last executing test programs: 2.844145632s ago: executing program 3 (id=1799): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000001340)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4c, &(0x7f0000000040), 0x4) (async) socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000040)=0x8) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r4 = accept4$alg(r1, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/135, 0x87}], 0x1}, 0x6}], 0x1, 0x10000, 0x0) (async) sendmmsg$alg(r4, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="5cafbb19415082dc2d68ffed07036d0d5efb9b5b4aa4e9a4d27912e19aae487301239d3937561ccd182963aaec4f0da35db9774e343ed1481e4654a186e66f54441b06277fdce96084f808db6c16958d2e26bc2aed9ff05a186dd1275539ebe1290f9fe485bef994029e46888f17e178c7fee7c96eccf5ba47c10a0279e7ca7af27cc9916bd8c60fe999c0c2f044f8333028438bbf945070d290aa78a328d79addc16966ca29b99966324138b25de75739", 0xb1}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x8810) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) (async, rerun: 32) r6 = socket(0x2d, 0x2, 0x0) (rerun: 32) connect$qrtr(r6, &(0x7f00000002c0)={0x2d, 0x0, 0x8000}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000000000000095000000000000009500000000000200"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x1}, 0x90) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 2.383200031s ago: executing program 1 (id=1811): r0 = socket(0x840000000002, 0x3, 0x9) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8001}]}, @dstopts={0x62}], @echo_reply}}}}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "4c281266af3c547d", "cd7bdc15f301819a48ac46bd4a0f6246", "79cb7ad2", "a08dabd5701dd4ff"}, 0x28) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x1b8, 0x206, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0xffffffff, 0x0, 'tunl0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x1}, 0x1ea, 0xc0, 0x120, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket3={{0x28}, 0x1}, @common=@icmp={{0x28}, {0x12, "e07c", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x2, 0x3, 0x1, 0x2, 0x7], 0x2, 0x5}, {0x0, [0x3, 0x6f455bfb4ce26171, 0x6, 0x6, 0x2, 0x21debfafc4f76fce], 0x3}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xe2002454fb7b9fcc, 0xff, 'team0\x00', 'gre0\x00', {}, {0xff}, 0x8, 0x2, 0x5}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0xf9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) 2.322441916s ago: executing program 1 (id=1812): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x30, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) r1 = socket(0x18, 0x5, 0x1) getsockname$packet(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xff07, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@typed={0x7, 0xb, 0x0, 0x0, @str='\x05\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0xf, 0x0, 0x2, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0}, 0x40) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x25, 0x7f, 0x4, 0x2, @remote, @mcast2, 0x8, 0x8000, 0xffff, 0x2}}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000020601036c0000000000000000000000050005000a000000050001000600000005000400000000000900020073797a320000000010000300686173683a69702c6d616300140007800800120000000000080008"], 0x5c}}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl1\x00', r6, 0x4, 0x7, 0x6, 0xff, 0x15, @private2, @mcast1, 0x8000, 0x7800, 0x6, 0x2e}}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x13}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x7, "bf32568d2fd41b329a5f8a92fc91d2ff"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000800}, 0x4000010) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@ifindex=r4, r2, 0x11, 0x20, 0x0, @void, @void, @void, @value=r9, r3}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x30, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) (async) socket(0x18, 0x5, 0x1) (async) getsockname$packet(r1, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xff07, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@typed={0x7, 0xb, 0x0, 0x0, @str='\x05\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0xf, 0x0, 0x2, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0]}, 0x40) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x25, 0x7f, 0x4, 0x2, @remote, @mcast2, 0x8, 0x8000, 0xffff, 0x2}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000020601036c0000000000000000000000050005000a000000050001000600000005000400000000000900020073797a320000000010000300686173683a69702c6d616300140007800800120000000000080008"], 0x5c}}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl1\x00', r6, 0x4, 0x7, 0x6, 0xff, 0x15, @private2, @mcast1, 0x8000, 0x7800, 0x6, 0x2e}}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x13}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x7, "bf32568d2fd41b329a5f8a92fc91d2ff"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000800}, 0x4000010) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340), 0x8) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@ifindex=r4, r2, 0x11, 0x20, 0x0, @void, @void, @void, @value=r9, r3}, 0x20) (async) 2.233304837s ago: executing program 2 (id=1813): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x3}]}}}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) 2.060347011s ago: executing program 0 (id=1815): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) (async) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getpeername$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000180)={0x62, 0xc, 0x0, 0x6, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @loopback, @dev={0xfe, 0x80, '\x00', 0x36}, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, 0x68) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELCHAIN={0x104, 0x5, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0xe6, 0xc, "e3eee799a548278281a4042a3c3b2a8a8ce024ad1042d94910f717c6de94bd25b81dced780b03af2117da1c67390d1cd078915963c8f930ac914470063fc83893891ec7aad4cc7a54359c6b743b9989d3d39ebc0f75a0d3c83ff896122f35e9b7aef0537695f55787605a5b889253bb2c72df64000c96a7a3be5d4041539f81948833a6ce2336a19f3e4e9394a90e72a4bdd386913679ce99df20f07d6c85309fba96adf0097be3bb9f87e7cac5a4ef70e73390a89893b57c7ae8f492ed0e8b66dba7e82462dfe6c4870e4f41194f836a1b91792e9fbdd8a70998d0ace5a6b46f046"}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x3c, 0x18, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0xc4, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x26, 0x6, "d2e2de9ab16816d7d274452af9e87e60965ac79da53160709c716f68b514be9ed5e6"}, @NFTA_TABLE_USERDATA={0x43, 0x6, "13f34ec8709a50c4cadeba97483a4f1771d849be6a20e73d1c84eb4c8517af2b440b7c434bca253ca00ec33218128edafdfa4a0b3f9ddb095ac90ff8af56bb"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x12c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xe8, 0x7, 0x1, 0x0, "7fe1e96414987e5dc49e1e92e9961f6b98eb96b9ad92ddcc64817ea2f36445aa218af6575a336c869cac0d35c76c24992d561a76a2607393c1ce04b3b33e1e2c2b4f205d415f11da4da1df054c45d36f88f71a2a299abb949684ecc9d26b40bda5c7b252c27a7d93593df7d69bff7f26cb6d1337c968b0687e7f38dabbba5057f7101b422f4d5f31fbdbb343a9b317042730649bf5a9415d250609842f2b8bc114d921aad5afeb7cda0a06de341e8b708d66099c4d3604d3947af4a2b7ea133ec9980c2890850d11e50eaba914f21103dfb38181b87397a1054e64b6cfb782b592ce5c2e"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}]}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x98, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x7b, 0x6, "ae7c88c235c29b04733a865d142199ea62681e2ef884e91cee1cbf8ed95c4e396abdcd3260d58276811420139692e5b80d6bd9ec63caddf4d8ecac96f0ffa9d3fb3aa060a5d2c4bdd0fe037a0cb6ec19913250dbeff9a82b41c2441f1cde4e7dac35d27588cf895a3e2fcbf359013101c2ed8b813abb03"}]}], {0x14}}, 0x474}, 0x1, 0x0, 0x0, 0x8001}, 0xd0) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000008c0)={{r1, &(0x7f0000000740)='^]/\x00', 0x400800, &(0x7f0000000780)={@align=0x6, {0x0, 0x0, 0xa72, 0x1dac6d6}}, 0x401, &(0x7f00000007c0)={@_ha_fsid}, &(0x7f0000000800)=0x3}, {[0xfffffa11, 0x12000000, 0xffff79f4, 0x30b69c6a]}, 0x4, 0x4b, &(0x7f0000000840)=""/75}) bind$l2tp6(r3, &(0x7f0000000940)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x3}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000980)={'syz_tun\x00'}) (async) bind$x25(r3, &(0x7f00000009c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r3, 0x0, 0x1000, 0x48, &(0x7f0000000a00)="a48782bb8b3e6e106d920311f2113c6025f88f2ae336cce2bc1e6a98ca0d0b953f519f3b5c05746c7b1049585f797c299fd4b08aa3cac09c9b5e5708cb72bbacc67c18e1eeeccf5125fbddbaaa98deb491dcdea8b782ab7f07f083353c0e16a04c19b1de592f8b70d37633982d88753c96e4399b6fcfc3f1fab9f8b017b5be33012790e67ca7a8cf4d72b528dd8ff1e53b51ec5219ec73713b4ef41b2505e83b5a23c0ba09dfa4e7130f78bbab1284d284736a0f577671725c980f58799a7d96bc222024ae10138bb4e155a3b4ea277645c2e43fee97edab39128e0218f3be5b09f02cb9bbf720c64dad870f23f59b48f06bdfc2e1e0bcf9c874acfac1bbbc961ac8bfbf322598306bb5efa2bd347f4a50b215c6bfa32537755c417f9ab447fefc2a6ccab0414aee7ca780d3b6f8058f7f5c3fbbfaebdfd1bbb57a062692d951ab1655c4abb6605381546cc3e2b8d5858aba55048d84dccefaf9f6175b0a3db0784eadddab318e616b2181b68517fd1048775a7423784b6abe5122696ba21044c5f02268666229c523fb7be53b98f07a3709f5d2e01de227d2fd166fd173955e377cffd2af62ef9060f6955f7adb3fc224a070c7b5f4a509359d91571cf596652c6c61b91ad6d98a65be4b0d48f519ef93d34299cabef9adac70caeeeb7afcdd0b1491c7df7a569210fedd242063b8ebcf9e16d0c30d92ecc04a1b32a4e74b6d43f4a0f8d46a4b7d50679b40eb91c3d57c5548d12da241d0e38b9b366c30d10e926a4b9b621dee7a8577f8fd32e9e3a15ac585fb7bd900d2a3d760e6ef88651b4095c84e35fbd8cb08568fc5c941090d95b684f202f565b27afd9166f98e107a0d0c75e142fc954a61fd0be929976b63a90779901378144b80d5b94cc390ac3d62e7b3b67a97e5c77b08a982e2e7cbb018767bc53227ffc5237b044757f745b6f74feae3beb06f0822afb7c007af27263b1525b6545be1f780e42bd16d917b8cdbd67fc9f74165797f6935bedf92322c4a6507d089ddc7d3435d6e62c307291a1724b9bf41728d47206198a77ddd60382ef867abb353ec91e0051a032a099f130f8f5820af67f5a6fc3806c64428bad0e1ae03f86e46dca7155fbf15da69277ff89d7af7e1402ef6b2382f4f2093a617d176a9393350c8278c147a11f0f045ed92877e40f39ca04d802ae784dc8bd056861f57a92ff2f4a13fb450518085d724d55575b6189b26d16869a04e9b78d8602c23d3348468330ba7a27da59d7095678d15d22ad25d6691f301a97044c91f2c99a2a2ada25a68a07df60fd014bc3877c66e3a267c937a8119903fe6ff2d7ccf704c5378689b7e690119c612cb455f9f75e8f2d0e8e3bc4c18029bb1e96ba1c304354ba24243ac23caa2d2a060f0d6f81d6ccd6e33b2a2ebcfbf43aafab38160230cf69add24995f4437d16a1b133c97b52eca170da3e34c87766594de69ccc4b47f570e1555712b438d8f22bcdb8ee63c42671ecf48d04165606d080af359bb533b3745b6dbeeda667c261bc91d70b22c623e89b489e2d92669389b75a9dc158ba957424e858860989b5c8b6b28f9134a27182c137a6f4508dbf43ce2435b54791e26a2595a6c095c039f0c7e6c876bcb78be365273e2b9829fa0af8f8011f02c13104d04d230096853e898f8a9e45fc161f0d8a87a2570f70cbbd8111ecace2d4b613c1ce245f47eaaf738740fa789dbe62e9674fde5e0670d02f0aa37a808a7ef780649fd2e3d22d24e5f4196a804abb7ecc539270a272c7325b4872ba0ef6e983200963277c666d3079ba13f6978af0ef0b54b4c2cbc0efcf7d81a423a77addae51e72ee9b6330b347d2265af5a79a33484e4f7acef094784b6fb4ee08d84c4413f0fb961b149fd4c3300f330e70df0dfa79b744230e3cff24a4f82a559faa930df2dca01bc3de416d62a414bceba5e4c907aa432c85999e62a1b425f8dac14e208772f02185a4c8f0cfa60ac353f2f41608e388501e418c52c0a0258358e174b1f1861b9a6fcdfdb091a0d46ea478ab5404e9a41fb0334fd7c424c9ff6b7f190a1fca9d1b6425485e3b5ee9429f23a20279d842b3ae5e1ef892b14c70d4acaf1bb2fea8088c83e5b29f60409e361e79194a64af8e213ecb43922861c241a64e658e20a2c8871d3b443971c0a2675da8bfaf9310b39156a6ba07c81e0edac503875850cab62dd5d50fc31d7ae1af5fa0abcd012f3bb465cc64303ec81ef9dde5d58a91fb9e98936619ab608be626451ab346a39e82ead3e37ebee39093317dd5a7d79d51a368460e693fb734c10acd74aa1a96bfeda33943d54ccc70d8706afcf2df5c1b6f6f1229c01e7d430c341d296cefcf423287e611d0fac2ffc5168f2939cce4d163b79a67a71cde10d7b0ba20fe667b69f4c1d90698253a7ce9f94dd0eda2897204b74c90db43ed1ddc4a9298451e9a39e2243f1985407fb93dbcbe4a455cd3444b10b1fd2b77fe38b73b4c6be66d26e1618b2b239541207230cb492fc71d1c94b9f67526643c3c0cc184a296260e094513c094d81455583b8ed0b3bee5dc91d905313b4edf2e1770a7eac0f399fc5635aa1d3bd8c6bafac683899fd8a6f4ca306c5d86b32ba6c6e6ccc9b0caab0eb29b23ca0cb81ba1d7007a55bf781a49781a64e9bedb7e1ffe4d0843406e8af223c90eb2653ee68482f1ac6ee5b2931c0931231e578116fca6c11873a3b24a42592a0c03e85d99750d861c587930196886ea56d25ba942df2ed070a52389a3f01007e09fb6be0c9f4634b08243c813da07972cd20246683c3af7678ede16d797e6b5f89e56af319068e5f79e99b31fb80ebcbe87ec30e82b4b430d2fb0d45328e423628d9c03becb9d829199b0fe5c6c88c0512e88dcb435168f16a9779d33b1c23c45ec464ceb88053c78419eadb6f0ab25aa3808f214723f9bdbb273b638bd1e4587635034e0907b8744549adba698a45ec22d03ed7726fa99fda102b8230aa45951aa29ca465308892872171559cbb17b23400650f28c617a68d8fd7e27ae5a2bacbb8f78e2473e0d27cd46c8c6dbbcd9f7e388740104fe63a10c0f9080944b44e588eabcb254c4c5bbf658783ddb3ef8c39f690109f900f4ac62732c76bc0608d52ab5d967266fc202ee7bcb604042b46f26ae20fec3d4083f7ef6ede3a99af43a6615d89234ad1367d18bd1f533b255250ac717ceaed3751a14c705a2eefb4143a599bc2aab2a11599c59e9a037fa48dafdf543209cdc75324cbaae64d8d67c822a342002efb1008964796540bd24c7f4927d228fd8a5e2870ad9e4cc512a8e49ea518d33942c7c5899fdb8120b026a5539617bacdfc933c390c08048cc7a06eaee51982f98992b6547d1cad6409f5d50c6d18d068360c90ecb093e236311c43bb8191aa64bc8ef4a1b97e35ab9885f5de8096ea7fab7e6f7e7c1e0c51d1167f732bb4e2ffccb81ed40e4b5854bc4b8a26c3c1562793b908f6bc00487ef7761c3cf5784a2e1f97b496bda8e75efd76bf2930634f966737805435c06be84095067d46494a480b581772430890aecdabd1291e72bd439f6c5860b84d5134f5ebf580e68618cdc35f0cd9445e16d29d951139f4edb9b597b9ab67d26fcdab13fdae791bb01e366d08cf77614cd896b6f034f84709d5d3ce6188f677a50fc26731c654a41aeb3f8bd9d8120bef99cda0de916361a3ab87ed73aac086d50e1f72f64f8f13c1f4749625acd748e1cedd18dcb3572ca06cd4627b0d4dce4047b987ce44a9713bc160cc0d80bac78bf2fcf89bbfc43ab2d8de5e6a3a1bed1cfa179fe10c3ad1deaff2381fc3a92c26778697cd395fa2033752995c822f0f907c02aa41663cb3683696a026302a7811acf396a9ba2c9204a11045b625347e9013ccf1a8326810ce97b37739a464c0b23e17b5e0134ef496699a2e4568d86b5b11e5531c046fd4d998098feb1bbdf84c1b05148215ec210715a8dd0e15241c0bb9d7432ae7cc879b6010b1b7e883148873d1c65ae0196b2bac4b86f0f0bee63f7762460a969645d03d20b4f4eea1a387084af7b99262d61105d866dd8b2492561e8971c508eaff245e6e38f31d605f20e88dc3f0a61ed355cbb23be95a68722f3f5c34e0ff56a93ccf57e46b0144d4125c2a0607076c8b9a394bcef47e3e4904410595ed2a54ed1dfc1b9613f3c9f76e4dba3e453492429c9c9c956458dfb130b33f27066c1e6924fcc0e54fb0ff3bad0475f88f5dd34593d07c934102e0be5a57de0fda654bbe4c695d9f3a67deb2a44bbc52f786c30f0b4e3331d6b82072dd040f2e25633f03e78636423d197723c3bfce30ed42c8312b012bb288d1d7ce30cb128b30bf1b647b35254091a4c2ccf36aa75df244283fc721c748321c1e537070c476dcc83662a563a7a39e6343b786de451e2733b5190323cc9d1d65a6eef4cc0e26ed4a78e8eedec92773b6cf72a938ac1e92ff0dd8a8e9e617e46aefd02cdbfc7b7279c1dee19c38cb0b50bbb54ac5f64c79d946607f109dc97d5188f9e3e4b35bcc5bab8766c9b52597067a1dd2d1f1e437409c0898a5e99f30e47a9ef58dc0b07dc45864470132b2323b91b1800ddc1bda5d98cec6096f4be28d7f4f83668c444d28cf0f06f49c7a23fbca7cb1475069bf9e9ffe971ab7c7c95644fbacbbeb9d5f226891aefd7652f58fd456ea53abcc678505423b4a1f82d46c19079fc65a1f971a062067c1b151e2b349f97b2451cc355d5110058b7aeb65c61362e0c05c5f905a64f6c78aa8f0fc96ecd0819826a48a1bccdcdc4f91ed0c76ce9ed96c31611287089ea10ca3b7b8cb5de30a09e0803cd96b700e97bbc74c97c2db3c808bc7066f869948b99bae00778f7843fea2476b8bd4ed7b3d1329cbba46eb3cbd0bf0e3001f269dafc592a81ef51ff22eec7cee2f31bc9d4f3092b0cb98d02c5c43c6fd223fb056f6deecaca143ab878351c1569c97be2ff94d1c1caabdc0f0dc42bd0b30f6d59e1dfdca5d3761919bad6c934bb9b4594852b380e85244decdc6ed4d94148badeab2a0dbbb834db34966ea20c1e174f52e3b82eaabc531050a298aa23885ee3a3f0c3f6f43d3a7c60c15bed96d6a6f9a00e4550264d371a45159342c21711b9d79632aa5534488b7be9d1353d653696034fabc8fb91d09b9e480b65c07c91fa4530291df06839a824ea79d1ea3dab833afdccf3c9990998eae2c85214f583dd6a523d84d6c1f54b635d3de7e1b3e9f5dcb0001ddca2ecaffe908757f1fa1fe8a5122d0b18d0f71cdc981cb3334a819224a6a3cd2f84f0df9ec0045d9b75718209b5676a459803e4208d87ae6b5fafae89a4d1ec3478c716077740ec44b187b894a68c4587cc8600896e718bc86519175e62be76b2bd62145765f0928eef7311b230d885a97527027a0cfbb249e201d1453d441d1b0362243411a1767f52a55bc0650fdc5264d86b112d635650fc144a443ae5821ecb3232b3c9859fc022c79769e9d5e78fe3f5032fbb1c2f3cac16fa2a8312ae40ba84035739a2a72863ee5086dbb4db21f8d73f41d905d2dd11d0b5aee7295663b2f8b3a48a8b73438ba0b2ff5513ea1ffd38a14b30ff8ba7e90684362101f4e138f82457692236ed8702556d87400fe64b70f4c980fbcff9adc7ecac9e30fed385bae5b2a0ae2ddba4d36ca3eee11e5ae563217f3cc9082a322d716b8472db34c1c5b6ac284af81563c84339235fb1f3ac6f4c56f19cb7a502005e6b66d928012b3b39cb5a2e7fbcca5882f15abbe8f8a20f6236462cbe75820a3ce6a6390391620229", &(0x7f0000001a00)=""/72, 0x3, 0x0, 0xb2, 0x7e, &(0x7f0000001a80)="2b0ee7303d1b9d692db7e048cd885b5537d1a7fd41e879d65934095f6a6d2c23168a5595e44ced8992ba5a5b685c1c9522e36db430e1e09d8ff6708567f5a55590ce677595b899c6dcafc53fb340343e095f98750928e2da84295a3bf574a672dd1d949e2e59740077224ae98540c045a6393856187eb6de72c2a2b9a2dd1b68cc562829c3730d299f609c231e06a5194f3ba1b7e60e3dd5e6bc4c8aa80d1cd6bb21660c2ddecf2c72996b87270e6a6fe2ab", &(0x7f0000001b40)="4d04478eddfdae1097c4a908489d290d2914ea102babfe58a5f43a403b53df5c6dddde488db1c4eaa5709872f2f8f94718d1e70d62c93e5c7c299528eb6de881ad223ba3c834e70414f24d117e9b954623b74fedb4c9341b68ac129e5f86af474592dd5572686700612ee79bbe9d2dfdca56ea61219a2376c8d0ea99c848", 0x5, 0x0, 0x2}, 0x50) (async, rerun: 32) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001c40)={'dvmrp0\x00'}) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000001c80)={0xffffffffffffffff}) bind$bt_l2cap(r5, &(0x7f0000001d00)={0x1f, 0x8, @any, 0x7, 0x1}, 0xe) (async, rerun: 64) getpeername$netlink(r5, &(0x7f0000001d40), &(0x7f0000001d80)=0xc) (async, rerun: 64) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000001e00)={0x8673, 0x10, [0x101, 0x5, 0x200, 0xfffffffffffffffb], &(0x7f0000001dc0)=[0x0, 0x0]}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r5) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000001fc0)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x58, r6, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x40810}, 0x11) (async) sendmsg$NFT_MSG_GETSET(r3, &(0x7f00000020c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x3c, 0xa, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1f}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x8000000) (async, rerun: 32) ioctl$sock_inet6_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000002100)) (async, rerun: 32) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000002140)=0x2) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000002180)={0x1ff}, 0x4) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$XFS_IOC_FSGEOMETRY_V4(r8, 0x8070587c, &(0x7f00000021c0)) (async, rerun: 32) ioctl$F2FS_IOC_FLUSH_DEVICE(r5, 0x4008f50a, &(0x7f0000002240)={0x200, 0x1}) (async, rerun: 32) ioctl$VFAT_IOCTL_READDIR_SHORT(r8, 0x82307202, &(0x7f0000002280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async, rerun: 32) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000024c0)={0x1, 0x101, 0xffffff4f, 0x3}, 0x10) (rerun: 32) 1.984417828s ago: executing program 1 (id=1817): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt(r1, 0xff, 0x1, 0x0, 0x0) 