5, 0xffff, 0x6, 0x0, 0x6622, 0x8e24, 0x1, 0x50, 0x0, 0x80], [0x66, 0x8, 0x1, 0x2, 0x2, 0x0, 0xfffa, 0x2, 0x0, 0x1, 0xa6b, 0x5a, 0xffff, 0x3, 0x0, 0x9]}}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x5, 0xb, 0x4, 0x6, 0xe, 0x10, 0x10, 0xe, 0x5, 0x7, 0xc, 0xf, 0x9, 0x9, 0xd, 0xf], 0x1, [0xed32, 0x6, 0xfffd, 0xffca, 0x81, 0x5, 0x7, 0x5, 0xfffc, 0x100, 0x2, 0x1, 0x8001, 0x3ff, 0x1, 0x7], [0x0, 0x3, 0x101, 0x6, 0x7, 0x1000, 0x1, 0x8, 0xf0a, 0x2, 0x101, 0x7, 0x27, 0xa6d, 0x8001, 0xe]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x6}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40048d1}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x10c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0x5, 0x10}, {0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xdc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0xd}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x8}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xb, [0xb, 0xb, 0x9, 0x5, 0xf, 0x9, 0xb, 0x8, 0x7, 0x1, 0xb, 0x10, 0xb, 0x4, 0xf, 0x6], 0x0, [0x8d, 0x2, 0xabb5, 0x6, 0x95, 0x100, 0x5, 0xffff, 0x6, 0x0, 0x6622, 0x8e24, 0x1, 0x50, 0x0, 0x80], [0x66, 0x8, 0x1, 0x2, 0x2, 0x0, 0xfffa, 0x2, 0x0, 0x1, 0xa6b, 0x5a, 0xffff, 0x3, 0x0, 0x9]}}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x5, 0xb, 0x4, 0x6, 0xe, 0x10, 0x10, 0xe, 0x5, 0x7, 0xc, 0xf, 0x9, 0x9, 0xd, 0xf], 0x1, [0xed32, 0x6, 0xfffd, 0xffca, 0x81, 0x5, 0x7, 0x5, 0xfffc, 0x100, 0x2, 0x1, 0x8001, 0x3ff, 0x1, 0x7], [0x0, 0x3, 0x101, 0x6, 0x7, 0x1000, 0x1, 0x8, 0xf0a, 0x2, 0x101, 0x7, 0x27, 0xa6d, 0x8001, 0xe]}}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x6}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40048d1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) socket$kcm(0x11, 0x3, 0x0) (async) r6 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r7 = socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r9, 0xfffffffffffffdff, 0x170bd2c, 0x8003, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xb8, 0x2000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6008010}, 0x20008000) (async) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r9, 0xfffffffffffffdff, 0x170bd2c, 0x8003, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0xb8, 0x2000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6008010}, 0x20008000) close(r8) (async) close(r8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r11, &(0x7f0000000200)={0x2, @none={0x0, 0xffff}}, 0x14) kernel console output (not intermixed with test programs): an0, syncid = 0, id = 0 [ 451.595834][T19065] veth0_macvtap: entered promiscuous mode [ 451.633899][T19065] veth1_macvtap: entered promiscuous mode [ 451.644481][T19434] netlink: 'syz.0.3288': attribute type 5 has an invalid length. [ 451.706032][T19065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.754306][T19065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.781031][T19440] netlink: 'syz.2.3291': attribute type 21 has an invalid length. [ 451.804830][ T967] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.833487][ T967] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.851443][T19440] netlink: 'syz.2.3291': attribute type 4 has an invalid length. [ 451.861994][T19440] netlink: 'syz.2.3291': attribute type 3 has an invalid length. [ 451.991014][T19444] 8021q: adding VLAN 0 to HW filter on device bond2 [ 452.033053][ T967] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.055714][ T967] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.123452][ T29] audit: type=1800 audit(1783928797.159:12): pid=19425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3287" name="memory.events" dev="tmpfs" ino=349 res=0 errno=0 [ 452.300415][T19459] veth0: entered promiscuous mode [ 452.451314][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.471543][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.632673][T19476] bond12: entered promiscuous mode [ 452.652836][T19476] bond12: entered allmulticast mode [ 452.658281][T19464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.699244][ T6724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.709850][ T6724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.825774][T19480] __nla_validate_parse: 16 callbacks suppressed [ 452.825792][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3301'. [ 452.868806][T19480] netlink: 'syz.0.3301': attribute type 10 has an invalid length. [ 452.890003][T19480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3301'. [ 452.931916][T19480] geneve0: entered promiscuous mode [ 452.937374][T19480] geneve0: entered allmulticast mode [ 453.111044][T19495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3302'. [ 453.909769][T18709] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 453.926612][T18709] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 453.937806][T18709] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 453.948431][T18709] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 453.984548][T18709] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 454.202420][T19514] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 454.851063][T19549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3317'. [ 455.396710][T19563] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.559514][T19573] tipc: Started in network mode [ 455.577891][T19573] tipc: Node identity 967b522c7e64, cluster identity 4711 [ 455.606216][T19573] tipc: Enabled bearer , priority 0 [ 455.624752][T19578] C: renamed from veth1_to_team (while UP) [ 455.657318][T19578] netlink: 'syz.1.3322': attribute type 8 has an invalid length. [ 455.675650][T19578] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 455.754595][T19573] tipc: Resetting bearer [ 455.776727][T19576] syzkaller0: entered promiscuous mode [ 455.799025][T19576] syzkaller0: entered allmulticast mode [ 455.950514][T19563] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.011162][T19568] tipc: Resetting bearer [ 456.018856][ T5637] Bluetooth: hci4: command tx timeout [ 456.101674][T19568] tipc: Disabling bearer [ 456.214376][T19563] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.407741][T19563] netdevsim netdevsim3 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.432959][T19605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3325'. [ 456.920164][T15547] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.940166][T15547] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.007133][T15547] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.023673][T15547] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.111210][T19609] nbd4: detected capacity change from 0 to 63 [ 457.161519][ T5637] block nbd4: Receive control failed (result -32) [ 457.173521][T19511] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.180519][ T1622] block nbd4: Dead connection, failed to find a fallback [ 457.180720][ T1622] block nbd4: shutting down sockets [ 457.188709][T19511] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.189042][T19511] bridge_slave_0: entered allmulticast mode [ 457.190883][T19511] bridge_slave_0: entered promiscuous mode [ 457.197435][ T1622] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 457.205696][T19511] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.212749][ T1622] Buffer I/O error on dev nbd4, logical block 0, async page read [ 457.247447][ T1622] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 457.260991][ T1622] Buffer I/O error on dev nbd4, logical block 1, async page read [ 457.271928][ T1622] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 457.281293][ T1622] Buffer I/O error on dev nbd4, logical block 2, async page read [ 457.290827][ T1622] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 457.300871][ T1622] Buffer I/O error on dev nbd4, logical block 3, async page read [ 457.309723][ T1622] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 457.312115][T19511] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.321587][ T1622] Buffer I/O error on dev nbd4, logical block 0, async page read [ 457.335801][ T1622] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 457.349314][ T1622] Buffer I/O error on dev nbd4, logical block 1, async page read [ 457.357972][ T1622] Buffer I/O error on dev nbd4, logical block 2, async page read [ 457.366631][ T1622] Buffer I/O error on dev nbd4, logical block 3, async page read [ 457.376441][ T1622] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 457.387098][ T1622] Buffer I/O error on dev nbd4, logical block 0, async page read [ 457.395268][ T1622] Buffer I/O error on dev nbd4, logical block 1, async page read [ 457.403565][ T1622] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 457.413575][ T1622] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 457.426641][T19511] bridge_slave_1: entered allmulticast mode [ 457.426784][ T1622] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 457.444467][T18669] ldm_validate_partition_table(): Disk read failed. [ 457.463671][T18669] Dev nbd4: unable to read RDB block 0 [ 457.480842][T18669] nbd4: unable to read partition table [ 457.502635][T18669] ldm_validate_partition_table(): Disk read failed. [ 457.512326][T18669] Dev nbd4: unable to read RDB block 0 [ 457.520701][T18669] nbd4: unable to read partition table [ 457.520998][T19511] bridge_slave_1: entered promiscuous mode [ 457.533823][T19641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3330'. [ 457.875132][T19511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.901655][T19511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.049086][T19638] pim6reg1: entered promiscuous mode [ 458.054764][T19638] pim6reg1: entered allmulticast mode [ 458.109458][ T5637] Bluetooth: hci4: command tx timeout [ 458.269975][T19511] team0: Port device team_slave_0 added [ 458.283904][T19511] team0: Port device team_slave_1 added [ 458.428696][T19511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.435909][T19511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.486218][T19511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.532676][T19511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.546189][T19511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.573821][T19511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.650787][T19511] hsr_slave_0: entered promiscuous mode [ 458.657727][T19511] hsr_slave_1: entered promiscuous mode [ 458.670716][T19511] debugfs: 'hsr0' already exists in 'hsr' [ 458.676620][T19511] Cannot create hsr debugfs directory [ 458.815960][ T5637] block nbd6: Receive control failed (result -32) [ 459.008162][T19685] netlink: 'syz.4.3341': attribute type 1 has an invalid length. [ 459.163646][T19690] bond2: entered promiscuous mode [ 459.555751][T19684] bond2: left promiscuous mode [ 459.664089][T19683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3340'. [ 459.812191][T19683] sit0: entered promiscuous mode [ 459.821653][T19683] netlink: 'syz.3.3340': attribute type 1 has an invalid length. [ 459.839578][T19683] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3340'. [ 460.006237][T19702] ip6erspan1: entered allmulticast mode [ 460.180035][ T5637] Bluetooth: hci4: command tx timeout [ 460.363012][T19718] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3349'. [ 460.476022][T19720] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3350'. [ 460.695570][T19720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3350'. [ 460.917571][T19737] IPv6: sit1: Disabled Multicast RS [ 460.945922][T19742] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 460.967709][T19511] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 460.991832][T19737] netlink: 'syz.0.3353': attribute type 1 has an invalid length. [ 461.003076][T19737] netlink: 'syz.0.3353': attribute type 2 has an invalid length. [ 461.007885][T19511] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 461.034764][T19746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.063074][T19511] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 461.086033][T19511] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 461.096058][T19511] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 461.116323][T19511] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.129888][T19511] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 461.157879][T19511] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 461.281432][T19511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.313186][T19511] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.333101][T15545] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.340318][T15545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.356216][T15545] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.363378][T15545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.430721][T19759] bond3: entered promiscuous mode [ 461.437102][T19759] bond3: entered allmulticast mode [ 461.443704][T19759] 8021q: adding VLAN 0 to HW filter on device bond3 [ 461.489746][T19606] Set syz1 is full, maxelem 65536 reached [ 461.716087][T19771] x_tables: duplicate entry at hook 1 [ 462.150028][T19786] openvswitch: netlink: Flow actions attr not present in new flow. [ 462.260071][ T5637] Bluetooth: hci4: command tx timeout [ 462.452159][T19511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.484704][T19806] netlink: 'syz.1.3370': attribute type 10 has an invalid length. [ 462.513712][T19806] team0: Port device dummy0 added [ 462.564473][T19808] netlink: 'syz.0.3371': attribute type 23 has an invalid length. [ 462.634422][T19511] veth0_vlan: entered promiscuous mode [ 462.655416][T19811] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 462.704631][T19511] veth1_vlan: entered promiscuous mode [ 462.789548][T19511] veth0_macvtap: entered promiscuous mode [ 462.804260][T19511] veth1_macvtap: entered promiscuous mode [ 462.846586][T19511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.882504][T19511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.429386][ T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.489860][ T62] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.524372][ T62] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.612361][ T62] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.723123][T15540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.766840][T15540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.982420][T19847] netlink: 'syz.0.3380': attribute type 13 has an invalid length. [ 