last executing test programs: 4.167522156s ago: executing program 0 (id=1719): socket(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104d000000000063012d00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 4.015075163s ago: executing program 0 (id=1723): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={r2, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3.949459522s ago: executing program 1 (id=1725): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmmsg$unix(r3, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb66514b1c5e45ff1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002840)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}], 0x48}}], 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x3}]}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x3}]}}}]}, 0x38}}, 0x0) bind$tipc(r1, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0x2c}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@remote, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x8000) (async) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x39}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0x2c}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@remote, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x8000) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x38, r7, 0x10, 0x4000000, 0x0, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x38}}, 0x4000000) 3.947090564s ago: executing program 0 (id=1726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000060a090400000000000000000200000618000480140001800a000100696e6e657200000004000280090001"], 0x6c}, 0x1, 0x0, 0x0, 0x40000880}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'geneve1\x00', 0x1}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r5, 0x103, 0x2, &(0x7f0000000000)=0x80000003, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002114000000110001"], 0xd8}}, 0x0) 3.622181718s ago: executing program 3 (id=1730): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000000020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) 3.523874384s ago: executing program 1 (id=1731): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001400e800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_emit_ethernet(0x6f, &(0x7f0000001300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000200393a00fe8000000000000000000000000000bbfe80000000000000000000000000000500000000000000006000081000002f0000000000000000000000ffff00000000fc0200000000000000000000000000fb", @ANYRESHEX=r10, @ANYRES8=r2, @ANYBLOB="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"], 0x0) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r13, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x4000810) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r9}, 0xc) socket$xdp(0x2c, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r14, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c076f2c6014f5d219221d80481aed108a2cb749a807133ed7a80ffe0090f000060000000a2bcb503ca00000f7f8900000020000000", 0x48}], 0x1) r15 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r15, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r16 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r16, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close(r16) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r8}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.494310031s ago: executing program 3 (id=1732): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)="607be25f2ef1280ed2c663ad71511dde7f74dd31fb0e5a9dbe2ee7745c3636ae33443fa73a387c92566fc67599610cabb9a3fcc284c5d0e7824e32b0d8fd3acef8af71e5f4784bd40778d418042d76c4e25c840db0b8022dddb286e48c9d34d0bcfe943d2cb2b3e77998406bdc487c63740e9d450f16ca09323f1ffa6c83e41bd8da053dfd564f5ebf6bf529217bec9611005a3955f9082f30027a5a7fb021a5eaf79760c0ab0f42ca4b091855c9c192f234f9e3f5ada9", 0xb7}], 0x1}], 0x1, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0xf]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xac}}, 0x48004) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xd07d000) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000080)=0xf41, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$packet(0x11, 0x3, 0x300) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10012, r9, 0xffffe000) (async) r10 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) (async) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000200)=@xdp={0x2c, 0xdd86, r11}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x81) (async) socket$inet6(0xa, 0x80000, 0x6) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x8000000004) 2.209304737s ago: executing program 3 (id=1735): syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a14a1d8c6900"}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="240000003c0007010000000000000000047c00000400fc800c00018006000600800a0000500e9417ef60074826b1912e82dd693c18a1f654b4f70f0750ba4444b71268224d6cc95b64f5028a31db3177ee1006e316e1626bc9f8476aa80190bef2c1aed32190abbc33cc682bcfe09870ae12b73abfef637c6becd73df950bcd8a46cfe2b75c6024be40d9f32424346d6d5ce49cec48d47ac"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}}, 0x0) (async) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001400bd7f4366c07a2cbfb7eb01"], 0x14}}, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'wg2\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000023181100"/20, @ANYRES32, @ANYRES16=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r8, 0x0, 0x0, 0x80800) setsockopt$sock_void(r9, 0x1, 0x24, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x48, 0x1412, 0x800, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x20002041) (async) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r11, 0x106, 0x1, &(0x7f0000001380)=0x1, 0x4) 2.209042993s ago: executing program 1 (id=1736): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x40895, 0x0, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast1}, 0x0, 0x4, 0x3, 0x3}}, 0x26) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x15, 0x1, 0x1, 0x0, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x40080) 2.186351301s ago: executing program 4 (id=1737): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0, @ANYBLOB="0a50edd899700140d7205f5b4e8c449120518bd44d32e435342497a30f453d740a3e9cc3ec2a26e80db904b2997b503360b8b26d4a13dc5ffffe3770bfab82d1e0f516cb2444be42ad58fb1cf626c5c832ce1f7c73b728e4bcba5ccfaf591d0437b509247136b2862ff29cf38ef917dbdafa4378869d4349608f41f9853049abda2b034cbc5822470f84b53b114cf595c9dc411cb4f6ac763a8f44148626cb8facc375e47b39b15d13df339858561f48c8e54ad33c82c1e740a3e2d502153f846f0218578727d49f0531"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000380)='xprt_reserve\x00', r1, 0x0, 0xfb2}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2.079231008s ago: executing program 0 (id=1738): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x80) recvmmsg$unix(r2, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/18, 0x12}], 0x1}}], 0x1, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r6, 0x29, 0x38, 0x0, &(0x7f0000000100)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {0xa}, {0x10, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r7, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) 1.987182403s ago: executing program 3 (id=1739): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="01000000000000000000050000000c"], 0x38}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000012002102000000000000000007"], 0x38}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) ioctl$TUNSETOFFLOAD(r0, 0x40047438, 0x58e48e4c6b288518) 1.949849411s ago: executing program 2 (id=1740): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0xc, 0x103ba, 0x1}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000000540001000102bd6f6938980000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000180), 0x0}, 0x20) r2 = socket(0xa, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r2, 0x81, 0x4, 0x8e1}) r4 = socket(0x1a, 0x1, 0xf462) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x2) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x3}, {}, {0x5, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000140)={'syztnl0\x00', r5, 0x80, 0x1, 0x5, 0x10f2c750, {{0x38, 0x4, 0x2, 0x0, 0xe0, 0x68, 0x0, 0x10, 0x2b, 0x0, @rand_addr=0x64010100, @loopback, {[@cipso={0x86, 0x4f, 0xfffffffffffffffd, [{0x0, 0x2}, {0x6, 0xb, "542c519c5954280019"}, {0x5, 0xb, "4cacadd697ab93af1e"}, {0x7, 0xa, "346d3483b86762e7"}, {0x2, 0x2}, {0x0, 0x6, "27b18a80"}, {0x6, 0x6, "5b9cffa2"}, {0x0, 0xd, "71a65bde7331bbca3e9f3d"}, {0x7, 0xc, "80402271dfe1ee8da143"}]}, @generic={0x94, 0x2}, @cipso={0x86, 0x4f, 0xffffffffffffffff, [{0x7, 0x11, "5aed15f7c900ff5ea882ad68cc92ff"}, {0x5, 0xb, "0dc2109378d4424aae"}, {0x6, 0xb, "9173c7abc5c7b04cc5"}, {0x6, 0xe, "eaa309cf0f4499af3c23c219"}, {0x6, 0xf, "1e1288810f43dec66da0d5d954"}, {0x5, 0x5, "cbc044"}]}, @rr={0x7, 0x1f, 0xec, [@private=0xa010100, @multicast2, @multicast2, @private=0xa010101, @remote, @remote, @multicast1]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xcb, 0x0, 0x4, [0xe]}]}}}}}) sendmsg$inet_sctp(r2, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010101}], 0x38, 0x24008000}, 0x2800c051) r6 = accept4$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14, 0x800) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000440)=0x0, &(0x7f00000004c0)=0x4) bind$packet(r6, &(0x7f0000000500)={0x11, 0x10, r7, 0x1, 0xe5, 0x6, @broadcast}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0xc, 0x103ba, 0x1}, 0x48) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000000540001000102bd6f6938980000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000180), 0x0}, 0x20) (async) socket(0xa, 0x5, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r2, 0x81, 0x4, 0x8e1}) (async) socket(0x1a, 0x1, 0xf462) (async) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x2) (async) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x3}, {}, {0x5, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000140)={'syztnl0\x00', r5, 0x80, 0x1, 0x5, 0x10f2c750, {{0x38, 0x4, 0x2, 0x0, 0xe0, 0x68, 0x0, 0x10, 0x2b, 0x0, @rand_addr=0x64010100, @loopback, {[@cipso={0x86, 0x4f, 0xfffffffffffffffd, [{0x0, 0x2}, {0x6, 0xb, "542c519c5954280019"}, {0x5, 0xb, "4cacadd697ab93af1e"}, {0x7, 0xa, "346d3483b86762e7"}, {0x2, 0x2}, {0x0, 0x6, "27b18a80"}, {0x6, 0x6, "5b9cffa2"}, {0x0, 0xd, "71a65bde7331bbca3e9f3d"}, {0x7, 0xc, "80402271dfe1ee8da143"}]}, @generic={0x94, 0x2}, @cipso={0x86, 0x4f, 0xffffffffffffffff, [{0x7, 0x11, "5aed15f7c900ff5ea882ad68cc92ff"}, {0x5, 0xb, "0dc2109378d4424aae"}, {0x6, 0xb, "9173c7abc5c7b04cc5"}, {0x6, 0xe, "eaa309cf0f4499af3c23c219"}, {0x6, 0xf, "1e1288810f43dec66da0d5d954"}, {0x5, 0x5, "cbc044"}]}, @rr={0x7, 0x1f, 0xec, [@private=0xa010100, @multicast2, @multicast2, @private=0xa010101, @remote, @remote, @multicast1]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xcb, 0x0, 0x4, [0xe]}]}}}}}) (async) sendmsg$inet_sctp(r2, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010101}], 0x38, 0x24008000}, 0x2800c051) (async) accept4$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14, 0x800) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000440), &(0x7f00000004c0)=0x4) (async) bind$packet(r6, &(0x7f0000000500)={0x11, 0x10, r7, 0x1, 0xe5, 0x6, @broadcast}, 0x14) (async) 1.891104572s ago: executing program 4 (id=1741): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="2f30c8307b0a", 0x6}], 0x1) bind$x25(r1, &(0x7f0000000240), 0x12) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xe, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r0], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x50, 0x60000007, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c) 1.767259157s ago: executing program 2 (id=1742): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10}, 0x94) 1.748896825s ago: executing program 3 (id=1743): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3f, 0x301, 0x270bd24, 0x25dfdbfa, {0x5}}, 0x14}}, 0x4000000) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907071200000f0000ff3f21000000170a001700000000040014001000030001302564aa25b9a64411f6bbf44dc48f57", 0x39}], 0x1) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2003308030300ecff3f0200000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c000004ff01000000000000000600800a000008000f00ffffff7f"], 0x2c}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) 1.741789044s ago: executing program 4 (id=1744): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000300)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x7fff, 0x1000, 0x3a, 0x0, 0xfffffffd}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040050) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}}}, 0x24}}, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x8) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2d4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x5b7, 0x0, 0x0, 0x41000, 0x60, '\x00', r7, @fallback=0x27, r8, 0x8, &(0x7f0000000180)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x3, 0x7d, 0x80000001}, 0x10, r9, r10, 0x2, 0x0, &(0x7f0000000280)=[{0x4, 0x4, 0x0, 0x6}, {0x2, 0x4, 0x8, 0x7}], 0x10, 0xffffffff}, 0x94) 1.591222581s ago: executing program 2 (id=1745): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x84}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) 1.578082902s ago: executing program 2 (id=1746): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x16, 0x4, 0x3}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 1.527846307s ago: executing program 2 (id=1747): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}, {0x0, [0x0]}}, 0x0, 0x2f, 0x0, 0xb}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="0cc5035c44df"}]}, 0x48}}, 0x0) 1.274938496s ago: executing program 1 (id=1748): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f00000004c0)=[{0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r5, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r6}]}, 0x3c}, 0x1, 0x620b}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r5, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x40}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xff00}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x50}, 0x8000) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x5, 0x133, 0x7, 0x8, 0x6}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.210106341s ago: executing program 1 (id=1749): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="850000dd87000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x86, 0x14, 0x9535393fea6295b5, 0x1000000, 0x0, {0xa, 0x40, 0xeaddb0ce1851e778, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x374}, @IFA_LOCAL={0x0, 0x2, @local}]}, 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000700)={@local, @random="99879e18f3ff", @void, {@generic={0x8906}}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r7, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d0000050000000008000900ecffffff", 0x24) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fcdbdf254f00000008000300", @ANYRES32=r6, @ANYBLOB='8\x00z'], 0x54}}, 0x8000) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x24008854) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x206010}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x8c, r9, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:pinentry_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0xe840}, 0x48000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast1}}}], 0x20}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r10, 0x58, &(0x7f0000000040)}, 0x10) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f00000021c0)='lo\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000a40)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYRES8=r3], 0x40}}, 0x0) r13 = socket(0x1e, 0x3, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000010060000ff86dd60548912000c1100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e214e21000c907801000000"], 0x0) sendto$inet6(r13, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a23000400180004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 276.927093ms ago: executing program 3 (id=1750): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x5}, 0x8) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000040)={&(0x7f0000000000)=""/35, 0x23}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x76, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00000200006a938d70d655000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000181200"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x2d, 0x2, 0x0) setsockopt$netrom_NETROM_T1(r4, 0x11d, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket(0x840000000002, 0x1, 0x102) close(0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip_vti0\x00', 0x0}) r6 = getpid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={r6, r7, r8}, 0xc) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x80000000, 0x80000000, 0x9, 0x9}, 0xfffffa35, 0x0, 0x10000, 0x42, 0x8, 0x0, 0xe, 0xd, 0x4, 0x100, {0x7, 0x3, 0x0, 0x1, 0x9, 0x1776}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 207.494466ms ago: executing program 0 (id=1751): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x800, 0x5, [0x5, 0xff, 0x4, 0x0, 0xdc3]}, 0x12) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000006800010025bd7000feffffff0a00000000000000180008801400010002000000000000008700040010489ef5060007000700000008000500", @ANYRES32=r1, @ANYBLOB="9558c700bf2f25bc0eb7202a0da82969e717dee062e1602c23b53d0067c2bd513b6f41d3ce7471e43b3bc88e2887190efcae7e2aa471d8fc53c1979440d3953221f79be29bbb90a6"], 0x40}}, 0x40040d0) 206.033397ms ago: executing program 2 (id=1752): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x404c001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x70, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xfffff800, 0x8, 0x99f5, 0x2, 0x2}}]}]}}}]}, 0x70}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r7, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xc, 0x6, @l2={'eth', 0x3a, 'vlan1\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20008094) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) r8 = socket(0x1d, 0x2, 0x6) setsockopt$PNPIPE_INITSTATE(r8, 0x6a, 0x3, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES32=r5], 0x34}}, 0x84) 205.244678ms ago: executing program 4 (id=1753): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa0, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}}]}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xc}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffff81}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8000}]}, @CTA_ZONE={0x6}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xde99}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xd}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x81}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x3, 0xbb10]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040040}, 0x4080) sendmsg$nl_route(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)=@can_delroute={0x3c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "89543896f10eee1e"}, 0x2}}, @CGW_MOD_UID={0x8}, @CGW_CS_XOR={0x8, 0x5, {0x2}}]}, 0x3c}}, 0x40800) 204.21383ms ago: executing program 1 (id=1754): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0xb4, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0x48, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x8c, 0x1, 0x0, 0x1, [@nested={0x88, 0x10, 0x0, 0x1, [@nested={0x82, 0x8, 0x0, 