1.984103594s ago: executing program 2 (id=1818): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff0d00"/20, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="080004"], 0x4c}}, 0x0) 1.866832966s ago: executing program 0 (id=1819): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="b702000024000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80c0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57abb19700f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d58625cf9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333aab1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486d65ceec8bcaffbe800a041a378b40dc9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d75007606000000b2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a082c5242c8fa7f01e0873c9c5c604108ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a0338c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b198246d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e9101734a9e9c6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000000de00d23dd63b7761d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a38e7868dc32e132124ecf52327631b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f2a70d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd038c1817f0d4652a29353b05b16b3c5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df625a47bade4ba41ee014184395a479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2a65246779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04edac11aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f41253a8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd020000000000000000000000d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a244609ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e7a5dd7503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d58bb5603895f265685fdd11263c946f8ef3ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0fb92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c8e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a18668298a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c1423cd597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a9adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cfa48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89f11a300510776934e87bb3c21394f46954a012b2a3b0760f1bad1dbd6b466ed7153bd18ee2c0b2353c38df9e0782eb"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0x33, 0x0, &(0x7f00000000c0)="b907ef19edfff007049e0ff0888e72e9eb17e12ce4f2ffc3d4b8743c2873208a9eca5493c9b6f0ac22c61df8ad86c7577c702f", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x48, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r4, 0x51b0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r2, &(0x7f0000000580)='o', 0x1, 0x4, &(0x7f0000000180)={0x11, 0x8100, r4, 0x1, 0xe9, 0x6, @local}, 0x14) 1.775684441s ago: executing program 2 (id=1820): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffffc, 0x3}}]}]}]}, 0x48}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0842, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffffc, 0x3}}]}]}]}, 0x48}}, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0842, 0x0) (async) 1.708954707s ago: executing program 1 (id=1821): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=@newtaction={0x14, 0x76, 0x1}, 0x14}}, 0x0) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r2, 0x6f6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x4, 0x405}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048084}, 0x240cc080) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000001080015400000000344001080080002400000000008000340000007ff0800014000000003080002400000100008000240000000050800034000000364080001400000010108000140ffff77ff00"/96], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4000841) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2000) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc040ff0b, 0x110c2300fe) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) socket$nl_route(0x10, 0x3, 0x0) 1.708672329s ago: executing program 3 (id=1822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) 1.702852107s ago: executing program 4 (id=1823): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r1 = socket(0x18, 0x0, 0x0) close(r1) socket$can_j1939(0x1d, 0x2, 0x7) getsockname$packet(r1, 0x0, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1.669091127s ago: executing program 0 (id=1824): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x2, 0x328, 0x140, 0xa8, 0xfeffffff, 0x140, 0x1e8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @multicast2, @rand_addr, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xa8}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @local}}}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}, @multicast2, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000080)='syz1\x00', 0x1ff) openat$cgroup_pressure(r6, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x1) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x3, 0xc}, {0xfff3, 0x8}, {0x7, 0xf}}, [@q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x13}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8000}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000844}, 0x20004000) 1.600845097s ago: executing program 2 (id=1825): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r1, &(0x7f0000000140), 0xfffffdef) write$cgroup_subtree(r1, 0x0, 0xfffffeb0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000300)={&(0x7f0000000140)=""/90, 0x5a, 0x0, &(0x7f00000002c0)=""/47, 0x2f}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000c, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000880)=@newtfilter={0x478, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xd, 0x5}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x20000000, 0x2, 0x7, 0x80000000, {0x6, 0x1, 0x3, 0x6, 0x200, 0xc6}, {0x0, 0x0, 0x1, 0x5, 0x4, 0x10001}, 0x7fffffff, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0xaffd, 0x3, 0x3, 0x1, 0x2, 0x6327, 0x8, 0x0, 0x40, 0x1, 0x3, 0x8, 0x7, 0xfffffff9, 0xffffffff, 0x80000000, 0x1, 0xc3, 0x10, 0x5, 0x200, 0x7, 0x7, 0x7d, 0x0, 0x80, 0x6, 0xfffffffd, 0x7f, 0x9, 0x400, 0x0, 0x7, 0x1, 0x2, 0x40, 0xfffffff9, 0xffffffff, 0x1, 0x1, 0x400, 0xfffffffe, 0x3, 0x0, 0x5, 0x4, 0x4, 0xfffff800, 0x4, 0x401, 0x3, 0x7fffffff, 0x1, 0x1, 0x8001, 0xf, 0x2f37, 0x6, 0x9, 0x4, 0x5, 0x101, 0x83, 0x1, 0x4, 0x7, 0x58b, 0x8f, 0x8001, 0x3, 0x5, 0x6, 0x80, 0x5, 0x81, 0x3, 0x7, 0x0, 0x3, 0xd3aa, 0xc690, 0x800, 0x3, 0x1, 0x0, 0x9, 0x0, 0x4, 0x10, 0xac3, 0x9, 0x728, 0x1, 0x0, 0x3, 0x8001, 0x7, 0x1, 0x8000, 0xa1f9, 0x2, 0x8, 0x0, 0x5415, 0xf1, 0x3, 0x7fffffff, 0xbb35, 0x1, 0x4, 0x0, 0x0, 0x5, 0xac, 0x7ff, 0x4, 0x1, 0x4, 0x4, 0x8000, 0x10, 0x7f, 0x8, 0x6, 0x2, 0x8, 0x800, 0x7, 0x9a2e, 0x1398, 0x5, 0xf7b1, 0x7fffffff, 0x5, 0x7f, 0x4, 0x5, 0x1000, 0x0, 0x5, 0xb, 0x0, 0x5, 0x7, 0x6, 0x6, 0x7, 0x0, 0x8, 0x6, 0xb03c, 0x7, 0x7ff, 0x80000001, 0x7fff, 0xffffffff, 0x6, 0x9, 0x9, 0x5, 0x200, 0x7fff, 0x1, 0x5, 0x6, 0x0, 0x80000000, 0x5, 0x80, 0x9, 0x7, 0x8, 0x363, 0x610b, 0xfff, 0x8, 0x4, 0x9, 0x6, 0x2, 0xffffffff, 0x2, 0x2, 0x1, 0x1, 0x10, 0x2, 0xd9, 0x0, 0xffff2dae, 0x7fff, 0x6, 0x7, 0x6b85, 0x8, 0x5, 0x5, 0xffff, 0x0, 0x80, 0x6, 0x4, 0x11a1, 0x0, 0xf3, 0x1, 0x2, 0xb5, 0x4, 0x7, 0x0, 0x7ff, 0x4, 0x4, 0xc585, 0x10001, 0x5bb7, 0x3, 0x1, 0x5, 0x4, 0x8001, 0x8, 0x9, 0x9, 0x94, 0x3, 0xb, 0x4, 0x63, 0x1, 0x9, 0x1000, 0x1, 0x6, 0x8, 0x6d1, 0x0, 0x9, 0x5, 0x400, 0x81, 0x401, 0x7, 0x5, 0x4d, 0x2, 0x8d46, 0x4, 0x81, 0xff, 0xfd9, 0x7, 0x5ad, 0x7, 0x16b3]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003600010000000000fcdbdf250701f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.598030677s ago: executing program 3 (id=1826): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$802154_raw(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)="19d8e5", 0x3}, 0x1, 0x0, 0x0, 0x54}, 0x810) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000001800010000000000000000001d0100000800050000fd000008000900", @ANYRES32=0x0, @ANYBLOB="05000d000100000008000a00", @ANYRES32=0x0, @ANYBLOB="15000100000000000000e2020000000000000070040000000c000b00000000000000000008"], 0x60}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f000b000000080026000816"], 0x40}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0x890b, &(0x7f0000001480)={{0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xf00, 0x0, 0x3, 0x0, 0x0, 0x6, 0x1, 0x3}}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 1.512856732s ago: executing program 0 (id=1827): r0 = socket(0xa, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000300)={r0, &(0x7f0000000000)='nfc\x00', 0x8002, &(0x7f0000000100)={@align=0x8, {0x4, 0x6, 0x80000000, 0xd}}, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x1}) write$cgroup_devices(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="6210000000001000107b9ac66721d18a5ca040832af1603953779f923bc870c1e9f8965845248f319d57cd01fed443a664e44f12af526a05ee3463d8e542db460575291d786fd6af68a1878a66f556a3a0e6e07bdc45d633e9eef65d9a8db222b0d8980d9d8799f64b96bfbe31df11db4742feeb4fbf29cd68c2ee9e81a184c58f6a368eafd6eff20e2ef5377c0a73a6f00360fa7be79ddd382412246b0c27d9461e39df4f15"], 0x9) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r2 = socket(0xa, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) sendmsg$NFC_CMD_LLC_SDREQ(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000080)=ANY=[@ANYBLOB="69a90004cc40cb04002a4df16a03663a4867440de90b4de7254b53ebfa428c94bcc70c5b2d3e5ab637ca541bf4a8864241f3309346d9bb0ead71f36ce7b400"/78, @ANYRES16=r5, @ANYBLOB="01002dbd7000fbdbdf251300000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x20001880) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) close(0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) 1.501506404s ago: executing program 4 (id=1828): syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffa888}]}}}}}}}, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="40059901"], 0x9c) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r6, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="2800128008000100687372001c00025d08000100", @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r8, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4400d}, 0x4040010) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r0, 0x10040) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffa888}]}}}}}}}, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) (async) write$nci(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="40059901"], 0x9c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r6, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="2800128008000100687372001c00025d08000100", @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r8, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4400d}, 0x4040010) (async) 1.38041554s ago: executing program 3 (id=1829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432"], 0x428}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'gretap0\x00', 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000001480)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x3, 0x30, 0x67, 0x0, 0x5, 0x11, 0x0, @private=0xa010101, @local, {[@generic={0x44, 0x5, "ff6852"}, @ra={0x94, 0x4}]}}, {0x4e23, 0x4e22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x0, @val=0x80}}}}}}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x2c, 0x24, 0xe10, 0x70b92a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0x0, 0xb}, {0xffff, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x8000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000101000000000000000001"], 0x114}], 0x1}, 0x0) 1.345755403s ago: executing program 0 (id=1830): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000001c0)={0x1d, r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000080)=[{{0x2, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x10) write(r6, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=[@dstopts={{0x18, 0x29, 0x37, {0x612a124f5da523db}}}], 0x18}}], 0x1, 0x40000c5) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 1.247718946s ago: executing program 4 (id=1831): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_pauseparam={0x13, 0x0, 0xfffffffd, 0x6}}) 1.057004631s ago: executing program 4 (id=1832): unshare(0x22020400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001400210104000000dff54dea9cbc2995d02c0000000023010000", @ANYRES32=0x0], 0x18}}, 0x44) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'ipvlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}) 1.025603032s ago: executing program 0 (id=1833): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff7, 0x0, 0x7fffffff, 0x6}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r2, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x6f4fef9cab2ede47, &(0x7f0000000440)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000100)={'macvtap0\x00', @broadcast}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket$packet(0x11, 0x3, 0x300) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETVNETBE(r11, 0x400454de, &(0x7f00000001c0)=0x1) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r13, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x17, 0x18, 0x5, 0x2, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) 1.020077214s ago: executing program 3 (id=1834): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) socket$kcm(0x29, 0x2, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x18, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}, [@nested={0x4, 0xae}]}, 0x18}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) (async, rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001240)={0x30, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_IE={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004014}, 0x20000004) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xddcab9f40a024866}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r4, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffffc, 0x1}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}}, 0x44044082) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x105}]}], {0x14}}, 0x64}}, 0x0) 724.827233ms ago: executing program 1 (id=1835): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="060000001102dc11ad4421f2636e4acf24ca4d28de89d9f0a223ae7064ac9f1d4510fa697c1f", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000000000000008510000000000000"], &(0x7f0000001800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x50, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000033000000006b113a00000000008510000002000000850000000800000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) (async) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x70, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r4}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x43}]}}}]}, 0x70}}, 0x0) (async) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @local}, 0x14) (async) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) 293.599342ms ago: executing program 3 (id=1836): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x8}, {}, {0xe, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x50, 0x2, [@TCA_FW_ACT={0x4c, 0x4, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x3, 0x3, 0xfffffff9, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xae, 0x9}}]}, 0x84}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 268.413191ms ago: executing program 4 (id=1837): sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc8, r0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4800}, 0x20000804) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000340), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0x1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x0, 0x7ff, 0x50, @private1, @mcast2, 0x7800, 0x10, 0x20, 0x1}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl1\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x46370fc060abf1b2, 0x8000, 0x401, 0x4, {{0x32, 0x4, 0x0, 0x2, 0xc8, 0x65, 0x0, 0x8, 0x4, 0x0, @local, @broadcast, {[@cipso={0x86, 0x23, 0x0, [{0x7, 0x11, "508aaf5928cd607b6be25465aceaa8"}, {0x6, 0xa, "355538820631c64d"}, {0x0, 0x2}]}, @lsrr={0x83, 0x1b, 0x4c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @broadcast, @rand_addr=0x64010102, @broadcast]}, @generic={0x94, 0xb, "83bf194ab19219d766"}, @cipso={0x86, 0x2b, 0x2, [{0x6, 0x5, "6be790"}, {0x7, 0x12, "a1cacc8c5d1197b55f09cdb68c16dfa7"}, {0x6, 0x5, "e29472"}, {0x1, 0x3, "d9"}, {0x6, 0x6, "271ea691"}]}, @timestamp_addr={0x44, 0xc, 0x61, 0x1, 0x0, [{@local, 0x3}]}, @lsrr={0x83, 0x7, 0x76, [@rand_addr=0x64010100]}, @ssrr={0x89, 0x1f, 0xeb, [@multicast2, @rand_addr=0x64010102, @empty, @private=0xa010101, @multicast1, @remote, @remote]}, @noop, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0xf, [{@loopback, 0xfffffffb}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0xc, 0x7, 0x20, @loopback, @empty, 0x1, 0x701, 0x8, 0x5}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x31c155bb464ec836, &(0x7f00000007c0)={@multicast1, @broadcast, 0x0}, &(0x7f0000000800)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000008c0)={'tunl0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x10, 0x84, {{0x6, 0x4, 0x1, 0x0, 0x18, 0x67, 0x0, 0xfd, 0x0, 0x0, @loopback, @broadcast, {[@noop]}}}}}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000900)={0x0, @multicast1, @local}, &(0x7f0000000940)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000e00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000980)={0x438, r2, 0x10, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x1e4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r9}, {0xec, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}]}, 0x438}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c1) (async) r14 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000e40)={'syz_tun\x00'}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x38, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008001}, 0x8c0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000f80), 0x1, 0x0) socketpair(0x21, 0x3, 0x2, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ALG_SET_KEY(r15, 0x117, 0x1, &(0x7f0000001000)="95ca7b4a7eda7000e5aa8e1b24576fe4d838931d11316e7b65f1a049edb88113a533527cd52353c7404bef002c05e480ba9771bf97a5544977b129497f156e8aea8613ee9db2d074d5df4ec5620c5a8beb7f14795d3b8138c08133a07228a38b79f8737d0f628fc090c880bf7b07eff71695dbd8890cf9f93c6787f414ca6df8ff6378dfbceabce437ea4f1890def37854336aaf8caf3aee71f5", 0x9a) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r16, 0x4058587a, &(0x7f0000001240)={{r16, &(0x7f00000010c0)='/\'\x00', 0x0, &(0x7f0000001100)={@_ha_fsid={[0x2, 0x5]}, {0x8, 0x1000, 0x3, 0xffffffff00000000}}, 0x8, &(0x7f0000001140)={@_ha_fsid}, &(0x7f0000001180)=0xa}, {[0x100, 0x10000, 0x3, 0x2]}, 0x815ec000, 0x5d, &(0x7f00000011c0)=""/93}) setsockopt$IP_VS_SO_SET_ADDDEST(r17, 0x0, 0x487, &(0x7f00000012c0)={{0x5928a1f240385b36, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e23, 0x0, 'lblc\x00', 0x18, 0x3, 0xc9a}, {@multicast2, 0x4e21, 0x10000, 0xa6, 0x401, 0x946}}, 0x44) (async) r18 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r16, 