464.007466][T19846] netlink: 'syz.0.3380': attribute type 13 has an invalid length. [ 464.032125][ T6724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.053603][ T6724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.077385][T19850] netlink: 'syz.3.3381': attribute type 13 has an invalid length. [ 464.226498][T19857] netlink: 'syz.0.3383': attribute type 3 has an invalid length. [ 464.259945][T19857] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3383'. [ 464.757251][T19874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3387'. [ 468.953594][T19889] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3389'. [ 469.161661][T19896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3392'. [ 469.185296][T19896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3392'. [ 469.210750][T19903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3393'. [ 469.224945][T19904] bridge_slave_1: left allmulticast mode [ 469.249065][T19904] bridge_slave_1: left promiscuous mode [ 469.256422][T19904] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.273745][T19904] bridge_slave_0: left allmulticast mode [ 469.285006][T19896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3392'. [ 469.295656][T19896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3392'. [ 469.296705][T19904] bridge_slave_0: left promiscuous mode [ 469.313838][T19906] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3393'. [ 469.327948][T19907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3392'. [ 469.337241][T19906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3393'. [ 469.355656][T19904] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.818809][T19921] __nla_validate_parse: 2 callbacks suppressed [ 469.818830][T19921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3395'. [ 469.973417][T19926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3397'. [ 470.006339][T19921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.114312][T19921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.233295][T19932] bridge0: port 1(vlan2) entered blocking state [ 470.250111][T19932] bridge0: port 1(vlan2) entered disabled state [ 470.267207][T19932] vlan2: entered allmulticast mode [ 470.278611][T19932] bridge0: entered allmulticast mode [ 470.324249][T19932] vlan2: left allmulticast mode [ 470.338780][T19932] bridge0: left allmulticast mode [ 470.376828][T19935] Bluetooth: MGMT ver 1.23 [ 470.751791][T19958] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3403'. [ 470.826307][T19960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3404'. [ 471.072739][T19977] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3408'. [ 471.271119][T19982] syzkaller0: entered promiscuous mode [ 471.290813][T19982] syzkaller0: entered allmulticast mode [ 471.586918][T20014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3411'. [ 471.926825][T20027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3416'. [ 471.980982][T20027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3416'. [ 472.420646][ T5637] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 472.428912][T18709] Bluetooth: hci2: command 0x0401 tx timeout [ 472.458086][T20041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3420'. [ 472.475846][T20041] netlink: 'syz.1.3420': attribute type 10 has an invalid length. [ 473.165444][T20050] netlink: 'syz.2.3419': attribute type 1 has an invalid length. [ 473.830474][T20084] x_tables: duplicate underflow at hook 3 [ 474.048247][T20089] netlink: 'syz.0.3432': attribute type 1 has an invalid length. [ 474.122315][T20089] 8021q: adding VLAN 0 to HW filter on device bond4 [ 474.174357][T20089] 8021q: adding VLAN 0 to HW filter on device bond4 [ 474.183530][T20089] bond4: (slave ip6gre0): The slave device specified does not support setting the MAC address [ 474.203449][T20089] bond4: (slave ip6gre0): Error -95 calling set_mac_address [ 474.340911][T20109] netlink: 'syz.0.3436': attribute type 15 has an invalid length. [ 474.351313][T20109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3436'. [ 474.523829][T20116] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 474.626859][T20122] syzkaller1: entered promiscuous mode [ 474.633379][T20122] syzkaller1: entered allmulticast mode [ 474.824154][T20136] netlink: 'syz.0.3444': attribute type 1 has an invalid length. [ 474.886510][T20136] bond5: entered promiscuous mode [ 474.909003][T20136] 8021q: adding VLAN 0 to HW filter on device bond5 [ 474.939598][T20138] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 474.981947][T20143] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3446'. [ 474.996327][T20138] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 475.020264][T20138] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 475.037886][T20138] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 475.159852][T20141] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 475.186379][T20141] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 475.207606][T20141] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 475.375442][T20161] netlink: 'syz.3.3450': attribute type 2 has an invalid length. [ 475.400477][T20161] netlink: 'syz.3.3450': attribute type 1 has an invalid length. [ 475.422286][T20161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3450'. [ 475.449517][T20161] nbd: illegal input index -120127480 [ 475.523098][T20167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3452'. [ 475.560553][T20173] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3454'. [ 475.954698][T15540] nci: nci_ntf_packet: unknown ntf opcode 0x227 [ 476.017912][T20201] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3462'. [ 476.044388][T20198] netlink: 340 bytes leftover after parsing attributes in process `syz.1.3461'. [ 476.457945][T20183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3457'. [ 476.512420][T20197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3457'. [ 476.534496][T20183] team0: entered promiscuous mode [ 476.561455][T20183] team0: entered allmulticast mode [ 476.574339][T20183] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.610226][T20197] team1: entered promiscuous mode [ 476.618839][T20197] team1: entered allmulticast mode [ 476.628976][T20197] 8021q: adding VLAN 0 to HW filter on device team1 [ 476.663024][T20185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 477.016159][T20236] bond6: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 477.120791][T20236] bond6 (unregistering): Released all slaves [ 477.452313][T20261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3479'. [ 477.487312][T20263] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3477'. [ 478.477581][T20300] netlink: 'syz.0.3487': attribute type 1 has an invalid length. [ 478.700398][T20300] 8021q: adding VLAN 0 to HW filter on device bond6 [ 478.744748][T20307] vlan4: entered allmulticast mode [ 478.758001][T20307] bond6: entered allmulticast mode [ 478.863714][T20317] openvswitch: netlink: Unknown nsh attribute 0 [ 479.235976][T20329] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 479.450493][T20334] batadv0: entered promiscuous mode [ 479.488683][T20334] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 479.690452][T20348] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 480.007689][T20362] syzkaller0: entered promiscuous mode [ 480.029305][T20362] syzkaller0: entered allmulticast mode [ 480.092037][T20367] __nla_validate_parse: 67 callbacks suppressed [ 480.092058][T20367] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3505'. [ 480.154823][T20365] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 480.171909][T20365] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 480.172335][T20369] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3505'. [ 480.234120][T20365] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 480.246075][T20365] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 480.296470][T20365] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 480.316828][T20365] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 480.323396][T20374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3509'. [ 480.342675][T20374] xt_TCPMSS: Only works on TCP SYN packets [ 480.367355][T20365] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 480.377103][T20365] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 480.379422][T20375] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3507'. [ 480.444460][T20375] ip6erspan0: entered allmulticast mode [ 480.461286][T20365] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 480.475384][T20365] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 480.699310][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802aa96c00: rx timeout, send abort [ 480.711276][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802aa96c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 480.943404][T20400] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3513'. [ 484.220535][T20412] batadv0: entered promiscuous mode [ 484.233681][T20412] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 484.241995][T20412] batadv0: left promiscuous mode [ 484.314165][T20416] bridge_slave_0: left allmulticast mode [ 484.323517][T20416] bridge_slave_0: left promiscuous mode [ 484.343106][T20416] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.363763][T20416] bridge_slave_1: left allmulticast mode [ 484.370275][T20416] bridge_slave_1: left promiscuous mode [ 484.376417][T20416] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.396211][T20416] bond0: (slave bond_slave_0): Releasing backup interface [ 484.415603][T20416] bond0: (slave bond_slave_1): Releasing backup interface [ 484.442877][T20416] team0: Port device team_slave_0 removed [ 484.455217][T20416] team0: Port device team_slave_1 removed [ 484.463354][T20416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.471033][T20416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.483255][T20416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.491670][T20416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.501746][T20416] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 484.525553][T20434] lo: Caught tx_queue_len zero misconfig [ 484.576416][T20447] ip6tnl2: entered promiscuous mode [ 484.717689][T20450] netlink: 'syz.0.3522': attribute type 3 has an invalid length. [ 484.811226][T20464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3525'. [ 484.852957][T20464] batadv0: entered promiscuous mode [ 484.862193][T20464] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 485.000417][T20473] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3528'. [ 485.327334][T20495] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3536'. [ 485.651821][T20497] bond0: Caught tx_queue_len zero misconfig [ 486.322278][T20547] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3547'. [ 486.347755][T20549] pimreg: entered allmulticast mode [ 486.383321][T20545] pimreg: left allmulticast mode [ 486.750389][T20566] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3553'. [ 486.919106][T20577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3556'. [ 486.955487][T20577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3556'. [ 486.978196][T20580] netlink: 'syz.4.3557': attribute type 14 has an invalid length. [ 487.000040][T20580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3557'. [ 487.079939][T20574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.097745][T20574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3555'. [ 487.122613][T20574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3555'. [ 487.154909][T20580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3557'. [ 487.167123][T20574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3555'. [ 487.186278][T15545] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.205858][T20580] netlink: 'syz.4.3557': attribute type 14 has an invalid length. [ 487.228818][T15545] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.259824][T15545] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.277209][T20586] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 487.292952][ T62] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.336573][T20590] netlink: 'syz.3.3559': attribute type 13 has an invalid length. [ 487.483116][T20595] syzkaller0: entered promiscuous mode [ 487.500447][T20595] syzkaller0: entered allmulticast mode [ 487.690735][T20606] ÿ: renamed from bond_slave_0 (while UP) [ 488.594385][T20641] syzkaller1: entered promiscuous mode [ 488.608226][T20641] syzkaller1: entered allmulticast mode [ 488.976277][T20657] netlink: 'syz.3.3577': attribute type 322 has an invalid length. [ 489.929714][ T9352] IPVS: starting estimator thread 0... [ 490.028554][T20722] IPVS: using max 31 ests per chain, 74400 per kthread [ 490.095645][T20699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.331985][T15547] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.369199][T15547] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.394571][T20738] hsr0: entered allmulticast mode [ 490.414528][T20738] hsr_slave_0: entered allmulticast mode [ 490.431617][T20738] hsr_slave_1: entered allmulticast mode [ 490.445514][T15547] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.458918][T20737] hsr0: left allmulticast mode [ 490.465136][T20737] hsr_slave_0: left allmulticast mode [ 490.476231][T20737] hsr_slave_1: left allmulticast mode [ 490.500206][T15547] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.710215][T20762] __nla_validate_parse: 14 callbacks suppressed [ 490.710238][T20762] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3604'. [ 490.715712][T20765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3605'. [ 490.760059][T20769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3606'. [ 490.792982][T20770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3607'. [ 490.843057][T20772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3607'. [ 490.877612][T20769] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.090859][T20783] pim6reg1: entered promiscuous mode [ 491.096460][T20783] pim6reg1: entered allmulticast mode [ 491.182000][T20791] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3612'. [ 491.682651][T20810] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3618'. [ 491.707853][T20802] netlink: 'syz.2.3616': attribute type 1 has an invalid length. [ 491.726511][T20802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3616'. [ 