last executing test programs: 2.331603986s ago: executing program 0 (id=3623): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70100000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, 0x0, 0x88) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.164558809s ago: executing program 0 (id=3627): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000200), 0xd) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e23, 0x8111, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e4}}, 0x0, 0x0, 0x2b, 0x0, "bb02a3c364ca41d6357e54452401400400941292f4925a1e1ea6324d6193fcf19b49f3eefb1f56c54dc46d8b6d2ccd118aa0cc1dc2767bbe000100060000010100"}, 0xd8) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c000000120003032dbd7000fdffffff000402004e224e230400000007000000faffffff000000040200000080000000ff0f000000000000", @ANYRES32=0x0, @ANYBLOB="070000000000000002000000253820575f31addcb5e9f018c7bfa302000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20040849}, 0x8004) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r1, 0x800) accept4(r1, 0x0, 0x0, 0x80000) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="00eeff0000000000800000", @ANYRES32=r5, @ANYBLOB="56060900000000002400128009000100626f6e640000000014000280060019000700000008000b00", @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="581bf964", @ANYRES16=r8, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000100000008000a00feffffff08001800e000000108001900e0000002"], 0x44}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r11], 0x54}}, 0x0) 2.049747623s ago: executing program 2 (id=3630): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x51483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0xf868}}}}]}, 0x40}}, 0x8040) 1.877020556s ago: executing program 2 (id=3631): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f00000003c0)) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) listen(r2, 0xe) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10000) 1.768951742s ago: executing program 2 (id=3634): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000001380)="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", 0xb29, 0x80, &(0x7f0000002380)={0xa, 0x4e22, 0x345, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x8}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000001380)="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", 0xb29, 0x80, &(0x7f0000002380)={0xa, 0x4e22, 0x345, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x8}, 0x1c) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x2) r3 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) shutdown(r2, 0x0) (async) shutdown(r2, 0x0) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0xfffffffffffffcfb) 1.608333907s ago: executing program 2 (id=3636): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="720ac4ff130000000000127afac52d811706e0c1db5083b9f430a41de512893f4ee290c9d959cbe4bfb1768413fe91ad527a8616aa72736f525994c8ba7c9168430e1c725ae242a40a2e69bf000000000000009e2f387711ff6edd1febcd7594ec180b6a88f4adafca8959656ced64d98ec03fba37d2b5eb1bab0000000000000000000000000000002bf8c6b6130bdb7b5250c4cf265355140dcecf7e7e27d5"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x17, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ldst={0x3, 0x1, 0x4, 0x0, 0xb, 0x100, 0x10}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x1}]}, &(0x7f0000000180)='syzkaller\x00', 0x6, 0xf0, &(0x7f00000001c0)=""/240, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0xcaf8}, 0x94) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00'}, 0x18) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) ppoll(&(0x7f00000004c0)=[{r1, 0x200}, {r0, 0x2202}, {r0, 0x4}, {r0, 0x460d}, {r0, 0x1040}, {r0, 0x1101}, {r0, 0x2200}, {r0}, {r2, 0x1}], 0x9, &(0x7f0000000580)={r3, r4+10000000}, &(0x7f00000005c0)={[0xbaf]}, 0x8) 1.561421469s ago: executing program 4 (id=3638): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 32) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000012", @ANYRES16=r6, @ANYBLOB="010025bd7200000000003900000008000300", @ANYRES32=r5, @ANYBLOB="10005a800c0000800500020041000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x70}}, 0x1) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x819f68284167e039) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c800}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.451150468s ago: executing program 1 (id=3639): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="800000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000600012800b000100697036746e6c00005000028014000200fc0100000000000000000000000000000400130014000300fe8000000000000000000000000000aa0500060002000000080008003b000000080008002400000008000100026f24"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRESDEC=r1, @ANYRESOCT=r0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c00c400ff03000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f0400e9000000"], 0x24c}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000020500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) (async, rerun: 64) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) (rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="660a0000000000006911750000000000850000001a00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket(0x10, 0x80002, 0x0) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001dc0)=@newtaction={0x10f8, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x10e4, 0x1, [@m_xt={0x10e0, 0x19, 0x0, 0x0, {{0x7}, {0x1040, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TARG={0x102a, 0x6, {0x0, 'filter\x00', 0x5, 0x3, "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"}}]}, {0x7a, 0x6, "3cd76451b891a91387fc2a4eeab528320c74f1e123d0ef680851146984098fc710c33c05e714d680f05aeb466f6544b608067753e5c9f6e44825140b441daaa4d82409e9cda20b1ee298a634382d288f22daa9d7d7e6430caf1c7d74c1c8e211c125c313254f5c842d1ce89dde17ae901763ee1108f9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x10f8}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffffffdbdf25000000bc", @ANYRES32=0x0, @ANYBLOB="4319030000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000140)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r9}, 0x14) (async, rerun: 32) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x11, &(0x7f0000000440)=@security={'security\x00', 0xe, 0x4, 0xa, 0xffffffff, 0x0, 0x1f0, 0xb8, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'xfrm0\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@ip={@local, @private, 0x0, 0x0, 'veth0_virt_wifi\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) (async) sendmsg$nl_route(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000130005002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x24000899}, 0x42) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc) socket$inet(0x2, 0x2, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) 1.413090229s ago: executing program 1 (id=3640): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x34}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc6, &(0x7f00000000c0)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x34}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc6, &(0x7f00000000c0)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x6}, 0x94) (async) 1.275471044s ago: executing program 4 (id=3642): r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000), 0x4) r1 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x0, 0x2, 0xaf5, 0x2599, 0x40, 0xffff, 0x40}, 0x1c) clock_gettime(0x1, &(0x7f00000000c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0xf, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x20048040) r3 = socket$nl_route(0x10, 0x3, 0x0) close(r3) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @broadcast}, &(0x7f0000000240)=0x10, 0x0) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @multicast2}, 0x110, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x8, 0x40}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x7800, 0x40, 0x3, 0x2, {{0x34, 0x4, 0x2, 0x39, 0xd0, 0x66, 0x0, 0x5, 0x29, 0x0, @private=0xa010100, @multicast1, {[@lsrr={0x83, 0x2b, 0xd, [@multicast1, @private=0xa010100, @multicast1, @local, @rand_addr=0x64010100, @broadcast, @remote, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x10, 0x29, 0x0, 0x9, [0x5, 0x80000001, 0x0]}, @cipso={0x86, 0x20, 0x3, [{0x7, 0xd, "5f7fe76d95abf692206a80"}, {0x2, 0x5, "da1adc"}, {0x1, 0x8, "93c7cb143d6d"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0x47, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @remote, @local, @empty]}, @end, @ssrr={0x89, 0x13, 0xfe, [@multicast2, @broadcast, @multicast2, @local]}, @timestamp_prespec={0x44, 0x2c, 0xa4, 0x3, 0x7, [{@empty, 0x100}, {@local, 0x2}, {@remote, 0x61}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0xd}, {@rand_addr=0x64010101, 0x1eec}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x4280, 0x8, 0x6, 0x20, r1, 0x442, '\x00', r5, r3, 0x4, 0x0, 0x5, 0x6}, 0x50) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000500)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000540)={@broadcast, @multicast1, r7}, 0xc) r8 = socket(0x25, 0xa, 0x3) socket$can_raw(0x1d, 0x3, 0x1) writev(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000580)="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", 0xfb}, {&(0x7f0000000680)="29f6b2598406667611d175cc2d85d20e0161200c828f52126e82d3915cd2147e77a9f8ed99efeff289751a22e870d695e0aca9fc5cb2ca0281f31238a855cc1547aa75560315e93569149cd02d2e12ad10c78690f17b7d62ba2f195e546c925c7357dc30e11c9e1cc0bf00a6a7588c6dc81294718703f4ec406ec923771e27c0f11211531a01c470f7e61300b4bfa58f64471b05", 0x94}], 0x2) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8840804}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x4c, r9, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x3}, @val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10001}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x401}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2c000}, 0x8084) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000940), 0x80, 0x0) ioctl$PPPIOCGIDLE32(r11, 0x8008743f, &(0x7f0000000980)) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), r8) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x5c, r12, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004842) ioctl$sock_ifreq(r0, 0x112d2, &(0x7f0000000b80)={'batadv0\x00', @ifru_data=&(0x7f0000000b40)="015acee654fc0c7fd5d8ee6ef21ecbad0204b8de63a1a22d23a68b0521cc3309"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=@getnetconf={0x14, 0x52, 0x13, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}}, 0x40) connect$inet(r4, &(0x7f0000000cc0)={0x2, 0x4e22, @empty}, 0x10) 1.274807365s ago: executing program 1 (id=3643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) close(r0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0x4}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x48814) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000074e0000720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed000007030000022800001d44000000000000620a00ff040400007203020100200000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x13, 0x7}, 0x4) getsockopt$packet_int(r3, 0x107, 0x12, 0x0, &(0x7f0000000240)) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f00000000c0)) r4 = socket(0x400000000010, 0x4188adbbaefe7702, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x3, 0x3, 0x7, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 1.25563477s ago: executing program 3 (id=3644): r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) (async, rerun: 32) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3, 0x1c) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x80, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ctinfo={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3991}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r4, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005001600070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x1000000, 0x0, 0x24004821}, 0x0) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28000000131481"], 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000426bd7000ffdbdfce8ee325140000000c000607038db20003"], 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003500010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.11994849s ago: executing program 3 (id=3645): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x7, 0x7f}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001d00)={r0, 0x0, 0x0}, 0x20) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_SREG={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) close(r2) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x12, &(0x7f0000000280)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @alu={0x4, 0x0, 0x0, 0xc, 0x3, 0x1, 0xfffffffffffffffb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @jmp={0x5, 0x0, 0x2, 0x0, 0x3, 0xffffffffffffffe0, 0x8000000000000018}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4ba}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r6, 0x0, 0x2}, 0x50) r7 = socket(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f00000000c0)) 1.052115513s ago: executing program 0 (id=3646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x800, 0x4, 0x4]}]}, 0x24}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000580)={'team0\x00', &(0x7f0000000480)=@ethtool_rxnfc={0x30, 0x2, 0x3, {0xd, @esp_ip4_spec={@local, @multicast2, 0x1, 0xb}, {0x0, @random="4063124b3c75", 0x5, 0xd, [0x9f, 0xd]}, @esp_ip4_spec={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x36}, 0x8, 0x2}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x4, 0x4, [0x10001, 0x6]}, 0x4, 0x7}, 0xa, [0x0, 0x3, 0xc, 0xfff0000, 0x10001, 0x1, 0x9, 0x5, 0x316, 0x2]}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000340)}, 0x20) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000a00)={{r0, &(0x7f0000000840)='%l+.*%],\x00', 0x105002, &(0x7f0000000880)={@align=0xfffffffffffffffa, {0x4, 0x9, 0x2, 0xd3ad}}, 0x64, &(0x7f00000008c0)={@_ha_fsid}, &(0x7f0000000900)=0x393}, {[0x6d558920, 0xf, 0x4, 0xfffffffb]}, 0x4, 0x93, &(0x7f0000000940)=""/147}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000"], 0x0, 0x2}, 0x94) r6 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x2, 0x18, 0x1, 0x2, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}}, 0x4040000) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=0x1, r8, 0x37}, 0x20) (async) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r8, r4, 0x1d, 0x0, @void}, 0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000080)={r10}, &(0x7f0000000180)=0x8) (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r11}, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x17, &(0x7f0000000e80)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @generic={0x9, 0x3, 0x8, 0xfffc, 0x1ff}, @map_fd={0x18, 0x6}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000d40)='syzkaller\x00', 0x200}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0xa, &(0x7f0000000c40)=ANY=[@ANYBLOB="850000001400000018110000", @ANYRES32=r3, @ANYBLOB="0000c8000000000000b708006fe100060000007b8af8ff00000000bfa2f6ffffff000007020000f8ffffffb703000008000000b5040000020000008500000082000000"], &(0x7f0000000640)='syzkaller\x00', 0x401, 0xa1, &(0x7f0000000700)=""/161, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x5, 0xc0, 0x10000}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000a80)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r11, 0x1], &(0x7f0000000ac0)=[{0x2, 0x2, 0x0, 0x9}, {0x0, 0x3, 0xd, 0x9}, {0x2, 0x1, 0x0, 0x4}, {0x4, 0x5, 0xe, 0x9}, {0x2, 0x2, 0x7, 0xb}, {0x4, 0x5, 0x1, 0x8}, {0x5, 0x3, 0xa, 0x3}, {0x2, 0x1, 0xf, 0x6}], 0x10, 0x5}, 0x94) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) (async) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010000000000000000000f"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) (async) shutdown(r0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002bbd7000fbdbdf250700000008000300", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES8=r9, @ANYBLOB="0c00060000000000000000000c00060003000f77629121a3a06f0500fdffffff"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x40050) 1.048942665s ago: executing program 4 (id=3647): recvmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004880)=[{0x0}, {0x0}, {&(0x7f0000004300)=""/214, 0xd6}], 0x3}, 0x4}], 0x1, 0x23, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001300)) readv(r1, &(0x7f0000001440)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) 849.169532ms ago: executing program 4 (id=3648): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x0, 0x82, 0x0, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000008400000084000000060000000a00000003edff0604000000050000000000000008000000070000000c000000030000000c00000004000084ff0300000f00000005000000090000000000000004000000700c000004000000030000002c0000000900000004000000010000000a000000020000930000000004000000020000000800000004000000eaffffff3f0000000061302e3000"], &(0x7f00000006c0)=""/251, 0xa2, 0xfb, 0x1, 0x8}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1c, 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES8=r1], 0x0, 0x80, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) (async) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6015690900442f"], 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket(0x2, 0x80805, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0xfe, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffff7f}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x8, 0x0, '4'}, @sadb_x_nat_t_type={0x1, 0x14, 0x35}]}, 0x68}, 0x1, 0x7}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000100)={r5, 0xbd24, 0x4, 0x8000, 0x8, 0x9, 0x0, 0x4, {0x0, @in6={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1}}, 0x8, 0x545, 0x8, 0x7, 0x81}}, &(0x7f00000001c0)=0xb0) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r5, 0x4}, 0x8) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETLINK(r8, 0x400454cd, 0x1) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000001300), 0x4) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffe66, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x94) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x4008092) connect$inet6(r9, &(0x7f0000001380)={0xa, 0x4e22, 0x1000, @private0, 0x9b}, 0x1c) 756.387241ms ago: executing program 0 (id=3649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000"], 0x18) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 755.70865ms ago: executing program 4 (id=3650): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x6, 0xa8, @random='8\x00'}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) r4 = socket$packet(0x11, 0x2, 0x300) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8084}, 0x410) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x80, 0x700, 0x5, 0x103, {{0x3d, 0x4, 0x0, 0x12, 0xf4, 0x68, 0x0, 0x9, 0x2f, 0x0, @loopback, @empty, {[@cipso={0x86, 0x4d, 0x3, [{0x0, 0x11, "d4733b5bd70fca8f6546e8134ac932"}, {0x6, 0x9, "1f75a50f00a432"}, {0x2, 0xf, "31bce4cbff49fd60dd1a86971a"}, {0x2, 0xc, "535fd19b7cc685e15d49"}, {0x6, 0x6, "3b86e20c"}, {0x0, 0xc, "24bc607af26aa96aa9a7"}]}, @ssrr={0x89, 0x13, 0x5b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast, @remote]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0x7, "aa4d9ae65e"}, @timestamp={0x44, 0x24, 0x4e, 0x0, 0x2, [0x8b9b, 0x2, 0x5, 0x9, 0x8, 0x1, 0x8dc, 0x9]}, @cipso={0x86, 0x36, 0x3, [{0x0, 0x6, "255f84d0"}, {0x5, 0x11, "8370ae335ed8aeeec3f846956c05f2"}, {0x0, 0x7, "acd104a8f8"}, {0x5, 0x12, "d92f3dbc568e14a1e71ac24c23a8beb4"}]}, @timestamp_prespec={0x44, 0x14, 0xa2, 0x3, 0xe, [{@multicast2, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x17}, 0xeea3}]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f00000005c0)={&(0x7f0000000080), 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x94, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7ff}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x6846}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 731.742773ms ago: executing program 1 (id=3651): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x5c, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r1, 0x38, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x80000001, @empty, 0x6}, @in6={0xa, 0x4e22, 0x7fffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}]}, &(0x7f0000000180)=0x10) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x18) (async) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, &(0x7f0000000280)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000002c0)=0x9, 0x4) (async, rerun: 32) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000300)={0x2, [0x0, 0x0]}, &(0x7f0000000340)=0xc) (rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv4_newnexthop={0x20, 0x68, 0x10, 0x70bd2a, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x1}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x8810) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r6, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x200, 0x28}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x2bb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) (async) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000600), r5) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0x1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x1, 0x7, 0x9, 0x0, {{0x14, 0x4, 0x1, 0x16, 0x50, 0x65, 0x0, 0xb, 0x29, 0x0, @multicast1, @rand_addr=0x64010101, {[@generic={0x83, 