0x8933, &(0x7f0000001380)={'vcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r18, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r19}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9a}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40040}, 0x4) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) ioctl$FS_IOC_SETVERSION(r20, 0x40087602, &(0x7f0000001500)=0x615) 189.209368ms ago: executing program 1 (id=1838): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000d05eadac44ee", @ANYRES32=0x0, @ANYBLOB], 0x20) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="114353012008ba00000037510800", 0x59f, 0x4008015, &(0x7f00000000c0)={0x11, 0xe5, r3, 0x1, 0x7}, 0x14) sendto$inet6(r1, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r1, &(0x7f0000001a80)=""/4043, 0xfcb, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d5", 0xd}], 0x1) poll(&(0x7f0000000280)=[{r0, 0x82}], 0x1, 0xfffffffa) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000500)={r0, &(0x7f0000000400)='tunnel_key\x00', 0x1, &(0x7f0000000440)={@_ha_fsid={[0xfff, 0x23e8]}, {0x55a, 0x0, 0xc3, 0x5}}, 0x0, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0xd}) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f0000000540)={@null, 0x7, 'pimreg0\x00'}) r5 = socket(0x10, 0x80002, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f0000000380)={r5, &(0x7f0000000280)='@\x00', 0x6a100, &(0x7f00000002c0)={@_ha_fsid={[0x3, 0x5]}, {0x1, 0x1, 0x6, 0x9}}, 0x0, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x4}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f0000000040), &(0x7f0000000080)=""/20, &(0x7f00000000c0)="6b3d1dd2e8ff65fb82e5609a90d9a49e72bab33f51f6b732757827b3945ba477cc62c91e3545d85c4e9cc2b92c7185c08ff4a09e6fa8198c5fd0096e3728ca93fa027ed3a365b22e494413acbcc1b51fd952bfc1a04353c33b029f9bc9e5144d84ffd42a986c9349ab66a0550701fefc8e851015e1ee2612d4ca69e6c054d82aad201ac22120cd02db1c4016bf72d200e8", &(0x7f0000000180)="91672d3e5b65e34d9a6825840e35e4d56a337435b123a1b6f4b856074a91fce94e8b7d50ab15a7466850358fa8d3e87118d0aa8f5d23966ac10be56dae94b8f076f4696aafedb3ea7b1443831a4bfcdcf9a9111a1a78d96a02cb0f156b95a13359ada5632e92c2046ed95395fcee4ad3a0bfe8897af9a3341d0a5d62e2b16a946a87c3dc076fd4060a906ea631e5f2d3b40e813579a8190123e706c9153c1abe440b2997e308ef92916bca72cf9b9e56bed35c6f34850f8e8e37ccca35fc54f3c0", 0x9054, r6, 0x4}, 0x38) sendmsg$nl_route_sched(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x214, 0x30, 0x51b, 0x0, 0x0, {}, [{0x200, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0x0, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_NO_CSUM={0xfffffffffffffede}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x214}}, 0x0) 188.401993ms ago: executing program 2 (id=1839): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x8011}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r2, 0x900}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x94) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) recvmmsg(r0, &(0x7f0000008ac0)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000005ec0)=""/112, 0x70}, {&(0x7f0000005f40)=""/130, 0x82}, {&(0x7f0000006000)=""/4096, 0x1000}, {&(0x7f0000007000)=""/7, 0x7}, {&(0x7f0000007080)=""/129, 0x81}, {&(0x7f0000007140)=""/93, 0x5d}, {&(0x7f00000071c0)=""/165, 0xa5}, {&(0x7f0000000480)=""/111, 0x6f}, {&(0x7f0000007300)=""/34, 0x22}], 0x9}}], 0x2, 0x40, 0x0) 9.371622ms ago: executing program 2 (id=1840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001040)={r1}) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000001240)={'broute\x00', 0x0, 0x4, 0xfa, [0x89, 0xfffffffffffffffe, 0x400, 0x4930, 0x3, 0x6], 0x8, &(0x7f0000001080)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001100)=""/250}, &(0x7f0000001300)=0x78) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$nci(r6, &(0x7f0000000f40)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x3, {0x1, 0xe0, "218c050f4b83ceacc68b046fb611db775701c7b9dbfbe86ba09af87d27a49b5bd06b412d9a89392e8f66fdb273d9a0624cf13bdd6757897b649bdd2c4520661f73e5cdb33552355fc26d6739dba78c0884d2462928c1485aee093c4168bd15bf177e67df4a2eb1b58e5ef8a4af0086dd6d59cb2c38a709e20cc4883aab95de4b0c06ebee213d2bcc788cb2193955b9b293b6441b430c0acb3c9633ef3b6de8b5e7ad37e5bb67b53fc794da08cd05ef2cf6671dda08ad9f138e764aedf20d869a56cd9be52bc45ba290e3d18276892c845b730bf826185a69b72bb60e15258a0b"}}, 0xe5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r10, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x1c, r10, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r12 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$inet6(r12, &(0x7f0000001100)={&(0x7f00000000c0)={0xa, 0x4e21, 0x4, @empty, 0x7fffffff}, 0x1c, 0x0, 0x0, &(0x7f0000001000)=[@tclass={{0x14, 0x29, 0x43, 0x8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}], 0x30}, 0x24004004) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x0, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0xc, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0x8001, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9da, 0x2, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x40, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0xad42, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$packet(0x11, 0x3, 0x300) unshare(0x64040100) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r13, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/160, 0xa0}, {&(0x7f0000000a00)=""/178, 0xb2}, {&(0x7f0000000ac0)=""/72, 0x48}], 0x8}, 0x8}, {{&(0x7f0000000540)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/2, 0x2}], 0x1, &(0x7f0000000640)=""/170, 0xaa}, 0xe63}, {{&(0x7f0000000700)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000049c0)=[{&(0x7f0000000800)=""/85, 0x55}, {&(0x7f0000000880)=""/28, 0x1c}, {&(0x7f0000004880)=""/153, 0x99}, {&(0x7f0000004940)=""/43, 0x2b}, {0x0}], 0x5, &(0x7f0000004a40)=""/39, 0x27}}], 0x3, 0x2022, 0x0) 0s ago: executing program 4 (id=1841): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) (async) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0) kernel console output (not intermixed with test programs): lave_1 [ 85.474852][ T5630] veth0_macvtap: entered promiscuous mode [ 85.513507][ T3368] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.534492][ T3368] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.563070][ T5630] veth1_macvtap: entered promiscuous mode [ 85.582662][ T5813] gtp0: entered promiscuous mode [ 85.587634][ T5813] gtp0: entered allmulticast mode [ 85.598004][ T3368] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.613406][ T3368] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.631035][ T3368] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.652017][ T1344] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.685068][ T1344] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.695262][ T1344] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.759770][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.817101][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.870241][ T5627] veth0_macvtap: entered promiscuous mode [ 85.879115][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.888483][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.915188][ T5627] veth1_macvtap: entered promiscuous mode [ 85.926750][ T3368] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.936006][ T3368] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.961712][ T3368] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.971000][ T3368] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.999065][ T3368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.025262][ T3368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.039845][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.053474][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.124398][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.165549][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.190228][ T5826] syzkaller0: entered promiscuous mode [ 86.199661][ T5826] syzkaller0: entered allmulticast mode [ 86.212430][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.224624][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.270902][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.293189][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.369058][ T5834] netlink: 'syz.2.9': attribute type 23 has an invalid length. [ 86.390750][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.399658][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.439301][ T1344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.465819][ T1344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.491762][ T5625] Bluetooth: hci0: command tx timeout [ 86.568170][ T1344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.572640][ T5625] Bluetooth: hci1: command tx timeout [ 86.578417][ T5838] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1'. [ 86.612066][ T1344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.623857][ T5841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 86.633471][ T5841] nbd: illegal input index -2062819832 [ 86.651806][ T5625] Bluetooth: hci3: command tx timeout [ 86.657302][ T5837] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 86.664930][ T42] cfg80211: failed to load regulatory.db [ 86.673059][ T5625] Bluetooth: hci2: command tx timeout [ 86.695026][ T5837] bond1 (unregistering): Released all slaves [ 86.768802][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 86.811763][ T5625] Bluetooth: hci4: command tx timeout [ 86.838411][ T5838] vlan2: entered allmulticast mode [ 86.848886][ T5838] erspan0: entered allmulticast mode [ 87.048971][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.079651][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.217976][ T5855] netlink: 'syz.2.14': attribute type 11 has an invalid length. [ 87.238838][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.286923][ T5856] ipt_rpfilter: unknown options [ 87.298089][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.308283][ T5855] netlink: 224 bytes leftover after parsing attributes in process `syz.2.14'. [ 87.706164][ T5885] netlink: 56 bytes leftover after parsing attributes in process `syz.1.17'. [ 87.744077][ T5885] Zero length message leads to an empty skb [ 87.846347][ T5885] netlink: 56 bytes leftover after parsing attributes in process `syz.1.17'. [ 87.988967][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 88.102097][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.110609][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.295196][ T5891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.310978][ T5891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.430888][ T5891] gtp0: left promiscuous mode [ 88.441004][ T5891] gtp0: left allmulticast mode [ 88.451711][ T5905] netlink: 'syz.2.20': attribute type 3 has an invalid length. [ 88.461635][ T5903] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5'. [ 88.622682][ T5915] warning: `syz.0.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.683267][ T57] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.701716][ T57] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.729793][ T57] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.774017][ T57] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.065321][ T5941] netlink: 84 bytes leftover after parsing attributes in process `syz.4.29'. [ 89.127602][ T5941] netlink: 84 bytes leftover after parsing attributes in process `syz.4.29'. [ 89.318619][ T5953] sctp: [Deprecated]: syz.3.33 (pid 5953) Use of int in max_burst socket option. [ 89.318619][ T5953] Use struct sctp_assoc_value instead [ 89.337678][ T5952] syzkaller1: entered promiscuous mode [ 89.358366][ T5952] syzkaller1: entered allmulticast mode [ 89.368618][ T5952] netlink: 'syz.1.34': attribute type 2 has an invalid length. [ 89.459571][ T5952] : entered promiscuous mode [ 89.559842][ T5963] xt_hashlimit: size too large, truncated to 1048576 [ 89.566565][ T5965] netlink: 'syz.4.38': attribute type 4 has an invalid length. [ 90.162107][ T5987] netlink: 'syz.4.42': attribute type 1 has an invalid length. [ 90.202621][ T5987] netlink: 'syz.4.42': attribute type 2 has an invalid length. [ 90.255806][ T5985] netlink: 'syz.0.44': attribute type 2 has an invalid length. [ 90.424442][ T5989] syzkaller1: entered promiscuous mode [ 90.446210][ T5989] syzkaller1: entered allmulticast mode [ 90.495100][ T5998] netlink: 'syz.1.47': attribute type 15 has an invalid length. [ 90.512584][ T5997] netlink: 'syz.1.47': attribute type 15 has an invalid length. [ 90.525635][ T6002] syz.3.49 uses obsolete (PF_INET,SOCK_PACKET) [ 90.622948][ T5998] netlink: 'syz.1.47': attribute type 15 has an invalid length. [ 90.631076][ T6005] syzkaller0: entered promiscuous mode [ 90.650874][ T6005] syzkaller0: entered allmulticast mode [ 90.689075][ T139] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 90.729698][ T139] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 90.774342][ T139] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 90.891185][ T139] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 91.323834][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.331300][ T6051] x_tables: duplicate underflow at hook 3 [ 91.789216][ T6074] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 91.813339][ T6074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.459375][ T6110] x_tables: ip_tables: ah match: only valid for protocol 51 [ 92.648609][ T6121] __nla_validate_parse: 11 callbacks suppressed [ 92.648627][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 92.957957][ T6138] trusted_key: syz.0.83 sent an empty control message without MSG_MORE. [ 92.999111][ T6139] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 93.033457][ T6139] Cannot find add_set index 0 as target [ 93.126375][ T6143] validate_nla: 2 callbacks suppressed [ 93.126392][ T6143] netlink: 'syz.3.86': attribute type 2 has an invalid length. [ 93.440825][ T6153] vlan3: entered promiscuous mode [ 93.459557][ T6153] bridge0: entered promiscuous mode [ 93.697907][ T6171] netlink: 'syz.1.94': attribute type 1 has an invalid length. [ 93.728612][ T6171] netlink: 224 bytes leftover after parsing attributes in process `syz.1.94'. [ 94.217703][ T6197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.99'. [ 94.273230][ T202] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 94.307423][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'. [ 94.600591][ T6223] syzkaller1: entered promiscuous mode [ 94.606474][ T6223] syzkaller1: entered allmulticast mode [ 94.980666][ T6192] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.142394][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 95.197388][ T6241] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 95.403511][ T6252] netlink: 388 bytes leftover after parsing attributes in process `syz.3.112'. [ 95.446364][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.112'. [ 95.470666][ T6252] netlink: 65011 bytes leftover after parsing attributes in process `syz.3.112'. [ 95.484782][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.114'. [ 95.515439][ T6252] netlink: 388 bytes leftover after parsing attributes in process `syz.3.112'. [ 96.078289][ T6286] tc action pedit 'at' offset 5 out of bounds [ 96.085013][ T6286] tc action pedit 'at' offset 5 out of bounds [ 96.091129][ T6286] tc action pedit 'at' offset 5 out of bounds [ 96.097269][ T6286] tc action pedit 'at' offset 5 out of bounds [ 96.103481][ T6286] tc action pedit 'at' offset 5 out of bounds [ 96.109564][ T6286] tc action pedit 'at' offset 5 out of bounds [ 96.115713][ T6286] tc action pedit 'at' offset 5 out of bounds [ 96.121837][ T6286] tc action pedit 'at' offset 5 out of bounds [ 96.127922][ T6286] tc action pedit 'at' offset 5 out of bounds [ 96.134058][ T6286] tc action pedit 'at' offset 5 out of bounds [ 96.140163][ T6286] 0: reclassify loop, rule prio 0, protocol 800 [ 96.523949][ T6308] Bluetooth: MGMT ver 1.23 [ 97.036575][ T6341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.405506][ T6359] netlink: 'syz.0.139': attribute type 49 has an invalid length. [ 97.519248][ T6359] ip6gretap0: entered promiscuous mode [ 97.544338][ T6359] ip6gretap0: entered allmulticast mode [ 97.784210][ T6375] bridge1: entered promiscuous mode [ 97.798162][ T6375] bridge1: entered allmulticast mode [ 97.905009][ T6385] __nla_validate_parse: 5 callbacks suppressed [ 97.905033][ T6385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.147'. [ 98.239753][ T5625] block nbd0: Receive control failed (result -1) [ 98.490735][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.150'. [ 98.529180][ T6414] netlink: 'syz.4.150': attribute type 21 has an invalid length. [ 98.542952][ T6419] tipc: Trying to set illegal importance in message [ 98.552998][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 98.570186][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.152'. [ 98.578678][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.150'. [ 98.581276][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.152'. [ 98.689965][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'. [ 98.956509][ T6448] ip6t_srh: unknown srh match flags 5F28 [ 98.969985][ T6447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.158'. [ 98.970851][ T6450] netlink: 156 bytes leftover after parsing attributes in process `syz.2.159'. [ 99.018245][ T6448] netlink: 'syz.1.156': attribute type 1 has an invalid length. [ 99.439047][ T6478] atomic_op ffff88807971e198 conn xmit_atomic 0000000000000000 [ 99.644327][ T6491] netlink: 72 bytes leftover after parsing attributes in process `syz.0.167'. [ 99.724493][ T6486] bond3: Removing last arp target with arp_interval on [ 99.794743][ T6502] syzkaller0: entered promiscuous mode [ 99.828945][ T6502] syzkaller0: entered allmulticast mode [ 99.962982][ T6511] syzkaller0: entered promiscuous mode [ 99.975931][ T6511] syzkaller0: entered allmulticast mode [ 100.060371][ T6509] xt_l2tp: invalid flags combination: 8 [ 100.655130][ T6551] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.685146][ T6551] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.692337][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807b34dc00: rx timeout, send abort [ 100.704920][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807b34dc00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 100.720583][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807b34d800: rx timeout, send abort [ 100.729981][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807b34d800: 0x0f002: (3) A timeout occurred and this is the connection abort to close the session. [ 100.762402][ T6551] 8021q: adding VLAN 0 to HW filter on device bond3 [ 101.048702][ T6566] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 101.608508][ T6587] netlink: 'syz.4.187': attribute type 2 has an invalid length. [ 102.924079][ T6511] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.114630][ T6594] __nla_validate_parse: 1 callbacks suppressed [ 103.114647][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 103.134558][ T6595] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 103.266802][ T6603] netlink: 'syz.4.188': attribute type 3 has an invalid length. [ 103.415338][ T6609] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.532202][ T6606] netlink: 'syz.2.193': attribute type 3 has an invalid length. [ 104.044085][ T6646] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.206'. [ 104.194326][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 104.235597][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 104.300729][ T6652] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 104.350727][ T6662] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 104.610881][ T6683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.216'. [ 104.673154][ T6690] netlink: 48 bytes leftover after parsing attributes in process `syz.4.219'. [ 104.704763][ T6690] netlink: 48 bytes leftover after parsing attributes in process `syz.4.219'. [ 104.727093][ T6701] netlink: 48 bytes leftover after parsing attributes in process `syz.4.219'. [ 104.830981][ T6721] netlink: 'syz.2.221': attribute type 8 has an invalid length. [ 104.915762][ T6721] sch_fq: defrate 0 ignored. [ 105.270507][ T6743] netlink: 'syz.0.222': attribute type 1 has an invalid length. [ 105.303013][ T6743] netlink: 224 bytes leftover after parsing attributes in process `syz.0.222'. [ 105.569306][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 105.967207][ T6785] netlink: 'syz.4.233': attribute type 1 has an invalid length. [ 106.010955][ T6788] sctp: [Deprecated]: syz.2.234 (pid 6788) Use of int in max_burst socket option. [ 106.010955][ T6788] Use struct sctp_assoc_value instead [ 106.493236][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 106.524024][ T6815] syzkaller0: entered promiscuous mode [ 106.551227][ T6815] syzkaller0: entered allmulticast mode [ 106.595205][ T6820] bond0: entered allmulticast mode [ 106.601273][ T6820] bond_slave_0: entered allmulticast mode [ 106.607332][ T6820] bond_slave_1: entered allmulticast mode [ 106.684292][ T6824] batadv0: entered promiscuous mode [ 106.689686][ T6824] batadv0: entered allmulticast mode [ 106.788461][ T6829] bond4: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 106.807103][ T6829] bond4 (unregistering): Released all slaves [ 107.367017][ T6855] bridge_slave_1: left allmulticast mode [ 107.380037][ T6855] bridge_slave_1: left promiscuous mode [ 107.389133][ T6855] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.425590][ T6855] bridge_slave_0: left allmulticast mode [ 107.439106][ T6855] bridge_slave_0: left promiscuous mode [ 107.458680][ T6855] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.611565][ T6867] netlink: 'syz.2.259': attribute type 10 has an invalid length. [ 107.649043][ T6867] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.674492][ T6867] bond0: (slave team0): Enslaving as an active interface with an up link [ 107.918362][ T6881] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 107.939378][ T6881] bond1 (unregistering): Released all slaves [ 108.206817][ T6899] __nla_validate_parse: 22 callbacks suppressed [ 108.206835][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'. [ 108.290471][ T6902] netlink: 32 bytes leftover after parsing attributes in process `syz.1.270'. [ 108.667403][ T6929] netlink: 'syz.3.279': attribute type 1 has an invalid length. [ 108.682726][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.277'. [ 108.704378][ T6930] netlink: 'syz.3.279': attribute type 1 has an invalid length. [ 108.797193][ T6928] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 108.822618][ T6928] bond1 (unregistering): Released all slaves [ 108.850129][ T6929] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 108.851138][ T6930] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 109.008728][ T6945] netlink: 'syz.2.283': attribute type 10 has an invalid length. [ 109.050033][ T6945] netlink: 40 bytes leftover after parsing attributes in process `syz.2.283'. [ 109.096009][ T6945] team0: entered allmulticast mode [ 109.107520][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'. [ 109.111571][ T6945] team_slave_0: entered allmulticast mode [ 109.118687][ T6950] netlink: 60 bytes leftover after parsing attributes in process `syz.0.285'. [ 109.133048][ T6945] team_slave_1: entered allmulticast mode [ 109.134524][ T6950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.285'. [ 109.154586][ T6945] bond0: (slave team0): Releasing backup interface [ 109.175428][ T6949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.285'. [ 109.186670][ T6945] bridge0: port 3(team0) entered blocking state [ 109.202334][ T6945] bridge0: port 3(team0) entered disabled state [ 109.224849][ T6945] team0: entered promiscuous mode [ 109.230148][ T6945] team_slave_0: entered promiscuous mode [ 109.260991][ T6945] team_slave_1: entered promiscuous mode [ 109.323267][ T6958] netlink: 132 bytes leftover after parsing attributes in process `syz.4.287'. [ 109.354156][ T6962] netlink: 132 bytes leftover after parsing attributes in process `syz.4.287'. [ 109.839705][ T6990] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 109.874616][ T6990] bond2 (unregistering): Released all slaves [ 109.984713][ T6996] netlink: 'syz.3.296': attribute type 1 has an invalid length. [ 110.005542][ T6996] netlink: 'syz.3.296': attribute type 3 has an invalid length. [ 110.877619][ T7056] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 111.259581][ T7075] xt_bpf: check failed: parse error [ 111.283538][ T7075] netlink: 'syz.3.318': attribute type 23 has an invalid length. [ 111.511235][ T7087] netlink: 'syz.0.322': attribute type 1 has an invalid length. [ 111.720565][ T7087] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.738539][ T7106] sctp: [Deprecated]: syz.1.326 (pid 7106) Use of int in maxseg socket option. [ 111.738539][ T7106] Use struct sctp_assoc_value instead [ 111.968668][ T7115] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 111.991384][ T7115] bond3 (unregistering): Released all slaves [ 112.138519][ T7126] macvlan0: entered promiscuous mode [ 112.361260][ T7134] bond1: option fail_over_mac: invalid value (16) [ 112.385572][ T7134] bond1 (unregistering): Released all slaves [ 112.460515][ T7142] lo: entered promiscuous mode [ 112.502063][ T7142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.535259][ T7159] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 112.812332][ T7169] macvlan2: entered promiscuous mode [ 112.845172][ T7169] macvlan2: entered allmulticast mode [ 112.862368][ T7169] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 112.929688][ T7169] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 112.967502][ T7169] team0: Port device macvlan2 added [ 113.058099][ T7188] dvmrp0: entered allmulticast mode [ 113.328147][ T7201] vlan4: entered allmulticast mode [ 113.356821][ T7201] bond0: entered allmulticast mode [ 113.364196][ T7201] bond_slave_0: entered allmulticast mode [ 113.386702][ T7201] bond_slave_1: entered allmulticast mode [ 113.520816][ T7214] syzkaller1: entered promiscuous mode [ 113.559554][ T7214] syzkaller1: entered allmulticast mode [ 114.202184][ T7258] __nla_validate_parse: 14 callbacks suppressed [ 114.202202][ T7258] netlink: 48 bytes leftover after parsing attributes in process `syz.3.360'. [ 114.263471][ T7258] unsupported nla_type 7424 [ 114.486216][ T7272] netlink: 'syz.2.362': attribute type 1 has an invalid length. [ 114.579462][ T7272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.610947][ T7272] netlink: 'syz.2.362': attribute type 1 has an invalid length. [ 114.780379][ T7272] bond1: (slave geneve2): making interface the new active one [ 114.809381][ T7272] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 115.715213][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.381'. [ 115.814117][ T7359] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 115.836441][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'. [ 115.842789][ T7361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.383'. [ 115.847227][ T7359] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 115.885409][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.383'. [ 115.888670][ T5725] IPVS: starting estimator thread 0... [ 115.903146][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.385'. [ 115.921688][ T7366] openvswitch: netlink: Missing key (keys=40, expected=100) [ 116.001628][ T7367] IPVS: using max 27 ests per chain, 64800 per kthread [ 116.177178][ T7384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.388'. [ 116.418833][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 116.437325][ T7399] netlink: 28 bytes leftover after parsing attributes in process `syz.3.392'. [ 116.564949][ T7401] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 116.593204][ T7410] IPVS: length: 4096 != 8 [ 116.598467][ T7401] bond3 (unregistering): Released all slaves [ 116.786447][ T7415] netlink: 20 bytes leftover after parsing attributes in process `syz.3.395'. [ 132.733791][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.741105][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.244770][ T7428] netlink: 36 bytes leftover after parsing attributes in process `syz.1.397'. [ 137.643197][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.407'. [ 137.677211][ T7452] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 137.705570][ T7452] bond1 (unregistering): Released all slaves [ 137.784279][ T7459] netlink: 'syz.2.409': attribute type 11 has an invalid length. [ 137.804287][ T7459] netlink: 224 bytes leftover after parsing attributes in process `syz.2.409'. [ 137.866186][ T7463] netlink: 32 bytes leftover after parsing attributes in process `syz.4.410'. [ 137.881334][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'. [ 137.920918][ T7458] bond1: option lp_interval: invalid value (0) [ 137.935777][ T7458] bond1: option lp_interval: allowed values 1 - 2147483647 [ 137.946505][ T7458] bond1 (unregistering): Released all slaves [ 138.570502][ T7509] tipc: Enabling of bearer rejected, failed to enable media [ 138.628738][ T7520] netlink: 48 bytes leftover after parsing attributes in process `syz.0.425'. [ 138.746077][ T7526] netlink: 36 bytes leftover after parsing attributes in process `syz.2.428'. [ 138.751080][ T7528] netlink: 'syz.1.427': attribute type 2 has an invalid length. [ 138.801376][ T7530] v: renamed from veth0_vlan (while UP) [ 139.059397][ T7551] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 139.060377][ T7550] team0: No ports can be present during mode change [ 139.106697][ T7551] netlink: 'syz.4.435': attribute type 1 has an invalid length. [ 139.120364][ T7551] netlink: 'syz.4.435': attribute type 1 has an invalid length. [ 139.220130][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.434'. [ 139.407180][ T7570] netlink: 'syz.2.441': attribute type 1 has an invalid length. [ 139.447511][ T7570] bond2: entered promiscuous mode [ 139.453461][ T7570] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.621955][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'. [ 139.640162][ T7584] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 139.652009][ T7585] netlink: 176 bytes leftover after parsing attributes in process `syz.1.446'. [ 139.673259][ T7584] bond6 (unregistering): Released all slaves [ 139.708168][ T7595] netlink: 'syz.2.449': attribute type 5 has an invalid length. [ 139.950740][ T7609] netlink: 'syz.1.452': attribute type 83 has an invalid length. [ 139.970071][ T7609] syzkaller0: entered promiscuous mode [ 139.976462][ T7609] syzkaller0: entered allmulticast mode [ 140.370529][ T7636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.405960][ T7636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.556035][ T7645] netlink: 'syz.3.463': attribute type 10 has an invalid length. [ 140.587278][ T7645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.610049][ T7645] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 140.790050][ T7652] netlink: 'syz.1.466': attribute type 1 has an invalid length. [ 140.912009][ T7655] veth3: entered allmulticast mode [ 140.936806][ T7655] bond6: (slave veth3): Enslaving as an active interface with a down link [ 141.009938][ T7652] bond6: (slave veth0_to_bond): making interface the new active one [ 141.047306][ T7652] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 141.250742][ T7665] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 141.270824][ T7665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.467391][ T7673] Bluetooth: MGMT ver 1.23 [ 141.628138][ T7685] netlink: 'syz.2.477': attribute type 1 has an invalid length. [ 141.752629][ T7685] bond3: entered promiscuous mode [ 141.765673][ T7685] 8021q: adding VLAN 0 to HW filter on device bond3 [ 141.792825][ T7686] ipvlan2: entered allmulticast mode [ 141.801075][ T7686] bond3: entered allmulticast mode [ 142.065531][ T7702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.261050][ T7702] syz.2.482 (7702) used greatest stack depth: 18312 bytes left [ 142.434978][ T7713] __nla_validate_parse: 4 callbacks suppressed [ 142.434995][ T7713] netlink: 52 bytes leftover after parsing attributes in process `syz.4.485'. [ 142.476531][ T7716] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.487'. [ 142.586068][ T7719] veth0: entered promiscuous mode [ 142.659670][ T7717] veth0: left promiscuous mode [ 143.115711][ T7754] netlink: 236 bytes leftover after parsing attributes in process `syz.4.497'. [ 143.126286][ T7747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.495'. [ 143.263167][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 143.301145][ T7764] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 143.335419][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 143.508434][ T7783] netlink: 'syz.1.499': attribute type 16 has an invalid length. [ 143.588336][ T7783] netlink: 20 bytes leftover after parsing attributes in process `syz.1.499'. [ 143.668787][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.502'. [ 143.747105][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.502'. [ 143.780149][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.502'. [ 143.996658][ T7819] openvswitch: netlink: IP tunnel dst address not specified [ 144.004496][ T7807] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 144.062433][ T7807] bond3 (unregistering): Released all slaves [ 144.246682][ T7832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.529849][ T7853] sctp: [Deprecated]: syz.0.517 (pid 7853) Use of int in maxseg socket option. [ 144.529849][ T7853] Use struct sctp_assoc_value instead [ 146.283584][ T7766] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.513040][ T7859] macsec1: entered promiscuous mode [ 146.540086][ T7859] bridge0: entered promiscuous mode [ 146.562332][ T7859] macsec1: entered allmulticast mode [ 146.569661][ T7859] bridge0: entered allmulticast mode [ 146.577495][ T7861] sctp: [Deprecated]: syz.1.521 (pid 7861) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.577495][ T7861] Use struct sctp_sack_info instead [ 146.586128][ T7859] bridge0: port 4(macsec1) entered blocking state [ 146.600806][ T7859] bridge0: port 4(macsec1) entered disabled state [ 146.623684][ T7859] bridge0: left allmulticast mode [ 146.704388][ T5821] bridge0: left promiscuous mode [ 147.838231][ T7923] netlink: 'syz.0.535': attribute type 1 has an invalid length. [ 147.891282][ T7929] netlink: 'syz.1.536': attribute type 61 has an invalid length. [ 147.960071][ T7923] bond3: entered promiscuous mode [ 147.973787][ T7923] 8021q: adding VLAN 0 to HW filter on device bond3 [ 147.981351][ T7932] veth0: entered promiscuous mode [ 148.011099][ T7932] __nla_validate_parse: 43 callbacks suppressed [ 148.011117][ T7932] netlink: 164 bytes leftover after parsing attributes in process `syz.4.539'. [ 148.043016][ T7930] ipvlan2: entered allmulticast mode [ 148.055928][ T7930] bond3: entered allmulticast mode [ 148.155698][ T7923] bond3: (slave bridge3): making interface the new active one [ 148.181700][ T7923] bridge3: entered promiscuous mode [ 148.192501][ T7923] bridge3: entered allmulticast mode [ 148.218693][ T7923] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 148.243214][ T7932] batadv_slave_1: entered promiscuous mode [ 148.334889][ T7931] batadv_slave_1: left promiscuous mode [ 148.357225][ T7931] veth0: left promiscuous mode [ 148.510667][ T7952] sctp: [Deprecated]: syz.2.544 (pid 7952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.510667][ T7952] Use struct sctp_sack_info instead [ 148.518106][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.543'. [ 148.570198][ T7952] sctp: [Deprecated]: syz.2.544 (pid 7952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.570198][ T7952] Use struct sctp_sack_info instead [ 148.678101][ T7940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.537'. [ 148.734776][ T7940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.537'. [ 148.783705][ T7959] openvswitch: netlink: Message has 8 unknown bytes. [ 148.841788][ T7959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.846763][ T7969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.547'. [ 148.889360][ T7971] netlink: 'syz.2.548': attribute type 1 has an invalid length. [ 148.929812][ T7969] bond0: ARP target 8.4.0.0 is already present [ 148.950638][ T7969] bond0: option arp_ip_target: invalid value (1032) [ 149.019875][ T7978] netlink: 244 bytes leftover after parsing attributes in process `syz.4.550'. [ 149.096702][ T7971] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.181339][ T7988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.551'. [ 149.502490][ T8005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.558'. [ 149.761299][ T8026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.566'. [ 149.821037][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'. [ 149.899949][ T8032] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 150.073872][ T8041] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 150.302453][ T8042] syzkaller0: entered promiscuous mode [ 150.318585][ T8042] syzkaller0: entered allmulticast mode [ 150.325551][ T8055] netlink: 'syz.2.572': attribute type 11 has an invalid length. [ 151.889483][ T8072] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 152.127455][ T8087] syzkaller0: entered promiscuous mode [ 152.158623][ T8091] netlink: 'syz.3.584': attribute type 58 has an invalid length. [ 152.161847][ T8087] syzkaller0: entered allmulticast mode [ 152.588065][ T8116] netlink: 'syz.2.590': attribute type 6 has an invalid length. [ 152.717407][ T8103] vlan2: entered allmulticast mode [ 152.723047][ T8103] veth1_virt_wifi: entered allmulticast mode [ 153.009593][ T8142] nbd: must specify a size in bytes for the device [ 153.174572][ T8147] netlink: 'syz.2.598': attribute type 29 has an invalid length. [ 153.239551][ T8154] __nla_validate_parse: 7 callbacks suppressed [ 153.239566][ T8154] netlink: 666 bytes leftover after parsing attributes in process `syz.3.600'. [ 153.731178][ T8184] nft_compat: unsupported protocol 0 [ 153.755092][ T8186] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 