491.879119][T20815] netlink: 1148 bytes leftover after parsing attributes in process `syz.3.3619'. [ 491.972835][T20817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3619'. [ 492.016061][T20819] gretap0: entered promiscuous mode [ 492.056480][T20819] ip6t_srh: unknown srh match flags 4000 [ 492.323764][T20836] lo: Caught tx_queue_len zero misconfig [ 492.524021][T20857] netlink: 'syz.1.3633': attribute type 1 has an invalid length. [ 493.458050][T20903] IPv6: NLM_F_CREATE should be specified when creating new route [ 493.726333][T20913] Cannot find add_set index 0 as target [ 493.982722][T20929] netlink: 'syz.3.3651': attribute type 1 has an invalid length. [ 494.027646][T20929] bond1: entered promiscuous mode [ 494.034579][T20929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 494.051810][T20932] netlink: 'syz.2.3652': attribute type 10 has an invalid length. [ 494.074789][T20932] openvswitch: netlink: Message has 4 unknown bytes. [ 494.088030][T20929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 494.095408][T20929] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 494.106074][T20929] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 494.119113][T20929] bond1: (slave gre1): making interface the new active one [ 494.129345][T20929] gre1: entered promiscuous mode [ 494.135900][T20929] bond1: (slave gre1): Enslaving as an active interface with an up link [ 494.213665][T20938] syzkaller1: entered promiscuous mode [ 494.239664][T20938] syzkaller1: entered allmulticast mode [ 494.508077][T20963] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 494.559742][T20965] netlink: 'syz.3.3660': attribute type 1 has an invalid length. [ 494.640267][T20965] veth3: entered allmulticast mode [ 494.650639][T20965] bond2: (slave veth3): Enslaving as an active interface with a down link [ 494.666256][T20965] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 494.700581][T20965] bond3: option min_links: invalid value (18446744073709551612) [ 494.708721][T20965] bond3: option min_links: allowed values 0 - 2147483647 [ 494.718057][T20971] netlink: 'syz.4.3659': attribute type 1 has an invalid length. [ 494.749720][T20965] bond3 (unregistering): Released all slaves [ 494.830789][T20978] 8021q: adding VLAN 0 to HW filter on device bond2 [ 494.878866][T20971] 8021q: adding VLAN 0 to HW filter on device bond4 [ 494.921792][T20980] macvlan2: entered promiscuous mode [ 494.935477][T20980] macvlan2: entered allmulticast mode [ 494.958595][T20980] bond2: entered promiscuous mode [ 494.985388][T20980] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 495.019334][T20980] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 495.082588][T20980] bond2: left promiscuous mode [ 495.203808][T20965] syzkaller1: entered promiscuous mode [ 495.218307][T20965] syzkaller1: entered allmulticast mode [ 495.611461][T21007] gre2: entered allmulticast mode [ 495.617923][T21001] sctp: [Deprecated]: syz.4.3667 (pid 21001) Use of int in max_burst socket option. [ 495.617923][T21001] Use struct sctp_assoc_value instead [ 496.486724][T21055] netlink: 'syz.1.3683': attribute type 1 has an invalid length. [ 496.525160][T21055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 496.537561][T21055] __nla_validate_parse: 13 callbacks suppressed [ 496.537582][T21055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3683'. [ 496.562776][T21055] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 496.573401][T21055] bond1: (slave batadv1): making interface the new active one [ 496.584366][T21055] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 496.672669][T21062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3685'. [ 496.831512][T21067] block nbd7: server does not support multiple connections per device. [ 496.850458][T21067] block nbd7: shutting down sockets [ 496.884455][T21076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3688'. [ 496.929022][T21080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3689'. [ 496.989236][T21080] 8021q: adding VLAN 0 to HW filter on device bond3 [ 497.007000][T21084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3689'. [ 497.023703][T21088] xt_TPROXY: Can be used only with -p tcp or -p udp [ 497.086153][T21083] ip6gre1: entered promiscuous mode [ 497.097181][T21083] ip6gre1: entered allmulticast mode [ 497.104804][ T967] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 497.113512][ T967] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 497.143323][ T5729] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 497.152428][T21093] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 497.153977][T21094] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 497.206767][T21096] bond4: option fail_over_mac: invalid value (127) [ 497.215525][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 497.225013][T21096] bond4 (unregistering): Released all slaves [ 497.443481][T21115] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3697'. [ 497.766148][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 497.868212][T21141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3704'. [ 498.246955][T21160] netlink: 'syz.2.3706': attribute type 4 has an invalid length. [ 498.448358][T21187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3713'. [ 498.449041][T21188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3713'. [ 498.517677][T21187] 8021q: adding VLAN 0 to HW filter on device bond5 [ 498.548948][T21188] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 498.569198][T21194] netlink: 'syz.2.3714': attribute type 1 has an invalid length. [ 498.648076][T21194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.659892][T21201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.694416][T21205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3717'. [ 498.870897][T21212] vlan3: entered promiscuous mode [ 498.880028][T21212] bridge0: entered promiscuous mode [ 499.014493][T21212] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.169195][T21212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.183039][T21212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.315822][T21212] vlan3: left promiscuous mode [ 499.321674][T21212] bridge0: left promiscuous mode [ 499.341555][ T967] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.369052][ T967] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.432973][ T967] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.468532][ T967] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.838187][T21259] syzkaller0: entered promiscuous mode [ 499.845603][T21259] syzkaller0: entered allmulticast mode [ 499.857347][T21261] Cannot find del_set index 1 as target [ 499.902693][T21261] xt_hashlimit: size too large, truncated to 1048576 [ 499.981252][T21259] vlan1: entered promiscuous mode [ 500.190248][T21276] xt_CT: You must specify a L4 protocol and not use inversions on it [ 500.899433][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 501.065418][ T5756] IPVS: starting estimator thread 0... [ 501.168572][T21331] IPVS: using max 33 ests per chain, 79200 per kthread [ 501.414025][T21338] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 501.541968][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.593848][T21361] __nla_validate_parse: 9 callbacks suppressed [ 501.593867][T21361] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3761'. [ 501.637339][T21364] netlink: 'syz.3.3760': attribute type 9 has an invalid length. [ 501.689093][T21365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3761'. [ 502.064764][T21375] netlink: 'syz.2.3763': attribute type 1 has an invalid length. [ 502.276345][T21375] 8021q: adding VLAN 0 to HW filter on device bond2 [ 502.317180][T21378] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 502.360414][T21380] macvlan2: entered promiscuous mode [ 502.365821][T21380] macvlan2: entered allmulticast mode [ 502.372535][T21380] bond2: entered promiscuous mode [ 502.379844][T21380] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 502.414273][T21380] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 502.446564][T21380] bond2: left promiscuous mode [ 502.654652][T21412] netlink: 'syz.0.3767': attribute type 4 has an invalid length. [ 502.711192][T21389] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3767'. [ 502.815677][T21389] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3767'. [ 502.868207][T21417] tipc: Enabling of bearer rejected, failed to enable media [ 502.982080][T21422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3774'. [ 503.030758][T21424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3775'. [ 503.179949][T21432] bridge0: port 3(vlan4) entered blocking state [ 503.203478][T21432] bridge0: port 3(vlan4) entered disabled state [ 503.231879][T21432] vlan4: entered allmulticast mode [ 503.244694][T21424] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3775'. [ 503.248559][T21432] geneve0: entered allmulticast mode [ 503.269817][T21432] vlan4: entered promiscuous mode [ 503.310911][T21432] geneve0: entered promiscuous mode [ 503.364090][T21428] tc_dump_action: action bad kind [ 507.066438][T21458] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 507.075752][T21458] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode [ 507.083692][T21458] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 507.279989][T21482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3788'. [ 507.312603][T21478] netlink: 'syz.0.3786': attribute type 1 has an invalid length. [ 507.369574][T21486] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3789'. [ 507.522397][T21486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3789'. [ 507.540312][T21487] bond7: (slave gretap1): making interface the new active one [ 507.552982][T21487] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 507.568942][T21498] macvlan2: entered promiscuous mode [ 507.574637][T21498] macvlan2: entered allmulticast mode [ 507.582736][T21498] bond7: entered promiscuous mode [ 507.587949][T21498] gretap1: entered promiscuous mode [ 507.594629][T21498] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 507.602463][T21498] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 507.619730][T21498] bond7: left promiscuous mode [ 507.624527][T21498] gretap1: left promiscuous mode [ 507.871747][T21506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3793'. [ 507.934239][T21513] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3796'. [ 508.033308][T21513] vlan0: entered promiscuous mode [ 508.238921][T21532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3801'. [ 508.313822][T21532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3801'. [ 508.461907][T21546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3807'. [ 508.578708][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 508.856663][T21574] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 509.006525][T21578] bond6: Removing last ns target with arp_interval on [ 509.048672][T21585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3816'. [ 509.129331][T21582] xt_CT: No such helper "netbios-ns" [ 509.152333][T21593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3815'. [ 509.743045][T21621] veth0: entered promiscuous mode [ 509.750719][T21630] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 509.769870][T21629] dvmrp8: entered allmulticast mode [ 509.775834][T21620] veth0: left promiscuous mode [ 509.914401][T21643] netlink: 'syz.3.3834': attribute type 1 has an invalid length. [ 509.940634][T21637] team0: entered promiscuous mode [ 509.945855][T21637] team_slave_0: entered promiscuous mode [ 509.952056][T21637] team_slave_1: entered promiscuous mode [ 509.958052][T21637] team0: entered allmulticast mode [ 509.963676][T21637] team_slave_0: entered allmulticast mode [ 509.969688][T21637] team_slave_1: entered allmulticast mode [ 509.988176][T21643] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 510.197267][T21660] netlink: 'syz.3.3836': attribute type 11 has an invalid length. [ 510.285729][T21663] syzkaller0: entered promiscuous mode [ 510.292995][T21663] syzkaller0: entered allmulticast mode [ 510.301701][T21656] tipc: Started in network mode [ 510.311757][T21656] tipc: Node identity 8a1eef6a0576, cluster identity 4711 [ 510.320193][T21656] tipc: Enabled bearer , priority 0 [ 510.329657][T21663] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 510.393871][T21656] tipc: Resetting bearer [ 510.422567][T21655] tipc: Resetting bearer [ 510.494155][T21655] tipc: Disabling bearer [ 510.561794][T21671] geneve2: entered promiscuous mode [ 510.572784][ T62] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 40913 - 0 [ 510.584844][ T62] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 40913 - 0 [ 510.598943][ T62] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 40913 - 0 [ 510.616245][ T62] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 40913 - 0 [ 510.672472][T21689] syz.4.3845: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 510.689153][T21689] CPU: 1 UID: 0 PID: 21689 Comm: syz.4.3845 Not tainted syzkaller #0 PREEMPT(full) [ 510.689183][T21689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 510.689202][T21689] Call Trace: [ 510.689210][T21689] [ 510.689217][T21689] dump_stack_lvl+0xe8/0x150 [ 510.689248][T21689] warn_alloc+0x24c/0x270 [ 510.689270][T21689] ? stack_depot_save_flags+0x33/0x800 [ 510.689291][T21689] ? __pfx_warn_alloc+0x10/0x10 [ 510.689313][T21689] ? kasan_save_track+0x3e/0x80 [ 510.689332][T21689] ? __kasan_kmalloc+0x93/0xb0 [ 510.689353][T21689] ? xsk_setsockopt+0x52a/0x960 [ 510.689371][T21689] ? do_sock_setsockopt+0x17c/0x1b0 [ 510.689392][T21689] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 510.689413][T21689] ? do_syscall_64+0x174/0x580 [ 510.689435][T21689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.689459][T21689] __vmalloc_node_range_noprof+0x12c/0x1730 [ 510.689502][T21689] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 510.689532][T21689] ? __kasan_kmalloc+0x93/0xb0 [ 510.689554][T21689] ? __kmalloc_cache_noprof+0x32d/0x660 [ 510.689575][T21689] ? __kmalloc_cache_noprof+0x150/0x660 [ 510.689598][T21689] vmalloc_user_noprof+0xad/0xe0 [ 510.689617][T21689] ? xskq_create+0xbf/0x170 [ 510.689639][T21689] xskq_create+0xbf/0x170 [ 510.689661][T21689] xsk_init_queue+0x8a/0xe0 [ 510.689683][T21689] xsk_setsockopt+0x52a/0x960 [ 510.689702][T21689] ? __fget_files+0x2a/0x420 [ 510.689723][T21689] ? __pfx_xsk_setsockopt+0x10/0x10 [ 510.689743][T21689] ? __pfx_aa_sk_perm+0x10/0x10 [ 510.689769][T21689] ? aa_sock_opt_perm+0xff/0x1a0 [ 510.689787][T21689] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 510.689802][T21689] ? __pfx_xsk_setsockopt+0x10/0x10 [ 510.689826][T21689] do_sock_setsockopt+0x17c/0x1b0 [ 510.689853][T21689] __x64_sys_setsockopt+0x13d/0x1b0 [ 510.689878][T21689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.689895][T21689] do_syscall_64+0x174/0x580 [ 510.689917][T21689] ? trace_irq_disable+0x3b/0x140 [ 510.689937][T21689] ? clear_bhb_loop+0x40/0x90 [ 510.689957][T21689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.689973][T21689] RIP: 0033:0x7fa78839de59 [ 510.689993][T21689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.690008][T21689] RSP: 002b:00007fa78931e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 510.690029][T21689] RAX: ffffffffffffffda RBX: 00007fa788625fa0 RCX: 00007fa78839de59 [ 510.690042][T21689] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 510.690052][T21689] RBP: 00007fa788433e6f R08: 0000000000000004 R09: 0000000000000000 [ 510.690062][T21689] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.690072][T21689] R13: 00007fa788626038 R14: 00007fa788625fa0 R15: 00007ffdf2e87d88 [ 510.690099][T21689] [ 510.690381][T21689] Mem-Info: [ 510.726310][T21691] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 510.731391][T21689] active_anon:9556 inactive_anon:0 isolated_anon:0 [ 510.731391][T21689] active_file:18 inactive_file:43236 isolated_file:0 [ 510.731391][T21689] unevictable:768 dirty:136 writeback:0 [ 510.731391][T21689] slab_reclaimable:12212 slab_unreclaimable:118527 [ 510.731391][T21689] mapped:29550 shmem:1423 pagetables:1298 [ 510.731391][T21689] sec_pagetables:0 bounce:0 [ 510.731391][T21689] kernel_misc_reclaimable:0 [ 510.731391][T21689] free:1272523 free_pcp:10943 free_cma:0 [ 510.856573][T21697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.858826][T21689] Node 0 active_anon:38424kB inactive_anon:0kB active_file:72kB inactive_file:172740kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118200kB dirty:544kB writeback:0kB shmem:4156kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16644kB pagetables:5248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 511.072984][T21689] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 511.106330][T21689] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 511.140578][T21689] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 511.146683][T21689] Node 0 DMA32 free:1126500kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42232kB inactive_anon:0kB active_file:72kB inactive_file:172748kB unevictable:1536kB writepending:584kB zspages:0kB present:3129332kB managed:2548764kB mlocked:0kB bounce:0kB free_pcp:43164kB local_pcp:23176kB free_cma:0kB [ 511.192232][T21689] lowmem_reserve[]: 0 0 0 0 0 [ 511.216519][T21689] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:268kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 511.282374][T21689] lowmem_reserve[]: 0 0 0 0 0 [ 511.287338][T21689] Node 1 Normal free:3943240kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 511.305854][T21706] syzkaller0: entered promiscuous mode [ 511.324769][T21706] syzkaller0: entered allmulticast mode [ 511.332503][T21689] lowmem_reserve[]: 0 0 0 0 0 [ 511.338356][T21689] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 511.362680][T21689] Node 0 DMA32: 483*4kB (UM) 137*8kB (U) 164*16kB (UME) 609*32kB (UME) 113*64kB (UM) 52*128kB (UME) 22*256kB (UM) 10*512kB (UM) 4*1024kB (UME) 3*2048kB (UE) 258*4096kB (UM) = 1116788kB [ 511.381777][T21689] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 511.410684][T21689] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 7*16kB (UM) 4*32kB (UM) 7*64kB (UM) 5*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3943240kB [ 511.470467][T21689] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 511.480871][T21689] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 511.492202][T21689] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 511.523603][ T62] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.528711][T21689] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 511.546965][ T62] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.576611][ T62] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.604829][ T62] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.615979][T21689] 47517 total pagecache pages [ 511.644201][T21715] netlink: 'syz.3.3853': attribute type 4 has an invalid length. [ 511.645142][T21713] tipc: Enabled bearer , priority 0 [ 511.662474][T21689] 0 pages in swap cache [ 511.671912][T21689] Free swap = 124996kB [ 511.680929][T21689] Total swap = 124996kB [ 511.689777][T21689] 2097051 pages RAM [ 511.695261][T21689] 0 pages HighMem/MovableOnly [ 511.702152][T21713] syzkaller0: entered promiscuous mode [ 511.707838][T21689] 428178 pages reserved [ 511.712984][T21713] syzkaller0: entered allmulticast mode [ 511.718751][T21689] 0 pages cma reserved [ 511.778909][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 511.868876][T21713] tipc: Resetting bearer [ 511.940897][T21713] tipc: Disabling bearer [ 512.083048][T21739] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 512.125592][T21739] bond3 (unregistering): Released all slaves [ 512.335537][T21758] xt_recent: Unsupported userspace flags (000000c5) [ 512.433611][T21762] __nla_validate_parse: 22 callbacks suppressed [ 512.433632][T21762] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3866'. [ 512.474136][T21764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3868'. [ 512.580299][T21764] 8021q: adding VLAN 0 to HW filter on device bond4 [ 512.678689][T21776] netlink: 'syz.0.3872': attribute type 5 has an invalid length. [ 512.800351][T21778] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3873'. [ 513.038360][T21789] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3877'. [ 513.062284][T21789] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3877'. [ 513.196948][T21795] syzkaller0: entered promiscuous mode [ 513.202846][T21795] syzkaller0: entered allmulticast mode [ 513.420603][T21805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.443873][T21802] xt_CT: No such helper "syz0" [ 513.853535][T21822] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3885'. [ 514.106453][T21832] netlink: 'syz.0.3888': attribute type 8 has an invalid length. [ 514.132420][T21832] netlink: 'syz.0.3888': attribute type 10 has an invalid length. [ 514.141197][T21832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3888'. [ 514.158391][T21834] netlink: 'syz.4.3889': attribute type 10 has an invalid length. [ 514.335553][T21842] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3893'. [ 514.335936][T21847] netlink: 16170 bytes leftover after parsing attributes in process `syz.0.3894'. [ 514.367403][T21842] lo speed is unknown, defaulting to 1000 [ 514.386051][T21842] lo speed is unknown, defaulting to 1000 [ 514.416357][T21842] lo speed is unknown, defaulting to 1000 [ 514.495059][T21842] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 514.526894][T21842] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 514.545305][T21842] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 514.557439][T21853] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3895'. [ 514.565270][T21842] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 514.596503][T21842] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 514.893354][T21842] lo speed is unknown, defaulting to 1000 [ 514.938961][T21842] lo speed is unknown, defaulting to 1000 [ 514.981574][T21842] lo speed is unknown, defaulting to 1000 [ 515.000565][T21842] lo speed is unknown, defaulting to 1000 [ 515.024648][T21842] lo speed is unknown, defaulting to 1000 [ 515.040718][T21842] lo speed is unknown, defaulting to 1000 [ 515.064910][T21842] lo speed is unknown, defaulting to 1000 [ 515.074904][T21842] lo speed is unknown, defaulting to 1000 [ 515.083015][T21842] lo speed is unknown, defaulting to 1000 [ 515.349635][T21879] syzkaller1: entered promiscuous mode [ 515.358538][T21879] syzkaller1: entered allmulticast mode [ 515.689797][T21905] 8021q: adding VLAN 0 to HW filter on device bond5 [ 515.798132][T21917] tunl0: Caught tx_queue_len zero misconfig [ 515.979857][T21928] FAULT_INJECTION: forcing a failure. [ 515.979857][T21928] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 516.031728][T21928] CPU: 1 UID: 0 PID: 21928 Comm: syz.3.3917 Not tainted syzkaller #0 PREEMPT(full) [ 516.031756][T21928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 516.031767][T21928] Call Trace: [ 516.031775][T21928] [ 516.031783][T21928] dump_stack_lvl+0xe8/0x150 [ 516.031816][T21928] should_fail_ex+0x40c/0x560 [ 516.031843][T21928] _copy_from_user+0x2d/0xb0 [ 516.031871][T21928] __copy_msghdr+0x390/0x590 [ 516.031904][T21928] ___sys_sendmsg+0x213/0x360 [ 516.031931][T21928] ? __lock_acquire+0x683/0x2cf0 [ 516.031960][T21928] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.032032][T21928] ? __fget_files+0x2a/0x420 [ 516.032055][T21928] ? __fget_files+0x3a2/0x420 [ 516.032089][T21928] __x64_sys_sendmsg+0x1b1/0x290 [ 516.032120][T21928] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 516.032167][T21928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.032188][T21928] do_syscall_64+0x174/0x580 [ 516.032214][T21928] ? trace_irq_disable+0x3b/0x140 [ 516.032238][T21928] ? clear_bhb_loop+0x40/0x90 [ 516.032261][T21928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.032280][T21928] RIP: 0033:0x7f2bccb9de59 [ 516.032298][T21928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.032314][T21928] RSP: 002b:00007f2bcd99b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.032334][T21928] RAX: ffffffffffffffda RBX: 00007f2bcce25fa0 RCX: 00007f2bccb9de59 [ 516.032347][T21928] RDX: 0000000004000880 RSI: 0000200000002900 RDI: 0000000000000007 [ 516.032360][T21928] RBP: 00007f2bcd99b090 R08: 0000000000000000 R09: 0000000000000000 [ 516.032372][T21928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.032383][T21928] R13: 00007f2bcce26038 R14: 00007f2bcce25fa0 R15: 00007fffbfc1c2a8 [ 516.032414][T21928] [ 518.360349][T21978] __nla_validate_parse: 5 callbacks suppressed [ 518.360367][T21978] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3929'. [ 518.378144][T21978] bond0 (unregistering): (slave 45ÿ): Releasing backup interface [ 518.387857][T21978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.397550][T21978] bond0 (unregistering): Released all slaves [ 519.225726][T21934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 519.329054][T21985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3931'. [ 519.706742][T21996] vlan2: entered promiscuous mode [ 519.724461][T21996] bridge0: entered promiscuous mode [ 520.065714][T22029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3943'. [ 522.668625][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 523.407080][T22025] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3942'. [ 523.566879][T22035] lo speed is unknown, defaulting to 1000 [ 523.705578][T22052] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 523.714854][T22052] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 523.744229][T22052] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 523.773227][T22066] netlink: 'syz.1.3951': attribute type 1 has an invalid length. [ 523.879893][T22069] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3952'. [ 524.531991][T22093] netlink: 320 bytes leftover after parsing attributes in process `syz.0.3960'. [ 524.851191][T22098] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3962'. [ 524.861109][T22098] netlink: 'syz.4.3962': attribute type 1 has an invalid length. [ 525.787040][T22115] netlink: 'syz.1.3965': attribute type 75 has an invalid length. [ 527.139676][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 527.874536][T22098] geneve2: entered promiscuous mode [ 527.880255][T22114] netlink: 766 bytes leftover after parsing attributes in process `syz.1.3965'. [ 528.324360][T22143] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3976'. [ 528.326589][T22131] netlink: 'syz.4.3972': attribute type 1 has an invalid length. [ 529.066370][T22182] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3985'. [ 529.113478][T22183] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3985'. [ 530.171474][T22222] netlink: 'syz.0.3996': attribute type 1 has an invalid length. [ 530.242948][T22223] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3996'. [ 530.307006][T22225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3997'. [ 530.344836][T22222] bond9: entered promiscuous mode [ 530.361343][T22222] 8021q: adding VLAN 0 to HW filter on device bond9 [ 530.384054][T22223] bond9: entered allmulticast mode [ 530.472063][T22222] bond9: (slave bridge5): making interface the new active one [ 530.494283][T22222] bridge5: entered promiscuous mode [ 530.509521][T22222] bridge5: entered allmulticast mode [ 530.533134][T22222] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 530.782340][T22232] syzkaller0: entered promiscuous mode [ 530.806976][T22232] syzkaller0: entered allmulticast mode [ 530.963586][T22257] netlink: 'syz.0.4001': attribute type 3 has an invalid length. [ 534.640055][T22285] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4006'. [ 534.666474][T22276] can: request_module (can-proto-0) failed. [ 535.356988][T22332] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4019'. [ 535.463932][T22337] netlink: 'syz.3.4021': attribute type 61 has an invalid length. [ 535.577552][T22344] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4020'. [ 535.596440][T22339] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4020'. [ 535.610966][T22339] tipc: Enabled bearer , priority 0 [ 535.625619][T22339] syzkaller0: entered promiscuous mode [ 535.631747][T22339] syzkaller0: entered allmulticast mode [ 536.008005][T22350] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 536.066591][T22338] tipc: Resetting bearer [ 536.250804][T22338] tipc: Disabling bearer [ 536.355489][T22361] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 536.384028][T22358] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 536.443514][T22367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4027'. [ 