0x8, "ce2e0351ebe0"}, @end, @lsrr={0x83, 0xb, 0xc8, [@dev={0xac, 0x14, 0x14, 0x1d}, @remote]}, @cipso={0x86, 0x26, 0xffffffffffffffff, [{0x7, 0x8, "b9407bd2a0af"}, {0x7, 0x3, 't'}, {0x5, 0xc, "733964d2c72eab00d29d"}, {0x1, 0x2}, {0x6, 0x7, "7dc84fb5b6"}]}]}}}}}) (async, rerun: 32) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000840)={@dev, 0x0}, &(0x7f0000000880)=0x14) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000008c0)={@private, @rand_addr, 0x0}, &(0x7f0000000900)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000a00)={'gretap0\x00', &(0x7f0000000940)={'tunl0\x00', 0x0, 0x80, 0x1, 0xfffffff7, 0x80000000, {{0x19, 0x4, 0x2, 0x18, 0x64, 0x68, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@ra={0x94, 0x4, 0x1}, @noop, @end, @ssrr={0x89, 0x27, 0x6c, [@broadcast, @loopback, @loopback, @rand_addr=0x64010101, @multicast2, @multicast2, @loopback, @rand_addr=0x64010102, @multicast1]}, @noop, @rr={0x7, 0xb, 0xac, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @timestamp={0x44, 0x14, 0xf6, 0x0, 0x8, [0xd7, 0x1, 0x1, 0x8]}, @end]}}}}}) (async, rerun: 32) getpeername$packet(0xffffffffffffffff, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a80)=0x14) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000b80)={'ip6gre0\x00', &(0x7f0000000b00)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x5, 0x6, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x700, 0x10, 0xfffffffb, 0x400}}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000bc0)={'ipvlan1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001180)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001140)={&(0x7f0000000c00)={0x504, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r16}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r18}}}]}}]}, 0x504}, 0x1, 0x0, 0x0, 0x10}, 0x24008014) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000013c0)={r2, r15, 0x25, 0x14, @val=@kprobe_multi=@syms={0x0, 0x7, &(0x7f0000001380)=[&(0x7f00000011c0)='ip6gre0\x00', &(0x7f0000001200)='team0\x00', &(0x7f0000001240)='\x00', &(0x7f0000001280)='lb_tx_hash_to_port_mapping\x00', &(0x7f00000012c0)='+\x00', &(0x7f0000001300)='}\x00', &(0x7f0000001340)=',-\x00'], 0x0, 0x1}}, 0x30) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000001400)={0x2, 'geneve0\x00', {0xe8}, 0x8}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000014c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001440), &(0x7f0000001480)=r3}, 0x20) (async) r20 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001500)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@base={0x1b, 0x4, 0x1, 0x9, 0x53085, r19, 0x1ff, '\x00', r14, r20, 0x3, 0x3, 0x3}, 0x50) 728.509032ms ago: executing program 3 (id=3652): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff74, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x1a, 0x400, 0x0, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1}, [@RTA_SRC={0x8, 0x2, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 679.096232ms ago: executing program 2 (id=3653): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000100)=0x9, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x54}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) 499.722819ms ago: executing program 3 (id=3654): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x2, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000007100250428bd70507f00000007001400", @ANYRES32=r2, @ANYBLOB="0c00018008000100c1000100"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040000) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, 0x0) 499.085962ms ago: executing program 1 (id=3655): r0 = socket$inet(0x2, 0x3, 0xa) r1 = socket(0xa, 0x3, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x84, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000000)) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000080)='%y', 0x2}], 0x2}, 0x4004) readv(r4, &(0x7f0000000980)=[{&(0x7f0000000240)=""/95, 0x5f}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_VOICE(r9, 0x112, 0xb, &(0x7f0000000300)=0x3, 0x2) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="0f2bdf8d8f95a7f003fe3dbc0dd69d87a4a556fa02a366560f5a2caa0ba3fc0f1ddf9e83ad76c1f0ea933e04a8e58b5bc4dc0a7f38a5ca7fae29569fcbfd7ee8b311f1c60c8b2d12abb8f001adf6b3da560312f98ba1af6c8481407707d030b56661e7b3a99ed2cbaebd0ae6fc644acd1150053ff68ab072e8a95c1395695a8ba51492a3f90e261435d043cf726b468bd6a300d42e92bd93e3f80a99a2bf17cd14299741cedcd1ce1706ef24df8e0224c6992e5afcdd26713ca4adacc04b66a6e0ce1ee9ad69d20595285c6f3845963888"], 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f00000009c0)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x11}, 0x4008000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x130, 0xe138, 0x198, 0x130, 0x198, 0x238, 0x358, 0x358, 0x238, 0x358, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x4, 0x7, 0x3d58, 0xd119, 0x8, 0x45, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0xe, 0x4, 0x1, 0x4, 0x0, 0x5], 0x4, 0x1}, {0x3, [0x5, 0x1, 0x1, 0x2, 0x7, 0x4], 0x5, 0x4}}}}, {{@ip={@initdev={0xac, 0x1e, 0xfd, 0x0}, @multicast2, 0xff000000, 0x0, 'vlan0\x00', 'batadv_slave_1\x00', {0x7f}, {}, 0x54, 0x2, 0x2}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@addrtype={{0x30}, {0x90, 0x601, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x6, 0x5, 0x3, 'snmp_trap\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x330) 489.019743ms ago: executing program 4 (id=3656): r0 = socket$alg(0x26, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x5, [@typedef={0x3, 0x0, 0x0, 0xf, 0x1}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x21, 0x0, 0x2f, 0x4}, @ptr={0x10, 0x0, 0x0, 0x2, 0x4}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x5}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @fwd={0x6}]}, {0x0, [0x0, 0x0, 0x5f]}}, 0x0, 0x69, 0x0, 0xfffffffc}, 0x28) bind$alg(r0, &(0x7f0000001080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x10000, 0x2e, 0x104, 0x7, 0x3, 0x0, 0x0, 0x401}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) 465.723087ms ago: executing program 2 (id=3657): r0 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f0000000000)="198df7d78855502a0b7bed814f05468668df44be780498e7e7e2e770d700b7523306aa053265416f08b8bee7bd0357905fcd663b527c684ff889fd9599d6d8eb7d0484300410bcb77ccf5dce18e4697124bd25c1305d0d0e0cc9deb0412bf0e16ad6c184ba9eba4c6b19a1b9eaa74386a7a07819555fe610149be44b4dad7e7bd321a177158e137ed5ba6113919d769b8fdbe444ee1a5af4d7f821ced88f928a9de115", &(0x7f00000000c0)=""/104, &(0x7f0000000140)="f4d11f271320618792ccb5387908eed7820d65fe8b17fcac46ef2d5e870d4f86b65dbcd5b7192190ba47e36166ccaa9b070118a6790e7327fd6a0493d4d8c18e", &(0x7f0000000180)="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", 0x5, r1, 0x4}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0xc, [@struct={0xf, 0x3, 0x0, 0x4, 0x0, 0x8001, [{0xc, 0x4, 0x6}, {0xb, 0x3, 0x3}, {0xc, 0x1, 0x2}]}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x4, 0x6}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x34, 0x2}, @ptr={0x6}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xe, 0x5}, {0xb, 0x2}, {0x9, 0x1}, {0x10, 0x4}, {0x5, 0x5}, {0xf, 0x1}, {0x6, 0x3}, {0x5, 0x5}]}, @fwd={0x5}]}, {0x0, [0x2e, 0x5f, 0x61, 0x0, 0x30, 0x5f, 0x5f, 0x30, 0x61, 0x2e]}}, &(0x7f00000004c0)=""/176, 0xe4, 0xb0, 0x0, 0x7f}, 0x28) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', r2, r3, 0x0, 0x3, 0x3}, 0x50) r5 = socket$xdp(0x2c, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000740)={r5, &(0x7f0000000640)='\x00', 0x4000, &(0x7f0000000680)={@_ha_fsid={[0x40, 0x5]}, {0x6, 0x8, 0x9, 0x7b}}, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x12}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0], 0x0, 0xbd, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000b00), &(0x7f0000000b40), 0x8, 0xb9, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d40)={0x0, 0x9}, 0xc) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d80)={0x1b, 0x0, 0x0, 0x0, 0x0, r1, 0x6, '\x00', r2, r3, 0x5, 0x1, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x18, 0x2c, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40008}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2f9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000900)='GPL\x00', 0x3, 0x40, &(0x7f0000000940)=""/64, 0x40f00, 0x20, '\x00', r2, @fallback=0x18, r3, 0x8, &(0x7f0000000980)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x0, 0x1, 0x105, 0x5}, 0x10, r8, r9, 0x8, &(0x7f0000000e00)=[r1, r1, r1, r10, r4, r4, r4, r11], &(0x7f0000000e40)=[{0x2, 0x1, 0x6, 0xa}, {0x0, 0x5, 0xf, 0xa}, {0x1, 0x2}, {0x5, 0x3, 0x0, 0xc}, {0x5, 0x1, 0xb683, 0x7}, {0x4, 0x4, 0x5, 0x6}, {0x3, 0x1, 0x3, 0x5}, {0x1, 0x4, 0x5, 0x9}], 0x10, 0x6}, 0x94) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000f80)) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000001000)={0x5, 0xda}) syz_genetlink_get_family_id$devlink(&(0x7f0000001040), r6) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', r7, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bind$bt_hci(r6, &(0x7f0000001100)={0x1f, 0x4}, 0x6) ioctl$BTRFS_IOC_SCRUB_CANCEL(r5, 0x941c, 0x0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r12, &(0x7f00000012c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x88, r13, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x200000c0}, 0x80088c4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000001300)={0xffcd, 0x1, 0x1, 0x6, 0x4, 0x4, 0x7, 0x3}, &(0x7f0000001340)=0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x3, [@volatile={0x8000, 0x0, 0x0, 0x9, 0x3}, @ptr={0x4, 0x0, 0x0, 0x2, 0x4}, @enum64={0x2, 0x1, 0x0, 0x13, 0x1, 0x0, [{0x8, 0x9, 0x4}]}, @enum={0x6, 0x9, 0x0, 0x6, 0x4, [{0x0, 0x8}, {0x3, 0x7f}, {0xb, 0x81}, {0x2, 0x3}, {0xe, 0x36}, {0x9, 0x4}, {0xf, 0xffff8001}, {0xb, 0xfe000000}, {0xa, 0x2}]}]}, {0x0, [0x0]}}, &(0x7f0000001440)=""/128, 0x9f, 0x80, 0x0, 0x5}, 0x28) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'ip6tnl0\x00', r2, 0x4, 0x1, 0x2, 0x90ea, 0x2, @empty, @loopback, 0x7800, 0x0, 0x64, 0x991e}}) socket$inet(0x2, 0x800, 0x3) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001600), r6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000016c0)={'tunl0\x00', &(0x7f0000001640)={'gretap0\x00', r7, 0x0, 0x8, 0x80000000, 0xfffff5a8, {{0xd, 0x4, 0x1, 0xb, 0x34, 0x67, 0x0, 0xfe, 0x4, 0x0, @rand_addr=0x64010101, @empty, {[@timestamp_prespec={0x44, 0xc, 0x49, 0x3, 0xb, [{@multicast2, 0x6e2}]}, @generic={0x83, 0x11, "a9384fc3204892226fc8d642251d55"}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f00000017c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x60, r14, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x40) 454.577434ms ago: executing program 0 (id=3658): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x0, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x402, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x800}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x48195) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'ipvlan0\x00', &(0x7f0000000400)=@ethtool_cmd={0x3, 0x3, 0x401, 0xe681, 0x1, 0x44, 0x6c, 0xd, 0x5, 0x2, 0x400, 0x1ff, 0x2, 0x4, 0x8c, 0x1107b1c4, [0x7fffffff, 0x3704]}}) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x18, 0x1402, 0x1, 0x70fd29, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x4800) r5 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x34e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001d14d9"], 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r6, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r6, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r7, 0x1}, &(0x7f00000000c0)=0x8) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r9 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r9, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) close(r1) 281.872321ms ago: executing program 3 (id=3659): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x28, r2, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) 169.870301ms ago: executing program 1 (id=3660): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x101, 0x40, 0x0, 0x593, 0x400, 0x0, 0x8, {0x0, @in6={{0xa, 0x4e20, 0x8, @private2, 0x7}}, 0x0, 0x5, 0xfffffffd, 0xddd6, 0xfff}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={r1, 0x3}, 0x8) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r1, 0x100}, &(0x7f0000000180)=0xc) (async) r4 = socket$kcm(0x29, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000001600)={&(0x7f0000000200)=@xdp={0x2c, 0x0, r5, 0x17}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000280)="395083478cf0ec3b28dd17920b789bd009d7ed9c4eda944f0cda63aba5558878480078d22c0bce10b2d8ed3816c9cdc52df1c9643065e1e283669ebb6b59651548b5e3effb3567470fae717ab383e406b076a29e09ee0a5a748ac1d2b3be664138ad0c4730e3fa1397ff97691f866cef3ff08bf2ce758541070d6e476f3e73631e6a7becbf617c9b9160513f2aa01b53abbbef70c12616b838512b7e66b5327d2a7e3b92f88787e4d724d20eec613a739585ebbf3782b3ac229a66ce988dc0d288f9458b48243c3eaba98a2a11244e3ac3", 0xd1}, {&(0x7f0000000380)="6abb557ea9e0fb8bbd769ae4a6d684bd860aacf5da4ba9f20f826268dd0666f9f17376b606a8", 0x26}, {&(0x7f00000003c0)="7bfd93d681a0d50d5d5743db7586e0bdae18b312465c8ccefad156e04427d61a0f95cbe41c0e4b5421f4e728af8de7c8fa87e7e0fb15f1b2a18fb4732e9ebe6f", 0x40}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="1c4afb066c332b8a1b884be6c8736e6fec306a951c89914762d09e54115eab94b3ecd9e5201645f0", 0x28}, {&(0x7f0000001440)="fb180ccefa403e5ea9697bf53a6f7ebe79312973754eea321be91040ce5134f23b95857655a1380c7cd3cf2aa31640472c4f8730826973db6320fe1545bfc5daca996a3b30e9cbabd23b31388c31372e69da229e9993b401a02562a020fdfee0102f675f160ddc7fef596f3d46eb7bf3", 0x70}], 0x6, &(0x7f0000001540)=[{0x88, 0x1, 0x401, "15f62d4ed5e1095de81bd2e5c144a3c6db130667d975867e91c32f930a4d449ced00b58236e7deed0591fc58a191bd7cdbdea45dd36994f20330d09c708e6d6a19378c4d3312c46abb6d22fae95ce02e31b1b16353b7e71026714efaf4b67531825f5dbe2c734695d9640b9e20f5c1c5a098249f"}], 0x88}, 0x55) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001640)={r4}) bind$bt_l2cap(r6, &(0x7f0000001680)={0x1f, 0x1aa0, @none, 0x7, 0x1}, 0xe) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000016c0)={0x0, 0x1, 0x8000, 0x80000000, 0x90, 0x83f, 0x85d, 0x234, r0}, &(0x7f0000001700)=0x20) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000001740)=r7, 0x4) (async) r8 = accept$packet(r6, &(0x7f0000001780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000017c0)=0x14) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000001800)=@assoc_value, &(0x7f0000001840)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000001880)={r0, 0xfffffe01}, &(0x7f00000018c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000001900)={0x84b5, 0x5, 0x3, 0xffff, 0x0, 0x1, 0xb, 0x90, r9}, 0x20) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000001b40)={{r2, &(0x7f0000001940)='\x00', 0x6b2000, &(0x7f0000001980)={@align=0x5, {0x42, 0x1ff, 0x2, 0x6}}, 0x9, &(0x7f00000019c0)={@_ha_fsid}, &(0x7f0000001a00)=0x6}, {[0x3, 0x5a15, 0x5, 0x9]}, 0x7f, 0xea, &(0x7f0000001a40)=""/234}) sendmsg$OSF_MSG_ADD(r10, &(0x7f0000002100)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000020c0)={&(0x7f0000001c00)={0x4bc, 0x0, 0x5, 0x102, 0x0, 0x0, {0x5, 0x0, 0x7}, [{{0x254, 0x1, {{0x0, 0x218}, 0x4, 0xe, 0x5, 0x2, 0x8, 'syz0\x00', "010330c8ac17f629ad309f198619c0f49ec4eae6b21075cca661cce6a88ccb02", "a046a94120b2a5031fbf0036e37351caaeea2d26599d47bc0343ee712bf8a47c", [{0x7, 0x4a, {0x3, 0x3ff}}, {0x2, 0x6740, {0x0, 0xc}}, {0x4f1, 0x9, {0x2, 0xfffffffb}}, {0x7, 0x627f, {0x3, 0x1}}, {0xb, 0x5, {0x3, 0x7}}, {0x37, 0x0, {0x1, 0x2}}, {0x3, 0x8, {0x3, 0x8}}, {0x9, 0x0, {0x3, 0x5}}, {0x2, 0x5, {0x3, 0x7290}}, {0xfffc, 0xfff, {0x2, 0x3}}, {0x0, 0x10, {0x3, 0x5}}, {0x5, 0x1, {0x0, 0xc42b}}, {0x9de7, 0xff, {0x3, 0x1}}, {0x9, 0xfffd, {0x0, 0x7fffffff}}, {0xfffe, 0x2}, {0x3, 0x800, {0x0, 0xfffffff8}}, {0x6, 0xbf2, {0x3, 0x1}}, {0x3, 0xffff, {0x3, 0x10}}, {0x8, 0x94, {0x2, 0x7}}, {0xa1a3, 0x63, {0x0, 0x7fff}}, {0xef, 0x3, {0x3, 0x9}}, {0x8, 0x1, {0x2, 0x4}}, {0x1135, 0x0, {0x2, 0x1}}, {0x4, 0x8, {0x0, 0x80}}, {0x3, 0x0, {0x2, 0x2}}, {0x6, 0x3, {0x1, 0x2}}, {0x3, 0x4, {0x0, 0x6}}, {0x77, 0xc, {0x2, 0x2}}, {0x173e, 0x5, {0x2, 0x1}}, {0x400, 0x4, {0x2, 0xffffff1c}}, {0x7, 0x9, {0x2, 0x80000000}}, {0x5, 0x8, {0x0, 0x9}}, {0x9, 0x5, {0x2, 0xf50}}, {0x8, 0xfffd, {0x2, 0x5}}, {0x9, 0xc, {0x1, 0x6}}, {0x7, 0x6, {0x2, 0x7f}}, {0x1, 0x1, {0x0, 0x8001}}, {0x3, 0x0, {0x0, 0x9}}, {0x3, 0x5c6f, {0x1, 0x6}}, {0x9, 0x0, {0x0, 0xf}}]}}}, {{0x254, 0x1, {{0x1, 0x7}, 0x7f, 0x1, 0x7, 0x90, 0x19, 'syz1\x00', "342f476c2fa08580971bb7fbb770e2e035433720a1a6c2a086f72b97c6d90627", "170979ed09075da0aad9cbc67605a02b7892f5fcf7e4b2760e9b64e6579ce321", [{0x2, 0xc, {0x1, 0x100}}, {0x1000, 0xab4, {0x0, 0x7}}, {0x1, 0xffff, {0x0, 0x6}}, {0xdd0, 0xe, {0x0, 0x2d7}}, {0xf391, 0x3, {0x0, 0x4}}, {0x1, 0x4, {0x2, 0x400}}, {0x9, 0x4b9, {0x1, 0xd1}}, {0xfffd, 0x6, {0x2, 0xffff}}, {0xa4b, 0x80, {0x0, 0xf}}, {0x7, 0x9, {0x0, 0xb6c2}}, {0x401, 0x7, {0x1, 0x1}}, {0xb, 0x80d, {0x1, 0x10001}}, {0x1, 0x31f, {0x1, 0x9}}, {0x0, 0x2, {0x2, 0x8}}, {0x1, 0x72fe, {0x0, 0xb}}, {0x81, 0xff, {0x2, 0x49}}, {0x4, 0xe7}, {0x7f, 0x5, {0x1, 0x10001}}, {0x1, 0x3, {0x0, 0x3}}, {0xff80, 0x8, {0x1, 0x3}}, {0x7de3, 0x6, {0x2, 0xfffffff7}}, {0xfffa, 0x10, {0x3, 0x60000000}}, {0x7, 0x400, {0x2}}, {0x523c, 0xffff, {0x1}}, {0x5d, 0x401, {0x2, 0x1}}, {0x3, 0x101, {0x0, 0xb1e3}}, {0x0, 0x4000, {0x2, 0x1ff}}, {0xb29, 0xb, {0x0, 0x6}}, {0x6, 0x9b7, {0x1, 0x8001}}, {0x8, 0x2, {0x1, 0x7c4a0851}}, {0x0, 0x10, {0x1, 0xc0000}}, {0xd, 0x8, {0x1, 0x3}}, {0x101, 0xfff, {0x1, 0x2}}, {0x3, 0x362b, {0x2, 0x6}}, {0x4, 0x9, {0x3, 0x1}}, {0xfff, 0x5, {0x2, 0x1}}, {0x8, 0x5, {0x3, 0x7}}, {0x5, 0x8, {0x0, 0x8}}, {0x80, 0x2, {0x3, 0x7ff}}, {0x100, 0x4, {0x2, 0xff}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r10, 0x5411, &(0x7f0000002140)) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000021c0)={r1, 0x2c, &(0x7f0000002180)=[@in6={0xa, 0x4e24, 0x46, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffb}, @in={0x2, 0x4e22, @local}]}, &(0x7f0000002200)=0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000002240)={'batadv0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000002280)={r3, 0x5}, 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000022c0)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000002300)=@base={0x23bff7b265d0247c, 0x416, 0x0, 0xff, 0x6066, r10, 0x7ff, '\x00', r11, r10, 0x0, 0x4, 0x2}, 0x50) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r10, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x1d}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20048010) (async) sendmmsg$inet(r10, &(0x7f0000003200)=[{{&(0x7f0000002480)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f00000025c0)=[{&(0x7f00000024c0)="ff5fe12234c047329a17152fe3f3bfe21b5624313194f3e0db711ebba5fc99e136b0e87783444b6487c4b1b60aa7f61fbef9367e696c20ac4667c599edde9299d0226a02862e4773df2fcc196a61bffd94388f953e62ef77e08397c0feab445a481c73fb4a8553cb7d38f4361f6d19eb0b944ebc9f431c6a4ee24b5caa37bfb5ffcfc690c53ef23a5518d2e1fba3dc2228bf636769415893a96f2babb0df511c9ee99ac6d5e672d084220952c46fe65bd5b951db4ec522ec87db0e6e3ed2aee616371043", 0xc4}], 0x1, &(0x7f0000002600)=[@ip_retopts={{0xd0, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0xf0, [@dev={0xac, 0x14, 0x14, 0xf}, @multicast2, @multicast1, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @private=0xa010101]}, @cipso={0x86, 0x59, 0x0, [{0x2, 0xa, "558f94fba23871ee"}, {0x1, 0xa, "5a04eecb4875ee6a"}, {0x0, 0x9, "264785c26274c3"}, {0x5, 0x7, "bfbcffe8d4"}, {0x1, 0xf, "4ef013933bbd612c4b8637f9b7"}, {0x1, 0x2}, {0x1, 0x2}, {0x0, 0xa, "96b7840dd81a7fad"}, {0x7, 0x12, "5c718ff9b485f5601875953093fbb0a7"}]}, @rr={0x7, 0xf, 0x23, [@empty, @empty, @broadcast]}, @lsrr={0x83, 0x7, 0xc9, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0xaa, 0x3, 0x0, [{@broadcast, 0x81}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x2ab}, {@private=0xa010102, 0x3ff}, {@rand_addr=0x64010102, 0xa}, {@multicast1, 0x1}]}, @generic={0x44, 0x5, "1711ad"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x58, 0x0, 0x7, {[@end, @ssrr={0x89, 0x13, 0x96, [@local, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x26}]}, @timestamp_prespec={0x44, 0x14, 0xec, 0x3, 0xb, [{@multicast1, 0x321}, {@multicast2, 0xee9}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x17, 0xae, [@multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}]}, @rr={0x7, 0x3, 0x6a}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010100, @broadcast}}}], 0x190}}, {{&(0x7f00000027c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, &(0x7f0000002980)=[{&(0x7f0000002800)="8efbafc5b0c75f5a12a48b96c194129a5d1977fd00cfaa824162b64f0333a7f4a084e93aa47ab79d252ac9686a2621450b38459fb58ee3701e41b99e4be0c261e49c67574c7e34a2fd479be8bb05338ec8b226cf7e8cab9432418a7e7beedf3ac36e73073847cb", 0x67}, {&(0x7f0000002880)="ee52cf26e7f0736c1f18fd2e33987180e192e7ffa4fc4d83fbc5673e1404b7334d1bd65bae3a7c96daa63bd2248bd4c08bbb8a52734250df0b4eaf8f4f2ecfa4173f21cbe81ffb", 0x47}, {&(0x7f0000002900)="b9fdfa1d41cffc01f2226f34288be83e890ece1ecd1dbded4a57b4453c8175b20817a3f72fa6d1582a0ba9b3", 0x2c}, {&(0x7f0000002940)="a56268baccac", 0x6}], 0x4, &(0x7f00000029c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010100}}}], 