153.872024][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'. [ 153.923452][ T8192] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 153.945611][ T8192] bond2 (unregistering): Released all slaves [ 153.996819][ T8193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.603'. [ 154.012859][ T8189] syzkaller0: entered promiscuous mode [ 154.026975][ T8189] syzkaller0: entered allmulticast mode [ 154.166653][ T8202] netlink: 'syz.4.616': attribute type 10 has an invalid length. [ 154.206680][ T8199] openvswitch: netlink: Missing key (keys=40, expected=100) [ 154.219103][ T8202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.229822][ T8202] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 154.239682][ T8205] netlink: 'syz.4.616': attribute type 10 has an invalid length. [ 154.255563][ T8199] syzkaller0: entered promiscuous mode [ 154.270909][ T8199] syzkaller0: entered allmulticast mode [ 154.428017][ T8215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.618'. [ 154.569636][ T8221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.621'. [ 154.597644][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.623'. [ 154.618015][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'. [ 154.636264][ T8225] netlink: 'syz.1.623': attribute type 15 has an invalid length. [ 154.688008][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.623'. [ 154.697412][ T5896] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 154.713658][ T5896] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 154.725260][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'. [ 154.741350][ T5896] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 154.751827][ T8225] netlink: 'syz.1.623': attribute type 15 has an invalid length. [ 154.764727][ T5896] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 154.790307][ T5896] netdevsim netdevsim1 netdevsim0: set [0, 2] type 1 family 0 port 29281 - 0 [ 154.804370][ T5896] netdevsim netdevsim1 netdevsim1: set [0, 2] type 1 family 0 port 29281 - 0 [ 154.825124][ T5896] netdevsim netdevsim1 netdevsim2: set [0, 2] type 1 family 0 port 29281 - 0 [ 154.845454][ T8225] syzkaller0: entered promiscuous mode [ 154.856128][ T8225] syzkaller0: entered allmulticast mode [ 154.875938][ T5896] netdevsim netdevsim1 netdevsim3: set [0, 2] type 1 family 0 port 29281 - 0 [ 155.059785][ T8243] netlink: 16 bytes leftover after parsing attributes in process `syz.3.630'. [ 155.713857][ T8287] x_tables: duplicate underflow at hook 3 [ 155.824775][ T8293] netlink: 'syz.4.643': attribute type 2 has an invalid length. [ 156.146082][ T8318] smc: net device vlan1 applied user defined pnetid SYZ2 [ 156.156216][ T8318] smc: net device vlan1 erased user defined pnetid SYZ2 [ 156.965765][ T8364] openvswitch: netlink: EtherType 0 is less than min 600 [ 157.134684][ T8375] netlink: 'syz.3.666': attribute type 2 has an invalid length. [ 157.187580][ T8375] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.284148][ T8379] netlink: 'syz.2.668': attribute type 11 has an invalid length. [ 157.739974][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.747725][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.798085][ T8395] batadv0: left promiscuous mode [ 157.807341][ T8395] batadv0: left allmulticast mode [ 157.917626][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.945733][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.145558][ T8425] netlink: 'syz.4.681': attribute type 58 has an invalid length. [ 158.155622][ T8395] bridge1: left promiscuous mode [ 158.160732][ T8395] bridge1: left allmulticast mode [ 158.171362][ T8395] bond2: left promiscuous mode [ 158.177741][ T8395] bond3: left promiscuous mode [ 158.183372][ T8395] ipvlan2: left allmulticast mode [ 158.189893][ T8395] bond3: left allmulticast mode [ 158.216123][ T8399] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 158.229564][ T8399] bond7 (unregistering): Released all slaves [ 158.401979][ T6737] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.426671][ T6737] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.525115][ T8431] syzkaller0: entered promiscuous mode [ 158.532739][ T8434] __nla_validate_parse: 12 callbacks suppressed [ 158.532767][ T8434] netlink: 56 bytes leftover after parsing attributes in process `syz.2.683'. [ 158.542115][ T8431] syzkaller0: entered allmulticast mode [ 158.571843][ T6737] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.591116][ T6737] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.616559][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.685'. [ 158.653693][ T8434] bond5 (unregistering): Released all slaves [ 158.800948][ T8455] netlink: 'syz.0.686': attribute type 8 has an invalid length. [ 158.809193][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'. [ 158.825257][ T8459] netlink: 'syz.4.687': attribute type 1 has an invalid length. [ 158.839406][ T8455] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.849100][ T8455] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.963131][ T8459] bond2: entered promiscuous mode [ 158.982764][ T8459] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.038407][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.687'. [ 159.112936][ T8466] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.123044][ T8466] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 159.138997][ T8466] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 159.154824][ T8466] bond2: (slave ip6gre1): making interface the new active one [ 159.164114][ T8466] ip6gre1: entered promiscuous mode [ 159.170943][ T8466] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 159.202429][ T8469] lo: left promiscuous mode [ 159.316146][ T8469] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 159.327039][ T8469] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 159.346048][ T8491] Driver unsupported XDP return value 0 on prog (id 126) dev N/A, expect packet loss! [ 159.354921][ T8469] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.368780][ T8469] 8021q: adding VLAN 0 to HW filter on device bond5 [ 159.400706][ T8469] 8021q: adding VLAN 0 to HW filter on device bond6 [ 159.623754][ T6728] bond6: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 159.830317][ T8513] netlink: 'syz.1.700': attribute type 1 has an invalid length. [ 159.838780][ T8513] netlink: 224 bytes leftover after parsing attributes in process `syz.1.700'. [ 159.850729][ T8513] NCSI netlink: No device for ifindex 0 [ 160.203172][ T8534] netlink: 'syz.1.706': attribute type 1 has an invalid length. [ 160.240313][ T8534] 8021q: adding VLAN 0 to HW filter on device bond7 [ 160.265026][ T8534] bond7: (slave gretap1): making interface the new active one [ 160.274936][ T8534] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 160.329611][ T8537] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.450983][ T8548] xt_hashlimit: size too large, truncated to 1048576 [ 160.522909][ T8552] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.708'. [ 160.584147][ T8552] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 160.624924][ T8552] 0ªX¹¦Dö»: entered allmulticast mode [ 160.676870][ T8555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.710'. [ 160.689079][ T8555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.710'. [ 160.796483][ T8558] netlink: 32 bytes leftover after parsing attributes in process `syz.4.709'. [ 160.894499][ T8553] bond8 (unregistering): Released all slaves [ 161.035765][ T8568] lo: entered allmulticast mode [ 161.082230][ T8568] tunl0: entered allmulticast mode [ 161.113485][ T8568] gre0: entered allmulticast mode [ 161.212741][ T8568] gretap0: entered allmulticast mode [ 161.246720][ T8568] erspan0: entered allmulticast mode [ 161.290813][ T8568] ip_vti0: entered allmulticast mode [ 161.320244][ T8568] ip6_vti0: entered allmulticast mode [ 161.340995][ T8568] sit0: entered allmulticast mode [ 161.429198][ T8568] ip6tnl0: entered allmulticast mode [ 161.456387][ T8595] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.473843][ T8568] ip6gre0: entered allmulticast mode [ 161.499983][ T8568] ip6gretap0: entered allmulticast mode [ 161.527679][ T8568] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.535429][ T8568] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.552439][ T8568] bridge0: entered allmulticast mode [ 161.572577][ T8568] vcan0: entered allmulticast mode [ 161.584212][ T8568] bond0: entered allmulticast mode [ 161.601698][ T8568] bond_slave_0: entered allmulticast mode [ 161.607809][ T8568] bond_slave_1: entered allmulticast mode [ 161.615246][ T8568] batadv0: entered allmulticast mode [ 161.633139][ T8568] team0: entered allmulticast mode [ 161.646294][ T8568] team_slave_0: entered allmulticast mode [ 161.657663][ T8568] team_slave_1: entered allmulticast mode [ 161.673265][ T8568] dummy0: entered allmulticast mode [ 161.694436][ T8568] nlmon0: entered allmulticast mode [ 161.711541][ T8568] vxcan0: entered allmulticast mode [ 161.719076][ T8568] vxcan1: entered allmulticast mode [ 161.732209][ T8568] veth0: entered allmulticast mode [ 161.750478][ T8568] veth1: entered allmulticast mode [ 161.772336][ T8568] wg0: entered allmulticast mode [ 161.784671][ T8568] wg1: entered allmulticast mode [ 161.802211][ T8568] wg2: entered allmulticast mode [ 161.815729][ T8568] veth0_to_bridge: entered allmulticast mode [ 161.848944][ T8568] veth1_to_bridge: entered allmulticast mode [ 161.879445][ T8568] veth0_to_bond: entered allmulticast mode [ 161.908529][ T8568] veth1_to_bond: entered allmulticast mode [ 161.934847][ T8568] veth0_to_team: entered allmulticast mode [ 161.962352][ T8568] veth1_to_team: entered allmulticast mode [ 161.990212][ T8568] veth0_to_batadv: entered allmulticast mode [ 162.006007][ T8568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.025993][ T8568] batadv_slave_0: entered allmulticast mode [ 162.034795][ T8568] veth1_to_batadv: entered allmulticast mode [ 162.056163][ T8568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.071821][ T8568] batadv_slave_1: entered allmulticast mode [ 162.087539][ T8568] xfrm0: entered allmulticast mode [ 162.107432][ T8568] veth0_to_hsr: entered allmulticast mode [ 162.117714][ T8568] hsr_slave_0: entered allmulticast mode [ 162.135560][ T8568] veth1_to_hsr: entered allmulticast mode [ 162.161962][ T8568] hsr_slave_1: entered allmulticast mode [ 162.172391][ T8568] hsr0: entered allmulticast mode [ 162.188729][ T8568] veth1_virt_wifi: entered allmulticast mode [ 162.203178][ T8568] veth0_virt_wifi: entered allmulticast mode [ 162.217182][ T8568] virt_wifi0: entered allmulticast mode [ 162.224980][ T8568] veth1_vlan: entered allmulticast mode [ 162.238259][ T8568] v: entered allmulticast mode [ 162.243635][ T8568] vlan0: entered allmulticast mode [ 162.253432][ T8568] vlan1: entered allmulticast mode [ 162.259624][ T8568] macvlan0: left promiscuous mode [ 162.267111][ T8568] macvlan0: entered allmulticast mode [ 162.279235][ T8568] macvlan1: entered allmulticast mode [ 162.289791][ T8568] ipvlan0: entered allmulticast mode [ 162.295625][ T8568] ipvlan1: entered allmulticast mode [ 162.301310][ T8568] veth1_macvtap: entered allmulticast mode [ 162.313698][ T8568] veth0_macvtap: entered allmulticast mode [ 162.327279][ T8568] macvtap0: entered allmulticast mode [ 162.343678][ T8568] macsec0: entered allmulticast mode [ 162.353238][ T8568] geneve0: entered allmulticast mode [ 162.367374][ T8568] geneve1: entered allmulticast mode [ 162.380727][ T8568] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 162.395612][ T8568] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 162.415203][ T8568] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 162.428802][ T8568] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 162.441191][ T8568] mac80211_hwsim hwsim11 wlan0: left promiscuous mode [ 162.448805][ T8568] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 162.462052][ T8568] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode [ 162.476173][ T8568] bridge1: entered allmulticast mode [ 162.482515][ T8568] ipvlan2: entered allmulticast mode [ 162.493292][ T8568] geneve2: entered allmulticast mode [ 162.506264][ T8568] erspan1: entered allmulticast mode [ 162.513301][ T8568] bond1: entered allmulticast mode [ 162.521174][ T8568] bond2: left promiscuous mode [ 162.526935][ T8568] ip6gre1: left promiscuous mode [ 162.534564][ T8568] bond2: entered allmulticast mode [ 162.539853][ T8568] ip6gre1: entered allmulticast mode [ 162.552069][ T8568] ppp0: entered allmulticast mode [ 162.579486][ T8586] bridge0: port 3(ipvlan3) entered blocking state [ 162.587585][ T8586] bridge0: port 3(ipvlan3) entered disabled state [ 162.596821][ T8586] ipvlan3: entered allmulticast mode [ 162.602442][ T8586] bridge0: entered allmulticast mode [ 162.610601][ T8586] ipvlan3: left allmulticast mode [ 162.615809][ T8586] bridge0: left allmulticast mode [ 162.664832][ T6733] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.699469][ T6733] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.725086][ T6733] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.754862][ T6733] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.761085][ T8598] netlink: 'syz.1.719': attribute type 1 has an invalid length. [ 162.861649][ T8601] netlink: 'syz.2.721': attribute type 1 has an invalid length. [ 162.867942][ T8606] netlink: 44 bytes leftover after parsing attributes in process `syz.1.719'. [ 163.239061][ T8633] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.677778][ T8660] __nla_validate_parse: 2 callbacks suppressed [ 163.677802][ T8660] netlink: 56 bytes leftover after parsing attributes in process `syz.3.736'. [ 163.767773][ T8660] bond1 (unregistering): Released all slaves [ 163.840016][ T8672] netlink: 'syz.0.740': attribute type 1 has an invalid length. [ 164.015699][ T8685] netlink: 'syz.1.743': attribute type 1 has an invalid length. [ 164.058992][ T8685] netlink: 'syz.1.743': attribute type 2 has an invalid length. [ 164.317230][ T8713] netlink: 'syz.4.751': attribute type 39 has an invalid length. [ 164.366105][ T8716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.752'. [ 164.662465][ T8729] netlink: 16 bytes leftover after parsing attributes in process `syz.4.756'. [ 164.701402][ T8739] netlink: 'syz.3.758': attribute type 11 has an invalid length. [ 164.712978][ T8739] netlink: 4312 bytes leftover after parsing attributes in process `syz.3.758'. [ 164.838969][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'. [ 164.878000][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 164.908888][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.761'. [ 165.020599][ T8757] syzkaller0: entered promiscuous mode [ 165.035645][ T8757] syzkaller0: entered allmulticast mode [ 165.321397][ T8772] netlink: 40 bytes leftover after parsing attributes in process `syz.3.771'. [ 165.373070][ T8772] netlink: 24 bytes leftover after parsing attributes in process `syz.3.771'. [ 165.467204][ T8780] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 165.569878][ T8791] netlink: 124 bytes leftover after parsing attributes in process `syz.4.776'. [ 165.717068][ T6728] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x69 [ 165.881721][ T8798] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.898185][ T8858] netlink: 'syz.4.797': attribute type 10 has an invalid length. [ 167.352699][ T8882] syzkaller0: entered promiscuous mode [ 167.360480][ T8882] syzkaller0: entered allmulticast mode [ 167.958689][ T8922] openvswitch: netlink: Missing key (keys=40, expected=100) [ 168.016537][ T8926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.047613][ T8926] 0ªX¹¦Dö»: left allmulticast mode [ 168.060662][ T8926] bond0: left allmulticast mode [ 168.065991][ T8926] bond_slave_0: left allmulticast mode [ 168.073577][ T8926] bond_slave_1: left allmulticast mode [ 168.090658][ T8926] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.097991][ T8926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.137607][ T8926] veth3: left allmulticast mode [ 168.151157][ T8926] vlan2: left allmulticast mode [ 168.161000][ T8926] veth1_virt_wifi: left allmulticast mode [ 168.229396][ T8929] syzkaller0: entered promiscuous mode [ 168.244107][ T8929] syzkaller0: entered allmulticast mode [ 168.586308][ T8959] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 168.597138][ T8959] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 168.922112][ T8977] __nla_validate_parse: 9 callbacks suppressed [ 168.922128][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.833'. [ 169.130830][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.838'. [ 169.212715][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.260974][ T5811] IPVS: starting estimator thread 0... [ 169.274925][ T9004] IPVS: sh: FWM 3 0x00000003 - no destination available [ 169.304551][ T9004] IPVS: sh: FWM 3 0x00000003 - no destination available [ 169.386727][ T9005] IPVS: using max 32 ests per chain, 76800 per kthread [ 169.425461][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 169.631160][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.655938][ T9021] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.836993][ T9043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.856106][ T6719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.866550][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.878897][ T5811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.892694][ T9041] netlink: 512 bytes leftover after parsing attributes in process `syz.1.851'. [ 169.932990][ T9041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.851'. [ 169.953926][ T9041] netlink: 80 bytes leftover after parsing attributes in process `syz.1.851'. [ 169.979609][ T9041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.851'. [ 170.340745][ T9078] netlink: 112 bytes leftover after parsing attributes in process `syz.2.863'. [ 170.404366][ T9075] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 170.491724][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.501922][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.512060][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.521458][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.529656][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.537896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.546129][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.554361][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.562566][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.570743][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.672723][ T9092] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.865'. [ 170.687891][ T9089] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.865'. [ 173.168907][ T9060] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.412173][ T9111] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20001 [ 173.430492][ T9113] netlink: 'syz.0.872': attribute type 1 has an invalid length. [ 173.464273][ T9112] netlink: 'syz.4.870': attribute type 1 has an invalid length. [ 173.569863][ T9114] bond5: (slave bridge5): making