536.483285][T22367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.490182][T22371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4028'. [ 536.501295][T22367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.517289][T22375] syz_tun: entered allmulticast mode [ 536.543002][T22375] syz_tun (unregistering): left allmulticast mode [ 536.565364][T22371] vlan3: entered promiscuous mode [ 536.683201][T22387] ksmbd: Unknown IPC event: 1, ignore. [ 536.690225][T22387] netlink: 'syz.4.4032': attribute type 12 has an invalid length. [ 536.833670][T22391] (: renamed from bridge_slave_0 [ 536.903412][T22397] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4036'. [ 536.950636][T22397] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4036'. [ 537.113328][T22409] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4042'. [ 537.133623][T22409] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.262808][T22421] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4044'. [ 537.330600][T22425] team0: Port device dummy0 removed [ 537.344820][T22425] bond0: (slave bond_slave_0): Releasing backup interface [ 537.354416][T22425] bond0: (slave bond_slave_1): Releasing backup interface [ 537.366018][T22425] team0: Port device team_slave_0 removed [ 537.374815][T22425] team0: Port device team_slave_1 removed [ 537.385858][T22425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.395921][T22425] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 537.547381][T22425] team0: Port device xfrm0 added [ 538.223076][T22481] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 539.079383][T22533] lo speed is unknown, defaulting to 1000 [ 539.083390][T22534] nbd: socks must be embedded in a SOCK_ITEM attr [ 539.099449][T22532] netlink: 'syz.2.4077': attribute type 3 has an invalid length. [ 539.111449][T22534] batadv_slave_1: entered promiscuous mode [ 539.297564][T22270] udevd[22270]: inotify_add_watch(7, /dev/nbd7, 10) failed: No such file or directory [ 539.977554][T22533] batadv_slave_1: left promiscuous mode [ 540.305001][T22608] __nla_validate_parse: 136 callbacks suppressed [ 540.305021][T22608] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4098'. [ 540.327978][T22600] "syz.3.4097" (22600) uses obsolete ecb(arc4) skcipher [ 540.344830][T22611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4099'. [ 540.361146][T22611] nbd: couldn't find a device at index 65546 [ 540.482380][T22619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4102'. [ 540.492235][T22620] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4098'. [ 540.924899][T22637] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4105'. [ 541.070090][T22637] tap0: tun_chr_ioctl cmd 1074025677 [ 541.084176][T22637] tap0: linktype set to 804 [ 541.861461][T22659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4111'. [ 542.173058][T22677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4115'. [ 542.861051][T22677] IPVS: Error joining to the multicast group [ 542.891648][T15545] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.915172][T15545] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.944298][T15545] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.972605][T15545] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.041072][T22687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4116'. [ 543.077056][T22694] syzkaller0: entered promiscuous mode [ 543.090177][T22694] syzkaller0: entered allmulticast mode [ 543.347977][T22707] ip6tnl0: Caught tx_queue_len zero misconfig [ 543.581397][T22723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4133'. [ 543.635409][T22728] Cannot find set identified by id 0 to match [ 543.829345][T22740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4138'. [ 544.124330][T22758] syzkaller0: entered promiscuous mode [ 544.130237][T22758] syzkaller0: entered allmulticast mode [ 544.232145][T22769] xt_hashlimit: size too large, truncated to 1048576 [ 544.252470][T22770] netlink: 'syz.2.4145': attribute type 7 has an invalid length. [ 544.543646][T22783] syzkaller1: entered promiscuous mode [ 544.558870][T22783] syzkaller1: entered allmulticast mode [ 544.677669][T22791] netlink: 'syz.0.4153': attribute type 12 has an invalid length. [ 544.742582][T22792] netlink: 'syz.0.4153': attribute type 1 has an invalid length. [ 544.768689][T22795] netlink: 'syz.0.4153': attribute type 1 has an invalid length. [ 544.862518][T22801] netlink: 'syz.2.4156': attribute type 1 has an invalid length. [ 544.880330][T22801] netlink: 'syz.2.4156': attribute type 2 has an invalid length. [ 545.188547][T22818] x_tables: duplicate underflow at hook 1 [ 545.337625][ T5637] block nbd8: Receive control failed (result -32) [ 545.352997][T18709] block nbd8: Receive control failed (result -32) [ 545.634910][T22833] __nla_validate_parse: 4 callbacks suppressed [ 545.634931][T22833] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4165'. [ 545.661606][T22836] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4166'. [ 545.691911][T22836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4166'. [ 546.272883][T22854] netlink: 'syz.1.4172': attribute type 1 has an invalid length. [ 546.322319][T22854] 8021q: adding VLAN 0 to HW filter on device bond2 [ 546.365500][T22854] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 546.466946][T22854] xt_hashlimit: size too large, truncated to 1048576 [ 546.591326][T22864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4176'. [ 546.604820][T22866] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4177'. [ 546.624387][T22864] netlink: 'syz.2.4176': attribute type 30 has an invalid length. [ 546.933211][T22878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4182'. [ 547.051607][T22878] 8021q: adding VLAN 0 to HW filter on device bond7 [ 547.126471][T22877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4181'. [ 547.159926][T22877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4181'. [ 547.587986][T22912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4191'. [ 548.019042][T22937] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 548.040955][T22935] syzkaller0: entered promiscuous mode [ 548.075388][T22935] syzkaller0: entered allmulticast mode [ 548.130420][T22943] netlink: del zone limit has 4 unknown bytes [ 548.237634][T22952] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4206'. [ 548.566351][T22978] netlink: 'syz.4.4212': attribute type 30 has an invalid length. [ 548.765620][T22994] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 548.948846][T23000] xt_hashlimit: max too large, truncated to 1048576 [ 549.324216][T23016] syzkaller1: entered promiscuous mode [ 549.346025][T23016] syzkaller1: entered allmulticast mode [ 549.374818][T23019] lo speed is unknown, defaulting to 1000 [ 550.029872][T23050] netlink: 'syz.0.4228': attribute type 2 has an invalid length. [ 550.116568][T23055] syzkaller0: entered promiscuous mode [ 550.135860][T23055] syzkaller0: entered allmulticast mode [ 550.147856][ T29] audit: type=1804 audit(1783928895.189:13): pid=23057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4229" name="/newroot/178/cgroup.controllers" dev="tmpfs" ino=937 res=1 errno=0 [ 550.211155][ T29] audit: type=1800 audit(1783928895.189:14): pid=23057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4229" name="cgroup.controllers" dev="tmpfs" ino=937 res=0 errno=0 [ 550.456746][T23073] netlink: 'syz.2.4233': attribute type 1 has an invalid length. [ 550.554728][T23073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.590913][ T29] audit: type=1804 audit(1783928895.639:15): pid=23080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4234" name="/newroot/185/cgroup.controllers" dev="tmpfs" ino=971 res=1 errno=0 [ 550.613860][ T29] audit: type=1800 audit(1783928895.659:16): pid=23080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4234" name="cgroup.controllers" dev="tmpfs" ino=971 res=0 errno=0 [ 550.637225][T23077] bond0: entered allmulticast mode [ 550.699202][T23073] bond0: (slave ip6gretap1): making interface the new active one [ 550.725342][T23073] ip6gretap1: entered allmulticast mode [ 550.729303][T23083] netlink: 'syz.1.4234': attribute type 1 has an invalid length. [ 550.740567][T23083] __nla_validate_parse: 9 callbacks suppressed [ 550.740583][T23083] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4234'. [ 550.778614][T23073] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 550.818719][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 550.837435][T23082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4235'. [ 550.988743][T23093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4236'. [ 551.043521][T23092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4237'. [ 551.243811][T23101] bond0: entered promiscuous mode [ 551.271563][T23101] bond0: left promiscuous mode [ 551.346866][T23103] syzkaller0: entered promiscuous mode [ 551.373358][T23103] syzkaller0: entered allmulticast mode [ 551.435826][T23103] tipc: Enabled bearer , priority 0 [ 551.469085][T23103] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4240'. [ 551.503041][T23102] tipc: Resetting bearer [ 551.558223][T23102] tipc: Disabling bearer [ 551.631038][T23123] netlink: zone id is out of range [ 551.642766][T23123] netlink: zone id is out of range [ 551.654167][T23123] netlink: zone id is out of range [ 551.666352][T23123] netlink: zone id is out of range [ 551.682586][T23123] netlink: zone id is out of range [ 551.725540][T23123] netlink: zone id is out of range [ 551.743903][T23123] netlink: zone id is out of range [ 551.767391][T23123] netlink: zone id is out of range [ 552.296873][T23117] mac80211_hwsim hwsim32 wlan0: left allmulticast mode [ 552.498593][T23117] veth3: left allmulticast mode [ 552.511943][T23117] gre2: left allmulticast mode [ 552.705804][ T967] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.728662][ T967] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 40913 - 0 [ 552.747894][ T967] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.773261][ T967] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 40913 - 0 [ 552.812615][ T5722] lo speed is unknown, defaulting to 1000 [ 552.819901][ T967] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.835128][ T5722] syz2: Port: 1 Link ACTIVE [ 552.841597][ T967] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 40913 - 0 [ 552.850878][ T967] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.860091][ T967] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 40913 - 0 [ 552.903688][T23159] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4253'. [ 553.049418][T23175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4257'. [ 553.181513][T23180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4259'. [ 553.223717][T23184] af_packet: tpacket_rcv: packet too big, clamped from 100 to 4294967272. macoff=96 [ 553.654552][T23201] IPVS: set_ctl: invalid protocol: 47 172.30.0.4:20001 [ 553.683942][T23200] IPVS: set_ctl: invalid protocol: 47 172.30.0.4:20001 [ 554.242137][T23231] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.453816][T23255] dvmrp0: entered allmulticast mode [ 554.464345][T23250] lo speed is unknown, defaulting to 1000 [ 554.474634][ T29] audit: type=1804 audit(1783928899.519:17): pid=23258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4276" name="/newroot/232/memory.events" dev="tmpfs" ino=1202 res=1 errno=0 [ 554.493367][T23254] syzkaller1: entered promiscuous mode [ 554.506129][T23254] syzkaller1: entered allmulticast mode [ 554.525674][ T29] audit: type=1800 audit(1783928899.519:18): pid=23258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4276" name="memory.events" dev="tmpfs" ino=1202 res=0 errno=0 [ 554.552578][ T29] audit: type=1804 audit(1783928899.519:19): pid=23258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4276" name="/newroot/232/memory.events" dev="tmpfs" ino=1202 res=1 errno=0 [ 554.805056][T23231] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.902249][T23288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4283'. [ 554.954259][T23288] xt_TCPMSS: Only works on TCP SYN packets [ 555.103437][T23231] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.261394][T23302] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4284'. [ 555.409867][T23231] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.476549][T23304] net_ratelimit: 19 callbacks suppressed [ 555.476569][T23304] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 555.771741][T23324] netlink: 'syz.3.4290': attribute type 1 has an invalid length. [ 555.886521][ T62] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.924098][T23320] bond8: (slave gretap2): making interface the new active one [ 555.937316][T23320] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 555.979550][T15545] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.990701][T23333] __nla_validate_parse: 1 callbacks suppressed [ 555.990719][T23333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4293'. [ 556.009859][T15545] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.089226][T15540] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.103633][T23338] netlink: 'syz.3.4294': attribute type 1 has an invalid length. [ 556.221858][T23338] 8021q: adding VLAN 0 to HW filter on device bond9 [ 556.287203][T23338] syz_tun: entered allmulticast mode [ 556.324935][T23338] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4294'. [ 556.353628][T23338] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4294'. [ 556.389712][T23337] syz_tun: left allmulticast mode [ 556.593660][T23366] netlink: 'syz.0.4301': attribute type 4 has an invalid length. [ 556.629542][T23366] netlink: 'syz.0.4301': attribute type 4 has an invalid length. [ 556.720055][T23369] lo speed is unknown, defaulting to 1000 [ 556.761734][T23374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.898609][T23381] netlink: 'syz.3.4306': attribute type 4 has an invalid length. [ 556.956472][T23385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4306'. [ 557.137302][T23388] lo speed is unknown, defaulting to 1000 [ 557.193170][T23393] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4308'. [ 557.260706][T23400] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4311'. [ 557.303704][T23404] veth0: entered promiscuous mode [ 557.314019][T23404] netlink: 'syz.4.4312': attribute type 1 has an invalid length. [ 557.336510][T23404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4312'. [ 