0x60}}, {{&(0x7f0000002a40)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000002fc0)=[{&(0x7f0000002a80)="1c60e8dc70887a83e6bab8b4cdba04965f6f272f98cefc26d9fa1fd5cb01995e154bbe776ccfe8d6950529554a105f50240dbfb7c3918200b4e2831d3aab4894b90439d6bbed055b37f8aee18b3d14427a7b24d9504a668e2049b3e841dc013fe28241e003532b7e38de945e184825423a543c8cd80f29145c29cd478d6a19c275addca6b2ebd23843316d718aac6773c88ccfad815b9e57b541bb3235c1fd6179f69ac1adf869358403e817217fb455a4a7aeca5ba5d5924935c22c7a42cfd1834e87780d29a51d", 0xc8}, {&(0x7f0000002b80)="4653d4b6c1a1febe2e2b90ca945dc44a429b650bc8dd75cef0bca8744d5c17a9eba22af2438a8fc0c3f32eac6a427de50df5ec2e6336bb6636b16c3058315d831dfff15b750dfaa21d658300c5e671531834c490293f1d1d0a587cee52c795eea04e02ac041e8100ad049ffe", 0x6c}, {&(0x7f0000002c00)="6db751f9d50f178367d25c4e274495c77ce036b2a9486463867b38713d088fdeed4f657577b9bc321849041ab2d1b4428ebf20867cb7cdc6f36021bcf2765ffa3f78fa7fa071c06ff739d373f7e41a8fb895f9b439984f21410ee83d6a4d27226b30e0fdb3a0ba9486acf470ad6e7d9d322f9f55d9fb8fac8f0b428f8b513428ff359b1c441c94b8ac66fda9c1acedf76f3fc254e80ba3a8d95b3998e52f70a772bc265f236651f12c8dd243d0", 0xad}, {&(0x7f0000002cc0)="e445073e91c5c6d79310c0b8aa6770cb4cd2768a687c5159ae8de1b11cf6c2f7c2228e6a9e367bdab296dc83c55b63db11f78a0697beddc8c74f2188c593afe52611bf387dc8", 0x46}, {&(0x7f0000002d40)="8911fce0aa7f280ee1089c76f5e7a34d4d51e0c1419c26833672982fd2b996dc5a62c0cdfecda1c4b7a48c7ac5a94d40f704b3f523c34893bb096a0bd629e461b11700408ccbd41759c0b9e592028c3e5f2f0993887c885089885ad0c47f8026baca5674abc69dad", 0x68}, {&(0x7f0000002dc0)="49f39c89f7fcfbed99a146d603f76df43f2e1bde6dd6f75bfeceb73185740ca195bc7ed18c925f6e0dc42fc886187ec05f7e70d044847526be1dd6bb3ffda9db175e", 0x42}, {&(0x7f0000002e40)="8b470bd02860dd19fd688ed2ebf2209eaee9719a862d1c78190705a00bbc6099400929ed2e6a59e36d512ae00c2300230a33b644652c84233d655e3b21840353bfbf81a1f98cd02265cb40c738bd", 0x4e}, {&(0x7f0000002ec0)="e0ec1d2257f927c176cb015a3d919d2431854a3dc22813b00bfbe00185a766417bfd4a04bf82337822a1fc668d20cd8ec79318fe5c51bfc4a9000288c04b6aa57b0478db951660c77f9a934bf446eeb92d06530822ba74665c6dbd0313033a42fe2d02f335e93fa2835d6ae848e7528208f29b0973427de4a4ea8aad572305306d38f628803325696ce5adfc60342772f1aa2cb31046f0a6fb885862827131ae4f51e56cbe6f4081981f321fee680917f86c0ad8ad8e5139b1e3746680f98d37c9b259f74bcc0ef9fb1c2f8c7f79cc931e97df1824604b176ee00030b84c6cdbcf947a2156698f7e8a964774c5d06620b3f463", 0xf3}], 0x8, &(0x7f0000003040)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @remote, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7f}}, @ip_retopts={{0xfc, 0x0, 0x7, {[@end, @lsrr={0x83, 0x1f, 0x2a, [@remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @timestamp={0x44, 0x8, 0x54, 0x0, 0x9, [0x1]}, @lsrr={0x83, 0x27, 0x34, [@rand_addr=0x64010102, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x35}, @broadcast, @rand_addr=0x64010100, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x13}, @loopback]}, @rr={0x7, 0x1f, 0x47, [@private=0xa010100, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0x25}, @broadcast]}, @timestamp_addr={0x44, 0x14, 0xb7, 0x1, 0x1, [{@multicast1, 0x58b1}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x5}]}, @timestamp_addr={0x44, 0x4c, 0x84, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1264}, {@multicast1, 0xfffffff5}, {@rand_addr=0x64010100, 0x98c}, {@rand_addr=0x64010101, 0x80000000}, {@multicast2, 0x1}, {@local, 0x6}, {@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast2, 0x180000}]}, @rr={0x7, 0x1b, 0x8, [@loopback, @local, @local, @remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x37}}}}], 0x1a0}}], 0x3, 0x80) (async) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r12, 0x84, 0xc, &(0x7f00000032c0)=0x9, 0x4) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000003400)={r0, 0xdc, &(0x7f0000003300)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x9, @private2, 0x1adc1f7c}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x800, @private1, 0x3}, @in6={0xa, 0x4e22, 0x0, @mcast2, 0xe}, @in6={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc9f5}]}, &(0x7f0000003440)=0x10) (rerun: 32) 45.695776ms ago: executing program 0 (id=3661): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) socket$kcm(0x29, 0x2, 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x0, 0x0, 0x8000}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1d, 0x0, &(0x7f0000000240)) r5 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x1e4, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=r0, @ANYBLOB="b4bec6d4b99fd9abf9f9bb8889eed96f013b837eb0701708e9c8e8a9234286ac7ec4b646e33182b166b7993ee78dc94c62f3317f8aaa2c0c", @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r7], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000004340)=[{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001540)="9555d9cc111d987d25750612e1b624c3abbff3793c9103a60a5d88e9422491145a1002c5297a2fea7de02f1c19acb3b3", 0x30}], 0x1, &(0x7f0000001780)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x81}], 0x1, 0x2000891) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000040)={r10, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b}, 0x94) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r11) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYRES16=r12, @ANYRES16=r12, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x4008005}, 0x0) 0s ago: executing program 3 (id=3662): r0 = socket$netlink(0x10, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) kernel console output (not intermixed with test programs): an inconsistent configuration, please check. [ 257.389928][T12929] xt_ecn: cannot match TCP bits for non-tcp packets [ 257.521275][T12934] Set syz0 is full, maxelem 0 reached [ 257.622288][T12941] netlink: 'syz.1.1968': attribute type 1 has an invalid length. [ 257.669211][T12941] 8021q: adding VLAN 0 to HW filter on device bond9 [ 257.690276][T12947] bond9: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 257.724407][T12941] bond9: (slave ip6gretap0): making interface the new active one [ 257.739554][T12941] bond9: (slave ip6gretap0): Enslaving as an active interface with an up link [ 258.136469][T12968] veth7: entered allmulticast mode [ 258.144657][T12968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.209487][T12970] netem: change failed [ 258.641271][T12992] netlink: 'syz.2.1985': attribute type 21 has an invalid length. [ 259.049242][T13002] __nla_validate_parse: 4 callbacks suppressed [ 259.049264][T13002] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1989'. [ 259.253833][T13018] netlink: 'syz.3.1992': attribute type 10 has an invalid length. [ 259.285704][T13018] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 259.313485][T13018] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 259.353953][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1996'. [ 259.365521][T13024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1996'. [ 259.375384][T13024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1996'. [ 259.507594][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1996'. [ 259.528640][T13024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1996'. [ 259.546639][T13024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1996'. [ 259.858950][T13042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2004'. [ 260.213148][T13067] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 260.328184][T13076] netlink: 'syz.1.2011': attribute type 75 has an invalid length. [ 260.728304][T13098] sctp: [Deprecated]: syz.0.2021 (pid 13098) Use of int in max_burst socket option. [ 260.728304][T13098] Use struct sctp_assoc_value instead [ 260.771398][T13101] pimreg: entered allmulticast mode [ 260.781084][T13101] openvswitch: netlink: Message has 8 unknown bytes. [ 260.789997][T13101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.976247][T13107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2024'. [ 261.415228][T13124] netlink: 'syz.0.2029': attribute type 1 has an invalid length. [ 261.430619][T13124] netlink: 'syz.0.2029': attribute type 2 has an invalid length. [ 261.440347][T13124] netlink: 'syz.0.2029': attribute type 1 has an invalid length. [ 261.448476][T13124] netlink: 'syz.0.2029': attribute type 3 has an invalid length. [ 261.456453][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2029'. [ 261.808325][T13138] netlink: 'syz.4.2032': attribute type 15 has an invalid length. [ 261.937088][T13143] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 262.178127][T13165] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 262.260111][T13170] netlink: 'syz.1.2043': attribute type 10 has an invalid length. [ 262.475882][T13172] syzkaller1: entered promiscuous mode [ 262.496321][T13172] syzkaller1: entered allmulticast mode [ 262.655247][T13190] netlink: 'syz.0.2051': attribute type 1 has an invalid length. [ 262.962043][T13213] netlink: 'syz.1.2056': attribute type 5 has an invalid length. [ 263.621979][T13253] netlink: 'syz.4.2066': attribute type 1 has an invalid length. [ 264.385026][T13253] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 264.849371][T13298] __nla_validate_parse: 11 callbacks suppressed [ 264.849394][T13298] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2080'. [ 265.169864][T13314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2084'. [ 265.228370][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2086'. [ 265.241454][T13319] netlink: 233 bytes leftover after parsing attributes in process `syz.4.2086'. [ 265.250736][T13314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'. [ 265.261407][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2086'. [ 265.270973][T13319] netlink: 191 bytes leftover after parsing attributes in process `syz.4.2086'. [ 265.635515][T13334] syzkaller0: entered promiscuous mode [ 265.649803][T13334] syzkaller0: entered allmulticast mode [ 265.937953][T13347] netlink: 'syz.1.2094': attribute type 1 has an invalid length. [ 265.951548][T13326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2088'. [ 266.039352][T13351] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 266.049926][T13351] bond10: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 266.063118][T13351] bond10: (slave vxcan3): making interface the new active one [ 266.071949][T13351] bond10: (slave vxcan3): Enslaving as an active interface with an up link [ 266.123320][T13359] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2098'. [ 266.170428][T13347] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address [ 266.201136][T13347] bond10: (slave vxcan5): Enslaving as a backup interface with an up link [ 266.462903][T13364] xt_TCPMSS: Only works on TCP SYN packets [ 266.596121][T13371] tipc: Enabled bearer , priority 0 [ 266.678490][T13376] netlink: 'syz.0.2106': attribute type 1 has an invalid length. [ 266.696555][T13376] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2106'. [ 266.728604][T13371] syzkaller0: entered promiscuous mode [ 266.735522][T13371] syzkaller0: entered allmulticast mode [ 266.742452][T13379] x_tables: duplicate entry at hook 1 [ 266.753350][T13371] tipc: Resetting bearer [ 266.883564][T13383] netlink: 'syz.1.2107': attribute type 4 has an invalid length. [ 266.924782][T13370] tipc: Resetting bearer [ 268.721710][T13370] tipc: Disabling bearer [ 268.842087][T12434] tipc: Node number set to 2532875560 [ 269.216205][T13428] nbd: socks must be embedded in a SOCK_ITEM attr [ 269.232712][T13416] bond12: Unable to set down delay as MII monitoring is disabled [ 269.243466][T13416] bond12 (unregistering): Released all slaves [ 269.337252][T13432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.450175][T13436] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 269.647049][T13444] ipvlan0: entered promiscuous mode [ 270.265296][T13467] netdevsim0: mtu less than device minimum [ 270.295501][T13469] __nla_validate_parse: 15 callbacks suppressed [ 270.295521][T13469] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2130'. [ 270.316582][T13470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2130'. [ 270.430042][T13475] xt_ecn: cannot match TCP bits for non-tcp packets [ 270.637007][T13486] netlink: 'syz.2.2136': attribute type 19 has an invalid length. [ 270.656357][T13487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2134'. [ 271.027484][T13503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2139'. [ 271.281837][T13507] netlink: 'syz.2.2141': attribute type 83 has an invalid length. [ 271.554150][T13528] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2146'. [ 271.601888][T13528] netlink: 'syz.4.2146': attribute type 2 has an invalid length. [ 271.610185][T13528] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2146'. [ 272.166224][T13547] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 272.310304][T13557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2154'. [ 272.501238][T13563] tipc: Enabling of bearer rejected, failed to enable media [ 272.671099][T13573] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 272.688353][T13576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2161'. [ 272.720863][T13579] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2162'. [ 272.743347][T13581] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2162'. [ 273.183471][T13607] netlink: 'syz.4.2168': attribute type 3 has an invalid length. [ 273.592955][T13631] netlink: 'syz.3.2174': attribute type 5 has an invalid length. [ 273.849600][T13656] netlink: 'syz.3.2177': attribute type 1 has an invalid length. [ 274.346308][T13679] syz_tun: entered allmulticast mode [ 274.875053][T13704] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 274.876260][T13708] syzkaller1: entered promiscuous mode [ 274.929174][T13720] xt_CONNSECMARK: invalid mode: 0 [ 274.936305][T13708] syzkaller1: entered allmulticast mode [ 275.978852][T13737] __nla_validate_parse: 11 callbacks suppressed [ 275.978874][T13737] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2198'. [ 276.075997][T13737] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2198'. [ 276.102172][T13741] netlink: 'syz.4.2199': attribute type 1 has an invalid length. [ 276.170970][T13745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2199'. [ 276.278912][T13741] 8021q: adding VLAN 0 to HW filter on device bond8 [ 276.377334][T13752] bond8: entered promiscuous mode [ 276.392515][T13752] bond8: entered allmulticast mode [ 276.426874][T13759] macvlan0: entered promiscuous mode [ 276.432445][T13759] macvlan0: entered allmulticast mode [ 276.440132][T13759] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 276.602218][T13773] syzkaller1: entered promiscuous mode [ 276.629364][T13775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2210'. [ 276.633806][T13773] syzkaller1: entered allmulticast mode [ 276.667445][T13781] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2211'. [ 276.700719][T13779] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2212'. [ 276.819967][T13779] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2212'. [ 276.835908][T13790] netlink: 'syz.4.2213': attribute type 1 has an invalid length. [ 277.158814][T13808] syzkaller0: entered promiscuous mode [ 277.164585][T13808] syzkaller0: entered allmulticast mode [ 277.336276][T13816] netlink: 'syz.3.2222': attribute type 2 has an invalid length. [ 277.352048][T13816] netlink: 'syz.3.2222': attribute type 2 has an invalid length. [ 277.489376][T13812] macvtap0: entered allmulticast mode [ 277.494819][T13812] veth0_macvtap: entered allmulticast mode [ 277.501911][T13819] tipc: Enabling of bearer rejected, already enabled [ 277.512570][T13803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2218'. [ 277.523337][T13803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2218'. [ 277.538689][T13816] netlink: 'syz.3.2222': attribute type 1 has an invalid length. [ 277.600632][T13816] bond7: entered promiscuous mode [ 277.650680][T13816] 8021q: adding VLAN 0 to HW filter on device bond7 [ 277.763509][T13822] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2223'. [ 277.784334][T13827] netlink: 'syz.4.2225': attribute type 1 has an invalid length. [ 277.807925][T13817] 8021q: adding VLAN 0 to HW filter on device bond7 [ 277.816612][T13817] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 277.828424][T13817] bond7: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 277.842380][T13817] bond7: (slave ip6gre1): making interface the new active one [ 277.854059][T13817] ip6gre1: entered promiscuous mode [ 277.861475][T13817] bond7: (slave ip6gre1): Enslaving as an active interface with an up link [ 277.870797][T13826] 0: renamed from hsr0 [ 277.882445][T13826] 0: entered allmulticast mode [ 277.889371][T13826] hsr_slave_0: entered allmulticast mode [ 277.895144][T13826] hsr_slave_1: entered allmulticast mode [ 277.914182][T13826] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 277.988650][T13838] IPVS: length: 47 != 24 [ 278.042204][T13822] x_tables: duplicate underflow at hook 3 [ 278.058463][T13827] 8021q: adding VLAN 0 to HW filter on device bond9 [ 278.102420][T13829] vlan1: entered promiscuous mode [ 278.108635][T13845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.118666][T13829] bond9: entered promiscuous mode [ 278.123953][T13829] vlan1: entered allmulticast mode [ 278.129943][T13829] bond9: entered allmulticast mode [ 278.471666][T13858] openvswitch: netlink: Flow key attr not present in new flow. [ 278.500125][T13860] openvswitch: netlink: Flow key attr not present in new flow. [ 278.645831][T13863] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 278.645831][T13863] Please contact the netfilter-devel mailing list or update your nftables rules. [ 278.683692][T13874] netlink: 'syz.4.2238': attribute type 1 has an invalid length. [ 278.718844][T13873] netlink: 'syz.4.2238': attribute type 1 has an invalid length. [ 278.909362][T13871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.944248][T13871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.022320][T13895] openvswitch: netlink: IP tunnel dst address not specified [ 279.040139][T13895] openvswitch: netlink: VLAN attribute unexpected. [ 279.103642][T13902] C: renamed from lo (while UP) [ 279.130765][T13902] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 279.223690][T13905] openvswitch: netlink: IP tunnel dst address not specified [ 279.743071][T13940] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.750318][T13940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.242605][T13956] bridge0: port 3(batadv1) entered blocking state [ 280.281790][T13956] bridge0: port 3(batadv1) entered disabled state [ 280.290535][T13956] batadv1: entered allmulticast mode [ 280.311850][T13956] batadv1: entered promiscuous mode [ 280.530211][T13967] netlink: 'syz.0.2267': attribute type 1 has an invalid length. [ 280.717834][ T6407] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 280.727628][ T6407] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 280.821370][T13996] netlink: 'syz.3.2273': attribute type 8 has an invalid length. [ 281.951670][T14016] tipc: Enabling of bearer rejected, failed to enable media [ 282.384477][T14070] __nla_validate_parse: 32 callbacks suppressed [ 282.384499][T14070] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.2297'. [ 282.429345][T14072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 282.454104][T14070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2297'. [ 282.513568][T14075] netlink: 'syz.0.2298': attribute type 3 has an invalid length. [ 282.660207][T14082] bond12: entered promiscuous mode [ 282.701337][T14082] bond12: entered allmulticast mode [ 283.307016][T14108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.384359][T14104] netlink: 'syz.2.2306': attribute type 8 has an invalid length. [ 283.631541][T14126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2312'. [ 283.641106][T14126] bridge_slave_0: entered promiscuous mode [ 283.654066][T14128] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 283.910385][T14143] netlink: 'syz.2.2316': attribute type 13 has an invalid length. [ 283.919004][T14143] veth1_macvtap: left promiscuous mode [ 283.936509][T14143] macsec0: entered allmulticast mode [ 283.981253][T14145] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 284.247705][T14155] bond0: option miimon: invalid value (18446744071829782528) [ 284.269162][T14155] bond0: option miimon: allowed values 0 - 2147483647 [ 284.328139][T14158] pimreg3: entered allmulticast mode [ 284.418182][T14162] netlink: 'syz.3.2325': attribute type 6 has an invalid length. [ 284.524474][T14169] bond13: option packets_per_slave: invalid value (18446744073709551615) [ 284.532101][T14172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2328'. [ 284.534306][T14169] bond13: option packets_per_slave: allowed values 0 - 65535 [ 284.545970][T14177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2327'. [ 284.569992][T14169] bond13 (unregistering): Released all slaves [ 284.789106][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2331'. [ 284.832147][T14189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2330'. [ 284.885096][T14186] vlan2: entered allmulticast mode [ 284.892343][T14186] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 285.011570][T14194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.081276][T14196] netlink: 'syz.4.2334': attribute type 1 has an invalid length. [ 285.104455][T14196] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2334'. [ 285.475966][T14217] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 285.502422][T14217] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 285.519904][T14222] netlink: 