0x1, [@generic="a831985351cb3d4a57729361f10318be72cb433d11a9b4781da90ad1a200b17485433caa6c97072c59b89aaa3987b4bfce08fe13e090413b9606330beb137e507b5292958158c869ba94bde249b83b1efc1cd3328ebf32d1f1dbe7680a7b3c529af0c870c0bb9648b60bfc81de02e599f6d4aa037c6bd68d903e2845fbd7"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0xb4}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, 0x0, &(0x7f0000000340)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)={0x48, r2, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x5, 0x5, 0x8202, 0x10, 0x1f0f1235, 0x8001, 0xbc, 0x0, 0x0}, &(0x7f0000000240)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e23, 0x5, @local, 0x401}}, 0x0, 0x1}, &(0x7f0000000380)=0x90) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'macvtap0\x00'}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r7, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000000) 67.187242ms ago: executing program 4 (id=1755): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x40}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x6, 0x0, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1e}, 0x94) 65.441538ms ago: executing program 0 (id=1756): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e24, 0x3, @remote, 0x3}}, 0x4e, 0x6, 0x503, 0x3, 0x414d6714bf78e175, 0x80000001, 0x3}, 0x9c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x0, 0x25dfdbff}, 0x18}}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x1, 0x0, 0x0, 0x9, 0x6}, &(0x7f0000000040)=0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00.', @ANYRES16=r3, @ANYBLOB="01002bbd7000fddbdf250c00000008000300", @ANYRES32=r4, @ANYBLOB="0500080004000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)={0xe8c, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0xe78, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x6, 0x7, 0x910]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x0, 0x471, 0xfffd, 0x2, 0x5]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x8b, 0x80, [@mesh_chsw={0x76, 0x6, {0xe, 0x4, 0x1d, 0x2}}, @chsw_timing={0x68, 0x4, {0x81, 0x3}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x66, {0x1, 0x1, "b207b21f147f5c05186dd473200452d0", "6a3e772c8c39beecb86c14e34a30e8b4b711fe0115502b8201e92fcb7442d151", "471fc75cf4d08ed34d25763151d5ac3352c115979a9c6688b5251121a25e78b4", [{0x4, 0x12, "d7c432f5eeeb364210137fe11411501e06f4"}]}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x8}}]}, @NL80211_ATTR_PROBE_RESP={0x893, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x5f, 0x7f, [@ibss={0x6, 0x2, 0x7}, @preq={0x82, 0x41, {{0x1, 0x1, 0x1, 0x0, 0x1}, 0xc, 0x97, 0xd, @device_b, 0xffffffff, @value, 0x4, 0x4, 0x3, [{{0x0, 0x0, 0x1}, @device_a, 0x5}, {{}, @device_a, 0x58f993f3}, {{}, @device_a, 0x7ff}]}}, @link_id={0x65, 0x12, {@random="3b528477e149", @broadcast, @device_b}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x2c, 0x7f, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @chsw_timing={0x68, 0x4, {0xfff7, 0x1}}, @tim={0x5, 0x1d, {0x8, 0xce, 0x7, "a2858a68705dbc046da0d62578eae153b1639776a4183dbdbc19"}}]}, @NL80211_ATTR_PROBE_RESP={0x2fc, 0x91, "885cb500d9bb849f2213e2f6234bb80bf7cae5fedd8b2ef5447ae4a6f491dc72e2bc2a8768a1eb8a7c634adb19ecb45e8cf98a901fbbf7041d6d747f90172ea639f781fb96f5477ad8d1c31e6548b09378d0f8730b2ba1be2cf91708bd0a46289a40acbe3837b4c87723025013b0ace3951a772189a4e3ceb8b1aca6a8e1b3a9e198139dabb9495bbe4dfbe69a2b744db48caf18ff6d3628531ae2c167baef83000cd1fb2d19cd24c7ccd856ccec4f07ce5024d38fe93b1c39b10c2e668e43d36a67d39190c0caecbd464404286013154d1de3c173a2bb576b252d1507013904e49b88aa6c6216bbd1be5d226dcffacd458b1af76abed1cf710348a1c24b29c803c71884699b5d17ecde7a9407b1389c9c5318ea2fe207c649c61d03d1bbe5370c5fa9a9e253343a3f48c45a6599e465843077343d27a8fe35b52b43b695e213dbf4091aac8b2c3734fb5be042cac4d6631713a601673a9efe3364e9e17696ce974ac10e69764510b015f551e512a628ccfd0d856cda9d4b66ccd21b6873a62cc564efffad93107d931a853bcf4eda400eee0b86f65eb8aafca3662526114576f7de8a6193e6da7b502cb8783ae5fab183268cc707906437506294a1fe8569c779066d5591a4afcb78b556b2a41a97b13ab6bc9c8f8136a6d943f967e79848e4dfddfd4274e2863cf0a907faa9f6774410164faf3c2c1d4ed1c62903f6db03d61f2271e87075ff0c22f67b2aeb60e13ee5357aab936d70dd9af26675b51416262493ef45188b2521342fd874a005e683ebde0257946fa5b5f0285898e4203c69efeca1d5f1419549d55b2e1525094646aa51982157694746047edeca9a2bef4d331818ec6286065cb2e029873599818d997d499f9a986b898a95bbe9e3c28488e5f7847527586419aeb1a8eb081cd1322550f40fbba5972dea08991652fdf413388feaa17c3dd8917bc0c1cc6dd6a5be46f051958c34a4077568357683800d95f22fe4c5febc58db5b53b2a752aa69ffe1f128f6fa7572677d255cff9358c379494e536855d9dcf4f3d52a94925be6fc708ef6fcafab0bd9"}, @NL80211_ATTR_BEACON_HEAD={0x15f, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x3}, @device_b, @device_b, @from_mac=@device_b, {0x4, 0x7f}}, 0x5a5b, @default, 0xe, @void, @void, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x5}, @void, @val={0x25, 0x3, {0x1, 0x0, 0x3}}, @void, @val={0x3c, 0x4, {0x0, 0x69, 0x9, 0x40}}, @val={0x2d, 0x1a, {0x8000, 0x1, 0x1, 0x0, {0xc160, 0x39e, 0x0, 0x2f, 0x0, 0x1, 0x1}, 0x8, 0xc, 0x13}}, @void, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x10}}, @void, [{0xdd, 0xa5, "aa1a0d2c41a247b04a1b7b590d5cd9949987a580780bef15e1c9fc50df6e026255568ca20532721e46de271ead09414049ca456e11d43b4e5deed6ed1e1ae16e22c49bd8f9fb3d9d5141a16bb40da566f2558192d033fcc747e851428cb780886e696f2e921b268bf4c8fa92f9ec2090901bd3f48b807ffb448500299ebc6cef9abb9b9784c2d32ae7d441bf3117f55a321d0331182bf5fdef1a67c831daffbf50c20be22e"}, {0xdd, 0x57, "108306d0640771433898710e138eb8ee67df3bc3913eba52a79853775bcfead8549cdd0cb28ed11774dca804b5b6704f1a7737ed2bfc7f58e0ac7b2238dc0f1a19b3294381d16152f552879f9eff99592669274b9618ce"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x48, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x40, 0x3, "2c82a3a8d765089df5fa579cc5e559ef4e018a93fc18e8f5304b147422bfca29bc56caab2f6896f9089cb3d93a0e1b1e97383cf875504768a7a6bd12"}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0x7}]}]]}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x4}, 0x85) 0s ago: executing program 4 (id=1757): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff000000007110bd000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4044040) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffd}, 0x90) (async) sendmmsg(r2, &(0x7f0000003ac0)=[{{&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @local, 0x8}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000380)='[', 0x1}], 0x1}}], 0x1, 0x0) r3 = accept$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @null}, [@null, @netrom, @null, @rose, @bcast, @rose, @netrom, @netrom]}, &(0x7f0000000140)=0x48) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) bind$rds(r4, 0x0, 0x0) ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x10dc}, {r0, 0x8020}, {r3, 0x4}, {r4, 0x8}], 0x4, &(0x7f0000000300), &(0x7f0000000380)={[0x1]}, 0x8) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x86, &(0x7f0000000680)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000800540000780000000000019078ac1e0001ac1414aa05009078e00000e04700000007030007070064010101443c00130a01012f000000000000000100001000ac1e000100000000acf913aa0000000000000000000000deac141400"/118], 0x0) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r6) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000940)={0x160, r9, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x66794c8}, @TIPC_NLA_PUBL_LOWER={0xbb, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffe}]}, @TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x0, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @remote, 0x3ff}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @remote, 0xf3}}}}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3, @local, 0xffff49f5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_PUBL={0x4}]}, 0x160}, 0x1, 0x0, 0x0, 0x8800}, 0xc040) (async) ioctl$SIOCGETSGCNT(r8, 0x89e1, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local}) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6006000040000900fffffffffddbdf250100000099001f00460601"], 0x660}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x18, 0x3d, 0x701, 0x0, 0x0, {0x3}, [@typed={0x4, 0x2}]}, 0x18}}, 0x0) (async) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYBLOB="4daf6700abf36aecc09cea991f1c905a09dc8fb87c98916603cdeea59cc03117946f859f773045012fb6520bf351593f2905f698a44e7ea6ea54023396207dba53a3658395f179a083d0293bfeda30ee88cf10830be0027c10e21e840e31e7eef7fff0dabb", @ANYRES64=r1, @ANYRES8=r4, @ANYRES64=r0], 0x34}, 0x1, 0x40030000000000}, 0x84) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x11, r3, 0xe35dc000) (async) sendfile(r3, r7, &(0x7f0000000180)=0x1, 0x376b) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r11, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0xd0, r1, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x3c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x2004}, 0xc080) kernel console output (not intermixed with test programs): N 0 to HW filter on device batadv0 [ 77.450066][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.510554][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.536159][ T2988] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.549613][ T2988] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.571428][ T2988] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.581174][ T2988] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.629669][ T5868] veth0_vlan: entered promiscuous mode [ 77.643039][ T5874] veth0_vlan: entered promiscuous mode [ 77.656457][ T5868] veth1_vlan: entered promiscuous mode [ 77.685621][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.705912][ T5874] veth1_vlan: entered promiscuous mode [ 77.753546][ T5881] veth0_vlan: entered promiscuous mode [ 77.769823][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.796127][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.812117][ T5881] veth1_vlan: entered promiscuous mode [ 77.859346][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.870956][ T5874] veth0_macvtap: entered promiscuous mode [ 77.882517][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.883718][ T5874] veth1_macvtap: entered promiscuous mode [ 77.932837][ T5868] veth0_macvtap: entered promiscuous mode [ 77.961538][ T5868] veth1_macvtap: entered promiscuous mode [ 77.984448][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.993147][ T5881] veth0_macvtap: entered promiscuous mode [ 78.012333][ T5867] veth0_vlan: entered promiscuous mode [ 78.021974][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.035339][ T5871] Bluetooth: hci0: command tx timeout [ 78.084754][ T5881] veth1_macvtap: entered promiscuous mode [ 78.108620][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.143358][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.157074][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.166034][ T5867] veth1_vlan: entered promiscuous mode [ 78.177895][ T2954] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.186904][ T2954] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.196557][ T5880] Bluetooth: hci2: command tx timeout [ 78.201994][ T5871] Bluetooth: hci3: command tx timeout [ 78.209367][ T2954] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.235344][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.246861][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.265533][ T5871] Bluetooth: hci1: command tx timeout [ 78.270964][ T5871] Bluetooth: hci4: command tx timeout [ 78.278011][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.287208][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.305784][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.353533][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.385133][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.461049][ T3559] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.497104][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 78.600392][ T3559] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.638673][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.668607][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.676488][ T3559] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.697324][ T3559] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.720024][ T5867] veth0_macvtap: entered promiscuous mode [ 78.736437][ T5867] veth1_macvtap: entered promiscuous mode [ 78.777169][ T3559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.790038][ T3559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.831094][ T2988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.842262][ T2988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.872611][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.902701][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.905858][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.923640][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.958886][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.973309][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.992917][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.012233][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.030080][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.038714][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.194798][ T5997] Zero length message leads to an empty skb [ 79.198616][ T2988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.211141][ T2988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.360367][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.379408][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.440303][ T6006] syz.4.10 uses obsolete (PF_INET,SOCK_PACKET) [ 79.703387][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.730450][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.921863][ T6024] netlink: 'syz.3.14': attribute type 1 has an invalid length. [ 79.971628][ T6024] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.14'. [ 80.106654][ T5871] Bluetooth: hci0: command tx timeout [ 80.137636][ T6035] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.158231][ T6028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.265208][ T5871] Bluetooth: hci3: command tx timeout [ 80.266473][ T5880] Bluetooth: hci2: command tx timeout [ 80.345972][ T5880] Bluetooth: hci1: command tx timeout [ 80.345984][ T5871] Bluetooth: hci4: command tx timeout [ 80.488959][ T6051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21'. [ 80.501955][ T6052] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.803791][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 80.816616][ T6064] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 80.979974][ T6069] netlink: 16 bytes leftover after parsing attributes in process `syz.0.27'. [ 81.257385][ T6080] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.30'. [ 81.758029][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35'. [ 82.069440][ T6105] vlan2: entered allmulticast mode [ 82.091940][ T6112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.41'. [ 82.095012][ T6105] hsr0: entered allmulticast mode [ 82.123374][ T6114] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.40'. [ 82.132791][ T6105] hsr_slave_0: entered allmulticast mode [ 82.132813][ T6105] hsr_slave_1: entered allmulticast mode [ 82.658674][ T6144] netlink: 186400 bytes leftover after parsing attributes in process `syz.0.47'. [ 83.499259][ T6189] syzkaller0: entered promiscuous mode [ 83.505245][ T6189] syzkaller0: entered allmulticast mode [ 83.540686][ T6197] bond1 (unregistering): Released all slaves [ 83.811566][ T6215] __nla_validate_parse: 2 callbacks suppressed [ 83.811582][ T6215] netlink: 24 bytes leftover after parsing attributes in process `syz.1.64'. [ 84.007069][ T6224] netlink: 40 bytes leftover after parsing attributes in process `syz.4.67'. [ 84.693739][ T6215] team0: No ports can be present during mode change [ 84.897530][ T6232] netlink: 44 bytes leftover after parsing attributes in process `syz.0.71'. [ 85.253646][ T6245] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 85.325520][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'. [ 85.409695][ T6249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.77'. [ 85.522530][ T6257] netlink: 'syz.2.79': attribute type 64 has an invalid length. [ 85.548295][ T6257] netlink: 5 bytes leftover after parsing attributes in process `syz.2.79'. [ 85.619346][ T6264] netlink: 'syz.4.81': attribute type 13 has an invalid length. [ 85.760195][ T6264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.959425][ T6281] syzkaller1: entered promiscuous mode [ 85.966535][ T6281] syzkaller1: entered allmulticast mode [ 86.695370][ T43] cfg80211: failed to load regulatory.db [ 86.733024][ T6326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.95'. [ 86.814945][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.95'. [ 87.070918][ T6348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.101'. [ 87.343546][ T6353] tipc: Started in network mode [ 87.370197][ T6353] tipc: Node identity c29b530dd78a, cluster identity 4711 [ 87.386190][ T6353] tipc: Enabled bearer , priority 0 [ 87.437999][ T6359] syzkaller0: entered promiscuous mode [ 87.464197][ T6359] syzkaller0: entered allmulticast mode [ 87.575017][ T6377] netlink: 32 bytes leftover after parsing attributes in process `syz.3.110'. [ 87.692090][ T6353] tipc: Resetting bearer [ 88.018766][ T6397] geneve1: entered allmulticast mode [ 88.121110][ T6352] tipc: Resetting bearer [ 88.214938][ T6352] tipc: Disabling bearer [ 88.242631][ T6402] netlink: 'syz.1.119': attribute type 11 has an invalid length. [ 88.251868][ T6402] netlink: 'syz.1.119': attribute type 4 has an invalid length. [ 88.464230][ T6417] bridge0: entered allmulticast mode [ 88.479880][ T6421] tipc: Enabling of bearer rejected, failed to enable media [ 88.511474][ T6417] bridge_slave_1: left allmulticast mode [ 88.548839][ T6417] bridge_slave_1: left promiscuous mode [ 88.579324][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.646416][ T6428] tipc: Can't bind to reserved service type 0 [ 88.663366][ T6417] bridge_slave_0: left allmulticast mode [ 88.691927][ T6417] bridge_slave_0: left promiscuous mode [ 88.710672][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.835658][ T6417] bridge0 (unregistering): left allmulticast mode [ 88.945276][ T6427] warning: `syz.3.127' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.993291][ T6438] bridge0: port 3(batadv1) entered blocking state [ 89.004368][ T6438] bridge0: port 3(batadv1) entered disabled state [ 89.036414][ T6438] batadv1: entered allmulticast mode [ 89.060061][ T6453] openvswitch: netlink: IP tunnel TTL not specified. [ 89.070172][ T6438] batadv1: entered promiscuous mode [ 89.259129][ T6455] bridge0: port 3(batadv1) entered blocking state [ 89.266180][ T6455] bridge0: port 3(batadv1) entered disabled state [ 89.272766][ T6455] batadv1: entered allmulticast mode [ 89.314368][ T6455] batadv1: entered promiscuous mode [ 89.353576][ T6464] __nla_validate_parse: 6 callbacks suppressed [ 89.353593][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.136'. [ 89.435284][ T6467] netlink: 24 bytes leftover after parsing attributes in process `syz.4.136'. [ 89.481630][ T2959] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 89.492353][ T2959] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 89.771018][ T2959] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 89.780423][ T2959] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 90.021014][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'. [ 