557.364995][T23406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4311'. [ 557.422367][T23409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4312'. [ 557.933851][T23431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.954766][T23431] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.978289][T23431] batadv0: left promiscuous mode [ 557.988368][T23431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.060638][T23431] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 558.071693][T23431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 558.087451][T23431] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 558.716697][T23481] sctp: [Deprecated]: syz.3.4326 (pid 23481) Use of int in max_burst socket option. [ 558.716697][T23481] Use struct sctp_assoc_value instead [ 558.804652][T23486] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4328'. [ 558.972897][T23495] xt_TCPMSS: Only works on TCP SYN packets [ 559.057873][T23495] tipc: Enabled bearer , priority 0 [ 559.081512][T23495] syzkaller0: entered promiscuous mode [ 559.096549][T23495] syzkaller0: entered allmulticast mode [ 559.147236][T23495] tipc: Resetting bearer [ 559.172555][T23505] veth0_macvtap: Caught tx_queue_len zero misconfig [ 559.288034][T23490] tipc: Resetting bearer [ 559.346811][T23490] tipc: Disabling bearer [ 559.631305][T23528] ip6tnl1: entered allmulticast mode [ 559.904015][T23543] netlink: 'syz.2.4340': attribute type 16 has an invalid length. [ 560.240477][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 560.269085][ T9352] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 560.280743][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 560.479122][ T9352] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 560.998756][T23596] __nla_validate_parse: 3 callbacks suppressed [ 560.998776][T23596] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4356'. [ 561.028831][T23596] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4356'. [ 561.060337][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 561.086187][T23591] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 561.102741][T23591] bond10 (unregistering): Released all slaves [ 561.407928][T23606] netlink: 'syz.2.4358': attribute type 8 has an invalid length. [ 561.421346][T23606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4358'. [ 561.524562][T23606] netlink: 'syz.2.4358': attribute type 8 has an invalid length. [ 561.555782][T15547] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.582783][T23602] lo speed is unknown, defaulting to 1000 [ 561.583435][T23606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4358'. [ 561.591046][T15547] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.634833][ T29] audit: type=1800 audit(1783928906.679:20): pid=23623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4364" name=63747820706F696E746572206F666673657420353336383732393630206973206E6F7420616C6C6F7765640A70726F6365737365642035313220696E736E7320286C696D6974203130303030303029206D61785F7374617465735F7065725F696E736E203420746F74616C5F737461746573203134207065616B5F737461746573203134206D61726B5F7265616420300A dev="tmpfs" ino=1113 res=0 errno=0 [ 561.653010][T15547] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.745099][T23624] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4363'. [ 561.756373][T15547] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.300057][T23642] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 562.300057][T23642] Please contact the netfilter-devel mailing list or update your nftables rules. [ 562.366774][T23645] syzkaller0: entered promiscuous mode [ 562.376100][T23645] syzkaller0: entered allmulticast mode [ 562.423293][T23649] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 562.598063][T23656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4372'. [ 562.983578][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.287515][T23667] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4375'. [ 563.796218][T23680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4378'. [ 564.626354][T23718] syzkaller1: entered promiscuous mode [ 564.642779][T23718] syzkaller1: entered allmulticast mode [ 564.738962][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 564.910700][T23727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4390'. [ 565.462995][T23757] netlink: 'syz.2.4397': attribute type 1 has an invalid length. [ 565.645546][T23771] nftables ruleset with unbound set [ 565.756079][T23757] 8021q: adding VLAN 0 to HW filter on device bond3 [ 565.815001][T23752] veth7: entered allmulticast mode [ 565.852486][T23752] bond3: (slave veth7): Enslaving as an active interface with a down link [ 565.899485][T23765] macvlan2: entered promiscuous mode [ 565.905772][T23765] macvlan2: entered allmulticast mode [ 565.914687][T23765] bond3: entered promiscuous mode [ 565.927143][T23765] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 565.942170][T23765] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 565.960981][T23765] bond3: left promiscuous mode [ 566.090253][T23789] xt_hl: Unknown TTL match mode: 237 [ 566.449101][T23807] tipc: Started in network mode [ 566.467765][T23807] tipc: Node identity ac14140f, cluster identity 4711 [ 566.484852][T23807] tipc: New replicast peer: 255.255.255.255 [ 566.502789][T23807] tipc: Enabled bearer , priority 10 [ 566.518790][T23810] tipc: Enabling of bearer rejected, already enabled [ 566.558919][T23813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4410'. [ 566.755251][T23821] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 566.788806][T23821] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 567.081814][T23827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 567.485003][T23848] netlink: 'syz.3.4418': attribute type 10 has an invalid length. [ 567.485135][T23846] netlink: 'syz.3.4418': attribute type 10 has an invalid length. [ 567.535561][T23853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4420'. [ 567.558008][T23848] vlan0: left promiscuous mode [ 567.582361][T23853] netlink: 'syz.2.4420': attribute type 10 has an invalid length. [ 567.619389][T23853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4420'. [ 567.628631][ T24] tipc: Node number set to 2886997007 [ 567.754768][T23858] netlink: 'syz.0.4421': attribute type 32 has an invalid length. [ 567.789126][T23858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4421'. [ 568.002234][T23869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4424'. [ 568.241699][T23858] bond10: Setting coupled_control to off (0) [ 569.070639][T23889] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4430'. [ 569.810966][T23908] netlink: 'syz.3.4434': attribute type 10 has an invalid length. [ 570.165222][T23917] lo speed is unknown, defaulting to 1000 [ 570.509392][T23931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.816402][T23937] syzkaller0: entered promiscuous mode [ 570.862236][T23937] syzkaller0: entered allmulticast mode [ 571.020939][T23938] 8021q: adding VLAN 0 to HW filter on device bond3 [ 571.028288][T23938] bridge0: port 1(bond3) entered blocking state [ 571.035628][T23938] bridge0: port 1(bond3) entered disabled state [ 571.042894][T23938] bond3: entered allmulticast mode [ 571.051199][T23938] bond3: entered promiscuous mode [ 571.350964][T23952] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4444'. [ 571.503252][T23958] netlink: 'syz.3.4445': attribute type 2 has an invalid length. [ 571.599614][T23961] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4447'. [ 571.626087][T23963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4446'. [ 571.644435][T23961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4447'. [ 571.968202][T23961] block nbd9: shutting down sockets [ 572.131580][T23974] tipc: Started in network mode [ 572.160024][T23974] tipc: Node identity 96c357731e03, cluster identity 4711 [ 572.194764][T23974] tipc: Enabled bearer , priority 0 [ 572.219772][T23978] syzkaller0: entered promiscuous mode [ 572.246838][T23978] syzkaller0: entered allmulticast mode [ 572.384391][T23974] tipc: Resetting bearer [ 572.413630][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.424131][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.479653][T23973] tipc: Resetting bearer [ 572.570591][T23973] tipc: Disabling bearer [ 572.623507][T23996] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4455'. [ 572.744135][T24000] gretap0: left promiscuous mode [ 572.824565][T24000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.859897][T24000] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.902975][T24000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.925910][T24000] wireguard: wg0: Could not create IPv4 socket [ 572.944102][T24000] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 573.496540][T24018] netlink: 'syz.1.4462': attribute type 5 has an invalid length. [ 573.858676][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 573.885086][T24031] netlink: 'syz.3.4466': attribute type 2 has an invalid length. [ 574.125021][T24034] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 574.173262][T24034] netlink: 'syz.0.4467': attribute type 1 has an invalid length. [ 574.896195][T24079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4473'. [ 577.386554][T24105] IPv6: NLM_F_CREATE should be specified when creating new route [ 577.404174][T24105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 577.407608][T24101] syzkaller0: entered promiscuous mode [ 577.412269][T24105] IPv6: NLM_F_CREATE should be set when creating new route [ 577.418043][T24101] syzkaller0: entered allmulticast mode [ 577.425806][T24105] IPv6: NLM_F_CREATE should be set when creating new route [ 577.439298][T24105] IPv6: NLM_F_CREATE should be set when creating new route [ 577.468860][T24111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4481'. [ 577.496336][T24111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4481'. [ 577.506673][T24100] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4479'. [ 577.508906][T24101] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4479'. [ 578.095141][T24145] syzkaller1: entered promiscuous mode [ 578.102145][T24145] syzkaller1: entered allmulticast mode [ 578.575906][T24155] lo speed is unknown, defaulting to 1000 [ 578.616467][T24156] lo speed is unknown, defaulting to 1000 [ 580.250991][T24222] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 580.315280][T24230] batman_adv: batadv0: Adding interface: dummy0 [ 580.328907][T24230] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.387291][T24230] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 580.565563][T24246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4508'. [ 580.661503][T24248] netlink: 'syz.3.4508': attribute type 7 has an invalid length. [ 580.694527][T24248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4508'. [ 580.781146][T24255] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4514'. [ 581.215894][T24275] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4521'. [ 581.243768][T24272] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4520'. [ 581.277429][T24272] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4520'. [ 582.222975][T24306] vlan2: entered promiscuous mode [ 582.235463][T24306] gretap0: entered promiscuous mode [ 582.362056][T24314] smc: net device wlan0 applied user defined pnetid SYZ0 [ 582.528924][T24320] netlink: 'syz.4.4529': attribute type 1 has an invalid length. [ 582.587218][T24320] __nla_validate_parse: 2 callbacks suppressed [ 582.587249][T24320] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4529'. [ 582.634652][T24325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4531'. [ 582.657011][T24320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4529'. [ 582.663611][T24325] netlink: 'syz.0.4531': attribute type 1 has an invalid length. [ 582.950697][T24336] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4535'. [ 582.987406][T24338] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 582.999465][T24336] unsupported nlmsg_type 40 [ 583.251665][T24347] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4537'. [ 583.662173][T24366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4540'. [ 583.779621][T24373] xt_hashlimit: size too large, truncated to 1048576 [ 583.944420][T24378] gretap0: entered promiscuous mode [ 583.996655][T24378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.031515][T24378] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.048216][T24378] batman_adv: batadv0: Interface activated: dummy0 [ 584.056571][T24378] batadv0: mtu less than device minimum [ 584.067875][T24378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.083264][T24378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.097470][T24378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.110363][T24378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.124340][T24378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.138139][T24378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.152103][T24378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.165927][T24378] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 584.262075][T24378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.472085][T24378] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 584.483358][T24378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 584.524285][T24386] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 584.559305][T24391] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 585.156523][T24422] netlink: 'syz.0.4553': attribute type 1 has an invalid length. [ 585.247069][T24430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4557'. [ 585.296460][T24437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4558'. [ 585.314777][ T12] net_ratelimit: 17 callbacks suppressed [ 585.314832][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 585.338728][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 585.391293][T24422] 8021q: adding VLAN 0 to HW filter on device bond12 [ 585.447125][T24425] team0: Device ipvlan2 failed to register rx_handler [ 585.490283][T24443] netlink: 'syz.2.4561': attribute type 1 has an invalid length. [ 585.499941][T24429] bond12: entered allmulticast mode [ 585.537085][T24437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4558'. [ 585.626853][T24448] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4561'. [ 585.680422][T24443] 8021q: adding VLAN 0 to HW filter on device bond4 [ 585.735916][T24445] vlan6: entered promiscuous mode [ 585.741794][T24445] bond4: entered promiscuous mode [ 585.747911][T24445] vlan6: entered allmulticast mode [ 585.753885][T24445] bond4: entered allmulticast mode [ 585.778100][T24453] netlink: 'syz.1.4563': attribute type 4 has an invalid length. [ 585.796257][T24448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.852525][T24448] bond4: (slave batadv0): making interface the new active one [ 585.863417][T24448] batadv0: entered promiscuous mode [ 585.869990][T24448] batadv0: entered allmulticast mode [ 585.879168][T24463] netlink: 'syz.1.4563': attribute type 4 has an invalid length. [ 585.890649][T24448] bond4: (slave batadv0): Enslaving as an active interface with an up link [ 585.909264][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 585.924070][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 586.007842][ T24] lo speed is unknown, defaulting to 1000 [ 586.058340][ T7973] lo speed is unknown, defaulting to 1000 [ 586.261531][T24477] netlink: 'syz.3.4570': attribute type 1 has an invalid length. [ 586.364236][T24477] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 586.458845][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 586.483676][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 586.702592][T24500] bridge0: entered allmulticast mode [ 586.715577][T24493] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 587.051987][T24522] nbd: nbd2 already in use [ 587.070663][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 587.076669][T24522] block nbd2: NBD_DISCONNECT [ 587.085153][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 587.119341][T24522] block nbd2: Send disconnect failed -32 [ 587.139051][T24522] block nbd2: shutting down sockets [ 587.360020][T24529] netlink: 'syz.0.4581': attribute type 4 has an invalid length. [ 587.411438][T24529] .