'syz.0.2345': attribute type 49 has an invalid length. [ 285.745708][T14230] bond7: entered promiscuous mode [ 285.760723][T14238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2346'. [ 285.771918][T14230] bond7: entered allmulticast mode [ 285.788201][T14230] 8021q: adding VLAN 0 to HW filter on device bond7 [ 285.921834][T14238] netlink: 'syz.4.2346': attribute type 4 has an invalid length. [ 286.304926][T14271] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2355'. [ 286.347754][T14271] veth0_to_bond: default FDB implementation only supports local addresses [ 286.652931][T14293] netlink: 'syz.0.2361': attribute type 9 has an invalid length. [ 286.997286][T14313] netlink: 'syz.3.2367': attribute type 1 has an invalid length. [ 287.216178][T14318] 8021q: adding VLAN 0 to HW filter on device bond8 [ 287.224138][T14316] netlink: 'syz.0.2368': attribute type 1 has an invalid length. [ 287.389474][T14316] bond8: entered promiscuous mode [ 287.395153][T14316] 8021q: adding VLAN 0 to HW filter on device bond8 [ 287.416648][T14319] bond8: (slave bridge2): making interface the new active one [ 287.424953][T14319] bridge2: entered promiscuous mode [ 287.432070][T14319] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 287.465958][T14326] bond8: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 287.502776][T14326] bond8: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 287.543123][T14336] __nla_validate_parse: 15 callbacks suppressed [ 287.543142][T14336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2373'. [ 287.560331][T14336] netlink: 'syz.4.2373': attribute type 5 has an invalid length. [ 287.569114][T14340] netlink: 'syz.1.2376': attribute type 4 has an invalid length. [ 287.576993][T14336] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2373'. [ 287.647690][T14336] geneve3: entered promiscuous mode [ 287.664730][T14336] geneve3: entered allmulticast mode [ 287.689391][ T48] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 287.728665][ T48] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 287.763683][ T48] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 287.905982][T14352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2379'. [ 287.933837][T14354] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2380'. [ 287.985734][T14357] sctp: [Deprecated]: syz.4.2380 (pid 14357) Use of int in max_burst socket option. [ 287.985734][T14357] Use struct sctp_assoc_value instead [ 288.076902][T14356] bond12: option arp_missed_max: invalid value (0) [ 288.084061][T14356] bond12: option arp_missed_max: allowed values 1 - 255 [ 288.101856][T14356] bond12 (unregistering): Released all slaves [ 288.213464][T14362] syzkaller0: entered promiscuous mode [ 288.230277][T14362] syzkaller0: entered allmulticast mode [ 288.583773][T14376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2387'. [ 288.645229][T14376] hsr_slave_1 (unregistering): left promiscuous mode [ 288.857778][T14390] 8021q: adding VLAN 0 to HW filter on device bond12 [ 288.963815][T14398] validate_nla: 3 callbacks suppressed [ 288.963836][T14398] netlink: 'syz.2.2394': attribute type 6 has an invalid length. [ 289.262596][T14416] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2397'. [ 289.283804][T14416] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2397'. [ 289.311222][T14417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2398'. [ 289.329849][T14417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2398'. [ 289.344573][T14417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2398'. [ 289.450287][T14419] xt_socket: unknown flags 0xe4 [ 289.473659][T14421] xt_socket: unknown flags 0xe4 [ 289.570041][T14425] syzkaller0: entered promiscuous mode [ 289.583862][T14425] syzkaller0: entered allmulticast mode [ 290.123769][ T30] audit: type=1107 audit(1779625569.383:6): pid=14454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 290.482274][T14476] 8021q: adding VLAN 0 to HW filter on device bond9 [ 290.512579][T14490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.628352][T14493] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 290.805321][T14501] netlink: 'syz.2.2419': attribute type 1 has an invalid length. [ 290.861071][T14503] netlink: 'syz.2.2419': attribute type 1 has an invalid length. [ 291.073521][T14508] veth0: entered promiscuous mode [ 291.186198][T14515] netlink: 'syz.2.2424': attribute type 1 has an invalid length. [ 291.215689][T14515] xt_ipcomp: unknown flags 1D [ 291.355482][T14524] tipc: Started in network mode [ 291.370117][T14524] tipc: Node identity aef3801a6305, cluster identity 4711 [ 291.393517][T14524] tipc: Enabled bearer , priority 0 [ 291.412677][T14524] syzkaller0: entered promiscuous mode [ 291.423841][T14524] syzkaller0: entered allmulticast mode [ 291.507028][T14524] tipc: Resetting bearer [ 291.552513][T14521] tipc: Resetting bearer [ 291.574871][T14521] tipc: Disabling bearer [ 291.883575][T14545] sch_fq: defrate 0 ignored. [ 292.355580][T14567] netlink: 'syz.4.2438': attribute type 7 has an invalid length. [ 292.449565][T14573] netlink: 'syz.2.2440': attribute type 3 has an invalid length. [ 292.461421][T14567] netlink: 'syz.4.2438': attribute type 7 has an invalid length. [ 292.649633][T14577] bond10 (unregistering): Released all slaves [ 292.687061][T14589] __nla_validate_parse: 37 callbacks suppressed [ 292.687084][T14589] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2443'. [ 292.764465][T14586] team0: Caught tx_queue_len zero misconfig [ 293.002370][T14609] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2448'. [ 293.061513][T14608] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2450'. [ 293.177242][T14589] "syz.2.2443" (14589) uses obsolete ecb(arc4) skcipher [ 293.363199][T14622] netlink: 'syz.2.2453': attribute type 2 has an invalid length. [ 293.380194][T14622] netlink: 'syz.2.2453': attribute type 1 has an invalid length. [ 293.707173][T14636] openvswitch: netlink: Key type 305 is out of range max 32 [ 293.734522][T14636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2459'. [ 293.805194][T14641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2460'. [ 293.833416][T14641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2460'. [ 293.858315][T14641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2460'. [ 293.879233][ T1060] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.897302][ T1060] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.000435][T14641] : (slave team0): Releasing backup interface [ 294.109268][T14641] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 294.129438][ T1060] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.147475][T14657] x_tables: duplicate underflow at hook 1 [ 294.363948][T14668] netlink: 'syz.2.2467': attribute type 1 has an invalid length. [ 294.456264][T14668] bond13: entered promiscuous mode [ 294.465495][T14668] 8021q: adding VLAN 0 to HW filter on device bond13 [ 294.533532][T14679] netlink: 'syz.0.2469': attribute type 2 has an invalid length. [ 294.542533][T14679] netlink: 'syz.0.2469': attribute type 2 has an invalid length. [ 294.556572][T14673] bond13: (slave bridge14): making interface the new active one [ 294.582233][T14673] bridge14: entered promiscuous mode [ 294.612191][T14673] bond13: (slave bridge14): Enslaving as an active interface with an up link [ 294.722540][T14688] netlink: 'syz.3.2472': attribute type 11 has an invalid length. [ 294.803522][T14696] netlink: 'syz.2.2473': attribute type 1 has an invalid length. [ 295.040791][T14704] unsupported nlmsg_type 40 [ 295.057348][T14704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2475'. [ 295.072208][T14706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2477'. [ 295.090524][T14708] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 295.102104][T14708] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 295.149644][T14712] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2477'. [ 295.724358][T14742] xt_recent: Unsupported userspace flags (000000b1) [ 295.849736][T14749] netlink: 'syz.0.2490': attribute type 62 has an invalid length. [ 295.918202][T14751] netlink: 'syz.1.2491': attribute type 1 has an invalid length. [ 295.946644][T14751] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 295.953998][T14751] IPv6: NLM_F_CREATE should be set when creating new route [ 296.010106][T14752] netlink: 'syz.1.2491': attribute type 1 has an invalid length. [ 296.064857][T14752] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 296.543777][T14779] syzkaller1: entered promiscuous mode [ 296.556689][T14779] syzkaller1: entered allmulticast mode [ 296.592718][T14779] af_packet: tpacket_rcv: packet too big, clamped from 3944 to 3942. macoff=106 [ 296.729928][T14784] netlink: 'syz.3.2501': attribute type 11 has an invalid length. [ 297.032203][T14800] netlink: 'syz.0.2508': attribute type 9 has an invalid length. [ 297.752853][T14844] bridge_slave_0: left promiscuous mode [ 297.770187][T14844] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.821130][T14848] __nla_validate_parse: 6 callbacks suppressed [ 297.821153][T14848] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2519'. [ 297.883446][T14844] bridge_slave_1: left allmulticast mode [ 297.895802][T14844] bridge_slave_1: left promiscuous mode [ 297.903627][T14844] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.930206][T14844] bond0: (slave bond_slave_1): Releasing backup interface [ 297.948783][T14844] bond_slave_1: left allmulticast mode [ 297.977382][T14844] team0: Port device team_slave_0 removed [ 298.000575][T14844] team0: Port device team_slave_1 removed [ 298.017679][T14844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.019490][T14859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2525'. [ 298.025983][T14844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.046656][T14844] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 298.064268][T14851] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2523'. [ 298.226033][T14864] netlink: 'syz.0.2526': attribute type 1 has an invalid length. [ 298.234045][T14864] netlink: 9422 bytes leftover after parsing attributes in process `syz.0.2526'. [ 298.253306][T14854] bond9: Unable to set peer notification delay as MII monitoring is disabled [ 298.273759][T14854] bond9 (unregistering): Released all slaves [ 298.316173][T14873] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.2528'. [ 298.349307][T14872] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2529'. [ 298.530611][T14881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.561266][T14881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.587035][T14881] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 298.597969][T14881] batman_adv: batadv0: Removing interface: ipvlan2 [ 298.735616][T14894] bond9: entered promiscuous mode [ 298.789058][T14898] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2537'. [ 298.983683][T14908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2540'. [ 299.351255][T14924] bridge0: port 1(ipvlan2) entered blocking state [ 299.375616][T14924] bridge0: port 1(ipvlan2) entered disabled state [ 299.384193][T14920] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2546'. [ 299.394454][T14924] ipvlan2: entered allmulticast mode [ 299.418528][T14924] bridge0: entered allmulticast mode [ 299.453673][T14924] ipvlan2: left allmulticast mode [ 299.492176][T14924] bridge0: left allmulticast mode [ 299.620310][T14933] netlink: 1363 bytes leftover after parsing attributes in process `syz.4.2549'. [ 299.647777][T14933] syzkaller0: entered promiscuous mode [ 299.668318][T14933] syzkaller0: entered allmulticast mode [ 299.844494][T14945] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 300.146207][T14959] validate_nla: 1 callbacks suppressed [ 300.146229][T14959] netlink: 'syz.2.2558': attribute type 58 has an invalid length. [ 301.046469][T14989] bond10: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 301.058804][T14989] bond10 (unregistering): Released all slaves [ 301.470093][T15018] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 301.546007][T15026] tipc: Enabling of bearer rejected, failed to enable media [ 301.588132][T15028] netlink: 'syz.1.2579': attribute type 1 has an invalid length. [ 301.880936][ T30] audit: type=1804 audit(1779625581.143:7): pid=15044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2586" name="/newroot/514/cgroup.controllers" dev="tmpfs" ino=2623 res=1 errno=0 [ 301.974906][ T30] audit: type=1800 audit(1779625581.173:8): pid=15044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2586" name="cgroup.controllers" dev="tmpfs" ino=2623 res=0 errno=0 [ 302.464526][T15074] 8021q: VLANs not supported on xfrm0 [ 302.498633][T15074] Unsupported ieee802154 address type: 0 [ 302.535292][T15076] tipc: Enabled bearer , priority 0 [ 302.731255][T15087] netlink: 'syz.3.2597': attribute type 2 has an invalid length. [ 302.751853][T15092] netlink: 'syz.1.2600': attribute type 1 has an invalid length. [ 302.764498][T15087] netlink: 'syz.3.2597': attribute type 13 has an invalid length. [ 302.928338][T15093] bond14: invalid ARP target 0.0.0.0 specified for addition [ 302.944801][T15093] bond14: option arp_ip_target: invalid value (0) [ 302.960520][T15093] bond14 (unregistering): Released all slaves [ 302.997046][T15094] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 303.067295][T15109] netlink: 'syz.1.2603': attribute type 32 has an invalid length. [ 303.094386][T15104] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 303.124405][T15104] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 303.177236][T15112] tipc: Enabling of bearer rejected, failed to enable media [ 303.777291][T15141] netlink: 'syz.2.2611': attribute type 1 has an invalid length. [ 304.192542][T15169] x_tables: unsorted entry at hook 1 [ 304.302182][T15176] __nla_validate_parse: 10 callbacks suppressed [ 304.302203][T15176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2624'. [ 304.331571][T15176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2624'. [ 304.395221][T15181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2623'. [ 304.434941][T15181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2623'. [ 304.445020][T15186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2625'. [ 304.494794][T15181] gre2: entered promiscuous mode [ 304.550184][T15189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.585628][T15189] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2626'. [ 304.621778][T15186] xt_CT: You must specify a L4 protocol and not use inversions on it [ 304.967376][T15214] tunl0: entered promiscuous mode [ 304.993957][T15214] netlink: 'syz.4.2633': attribute type 3 has an invalid length. [ 305.033169][T15214] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2633'. [ 305.075820][T15217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2635'. [ 305.111040][T15217] batadv_slave_0: Caught tx_queue_len zero misconfig [ 305.311518][T15233] sit0: entered promiscuous mode [ 305.313205][T15229] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2638'. [ 305.351117][T15233] netlink: 'syz.2.2641': attribute type 1 has an invalid length. [ 305.373324][T15233] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2641'. [ 305.450519][T15235] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 305.469378][T15235] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 305.591595][T15247] netlink: 'syz.4.2644': attribute type 1 has an invalid length. [ 305.624545][T15247] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 306.080838][T15281] netlink: 'syz.4.2654': attribute type 21 has an invalid length. [ 306.676591][T15313] netlink: 'syz.0.2664': attribute type 4 has an invalid length. [ 306.706174][T15313] netlink: 'syz.0.2664': attribute type 4 has an invalid length. [ 306.963320][T15332] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 308.105510][T15390] netlink: 'syz.4.2687': attribute type 1 has an invalid length. [ 308.113568][T15390] netlink: 'syz.4.2687': attribute type 2 has an invalid length. [ 308.440942][T15413] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 308.474323][T15413] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 308.655541][T15420] netlink: 'syz.1.2698': attribute type 1 has an invalid length. [ 308.791770][T15420] 8021q: adding VLAN 0 to HW filter on device bond14 [ 309.040511][T15442] syzkaller1: entered promiscuous mode [ 309.046920][T15442] syzkaller1: entered allmulticast mode [ 309.233849][T15445] bridge9: entered allmulticast mode [ 309.308635][T15445] x_tables: duplicate underflow at hook 2 [ 309.342132][T15445] __nla_validate_parse: 13 callbacks suppressed [ 309.342153][T15445] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2707'. [ 309.600231][T15463] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 309.782286][T15471] netlink: 'syz.4.2714': attribute type 1 has an invalid length. [ 309.864484][T15474] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2715'. [ 310.056660][ T1060] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.098524][ T1060] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.154929][ T1060] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.255558][T15486] syzkaller0: entered promiscuous mode [ 310.266270][T15486] syzkaller0: entered allmulticast mode [ 310.312524][T15494] netlink: 'syz.3.2720': attribute type 1 has an invalid length. [ 312.799053][T15540] netlink: 'syz.1.2726': attribute type 25 has an invalid length. [ 312.862078][T15540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2726'. [ 312.900438][T15545] netlink: 516 bytes leftover after parsing attributes in process `syz.2.2727'. [ 312.910482][T15540] netlink: 'syz.1.2726': attribute type 25 has an invalid length. [ 312.923997][T15540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2726'. [ 313.114274][T15558] x_tables: duplicate underflow at hook 2 [ 313.130474][T15559] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2731'. [ 313.258938][T15566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2735'. [ 313.323465][T15570] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2734'. [ 313.403543][T15580] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2735'. [ 313.734729][T15595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2742'. [ 314.473519][T15638] __nla_validate_parse: 4 callbacks suppressed [ 314.473539][T15638] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2755'. [ 314.494334][T15637] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2755'. [ 314.622031][T15646] netlink: 'syz.2.2759': attribute type 5 has an invalid length. [ 314.637095][T15646] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2759'. [ 314.731776][T15656] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2761'. [ 315.141705][T15667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2764'. [ 315.159893][T15669] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2765'. [ 315.271971][T15671] xt_hashlimit: size too large, truncated to 1048576 [ 315.427995][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2768'. [ 315.547312][T15685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2769'. [ 315.771114][T15695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2770'. [ 315.820778][T15701] netlink: 'syz.4.2772': attribute type 21 has an invalid length. [ 315.867209][T15701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2772'. [ 316.006427][T15694] 8021q: adding VLAN 0 to HW filter on device bond17 [ 316.049261][T15694] bond17 (unregistering): Released all slaves [ 316.152752][T15717] netlink: 'syz.0.2778': attribute type 3 has an invalid length. [ 316.161460][T15718] netlink: 'syz.0.2778': attribute type 3 has an invalid length. [ 316.169385][T15718] netlink: 'syz.0.2778': attribute type 1 has an invalid length. [ 316.179738][T15717] netlink: 'syz.0.2778': attribute type 1 has an invalid length. [ 316.587259][T15734] veth1: entered promiscuous mode [ 316.784683][T15743] lo: Caught tx_queue_len zero misconfig [ 316.899123][T15748] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 316.930085][T15748] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 316.984153][T15751] x_tables: unsorted underflow at hook 3 [ 317.058224][T15753] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 317.189047][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.503781][T15769] 8021q: adding VLAN 0 to HW filter on device bond17 [ 317.512618][T15769] bridge0: port 1(bond17) entered blocking state [ 317.520020][T15769] bridge0: port 1(bond17) entered disabled state [ 317.527845][T15769] bond17: entered allmulticast mode [ 317.535911][T15769] bond17: entered promiscuous mode [ 317.608750][T15780] macvlan0: entered promiscuous mode [ 317.740287][T15783] x_tables: duplicate entry at hook 2 [ 317.813083][T15788] xt_policy: too many policy elements [ 318.003915][T15793] netlink: 'syz.4.2804': attribute type 5 has an invalid length. [ 318.029291][T15793] netlink: 'syz.4.2804': attribute type 16 has an invalid length. [ 318.048379][T15793] netlink: 'syz.4.2804': attribute type 17 has an invalid length. [ 318.081683][T15793] tunl0: left promiscuous mode [ 318.276577][T15793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.303363][T15793] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.347851][T15793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.449199][T15793] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 