90.197391][ T6506] netlink: 232 bytes leftover after parsing attributes in process `syz.2.148'. [ 90.324622][ T6515] netlink: 'syz.4.150': attribute type 1 has an invalid length. [ 90.337159][ T6506] raw_sendmsg: syz.2.148 forgot to set AF_INET. Fix it! [ 90.445360][ T6515] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.501810][ T6523] tipc: Started in network mode [ 90.517285][ T6523] tipc: Node identity 1609ee15713, cluster identity 4711 [ 90.529196][ T6523] tipc: Enabled bearer , priority 0 [ 90.541540][ T6523] syzkaller0: entered promiscuous mode [ 90.553104][ T6523] syzkaller0: entered allmulticast mode [ 90.563793][ T6523] tipc: Resetting bearer [ 90.574022][ T6527] netlink: 'syz.0.153': attribute type 2 has an invalid length. [ 90.574031][ T6136] tipc: Subscription rejected, illegal request [ 90.590440][ T6520] tipc: Resetting bearer [ 90.609342][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'. [ 90.659385][ T6520] tipc: Disabling bearer [ 90.720134][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.155'. [ 90.891364][ T6547] Bluetooth: MGMT ver 1.23 [ 91.186635][ T6559] netlink: 68 bytes leftover after parsing attributes in process `syz.4.162'. [ 91.255256][ T6558] bond1 (unregistering): Released all slaves [ 91.345521][ T6563] netlink: 132 bytes leftover after parsing attributes in process `syz.2.163'. [ 91.417569][ T6565] tipc: Enabling of bearer rejected, failed to enable media [ 91.577535][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.165'. [ 91.795044][ T6579] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.169'. [ 91.997635][ T6584] netlink: 'syz.0.171': attribute type 1 has an invalid length. [ 92.025186][ T6589] xt_l2tp: invalid flags combination: 0 [ 92.122788][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 92.464001][ T6604] bond1 (unregistering): Released all slaves [ 92.564726][ T6615] netlink: 'syz.4.183': attribute type 15 has an invalid length. [ 92.871096][ T6615] netlink: 'syz.4.183': attribute type 15 has an invalid length. [ 92.888623][ T6625] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 92.914043][ T6135] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 92.959465][ T6135] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 93.005878][ T6135] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 93.050813][ T2959] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 93.211650][ T6641] team0: Device gtp0 is of different type [ 93.345831][ T6643] sch_tbf: burst 0 is lower than device netdevsim0 mtu (1514) ! [ 93.711312][ T6663] IPVS: set_ctl: invalid protocol: 98 10.1.1.1:20002 [ 93.757361][ T6663] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20004 [ 94.275458][ T6689] netlink: 'syz.3.203': attribute type 1 has an invalid length. [ 94.382869][ T6689] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.392178][ T6698] __nla_validate_parse: 13 callbacks suppressed [ 94.392195][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 94.500136][ T6703] sctp: [Deprecated]: syz.3.208 (pid 6703) Use of struct sctp_assoc_value in delayed_ack socket option. [ 94.500136][ T6703] Use struct sctp_sack_info instead [ 94.628493][ T2959] tipc: Subscription rejected, illegal request [ 94.964973][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 95.225485][ T6745] trusted_key: syz.2.223 sent an empty control message without MSG_MORE. [ 95.379967][ T6761] netlink: 36 bytes leftover after parsing attributes in process `syz.2.223'. [ 95.767628][ T6781] veth0: entered promiscuous mode [ 95.793210][ T6782] netlink: 'syz.1.230': attribute type 1 has an invalid length. [ 95.861207][ T6782] netlink: 144 bytes leftover after parsing attributes in process `syz.1.230'. [ 95.887771][ T6782] netlink: 'syz.1.230': attribute type 1 has an invalid length. [ 95.903954][ T6782] netlink: 'syz.1.230': attribute type 2 has an invalid length. [ 95.911810][ T6782] netlink: 64 bytes leftover after parsing attributes in process `syz.1.230'. [ 96.125994][ T6769] veth0: left promiscuous mode [ 96.168064][ T6794] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 96.280407][ T6794] netlink: 'syz.3.232': attribute type 21 has an invalid length. [ 96.294285][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'. [ 96.312549][ T6809] netlink: 40 bytes leftover after parsing attributes in process `syz.1.236'. [ 96.342298][ T6800] netlink: 'syz.3.232': attribute type 10 has an invalid length. [ 96.403862][ T6128] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.428392][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.440793][ T6813] netlink: 'syz.2.238': attribute type 10 has an invalid length. [ 96.493848][ T6800] team0: Port device dummy0 added [ 96.508327][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.523805][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.628384][ T6813] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.663842][ T6828] sctp: [Deprecated]: syz.3.242 (pid 6828) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.663842][ T6828] Use struct sctp_sack_info instead [ 96.675084][ T6813] bond0: (slave team0): Enslaving as an active interface with an up link [ 96.889951][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 96.931768][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.243'. [ 96.969752][ T6839] netlink: 'syz.1.243': attribute type 10 has an invalid length. [ 96.986590][ T6839] veth0_vlan: entered allmulticast mode [ 96.995909][ T6843] sctp: [Deprecated]: syz.3.247 (pid 6843) Use of int in max_burst socket option. [ 96.995909][ T6843] Use struct sctp_assoc_value instead [ 97.012332][ T6839] veth0_vlan: left promiscuous mode [ 97.027817][ T6839] veth0_vlan: entered promiscuous mode [ 97.042815][ T6839] team0: Device veth0_vlan failed to register rx_handler [ 97.384654][ T6855] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.250'. [ 97.457276][ T6855] netlink: zone id is out of range [ 97.495124][ T6855] netlink: zone id is out of range [ 97.500323][ T6855] netlink: zone id is out of range [ 97.533856][ T6859] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 97.534784][ T6855] netlink: zone id is out of range [ 97.602712][ T6855] netlink: get zone limit has 8 unknown bytes [ 97.658132][ T6862] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:65535 [ 97.666663][ T5877] IPVS: starting estimator thread 0... [ 97.777151][ T6866] IPVS: using max 26 ests per chain, 62400 per kthread [ 97.916890][ T6874] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 97.950318][ T6874] x_tables: ip6_tables: NETMAP target: only valid in nat table, not syz1 [ 98.296935][ T6894] netlink: 'syz.2.264': attribute type 10 has an invalid length. [ 98.612972][ T6910] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 98.776918][ T6918] sctp: [Deprecated]: syz.1.272 (pid 6918) Use of struct sctp_assoc_value in delayed_ack socket option. [ 98.776918][ T6918] Use struct sctp_sack_info instead [ 98.901723][ T6930] netlink: 'syz.3.276': attribute type 5 has an invalid length. [ 98.947485][ T6930] geneve2: entered promiscuous mode [ 98.962544][ T6930] geneve2: entered allmulticast mode [ 98.978044][ T6127] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 99.035061][ T6127] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 99.056641][ T6127] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 99.079585][ T6127] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 99.339163][ T6952] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.430521][ T6955] __nla_validate_parse: 7 callbacks suppressed [ 99.430538][ T6955] netlink: 340 bytes leftover after parsing attributes in process `syz.0.285'. [ 99.488365][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 99.513394][ T6955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.544658][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.287'. [ 99.623247][ T6964] syzkaller0: entered promiscuous mode [ 99.631052][ T6964] syzkaller0: entered allmulticast mode [ 99.656240][ T6958] tipc: Started in network mode [ 99.661186][ T6958] tipc: Node identity , cluster identity 4711 [ 99.675979][ T6958] tipc: Failed to obtain node identity [ 99.688624][ T6958] tipc: Enabling of bearer rejected, failed to enable media [ 99.801397][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 99.860197][ T6975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.292'. [ 99.902785][ T6975] netlink: 'syz.1.292': attribute type 18 has an invalid length. [ 101.154206][ T6135] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.201469][ T6135] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.260393][ T6135] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.280009][ T7006] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20000 [ 101.302821][ T6135] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.431915][ T7010] tipc: Started in network mode [ 101.451317][ T7010] tipc: Node identity d2fa45d00fb5, cluster identity 4711 [ 101.489203][ T7010] tipc: Enabled bearer , priority 0 [ 101.514464][ T7021] syzkaller0: entered promiscuous mode [ 101.526518][ T7021] syzkaller0: entered allmulticast mode [ 101.762381][ T7028] syzkaller0: entered promiscuous mode [ 101.768686][ T7028] syzkaller0: entered allmulticast mode [ 101.780299][ T7026] tipc: Started in network mode [ 101.794588][ T7026] tipc: Node identity eeacb1588dc2, cluster identity 4711 [ 101.811226][ T7026] tipc: Enabled bearer , priority 0 [ 101.834216][ T7034] tipc: Resetting bearer [ 101.900418][ T7039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.306'. [ 101.950947][ T7026] tipc: Resetting bearer [ 101.969680][ T7026] tipc: Disabling bearer [ 101.999677][ T7039] vlan2: entered promiscuous mode [ 102.012575][ T7039] gretap0: entered promiscuous mode [ 102.055411][ T7007] tipc: Resetting bearer [ 102.119140][ T7047] syz.2.308 uses old SIOCAX25GETINFO [ 102.172014][ T7007] tipc: Disabling bearer [ 102.175069][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.309'. [ 102.224751][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.309'. [ 102.361843][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.309'. [ 102.412303][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.309'. [ 103.712593][ T7124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.728284][ T7140] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.751888][ T7124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.773512][ T7124] bond0 (unregistering): Released all slaves [ 104.005721][ T7151] validate_nla: 2 callbacks suppressed [ 104.005738][ T7151] netlink: 'syz.4.342': attribute type 1 has an invalid length. [ 104.084239][ T7151] netlink: 'syz.4.342': attribute type 1 has an invalid length. [ 104.091918][ T7151] netlink: 'syz.4.342': attribute type 1 has an invalid length. [ 104.155515][ T7151] netlink: 'syz.4.342': attribute type 2 has an invalid length. [ 104.255597][ T7160] netlink: 'syz.2.345': attribute type 1 has an invalid length. [ 104.368800][ T7170] netlink: 'syz.3.349': attribute type 1 has an invalid length. [ 104.445098][ T7163] bond1: (slave bridge1): making interface the new active one [ 104.490752][ T7163] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 104.496214][ T7178] Bluetooth: MGMT ver 1.23 [ 104.633870][ T7183] __nla_validate_parse: 9 callbacks suppressed [ 104.633887][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.350'. [ 104.679208][ T7184] netlink: 24 bytes leftover after parsing attributes in process `syz.3.349'. [ 104.713700][ T7170] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.728096][ T7174] netlink: 'syz.4.348': attribute type 7 has an invalid length. [ 104.740504][ T7174] netlink: 40 bytes leftover after parsing attributes in process `syz.4.348'. [ 104.797235][ T7177] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 104.862381][ T7179] vlan3: entered allmulticast mode [ 104.875370][ T7179] veth1: entered allmulticast mode [ 104.905540][ T7179] veth1: entered promiscuous mode [ 104.924952][ T7179] veth1: left promiscuous mode [ 104.956524][ T7179] bond2: (slave vlan3): making interface the new active one [ 104.977645][ T7179] bond2: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 105.004098][ T7179] veth1: entered promiscuous mode [ 105.015137][ T7179] vlan3: entered promiscuous mode [ 105.020927][ T7179] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 105.270435][ T7198] syzkaller0: entered promiscuous mode [ 105.311089][ T7198] syzkaller0: entered allmulticast mode [ 105.583555][ T7219] netlink: 'syz.3.362': attribute type 10 has an invalid length. [ 106.621699][ T7211] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 107.283374][ T7259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.374'. [ 107.351325][ T6017] IPVS: starting estimator thread 0... [ 107.428365][ T7265] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.375'. [ 107.454712][ T7262] IPVS: using max 30 ests per chain, 72000 per kthread [ 107.679749][ T7272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.378'. [ 107.906238][ T7283] syzkaller1: entered promiscuous mode [ 107.921578][ T7283] syzkaller1: entered allmulticast mode [ 107.947729][ T7282] vcan0: entered allmulticast mode [ 108.013164][ T7289] syzkaller1: entered promiscuous mode [ 108.021452][ T7289] syzkaller1: entered allmulticast mode [ 108.195930][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.385'. [ 108.281417][ T7303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.388'. [ 108.328580][ T7305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.387'. [ 108.470548][ T7305] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.518468][ T7305] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.564990][ T7319] netlink: 'syz.3.392': attribute type 1 has an invalid length. [ 108.732620][ T7319] 8021q: adding VLAN 0 to HW filter on device bond3 [ 108.828957][ T7323] veth3: entered promiscuous mode [ 108.908918][ T7322] netlink: 'syz.2.393': attribute type 15 has an invalid length. [ 108.939667][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'. [ 109.029751][ T7322] netlink: 'syz.2.393': attribute type 15 has an invalid length. [ 109.033084][ T6137] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 109.092667][ T7349] netlink: 'syz.4.401': attribute type 3 has an invalid length. [ 109.101933][ T6137] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 109.112755][ T7351] netlink: 'syz.4.401': attribute type 1 has an invalid length. [ 109.127093][ T6137] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 109.140251][ T7349] netlink: 'syz.4.401': attribute type 1 has an invalid length. [ 109.233263][ T6137] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 109.337086][ T7351] 8021q: adding VLAN 0 to HW filter on device bond3 [ 109.376676][ T7361] veth3: entered promiscuous mode [ 109.893498][ T7390] __nla_validate_parse: 2 callbacks suppressed [ 109.893515][ T7390] netlink: 20 bytes leftover after parsing attributes in process `syz.0.410'. [ 110.029867][ T7402] netlink: 'syz.2.414': attribute type 33 has an invalid length. [ 110.062428][ T7402] netlink: 152 bytes leftover after parsing attributes in process `syz.2.414'. [ 110.117865][ T7405] bond4 (unregistering): Released all slaves [ 110.437410][ T7423] netlink: 'syz.2.420': attribute type 1 has an invalid length. [ 110.454444][ T7423] netlink: 'syz.2.420': attribute type 4 has an invalid length. [ 110.479301][ T7423] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.420'. [ 110.804073][ T7438] bond2: entered promiscuous mode [ 110.814453][ T7438] bond2: entered allmulticast mode [ 110.825539][ T7438] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.886545][ T7447] netlink: 'syz.0.424': attribute type 1 has an invalid length. [ 110.962749][ T7451] sctp: [Deprecated]: syz.4.426 (pid 7451) Use of int in max_burst socket option. [ 110.962749][ T7451] Use struct sctp_assoc_value instead [ 111.009486][ T7451] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 111.287987][ T7470] bond4 (unregistering): Released all slaves [ 111.480860][ T7469] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.489228][ T7469] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.663048][ T7469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.689444][ T7469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.801898][ T7477] erspan0: entered promiscuous mode [ 111.812308][ T7477] erspan0: entered allmulticast mode [ 111.873263][ T6137] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.924281][ T6137] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.974646][ T6128] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.003652][ T6128] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.093254][ T6128] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.155275][ T6128] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.357901][ T7511] netlink: 232 bytes leftover after parsing attributes in process `syz.4.443'. [ 112.473633][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 112.497350][ T7518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.443'. [ 112.661870][ T7529] netlink: 72 bytes leftover after parsing attributes in process `syz.0.447'. [ 113.413765][ T7576] netlink: 64 bytes leftover after parsing attributes in process `syz.2.458'. [ 113.432473][ T7576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.458'. [ 113.443262][ T7576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.458'. [ 114.186821][ T7607] bond3 (unregistering): Released all slaves [ 114.372716][ T7618] ve: renamed from ipvlan1 [ 114.439740][ T7620] syzkaller1: left promiscuous mode [ 114.446628][ T7620] syzkaller1: left allmulticast mode [ 114.525042][ T7597] netlink: 'syz.3.461': attribute type 10 has an invalid length. [ 114.573697][ T7597] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 114.612973][ T7597] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 114.694564][ T7633] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.707743][ T7633] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.743126][ T7633] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.752189][ T6128] wlan0: Trigger new scan to find an IBSS to join [ 114.780840][ T7633] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.874015][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.913153][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.969289][ T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.067526][ T7647] openvswitch: netlink: Duplicate or invalid key (type 0). [ 115.085245][ T7647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.127148][ T7647] unsupported nla_type 52263 [ 115.352320][ T7660] tipc: Enabled bearer , priority 0 [ 115.390626][ T7660] syzkaller0: entered promiscuous mode [ 115.420358][ T7660] syzkaller0: entered allmulticast mode [ 115.568831][ T7685] tipc: Resetting bearer [ 115.706770][ T7655] tipc: Resetting bearer [ 115.769223][ T7655] tipc: Disabling bearer [ 115.823684][ T7690] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 115.857320][ T7690] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 116.020332][ T7705] netlink: 'syz.1.488': attribute type 1 has an invalid length. [ 116.075086][ T6137] vlan3: left promiscuous mode [ 116.209467][ T7720] __nla_validate_parse: 3 callbacks suppressed [ 116.209485][ T7720] netlink: 28 bytes leftover after parsing attributes in process `syz.1.488'. [ 116.288620][ T7705] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.419416][ T7705] bond1: (slave bond2): making interface the new active one [ 