`: renamed from bond0 (while UP) [ 587.622406][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 589.188793][T24573] __nla_validate_parse: 6 callbacks suppressed [ 589.188828][T24573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4588'. [ 589.205466][T24573] netlink: 356 bytes leftover after parsing attributes in process `syz.4.4588'. [ 590.750304][T15546] net_ratelimit: 11 callbacks suppressed [ 590.750355][T15546] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 590.772375][T15546] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 591.298882][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 591.314634][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 591.839050][T15546] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 591.854289][T15546] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 592.379006][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 592.395369][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 592.571567][T24562] xfrm1: entered allmulticast mode [ 592.681055][T24584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4591'. [ 592.774168][T24588] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4590'. [ 592.937461][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 592.953746][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 592.958277][T24602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4596'. [ 593.308083][T24619] netlink: 'syz.2.4599': attribute type 12 has an invalid length. [ 593.459677][T24629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4605'. [ 593.484690][T24629] vlan0: entered promiscuous mode [ 593.965397][T24644] netlink: 452 bytes leftover after parsing attributes in process `syz.2.4609'. [ 594.058683][T24644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4609'. [ 594.281517][T24656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4612'. [ 594.346105][T24656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4612'. [ 594.431257][T24661] bond0 (unregistering): Released all slaves [ 594.921629][T24688] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 595.008063][T24680] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.416505][T24680] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.576420][T24680] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.627267][T24712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4626'. [ 595.664713][T24712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4626'. [ 595.684824][T24680] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.989137][T15546] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.054935][T15547] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.067602][ T12] net_ratelimit: 13 callbacks suppressed [ 596.067650][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 596.090548][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 596.197724][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.436243][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.604205][T24735] netlink: 'syz.3.4636': attribute type 61 has an invalid length. [ 596.621507][T24736] netlink: 'syz.3.4636': attribute type 61 has an invalid length. [ 596.638689][T15546] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 596.653104][T15546] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 596.672709][T24733] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4634'. [ 596.730728][T24735] netlink: 'syz.3.4636': attribute type 62 has an invalid length. [ 596.744880][T24736] netlink: 'syz.3.4636': attribute type 62 has an invalid length. [ 596.893894][T24745] xt_hashlimit: size too large, truncated to 1048576 [ 597.258691][T15540] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 597.273189][T15540] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 597.707633][T24777] netlink: 'syz.3.4645': attribute type 11 has an invalid length. [ 597.852800][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 597.867324][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 598.105753][T24788] veth0: entered promiscuous mode [ 598.164846][T24788] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 598.223867][T24794] sctp: [Deprecated]: syz.4.4653 (pid 24794) Use of struct sctp_assoc_value in delayed_ack socket option. [ 598.223867][T24794] Use struct sctp_sack_info instead [ 598.296116][T24787] veth0: left promiscuous mode [ 598.451406][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 598.466177][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 598.666066][T24808] xt_CT: No such helper "netbios-ns" [ 598.690608][T24808] netlink: 4432 bytes leftover after parsing attributes in process `syz.3.4656'. [ 601.098711][ T62] net_ratelimit: 9 callbacks suppressed [ 601.098731][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 601.118771][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 601.639790][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 601.654337][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 602.180072][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 602.194936][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 602.718562][T15540] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 602.732962][T15540] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 603.258667][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 603.273095][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 606.340094][ T62] net_ratelimit: 10 callbacks suppressed [ 606.340115][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 606.360215][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 606.878662][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 606.893811][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 607.418712][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 607.433249][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 607.948613][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 607.963059][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 608.478578][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 608.493076][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 611.558611][ T62] net_ratelimit: 10 callbacks suppressed [ 611.558640][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 611.578941][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 612.099546][T15540] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 612.113997][T15540] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 612.638598][T15546] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 612.653274][T15546] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 613.179040][T15546] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 613.193477][T15546] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 613.708633][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 613.723057][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 616.788875][ T12] net_ratelimit: 10 callbacks suppressed [ 616.788896][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 616.809058][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 617.328539][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 617.343004][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 617.860379][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 617.874871][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 618.398550][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 618.413058][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 618.928952][T15546] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 618.943462][T15546] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 622.019940][ T62] net_ratelimit: 10 callbacks suppressed [ 622.019965][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 622.041431][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 622.558712][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 622.573164][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 623.098851][T15540] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 623.113448][T15540] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 623.628599][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 623.643013][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 624.158546][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 624.172936][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 624.421167][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.238790][T15540] net_ratelimit: 10 callbacks suppressed [ 627.238812][T15540] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 627.258903][T15540] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 627.780651][T15546] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 627.795142][T15546] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 628.319573][T15540] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 628.334024][T15540] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 628.858745][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 628.873262][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 629.388630][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 629.403093][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 629.544050][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 632.468657][ T12] net_ratelimit: 10 callbacks suppressed [ 632.468678][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 632.488931][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 633.008842][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 633.023299][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 633.538655][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 633.553325][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 634.068617][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 634.083036][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 634.599127][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 634.614302][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 637.688518][T15547] net_ratelimit: 10 callbacks suppressed [ 637.688539][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 637.708643][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 638.228690][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 638.243136][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 638.758891][T15540] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 638.773341][T15540] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 639.299065][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 639.313643][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 639.853218][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 639.868155][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 640.039773][ T62] bond9 (unregistering): (slave ip6gretap1): Releasing backup interface [ 640.341267][ T62] team0: Port device bridge6 removed [ 640.357405][ T62] bond0 (unregistering): Released all slaves [ 640.378764][ T62] bond1 (unregistering): Released all slaves [ 640.398230][ T62] bond2 (unregistering): Released all slaves [ 640.417344][ T62] bond3 (unregistering): Released all slaves [ 640.438041][ T62] bond4 (unregistering): (slave veth9): Releasing active interface [ 640.453319][ T62] bond4 (unregistering): Released all slaves [ 640.473240][ T62] bond5 (unregistering): Released all slaves [ 640.493740][ T62] bond6 (unregistering): (slave veth11): Releasing backup interface [ 640.506733][ T62] bond6 (unregistering): Released all slaves [ 640.527310][ T62] bond7 (unregistering): Released all slaves [ 640.546272][ T62] bond8 (unregistering): Released all slaves [ 640.571745][ T62] bond9 (unregistering): Released all slaves [ 640.592217][ T62] bond10 (unregistering): Released all slaves [ 640.611661][ T62] bond11 (unregistering): Released all slaves [ 640.921734][ T62] tipc: Left network mode [ 642.310913][ T62] IPVS: stop unused estimator thread 0... [ 642.979374][ T62] net_ratelimit: 10 callbacks suppressed [ 642.979393][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 642.999517][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 643.518697][T15546] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 643.533120][T15546] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 644.048538][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 644.063529][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 644.580190][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 644.594825][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 645.118536][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 