318.490536][T15797] ipvlan0: entered promiscuous mode [ 318.558909][T15802] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 318.670022][ T5741] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 319.229188][ T48] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 319.428706][ T5741] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 319.648711][T15884] __nla_validate_parse: 15 callbacks suppressed [ 319.648731][T15884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2826'. [ 319.913684][T15887] bond18: (slave vxcan7): The slave device specified does not support setting the MAC address [ 319.961539][T15887] bond18: (slave vxcan7): Error -95 calling set_mac_address [ 320.334362][T15910] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 320.364160][T15916] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2831'. [ 320.404353][ T113] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 320.445093][ T113] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 320.643007][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2836'. [ 320.767052][ T5742] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 320.879907][T15953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2840'. [ 321.099554][T15962] netlink: 'syz.3.2843': attribute type 3 has an invalid length. [ 321.111229][T15962] openvswitch: netlink: IPv4 tun info is not correct [ 321.255181][T15972] syzkaller1: entered promiscuous mode [ 321.262682][T15972] syzkaller1: entered allmulticast mode [ 321.507539][T15982] syzkaller1: entered promiscuous mode [ 321.518763][T15982] syzkaller1: entered allmulticast mode [ 321.652647][T15997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2855'. [ 321.911042][T16011] netlink: 'syz.2.2859': attribute type 13 has an invalid length. [ 322.184142][T16017] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 322.529185][T16047] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 322.539067][T16046] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 322.773066][T16059] netlink: 'syz.2.2874': attribute type 2 has an invalid length. [ 322.865405][T16064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2877'. [ 323.012621][T16065] can: request_module (can-proto-0) failed. [ 323.035063][T16068] tipc: New replicast peer: 255.255.255.255 [ 323.069006][T16068] tipc: Enabled bearer , priority 10 [ 323.098735][T16072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2878'. [ 323.340697][T16089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2882'. [ 323.665442][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2887'. [ 323.876981][T16107] netlink: 'syz.2.2890': attribute type 1 has an invalid length. [ 323.907565][T16107] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2890'. [ 323.936943][T16107] netlink: 'syz.2.2890': attribute type 8 has an invalid length. [ 324.347431][T16123] syzkaller1: entered promiscuous mode [ 324.360143][T16123] syzkaller1: entered allmulticast mode [ 324.492017][T16130] nbd: socks must be embedded in a SOCK_ITEM attr [ 324.825599][T16147] IPVS: Unknown mcast interface: vcan0 [ 324.864093][T16147] netlink: 'syz.1.2904': attribute type 30 has an invalid length. [ 324.960401][T16161] netlink: 'syz.4.2910': attribute type 11 has an invalid length. [ 324.987540][T16147] bond19: option arp_missed_max: invalid value (0) [ 325.015669][T16163] __nla_validate_parse: 5 callbacks suppressed [ 325.015691][T16163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2905'. [ 325.054142][T16147] bond19: option arp_missed_max: allowed values 1 - 255 [ 325.088695][T16147] bond19 (unregistering): Released all slaves [ 325.130967][T16163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2905'. [ 325.366529][T16179] netlink: 'syz.1.2914': attribute type 11 has an invalid length. [ 325.398946][T16179] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.2914'. [ 325.456247][T16185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2915'. [ 325.487527][T16185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2915'. [ 325.513419][T16189] Unsupported ieee802154 address type: 0 [ 325.525879][T16190] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2917'. [ 325.762499][T16209] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2924'. [ 325.781936][T16209] openvswitch: netlink: Flow key attr not present in new flow. [ 325.822235][T16213] ip6tnl0: Caught tx_queue_len zero misconfig [ 326.233632][T16228] netlink: 'syz.3.2930': attribute type 1 has an invalid length. [ 326.317424][ T5632] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 326.330270][ T5632] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 326.342831][ T5632] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 326.353960][ T5632] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 326.361948][ T5632] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 326.453859][ T4947] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 326.468792][ T4947] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 326.482395][ T4947] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 326.495858][ T4947] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 326.507852][ T4947] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 326.585554][T16235] bond11: (slave geneve3): making interface the new active one [ 326.639527][T16235] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 326.680895][ T113] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 326.725914][ T1153] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 326.828637][T16250] bond19 (unregistering): Released all slaves [ 326.878500][ T1153] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 326.969533][T16262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2935'. [ 326.979748][T16262] netlink: 'syz.3.2935': attribute type 5 has an invalid length. [ 326.988362][T16262] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2935'. [ 327.020922][T16262] geneve4: entered promiscuous mode [ 327.034602][T16262] geneve4: entered allmulticast mode [ 327.041876][ T113] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 327.076364][ T113] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 327.125930][ T1153] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 327.737094][T16287] sctp: [Deprecated]: syz.1.2944 (pid 16287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.737094][T16287] Use struct sctp_sack_info instead [ 328.168515][T16311] tipc: Enabled bearer , priority 0 [ 328.222323][T16315] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2949'. [ 328.508089][T16234] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.531006][T16234] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.538914][T16234] bridge_slave_0: entered allmulticast mode [ 328.549439][ T4947] Bluetooth: hci5: command tx timeout [ 328.563203][T16234] bridge_slave_0: entered promiscuous mode [ 328.602412][T16234] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.620090][T16234] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.630985][T16234] bridge_slave_1: entered allmulticast mode [ 328.654003][T16234] bridge_slave_1: entered promiscuous mode [ 328.691199][T16334] ipvlan0: Caught tx_queue_len zero misconfig [ 328.721635][T16338] netlink: 'syz.4.2954': attribute type 10 has an invalid length. [ 328.823600][ T1153] tipc: Resetting bearer [ 328.871840][T16234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.900487][T16234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.985389][T16234] team0: Port device team_slave_0 added [ 329.013227][T16234] team0: Port device team_slave_1 added [ 329.131156][T16234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.140451][T16234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.199496][T16234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.263139][T16234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.282641][T16234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.328375][T16358] xt_hl: Unknown TTL match mode: 255 [ 329.339082][T16234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.352424][T12432] tipc: Node number set to 1661142912 [ 329.400369][T16367] x_tables: duplicate underflow at hook 2 [ 329.414019][T16358] netlink: 'syz.2.2962': attribute type 1 has an invalid length. [ 329.691288][T16234] hsr_slave_0: entered promiscuous mode [ 329.711025][T16234] hsr_slave_1: entered promiscuous mode [ 329.728335][T16234] debugfs: 'hsr0' already exists in 'hsr' [ 329.735009][T16234] Cannot create hsr debugfs directory [ 329.795397][T16380] netlink: 'syz.3.2970': attribute type 10 has an invalid length. [ 330.073508][T16390] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 330.076305][T16396] __nla_validate_parse: 8 callbacks suppressed [ 330.076329][T16396] netlink: 54 bytes leftover after parsing attributes in process `syz.4.2976'. [ 330.102693][T16396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2976'. [ 330.401655][T16234] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.422851][T16234] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 330.433268][T16234] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.444033][T16234] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 330.495008][T16412] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 330.535285][T16416] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 330.571592][T16234] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.585251][T16420] openvswitch: netlink: IP tunnel TTL not specified. [ 330.595288][T16234] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 330.628072][ T4947] Bluetooth: hci5: command tx timeout [ 330.637862][T16234] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.648000][T16234] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 330.738403][T16234] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.773885][T16234] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 330.787162][T16234] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.809522][T16234] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 330.865368][T16433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2985'. [ 330.915163][T16234] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.949244][T16234] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 330.984877][T16234] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.012398][T16437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2986'. [ 331.013211][T16234] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 331.036104][T16439] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2988'. [ 331.231912][T16443] netlink: 'syz.4.2989': attribute type 1 has an invalid length. [ 331.300698][T16443] 8021q: adding VLAN 0 to HW filter on device bond12 [ 331.328685][T16451] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2992'. [ 331.441266][T16455] vlan3: entered promiscuous mode [ 331.454252][T16455] bond12: entered promiscuous mode [ 331.460827][T16455] vlan3: entered allmulticast mode [ 331.466564][T16459] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 331.471796][T16460] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2991'. [ 331.474885][T16455] bond12: entered allmulticast mode [ 331.507526][T16443] bond12: (slave bridge10): making interface the new active one [ 331.515356][T16443] bridge10: entered promiscuous mode [ 331.520983][T16443] bridge10: entered allmulticast mode [ 331.530108][T16443] bond12: (slave bridge10): Enslaving as an active interface with an up link [ 331.566664][T16457] bond12: option resend_igmp: invalid value (32767) [ 331.585531][T16457] bond12: option resend_igmp: allowed values 0 - 255 [ 331.597096][T16457] bond12 (unregistering): Released all slaves [ 331.683395][T16471] netlink: 'syz.2.2994': attribute type 64 has an invalid length. [ 331.691543][T16471] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2994'. [ 331.794706][T16474] gre0: Caught tx_queue_len zero misconfig [ 332.079574][T16446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 332.103864][T16234] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 332.135733][T16234] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 332.150313][T16234] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 332.169263][T16234] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 332.185036][T16489] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3000'. [ 332.197292][T16234] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 332.224080][T16234] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 332.245241][T16234] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 332.249876][T16489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3000'. [ 332.317049][T16234] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 332.692803][T16515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.707554][ T4947] Bluetooth: hci5: command tx timeout [ 332.771178][T16511] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 332.793986][T16511] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 332.798143][T16515] netlink: 'syz.3.3005': attribute type 1 has an invalid length. [ 332.841443][T16515] netlink: 'syz.3.3005': attribute type 1 has an invalid length. [ 332.862368][T16234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.879147][T16515] netlink: 'syz.3.3005': attribute type 2 has an invalid length. [ 332.966478][T16234] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.021809][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.029350][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.059329][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.066810][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.229961][T16529] xt_CT: No such helper "snmp_trap" [ 333.597453][T16550] veth0_macvtap: Caught tx_queue_len zero misconfig [ 333.826922][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 334.030003][T16575] netlink: 'syz.2.3019': attribute type 2 has an invalid length. [ 334.123195][ T30] audit: type=1804 audit(1779625613.363:9): pid=16579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3021" name="/newroot/629/cgroup.controllers" dev="tmpfs" ino=3238 res=1 errno=0 [ 334.202838][ T30] audit: type=1800 audit(1779625613.363:10): pid=16579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3021" name="cgroup.controllers" dev="tmpfs" ino=3238 res=0 errno=0 [ 334.787094][ T4947] Bluetooth: hci5: command tx timeout [ 335.170505][T16234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.335425][T16234] veth0_vlan: entered promiscuous mode [ 335.369217][T16234] veth1_vlan: entered promiscuous mode [ 335.378918][T16614] __nla_validate_parse: 6 callbacks suppressed [ 335.378939][T16614] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3031'. [ 335.435233][T16619] bond0: Caught tx_queue_len zero misconfig [ 335.494879][T16234] veth0_macvtap: entered promiscuous mode [ 335.548155][T16234] veth1_macvtap: entered promiscuous mode [ 335.598534][T16626] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3037'. [ 335.615264][T16625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3036'. [ 335.625568][T16234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.642236][T16624] xt_l2tp: v2 doesn't support IP mode [ 335.698678][T16631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3038'. [ 335.806686][T16234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.862454][ T6413] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.889731][ T6413] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.954468][ T6413] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.994157][ T6413] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.166399][T16655] netlink: 'syz.4.3043': attribute type 48 has an invalid length. [ 336.326035][T16665] ipt_rpfilter: unknown options [ 336.341379][ T6407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.367420][ T6407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.443212][ T113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.463792][ T113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.523654][T16667] team0: Device gtp2 is up. Set it down before adding it as a team port [ 336.654907][T16676] sock: sock_timestamping_bind_phc: sock not bind to device [ 336.691591][T16676] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 336.708273][T16678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3050'. [ 336.716438][T16676] batman_adv: batadv0: Adding interface: wlan0 [ 336.748585][T16676] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.790933][T16678] netlink: 'syz.4.3050': attribute type 3 has an invalid length. [ 336.800212][T16676] batman_adv: batadv0: Interface activated: wlan0 [ 336.865201][T16680] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3050'. [ 336.891602][T16680] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3050'. [ 336.921230][T16680] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3050'. [ 336.922726][T16678] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3050'. [ 337.511180][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 337.533081][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 337.547964][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 337.562516][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 337.575046][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 337.842308][T16721] bond1: option fail_over_mac: invalid value (16) [ 337.860460][T16721] bond1 (unregistering): Released all slaves [ 338.535262][T16758] atomic_op ffff88807d5b5998 conn xmit_atomic 0000000000000000 [ 338.546531][T16758] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3069'. [ 339.678310][ T4947] Bluetooth: hci0: command tx timeout [ 341.010528][T16774] bond12: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 341.156635][T16789] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3078'. [ 341.175407][T16789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3078'. [ 341.186125][T16789] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3078'. [ 341.365242][T16796] netlink: 'syz.2.3079': attribute type 5 has an invalid length. [ 341.386395][T16796] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3079'. [ 341.400934][T16796] netlink: 'syz.2.3079': attribute type 5 has an invalid length. [ 341.411391][T16796] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3079'. [ 341.420952][T16796] netlink: 'syz.2.3079': attribute type 5 has an invalid length. [ 341.444027][T16796] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3079'. [ 341.573450][T16710] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.581258][T16710] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.589494][T16710] bridge_slave_0: entered allmulticast mode [ 341.598585][T16710] bridge_slave_0: entered promiscuous mode [ 341.608275][T16710] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.615620][T16710] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.624246][T16710] bridge_slave_1: entered allmulticast mode [ 341.632411][T16710] bridge_slave_1: entered promiscuous mode [ 341.678792][T16710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.692754][T16710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.747581][ T5632] Bluetooth: hci0: command tx timeout [ 341.770838][T16710] team0: Port device team_slave_0 added [ 341.780050][T16710] team0: Port device team_slave_1 added [ 341.829524][T16710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.836622][T16710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.863091][T16710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.876348][T16710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.883569][T16710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.910298][T16710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.014763][T16815] netlink: 'syz.2.3084': attribute type 12 has an invalid length. [ 342.075606][T16710] hsr_slave_0: entered promiscuous mode [ 342.090910][T16710] hsr_slave_1: entered promiscuous mode [ 342.107264][T16710] debugfs: 'hsr0' already exists in 'hsr' [ 342.113082][T16710] Cannot create hsr debugfs directory [ 342.211005][T16824] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3086'. [ 342.540278][T16832] xt_cluster: node mask cannot exceed total number of nodes [ 342.586191][T16832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3089'. [ 342.730429][T16846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3093'. [ 342.770783][T16710] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.804917][T16710] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.835854][T16710] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 343.103095][T16710] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.126153][T16710] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.153699][T16710] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 343.172026][T16863] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3098'. [ 343.406526][T16710] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.449883][T16710] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.489179][T16710] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 343.593133][T16883] ip6t_srh: unknown srh invflags 4000 [ 343.684404][T16710] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.700343][T16710] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.718147][T16710] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 343.828929][ T5632] Bluetooth: hci0: command 0x040f tx timeout [ 343.920621][T16900] netlink: 'syz.0.3110': attribute