116.432503][ T7705] bond1: (slave bond2): Enslaving as an active interface with an up link [ 116.443168][ T7739] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.494'. [ 116.497098][ T7712] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 116.530733][ T7720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.817194][ T7750] syzkaller1: left promiscuous mode [ 116.822433][ T7750] syzkaller1: left allmulticast mode [ 116.916344][ T7761] netlink: 16 bytes leftover after parsing attributes in process `syz.0.501'. [ 117.323353][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.505'. [ 117.370541][ T7786] bridge0: entered promiscuous mode [ 117.387861][ T7786] macsec1: entered promiscuous mode [ 117.401403][ T7786] macsec1: entered allmulticast mode [ 117.422960][ T7786] bridge0: entered allmulticast mode [ 117.451303][ T7786] bridge0: port 1(macsec1) entered blocking state [ 117.470336][ T7786] bridge0: port 1(macsec1) entered disabled state [ 117.484930][ T7786] bridge0: left allmulticast mode [ 117.492285][ T7786] bridge0: left promiscuous mode [ 117.788090][ T12] wlan0: Trigger new scan to find an IBSS to join [ 117.789415][ T7809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.511'. [ 117.840327][ T7811] netlink: 277 bytes leftover after parsing attributes in process `syz.4.512'. [ 117.858565][ T7812] netlink: 'syz.3.511': attribute type 11 has an invalid length. [ 118.239059][ T7829] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 118.284626][ T7837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.517'. [ 118.469250][ T7845] netlink: 'syz.1.521': attribute type 39 has an invalid length. [ 118.579996][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.522'. [ 118.623441][ T7851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.653585][ T7855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.524'. [ 118.666809][ T7851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.691402][ T7851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.701281][ T7851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.757378][ T7855] netlink: 'syz.2.524': attribute type 10 has an invalid length. [ 118.921985][ T7855] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 119.015863][ T7855] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.252298][ T7855] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 119.267687][ T7855] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.405259][ T7855] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 119.424324][ T7855] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.448994][ T7892] netlink: 'syz.3.537': attribute type 1 has an invalid length. [ 119.512454][ T7895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.538'. [ 119.549950][ T7855] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 119.561074][ T7855] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.699398][ T7898] hsr_slave_0 (unregistering): left promiscuous mode [ 119.887817][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 119.906558][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.989708][ T6135] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 120.002963][ T6135] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.015884][ T7913] tun0: tun_chr_ioctl cmd 1074025675 [ 120.022122][ T7913] tun0: persist disabled [ 120.076632][ T49] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 120.101994][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.216169][ T49] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 120.234278][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.380575][ T7934] netlink: 'syz.0.550': attribute type 5 has an invalid length. [ 120.402562][ T7935] netlink: 'syz.0.550': attribute type 5 has an invalid length. [ 120.546473][ T7934] geneve2: entered promiscuous mode [ 120.570933][ T7934] geneve2: entered allmulticast mode [ 120.702294][ T6137] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 120.733978][ T6137] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 120.760568][ T6137] wlan0: Trigger new scan to find an IBSS to join [ 120.842015][ T2959] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 120.859796][ T2959] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 121.344648][ T7983] netlink: 'syz.3.561': attribute type 3 has an invalid length. [ 121.452797][ T7992] __nla_validate_parse: 11 callbacks suppressed [ 121.452814][ T7992] netlink: 68 bytes leftover after parsing attributes in process `syz.4.564'. [ 121.508598][ T7992] bond_slave_1: entered allmulticast mode [ 121.629644][ T8001] bond4: entered promiscuous mode [ 121.634921][ T8001] bond4: entered allmulticast mode [ 121.640372][ T8001] 8021q: adding VLAN 0 to HW filter on device bond4 [ 121.648201][ T8001] netlink: 'syz.4.567': attribute type 7 has an invalid length. [ 121.667767][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.716801][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 121.844612][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 121.889882][ T8014] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.571'. [ 121.925864][ T8016] sch_fq: defrate 0 ignored. [ 121.965055][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 122.104461][ T2954] bond2: (slave wlan0): failed to get link speed/duplex [ 122.142715][ T8029] openvswitch: netlink: Key type 16144 is out of range max 32 [ 122.215915][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 122.225866][ T8037] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 122.356988][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 122.474030][ T8049] netlink: 56 bytes leftover after parsing attributes in process `syz.1.581'. [ 122.589738][ T8058] netlink: 'syz.2.583': attribute type 7 has an invalid length. [ 122.617600][ T8052] netlink: 'syz.2.583': attribute type 153 has an invalid length. [ 122.633090][ T8060] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20004 [ 122.683493][ T8064] netlink: 'syz.1.586': attribute type 24 has an invalid length. [ 122.756461][ T8067] netlink: 88 bytes leftover after parsing attributes in process `syz.0.587'. [ 122.795264][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 122.913748][ T8081] netlink: 'syz.4.590': attribute type 1 has an invalid length. [ 122.924438][ T2954] bond2: (slave wlan0): failed to get link speed/duplex [ 122.952856][ T8081] netlink: 220 bytes leftover after parsing attributes in process `syz.4.590'. [ 123.098083][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.593'. [ 123.136175][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.593'. [ 123.169175][ T8095] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 123.233731][ T8101] netlink: 146840 bytes leftover after parsing attributes in process `syz.3.597'. [ 123.654849][ T8121] veth0_to_bridge: entered promiscuous mode [ 123.673550][ T8121] veth0_to_bridge: left promiscuous mode [ 124.083052][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.605'. [ 124.102439][ T8133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.605'. [ 124.525626][ T8151] netlink: 'syz.0.610': attribute type 11 has an invalid length. [ 124.768470][ T8163] nftables ruleset with unbound chain [ 124.943550][ T8159] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 124.991276][ T8159] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 125.044300][ T8159] gretap1: entered promiscuous mode [ 125.060894][ T8159] gretap1: entered allmulticast mode [ 125.549772][ T8173] bond5 (unregistering): Released all slaves [ 125.679338][ T5880] block nbd1: Receive control failed (result -32) [ 125.679338][ T5871] block nbd2: Receive control failed (result -32) [ 126.385974][ T8218] syzkaller0: entered allmulticast mode [ 126.613382][ T8247] __nla_validate_parse: 4 callbacks suppressed [ 126.613400][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.636'. [ 126.950469][ T8262] netlink: 16 bytes leftover after parsing attributes in process `syz.4.640'. [ 126.961865][ T8262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.640'. [ 127.807059][ T8247] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 127.828809][ T6137] net_ratelimit: 24 callbacks suppressed [ 127.828829][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 128.019008][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 128.174670][ T6135] bond2: (slave wlan0): failed to get link speed/duplex [ 128.217385][ T8285] netlink: 'syz.3.647': attribute type 10 has an invalid length. [ 128.286055][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 128.414665][ T6127] bond2: (slave wlan0): failed to get link speed/duplex [ 128.443277][ T8300] IPVS: set_ctl: invalid protocol: 44 172.30.0.5:20000 [ 128.514910][ T8301] netlink: 24 bytes leftover after parsing attributes in process `syz.4.649'. [ 128.589536][ T8301] ip6gre0: entered promiscuous mode [ 128.627408][ T8301] ip6gre0: entered allmulticast mode [ 128.642635][ T8307] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 128.646202][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 128.789909][ T8308] bond3 (unregistering): Released all slaves [ 128.823575][ T8305] bridge_slave_0: left allmulticast mode [ 128.830223][ T8305] bridge_slave_0: left promiscuous mode [ 128.836549][ T8305] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.857190][ T8305] bridge_slave_1: left allmulticast mode [ 128.862900][ T8305] bridge_slave_1: left promiscuous mode [ 128.869837][ T8305] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.889195][ T8305] bond0: (slave bond_slave_0): Releasing backup interface [ 128.913147][ T8305] bond0: (slave bond_slave_1): Releasing backup interface [ 128.930746][ T8305] team0: Port device team_slave_0 removed [ 128.942043][ T8305] team0: Port device team_slave_1 removed [ 128.954000][ T8305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.967530][ T8305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.003629][ T8305] bond1: (slave bond2): Releasing backup interface [ 129.010826][ T8305] bond1: (slave bond2): the permanent HWaddr of slave - c6:8e:de:58:86:e0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 129.048739][ T8305] bond1: (slave gretap1): making interface the new active one [ 129.054584][ T8323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.657'. [ 129.065688][ T8323] netlink: 'syz.2.657': attribute type 7 has an invalid length. [ 129.073677][ T8323] netlink: 'syz.2.657': attribute type 8 has an invalid length. [ 129.085201][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'. [ 129.095468][ T8305] bond1: (slave gretap1): Releasing backup interface [ 129.119367][ T6135] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.134257][ T6135] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.149646][ T6135] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.385668][ T6135] bond2: (slave wlan0): failed to get link speed/duplex [ 129.411295][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 129.445547][ T8337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.660'. [ 129.554358][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 129.680344][ T6127] bond2: (slave wlan0): failed to get link speed/duplex [ 129.716551][ T8362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.665'. [ 129.729582][ T8361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.876984][ T8362] bond3 (unregistering): Released all slaves [ 130.004785][ T8372] netlink: 'syz.4.670': attribute type 1 has an invalid length. [ 130.004930][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 130.432865][ T8402] syz.3.678: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 130.532528][ T8402] CPU: 1 UID: 0 PID: 8402 Comm: syz.3.678 Not tainted syzkaller #0 PREEMPT(full) [ 130.532552][ T8402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.532568][ T8402] Call Trace: [ 130.532576][ T8402] [ 130.532584][ T8402] dump_stack_lvl+0x189/0x250 [ 130.532626][ T8402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.532647][ T8402] ? __pfx__printk+0x10/0x10 [ 130.532671][ T8402] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 130.532690][ T8402] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 130.532712][ T8402] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 130.532735][ T8402] warn_alloc+0x214/0x310 [ 130.532761][ T8402] ? stack_depot_save_flags+0x40/0x860 [ 130.532786][ T8402] ? __pfx_warn_alloc+0x10/0x10 [ 130.532812][ T8402] ? kasan_save_track+0x4f/0x80 [ 130.532833][ T8402] ? xskq_create+0x56/0x170 [ 130.532852][ T8402] ? xsk_init_queue+0xb0/0x110 [ 130.532870][ T8402] ? xsk_setsockopt+0x4dc/0x8d0 [ 130.532887][ T8402] ? do_sock_setsockopt+0x17c/0x1b0 [ 130.532903][ T8402] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 130.532919][ T8402] ? do_syscall_64+0xfa/0x3b0 [ 130.532933][ T8402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.532959][ T8402] __vmalloc_node_range_noprof+0x125/0x12f0 [ 130.533013][ T8402] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 130.533043][ T8402] ? __kasan_kmalloc+0x93/0xb0 [ 130.533064][ T8402] vmalloc_user_noprof+0xad/0xf0 [ 130.533085][ T8402] ? xskq_create+0xbf/0x170 [ 130.533106][ T8402] xskq_create+0xbf/0x170 [ 130.533132][ T8402] xsk_init_queue+0xb0/0x110 [ 130.533157][ T8402] xsk_setsockopt+0x4dc/0x8d0 [ 130.533182][ T8402] ? __pfx_xsk_setsockopt+0x10/0x10 [ 130.533203][ T8402] ? __pfx_aa_sk_perm+0x10/0x10 [ 130.533231][ T8402] ? aa_sock_opt_perm+0xff/0x1b0 [ 130.533251][ T8402] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 130.533269][ T8402] ? __pfx_xsk_setsockopt+0x10/0x10 [ 130.533292][ T8402] do_sock_setsockopt+0x17c/0x1b0 [ 130.533314][ T8402] __x64_sys_setsockopt+0x13f/0x1b0 [ 130.533337][ T8402] do_syscall_64+0xfa/0x3b0 [ 130.533352][ T8402] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.533373][ T8402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.533390][ T8402] ? clear_bhb_loop+0x60/0xb0 [ 130.533408][ T8402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.533423][ T8402] RIP: 0033:0x7f008238ebe9 [ 130.533444][ T8402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.533459][ T8402] RSP: 002b:00007f008322c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 130.533477][ T8402] RAX: ffffffffffffffda RBX: 00007f00825c5fa0 RCX: 00007f008238ebe9 [ 130.533490][ T8402] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 130.533501][ T8402] RBP: 00007f0082411e19 R08: 0000000000000004 R09: 0000000000000000 [ 130.533512][ T8402] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.533523][ T8402] R13: 00007f00825c6038 R14: 00007f00825c5fa0 R15: 00007ffe1f6e4638 [ 130.533553][ T8402] [ 130.533564][ T8402] Mem-Info: [ 130.794009][ T8414] tipc: Trying to set illegal importance in message [ 130.803850][ T8402] active_anon:5995 inactive_anon:0 isolated_anon:0 [ 130.803850][ T8402] active_file:2628 inactive_file:39862 isolated_file:0 [ 130.803850][ T8402] unevictable:768 dirty:115 writeback:0 [ 130.803850][ T8402] slab_reclaimable:10739 slab_unreclaimable:111481 [ 130.803850][ T8402] mapped:29121 shmem:1360 pagetables:1277 [ 130.803850][ T8402] sec_pagetables:0 bounce:0 [ 130.803850][ T8402] kernel_misc_reclaimable:0 [ 130.803850][ T8402] free:1315625 free_pcp:15838 free_cma:0 [ 130.917173][ T8402] Node 0 active_anon:24000kB inactive_anon:0kB active_file:10512kB inactive_file:159248kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120656kB dirty:460kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12776kB pagetables:4584kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 130.950003][ T8402] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 130.993684][ T8402] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 131.110500][ T8402] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 131.201482][ T8402] Node 0 DMA32 free:1351536kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23648kB inactive_anon:0kB active_file:10512kB inactive_file:157676kB unevictable:1536kB writepending:460kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:46168kB local_pcp:20960kB free_cma:0kB [ 131.304872][ T8402] lowmem_reserve[]: 0 0 1 1 1 [ 131.309636][ T8402] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 131.372522][ T8432] netlink: 'syz.0.683': attribute type 21 has an invalid length. [ 131.389372][ T8402] lowmem_reserve[]: 0 0 0 0 0 [ 131.403688][ T8402] Node 1 Normal free:3895524kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18624kB local_pcp:10592kB free_cma:0kB [ 131.415696][ T8432] IPv6: NLM_F_CREATE should be specified when creating new route [ 131.439905][ T8402] lowmem_reserve[]: 0 0 0 0 0 [ 131.448005][ T8402] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 131.463498][ T8430] bond5 (unregistering): Released all slaves [ 131.485380][ T8402] Node 0 DMA32: 24*4kB (UM) 20*8kB (UM) 41*16kB (UME) 536*32kB (UM) 254*64kB (UM) 54*128kB (UME) 10*256kB (UM) 3*512kB (UME) 1*1024kB (U) 3*2048kB (UM) 317*4096kB (M) = 1350928kB [ 131.513618][ T8402] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 131.539053][ T8402] Node 1 Normal: 177*4kB (UE) 38*8kB (UME) 45*16kB (UME) 85*32kB (UME) 22*64kB (UME) 6*128kB (UME) 3*256kB (ME) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 948*4096kB (M) = 3895524kB [ 131.624347][ T8402] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.646843][ T8402] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.719095][ T8402] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.732501][ T8402] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.746867][ T8402] 43846 total pagecache pages [ 131.751565][ T8402] 0 pages in swap cache [ 131.795664][ T8452] __nla_validate_parse: 6 callbacks suppressed [ 131.795680][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.689'. [ 131.839186][ T8402] Free swap = 124996kB [ 131.860524][ T8402] Total swap = 124996kB [ 131.904254][ T8402] 2097051 pages RAM [ 131.908161][ T8402] 0 pages HighMem/MovableOnly [ 131.933691][ T8402] 425667 pages reserved [ 131.957945][ T8402] 0 pages cma reserved [ 132.144395][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.697'. [ 132.146111][ T8465] netlink: 'syz.4.694': attribute type 1 has an invalid length. [ 132.185948][ T8468] pim6reg1: entered promiscuous mode [ 132.191406][ T8468] pim6reg1: entered allmulticast mode [ 132.356762][ T8465] 8021q: adding VLAN 0 to HW filter on device bond5 [ 132.403912][ T8475] bond5: (slave geneve2): making interface the new active one [ 132.415808][ T8475] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 132.499119][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.700'. [ 132.567345][ T6017] hid (null): unknown global tag 0xe [ 132.574028][ T6017] hid (null): nested delimiters [ 132.649052][ T6017] hid (null): unknown global tag 0xc [ 132.655625][ T6017] hid (null): unknown global tag 0xd [ 132.660924][ T6017] hid (null): unknown global tag 0xd [ 132.666585][ T6017] hid (null): unknown global tag 0xe [ 132.672076][ T6017] hid (null): bogus close delimiter [ 132.726350][ T8487] bond4 (unregistering): Released all slaves [ 132.748615][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.755279][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.775211][ T6017] hid (null): unknown global tag 0x20 [ 132.781044][ T6017] hid (null): invalid report_size 1504221752 [ 132.787318][ T6017] hid (null): unknown global tag 0x30 [ 132.792761][ T6017] hid (null): unknown global tag 0xd [ 132.798495][ T6017] hid (null): unknown global tag 0xe [ 132.806173][ T6017] hid (null): unknown global tag 0xd [ 132.811602][ T6017] hid (null): invalid report_size 13880 [ 132.818021][ T6017] hid (null): unknown global tag 0x78 [ 132.823548][ T6017] hid (null): unknown global tag 0xd [ 132.830652][ T6017] hid (null): invalid report_size 28570 [ 132.837369][ T8499] netlink: 'syz.0.704': attribute type 11 has an invalid length. [ 132.845577][ T8499] netlink: 224 bytes leftover after parsing attributes in process `syz.0.704'. [ 132.854864][ T6017] hid (null): report_id 18624 is invalid [ 132.860649][ T6017] hid (null): invalid report_count -223718079 [ 132.867520][ T6017] hid (null): bogus close delimiter [ 132.873529][ T6017] hid (null): unknown global tag 0x80 [ 132.892411][ T8499] netlink: 56 bytes leftover after parsing attributes in process `syz.0.704'. [ 132.917279][ T6017] hid (null): unknown global tag 0xe [ 132.922730][ T6017] hid (null): unknown global tag 0xd [ 132.936333][ T6137] net_ratelimit: 14 callbacks suppressed [ 132.936349][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 132.959363][ T6017] hid (null): unknown global tag 0xe [ 132.968325][ T6017] hid (null): report_id 477017189 is invalid [ 132.991580][ T6017] hid (null): unknown global tag 0x86 [ 133.040155][ T6017] hid (null): report_id 263567493 is invalid [ 133.065697][ T6017] hid (null): unknown global tag 0xc [ 133.071075][ T6017] hid (null): unknown global tag 0xd [ 133.104943][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 133.145608][ T6017] hid (null): invalid report_count 32905 [ 133.162316][ T6017] hid (null): unknown global tag 0xe [ 133.163395][ T8507] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20000 [ 133.185410][ T6017] hid (null): unknown global tag 0xe [ 133.190720][ T6017] hid (null): unknown global tag 0xe [ 133.225293][ T6017] hid (null): unknown global tag 0xd [ 133.230618][ T6017] hid (null): unknown global tag 0xd3 [ 133.244303][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 133.246883][ T8507] IPVS: set_ctl: invalid protocol: 137 172.30.0.1:20001 [ 133.271695][ T8509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.708'. [ 133.274756][ T8512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.709'. [ 133.284319][ T6017] hid (null): unknown global tag 0xd [ 133.374932][ T2954] bond2: (slave wlan0): failed to get link speed/duplex [ 133.505045][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 133.625150][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 133.763643][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.716'. [ 133.961254][ T8530] bond4 (unregistering): Released all slaves [ 134.021242][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 134.156769][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 134.161666][ T8533] openvswitch: netlink: Invalid VLAN frame [ 134.352173][ T8555] netlink: 'syz.1.721': attribute type 1 has an invalid length. [ 134.937655][ T6017] hid-generic 0005:0D45:1012.0001: unknown global tag 0xe [ 134.950303][ T6017] hid-generic 0005:0D45:1012.0001: item 0 2 1 14 parsing failed [ 134.963488][ T6017] hid-generic 0005:0D45:1012.0001: probe with driver hid-generic failed with error -22 [ 137.417889][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.726'. [ 137.497477][ T8581] netlink: 32 bytes leftover after parsing attributes in process `syz.2.728'. [ 138.543582][ T8555] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 138.557555][ T8562] vlan2: entered allmulticast mode [ 138.584195][ T8562] veth1: entered allmulticast mode [ 138.624196][ T8576] netlink: 288 bytes leftover after parsing attributes in process `syz.3.726'. [ 138.665459][ T8585] tipc: Enabled bearer , priority 0 [ 138.695739][ T8586] syzkaller0: entered promiscuous mode [ 138.702062][ T8586] syzkaller0: entered allmulticast mode [ 138.739124][ T8594] tipc: Resetting bearer [ 138.784200][ T2954] bond2: (slave wlan0): failed to get link speed/duplex [ 138.921406][ T8608] bond3 (unregistering): Released all slaves [ 138.983883][ T8594] tipc: Resetting bearer [ 139.012066][ T8594] tipc: Disabling bearer [ 139.088493][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 139.171337][ T8624] netlink: 56 bytes leftover after parsing attributes in process `syz.3.736'. [ 139.318129][ T6135] bond2: (slave wlan0): failed to get link speed/duplex [ 139.474222][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 139.623274][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 139.738692][ T8661] netlink: 64 bytes leftover after parsing attributes in process `syz.1.745'. [ 139.747432][ T8664] netlink: 40 bytes leftover after parsing attributes in process `syz.0.747'. [ 139.805012][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 139.935640][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 140.005757][ T8674] netlink: 'syz.2.749': attribute type 11 has an invalid length. [ 140.102691][ T6136] bond2: (slave wlan0): failed to get link speed/duplex [ 140.281992][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 140.432983][ T8699] IPv6: Can't replace route, no match found [ 140.440720][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 140.779866][ T8715] tipc: Started in network mode [ 140.796414][ T8715] tipc: Node identity c25b27dd6b6d, cluster identity 4711 [ 140.813969][ T8715] tipc: Enabled bearer , priority 0 [ 140.826854][ T8721] netlink: 2 bytes leftover after parsing attributes in process `syz.2.764'. [ 140.841575][ T8722] syzkaller0: entered promiscuous mode [ 140.848142][ T8722] syzkaller0: entered allmulticast mode [ 140.911717][ T8715] tipc: Resetting bearer [ 140.922395][ T5877] IPVS: starting estimator thread 0... [ 140.936494][ T8714] tipc: Resetting bearer [ 140.995059][ T8714] tipc: Disabling bearer [ 141.014369][ T8727] IPVS: using max 35 ests per chain, 84000 per kthread [ 141.321103][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.770'. [ 141.456970][ T8752] bridge_slave_1: left allmulticast mode [ 141.468356][ T8752] bridge_slave_1: left promiscuous mode [ 141.483084][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.519320][ T8752] bridge_slave_0: left allmulticast mode [ 141.540540][ T8752] bridge_slave_0: left promiscuous mode [ 141.558880][ T8752] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.847227][ T8766] netlink: 'syz.1.775': attribute type 29 has an invalid length. [ 141.881293][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.775'. [ 141.925369][ T8770] netlink: 'syz.0.778': attribute type 10 has an invalid length. [ 141.952935][ T8766] netlink: 52 bytes leftover after parsing attributes in process `syz.1.775'. [ 141.998130][ T8770] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 142.033996][ T8766] netlink: 'syz.1.775': attribute type 29 has an invalid length. [ 142.079648][ T8775] dummy0: entered promiscuous mode [ 142.109094][ T8775] batadv_slave_1: entered promiscuous mode [ 142.174583][ T8780] netlink: 'syz.0.783': attribute type 1 has an invalid length. [ 142.333360][ T8781] bond0 (unregistering): Released all slaves [ 142.452387][ T8784] bond3 (unregistering): Released all slaves [ 142.476390][ T8796] netlink: 'syz.1.784': attribute type 1 has an invalid length. [ 142.658103][ T8804] __nla_validate_parse: 2 callbacks suppressed [ 142.658121][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.787'. [ 142.839281][ T8813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.791'. [ 142.943509][ T8813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.791'. [ 143.607666][ T8837] bond6 (unregistering): Released all slaves [ 143.725925][ T8852] netlink: 56 bytes leftover after parsing attributes in process `syz.3.805'. [ 143.789758][ T8856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.805'. [ 143.808345][ T8856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.805'. [ 143.844350][ T6128] net_ratelimit: 17 callbacks suppressed [ 143.844367][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 144.024418][ T2954] bond2: (slave wlan0): failed to get link speed/duplex [ 144.361124][ T8883] netlink: 104 bytes leftover after parsing attributes in process `syz.2.811'. [ 144.446329][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 144.587759][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 144.724990][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 144.807422][ T8900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.821'. [ 144.820295][ T8898] bond4 (unregistering): Released all slaves [ 144.908204][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 144.966340][ T8909] netlink: 'syz.1.824': attribute type 3 has an invalid length. [ 145.048844][ T6136] bond2: (slave wlan0): failed to get link speed/duplex [ 145.079490][ T8916] lo: entered allmulticast mode [ 145.105518][ T8916] lo: left allmulticast mode [ 145.185108][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 145.344368][ T2954] bond2: (slave wlan0): failed to get link speed/duplex [ 145.406348][ T8940] netlink: 'syz.1.833': attribute type 13 has an invalid length. [ 145.464636][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 145.495743][ T8940] lo: entered promiscuous mode [ 145.539034][ T8940] lo: entered allmulticast mode [ 145.596519][ T8940] tunl0: entered promiscuous mode [ 145.601577][ T8940] tunl0: entered allmulticast mode [ 145.719019][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.836'. [ 145.728684][ T8940] gre0: entered promiscuous mode [ 145.789510][ T8940] gre0: entered allmulticast mode [ 145.795941][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.836'. [ 145.810459][ T8940] gretap0: entered promiscuous mode [ 145.816563][ T8940] gretap0: entered allmulticast mode [ 145.822829][ T8940] gretap0: refused to change device tx_queue_len [ 145.883248][ T8957] bond4 (unregistering): Released all slaves [ 147.093090][ T8995] bond4 (unregistering): Released all slaves [ 147.309387][ T5880] Bluetooth: hci4: link tx timeout [ 147.309536][ T9015] netlink: 'syz.3.857': attribute type 1 has an invalid length. [ 147.315531][ T5880] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.342638][ T9013] tipc: Enabled bearer , priority 0 [ 147.427120][ T9013] syzkaller0: entered promiscuous mode [ 147.432962][ T9013] syzkaller0: entered allmulticast mode [ 147.445977][ T9013] tipc: Resetting bearer [ 147.478086][ T9013] tipc: Resetting bearer [ 148.028001][ T30] audit: type=1107 audit(1757436752.653:2): pid=9050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='øJ…Ô¹¸ÇŸ¼äð²OÀmªZ‹OZP|n¼ª0^#H' [ 148.075487][ T9057] __nla_validate_parse: 5 callbacks suppressed [ 148.075506][ T9057] netlink: 159784 bytes leftover after parsing attributes in process `syz.1.864'. [ 148.469005][ T5978] tipc: Node number set to 353456909 [ 148.749891][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 149.369792][ T9013] tipc: Disabling bearer [ 149.386285][ T5871] Bluetooth: hci4: command 0x0405 tx timeout [ 149.475067][ T12] net_ratelimit: 11 callbacks suppressed [ 149.475086][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 149.634276][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 149.696903][ T9095] netlink: 'syz.3.871': attribute type 30 has an invalid length. [ 149.710086][ T9091] netlink: 'syz.0.869': attribute type 10 has an invalid length. [ 149.745806][ T9091] netlink: 40 bytes leftover after parsing attributes in process `syz.0.869'. [ 149.769897][ T9099] ip6gre1: entered allmulticast mode [ 149.808147][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 149.879422][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.873'. [ 149.885564][ T9111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.875'. [ 149.937415][ T9091] team0: Port device geneve0 added [ 149.950595][ T9106] netlink: 40 bytes leftover after parsing attributes in process `syz.4.873'. [ 150.047984][ T9112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.875'. [ 150.076602][ T9112] nbd: nbd64 already in use [ 150.105339][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 150.105556][ T9125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.255670][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 150.297347][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.881'. [ 150.303622][ T9137] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 150.402284][ T5883] udevd[5883]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 150.509271][ T9136] bond6 (unregistering): Released all slaves [ 150.667562][ T9148] veth1_macvtap: left promiscuous mode [ 150.740912][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 150.864335][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 150.917927][ T9155] netlink: 'syz.4.886': attribute type 1 has an invalid length. [ 150.981239][ T9160] netlink: 20 bytes leftover after parsing attributes in process `syz.4.886'. [ 151.011778][ T9159] netlink: 32 bytes leftover after parsing attributes in process `syz.0.887'. [ 151.020948][ T6135] bond2: (slave wlan0): failed to get link speed/duplex [ 151.209285][ T9164] netlink: 'syz.1.888': attribute type 3 has an invalid length. [ 151.326142][ T9164] Driver unsupported XDP return value 0 on prog (id 140) dev N/A, expect packet loss! [ 151.925174][ T9184] bond4 (unregistering): Released all slaves [ 151.960793][ T9178] netlink: 'syz.0.894': attribute type 29 has an invalid length. [ 151.971037][ T9181] netlink: 'syz.0.894': attribute type 29 has an invalid length. [ 152.041722][ T5880] block nbd3: Receive control failed (result -32) [ 152.427765][ T9217] netlink: 'syz.4.903': attribute type 14 has an invalid length. [ 152.455007][ T9217] netlink: 'syz.4.903': attribute type 13 has an invalid length. [ 152.797639][ T9243] bond3 (unregistering): Released all slaves [ 152.907197][ T9250] 8021q: VLANs not supported on gre0 [ 153.084060][ T9259] __nla_validate_parse: 14 callbacks suppressed [ 153.084078][ T9259] netlink: 211864 bytes leftover after parsing attributes in process `syz.2.918'. [ 153.268196][ T9268] netlink: 24 bytes leftover after parsing attributes in process `syz.3.922'. [ 153.297646][ T9269] netlink: 'syz.4.921': attribute type 10 has an invalid length. [ 153.306352][ T5877] IPVS: starting estimator thread 0... [ 153.371688][ T9269] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 153.398231][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.923'. [ 153.414211][ T9271] IPVS: using max 36 ests per chain, 86400 per kthread [ 153.512296][ T9281] netlink: 40 bytes leftover after parsing attributes in process `syz.2.923'. [ 153.554967][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 153.712936][ T9293] bond4 (unregistering): Released all slaves [ 153.728104][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.931'. [ 153.753357][ T9301] C: renamed from lo (while UP) [ 154.039768][ T9324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.937'. [ 154.065794][ T9324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.937'. [ 154.079191][ T9324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.937'. [ 154.095039][ T9324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.937'. [ 154.344300][ T5871] Bluetooth: hci4: command 0x0405 tx timeout [ 154.560201][ T9348] netlink: 'syz.1.946': attribute type 8 has an invalid length. [ 154.586559][ T9344] bond3 (unregistering): Released all slaves [ 154.715116][ T6128] net_ratelimit: 20 callbacks suppressed [ 154.715135][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 154.894287][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 154.968579][ T9361] netlink: 'syz.1.950': attribute type 1 has an invalid length. [ 154.992694][ T9357] team0: Device gtp0 is of different type [ 155.095889][ T9361] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.104990][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 155.235724][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 155.338118][ T9378] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 155.385531][ T9378] netlink: 'syz.1.958': attribute type 10 has an invalid length. [ 155.396889][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 155.447394][ T9378] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 155.500781][ T9378] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 155.539315][ T9385] tunl0: entered promiscuous mode [ 155.596572][ T9386] bond0: (slave wlan1): Releasing backup interface [ 155.648176][ T9387] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.655952][ T9387] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.833167][ T9393] bond0 (unregistering): Released all slaves [ 155.955741][ T6135] bond2: (slave wlan0): failed to get link speed/duplex [ 156.095645][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 156.186306][ T9409] tipc: Enabled bearer , priority 10 [ 156.224285][ T2954] bond2: (slave wlan0): failed to get link speed/duplex [ 156.345436][ T6135] bond2: (slave wlan0): failed to get link speed/duplex [ 156.484728][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 156.503307][ T9421] validate_nla: 1 callbacks suppressed [ 156.503323][ T9421] netlink: 'syz.0.971': attribute type 1 has an invalid length. [ 156.757474][ T9430] syzkaller0: entered promiscuous mode [ 156.762988][ T9430] syzkaller0: entered allmulticast mode [ 157.101380][ T9450] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 157.307388][ T43] tipc: Node number set to 2838898653 [ 157.395343][ T9467] netlink: 'syz.0.985': attribute type 3 has an invalid length. [ 157.410035][ T9467] netlink: 'syz.0.985': attribute type 3 has an invalid length. [ 157.440077][ T9467] netlink: 'syz.0.985': attribute type 3 has an invalid length. [ 157.474698][ T9467] netlink: 'syz.0.985': attribute type 3 has an invalid length. [ 157.506726][ T9467] netlink: 'syz.0.985': attribute type 3 has an invalid length. [ 157.535662][ T9467] netlink: 'syz.0.985': attribute type 3 has an invalid length. [ 157.546834][ T9467] netlink: 'syz.0.985': attribute type 3 has an invalid length. [ 157.554998][ T9467] netlink: 'syz.0.985': attribute type 3 has an invalid length. [ 157.562795][ T9467] netlink: 'syz.0.985': attribute type 3 has an invalid length. [ 158.123371][ T9500] netdevsim netdevsim3: Direct firmware load for /.€ failed with error -2 [ 158.149782][ T9500] netdevsim netdevsim3: Falling back to sysfs fallback for: /.