645.133171][ T62] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 648.198597][T15547] net_ratelimit: 10 callbacks suppressed [ 648.198623][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 648.220711][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 648.741427][ T6724] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 648.755977][ T6724] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 649.278571][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 649.293068][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 649.808536][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 649.822982][T15547] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 650.316619][T24841] sctp: [Deprecated]: syz.0.4663 (pid 24841) Use of struct sctp_assoc_value in delayed_ack socket option. [ 650.316619][T24841] Use struct sctp_sack_info instead [ 650.343581][ T6724] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 650.359560][ T6724] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 650.686135][T24856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4666'. [ 650.744062][T24860] veth1_to_bond: entered promiscuous mode [ 650.768649][T24860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4667'. [ 650.824362][T24860] veth1_to_bond (unregistering): left promiscuous mode [ 651.001806][T24867] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 651.054580][T24867] bond4 (unregistering): Released all slaves [ 651.447753][T24897] xt_hashlimit: size too large, truncated to 1048576 [ 651.568205][T24904] netlink: 'syz.1.4674': attribute type 11 has an invalid length. [ 651.677980][T24914] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4674'. [ 651.716517][T24904] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4674'. [ 651.774900][T24916] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4677'. [ 652.545820][T24946] netlink: 456 bytes leftover after parsing attributes in process `syz.3.4681'. [ 653.072216][T24972] sctp: [Deprecated]: syz.2.4685 (pid 24972) Use of struct sctp_assoc_value in delayed_ack socket option. [ 653.072216][T24972] Use struct sctp_sack_info instead [ 653.119079][T24972] sctp: [Deprecated]: syz.2.4685 (pid 24972) Use of struct sctp_assoc_value in delayed_ack socket option. [ 653.119079][T24972] Use struct sctp_sack_info instead [ 653.157725][T24973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4686'. [ 653.269552][T24980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4689'. [ 653.499185][T15541] net_ratelimit: 10 callbacks suppressed [ 653.499230][T15541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 653.522123][T15541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 653.608566][T25001] netlink: 'syz.0.4691': attribute type 10 has an invalid length. [ 653.688785][T25001] vlan0: entered promiscuous mode [ 653.726944][T25001] vlan0: entered allmulticast mode [ 653.773852][T25001] veth0_vlan: entered allmulticast mode [ 653.813252][T25001] team0: Port device vlan0 added [ 654.137471][T25010] syzkaller0: entered promiscuous mode [ 654.152647][T25010] syzkaller0: entered allmulticast mode [ 654.168955][T15545] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 654.183795][T15545] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 654.368589][T18709] block nbd2: Receive control failed (result -1) [ 654.379303][T18709] [ 654.381756][T18709] ====================================================== [ 654.388779][T18709] WARNING: possible circular locking dependency detected [ 654.395821][T18709] syzkaller #0 Not tainted [ 654.400244][T18709] ------------------------------------------------------ [ 654.407264][T18709] kworker/u9:0/18709 is trying to acquire lock: [ 654.413512][T18709] ffff88807eb40fe0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 654.422942][T18709] [ 654.422942][T18709] but task is already holding lock: [ 654.430315][T18709] ffff888031ee2a68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 654.439230][T18709] [ 654.439230][T18709] which lock already depends on the new lock. [ 654.439230][T18709] [ 654.450423][T18709] [ 654.450423][T18709] the existing dependency chain (in reverse order) is: [ 654.459446][T18709] [ 654.459446][T18709] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 654.467114][T18709] __mutex_lock+0x19d/0x1550 [ 654.472261][T18709] nbd_queue_rq+0x373/0x1150 [ 654.477402][T18709] blk_mq_dispatch_rq_list+0x499/0x1990 [ 654.483495][T18709] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 654.490377][T18709] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 654.496887][T18709] blk_mq_run_work_fn+0x16c/0x300 [ 654.502442][T18709] process_scheduled_works+0xa8e/0x14e0 [ 654.508522][T18709] worker_thread+0xa47/0xfb0 [ 654.513641][T18709] kthread+0x388/0x470 [ 654.518231][T18709] ret_from_fork+0x514/0xb70 [ 654.523341][T18709] ret_from_fork_asm+0x1a/0x30 [ 654.528625][T18709] [ 654.528625][T18709] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 654.535880][T18709] __mutex_lock+0x19d/0x1550 [ 654.541008][T18709] nbd_queue_rq+0xc1/0x1150 [ 654.546046][T18709] blk_mq_dispatch_rq_list+0x499/0x1990 [ 654.552115][T18709] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 654.558968][T18709] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 654.565470][T18709] blk_mq_run_work_fn+0x16c/0x300 [ 654.571011][T18709] process_scheduled_works+0xa8e/0x14e0 [ 654.577078][T18709] worker_thread+0xa47/0xfb0 [ 654.582187][T18709] kthread+0x388/0x470 [ 654.586775][T18709] ret_from_fork+0x514/0xb70 [ 654.591890][T18709] ret_from_fork_asm+0x1a/0x30 [ 654.597166][T18709] [ 654.597166][T18709] -> #4 (set->srcu){.+.+}-{0:0}: [ 654.604284][T18709] __synchronize_srcu+0xc9/0x2f0 [ 654.609827][T18709] elevator_switch+0x1e8/0x7b0 [ 654.615110][T18709] elevator_change+0x2fa/0x480 [ 654.620391][T18709] elevator_set_default+0x375/0x440 [ 654.626111][T18709] blk_register_queue+0x3f3/0x4e0 [ 654.631657][T18709] __add_disk+0x6cb/0xe30 [ 654.636503][T18709] add_disk_fwnode+0xfb/0x4b0 [ 654.641692][T18709] nbd_dev_add+0x733/0xb60 [ 654.646628][T18709] nbd_init+0x15f/0x1e0 [ 654.651297][T18709] do_one_initcall+0x250/0x870 [ 654.656584][T18709] do_initcall_level+0x10a/0x1a0 [ 654.662042][T18709] do_initcalls+0x59/0xa0 [ 654.666893][T18709] kernel_init_freeable+0x29d/0x3e0 [ 654.672614][T18709] kernel_init+0x1d/0x1d0 [ 654.677457][T18709] ret_from_fork+0x514/0xb70 [ 654.682576][T18709] ret_from_fork_asm+0x1a/0x30 [ 654.687851][T18709] [ 654.687851][T18709] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 654.695666][T18709] __mutex_lock+0x19d/0x1550 [ 654.700781][T18709] elevator_change+0x1af/0x480 [ 654.706065][T18709] elevator_set_none+0xb5/0x140 [ 654.711440][T18709] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 654.717770][T18709] nbd_start_device+0x189/0xb30 [ 654.723148][T18709] nbd_genl_connect+0x1597/0x1c10 [ 654.728698][T18709] genl_family_rcv_msg_doit+0x233/0x340 [ 654.734766][T18709] genl_rcv_msg+0x614/0x7a0 [ 654.739793][T18709] netlink_rcv_skb+0x226/0x4a0 [ 654.745081][T18709] genl_rcv+0x28/0x40 [ 654.749584][T18709] netlink_unicast+0x7bb/0x940 [ 654.754870][T18709] netlink_sendmsg+0x813/0xb40 [ 654.760155][T18709] sock_sendmsg_nosec+0x13a/0x180 [ 654.765702][T18709] ____sys_sendmsg+0x54e/0x850 [ 654.770991][T18709] ___sys_sendmsg+0x2a5/0x360 [ 654.776189][T18709] __x64_sys_sendmsg+0x1b1/0x290 [ 654.781646][T18709] do_syscall_64+0x174/0x580 [ 654.786762][T18709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.793180][T18709] [ 654.793180][T18709] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 654.801781][T18709] blk_alloc_queue+0x544/0x690 [ 654.807074][T18709] __blk_mq_alloc_disk+0x194/0x390 [ 654.812713][T18709] nbd_dev_add+0x494/0xb60 [ 654.817656][T18709] nbd_init+0x15f/0x1e0 [ 654.822332][T18709] do_one_initcall+0x250/0x870 [ 654.827618][T18709] do_initcall_level+0x10a/0x1a0 [ 654.833103][T18709] do_initcalls+0x59/0xa0 [ 654.837972][T18709] kernel_init_freeable+0x29d/0x3e0 [ 654.843701][T18709] kernel_init+0x1d/0x1d0 [ 654.848553][T18709] ret_from_fork+0x514/0xb70 [ 654.853667][T18709] ret_from_fork_asm+0x1a/0x30 [ 654.858949][T18709] [ 654.858949][T18709] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 654.866169][T18709] fs_reclaim_acquire+0x71/0x100 [ 654.871643][T18709] __kmalloc_noprof+0xbc/0x720 [ 654.876932][T18709] tls_sw_sendmsg+0x599/0x2860 [ 654.882216][T18709] sock_sendmsg_nosec+0x90/0x180 [ 654.887675][T18709] sock_sendmsg+0x1ca/0x2d0 [ 654.892699][T18709] splice_to_socket+0xb5e/0x12a0 [ 654.898174][T18709] direct_splice_actor+0x101/0x160 [ 654.903806][T18709] splice_direct_to_actor+0x57b/0xcb0 [ 654.909703][T18709] do_splice_direct+0x195/0x290 [ 654.915078][T18709] do_sendfile+0x52e/0x7c0 [ 654.920026][T18709] __se_sys_sendfile64+0x144/0x1a0 [ 654.925656][T18709] do_syscall_64+0x174/0x580 [ 654.930772][T18709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.937208][T18709] [ 654.937208][T18709] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 654.945290][T18709] __lock_acquire+0x1520/0x2cf0 [ 654.950670][T18709] lock_acquire+0x106/0x350 [ 654.955695][T18709] lock_sock_nested+0x41/0x100 [ 654.960986][T18709] inet_shutdown+0x6a/0x390 [ 654.966011][T18709] nbd_mark_nsock_dead+0x2cb/0x550 [ 654.971651][T18709] recv_work+0x1cee/0x1e10 [ 654.976585][T18709] process_scheduled_works+0xa8e/0x14e0 [ 654.982647][T18709] worker_thread+0xa47/0xfb0 [ 654.987760][T18709] kthread+0x388/0x470 [ 654.992354][T18709] ret_from_fork+0x514/0xb70 [ 654.997475][T18709] ret_from_fork_asm+0x1a/0x30 [ 655.002766][T18709] [ 655.002766][T18709] other info that might help us debug this: [ 655.002766][T18709] [ 655.013072][T18709] Chain exists of: [ 655.013072][T18709] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 655.013072][T18709] [ 655.026284][T18709] Possible unsafe locking scenario: [ 655.026284][T18709] [ 655.033817][T18709] CPU0 CPU1 [ 655.039179][T18709] ---- ---- [ 655.044533][T18709] lock(&nsock->tx_lock); [ 655.048948][T18709] lock(&cmd->lock); [ 655.055471][T18709] lock(&nsock->tx_lock); [ 655.062407][T18709] lock(sk_lock-AF_INET6-NBD); [ 655.067255][T18709] [ 655.067255][T18709] *** DEADLOCK *** [ 655.067255][T18709] [ 655.075473][T18709] 3 locks held by kworker/u9:0/18709: [ 655.081009][T18709] #0: ffff888021bfd140 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 655.092242][T18709] #1: ffffc9000507fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 655.103995][T18709] #2: ffff888031ee2a68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 655.113313][T18709] [ 655.113313][T18709] stack backtrace: [ 655.119200][T18709] CPU: 1 UID: 0 PID: 18709 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 655.119220][T18709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 655.119233][T18709] Workqueue: nbd2-recv recv_work [ 655.119252][T18709] Call Trace: [ 655.119261][T18709] [ 655.119268][T18709] dump_stack_lvl+0xe8/0x150 [ 655.119294][T18709] print_circular_bug+0x2e1/0x300 [ 655.119311][T18709] check_noncircular+0x12e/0x150 [ 655.119338][T18709] __lock_acquire+0x1520/0x2cf0 [ 655.119362][T18709] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 655.119383][T18709] ? try_to_wake_up+0x8c5/0x14d0 [ 655.119410][T18709] ? inet_shutdown+0x6a/0x390 [ 655.119432][T18709] lock_acquire+0x106/0x350 [ 655.119452][T18709] ? inet_shutdown+0x6a/0x390 [ 655.119472][T18709] ? __queue_work+0x1ea/0x10a0 [ 655.119494][T18709] lock_sock_nested+0x41/0x100 [ 655.119513][T18709] ? inet_shutdown+0x6a/0x390 [ 655.119534][T18709] inet_shutdown+0x6a/0x390 [ 655.119556][T18709] nbd_mark_nsock_dead+0x2cb/0x550 [ 655.119581][T18709] recv_work+0x1cee/0x1e10 [ 655.119597][T18709] ? __lock_acquire+0x683/0x2cf0 [ 655.119619][T18709] ? register_lock_class+0x31/0x2e0 [ 655.119639][T18709] ? __lock_acquire+0x683/0x2cf0 [ 655.119663][T18709] ? __pfx_recv_work+0x10/0x10 [ 655.119678][T18709] ? do_raw_spin_lock+0x12b/0x2f0 [ 655.119696][T18709] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 655.119715][T18709] ? process_scheduled_works+0xa20/0x14e0 [ 655.119741][T18709] ? rcu_is_watching+0x15/0xb0 [ 655.119764][T18709] ? process_scheduled_works+0xa20/0x14e0 [ 655.119782][T18709] process_scheduled_works+0xa8e/0x14e0 [ 655.119809][T18709] ? __pfx_process_scheduled_works+0x10/0x10 [ 655.119828][T18709] ? assign_work+0x3cf/0x5d0 [ 655.119847][T18709] worker_thread+0xa47/0xfb0 [ 655.119868][T18709] ? __kthread_parkme+0x71/0x1f0 [ 655.119891][T18709] kthread+0x388/0x470 [ 655.119912][T18709] ? __pfx_worker_thread+0x10/0x10 [ 655.119928][T18709] ? __pfx_kthread+0x10/0x10 [ 655.119950][T18709] ret_from_fork+0x514/0xb70 [ 655.119972][T18709] ? __pfx_ret_from_fork+0x10/0x10 [ 655.119993][T18709] ? __switch_to+0xc89/0x1420 [ 655.120013][T18709] ? __pfx_kthread+0x10/0x10 [ 655.120032][T18709] ret_from_fork_asm+0x1a/0x30 [ 655.120053][T18709] [ 655.340068][ T6724] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 655.356909][ T6724] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 655.432309][T24990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4687'. [ 655.444047][T24990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.938768][T10662] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 655.953209][T10662] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 656.468583][T15540] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 658.520342][T15545] net_ratelimit: 7 callbacks suppressed [ 658.520369][T15545] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 658.541178][T15545] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 659.068631][T15545] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 659.083022][T15545] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 659.598595][T15541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 659.613622][T15541] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 660.138695][T15540] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 660.153527][T15540] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 660.678514][T15540] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 660.693275][T15540] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 663.768546][ T6724] net_ratelimit: 10 callbacks suppressed [ 663.768570][ T6724] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 663.789443][ T6724] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 664.308748][T10662] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 664.323118][T10662] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01