type 9 has an invalid length. [ 344.240591][T16710] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 344.255482][T16908] IPv6: addrconf: prefix option has invalid lifetime [ 344.255918][T16710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 344.262391][T16908] IPv6: addrconf: prefix option has invalid lifetime [ 344.279110][T16710] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 344.290188][T16710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 344.321783][T16710] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 344.335852][T16710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 344.351755][T16710] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 344.364176][T16710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 344.559431][T16710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.673754][T16710] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.730933][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.738160][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.791656][ T113] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.798913][ T113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.632224][T16966] syzkaller1: entered promiscuous mode [ 345.655893][T16966] syzkaller1: entered allmulticast mode [ 345.907668][ T5632] Bluetooth: hci0: command 0x040f tx timeout [ 346.002031][T16710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.165589][T16710] veth0_vlan: entered promiscuous mode [ 346.183470][T16710] veth1_vlan: entered promiscuous mode [ 346.283954][T16710] veth0_macvtap: entered promiscuous mode [ 346.294733][T16710] veth1_macvtap: entered promiscuous mode [ 346.323155][T16710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.345571][T16710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.369452][ T1060] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.383300][ T1060] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.400384][ T1060] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.415516][ T1060] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.429930][T16988] nbd1: detected capacity change from 0 to 63 [ 346.462456][ T5632] block nbd1: Receive control failed (result -32) [ 346.470773][ T4947] block nbd1: Receive control failed (result -32) [ 346.504101][ T5725] block nbd1: Send control failed (result -32) [ 346.541407][ T5725] block nbd1: Request send failed, requeueing [ 346.592367][ T11] block nbd1: Dead connection, failed to find a fallback [ 346.603074][ T11] block nbd1: shutting down sockets [ 346.609454][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.622429][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 346.643676][ T5725] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.667295][ T5725] Buffer I/O error on dev nbd1, logical block 1, async page read [ 346.678244][ T5725] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.687844][ T5725] Buffer I/O error on dev nbd1, logical block 2, async page read [ 346.698634][ T5725] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.708588][ T5725] Buffer I/O error on dev nbd1, logical block 3, async page read [ 346.716664][ T5725] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.725990][ T5725] Buffer I/O error on dev nbd1, logical block 0, async page read [ 346.734083][ T5725] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.756251][ T5725] Buffer I/O error on dev nbd1, logical block 1, async page read [ 346.772810][ T5725] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.785783][ T5725] Buffer I/O error on dev nbd1, logical block 2, async page read [ 346.811887][ T5725] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.841388][ T5725] Buffer I/O error on dev nbd1, logical block 3, async page read [ 346.866160][ T5725] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.871486][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.915266][ T5725] Buffer I/O error on dev nbd1, logical block 0, async page read [ 346.940637][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.944595][ T5725] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 346.999356][ T5725] Buffer I/O error on dev nbd1, logical block 1, async page read [ 347.056492][ T5725] ldm_validate_partition_table(): Disk read failed. [ 347.073091][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.095365][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.130457][ T5725] Dev nbd1: unable to read RDB block 0 [ 347.180879][ T5725] nbd1: unable to read partition table [ 347.235726][ T5725] ldm_validate_partition_table(): Disk read failed. [ 347.252531][T17016] __nla_validate_parse: 5 callbacks suppressed [ 347.252553][T17016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3142'. [ 347.288138][ T5725] Dev nbd1: unable to read RDB block 0 [ 347.308908][ T5725] nbd1: unable to read partition table [ 347.320772][T17021] netlink: 'syz.0.3144': attribute type 1 has an invalid length. [ 347.379186][T17021] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3144'. [ 347.425763][T17021] netlink: 'syz.0.3144': attribute type 1 has an invalid length. [ 347.463073][T17021] netlink: 'syz.0.3144': attribute type 8 has an invalid length. [ 347.525789][T17021] netlink: 582 bytes leftover after parsing attributes in process `syz.0.3144'. [ 347.570005][T17021] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3144'. [ 347.608095][T17023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3142'. [ 347.682495][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3148'. [ 347.704948][T17034] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3148'. [ 347.739167][T17035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3148'. [ 347.781617][T17034] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3148'. [ 347.816105][T17034] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3148'. [ 347.896862][T17042] tipc: Started in network mode [ 347.932655][T17042] tipc: Node identity ee4781203382, cluster identity 4711 [ 347.982176][T17042] tipc: Enabled bearer , priority 0 [ 347.989841][ T5632] Bluetooth: hci0: command 0x040f tx timeout [ 348.114392][ T4947] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 348.128836][ T4947] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 348.145175][ T4947] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 348.155489][ T4947] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 348.172689][T17042] tipc: Disabling bearer [ 348.178932][ T4947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 348.443152][T17067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.489901][ T5634] syz_tun (unregistering): left allmulticast mode [ 348.569109][T17067] xt_CT: No such helper "snmp_trap" [ 349.145982][T17103] Bluetooth: MGMT ver 1.23 [ 349.797452][T17047] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.813463][T17047] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.821450][T17047] bridge_slave_0: entered allmulticast mode [ 349.848579][T17047] bridge_slave_0: entered promiscuous mode [ 349.870529][T17047] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.884304][T17047] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.901521][T17047] bridge_slave_1: entered allmulticast mode [ 349.917855][T17047] bridge_slave_1: entered promiscuous mode [ 349.943225][T17148] netlink: 'syz.2.3173': attribute type 21 has an invalid length. [ 349.999393][T17047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.044134][T17047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.067020][ T5632] Bluetooth: hci0: command 0x040f tx timeout [ 350.236121][ T5632] Bluetooth: hci2: command tx timeout [ 350.308531][T17168] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 350.318177][T17174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 350.409135][T17047] team0: Port device team_slave_0 added [ 350.434207][T17047] team0: Port device team_slave_1 added [ 350.522810][T17195] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 350.619874][T17047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.638519][T17047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.666555][T17047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.690683][T17199] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 350.722865][T17047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.735847][T17047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.799252][T17047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.000068][T17047] hsr_slave_0: entered promiscuous mode [ 351.018312][T17047] hsr_slave_1: entered promiscuous mode [ 351.042741][T17047] debugfs: 'hsr0' already exists in 'hsr' [ 351.057310][T17047] Cannot create hsr debugfs directory [ 351.107658][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 351.686443][T17231] IPVS: set_ctl: invalid protocol: 72 32.0.1.3:0 [ 351.718788][T17231] IPVS: set_ctl: invalid protocol: 72 32.0.1.3:0 [ 351.740361][T17231] IPVS: set_ctl: invalid protocol: 72 32.0.1.3:0 [ 351.767680][T17231] IPVS: set_ctl: invalid protocol: 72 32.0.1.3:0 [ 351.811475][T17236] xt_CT: No such helper "snmp_trap" [ 352.033004][T17047] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.062390][T17047] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.089514][T17047] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 352.214213][ T30] audit: type=1107 audit(1779625631.473:11): pid=17247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 352.306919][ T5632] Bluetooth: hci2: command tx timeout [ 352.573427][T17047] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.587533][T17047] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.598333][T17047] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 352.634357][T17259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.662516][T17269] __nla_validate_parse: 12 callbacks suppressed [ 352.662533][T17269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3199'. [ 352.831903][T17047] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.855231][T17273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3200'. [ 352.871619][T17047] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.882072][T17047] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 353.440448][T17301] netlink: 'syz.3.3208': attribute type 3 has an invalid length. [ 353.542180][T17305] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3207'. [ 353.607681][T17047] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 353.649183][T17047] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 353.665954][T17310] netlink: 'syz.1.3209': attribute type 1 has an invalid length. [ 353.684584][T17047] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 353.712167][T17047] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 353.724751][T17314] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3212'. [ 353.736081][T17047] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 353.744828][T17314] netlink: 320 bytes leftover after parsing attributes in process `syz.3.3212'. [ 353.763936][T17047] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 353.771730][T17309] netlink: 'syz.1.3209': attribute type 1 has an invalid length. [ 353.780199][T17309] netlink: 'syz.1.3209': attribute type 1 has an invalid length. [ 353.788828][T17310] netlink: 'syz.1.3209': attribute type 1 has an invalid length. [ 353.831235][T17047] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 353.866187][T17047] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 353.964427][T17331] netlink: 'syz.0.3215': attribute type 1 has an invalid length. [ 354.091383][T17336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3217'. [ 354.205462][T17349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3219'. [ 354.217509][T17350] netlink: 'syz.1.3219': attribute type 1 has an invalid length. [ 354.222257][T17347] netlink: 'syz.2.3220': attribute type 20 has an invalid length. [ 354.250525][T17347] IPv6: NLM_F_CREATE should be specified when creating new route [ 354.409975][T17047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.468733][ T5632] Bluetooth: hci2: command tx timeout [ 354.523085][T17047] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.647496][ T1060] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.654737][ T1060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.704702][ T1060] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.711957][ T1060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.332854][T17412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3236'. [ 355.343875][T17411] netlink: 'syz.3.3235': attribute type 1 has an invalid length. [ 355.401781][T17412] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 355.535704][ T5756] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 355.640113][T17423] tipc: Started in network mode [ 355.645112][ T5756] IPVS: starting estimator thread 0... [ 355.662880][T17423] tipc: Node identity , cluster identity 4711 [ 355.692453][T17423] tipc: Failed to set node id, please configure manually [ 355.731474][T17423] tipc: Enabling of bearer rejected, failed to enable media [ 355.762235][T17435] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3241'. [ 355.777752][T17427] IPVS: using max 25 ests per chain, 60000 per kthread [ 355.798202][T17436] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3241'. [ 356.013467][T17443] netlink: 'syz.3.3242': attribute type 1 has an invalid length. [ 356.081957][T17443] gretap3: entered promiscuous mode [ 356.094994][T17443] gretap3: entered allmulticast mode [ 356.289670][T17047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.549846][ T5632] Bluetooth: hci2: command tx timeout [ 356.864901][T17047] veth0_vlan: entered promiscuous mode [ 356.913727][T17047] veth1_vlan: entered promiscuous mode [ 357.033890][T17047] veth0_macvtap: entered promiscuous mode [ 357.065700][T17047] veth1_macvtap: entered promiscuous mode [ 357.248669][T17047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.293294][T17047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.345032][ T6407] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.387168][ T6407] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.416994][ T6407] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.462975][ T6407] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.685295][ T6413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.720849][ T6413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.750360][T17503] Cannot find set identified by id 3 to match [ 357.852271][ T6413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.873516][T17509] xt_cgroup: path and classid specified [ 357.877816][ T6413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.892672][T17510] __nla_validate_parse: 7 callbacks suppressed [ 357.892696][T17510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3263'. [ 357.948337][T17512] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 358.157843][T17521] vlan1: entered promiscuous mode [ 358.162942][T17521] bridge0: entered promiscuous mode [ 358.350747][T17531] syz_tun: entered allmulticast mode [ 358.403932][T17531] pim6reg: entered allmulticast mode [ 358.481970][T17531] syz_tun (unregistering): left allmulticast mode [ 358.579621][T17537] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3271'. [ 358.643025][T17535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3271'. [ 358.689255][ T4947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 358.703983][T17539] gtp0: entered promiscuous mode [ 358.710416][ T4947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 358.715578][T17539] gtp0: entered allmulticast mode [ 358.735040][ T4947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 358.752311][ T4947] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 358.762101][ T4947] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 359.098769][T17552] IPv6: NLM_F_CREATE should be specified when creating new route [ 359.525807][T17573] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3283'. [ 359.545950][T17573] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3283'. [ 359.550507][ T6413] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.568321][ T6413] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.596395][T17575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3281'. [ 359.660554][T17574] macvlan2: entered promiscuous mode [ 359.668740][T17574] macvlan2: entered allmulticast mode [ 359.775547][ T6413] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.787937][ T6413] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.948283][ T6413] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.982991][ T6413] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.013933][T17587] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 360.021908][T17587] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 360.035402][T17587] validate_nla: 2 callbacks suppressed [ 360.035421][T17587] netlink: 'syz.3.3287': attribute type 2 has an invalid length. [ 360.052175][T17588] netlink: 'syz.3.3287': attribute type 2 has an invalid length. [ 360.151553][ T6413] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.173981][ T6413] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.203919][T17598] batman_adv: batadv0: Adding interface: dummy0 [ 360.210452][T17598] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.238187][T17598] batman_adv: batadv0: Interface activated: dummy0 [ 360.270999][T17598] batadv0: mtu less than device minimum [ 360.290071][T17598] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 360.303558][T17598] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 360.315629][T17598] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 360.327559][T17598] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 360.339459][T17598] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 360.351357][T17598] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 360.363254][T17598] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 360.375167][T17598] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 360.387119][T17598] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 360.787774][ T5632] Bluetooth: hci1: command tx timeout [ 361.033507][T17629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3300'. [ 361.303793][T17637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3303'. [ 361.376905][T17601] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 361.593846][ T6413] bond8 (unregistering): (slave gretap1): Releasing active interface [ 361.658875][ T6413] bond10 (unregistering): (slave geneve4): Releasing active interface [ 361.668730][ T6413] geneve4 (unregistering): left allmulticast mode [ 361.690910][ T6413] bond5 (unregistering): (slave geneve3): Releasing active interface [ 361.699153][ T6413] geneve3 (unregistering): left allmulticast mode [ 361.875796][ T6413] bond3 (unregistering): (slave bridge3): Releasing active interface [ 362.402161][ T6413] bond13 (unregistering): (slave bridge14): Releasing backup interface [ 362.411539][ T6413] bridge14 (unregistering): left promiscuous mode [ 362.463677][ T6413]  (unregistering): Released all slaves [ 362.478381][ T6413] bond1 (unregistering): Released all slaves [ 362.496291][ T6413] bond2 (unregistering): Released all slaves [ 362.514222][ T6413] bond3 (unregistering): Released all slaves [ 362.534777][ T6413] bond4 (unregistering): Released all slaves [ 362.564296][ T6413] bond5 (unregistering): Released all slaves [ 362.583877][ T6413] bond6 (unregistering): Released all slaves [ 362.604852][ T6413] bond7 (unregistering): Released all slaves [ 362.621927][ T6413] bond8 (unregistering): Released all slaves [ 362.642251][ T6413] bond9 (unregistering): Released all slaves [ 362.671132][ T6413] bond10 (unregistering): Released all slaves [ 362.721948][ T6413] bond0 (unregistering): (slave veth9): Releasing active interface [ 362.730521][ T6413] batadv1: entered promiscuous mode [ 362.739509][ T6413] bond0 (unregistering): (slave batadv1): Releasing active interface [ 362.752327][ T6413] bond0 (unregistering): Released all slaves [ 362.770913][ T6413] bond11 (unregistering): Released all slaves [ 362.788278][ T6413] bond12 (unregistering): Released all slaves [ 362.804633][ T6413] bond13 (unregistering): Released all slaves [ 362.826594][T17619] only policy match revision 0 supported [ 362.826617][T17619] unable to load match [ 362.848124][T17637] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 362.878752][ T5632] Bluetooth: hci1: command 0x041b tx timeout [ 363.201659][ T6413] : left promiscuous mode [ 363.662856][ T6413] tipc: Disabling bearer [ 363.700501][ T6413] tipc: Left network mode [ 363.800739][T17686] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3311'. [ 363.812457][T17541] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.841791][T17541] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.868007][T17541] bridge_slave_0: entered allmulticast mode [ 363.954157][T17541] bridge_slave_0: entered promiscuous mode [ 363.976390][ T6413] IPVS: stopping backup sync thread 11857 ... [ 363.987765][T17697] netlink: 'syz.3.3314': attribute type 1 has an invalid length. [ 364.013151][T17541] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.037028][T17541] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.048244][T17698] netlink: 'syz.3.3314': attribute type 1 has an invalid length. [ 364.057273][T17541] bridge_slave_1: entered allmulticast mode [ 364.095200][T17541] bridge_slave_1: entered promiscuous mode [ 364.168967][T17708] netlink: 'syz.0.3316': attribute type 1 has an invalid length. [ 364.195884][T17708] netlink: 2108 bytes leftover after parsing attributes in process `syz.0.3316'. [ 364.444872][T17541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.516626][T17541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.813448][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 364.824816][T17541] team0: Port device team_slave_0 added [ 364.843586][T17745] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3323'. [ 364.854549][T17745] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3323'. [ 364.866452][T17745] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3323'. [ 364.884017][T17541] team0: Port device team_slave_1 added [ 364.952649][T17541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.958593][ T5632] Bluetooth: hci1: command 0x041b tx timeout [ 364.983365][T17541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.010463][T17541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.030024][T17541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.037321][T17541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.063886][T17541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.077029][ T6413] batman_adv: batadv0: Interface deactivated: wlan0 [ 365.088392][ T6413] batman_adv: batadv0: Removing interface: wlan0 [ 365.160354][T17541] hsr_slave_0: entered promiscuous mode [ 365.168073][T17541] hsr_slave_1: entered promiscuous mode [ 365.174624][T17541] debugfs: 'hsr0' already exists in 'hsr' [ 365.180502][T17541] Cannot create hsr debugfs directory [ 365.239833][ T6413] hsr_slave_0: left promiscuous mode [ 365.280977][ T6413] veth0_macvtap: left allmulticast mode [ 365.290173][ T6413] veth1_vlan: left promiscuous mode [ 365.298180][ T6413] veth0_vlan: left promiscuous mode [ 365.857109][T17750] net_ratelimit: 10 callbacks suppressed [ 365.857134][T17750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.052802][T17756] syzkaller0: entered promiscuous mode [ 366.058603][T17756] syzkaller0: entered allmulticast mode [ 367.032159][ T5632] Bluetooth: hci1: command 0x041b tx timeout [ 367.564375][T17728] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 368.023091][T17774] netlink: 'syz.1.3327': attribute type 2 has an invalid length. [ 368.032308][T17774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3327'. [ 368.891248][T17786] No such timeout policy "syz1" [ 368.923686][ T6413] IPVS: stop unused estimator thread 0... [ 369.108071][ T5632] Bluetooth: hci1: command 0x041b tx timeout [ 369.154346][T17792] tipc: Enabling of bearer rejected, media not registered [ 369.169966][T17793] tipc: Enabling of bearer rejected, media not registered [ 369.384265][T17809] netlink: 83 bytes leftover after parsing attributes in process `syz.4.3336'. [ 369.624414][T17818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3338'. [ 369.781943][T17826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3340'. [ 369.833749][T17830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3340'. [ 369.846488][T17828] netlink: 'syz.0.3341': attribute type 3 has an invalid length. [ 369.989060][T17541] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 370.029356][T17541] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 370.047733][T17541] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 370.074456][T17837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3342'. [ 370.129147][T17541] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 370.150104][T17541] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 370.212396][T17541] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 370.251997][T17541] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 370.347824][T17541] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 370.429274][T17847] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3346'. [ 370.455959][T17847] nbd: illegal input index -8454144 [ 370.653902][T17541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.691116][T17865] netlink: 'syz.4.3351': attribute type 1 has an invalid length. [ 370.716322][T17867] tunl0: Caught tx_queue_len zero misconfig [ 370.825141][T17872] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3353'. [ 370.840822][T17541] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.877131][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.884487][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.971737][ T113] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.979045][ T113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.085697][T17877] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3355'. [ 371.116349][T17877] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3355'. [ 371.443188][T17893] ipvlan2: entered promiscuous mode [ 371.788809][T17907] netlink: 'syz.1.3361': attribute type 1 has an invalid length. [ 371.979717][T17907] 8021q: adding VLAN 0 to HW filter on device bond1 [ 372.042708][T17914] bond1: (slave gretap1): making interface the new active one [ 372.051928][T17914] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 372.118542][T17916] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3365'. [ 372.469580][T17939] netlink: 'syz.3.3369': attribute type 1 has an invalid length. [ 372.502262][T17939] netlink: 'syz.3.3369': attribute type 7 has an invalid length. [ 372.550432][T17939] netlink: 'syz.3.3369': attribute type 8 has an invalid length. [ 373.076436][T17541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.180773][T17975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 373.294475][T17541] veth0_vlan: entered promiscuous mode [ 373.330132][T17541] veth1_vlan: entered promiscuous mode [ 373.453424][T17541] veth0_macvtap: entered promiscuous mode [ 373.515901][T17541] veth1_macvtap: entered promiscuous mode [ 373.610733][T17541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.688160][T17541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.731397][ T6415] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.769620][ T6415] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.803897][ T6415] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.844310][ T6415] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.971557][T18003] netlink: 'syz.3.3387': attribute type 18 has an invalid length. [ 374.080783][T18004] netlink: 'syz.3.3387': attribute type 29 has an invalid length. [ 374.167619][T18003] netlink: 'syz.3.3387': attribute type 29 has an invalid length. [ 374.190394][T18011] x9: renamed from bridge_slave_0 (while UP) [ 374.190591][ T6415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.230645][ T6415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.395138][T18021] pim6reg: entered allmulticast mode [ 374.410839][T18017] netlink: 'syz.1.3390': attribute type 2 has an invalid length. [ 374.420563][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.437600][T18017] __nla_validate_parse: 7 callbacks suppressed [ 374.437620][T18017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3390'. [ 374.457170][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.465956][T18026] netlink: 'syz.4.3392': attribute type 1 has an invalid length. [ 374.475926][T18025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.487827][T18028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.615315][T18026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.656487][T18023] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 374.740667][T18036] bond1: (slave ip6gretap1): making interface the new active one [ 374.763589][T18036] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 375.015198][T18045] netlink: 'syz.3.3396': attribute type 15 has an invalid length. [ 375.030411][T18045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3396'. [ 375.052051][ T6415] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 375.061527][T18045] netlink: 'syz.3.3396': attribute type 15 has an invalid length. [ 375.072645][ T6415] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 375.097828][T18045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3396'. [ 375.123914][ T6415] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 375.809812][ T4947] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 375.829529][ T4947] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 375.842952][ T4947] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 375.857159][ T4947] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 375.867331][ T4947] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 376.152860][ T6407] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.163941][ T6407] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 376.177473][ T6407] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.188510][ T6407] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 376.199484][ T6407] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 376.295814][ T6407] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.309877][ T6407] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 376.327916][ T6407] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.355679][ T6407] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 376.387018][ T6407] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 376.424625][T18083] netlink: 'syz.4.3402': attribute type 2 has an invalid length. [ 376.521312][T18085] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3403'. [ 376.553962][ T6407] bond0: (slave netdevsim1): Releasing backup interface [ 376.564024][ T6407] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.575037][ T6407] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 376.585492][ T6407] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.596106][ T6407] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 376.607652][ T6407] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 376.871514][T18094] netlink: 'syz.4.3405': attribute type 1 has an invalid length. [ 376.952968][T18094] 8021q: adding VLAN 0 to HW filter on device bond2 [ 376.961679][T18097] ip_vti0: entered promiscuous mode [ 377.243093][ T6407] gretap0: left allmulticast mode [ 377.248871][ T6407] gretap0: left promiscuous mode [ 377.258211][ T6407] bridge0: port 3(gretap0) entered disabled state [ 377.278349][ T6407] bridge_slave_1: left allmulticast mode [ 377.284037][ T6407] bridge_slave_1: left promiscuous mode [ 377.292679][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.302183][ T6407] bridge_slave_0: left allmulticast mode [ 377.309176][ T6407] bridge_slave_0: left promiscuous mode [ 377.315021][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.352560][ T6407] pimreg: left allmulticast mode [ 377.362973][ T6407] lo: left allmulticast mode [ 377.459755][ T6407] bond7 (unregistering): (slave ip6gre1): Releasing backup interface [ 377.467916][ T6407] ip6gre1 (unregistering): left promiscuous mode [ 377.637187][ T6407] bond11 (unregistering): (slave geneve3): Releasing active interface [ 377.794246][ T6407] bond6 (unregistering): (slave bridge3): Releasing backup interface [ 377.907185][ T5632] Bluetooth: hci4: command tx timeout [ 377.965675][T18053] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 378.139611][T18108] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3409'. [ 378.183558][T18114] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3410'. [ 378.215368][T18112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3408'. [ 378.266473][T18111] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20000 [ 378.293154][ T6407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.304481][ T6407] bond0 (unregistering): (slave team0): Releasing backup interface [ 378.314545][ T6407] bond0 (unregistering): Released all slaves [ 378.329438][ T6407] bond1 (unregistering): (slave lo): Releasing backup interface [ 378.338000][ T6407] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 378.351324][ T6407] bond1 (unregistering): Released all slaves [ 378.370638][ T6407] bond2 (unregistering): (slave veth3): Releasing backup interface [ 378.381435][ T6407] bond2 (unregistering): Released all slaves [ 378.403630][ T6407] bond3 (unregistering): Released all slaves [ 378.422811][ T6407] bond4 (unregistering): Released all slaves [ 378.445921][ T6407] bond5 (unregistering): Released all slaves [ 378.463320][ T6407] bond6 (unregistering): Released all slaves [ 378.481411][ T6407] bond7 (unregistering): Released all slaves [ 378.499375][ T6407] bond8 (unregistering): Released all slaves [ 378.518678][ T6407] bond9 (unregistering): Released all slaves [ 378.539074][ T6407] bond10 (unregistering): Released all slaves [ 378.577238][ T6407] bond11 (unregistering): Released all slaves [ 378.594695][ T6407] bond12 (unregistering): Released all slaves [ 378.612561][ T6407] bond13 (unregistering): Released all slaves [ 378.630787][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.639887][ T6407] bond14 (unregistering): Released all slaves [ 378.679772][T18072] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.689651][T18072] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.697007][T18072] bridge_slave_0: entered allmulticast mode [ 378.705000][T18072] bridge_slave_0: entered promiscuous mode [ 378.714883][T18110] : renamed from lo (while UP) [ 378.781816][T18072] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.820694][T18072] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.869578][T18072] bridge_slave_1: entered allmulticast mode [ 378.923649][T18072] bridge_slave_1: entered promiscuous mode [ 379.133995][T18072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.159687][T18128] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 379.232271][ T6407] tipc: Disabling bearer [ 379.245829][T18127] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3413'. [ 379.303869][ T6407] tipc: Left network mode [ 379.316260][T18072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.652858][T18072] team0: Port device team_slave_0 added [ 379.689685][T18072] team0: Port device team_slave_1 added [ 379.717493][T18145] netlink: 'syz.1.3417': attribute type 1 has an invalid length. [ 379.791802][T18154] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.3419'. [ 379.927764][T18164] netlink: 'syz.2.3420': attribute type 29 has an invalid length. [ 380.000141][ T5632] Bluetooth: hci4: command tx timeout [ 380.074077][T18172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3420'. [ 380.101103][T18072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.108632][T18072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.171915][T18072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.203143][T18157] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 380.213746][T18157] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 380.231706][T18157] bond2: (slave vxcan3): making interface the new active one [ 380.240433][T18157] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 380.258387][T18164] tipc: Enabling of bearer rejected, failed to enable media [ 380.274242][T18166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.303966][T18170] ip6tnl2: entered allmulticast mode [ 380.330733][T18072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.351614][T18072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.381217][T18072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.909997][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 380.947554][T18072] hsr_slave_0: entered promiscuous mode [ 380.964971][T18072] hsr_slave_1: entered promiscuous mode [ 380.984723][T18072] debugfs: 'hsr0' already exists in 'hsr' [ 381.010191][T18072] Cannot create hsr debugfs directory [ 381.017210][T18205] netlink: 'syz.0.3428': attribute type 21 has an invalid length. [ 381.125031][T18205] netlink: 'syz.0.3428': attribute type 1 has an invalid length. [ 381.447523][T18221] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20004 [ 381.995428][T18241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3438'. [ 382.029207][T18236] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3437'. [ 382.068215][ T5632] Bluetooth: hci4: command tx timeout [ 382.553544][T18268] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3443'. [ 382.622429][T18268] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3443'. [ 383.052508][ T6407] team0 (unregistering): Port device batadv1 removed [ 383.344964][ T6407] team0 (unregistering): Port device team_slave_1 removed [ 383.398063][ T6407] team0 (unregistering): Port device team_slave_0 removed [ 383.515483][ T6407] team0 (unregistering): Port device dummy0 removed [ 383.552463][T18304] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 383.814355][T18311] sctp: [Deprecated]: syz.0.3453 (pid 18311) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.814355][T18311] Use struct sctp_sack_info instead [ 383.903980][T18311] veth0: entered promiscuous mode [ 383.951414][T18313] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 384.134410][T18326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3456'. [ 384.149691][ T5632] Bluetooth: hci4: command tx timeout [ 384.248940][T18330] sctp: [Deprecated]: syz.2.3457 (pid 18330) Use of int in maxseg socket option. [ 384.248940][T18330] Use struct sctp_assoc_value instead [ 384.550888][T18313] veth0: left promiscuous mode [ 384.566147][T18338] netlink: 'syz.2.3460': attribute type 3 has an invalid length. [ 384.601901][ T6407] IPVS: stop unused estimator thread 0... [ 384.618149][T18338] macvtap0: entered allmulticast mode [ 384.640801][T18338] veth0_macvtap: entered allmulticast mode [ 384.652786][T18343] netlink: 'syz.4.3461': attribute type 9 has an invalid length. [ 384.685413][T18343] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3461'. [ 384.909757][T18072] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 384.961937][T18072] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 385.052115][T18072] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 385.071468][T18355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3463'. [ 385.098697][T18355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3463'. [ 385.122597][T18367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.143031][T18072] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 385.174441][T18351] bond0: (slave bond_slave_1): Releasing backup interface [ 385.224679][T18072] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 385.281272][T18072] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 385.304234][T18072] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 385.333288][T18072] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 385.436004][T18382] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3469'. [ 385.589271][T18382] syzkaller0: entered promiscuous mode [ 385.616482][T18382] syzkaller0: entered allmulticast mode [ 385.651495][T18392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3470'. [ 385.706296][T18392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3470'. [ 385.782334][T18392] gretap0: entered promiscuous mode [ 385.790845][T18392] gretap0: left promiscuous mode [ 385.899567][T18072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.968661][T18072] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.016182][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.023437][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.116007][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.123948][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.176105][T18408] syzkaller1: entered promiscuous mode [ 386.200982][T18408] syzkaller1: entered allmulticast mode [ 386.308144][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 386.551208][T18428] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3477'. [ 386.567536][T18430] Cannot find add_set index 0 as target [ 386.580471][T18429] netlink: 'syz.1.3479': attribute type 1 has an invalid length. [ 386.589610][T18430] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.3478'. [ 386.656961][T18434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3480'. [ 386.672799][T18429] bond3: entered promiscuous mode [ 386.679316][T18429] 8021q: adding VLAN 0 to HW filter on device bond3 [ 386.701552][T18424] tipc: Resetting bearer [ 387.575065][T18476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3487'. [ 387.636416][T18466] syzkaller0: entered promiscuous mode [ 387.642572][T18466] syzkaller0: entered allmulticast mode [ 389.956037][T18492] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 390.581312][T18522] netlink: 'syz.1.3496': attribute type 1 has an invalid length. [ 390.621842][T18523] netlink: 'syz.1.3496': attribute type 1 has an invalid length. [ 390.636534][T18523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 390.643925][T18523] IPv6: NLM_F_CREATE should be set when creating new route [ 390.673468][T18522] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 390.767731][T18072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.901579][T18535] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3500'. [ 390.976086][T18072] veth0_vlan: entered promiscuous mode [ 391.020371][T18537] syzkaller0: entered promiscuous mode [ 391.026262][T18537] syzkaller0: entered allmulticast mode [ 391.043804][T18072] veth1_vlan: entered promiscuous mode [ 391.253336][T18072] veth0_macvtap: entered promiscuous mode [ 391.294234][T18072] veth1_macvtap: entered promiscuous mode [ 