interface the new active one [ 173.579216][ T9114] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 173.938333][ T9144] IPv6: sit1: Disabled Multicast RS [ 175.612786][ T6719] net_ratelimit: 18 callbacks suppressed [ 175.612803][ T6719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.628576][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.639170][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.252119][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.828345][ T9143] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 176.979489][ T9207] netlink: 'syz.1.894': attribute type 11 has an invalid length. [ 177.017664][ T9210] macsec0: entered promiscuous mode [ 177.037899][ T9210] __nla_validate_parse: 4 callbacks suppressed [ 177.037916][ T9210] netlink: 56 bytes leftover after parsing attributes in process `syz.3.898'. [ 177.059568][ T9214] netlink: 300 bytes leftover after parsing attributes in process `syz.0.895'. [ 177.089285][ T9214] rdma_op ffff88807d1111f0 conn xmit_rdma 0000000000000000 [ 177.127510][ T9210] bond1 (unregistering): Released all slaves [ 177.189828][ T9220] bridge0: port 3(syz_tun) entered blocking state [ 177.213985][ T9220] bridge0: port 3(syz_tun) entered disabled state [ 177.222171][ T9220] syz_tun: entered allmulticast mode [ 177.244846][ T9224] netlink: 32 bytes leftover after parsing attributes in process `syz.1.899'. [ 177.254567][ T9220] syz_tun: entered promiscuous mode [ 177.274921][ T9220] bridge0: port 3(syz_tun) entered blocking state [ 177.282576][ T9220] bridge0: port 3(syz_tun) entered forwarding state [ 177.297383][ T9226] netlink: 52 bytes leftover after parsing attributes in process `syz.1.899'. [ 177.488730][ T9233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.503625][ T9233] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.579880][ T9233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.591209][ T9233] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.602766][ T9233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.617019][ T9233] veth1_vlan: left promiscuous mode [ 177.624365][ T9233] veth0_vlan: left promiscuous mode [ 177.632648][ T9233] veth0_vlan: entered promiscuous mode [ 177.640217][ T9233] veth1_vlan: entered promiscuous mode [ 177.649682][ T9233] veth1_macvtap: left promiscuous mode [ 177.655979][ T9233] veth0_macvtap: left promiscuous mode [ 177.662449][ T9233] veth0_macvtap: entered promiscuous mode [ 177.668977][ T9233] veth1_macvtap: entered promiscuous mode [ 177.679877][ T9233] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 177.687882][ T9233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 177.697643][ T9233] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 177.705487][ T9252] netlink: 'syz.2.907': attribute type 39 has an invalid length. [ 177.708129][ T9233] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 177.760378][ T9233] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 177.853374][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.863390][ T6719] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.899370][ T6719] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.920757][ T6719] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.932040][ T6719] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.176954][ T9267] netlink: 60 bytes leftover after parsing attributes in process `syz.0.912'. [ 178.190113][ T9269] lo speed is unknown, defaulting to 1000 [ 178.204693][ T9269] lo speed is unknown, defaulting to 1000 [ 178.236203][ T9270] ±ÿª¨úrBº: renamed from lo [ 178.255878][ T9269] ±ÿª¨úrBº speed is unknown, defaulting to 1000 [ 178.285986][ T9269] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 178.301959][ T9269] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 178.320013][ T9269] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 178.338580][ T9269] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 178.355769][ T9269] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 178.369525][ T9245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 178.584126][ T9269] ±ÿª¨úrBº speed is unknown, defaulting to 1000 [ 178.619343][ T9278] syzkaller0: entered promiscuous mode [ 178.638017][ T9278] syzkaller0: entered allmulticast mode [ 178.668822][ T9269] ±ÿª¨úrBº speed is unknown, defaulting to 1000 [ 178.670378][ T9278] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.915'. [ 178.798861][ T9269] ±ÿª¨úrBº speed is unknown, defaulting to 1000 [ 178.846904][ T9269] ±ÿª¨úrBº speed is unknown, defaulting to 1000 [ 178.891101][ T9269] ±ÿª¨úrBº speed is unknown, defaulting to 1000 [ 179.014227][ T9301] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 179.659205][ T9339] bond6 (unregistering): Released all slaves [ 179.674102][ T9344] netlink: 5 bytes leftover after parsing attributes in process `syz.2.934'. [ 179.886657][ T9353] set match dimension is over the limit! [ 180.068754][ T9370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.097980][ T9370] netlink: 16 bytes leftover after parsing attributes in process `syz.2.940'. [ 180.138795][ T9370] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.940'. [ 180.152583][ T9370] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.940'. [ 180.507195][ T9392] netlink: 'syz.1.948': attribute type 4 has an invalid length. [ 180.537419][ T9391] netlink: 'syz.1.948': attribute type 4 has an invalid length. [ 180.625200][ T9392] xt_hashlimit: overflow, try lower: 3/0 [ 180.625670][ T9394] xt_hashlimit: overflow, try lower: 3/0 [ 180.677332][ T9396] syzkaller0: entered promiscuous mode [ 180.695262][ T9396] syzkaller0: entered allmulticast mode [ 180.819179][ T9408] IPv6: sit1: Disabled Multicast RS [ 180.856684][ T9408] sit1: entered allmulticast mode [ 180.923543][ T9416] xt_ecn: cannot match TCP bits for non-tcp packets [ 180.932358][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.996931][ T9420] netlink: 'syz.1.956': attribute type 1 has an invalid length. [ 181.010467][ T9410] vlan2: entered allmulticast mode [ 181.026929][ T9410] bridge28: entered allmulticast mode [ 181.419748][ T9434] bond1: entered promiscuous mode [ 181.465101][ T9434] bond1: entered allmulticast mode [ 181.505047][ T9434] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.588192][ T9427] vlan3: entered promiscuous mode [ 181.611807][ T9427] bridge0: entered promiscuous mode [ 181.635613][ T9452] team0: entered promiscuous mode [ 181.650415][ T9452] team_slave_0: entered promiscuous mode [ 181.669751][ T9452] team_slave_1: entered promiscuous mode [ 181.683165][ T9452] team0: left allmulticast mode [ 182.019101][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.330824][ T9494] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 182.468191][ T9504] __nla_validate_parse: 5 callbacks suppressed [ 182.468209][ T9504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.977'. [ 183.307984][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.936899][ T9492] 8021q: VLANs not supported on ip6_vti0 [ 184.016365][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.106011][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.979'. [ 184.129261][ T9517] netlink: 'syz.3.980': attribute type 39 has an invalid length. [ 184.155566][ T9520] netlink: 'syz.2.982': attribute type 21 has an invalid length. [ 184.248055][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.983'. [ 184.457614][ T9542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.987'. [ 184.821526][ T9559] netlink: 260 bytes leftover after parsing attributes in process `syz.1.995'. [ 184.841379][ T9554] bond2: option resend_igmp: invalid value (32767) [ 184.853723][ T9554] bond2: option resend_igmp: allowed values 0 - 255 [ 184.862638][ T9554] bond2 (unregistering): Released all slaves [ 184.904853][ T9557] syzkaller1: entered promiscuous mode [ 184.910783][ T9557] syzkaller1: entered allmulticast mode [ 185.174911][ T9571] netlink: 'syz.0.998': attribute type 2 has an invalid length. [ 185.374171][ T9585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.607748][ T9601] x_tables: duplicate underflow at hook 2 [ 185.629399][ T9602] debugfs: '1ùà^!' already exists in 'ieee80211' [ 185.645585][ T9601] x_tables: duplicate underflow at hook 2 [ 185.659859][ T9601] x_tables: duplicate underflow at hook 2 [ 185.670631][ T9601] x_tables: duplicate underflow at hook 2 [ 185.681738][ T9601] x_tables: duplicate underflow at hook 2 [ 185.688852][ T9601] x_tables: duplicate underflow at hook 2 [ 185.697525][ T9601] x_tables: duplicate underflow at hook 2 [ 185.704024][ T9601] x_tables: duplicate underflow at hook 2 [ 185.709986][ T9601] x_tables: duplicate underflow at hook 2 [ 185.724968][ T9601] x_tables: duplicate underflow at hook 2 [ 185.744463][ T9602] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!' [ 185.761732][ T9602] CPU: 1 UID: 0 PID: 9602 Comm: syz.0.1008 Not tainted syzkaller #0 PREEMPT(full) [ 185.761757][ T9602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 185.761774][ T9602] Call Trace: [ 185.761782][ T9602] [ 185.761789][ T9602] dump_stack_lvl+0xe8/0x150 [ 185.761823][ T9602] sysfs_warn_dup+0x8e/0xa0 [ 185.761849][ T9602] sysfs_do_create_link_sd+0xc0/0x110 [ 185.761876][ T9602] device_add_class_symlinks+0x1cf/0x240 [ 185.761902][ T9602] device_add+0x467/0xb80 [ 185.761923][ T9602] wiphy_register+0x1fc8/0x2ff0 [ 185.761968][ T9602] ? __pfx_wiphy_register+0x10/0x10 [ 185.761994][ T9602] ? __pfx_netdev_run_todo+0x10/0x10 [ 185.762021][ T9602] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 185.762050][ T9602] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 185.762083][ T9602] ieee80211_register_hw+0x3d3d/0x4a50 [ 185.762126][ T9602] ? ieee80211_register_hw+0x19a1/0x4a50 [ 185.762183][ T9602] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 185.762216][ T9602] ? __asan_memset+0x22/0x50 [ 185.762238][ T9602] ? __hrtimer_setup+0x1b7/0x260 [ 185.762257][ T9602] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 185.762288][ T9602] mac80211_hwsim_new_radio+0x3238/0x5680 [ 185.762346][ T9602] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 185.762371][ T9602] ? kstrndup+0xbd/0x160 [ 185.762401][ T9602] ? kstrndup+0xbd/0x160 [ 185.762431][ T9602] hwsim_new_radio_nl+0xd8b/0xf90 [ 185.762473][ T9602] genl_family_rcv_msg_doit+0x233/0x340 [ 185.762505][ T9602] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 185.762544][ T9602] ? bpf_lsm_capable+0x9/0x20 [ 185.762566][ T9602] ? security_capable+0x7e/0x2c0 [ 185.762602][ T9602] genl_rcv_msg+0x614/0x7a0 [ 185.762633][ T9602] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.762657][ T9602] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 185.762682][ T9602] ? __pfx_ref_tracker_free+0x10/0x10 [ 185.762715][ T9602] netlink_rcv_skb+0x226/0x4a0 [ 185.762733][ T9602] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.762755][ T9602] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.762785][ T9602] ? down_read+0x2be/0x330 [ 185.762807][ T9602] genl_rcv+0x28/0x40 [ 185.762827][ T9602] netlink_unicast+0x7bb/0x940 [ 185.762867][ T9602] netlink_sendmsg+0x813/0xb40 [ 185.762897][ T9602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.762922][ T9602] ? aa_sock_msg_perm+0xf1/0x1b0 [ 185.762947][ T9602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.762975][ T9602] sock_sendmsg_nosec+0x13a/0x180 [ 185.763007][ T9602] ____sys_sendmsg+0x54e/0x850 [ 185.763032][ T9602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.763062][ T9602] ? import_iovec+0x73/0xa0 [ 185.763093][ T9602] ___sys_sendmsg+0x2a5/0x360 [ 185.763110][ T9602] ? __lock_acquire+0x683/0x2cf0 [ 185.763139][ T9602] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.763161][ T9602] ? futex_wait+0x2a2/0x390 [ 185.763212][ T9602] ? __fget_files+0x2a/0x420 [ 185.763236][ T9602] ? __fget_files+0x3a2/0x420 [ 185.763280][ T9602] __x64_sys_sendmsg+0x1b1/0x290 [ 185.763302][ T9602] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.763341][ T9602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.763362][ T9602] do_syscall_64+0x174/0x580 [ 185.763379][ T9602] ? trace_irq_disable+0x3b/0x140 [ 185.763402][ T9602] ? clear_bhb_loop+0x40/0x90 [ 185.763426][ T9602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.763443][ T9602] RIP: 0033:0x7fe8d859de99 [ 185.763460][ T9602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.763475][ T9602] RSP: 002b:00007fe8d67d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.763501][ T9602] RAX: ffffffffffffffda RBX: 00007fe8d8826090 RCX: 00007fe8d859de99 [ 185.763514][ T9602] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000004 [ 185.763525][ T9602] RBP: 00007fe8d8633eaf R08: 0000000000000000 R09: 0000000000000000 [ 185.763534][ T9602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.763544][ T9602] R13: 00007fe8d8826128 R14: 00007fe8d8826090 R15: 00007fff20615608 [ 185.763576][ T9602] [ 186.201702][ T9602] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!' [ 186.210868][ T9602] CPU: 1 UID: 0 PID: 9602 Comm: syz.0.1008 Not tainted syzkaller #0 PREEMPT(full) [ 186.210891][ T9602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 186.210901][ T9602] Call Trace: [ 186.210909][ T9602] [ 186.210917][ T9602] dump_stack_lvl+0xe8/0x150 [ 186.210950][ T9602] sysfs_warn_dup+0x8e/0xa0 [ 186.210975][ T9602] sysfs_do_create_link_sd+0xc0/0x110 [ 186.211002][ T9602] device_add_class_symlinks+0x1cf/0x240 [ 186.211026][ T9602] device_add+0x467/0xb80 [ 186.211047][ T9602] wiphy_register+0x1fc8/0x2ff0 [ 186.211092][ T9602] ? __pfx_wiphy_register+0x10/0x10 [ 186.211118][ T9602] ? __pfx_netdev_run_todo+0x10/0x10 [ 186.211140][ T9602] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 186.211171][ T9602] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 186.211203][ T9602] ieee80211_register_hw+0x3d3d/0x4a50 [ 186.211247][ T9602] ? ieee80211_register_hw+0x19a1/0x4a50 [ 186.211298][ T9602] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 186.211326][ T9602] ? __asan_memset+0x22/0x50 [ 186.211345][ T9602] ? __hrtimer_setup+0x1b7/0x260 [ 186.211362][ T9602] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 186.211391][ T9602] mac80211_hwsim_new_radio+0x3238/0x5680 [ 186.211453][ T9602] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 186.211476][ T9602] ? kstrndup+0xbd/0x160 [ 186.211504][ T9602] ? kstrndup+0xbd/0x160 [ 186.211531][ T9602] hwsim_new_radio_nl+0xd8b/0xf90 [ 186.211573][ T9602] genl_family_rcv_msg_doit+0x233/0x340 [ 186.211605][ T9602] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 186.211643][ T9602] ? bpf_lsm_capable+0x9/0x20 [ 186.211665][ T9602] ? security_capable+0x7e/0x2c0 [ 186.211701][ T9602] genl_rcv_msg+0x614/0x7a0 [ 186.211732][ T9602] ? __pfx_genl_rcv_msg+0x10/0x10 [ 186.211753][ T9602] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 186.211779][ T9602] ? __pfx_ref_tracker_free+0x10/0x10 [ 186.211813][ T9602] netlink_rcv_skb+0x226/0x4a0 [ 186.211834][ T9602] ? __pfx_genl_rcv_msg+0x10/0x10 [ 186.211859][ T9602] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.211895][ T9602] ? down_read+0x2be/0x330 [ 186.211915][ T9602] genl_rcv+0x28/0x40 [ 186.211936][ T9602] netlink_unicast+0x7bb/0x940 [ 186.211975][ T9602] netlink_sendmsg+0x813/0xb40 [ 186.212005][ T9602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.212029][ T9602] ? aa_sock_msg_perm+0xf1/0x1b0 [ 186.212054][ T9602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.212073][ T9602] sock_sendmsg_nosec+0x13a/0x180 [ 186.212099][ T9602] ____sys_sendmsg+0x54e/0x850 [ 186.212125][ T9602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.212154][ T9602] ? import_iovec+0x73/0xa0 [ 186.212185][ T9602] ___sys_sendmsg+0x2a5/0x360 [ 186.212202][ T9602] ? __lock_acquire+0x683/0x2cf0 [ 186.212232][ T9602] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.212255][ T9602] ? futex_wait+0x2a2/0x390 [ 186.212309][ T9602] ? __fget_files+0x2a/0x420 [ 186.212332][ T9602] ? __fget_files+0x3a2/0x420 [ 186.212367][ T9602] __x64_sys_sendmsg+0x1b1/0x290 [ 186.212388][ T9602] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.212433][ T9602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.212453][ T9602] do_syscall_64+0x174/0x580 [ 186.212471][ T9602] ? trace_irq_disable+0x3b/0x140 [ 186.212494][ T9602] ? clear_bhb_loop+0x40/0x90 [ 186.212517][ T9602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.212536][ T9602] RIP: 0033:0x7fe8d859de99 [ 186.212553][ T9602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.212568][ T9602] RSP: 002b:00007fe8d67d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.212588][ T9602] RAX: ffffffffffffffda RBX: 00007fe8d8826090 RCX: 00007fe8d859de99 [ 186.212601][ T9602] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000004 [ 186.212613][ T9602] RBP: 00007fe8d8633eaf R08: 0000000000000000 R09: 0000000000000000 [ 186.212624][ T9602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.212635][ T9602] R13: 00007fe8d8826128 R14: 00007fe8d8826090 R15: 00007fff20615608 [ 186.212667][ T9602] [ 186.670160][ T9616] netlink: 'syz.2.1013': attribute type 1 has an invalid length. [ 186.691749][ T9616] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1013'. [ 186.819657][ T9625] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1016'. [ 186.850215][ T5811] ±ÿª¨úrBº speed is unknown, defaulting to 1000 [ 186.878156][ T9618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1014'. [ 186.891135][ T9627] netlink: 'syz.1.1015': attribute type 11 has an invalid length. [ 186.913176][ T5811] syú2: Port: 1 Link ACTIVE [ 186.915229][ T9618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1014'. [ 187.337608][ T9658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1024'. [ 187.358473][ T9643] syzkaller0: entered promiscuous mode [ 187.372311][ T9643] syzkaller0: entered allmulticast mode [ 187.470566][ T9663] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 187.912137][ T29] audit: type=1800 audit(1784708417.640:2): pid=9674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1029" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1089 res=0 errno=0 [ 188.269500][ T9681] netlink: 'syz.3.1032': attribute type 1 has an invalid length. [ 189.303593][ T9681] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 189.371365][ T9687] netlink: 'syz.0.1034': attribute type 1 has an invalid length. [ 189.508894][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1034'. [ 189.543314][ T9701] block nbd1: Unsupported socket: should be TCP or UNIX. [ 189.552114][ T9687] bond6: entered promiscuous mode [ 189.557745][ T9687] 8021q: adding VLAN 0 to HW filter on device bond6 [ 189.650249][ T9687] netlink: 'syz.0.1034': attribute type 1 has an invalid length. [ 189.682179][ T9710] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1039'. [ 189.701651][ T9687] netlink: 'syz.0.1034': attribute type 2 has an invalid length. [ 189.833087][ T9687] bond6: (slave bridge6): making interface the new active one [ 189.859107][ T9687] bridge6: entered promiscuous mode [ 189.894857][ T9687] bridge6: left promiscuous mode [ 189.933290][ T9716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1042'. [ 189.974450][ T9722] team0: entered promiscuous mode [ 189.992881][ T9722] team_slave_0: entered promiscuous mode [ 189.998782][ T9722] team_slave_1: entered promiscuous mode [ 190.587485][ T9756] bridge0: port 3(syz_tun) entered disabled state [ 190.617431][ T9756] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.837094][ T9756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.850117][ T9756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.047877][ T6728] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 191.081401][ T6728] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 256 - 0 [ 191.091831][ T6728] netdevsim netdevsim1 netdevsim0: unset [0, 2] type 1 family 0 port 29281 - 0 [ 191.100879][ T6728] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.135913][ T6728] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 191.176388][ T6728] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 256 - 0 [ 191.209672][ T6728] netdevsim netdevsim1 netdevsim1: unset [0, 2] type 1 family 0 port 29281 - 0 [ 191.230711][ T9791] netlink: 'syz.2.1059': attribute type 9 has an invalid length. [ 191.248166][ T6728] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.268022][ T6728] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 191.277277][ T6728] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 256 - 0 [ 191.277333][ T9797] netlink: 'syz.3.1060': attribute type 5 has an invalid length. [ 191.287910][ T6728] netdevsim netdevsim1 netdevsim2: unset [0, 2] type 1 family 0 port 29281 - 0 [ 191.305039][ T6728] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.314845][ T6728] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 191.324272][ T6728] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 256 - 0 [ 191.333650][ T6728] netdevsim netdevsim1 netdevsim3: unset [0, 2] type 1 family 0 port 29281 - 0 [ 191.343123][ T6728] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.994139][ T9781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 194.178222][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.185906][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.279539][ T9833] netlink: 'syz.0.1067': attribute type 1 has an invalid length. [ 194.311038][ T9831] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1066'. [ 194.444273][ T9840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.485339][ T9840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1069'. [ 194.628007][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1072'. [ 194.814355][ T9858] netlink: 'syz.3.1075': attribute type 1 has an invalid length. [ 194.814911][ T9866] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1078'. [ 194.835241][ T9858] netlink: 'syz.3.1075': attribute type 1 has an invalid length. [ 195.042654][ T9879] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1082'. [ 195.059357][ T9878] netlink: 'syz.3.1081': attribute type 2 has an invalid length. [ 195.452798][ T6728] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.475658][ T6728] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.516664][ T6728] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.536607][ T6728] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.635896][ T9910] raw_sendmsg: syz.4.1091 forgot to set AF_INET. Fix it! [ 195.759446][ T9919] veth0: entered promiscuous mode [ 195.777865][ T9919] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1095'. [ 195.822844][ T9918] veth0: left promiscuous mode [ 195.838137][ T9921] syzkaller0: entered promiscuous mode [ 195.849098][ T9921] syzkaller0: entered allmulticast mode [ 195.861371][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1098'. [ 195.894486][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1098'. [ 195.913529][ T9927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1098'. [ 195.940981][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1100'. [ 195.977931][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1100'. [ 196.086001][ T9934] syzkaller0: entered promiscuous mode [ 196.101595][ T9934] syzkaller0: entered allmulticast mode [ 196.117391][ T9941] netlink: 'syz.1.1103': attribute type 1 has an invalid length. [ 196.125367][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1103'. [ 196.169169][ T9943] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 196.191088][ T9943] siw: device registration error -23 [ 196.261241][ T9943] ±ÿª¨úrBº: renamed from lo (while UP) [ 196.363750][ T9958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.566265][ T9965] syzkaller0: entered promiscuous mode [ 196.581962][ T9965] syzkaller0: entered allmulticast mode [ 197.156608][ T9993] bond9: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 197.183210][ T9993] bond9 (unregistering): Released all slaves [ 197.246511][T10008] netlink: 'syz.2.1122': attribute type 1 has an invalid length. [ 197.595851][T10019] xt_recent: Unsupported userspace flags (000000b1) [ 197.624737][T10021] syzkaller0: entered promiscuous mode [ 197.640578][T10021] syzkaller0: entered allmulticast mode [ 197.843876][T10036] netlink: 'syz.3.1131': attribute type 3 has an invalid length. [ 197.888969][T10034] netlink: 'syz.3.1131': attribute type 1 has an invalid length. [ 198.273815][T10077] netlink: 'syz.0.1142': attribute type 4 has an invalid length. [ 198.333436][T10082] xt_hashlimit: size too large, truncated to 1048576 [ 198.568005][T10086] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 201.094902][T10056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.295002][T10103] __nla_validate_parse: 13 callbacks suppressed [ 201.295019][T10103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1147'. [ 201.382036][T10096] Bluetooth: hci2: command 0x0406 tx timeout [ 201.392487][T10095] Bluetooth: hci0: command 0x0406 tx timeout [ 201.400703][T10096] Bluetooth: hci1: command 0x0406 tx timeout [ 201.406869][T10095] Bluetooth: hci3: command 0x0406 tx timeout [ 201.408227][T10117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1152'. [ 201.561047][T10125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1154'. [ 201.607728][T10127] netlink: 'syz.3.1155': attribute type 1 has an invalid length. [ 201.615990][T10127] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1155'. [ 201.626201][T10127] netlink: 'syz.3.1155': attribute type 1 has an invalid length. [ 201.634063][T10127] netlink: 2016 bytes leftover after parsing attributes in process `syz.3.1155'. [ 201.689075][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1156'. [ 201.719383][T10134] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1157'. [ 201.729796][T10134] openvswitch: netlink: IPv4 tun info is not correct [ 201.826778][T10142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1158'. [ 202.077570][T10160] syzkaller0: entered promiscuous mode [ 202.083680][T10160] syzkaller0: entered allmulticast mode [ 202.212241][T10169] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1167'. [ 202.960778][T10193] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1176'. [ 203.458991][T10218] netlink: 'syz.0.1183': attribute type 75 has an invalid length. [ 203.891241][T10248] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 203.922398][T10251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.995867][T10251] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 204.041774][T10251] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 204.101635][T10251] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 204.187149][T10251] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 204.481241][T10275] syzkaller0: entered promiscuous mode [ 204.493675][T10275] syzkaller0: entered allmulticast mode [ 204.767257][T10286] ip6gre1: entered allmulticast mode [ 205.577531][T10306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.823055][T10306] macsec0: left promiscuous mode [ 206.153256][T10306] vlan2: left allmulticast mode [ 206.158193][T10306] bridge28: left allmulticast mode [ 206.165468][T10306] bond1: left promiscuous mode [ 206.170445][T10306] bond1: left allmulticast mode [ 206.229985][ T6733] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.263854][ T6733] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.287407][ T6733] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.328597][ T6733] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.365853][T10325] __nla_validate_parse: 7 callbacks suppressed [ 206.365869][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1214'. [ 206.387550][T10324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1215'. [ 206.413590][T10326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1214'. [ 206.635583][T10345] bridge0: port 4(veth1_to_bridge) entered blocking state [ 206.662092][T10345] bridge0: port 4(veth1_to_bridge) entered disabled state [ 206.689797][T10345] veth1_to_bridge: entered allmulticast mode [ 206.744095][T10345] veth1_to_bridge: entered promiscuous mode [ 206.825063][T10359] netlink: 'syz.0.1226': attribute type 11 has an invalid length. [ 206.873092][T10361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1227'. [ 207.059254][T10368] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1230'. [ 207.170083][T10377] netlink: 'syz.0.1233': attribute type 1 has an invalid length. [ 207.449691][T10396] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1239'. [ 207.497109][T10396] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1239'. [ 207.582288][ T10] IPVS: starting estimator thread 0... [ 207.637137][T10405] netdevsim netdevsim1 netdevsim2: IPsec offload requires 128 bit authentication [ 207.679122][T10405] Unsupported ieee802154 address type: 0 [ 207.716437][T10408] IPVS: using max 38 ests per chain, 91200 per kthread [ 207.950226][T10428] syzkaller1: entered promiscuous mode [ 207.976263][T10428] syzkaller1: entered allmulticast mode [ 208.098207][T10427] netlink: 'syz.4.1248': attribute type 1 has an invalid length. [ 208.312866][T10447] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1255'. [ 208.323858][T10447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1255'. [ 208.373791][T10447] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1255'. [ 208.897963][T10483] syzkaller0: entered promiscuous mode [ 208.922025][T10483] syzkaller0: entered allmulticast mode [ 208.954730][T10489] ¾x9ÿ: renamed from bridge_slave_0 [ 209.259558][T10509] xt_cgroup: xt_cgroup: no path or classid specified [ 209.382402][T10517] bridge5: entered promiscuous mode [ 209.446036][T10518] netlink: 'syz.0.1275': attribute type 1 has an invalid length. [ 209.510744][T10518] 8021q: adding VLAN 0 to HW filter on device bond7 [ 209.537755][T10526] bond7: (slave veth0_to_bond): making interface the new active one [ 209.548394][T10526] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 209.863581][ T29] audit: type=1800 audit(1784708439.600:3): pid=10534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1282" name="memory.events" dev="tmpfs" ino=1287 res=0 errno=0 [ 209.925611][ T29] audit: type=1804 audit(1784708439.620:4): pid=10534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1282" name="/newroot/249/memory.events" dev="tmpfs" ino=1287 res=1 errno=0 [ 212.224477][T10509] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 212.470280][T10556] sch_tbf: burst 0 is lower than device lo mtu (21) ! [ 212.491864][T10556] sctp: [Deprecated]: syz.2.1288 (pid 10556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.491864][T10556] Use struct sctp_sack_info instead [ 212.562387][T10571] netlink: 'syz.0.1294': attribute type 12 has an invalid length. [ 212.608771][T10573] netlink: 'syz.3.1295': attribute type 1 has an invalid length. [ 212.775219][T10581] gretap0: entered promiscuous mode [ 212.820354][T10591] xt_CT: You must specify a L4 protocol and not use inversions on it [ 212.839486][T10581] vlan2: entered promiscuous mode [ 213.002438][T10598] __nla_validate_parse: 6 callbacks suppressed [ 213.003496][T10598] netlink: 284 bytes leftover after parsing attributes in process `syz.3.1302'. [ 213.030465][T10600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1303'. [ 213.191135][T10610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1307'. [ 213.412388][T10619] netlink: 'syz.3.1310': attribute type 3 has an invalid length. [ 213.607906][T10636] geneve3: entered promiscuous mode [ 213.619082][ T6727] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 59722 - 0 [ 213.628339][ T6727] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 59722 - 0 [ 213.656755][ T6727] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 59722 - 0 [ 213.665940][ T6727] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 59722 - 0 [ 214.110267][T10661] netlink: 'syz.1.1318': attribute type 61 has an invalid length. [ 214.317316][T10674] netlink: 'syz.4.1320': attribute type 32 has an invalid length. [ 214.467219][T10681] netlink: 'syz.1.1323': attribute type 4 has an invalid length. [ 214.503953][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1323'. [ 214.656342][T10689] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1327'. [ 214.687550][T10689] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1327'. [ 214.690910][T10692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1326'. [ 214.728868][T10689] veth0: entered promiscuous mode [ 214.760549][T10688] veth0: left promiscuous mode [ 215.054351][T10714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.324700][T10733] netlink: 'syz.4.1335': attribute type 1 has an invalid length. [ 215.349396][T10733] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1335'. [ 215.390507][T10733] netlink: 'syz.4.1335': attribute type 1 has an invalid length. [ 215.681734][T10756] syzkaller0: entered promiscuous mode [ 215.704995][T10756] syzkaller0: entered allmulticast mode [ 216.666582][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1352'. [ 218.087757][T10814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1352'. [ 218.108964][T10814] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1352'. [ 218.126597][T10814] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1352'. [ 218.819251][T10860] v: renamed from dummy0 [ 219.054064][T10870] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.070767][T10870] tc_dump_action: action bad kind [ 219.242482][T10876] syzkaller0: entered promiscuous mode [ 219.258751][T10876] syzkaller0: entered allmulticast mode [ 219.290905][T10876] 0: reclassify loop, rule prio 0, protocol 800 [ 219.609051][T10900] netlink: 'syz.2.1375': attribute type 8 has an invalid length. [ 220.579128][T10910] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1378'. [ 220.606999][T10910] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 222.227093][T10879] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 222.477592][T10952] xt_hashlimit: size too large, truncated to 1048576 [ 222.503423][T10953] xt_hashlimit: size too large, truncated to 1048576 [ 222.687311][T10965] netlink: 'syz.2.1390': attribute type 11 has an invalid length. [ 222.728287][T10965] netlink: 'syz.2.1390': attribute type 12 has an invalid length. [ 222.754853][T10965] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1390'. [ 223.207755][T10999] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1395'. [ 223.233244][T10996] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1395'. [ 223.560600][T11022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.954419][T11039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1406'. [ 223.979130][T11038] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1405'. [ 224.294800][T11061] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1410'. [ 224.319917][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1410'. [ 224.346772][T11061] netlink: 'syz.3.1410': attribute type 12 has an invalid length. [ 224.778256][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1424'. [ 224.800578][T11087] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1424'. [ 224.832333][T11091] netlink: 'syz.0.1423': attribute type 2 has an invalid length. [ 224.922504][T11095] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1425'. [ 224.939699][T11095] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1425'. [ 224.980634][T11050] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 224.999003][T11050] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 225.172908][T11103] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 225.205168][T11103] bond2 (unregistering): Released all slaves [ 225.547785][T11126] openvswitch: netlink: Flow key attr not present in new flow. [ 225.656077][T11133] netlink: 'syz.0.1441': attribute type 1 has an invalid length. [ 225.711862][T11133] bond8: entered promiscuous mode [ 225.717485][T11133] 8021q: adding VLAN 0 to HW filter on device bond8 [ 225.735977][T11136] xt_check_table_hooks: 56 callbacks suppressed [ 225.735993][T11136] x_tables: duplicate underflow at hook 1 [ 225.780822][T11142] bond10: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 225.799724][T11142] bond10 (unregistering): Released all slaves [ 225.824664][T11148] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 225.847290][T11148] bond5: entered promiscuous mode [ 225.853939][T11148] 8021q: adding VLAN 0 to HW filter on device bond5 [ 225.925604][T11146] bond8: (slave bridge6): making interface the new active one [ 225.937038][T11146] bridge6: entered promiscuous mode [ 225.944760][T11146] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 226.040077][T11148] bond5: (slave bridge3): making interface the new active one [ 226.076162][T11148] bridge3: entered promiscuous mode [ 226.108688][T11148] bridge3: left promiscuous mode [ 226.241796][T11172] netlink: 'syz.3.1451': attribute type 83 has an invalid length. [ 226.729705][T11195] bond6: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 226.747067][T11195] bond6 (unregistering): Released all slaves [ 226.942394][T11216] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 227.012530][T11216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.055981][T11216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.516861][T11248] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 227.660972][T11248] bond3 (unregistering): Released all slaves [ 227.924238][T11277] sctp: [Deprecated]: syz.3.1484 (pid 11277) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.924238][T11277] Use struct sctp_sack_info instead [ 227.947627][T11276] syzkaller0: entered promiscuous mode [ 227.955258][T11276] syzkaller0: entered allmulticast mode [ 227.974999][T11279] block nbd2: Unsupported socket: should be TCP or UNIX. [ 228.444497][T11306] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 228.475125][T11306] bond2 (unregistering): Released all slaves [ 228.635808][T11297] __nla_validate_parse: 19 callbacks suppressed [ 228.635827][T11297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1488'. [ 228.770948][T11329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1494'. [ 228.788242][T11330] netlink: 'syz.4.1493': attribute type 33 has an invalid length. [ 228.807905][T11297] bond2: option mode: invalid value (255) [ 228.821259][T11297] bond2 (unregistering): Released all slaves [ 