€ [ 158.449213][ T9512] sock: sock_timestamping_bind_phc: sock not bind to device [ 158.764837][ T9528] tipc: Enabling of bearer rejected, failed to enable media [ 159.320453][ T9561] __nla_validate_parse: 40 callbacks suppressed [ 159.320472][ T9561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1014'. [ 159.338376][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'. [ 159.571935][ T9559] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1014'. [ 159.764580][ T2959] net_ratelimit: 23 callbacks suppressed [ 159.764598][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 159.865158][ T9580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.872393][ T9580] IPv6: NLM_F_CREATE should be set when creating new route [ 159.959374][ T9575] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1018'. [ 160.058870][ T9587] tipc: Enabling of bearer rejected, failed to enable media [ 160.112726][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 160.141520][ T9568] ip6gre0: left promiscuous mode [ 160.154808][ T9568] ip6gre0: left allmulticast mode [ 160.243694][ T9568] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 160.480058][ T9610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.525288][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 160.547471][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1030'. [ 160.681755][ T9624] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 160.776279][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 160.852236][ T9626] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1035'. [ 160.911998][ T9626] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1035'. [ 160.925272][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 160.967938][ T9630] gretap2: entered promiscuous mode [ 160.976602][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1035'. [ 161.010053][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1035'. [ 161.056426][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 161.208434][ T9648] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1038'. [ 161.232154][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 161.331272][ T9655] xfrm1: entered allmulticast mode [ 161.473138][ T9661] batman_adv: batadv0: Adding interface: team0 [ 161.479919][ T9661] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.505760][ T9661] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 162.168966][ T9687] validate_nla: 45 callbacks suppressed [ 162.168985][ T9687] netlink: 'syz.0.1049': attribute type 12 has an invalid length. [ 162.948355][ T9723] tipc: Enabled bearer , priority 0 [ 162.970221][ T9723] syzkaller0: entered promiscuous mode [ 162.996430][ T9723] syzkaller0: entered allmulticast mode [ 163.038521][ T9723] tipc: Resetting bearer [ 163.054050][ T9720] tipc: Resetting bearer [ 163.084078][ T9720] tipc: Disabling bearer [ 163.140796][ T9732] hsr0 speed is unknown, defaulting to 1000 [ 163.149983][ T9732] hsr0 speed is unknown, defaulting to 1000 [ 163.161595][ T9732] hsr0 speed is unknown, defaulting to 1000 [ 163.176872][ T9732] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 163.205831][ T9732] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 163.330392][ T9732] hsr0 speed is unknown, defaulting to 1000 [ 163.358504][ T9732] hsr0 speed is unknown, defaulting to 1000 [ 163.392230][ T9732] hsr0 speed is unknown, defaulting to 1000 [ 163.407404][ T9732] hsr0 speed is unknown, defaulting to 1000 [ 163.450416][ T9745] bond3 (unregistering): Released all slaves [ 163.493532][ T9732] hsr0 speed is unknown, defaulting to 1000 [ 163.517283][ T9748] syz_tun: entered allmulticast mode [ 163.547746][ T9747] syz_tun: left allmulticast mode [ 164.327666][ T9787] bond0 (unregistering): Released all slaves [ 164.499829][ T9804] __nla_validate_parse: 12 callbacks suppressed [ 164.499847][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1086'. [ 164.597371][ T9804] team_slave_0: entered promiscuous mode [ 164.603357][ T9804] team_slave_1: entered promiscuous mode [ 164.609148][ T9804] dummy0: entered promiscuous mode [ 164.636968][ T9812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1088'. [ 164.798267][ T9819] netlink: 'syz.3.1091': attribute type 3 has an invalid length. [ 164.824405][ T6128] net_ratelimit: 20 callbacks suppressed [ 164.824424][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 164.908718][ T9828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.941844][ T9828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.965284][ T2954] bond2: (slave wlan0): failed to get link speed/duplex [ 164.991345][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1095'. [ 165.146321][ T2954] bond2: (slave wlan0): failed to get link speed/duplex [ 165.274949][ T2954] bond2: (slave wlan0): failed to get link speed/duplex [ 165.406811][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 165.536579][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 165.656566][ T9842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1097'. [ 165.714447][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 165.834874][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 165.886218][ T9847] tipc: Enabled bearer , priority 0 [ 165.893601][ T9847] syzkaller0: entered promiscuous mode [ 165.916485][ T9847] syzkaller0: entered allmulticast mode [ 165.957127][ T9847] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 165.983557][ T9849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1101'. [ 166.031385][ T9860] netlink: 'syz.3.1103': attribute type 11 has an invalid length. [ 166.051878][ T9847] tipc: Resetting bearer [ 166.093559][ T9849] ip_vti0: entered promiscuous mode [ 166.118254][ T9849] ip_vti0: entered allmulticast mode [ 166.134933][ T9852] hsr0 speed is unknown, defaulting to 1000 [ 166.147140][ T9846] tipc: Resetting bearer [ 166.173858][ T9846] tipc: Disabling bearer [ 166.244457][ T9872] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.1105'. [ 166.415313][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 166.457858][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1108'. [ 166.705864][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 166.959149][ T9902] bond4 (unregistering): Released all slaves [ 167.002844][ T9904] netlink: 'syz.2.1116': attribute type 6 has an invalid length. [ 167.013878][ T9908] tipc: Enabling of bearer rejected, failed to enable media [ 167.037913][ T9908] tipc: Enabling of bearer rejected, failed to enable media [ 167.231792][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1119'. [ 167.258513][ T9916] tc_dump_action: action bad kind [ 167.528981][ T9922] hsr0 speed is unknown, defaulting to 1000 [ 167.631258][ T9935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1125'. [ 167.716500][ T9930] hsr0 speed is unknown, defaulting to 1000 [ 168.010534][ T9947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1129'. [ 168.020359][ T9938] veth3: entered allmulticast mode [ 168.253309][ T9954] bond0 (unregistering): Released all slaves [ 168.437212][ T9971] netlink: 'syz.2.1137': attribute type 1 has an invalid length. [ 168.483087][ T9972] bond3 (unregistering): Released all slaves [ 168.643312][ T9971] bond3: entered promiscuous mode [ 168.660940][ T9971] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.996084][ T5871] Bluetooth: hci0: command 0x0c1a tx timeout [ 169.002192][ T5880] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 169.087257][T10014] netlink: 'syz.4.1149': attribute type 21 has an invalid length. [ 169.119458][T10016] netlink: 'syz.4.1149': attribute type 21 has an invalid length. [ 169.167823][T10014] netlink: 'syz.4.1149': attribute type 1 has an invalid length. [ 169.215409][T10019] sctp: [Deprecated]: syz.1.1153 (pid 10019) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.215409][T10019] Use struct sctp_sack_info instead [ 169.531992][T10030] __nla_validate_parse: 12 callbacks suppressed [ 169.532009][T10030] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1155'. [ 169.541440][T10033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1158'. [ 169.621912][T10033] bond0: entered promiscuous mode [ 169.639670][T10033] bond_slave_0: entered promiscuous mode [ 169.680617][T10033] bond_slave_1: entered promiscuous mode [ 169.701220][T10033] team0: entered promiscuous mode [ 169.723363][T10033] team_slave_0: entered promiscuous mode [ 169.740798][T10033] team_slave_1: entered promiscuous mode [ 169.757713][T10033] bond0: left promiscuous mode [ 169.767122][T10033] bond_slave_0: left promiscuous mode [ 169.777438][T10033] bond_slave_1: left promiscuous mode [ 169.793276][T10033] team0: left promiscuous mode [ 169.803178][T10033] team_slave_0: left promiscuous mode [ 169.810068][T10033] team_slave_1: left promiscuous mode [ 169.830455][T10036] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1160'. [ 169.830602][T10038] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1160'. [ 169.841252][ T2959] net_ratelimit: 16 callbacks suppressed [ 169.841266][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 169.964843][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 169.965021][ T6136] bond2: (slave wlan0): failed to get link speed/duplex [ 170.147813][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 170.187257][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1168'. [ 170.196401][T10071] netlink: 'syz.4.1168': attribute type 4 has an invalid length. [ 170.270949][T10071] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1168'. [ 170.280130][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 170.393069][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 170.473074][T10083] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1171'. [ 170.514311][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 170.522743][T10082] netlink: 696 bytes leftover after parsing attributes in process `syz.3.1172'. [ 170.573822][T10087] netlink: 'syz.1.1174': attribute type 30 has an invalid length. [ 170.639539][T10087] netlink: 'syz.1.1174': attribute type 30 has an invalid length. [ 170.699442][T10087] netlink: 'syz.1.1174': attribute type 30 has an invalid length. [ 170.767269][T10099] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1177'. [ 170.795546][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 170.824934][T10087] netlink: 'syz.1.1174': attribute type 30 has an invalid length. [ 170.943359][T10107] hsr0 speed is unknown, defaulting to 1000 [ 170.954659][T10087] netlink: 'syz.1.1174': attribute type 30 has an invalid length. [ 170.956558][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 171.126160][T10115] tap0: tun_chr_ioctl cmd 1074025676 [ 171.132652][T10115] tap0: owner set to 0 [ 171.438642][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 171.655865][ T2954] bond2: (slave wlan0): failed to get link speed/duplex [ 172.068584][T10182] netlink: 'syz.4.1197': attribute type 11 has an invalid length. [ 172.364946][T10192] IPVS: set_ctl: invalid protocol: 0 172.30.0.2:20002 [ 172.373073][T10192] lo: left promiscuous mode [ 172.385696][T10192] tunl0: left promiscuous mode [ 172.391954][T10192] gre0: left promiscuous mode [ 172.440270][T10192] gretap0: left promiscuous mode [ 172.577563][T10192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.609002][T10192] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.656805][T10210] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 173.213660][T10228] hsr_slave_0 (unregistering): left promiscuous mode [ 173.500127][T10251] validate_nla: 7 callbacks suppressed [ 173.500144][T10251] netlink: 'syz.4.1213': attribute type 9 has an invalid length. [ 173.646259][T10254] netlink: 'syz.0.1214': attribute type 1 has an invalid length. [ 174.181281][T10283] tipc: Enabled bearer , priority 0 [ 174.194724][T10278] tipc: Enabling of bearer rejected, already enabled [ 174.224519][T10283] syzkaller0: entered promiscuous mode [ 174.232297][T10283] syzkaller0: entered allmulticast mode [ 174.283321][T10278] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 174.342395][T10283] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 174.348143][T10292] IPVS: set_ctl: invalid protocol: 137 172.30.1.5:20003 [ 174.386805][T10278] tipc: Resetting bearer [ 174.403185][T10276] tipc: Resetting bearer [ 174.456833][T10276] tipc: Disabling bearer [ 174.846355][ T49] net_ratelimit: 18 callbacks suppressed [ 174.846373][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 174.975364][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 175.085003][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 175.194545][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 175.305098][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 175.414482][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 175.524581][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 175.635302][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 175.744539][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 175.854671][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 179.934203][ T6128] net_ratelimit: 36 callbacks suppressed [ 179.934218][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 180.054238][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 180.164475][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 180.274210][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 180.384250][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 180.494241][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 180.604368][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 180.714283][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 180.824829][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 180.934199][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 185.044461][ T49] net_ratelimit: 36 callbacks suppressed [ 185.044482][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 185.164369][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 185.274342][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 185.384300][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 185.494201][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 185.604462][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 185.714330][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 185.824302][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 185.935201][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 186.044488][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 190.154312][ T12] net_ratelimit: 36 callbacks suppressed [ 190.154333][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 190.274248][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 190.384538][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 190.494245][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 190.604476][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 190.724330][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 190.834194][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 190.944372][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 191.054240][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 191.165003][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 194.190495][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.196932][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.255307][ T12] net_ratelimit: 36 callbacks suppressed [ 195.255329][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 195.374677][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 195.484298][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 195.594290][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 195.704466][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 195.814351][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 195.934848][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 196.044223][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 196.154218][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 196.266542][ T5873] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.269716][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 196.272574][ T5866] Bluetooth: hci3: command 0x0406 tx timeout [ 196.284610][ T5873] Bluetooth: hci2: command 0x0406 tx timeout [ 196.286702][ T5866] Bluetooth: hci1: command 0x0406 tx timeout [ 196.534004][T10341] warn_alloc: 1 callbacks suppressed [ 196.534021][T10341] syz.1.1226: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 196.602040][T10341] CPU: 1 UID: 0 PID: 10341 Comm: syz.1.1226 Not tainted syzkaller #0 PREEMPT(full) [ 196.602065][T10341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 196.602076][T10341] Call Trace: [ 196.602083][T10341] [ 196.602092][T10341] dump_stack_lvl+0x189/0x250 [ 196.602123][T10341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.602143][T10341] ? __pfx__printk+0x10/0x10 [ 196.602166][T10341] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 196.602187][T10341] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 196.602207][T10341] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 196.602231][T10341] warn_alloc+0x214/0x310 [ 196.602257][T10341] ? stack_depot_save_flags+0x40/0x860 [ 196.602281][T10341] ? __pfx_warn_alloc+0x10/0x10 [ 196.602308][T10341] ? kasan_save_track+0x4f/0x80 [ 196.602330][T10341] ? xskq_create+0x56/0x170 [ 196.602350][T10341] ? xsk_init_queue+0xb0/0x110 [ 196.602369][T10341] ? xsk_setsockopt+0x4dc/0x8d0 [ 196.602388][T10341] ? do_sock_setsockopt+0x17c/0x1b0 [ 196.602405][T10341] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 196.602422][T10341] ? do_syscall_64+0xfa/0x3b0 [ 196.602438][T10341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.602463][T10341] __vmalloc_node_range_noprof+0x125/0x12f0 [ 196.602517][T10341] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 196.602542][T10341] ? xskq_create+0x56/0x170 [ 196.602566][T10341] ? __kasan_kmalloc+0x93/0xb0 [ 196.602591][T10341] vmalloc_user_noprof+0xad/0xf0 [ 196.602615][T10341] ? xskq_create+0xbf/0x170 [ 196.602638][T10341] xskq_create+0xbf/0x170 [ 196.602663][T10341] xsk_init_queue+0xb0/0x110 [ 196.602689][T10341] xsk_setsockopt+0x4dc/0x8d0 [ 196.602712][T10341] ? __pfx_xsk_setsockopt+0x10/0x10 [ 196.602733][T10341] ? __pfx_aa_sk_perm+0x10/0x10 [ 196.602761][T10341] ? aa_sock_opt_perm+0xff/0x1b0 [ 196.602781][T10341] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 196.602799][T10341] ? __pfx_xsk_setsockopt+0x10/0x10 [ 196.602822][T10341] do_sock_setsockopt+0x17c/0x1b0 [ 196.602845][T10341] __x64_sys_setsockopt+0x13f/0x1b0 [ 196.602870][T10341] do_syscall_64+0xfa/0x3b0 [ 196.602885][T10341] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.602908][T10341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.602925][T10341] ? clear_bhb_loop+0x60/0xb0 [ 196.602945][T10341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.602967][T10341] RIP: 0033:0x7f091858ebe9 [ 196.602984][T10341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.602997][T10341] RSP: 002b:00007f0919491038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 196.603016][T10341] RAX: ffffffffffffffda RBX: 00007f09187c5fa0 RCX: 00007f091858ebe9 [ 196.603028][T10341] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 196.603038][T10341] RBP: 00007f0918611e19 R08: 0000000000000004 R09: 0000000000000000 [ 196.603052][T10341] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.603063][T10341] R13: 00007f09187c6038 R14: 00007f09187c5fa0 R15: 00007fffa1c5a498 [ 196.603091][T10341] [ 196.603153][T10341] Mem-Info: [ 196.658255][T10349] hsr0 speed is unknown, defaulting to 1000 [ 196.686079][T10341] active_anon:5562 inactive_anon:0 isolated_anon:0 [ 196.686079][T10341] active_file:2881 inactive_file:39887 isolated_file:0 [ 196.686079][T10341] unevictable:768 dirty:73 writeback:0 [ 196.686079][T10341] slab_reclaimable:10976 slab_unreclaimable:111509 [ 196.686079][T10341] mapped:29223 shmem:1363 pagetables:1134 [ 196.686079][T10341] sec_pagetables:0 bounce:0 [ 196.686079][T10341] kernel_misc_reclaimable:0 [ 196.686079][T10341] free:1317960 free_pcp:12466 free_cma:0 [ 196.959688][T10341] Node 0 active_anon:22260kB inactive_anon:0kB active_file:11536kB inactive_file:159356kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116696kB dirty:344kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13328kB pagetables:4572kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 196.999348][T10341] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 197.082165][T10341] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 197.148420][T10341] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 197.188134][T10341] Node 0 DMA32 free:1358792kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22208kB inactive_anon:0kB active_file:11536kB inactive_file:157784kB unevictable:1536kB writepending:344kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:31380kB local_pcp:12836kB free_cma:0kB [ 197.249631][T10341] lowmem_reserve[]: 