391.295586][T18546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3505'. [ 391.387557][T18072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.476238][T18072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.580457][ T148] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.606809][ T148] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.631560][T18559] veth1_macvtap: left promiscuous mode [ 391.652092][T18559] macsec0: entered promiscuous mode [ 391.659164][T18560] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 391.675769][T18559] macsec0: entered allmulticast mode [ 391.710573][ T148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.759468][ T148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.036536][ T6407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.065600][ T6407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.162053][T18580] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3514'. [ 392.199979][ T6415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.227297][ T6415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.375495][ T30] audit: type=1107 audit(1779625671.633:12): pid=18589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='_N"xK~tY [ 392.375495][ T30] ̘EXU&C##BQVl~ g,%fOD\pR(o!Grx}Цb#*TgX9cQ uH' [ 392.504001][T18600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3519'. [ 392.912261][T18621] bond0: (slave bond_slave_1): Releasing backup interface [ 393.098417][T18626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.412235][T18639] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3534'. [ 393.447890][T18639] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3534'. [ 393.471907][T18639] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3534'. [ 393.551962][T18639] SET target dimension over the limit! [ 393.840870][T18670] netlink: 'syz.4.3542': attribute type 21 has an invalid length. [ 393.869600][T18670] IPv6: NLM_F_CREATE should be specified when creating new route [ 393.911932][T18670] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 393.919272][T18670] IPv6: NLM_F_CREATE should be set when creating new route [ 393.926596][T18670] IPv6: NLM_F_CREATE should be set when creating new route [ 393.933930][T18670] IPv6: NLM_F_CREATE should be set when creating new route [ 394.413860][T18699] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 394.540887][T18699] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 394.558785][T18699] gretap2: entered promiscuous mode [ 394.564332][T18699] gretap2: entered allmulticast mode [ 394.815891][T18712] netlink: 'syz.3.3552': attribute type 83 has an invalid length. [ 394.900678][T18722] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3555'. [ 395.178941][T18734] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 395.314193][T18746] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 395.417361][T12428] IPVS: starting estimator thread 0... [ 395.456051][T18746] batadv1: entered allmulticast mode [ 395.483070][T18734] netlink: 187476 bytes leftover after parsing attributes in process `syz.0.3561'. [ 395.523407][T18743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.540829][T18760] IPVS: using max 24 ests per chain, 57600 per kthread [ 395.559027][T18743] batadv0: mtu less than device minimum [ 395.576154][T18743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.589833][T18743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.601667][T18743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.613539][T18743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.625335][T18743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.637263][T18743] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 395.691010][T18743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.737261][T18743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.781862][T18743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.813657][T18743] batman_adv: batadv0: Interface deactivated: dummy0 [ 395.820967][T18743] batman_adv: batadv0: Removing interface: dummy0 [ 395.910755][T18775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3569'. [ 396.160681][T18781] syzkaller0: entered promiscuous mode [ 396.166226][T18781] syzkaller0: entered allmulticast mode [ 396.519980][T18794] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3576'. [ 396.803569][T18808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3580'. [ 396.828833][T18775] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3569'. [ 396.906952][T18814] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3581'. [ 397.002838][T18817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3583'. [ 397.166412][T18791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3575'. [ 397.233849][T18829] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3585'. [ 397.296526][T18828] netlink: 'syz.1.3586': attribute type 4 has an invalid length. [ 397.794697][T18860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3594'. [ 397.887801][T18860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3594'. [ 398.160866][T18878] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode [ 398.189298][T18878] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode [ 398.386438][T18885] syzkaller0: entered promiscuous mode [ 398.392784][T18885] syzkaller0: entered allmulticast mode [ 398.401903][T18887] syz_tun: entered allmulticast mode [ 398.428453][T18869] tipc: Enabled bearer , priority 0 [ 398.453246][T18888] net_ratelimit: 33 callbacks suppressed [ 398.453268][T18888] openvswitch: netlink: IP tunnel dst address not specified [ 398.472569][T18876] pimreg: entered allmulticast mode [ 400.976245][T18887] pimreg: left allmulticast mode [ 401.065846][ T5741] tipc: Node number set to 3720708384 [ 401.078987][T18887] syz_tun: left allmulticast mode [ 401.208830][T18919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.310055][T18917] __nla_validate_parse: 5 callbacks suppressed [ 401.310077][T18917] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3607'. [ 401.342449][T18927] xt_NFQUEUE: number of queues (65531) out of range (got 65656) [ 401.350989][T18917] 8021q: VLANs not supported on sit0 [ 402.178684][T18970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3622'. [ 402.226493][T18971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3622'. [ 402.466085][T18996] netlink: 'syz.0.3627': attribute type 1 has an invalid length. [ 402.517854][T18996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.792587][T19005] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3632'. [ 403.475873][T19049] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3647'. [ 403.812828][T19061] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 404.165378][T19086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3658'. [ 404.194048][T19079] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 404.230849][ T5648] block nbd0: Receive control failed (result -110) [ 404.258683][T19079] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 404.280834][T19086] : entered promiscuous mode [ 404.289026][T19079] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 404.417489][T19079] [ 404.419870][T19079] ====================================================== [ 404.427005][T19079] WARNING: possible circular locking dependency detected [ 404.434154][T19079] syzkaller #0 Not tainted [ 404.438605][T19079] ------------------------------------------------------ [ 404.445747][T19079] syz.4.3656/19079 is trying to acquire lock: [ 404.451856][T19079] ffffffff8ea85420 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 404.461234][T19079] [ 404.461234][T19079] but task is already holding lock: [ 404.468716][T19079] ffffffff8f38e700 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 404.477658][T19079] [ 404.477658][T19079] which lock already depends on the new lock. [ 404.477658][T19079] [ 404.488183][T19079] [ 404.488183][T19079] the existing dependency chain (in reverse order) is: [ 404.497230][T19079] [ 404.497230][T19079] -> #9 (gdp_mutex){+.+.}-{4:4}: [ 404.504404][T19079] __mutex_lock+0x1a3/0x1550 [ 404.509550][T19079] get_device_parent+0x16f/0x3a0 [ 404.515048][T19079] device_add+0x2e1/0xbb0 [ 404.519934][T19079] device_create+0x269/0x300 [ 404.525155][T19079] msr_device_create+0x33/0x50 [ 404.530469][T19079] cpuhp_invoke_callback+0x445/0x860 [ 404.536298][T19079] cpuhp_thread_fun+0x36b/0x780 [ 404.541685][T19079] smpboot_thread_fn+0x541/0xa50 [ 404.547162][T19079] kthread+0x389/0x470 [ 404.551773][T19079] ret_from_fork+0x514/0xb70 [ 404.556906][T19079] ret_from_fork_asm+0x1a/0x30 [ 404.562210][T19079] [ 404.562210][T19079] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 404.569883][T19079] cpuhp_thread_fun+0x127/0x780 [ 404.575366][T19079] smpboot_thread_fn+0x541/0xa50 [ 404.580837][T19079] kthread+0x389/0x470 [ 404.585447][T19079] ret_from_fork+0x514/0xb70 [ 404.590581][T19079] ret_from_fork_asm+0x1a/0x30 [ 404.595887][T19079] [ 404.595887][T19079] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 404.603671][T19079] cpus_read_lock+0x42/0x160 [ 404.608898][T19079] static_key_disable+0x12/0x20 [ 404.614377][T19079] __inet_hash_connect+0x25bb/0x25c0 [ 404.620296][T19079] tcp_v4_connect+0xd5f/0x19b0 [ 404.625604][T19079] __inet_stream_connect+0x25a/0xdd0 [ 404.631432][T19079] inet_stream_connect+0x66/0xa0 [ 404.636992][T19079] __sys_connect+0x312/0x450 [ 404.642124][T19079] __x64_sys_connect+0x7a/0x90 [ 404.647439][T19079] do_syscall_64+0x15f/0xf80 [ 404.652577][T19079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.659010][T19079] [ 404.659010][T19079] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 404.666679][T19079] lock_sock_nested+0x41/0x100 [ 404.671985][T19079] inet_shutdown+0x6a/0x390 [ 404.677028][T19079] nbd_mark_nsock_dead+0x2e9/0x560 [ 404.682764][T19079] recv_work+0x1c2e/0x1d40 [ 404.687725][T19079] process_scheduled_works+0xb5d/0x1860 [ 404.693810][T19079] worker_thread+0xa53/0xfc0 [ 404.698947][T19079] kthread+0x389/0x470 [ 404.703645][T19079] ret_from_fork+0x514/0xb70 [ 404.708777][T19079] ret_from_fork_asm+0x1a/0x30 [ 404.714080][T19079] [ 404.714080][T19079] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 404.721750][T19079] __mutex_lock+0x1a3/0x1550 [ 404.726875][T19079] nbd_queue_rq+0x37b/0x1100 [ 404.732011][T19079] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 404.738107][T19079] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 404.744982][T19079] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 404.751498][T19079] blk_mq_run_hw_queue+0x348/0x4f0 [ 404.757160][T19079] blk_mq_dispatch_list+0xd16/0xe10 [ 404.762907][T19079] blk_mq_flush_plug_list+0x48d/0x570 [ 404.768826][T19079] __blk_flush_plug+0x3ed/0x4d0 [ 404.774221][T19079] __submit_bio+0x28d/0x580 [ 404.779261][T19079] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 404.785455][T19079] block_read_full_folio+0x599/0x830 [ 404.791282][T19079] filemap_read_folio+0x137/0x3b0 [ 404.797052][T19079] do_read_cache_folio+0x358/0x590 [ 404.802717][T19079] read_part_sector+0xb6/0x2b0 [ 404.808117][T19079] adfspart_check_ICS+0xb1/0x960 [ 404.813717][T19079] bdev_disk_changed+0x817/0x1770 [ 404.819320][T19079] blkdev_get_whole+0x380/0x510 [ 404.824742][T19079] bdev_open+0x31e/0xd30 [ 404.829579][T19079] blkdev_open+0x470/0x610 [ 404.834544][T19079] do_dentry_open+0x785/0x14e0 [ 404.839847][T19079] vfs_open+0x3b/0x340 [ 404.844465][T19079] path_openat+0x2e08/0x3860 [ 404.849607][T19079] do_file_open+0x23e/0x4a0 [ 404.854825][T19079] do_sys_openat2+0x113/0x200 [ 404.860044][T19079] __x64_sys_openat+0x138/0x170 [ 404.865537][T19079] do_syscall_64+0x15f/0xf80 [ 404.870676][T19079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.877108][T19079] [ 404.877108][T19079] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 404.884354][T19079] __mutex_lock+0x1a3/0x1550 [ 404.889496][T19079] nbd_queue_rq+0xc6/0x1100 [ 404.894559][T19079] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 404.900651][T19079] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 404.907523][T19079] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 404.914042][T19079] blk_mq_run_hw_queue+0x348/0x4f0 [ 404.919693][T19079] blk_mq_dispatch_list+0xd16/0xe10 [ 404.925440][T19079] blk_mq_flush_plug_list+0x48d/0x570 [ 404.931356][T19079] __blk_flush_plug+0x3ed/0x4d0 [ 404.936765][T19079] __submit_bio+0x28d/0x580 [ 404.941811][T19079] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 404.947991][T19079] block_read_full_folio+0x599/0x830 [ 404.953922][T19079] filemap_read_folio+0x137/0x3b0 [ 404.959601][T19079] do_read_cache_folio+0x358/0x590 [ 404.965279][T19079] read_part_sector+0xb6/0x2b0 [ 404.970603][T19079] adfspart_check_ICS+0xb1/0x960 [ 404.976207][T19079] bdev_disk_changed+0x817/0x1770 [ 404.981869][T19079] blkdev_get_whole+0x380/0x510 [ 404.987279][T19079] bdev_open+0x31e/0xd30 [ 404.992158][T19079] blkdev_open+0x470/0x610 [ 404.997121][T19079] do_dentry_open+0x785/0x14e0 [ 405.002445][T19079] vfs_open+0x3b/0x340 [ 405.007068][T19079] path_openat+0x2e08/0x3860 [ 405.012216][T19079] do_file_open+0x23e/0x4a0 [ 405.017275][T19079] do_sys_openat2+0x113/0x200 [ 405.022513][T19079] __x64_sys_openat+0x138/0x170 [ 405.027920][T19079] do_syscall_64+0x15f/0xf80 [ 405.033060][T19079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.039576][T19079] [ 405.039576][T19079] -> #3 (set->srcu){.+.+}-{0:0}: [ 405.046742][T19079] __synchronize_srcu+0xca/0x300 [ 405.052224][T19079] elevator_switch+0x1e8/0x7a0 [ 405.057626][T19079] elevator_change+0x2cc/0x450 [ 405.062950][T19079] elevator_set_default+0x36c/0x430 [ 405.068703][T19079] blk_register_queue+0x3e9/0x4e0 [ 405.074310][T19079] __add_disk+0x677/0xd50 [ 405.079191][T19079] add_disk_fwnode+0xfb/0x480 [ 405.084410][T19079] nbd_dev_add+0x72c/0xb50 [ 405.089361][T19079] nbd_init+0x168/0x1f0 [ 405.094059][T19079] do_one_initcall+0x250/0x870 [ 405.099371][T19079] do_initcall_level+0x104/0x190 [ 405.104854][T19079] do_initcalls+0x59/0xa0 [ 405.109736][T19079] kernel_init_freeable+0x2a6/0x3e0 [ 405.115505][T19079] kernel_init+0x1d/0x1d0 [ 405.120378][T19079] ret_from_fork+0x514/0xb70 [ 405.125504][T19079] ret_from_fork_asm+0x1a/0x30 [ 405.130811][T19079] [ 405.130811][T19079] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 405.138824][T19079] __mutex_lock+0x1a3/0x1550 [ 405.143959][T19079] elevator_change+0x1b3/0x450 [ 405.149287][T19079] elevator_set_none+0xb5/0x140 [ 405.154703][T19079] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 405.161246][T19079] nbd_start_device+0x17f/0xb10 [ 405.166665][T19079] nbd_genl_connect+0x165b/0x1cf0 [ 405.172247][T19079] genl_family_rcv_msg_doit+0x22a/0x330 [ 405.178347][T19079] genl_rcv_msg+0x61c/0x7a0 [ 405.183401][T19079] netlink_rcv_skb+0x232/0x4b0 [ 405.188721][T19079] genl_rcv+0x28/0x40 [ 405.193244][T19079] netlink_unicast+0x75c/0x8e0 [ 405.198552][T19079] netlink_sendmsg+0x813/0xb40 [ 405.203866][T19079] ____sys_sendmsg+0x972/0x9f0 [ 405.209174][T19079] ___sys_sendmsg+0x2a5/0x360 [ 405.214493][T19079] __x64_sys_sendmsg+0x1bd/0x2a0 [ 405.220002][T19079] do_syscall_64+0x15f/0xf80 [ 405.225159][T19079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.231692][T19079] [ 405.231692][T19079] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 405.240324][T19079] blk_alloc_queue+0x546/0x680 [ 405.245642][T19079] __blk_mq_alloc_disk+0x197/0x390 [ 405.251289][T19079] nbd_dev_add+0x499/0xb50 [ 405.256266][T19079] nbd_init+0x168/0x1f0 [ 405.260958][T19079] do_one_initcall+0x250/0x870 [ 405.266264][T19079] do_initcall_level+0x104/0x190 [ 405.271743][T19079] do_initcalls+0x59/0xa0 [ 405.276621][T19079] kernel_init_freeable+0x2a6/0x3e0 [ 405.282370][T19079] kernel_init+0x1d/0x1d0 [ 405.287252][T19079] ret_from_fork+0x514/0xb70 [ 405.292384][T19079] ret_from_fork_asm+0x1a/0x30 [ 405.297691][T19079] [ 405.297691][T19079] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 405.304918][T19079] __lock_acquire+0x15a5/0x2cf0 [ 405.310309][T19079] lock_acquire+0x106/0x350 [ 405.315358][T19079] fs_reclaim_acquire+0x71/0x100 [ 405.320856][T19079] __kmalloc_cache_noprof+0x40/0x660 [ 405.326684][T19079] get_device_parent+0x255/0x3a0 [ 405.332253][T19079] device_add+0x2e1/0xbb0 [ 405.337216][T19079] firmware_fallback_sysfs+0x2e4/0xa30 [ 405.343225][T19079] _request_firmware+0x1052/0x1780 [ 405.348868][T19079] request_firmware+0x36/0x50 [ 405.354083][T19079] devlink_compat_flash_update+0x15a/0x2c0 [ 405.360439][T19079] dev_ethtool+0x1874/0x1ae0 [ 405.365569][T19079] dev_ioctl+0x392/0x1150 [ 405.370454][T19079] sock_do_ioctl+0x23e/0x320 [ 405.375591][T19079] sock_ioctl+0x5c6/0x7f0 [ 405.380481][T19079] __se_sys_ioctl+0xfc/0x170 [ 405.385627][T19079] do_syscall_64+0x15f/0xf80 [ 405.390790][T19079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.397325][T19079] [ 405.397325][T19079] other info that might help us debug this: [ 405.397325][T19079] [ 405.407563][T19079] Chain exists of: [ 405.407563][T19079] fs_reclaim --> cpuhp_state-up --> gdp_mutex [ 405.407563][T19079] [ 405.419670][T19079] Possible unsafe locking scenario: [ 405.419670][T19079] [ 405.427144][T19079] CPU0 CPU1 [ 405.432517][T19079] ---- ---- [ 405.437890][T19079] lock(gdp_mutex); [ 405.441821][T19079] lock(cpuhp_state-up); [ 405.448682][T19079] lock(gdp_mutex); [ 405.455114][T19079] lock(fs_reclaim); [ 405.459195][T19079] [ 405.459195][T19079] *** DEADLOCK *** [ 405.459195][T19079] [ 405.467357][T19079] 3 locks held by syz.4.3656/19079: [ 405.472568][T19079] #0: ffff88805512a258 (&devlink->lock_key#8){+.+.}-{4:4}, at: devlink_compat_flash_update+0xa6/0x2c0 [ 405.483671][T19079] #1: ffffffff8e7f99e8 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 405.494081][T19079] #2: ffffffff8f38e700 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 405.503510][T19079] [ 405.503510][T19079] stack backtrace: [ 405.509422][T19079] CPU: 0 UID: 0 PID: 19079 Comm: syz.4.3656 Not tainted syzkaller #0 PREEMPT(full) [ 405.509444][T19079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 405.509462][T19079] Call Trace: [ 405.509472][T19079] [ 405.509484][T19079] dump_stack_lvl+0xe8/0x150 [ 405.509507][T19079] print_circular_bug+0x2e1/0x300 [ 405.509533][T19079] check_noncircular+0x12e/0x150 [ 405.509560][T19079] __lock_acquire+0x15a5/0x2cf0 [ 405.509583][T19079] ? lockdep_unlock+0x5d/0xd0 [ 405.509598][T19079] ? __lock_acquire+0x146e/0x2cf0 [ 405.509618][T19079] ? __mutex_lock+0x319/0x1550 [ 405.509638][T19079] ? __kmalloc_cache_noprof+0x40/0x660 [ 405.509662][T19079] lock_acquire+0x106/0x350 [ 405.509680][T19079] ? __kmalloc_cache_noprof+0x40/0x660 [ 405.509711][T19079] fs_reclaim_acquire+0x71/0x100 [ 405.509737][T19079] ? __kmalloc_cache_noprof+0x40/0x660 [ 405.509762][T19079] __kmalloc_cache_noprof+0x40/0x660 [ 405.509787][T19079] ? get_device_parent+0x255/0x3a0 [ 405.509807][T19079] ? do_raw_spin_unlock+0xf5/0x210 [ 405.509835][T19079] get_device_parent+0x255/0x3a0 [ 405.509857][T19079] device_add+0x2e1/0xbb0 [ 405.509879][T19079] firmware_fallback_sysfs+0x2e4/0xa30 [ 405.509900][T19079] ? kfree+0x1c5/0x640 [ 405.509924][T19079] _request_firmware+0x1052/0x1780 [ 405.509950][T19079] ? __pfx__request_firmware+0x10/0x10 [ 405.509967][T19079] ? xa_get_mark+0x6fc/0x7b0 [ 405.509989][T19079] request_firmware+0x36/0x50 [ 405.510007][T19079] devlink_compat_flash_update+0x15a/0x2c0 [ 405.510038][T19079] ? __pfx_netdev_run_todo+0x10/0x10 [ 405.510056][T19079] ? __pfx_devlink_compat_flash_update+0x10/0x10 [ 405.510087][T19079] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 405.510114][T19079] dev_ethtool+0x1874/0x1ae0 [ 405.510139][T19079] ? __pfx_dev_ethtool+0x10/0x10 [ 405.510156][T19079] ? dev_load+0x21/0x1f0 [ 405.510185][T19079] ? dev_load+0x21/0x1f0 [ 405.510207][T19079] dev_ioctl+0x392/0x1150 [ 405.510231][T19079] sock_do_ioctl+0x23e/0x320 [ 405.510251][T19079] ? __pfx_sock_do_ioctl+0x10/0x10 [ 405.510269][T19079] ? do_futex+0x395/0x420 [ 405.510296][T19079] sock_ioctl+0x5c6/0x7f0 [ 405.510315][T19079] ? __pfx_sock_ioctl+0x10/0x10 [ 405.510333][T19079] ? __fget_files+0x2a/0x420 [ 405.510353][T19079] ? __fget_files+0x3a0/0x420 [ 405.510374][T19079] ? __fget_files+0x2a/0x420 [ 405.510396][T19079] ? bpf_lsm_file_ioctl+0x9/0x20 [ 405.510422][T19079] ? __pfx_sock_ioctl+0x10/0x10 [ 405.510440][T19079] __se_sys_ioctl+0xfc/0x170 [ 405.510466][T19079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.510490][T19079] do_syscall_64+0x15f/0xf80 [ 405.510517][T19079] ? trace_irq_disable+0x3b/0x140 [ 405.510544][T19079] ? clear_bhb_loop+0x40/0x90 [ 405.510564][T19079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.510581][T19079] RIP: 0033:0x7f40bdf9ce59 [ 405.510606][T19079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.510622][T19079] RSP: 002b:00007f40bee07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.510641][T19079] RAX: ffffffffffffffda RBX: 00007f40be215fa0 RCX: 00007f40bdf9ce59 [ 405.510655][T19079] RDX: 0000200000000100 RSI: 0000000000008946 RDI: 0000000000000004 [ 405.510666][T19079] RBP: 00007f40be032d6f R08: 0000000000000000 R09: 0000000000000000 [ 405.510678][T19079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.510688][T19079] R13: 00007f40be216038 R14: 00007f40be215fa0 R15: 00007ffdb0429fe8 [ 405.510710][T19079] [ 405.894204][T19105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3661'. [ 405.910438][T19105] veth1_to_team: entered promiscuous mode [ 405.938500][T19105] gretap0: entered promiscuous mode [ 405.958834][T19105] hsr1: entered promiscuous mode