0 0 1 1 1 [ 197.259741][T10341] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 197.309962][T10369] syz_tun: entered allmulticast mode [ 197.328812][T10375] __nla_validate_parse: 33 callbacks suppressed [ 197.328829][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1236'. [ 197.345397][T10371] dvmrp8: entered allmulticast mode [ 197.368611][ T6136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.371378][T10341] lowmem_reserve[]: [ 197.378911][ T6136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.382281][T10341] 0 0 0 0 0 [ 197.398357][T10341] Node 1 Normal free:3895808kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18372kB local_pcp:8132kB free_cma:0kB [ 197.432318][T10341] lowmem_reserve[]: 0 0 0 0 0 [ 197.437336][T10341] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 197.450409][T10341] Node 0 DMA32: 383*4kB (UM) 259*8kB (UME) 294*16kB (UME) 448*32kB (UME) 188*64kB (UME) 28*128kB (UME) 8*256kB (UME) 5*512kB (M) 1*1024kB (E) 5*2048kB (UME) 318*4096kB (UM) = 1356660kB [ 197.469738][T10341] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 197.482481][T10341] Node 1 Normal: 176*4kB (UE) 38*8kB (UME) 45*16kB (UME) 90*32kB (UME) 24*64kB (UME) 6*128kB (UME) 3*256kB (ME) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 948*4096kB (M) = 3895808kB [ 197.501005][T10341] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.510880][T10341] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.521989][T10341] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.532318][T10341] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.541750][T10341] 44132 total pagecache pages [ 197.551629][T10341] 0 pages in swap cache [ 197.556154][T10341] Free swap = 124996kB [ 197.560322][T10341] Total swap = 124996kB [ 197.564546][T10341] 2097051 pages RAM [ 197.568349][T10341] 0 pages HighMem/MovableOnly [ 197.573017][T10341] 425667 pages reserved [ 197.577446][T10341] 0 pages cma reserved [ 197.678406][T10380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1238'. [ 197.710812][T10365] syz_tun: left allmulticast mode [ 198.115122][T10390] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 198.137103][T10394] syzkaller1: entered promiscuous mode [ 198.149619][T10394] syzkaller1: entered allmulticast mode [ 198.385178][T10410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.409894][T10419] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1249'. [ 198.420734][T10419] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1249'. [ 198.427881][T10422] netlink: 'syz.0.1250': attribute type 1 has an invalid length. [ 198.439968][T10411] 8021q: VLANs not supported on syzkaller1 [ 198.449146][ T6017] hsr0 speed is unknown, defaulting to 1000 [ 198.464873][T10422] netlink: 'syz.0.1250': attribute type 11 has an invalid length. [ 198.482951][T10422] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1250'. [ 198.705653][T10436] netlink: 'syz.2.1254': attribute type 17 has an invalid length. [ 198.712862][T10439] netlink: 'syz.0.1256': attribute type 26 has an invalid length. [ 198.730903][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 198.756082][T10436] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1254'. [ 198.942672][T10448] netlink: 'syz.0.1256': attribute type 26 has an invalid length. [ 199.080997][T10462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.351973][T10486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1266'. [ 199.831675][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1275'. [ 199.915346][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1278'. [ 200.345422][ T2959] net_ratelimit: 21 callbacks suppressed [ 200.345441][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 200.504404][ T2954] bond2: (slave wlan0): failed to get link speed/duplex [ 200.620598][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 200.786970][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 200.820559][T10574] openvswitch: netlink: Missing key (keys=40, expected=100) [ 200.924423][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 201.045450][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 201.175648][ T2954] bond2: (slave wlan0): failed to get link speed/duplex [ 201.304970][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 201.458359][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 201.568606][T10627] 8021q: adding VLAN 0 to HW filter on device bond6 [ 202.249775][T10673] hsr0 speed is unknown, defaulting to 1000 [ 202.341151][T10683] netlink: 'syz.1.1328': attribute type 13 has an invalid length. [ 202.376050][T10683] lo: entered promiscuous mode [ 202.385948][T10683] tunl0: entered promiscuous mode [ 202.397896][T10683] gre0: entered promiscuous mode [ 202.428708][T10683] gretap0: entered promiscuous mode [ 202.448597][T10683] gretap0: refused to change device tx_queue_len [ 202.475640][T10687] netlink: 'syz.4.1329': attribute type 39 has an invalid length. [ 202.641864][T10701] __nla_validate_parse: 13 callbacks suppressed [ 202.641882][T10701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1333'. [ 203.245021][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1342'. [ 203.441048][T10750] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1348'. [ 203.739992][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1351'. [ 203.829858][T10765] team0: Port device dummy0 removed [ 203.847795][T10765] batman_adv: batadv0: Adding interface: dummy0 [ 203.876976][T10765] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.903813][T10765] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 204.169530][T10785] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1358'. [ 204.202207][T10780] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1358'. [ 204.235085][T10780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1358'. [ 204.284703][T10789] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1360'. [ 204.352226][T10789] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1360'. [ 205.162788][T10836] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 205.356021][ T49] net_ratelimit: 28 callbacks suppressed [ 205.356042][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 205.525881][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 205.525970][T10856] netlink: 'syz.3.1381': attribute type 1 has an invalid length. [ 205.562278][T10856] netlink: 'syz.3.1381': attribute type 4 has an invalid length. [ 205.584555][T10856] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1381'. [ 205.634986][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 205.764312][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 206.075759][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 206.466190][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 206.595251][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 206.745193][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 206.770368][T10912] tipc: Enabled bearer , priority 0 [ 206.785549][T10915] syzkaller0: entered promiscuous mode [ 206.802855][T10915] syzkaller0: entered allmulticast mode [ 206.830949][T10913] tipc: Resetting bearer [ 206.874214][ T6136] bond2: (slave wlan0): failed to get link speed/duplex [ 206.930733][T10912] tipc: Resetting bearer [ 206.944533][T10920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.118115][T10912] tipc: Disabling bearer [ 207.211917][T10925] netlink: 'syz.2.1400': attribute type 21 has an invalid length. [ 207.291619][T10925] netlink: 'syz.2.1400': attribute type 5 has an invalid length. [ 207.555558][T10942] netlink: 'syz.4.1404': attribute type 21 has an invalid length. [ 207.612770][T10945] netlink: 'syz.0.1405': attribute type 10 has an invalid length. [ 208.033514][T10965] __nla_validate_parse: 5 callbacks suppressed [ 208.033541][T10965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1414'. [ 208.085414][T10965] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1414'. [ 208.136818][T10965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1414'. [ 208.169243][T10965] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1414'. [ 208.191335][T10965] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1414'. [ 208.234800][T10979] xt_time: unknown flags 0xf4 [ 208.407597][T10989] netlink: 'syz.3.1420': attribute type 1 has an invalid length. [ 208.472925][T10989] pim6reg1: entered promiscuous mode [ 208.489698][T10989] pim6reg1: entered allmulticast mode [ 208.989748][T11016] netlink: 'syz.4.1425': attribute type 10 has an invalid length. [ 209.037217][T11016] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 209.093462][T11022] Bluetooth: MGMT ver 1.23 [ 209.213849][T11025] sctp: [Deprecated]: syz.0.1428 (pid 11025) Use of int in max_burst socket option deprecated. [ 209.213849][T11025] Use struct sctp_assoc_value instead [ 209.869374][T11069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1438'. [ 209.883380][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1438'. [ 209.897779][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1438'. [ 209.907962][T11070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1438'. [ 210.324922][T11102] netlink: 'syz.2.1449': attribute type 23 has an invalid length. [ 210.457730][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1452'. [ 210.533573][ T2954] net_ratelimit: 25 callbacks suppressed [ 210.533592][ T2954] bond2: (slave wlan0): failed to get link speed/duplex [ 210.725569][ T5936] hid-generic 0005:0007:5505.0002: unknown main item tag 0x0 [ 210.749563][ T5936] hid-generic 0005:0007:5505.0002: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 210.911292][T11126] fido_id[11126]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 210.996984][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 211.138067][T11137] bond20 (unregistering): Released all slaves [ 211.167084][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 211.319565][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 211.458239][ T6136] bond2: (slave wlan0): failed to get link speed/duplex [ 211.637047][ T6136] bond2: (slave wlan0): failed to get link speed/duplex [ 211.764988][ T6136] bond2: (slave wlan0): failed to get link speed/duplex [ 211.915165][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 212.182875][T11189] geneve2: entered promiscuous mode [ 212.192210][T11189] geneve2: entered allmulticast mode [ 212.200481][T11191] syzkaller1: entered promiscuous mode [ 212.222561][T11191] syzkaller1: entered allmulticast mode [ 212.265264][ T6136] bond2: (slave wlan0): failed to get link speed/duplex [ 212.417570][ T6128] bond2: (slave wlan0): failed to get link speed/duplex [ 212.428065][T11210] netlink: 'syz.3.1484': attribute type 1 has an invalid length. [ 212.453339][T11210] netlink: 'syz.3.1484': attribute type 1 has an invalid length. [ 212.673077][T11221] netlink: 'syz.2.1486': attribute type 21 has an invalid length. [ 212.732051][T11223] netlink: 'syz.1.1487': attribute type 27 has an invalid length. [ 212.806408][T11223] ieee802154 phy0 wpan0: encryption failed: -90 [ 212.840150][T11226] netlink: 'syz.3.1488': attribute type 10 has an invalid length. [ 213.111971][T11236] netlink: 'syz.1.1491': attribute type 16 has an invalid length. [ 213.119962][T11236] netlink: 'syz.1.1491': attribute type 17 has an invalid length. [ 213.154268][T11236] lo: left promiscuous mode [ 213.184129][T11236] lo: left allmulticast mode [ 213.242675][T11236] tunl0: left promiscuous mode [ 213.255284][T11236] tunl0: left allmulticast mode [ 213.275107][T11236] gre0: left promiscuous mode [ 213.280732][T11236] gre0: left allmulticast mode [ 213.317999][T11236] gretap0: left promiscuous mode [ 213.356532][T11236] gretap0: left allmulticast mode [ 214.161342][T11289] ip_vti0: left promiscuous mode [ 214.177679][T11291] __nla_validate_parse: 2 callbacks suppressed [ 214.177696][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1505'. [ 214.203186][T11289] ip_vti0: left allmulticast mode [ 214.235213][T11298] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1505'. [ 214.254307][T11298] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1505'. [ 214.295353][T11298] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1505'. [ 214.316668][T11298] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1505'. [ 215.447965][T11326] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1513'. [ 215.485807][T11326] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1513'. [ 215.508834][T11329] x_tables: ip_tables: MARK.2 target: invalid size 8 (kernel) != (user) 16 [ 215.612285][ T2959] net_ratelimit: 20 callbacks suppressed [ 215.612302][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 215.695292][T11341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.755918][ T6136] bond2: (slave wlan0): failed to get link speed/duplex [ 215.840979][T11348] sch_fq: defrate 0 ignored. [ 215.857789][T11348] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1522'. [ 215.885406][ T6136] bond2: (slave wlan0): failed to get link speed/duplex [ 215.956563][T11354] tipc: Enabling of bearer rejected, already enabled [ 216.032403][ T2954] bond2: (slave wlan0): failed to get link speed/duplex [ 216.097643][T11348] hsr0 speed is unknown, defaulting to 1000 [ 216.281898][T11361] IPv6: sit1: Disabled Multicast RS [ 216.310633][T11361] sit1: entered allmulticast mode [ 216.314849][T11367] netlink: 'syz.4.1527': attribute type 6 has an invalid length. [ 216.686838][T11379] bond8 (unregistering): Released all slaves [ 216.796172][T11383] netlink: 'syz.1.1531': attribute type 1 has an invalid length. [ 216.816687][T11394] syzkaller0: entered promiscuous mode [ 216.822316][T11394] syzkaller0: entered allmulticast mode [ 216.856069][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 216.986565][T11409] team0: No ports can be present during mode change [ 217.015040][ T2954] bond2: (slave wlan0): failed to get link speed/duplex [ 217.124406][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 217.180787][T11425] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1543'. [ 217.254362][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 217.374218][ T2954] bond2: (slave wlan0): failed to get link speed/duplex [ 217.565624][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1548'. [ 217.890438][T11448] bond8 (unregistering): Released all slaves [ 218.090589][T11465] tipc: Enabled bearer , priority 0 [ 218.106325][T11465] syzkaller0: entered promiscuous mode [ 218.112331][T11465] syzkaller0: entered allmulticast mode [ 218.156775][T11465] tipc: Resetting bearer [ 218.189290][T11464] tipc: Resetting bearer [ 218.398343][T11464] tipc: Disabling bearer [ 218.488123][T11474] netlink: 'syz.3.1556': attribute type 11 has an invalid length. [ 218.541238][T11474] netlink: 'syz.3.1556': attribute type 4 has an invalid length. [ 218.569948][T11481] 0ªî{X¹¦: renamed from gretap0 [ 218.602850][T11481] 0ªî{X¹¦: entered allmulticast mode [ 218.918382][T11503] bond10 (unregistering): Released all slaves [ 219.241885][T11526] __nla_validate_parse: 4 callbacks suppressed [ 219.241904][T11526] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1571'. [ 219.391655][T11532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1575'. [ 219.435403][T11532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1575'. [ 219.693737][T11551] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1580'. [ 219.823860][T11553] netlink: 212072 bytes leftover after parsing attributes in process `syz.2.1577'. [ 220.264646][T11584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1593'. [ 220.315494][T11589] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1593'. [ 220.363065][T11593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1596'. [ 220.481904][T11599] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.490660][T11599] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.755988][T11615] netlink: 'syz.4.1600': attribute type 16 has an invalid length. [ 220.768949][T11003] udevd[11003]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 220.943199][T11599] bond2: left promiscuous mode [ 220.991788][T11599] bond3: left promiscuous mode [ 221.006735][T11599] geneve2: left promiscuous mode [ 221.015145][ T6137] net_ratelimit: 19 callbacks suppressed [ 221.015161][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 221.115093][ T2959] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 221.126410][ T2959] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.151339][ T2959] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 221.178705][ T2959] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.214972][ T2959] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 221.223346][ T2959] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.329083][T11635] openvswitch: netlink: IPv4 tunnel dst address is zero [ 221.370460][T11628] sctp: [Deprecated]: syz.4.1604 (pid 11628) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.370460][T11628] Use struct sctp_sack_info instead [ 221.409640][ T2959] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 221.443025][ T2959] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.505299][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 221.655681][ T2959] bond2: (slave wlan0): failed to get link speed/duplex [ 221.713356][T11656] netlink: 'syz.2.1611': attribute type 83 has an invalid length. [ 221.731485][T11657] bridge0: port 1(veth0_to_bridge) entered blocking state [ 221.744649][T11657] bridge0: port 1(veth0_to_bridge) entered disabled state [ 221.752114][T11657] veth0_to_bridge: entered allmulticast mode [ 221.778220][T11657] veth0_to_bridge: entered promiscuous mode [ 221.788371][T11657] bridge0: port 1(veth0_to_bridge) entered blocking state [ 221.796456][T11657] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 221.853753][T11660] : entered promiscuous mode [ 221.864031][T11660] netlink: 4388 bytes leftover after parsing attributes in process `syz.1.1613'. [ 221.876405][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 221.987268][ T6136] bond2: (slave wlan0): failed to get link speed/duplex [ 222.012530][T11670] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1615'. [ 222.121464][ T2954] bond2: (slave wlan0): failed to get link speed/duplex [ 222.254275][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 222.340634][ T2954] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 222.420552][ T2954] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 222.472588][ T2954] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 222.486016][ T2954] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 222.524132][ T6135] bond2: (slave wlan0): failed to get link speed/duplex [ 222.665191][ T2954] bond2: (slave wlan0): failed to get link speed/duplex [ 222.818772][T11709] netlink: 'syz.2.1627': attribute type 1 has an invalid length. [ 222.838618][T11709] netlink: 'syz.2.1627': attribute type 2 has an invalid length. [ 222.852236][T11711] netlink: 'syz.1.1628': attribute type 2 has an invalid length. [ 222.869801][T11712] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 222.880877][T11711] IPVS: stopping backup sync thread 11712 ... [ 223.082771][T11724] netlink: 'syz.1.1633': attribute type 1 has an invalid length. [ 223.110788][T11724] netlink: 'syz.1.1633': attribute type 10 has an invalid length. [ 223.193571][T11724] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 223.765914][T11760] netlink: 'syz.2.1643': attribute type 12 has an invalid length. [ 223.775664][T11760] netlink: 'syz.2.1643': attribute type 29 has an invalid length. [ 223.789558][T11760] netlink: 'syz.2.1643': attribute type 2 has an invalid length. [ 224.679171][T11817] netlink: 'syz.0.1655': attribute type 1 has an invalid length. [ 224.964477][T11838] netlink: 'syz.0.1663': attribute type 1 has an invalid length. [ 224.979476][T11840] netlink: 'syz.0.1663': attribute type 1 has an invalid length. [ 224.992371][T11834] netlink: 'syz.3.1662': attribute type 12 has an invalid length. [ 225.025315][T11834] tipc: Enabled bearer , priority 0 [ 225.222416][T11834] syzkaller0: entered promiscuous mode [ 225.231566][T11834] syzkaller0: entered allmulticast mode [ 225.243251][T11834] tipc: Resetting bearer [ 225.272757][T11857] __nla_validate_parse: 11 callbacks suppressed [ 225.272774][T11857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1667'. [ 225.293159][T11848] wg1: entered promiscuous mode [ 225.298675][T11848] wg1: entered allmulticast mode [ 225.321582][T11832] tipc: Resetting bearer [ 226.657187][T11832] tipc: Disabling bearer [ 226.686152][T11865] netlink: 'syz.1.1670': attribute type 1 has an invalid length. [ 226.708121][T11867] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 226.747633][ T12] net_ratelimit: 18 callbacks suppressed [ 226.747653][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 226.874351][T11882] netlink: 'syz.4.1676': attribute type 1 has an invalid length. [ 226.884570][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 227.014466][ T2954] bond2: (slave wlan0): failed to get link speed/duplex [ 227.149874][T11896] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 227.181948][T11899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1682'. [ 227.199516][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 227.248378][T11902] netlink: 'syz.0.1681': attribute type 3 has an invalid length. [ 227.267515][T11907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.274802][T11907] IPv6: NLM_F_CREATE should be set when creating new route [ 227.282073][T11907] IPv6: NLM_F_CREATE should be set when creating new route [ 227.289333][T11907] IPv6: NLM_F_CREATE should be set when creating new route [ 227.334312][ T6135] bond2: (slave wlan0): failed to get link speed/duplex [ 227.376444][T11907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.483646][T11907] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1678'. [ 227.535975][ T6135] bond2: (slave wlan0): failed to get link speed/duplex [ 227.725057][ T6135] bond2: (slave wlan0): failed to get link speed/duplex [ 227.756465][T11929] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1687'. [ 227.785054][T11929] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1687'. [ 227.808349][T11929] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1687'. [ 227.845002][ T6135] bond2: (slave wlan0): failed to get link speed/duplex [ 227.848864][T11929] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1687'. [ 227.861330][T11929] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1687'. [ 227.872212][T11929] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1687'. [ 227.881539][T11929] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1687'. [ 228.007512][ T6135] bond2: (slave wlan0): failed to get link speed/duplex [ 228.262508][T11958] hsr0 speed is unknown, defaulting to 1000 [ 228.290519][ T6136] bond2: (slave wlan0): failed to get link speed/duplex [ 228.780736][T11993] bond10 (unregistering): Released all slaves [ 228.839084][T12006] team0: No ports can be present during mode change [ 231.700192][T12126] __nla_validate_parse: 68 callbacks suppressed [ 231.700210][T12126] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1740'. [ 231.760876][T12122] syzkaller0: entered promiscuous mode [ 231.768583][T12122] syzkaller0: entered allmulticast mode [ 231.794801][ T6137] net_ratelimit: 14 callbacks suppressed [ 231.794818][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 231.928554][T12143] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1743'. [ 231.937863][T12142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1744'. [ 231.949258][T12144] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1743'. [ 231.989787][T12144] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 232.528983][T12159] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1749'. [ 233.279072][T12146] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 233.287191][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 233.405309][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 233.450286][T12164] netlink: 'syz.0.1751': attribute type 1 has an invalid length. [ 233.467256][T12170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1752'. [ 233.541294][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 233.617359][T12168] [ 233.619719][T12168] ====================================================== [ 233.626736][T12168] WARNING: possible circular locking dependency detected [ 233.633759][T12168] syzkaller #0 Not tainted [ 233.638167][T12168] ------------------------------------------------------ [ 233.645170][T12168] syz.1.1754/12168 is trying to acquire lock: [ 233.651217][T12168] ffffffff8e21e628 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x286/0x16b0 [ 233.660779][T12168] [ 233.660779][T12168] but task is already holding lock: [ 233.668126][T12168] ffff888142fa3b88 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 233.678393][T12168] [ 233.678393][T12168] which lock already depends on the new lock. [ 233.678393][T12168] [ 233.688778][T12168] [ 233.688778][T12168] the existing dependency chain (in reverse order) is: [ 233.697772][T12168] [ 233.697772][T12168] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 233.706365][T12168] lock_acquire+0x120/0x360 [ 233.711381][T12168] blk_alloc_queue+0x538/0x620 [ 233.716652][T12168] __blk_mq_alloc_disk+0x15c/0x340 [ 233.722267][T12168] nbd_dev_add+0x46c/0xae0 [ 233.727190][T12168] nbd_init+0x168/0x1f0 [ 233.731850][T12168] do_one_initcall+0x233/0x820 [ 233.737116][T12168] do_initcall_level+0x104/0x190 [ 233.742562][T12168] do_initcalls+0x59/0xa0 [ 233.747395][T12168] kernel_init_freeable+0x334/0x4b0 [ 233.753141][T12168] kernel_init+0x1d/0x1d0 [ 233.757985][T12168] ret_from_fork+0x3fc/0x770 [ 233.763081][T12168] ret_from_fork_asm+0x1a/0x30 [ 233.768351][T12168] [ 233.768351][T12168] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 233.775547][T12168] lock_acquire+0x120/0x360 [ 233.780562][T12168] fs_reclaim_acquire+0x72/0x100 [ 233.786005][T12168] prepare_alloc_pages+0x153/0x610 [ 233.791617][T12168] __alloc_frozen_pages_noprof+0x123/0x370 [ 233.797928][T12168] __alloc_pages_noprof+0xa/0x30 [ 233.803364][T12168] pcpu_populate_chunk+0x182/0xb30 [ 233.808982][T12168] pcpu_alloc_noprof+0xcbf/0x16b0 [ 233.814513][T12168] bpf_map_alloc_percpu+0xbc/0x1b0 [ 233.820134][T12168] prealloc_init+0x225/0x630 [ 233.825232][T12168] htab_map_alloc+0x6ce/0xc70 [ 233.830410][T12168] map_create+0xaa0/0x14d0 [ 233.835328][T12168] __sys_bpf+0x60f/0x870 [ 233.840071][T12168] __x64_sys_bpf+0x7c/0x90 [ 233.844992][T12168] do_syscall_64+0xfa/0x3b0 [ 233.849997][T12168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.856392][T12168] [ 233.856392][T12168] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 233.864109][T12168] validate_chain+0xb9b/0x2140 [ 233.869383][T12168] __lock_acquire+0xab9/0xd20 [ 233.874568][T12168] lock_acquire+0x120/0x360 [ 233.879577][T12168] __mutex_lock+0x187/0x1350 [ 233.884668][T12168] pcpu_alloc_noprof+0x286/0x16b0 [ 233.890198][T12168] sbitmap_init_node+0x1e1/0x630 [ 233.895633][T12168] sbitmap_queue_init_node+0x3e/0x4d0 [ 233.901504][T12168] blk_mq_init_tags+0x110/0x280 [ 233.906856][T12168] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 233.912820][T12168] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 233.919128][T12168] nbd_start_device+0x17f/0xb10 [ 233.924491][T12168] nbd_genl_connect+0x135b/0x18f0 [ 233.930020][T12168] genl_family_rcv_msg_doit+0x215/0x300 [ 233.936069][T12168] genl_rcv_msg+0x60e/0x790 [ 233.941088][T12168] netlink_rcv_skb+0x205/0x470 [ 233.946358][T12168] genl_rcv+0x28/0x40 [ 233.950841][T12168] netlink_unicast+0x82c/0x9e0 [ 233.956109][T12168] netlink_sendmsg+0x805/0xb30 [ 233.961374][T12168] __sock_sendmsg+0x21c/0x270 [ 233.966556][T12168] ____sys_sendmsg+0x505/0x830 [ 233.971825][T12168] ___sys_sendmsg+0x21f/0x2a0 [ 233.977004][T12168] __x64_sys_sendmsg+0x19b/0x260 [ 233.982442][T12168] do_syscall_64+0xfa/0x3b0 [ 233.987450][T12168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.993843][T12168] [ 233.993843][T12168] other info that might help us debug this: [ 233.993843][T12168] [ 234.004048][T12168] Chain exists of: [ 234.004048][T12168] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#53 [ 234.004048][T12168] [ 234.017681][T12168] Possible unsafe locking scenario: [ 234.017681][T12168] [ 234.025109][T12168] CPU0 CPU1 [ 234.030453][T12168] ---- ---- [ 234.035805][T12168] lock(&q->q_usage_counter(io)#53); [ 234.041173][T12168] lock(fs_reclaim); [ 234.047658][T12168] lock(&q->q_usage_counter(io)#53); [ 234.055548][T12168] lock(pcpu_alloc_mutex); [ 234.060041][T12168] [ 234.060041][T12168] *** DEADLOCK *** [ 234.060041][T12168] [ 234.068168][T12168] 6 locks held by syz.1.1754/12168: [ 234.073345][T12168] #0: ffffffff8f59e930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 234.081515][T12168] #1: ffffffff8f59e748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 234.090463][T12168] #2: ffff8880255ab188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 234.101850][T12168] #3: ffff8880255ab0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 234.112816][T12168] #4: ffff888142fa3b88 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 234.123524][T12168] #5: ffff888142fa3bc0 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 234.134484][T12168] [ 234.134484][T12168] stack backtrace: [ 234.140367][T12168] CPU: 0 UID: 0 PID: 12168 Comm: syz.1.1754 Not tainted syzkaller #0 PREEMPT(full) [ 234.140386][T12168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 234.140396][T12168] Call Trace: [ 234.140405][T12168] [ 234.140416][T12168] dump_stack_lvl+0x189/0x250 [ 234.140438][T12168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.140453][T12168] ? __pfx__printk+0x10/0x10 [ 234.140472][T12168] ? print_lock_name+0xde/0x100 [ 234.140489][T12168] print_circular_bug+0x2ee/0x310 [ 234.140506][T12168] check_noncircular+0x134/0x160 [ 234.140526][T12168] validate_chain+0xb9b/0x2140 [ 234.140548][T12168] __lock_acquire+0xab9/0xd20 [ 234.140568][T12168] ? pcpu_alloc_noprof+0x286/0x16b0 [ 234.140586][T12168] lock_acquire+0x120/0x360 [ 234.140603][T12168] ? pcpu_alloc_noprof+0x286/0x16b0 [ 234.140626][T12168] __mutex_lock+0x187/0x1350 [ 234.140642][T12168] ? pcpu_alloc_noprof+0x286/0x16b0 [ 234.140660][T12168] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 234.140678][T12168] ? kasan_save_track+0x4f/0x80 [ 234.140694][T12168] ? kasan_save_track+0x3e/0x80 [ 234.140708][T12168] ? __kasan_kmalloc+0x93/0xb0 [ 234.140724][T12168] ? blk_mq_init_tags+0x85/0x280 [ 234.140739][T12168] ? blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 234.140757][T12168] ? blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 234.140770][T12168] ? pcpu_alloc_noprof+0x286/0x16b0 [ 234.140791][T12168] ? nbd_genl_connect+0x135b/0x18f0 [ 234.140811][T12168] ? genl_family_rcv_msg_doit+0x215/0x300 [ 234.140827][T12168] ? genl_rcv_msg+0x60e/0x790 [ 234.140841][T12168] ? __pfx___mutex_lock+0x10/0x10 [ 234.140853][T12168] ? ____sys_sendmsg+0x505/0x830 [ 234.140867][T12168] ? do_syscall_64+0xfa/0x3b0 [ 234.140885][T12168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.140905][T12168] pcpu_alloc_noprof+0x286/0x16b0 [ 234.140928][T12168] sbitmap_init_node+0x1e1/0x630 [ 234.140942][T12168] ? __kasan_kmalloc+0x93/0xb0 [ 234.140959][T12168] sbitmap_queue_init_node+0x3e/0x4d0 [ 234.140974][T12168] blk_mq_init_tags+0x110/0x280 [ 234.140997][T12168] blk_mq_alloc_map_and_rqs+0xbd/0x9f0 [ 234.141019][T12168] ? blk_mq_update_nr_hw_queues+0x928/0x1aa0 [ 234.141032][T12168] ? kfree+0x18e/0x440 [ 234.141048][T12168] blk_mq_update_nr_hw_queues+0xa26/0x1aa0 [ 234.141069][T12168] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 234.141089][T12168] ? sysfs_add_file_mode_ns+0x259/0x300 [ 234.141115][T12168] nbd_start_device+0x17f/0xb10 [ 234.141136][T12168] ? device_create_file+0xf4/0x1c0 [ 234.141158][T12168] nbd_genl_connect+0x135b/0x18f0 [ 234.141180][T12168] ? __pfx_nbd_genl_connect+0x10/0x10 [ 234.141202][T12168] ? __nla_parse+0x40/0x60 [ 234.141222][T12168] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 234.141247][T12168] genl_family_rcv_msg_doit+0x215/0x300 [ 234.141266][T12168] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 234.141286][T12168] ? stack_trace_save+0x9c/0xe0 [ 234.141308][T12168] genl_rcv_msg+0x60e/0x790 [ 234.141326][T12168] ? __pfx_genl_rcv_msg+0x10/0x10 [ 234.141340][T12168] ? __pfx_nbd_genl_connect+0x10/0x10 [ 234.141362][T12168] netlink_rcv_skb+0x205/0x470 [ 234.141384][T12168] ? __lock_acquire+0xab9/0xd20 [ 234.141400][T12168] ? __pfx_genl_rcv_msg+0x10/0x10 [ 234.141419][T12168] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 234.141443][T12168] ? down_read+0x1ad/0x2e0 [ 234.141456][T12168] genl_rcv+0x28/0x40 [ 234.141469][T12168] netlink_unicast+0x82c/0x9e0 [ 234.141489][T12168] ? __pfx_netlink_unicast+0x10/0x10 [ 234.141506][T12168] ? netlink_sendmsg+0x642/0xb30 [ 234.141521][T12168] ? skb_put+0x11b/0x210 [ 234.141535][T12168] netlink_sendmsg+0x805/0xb30 [ 234.141551][T12168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.141564][T12168] ? aa_sock_msg_perm+0xf1/0x1d0 [ 234.141577][T12168] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 234.141591][T12168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.141603][T12168] __sock_sendmsg+0x21c/0x270 [ 234.141622][T12168] ____sys_sendmsg+0x505/0x830 [ 234.141641][T12168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 234.141658][T12168] ? import_iovec+0x74/0xa0 [ 234.141675][T12168] ___sys_sendmsg+0x21f/0x2a0 [ 234.141689][T12168] ? __pfx____sys_sendmsg+0x10/0x10 [ 234.141715][T12168] ? __fget_files+0x2a/0x420 [ 234.141727][T12168] ? __fget_files+0x3a0/0x420 [ 234.141741][T12168] __x64_sys_sendmsg+0x19b/0x260 [ 234.141760][T12168] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 234.141778][T12168] ? rcu_is_watching+0x15/0xb0 [ 234.141793][T12168] ? do_syscall_64+0xbe/0x3b0 [ 234.141806][T12168] do_syscall_64+0xfa/0x3b0 [ 234.141818][T12168] ? lockdep_hardirqs_on+0x9c/0x150 [ 234.141836][T12168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.141852][T12168] ? clear_bhb_loop+0x60/0xb0 [ 234.141870][T12168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.141896][T12168] RIP: 0033:0x7f091858ebe9 [ 234.141911][T12168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.141923][T12168] RSP: 002b:00007f0919491038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.141938][T12168] RAX: ffffffffffffffda RBX: 00007f09187c5fa0 RCX: 00007f091858ebe9 [ 234.141949][T12168] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 234.141958][T12168] RBP: 00007f0918611e19 R08: 0000000000000000 R09: 0000000000000000 [ 234.141967][T12168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.141975][T12168] R13: 00007f09187c6038 R14: 00007f09187c5fa0 R15: 00007fffa1c5a498 [ 234.141998][T12168] [ 234.663978][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 234.710023][ T5871] block nbd4: Receive control failed (result -32) [ 234.718064][ T5871] block nbd4: Receive control failed (result -32) [ 234.765496][T12168] nbd4: detected capacity change from 0 to 127 [ 234.773062][T11003] block nbd4: Dead connection, failed to find a fallback [ 234.780468][T11003] block nbd4: shutting down sockets [ 234.780480][ T2954] bond2: (slave wlan0): failed to get link speed/duplex [ 234.785931][T11003] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.802530][T11003] Buffer I/O error on dev nbd4, logical block 0, async page read [ 234.810617][T11003] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.819680][T11003] Buffer I/O error on dev nbd4, logical block 1, async page read [ 234.827565][T11003] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.836854][T11003] Buffer I/O error on dev nbd4, logical block 2, async page read [ 234.844716][T11003] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.853739][T11003] Buffer I/O error on dev nbd4, logical block 3, async page read [ 234.861626][T11003] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.870829][T11003] Buffer I/O error on dev nbd4, logical block 0, async page read [ 234.878883][T11003] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.888079][T11003] Buffer I/O error on dev nbd4, logical block 1, async page read [ 234.896211][T11003] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.905273][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 234.912506][T11003] Buffer I/O error on dev nbd4, logical block 2, async page read [ 234.920903][T11003] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.930107][T11003] Buffer I/O error on dev nbd4, logical block 3, async page read [ 234.938130][T11003] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.947637][T11003] Buffer I/O error on dev nbd4, logical block 0, async page read [ 234.955493][T11003] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.964548][T11003] Buffer I/O error on dev nbd4, logical block 1, async page read [ 234.973213][T11003] ldm_validate_partition_table(): Disk read failed. [ 234.980631][T11003] Dev nbd4: unable to read RDB block 0 [ 234.987797][T11003] nbd4: unable to read partition table [ 234.998610][T11003] ldm_validate_partition_table(): Disk read failed. [ 235.007077][T11003] Dev nbd4: unable to read RDB block 0 [ 235.013341][T11003] nbd4: unable to read partition table [ 235.018992][ T6136] bond2: (slave wlan0): failed to get link speed/duplex [ 235.124230][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 236.914248][ T49] net_ratelimit: 15 callbacks suppressed [ 236.914268][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 237.034346][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 237.144320][ T6136] bond2: (slave wlan0): failed to get link speed/duplex [ 237.264244][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 237.374216][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 237.484296][ T6136] bond2: (slave wlan0): failed to get link speed/duplex [ 237.594208][ T12] bond2: (slave wlan0): failed to get link speed/duplex [ 237.704831][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 237.814138][ T6136] bond2: (slave wlan0): failed to get link speed/duplex [ 237.924227][ T6136] bond2: (slave wlan0): failed to get link speed/duplex [ 242.015190][ T6136] net_ratelimit: 36 callbacks suppressed [ 242.015211][ T6136] bond2: (slave wlan0): failed to get link speed/duplex [ 242.134154][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 242.254377][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 242.364137][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 242.474555][ T49] bond2: (slave wlan0): failed to get link speed/duplex [ 242.584140][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 242.694308][ T2954] bond2: (slave wlan0): failed to get link speed/duplex [ 242.814364][ T6137] bond2: (slave wlan0): failed to get link speed/duplex [ 242.934211][ T2954] bond2: (slave wlan0): failed to get link speed/duplex [ 243.044286][ T6137] bond2: (slave wlan0): failed to get link speed/duplex