228.853316][T11342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1494'. [ 228.977359][T11330] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 228.996018][T11330] bond3 (unregistering): Released all slaves [ 229.103254][T11345] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1494'. [ 229.484074][ T7432] udevd[7432]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 229.488512][T11380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1501'. [ 229.516003][T11382] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 229.534881][ T7432] udevd[7432]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 229.604148][T11386] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1506'. [ 229.624673][T11386] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1506'. [ 229.855492][T11395] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1509'. [ 230.176487][T11419] vlan2: entered promiscuous mode [ 230.188669][T11419] bridge0: entered promiscuous mode [ 230.428048][T11441] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1520'. [ 230.602804][T11446] netlink: 'syz.2.1522': attribute type 10 has an invalid length. [ 230.632870][T11455] syzkaller0: entered promiscuous mode [ 230.638719][T11455] syzkaller0: entered allmulticast mode [ 230.676565][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1524'. [ 230.801370][T11465] netlink: 'syz.3.1529': attribute type 83 has an invalid length. [ 231.030287][T11478] netlink: 'syz.2.1533': attribute type 1 has an invalid length. [ 231.130066][T11478] 8021q: adding VLAN 0 to HW filter on device bond6 [ 231.200944][T11481] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 231.247559][T11478] macvlan2: entered promiscuous mode [ 231.253680][T11478] macvlan2: entered allmulticast mode [ 231.261312][T11478] bond6: entered promiscuous mode [ 231.267045][T11478] veth0_to_bond: entered promiscuous mode [ 231.277445][T11478] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 231.299672][T11478] bond6: left promiscuous mode [ 231.308120][T11478] veth0_to_bond: left promiscuous mode [ 231.350758][T11499] netlink: 'syz.3.1538': attribute type 1 has an invalid length. [ 231.669533][ T6730] nci: nci_ntf_packet: unknown ntf opcode 0xd31 [ 231.745656][T11521] xt_ecn: cannot match TCP bits for non-tcp packets [ 232.151996][T11544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.160842][T11544] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.176787][T11544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.222341][T11544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.237546][T11544] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.250388][T11544] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.269453][T11544] veth1_vlan: left promiscuous mode [ 232.277490][T11544] veth0_vlan: left promiscuous mode [ 232.285635][T11544] veth0_vlan: entered promiscuous mode [ 232.294438][T11544] veth1_vlan: entered promiscuous mode [ 232.307861][T11544] veth1_macvtap: left promiscuous mode [ 232.315920][T11544] veth0_macvtap: left promiscuous mode [ 232.335645][T11544] veth0_macvtap: entered promiscuous mode [ 232.349132][T11544] veth1_macvtap: entered promiscuous mode [ 232.379991][T11544] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 232.405726][T11544] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 232.419359][T11544] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 232.435043][T11544] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 232.522952][T11547] can: request_module (can-proto-0) failed. [ 232.544820][T11544] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 232.778118][ T6725] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.787250][ T6725] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.808160][ T6725] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.820160][ T6725] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.907258][T11558] syzkaller0: entered promiscuous mode [ 232.915032][T11558] syzkaller0: entered allmulticast mode [ 234.433983][T11505] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 234.652013][T11582] __nla_validate_parse: 13 callbacks suppressed [ 234.652030][T11582] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1555'. [ 234.676208][T11581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1557'. [ 234.847872][T11596] xfrm1: entered promiscuous mode [ 234.854346][T11596] xfrm1: entered allmulticast mode [ 235.031856][T11610] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1564'. [ 235.110658][T11619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1565'. [ 235.293010][T11627] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 235.345360][T11635] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1568'. [ 235.406190][T11638] netlink: 'syz.1.1569': attribute type 1 has an invalid length. [ 235.474884][T11638] macvtap1: entered allmulticast mode [ 235.497709][T11638] bond10: (slave bridge4): making interface the new active one [ 235.517788][T11638] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 238.076203][T11619] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 238.327388][T11675] tipc: Started in network mode [ 238.332356][T11680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1573'. [ 238.353086][T11675] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 238.366392][T11675] tipc: Enabled bearer , priority 24 [ 238.408083][T11680] bond7: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 238.423961][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1577'. [ 238.425092][T11680] bond7 (unregistering): Released all slaves [ 238.446916][T11687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1576'. [ 238.543567][T11691] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1579'. [ 238.708651][T11701] netlink: 'syz.1.1583': attribute type 5 has an invalid length. [ 238.851088][T11710] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1586'. [ 239.164181][T11729] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 239.178492][T11729] bond3 (unregistering): Released all slaves [ 239.273806][T11734] syz_tun: left allmulticast mode [ 239.298863][T11734] syz_tun: left promiscuous mode [ 239.309282][T11734] bridge0: port 3(syz_tun) entered disabled state [ 239.320286][T11734] bridge_slave_0: left allmulticast mode [ 239.327786][T11734] bridge_slave_0: left promiscuous mode [ 239.335829][T11734] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.465757][T11734] veth1_to_bridge: left allmulticast mode [ 239.474942][T11734] veth1_to_bridge: left promiscuous mode [ 239.485508][T11734] bridge0: port 4(veth1_to_bridge) entered disabled state [ 239.504298][T11734] bridge_slave_1: left allmulticast mode [ 239.510456][T11734] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.523579][T11734] bond6: (slave veth0_to_bond): Releasing active interface [ 239.533187][T11734] bond6: (slave veth3): making interface the new active one [ 239.545946][T11734] bond0: (slave bond_slave_0): Releasing backup interface [ 239.556947][T11734] bond0: (slave bond_slave_1): Releasing backup interface [ 239.568965][T11734] team_slave_0: left promiscuous mode [ 239.578134][T11734] team0: Port device team_slave_0 removed [ 239.587558][T11734] team_slave_1: left promiscuous mode [ 239.601105][T11734] team0: Port device team_slave_1 removed [ 239.615740][T11734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.640028][T11734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.660854][T11734] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 239.698789][T11745] tipc: Started in network mode [ 239.709937][T11745] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 239.728436][T11745] tipc: Enabled bearer , priority 0 [ 239.744842][ T5747] tipc: Node number set to 10005162 [ 239.956178][T11753] syzkaller0: entered promiscuous mode [ 239.973596][T11753] syzkaller0: entered allmulticast mode [ 240.000621][T11769] __nla_validate_parse: 3 callbacks suppressed [ 240.000640][T11769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1601'. [ 240.319474][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1605'. [ 240.412853][T11785] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1606'. [ 240.434594][T11785] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1606'. [ 240.455613][T11785] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1606'. [ 240.486390][T11785] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1606'. [ 240.525325][T11785] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1606'. [ 240.553958][T11785] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1606'. [ 240.586758][T11785] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1606'. [ 240.611203][T11785] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1606'. [ 242.258379][T11804] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 242.266118][ T5739] tipc: Node number set to 11578026 [ 242.706621][T11842] syz_tun: entered allmulticast mode [ 242.763623][T11842] dvmrp8: entered allmulticast mode [ 242.770914][T11841] syz_tun: left allmulticast mode [ 242.840151][T11845] syzkaller0: entered promiscuous mode [ 242.846390][T11845] syzkaller0: entered allmulticast mode [ 242.994314][T11853] tipc: Started in network mode [ 242.999456][T11853] tipc: Node identity 2003, cluster identity 4711 [ 243.006843][T11853] tipc: Node number set to 8195 [ 243.031326][T11855] syzkaller0: entered promiscuous mode [ 243.037435][T11855] syzkaller0: entered allmulticast mode [ 243.135032][T11857] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 243.150955][T11857] bond3 (unregistering): Released all slaves [ 243.210885][T11818] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 243.459230][T11872] netlink: 'syz.3.1632': attribute type 1 has an invalid length. [ 243.537976][T11872] 8021q: adding VLAN 0 to HW filter on device bond3 [ 243.799542][T11887] team0: Port device team_slave_0 removed [ 244.188335][T11898] netlink: 'syz.0.1635': attribute type 5 has an invalid length. [ 244.314858][ T6728] bond7: (slave veth0_to_bond): link status definitely down, disabling slave [ 244.359525][ T6728] bond7: now running without any active interface! [ 244.411171][T11925] xfrm0: entered allmulticast mode [ 244.421844][ T4940] Bluetooth: hci0: command 0x0406 tx timeout [ 244.429607][T11889] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 244.460816][T11889] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 244.537172][T11927] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 244.574516][T11889] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 244.595301][T11927] bond3 (unregistering): Released all slaves [ 244.614535][T11889] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 244.650783][T11889] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 244.668470][T11889] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 244.723145][T11889] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 244.748581][T11889] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 244.789366][T11889] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 244.801784][T11889] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 244.889742][T11948] ip6erspan0: entered allmulticast mode [ 244.943988][T11948] batadv_slave_1: entered promiscuous mode [ 244.968177][T11947] batadv_slave_1: left promiscuous mode [ 245.131197][T11958] __nla_validate_parse: 30 callbacks suppressed [ 245.131217][T11958] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1648'. [ 245.253755][T11962] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1649'. [ 245.265763][T11970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1651'. [ 245.406296][T11979] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1652'. [ 245.556279][T11989] netlink: 'syz.0.1655': attribute type 4 has an invalid length. [ 245.566455][T11989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1655'. [ 245.587083][T11989] openvswitch: netlink: Duplicate or invalid key (type 0). [ 245.616727][T11989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.748217][T12007] netlink: 'syz.3.1658': attribute type 2 has an invalid length. [ 245.759395][T12004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1657'. [ 245.794630][T12007] : entered promiscuous mode [ 245.840687][T12004] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 245.853261][T12004] bond3 (unregistering): Released all slaves [ 245.887595][T12006] tipc: Enabling of bearer rejected, failed to enable media [ 245.906087][T12011] tipc: Enabling of bearer rejected, failed to enable media [ 246.681760][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1670'. [ 246.774289][T12058] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 246.798034][T12058] bond3 (unregistering): Released all slaves [ 247.170716][T12090] netlink: 'syz.4.1677': attribute type 1 has an invalid length. [ 247.342082][T12105] netlink: 'syz.0.1678': attribute type 6 has an invalid length. [ 247.353220][T12090] 8021q: adding VLAN 0 to HW filter on device bond3 [ 247.375751][T12095] bond3: (slave gretap1): making interface the new active one [ 247.384740][T12095] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 247.405086][T12097] xt_TCPMSS: Only works on TCP SYN packets [ 247.436430][T12104] syzkaller0: entered promiscuous mode [ 247.442583][T12104] syzkaller0: entered allmulticast mode [ 247.810346][T12124] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1685'. [ 247.831010][T12130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1687'. [ 247.850952][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1688'. [ 247.866679][T12134] netlink: 'syz.0.1689': attribute type 39 has an invalid length. [ 247.917078][T12130] bond11: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 247.945528][T12130] bond11 (unregistering): Released all slaves [ 248.405394][T12163] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 248.433437][T12156] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 248.455153][T12156] bond4 (unregistering): Released all slaves [ 248.907996][T12193] syzkaller1: entered promiscuous mode [ 248.917613][T12193] syzkaller1: entered allmulticast mode [ 248.932634][T12193] ipvlan1: left allmulticast mode [ 249.346631][T12204] bond7: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 249.379038][T12204] bond7 (unregistering): Released all slaves [ 249.410748][T12218] xfrm0 speed is unknown, defaulting to 1000 [ 249.449411][T12224] netlink: 'syz.4.1706': attribute type 16 has an invalid length. [ 249.458016][T12218] xfrm0 speed is unknown, defaulting to 1000 [ 249.482399][T12218] xfrm0 speed is unknown, defaulting to 1000 [ 249.495701][T12218] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 249.567905][T12218] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 249.618900][T12218] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 249.708379][T12218] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 249.737000][ T6733] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.751364][ T6733] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.789802][ T6733] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.863910][ T6733] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.875119][T12218] xfrm0 speed is unknown, defaulting to 1000 [ 249.920316][T12218] xfrm0 speed is unknown, defaulting to 1000 [ 249.951043][T12218] xfrm0 speed is unknown, defaulting to 1000 [ 249.991337][T12218] xfrm0 speed is unknown, defaulting to 1000 [ 250.238938][T12218] xfrm0 speed is unknown, defaulting to 1000 [ 250.357870][T12274] __nla_validate_parse: 9 callbacks suppressed [ 250.357888][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1718'. [ 250.488845][T12274] bond11: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 250.522953][T12279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1719'. [ 250.548622][T12274] bond11 (unregistering): Released all slaves [ 250.555700][T12288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1720'. [ 250.667942][T12292] netlink: 'syz.0.1719': attribute type 1 has an invalid length. [ 250.798349][T12292] 8021q: adding VLAN 0 to HW filter on device bond9 [ 250.833997][T12295] bond9: (slave gretap1): making interface the new active one [ 250.843503][T12295] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 250.981341][T12312] netlink: 'syz.4.1726': attribute type 1 has an invalid length. [ 251.001959][T12312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1726'. [ 251.225311][T12329] netlink: 'syz.4.1730': attribute type 8 has an invalid length. [ 251.241080][T12331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1731'. [ 251.252887][T12329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1730'. [ 251.365715][T12333] xt_TCPMSS: Only works on TCP SYN packets [ 251.383891][T12338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1734'. [ 251.393539][T12333] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1733'. [ 251.547559][T12338] bond11: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 251.604831][T12338] bond11 (unregistering): Released all slaves [ 251.746830][T12344] syzkaller0: entered promiscuous mode [ 251.765042][T12344] syzkaller0: entered allmulticast mode [ 251.962702][T12374] netlink: 'syz.4.1743': attribute type 142 has an invalid length. [ 251.965158][T12371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1741'. [ 252.139603][T12387] netlink: 'syz.2.1745': attribute type 1 has an invalid length. [ 252.200114][T12387] 8021q: adding VLAN 0 to HW filter on device bond7 [ 252.290800][T12390] bond7: (slave veth3): Enslaving as an active interface with a down link [ 252.310757][T12387] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 252.322944][T12387] bond7: (slave batadv1): making interface the new active one [ 252.332047][T12387] batadv1: entered promiscuous mode [ 252.345229][T12387] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 252.577652][T12422] bond11: option miimon: invalid value (18446744072240723971) [ 252.585919][T12422] bond11: option miimon: allowed values 0 - 2147483647 [ 252.605462][T12422] bond11 (unregistering): Released all slaves [ 252.878616][T12443] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1759'. [ 252.920581][T12443] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 253.365837][T12487] netlink: 'syz.1.1772': attribute type 1 has an invalid length. [ 253.432415][T12490] netlink: 'syz.4.1774': attribute type 1 has an invalid length. [ 253.478517][T12490] bond4: entered promiscuous mode [ 253.484881][T12490] 8021q: adding VLAN 0 to HW filter on device bond4 [ 253.516211][T12496] bond4: (slave bridge6): making interface the new active one [ 253.523818][T12496] bridge6: entered promiscuous mode [ 253.530147][T12496] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 253.699963][T12508] 0·: renamed from hsr0 (while UP) [ 253.720913][T12508] 0·: entered allmulticast mode [ 253.729400][T12508] hsr_slave_0: entered allmulticast mode [ 253.739468][T12508] hsr_slave_1: entered allmulticast mode [ 253.755006][T12508] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 254.108118][T12528] netlink: 'syz.2.1787': attribute type 21 has an invalid length. [ 254.767358][T12566] netlink: 'syz.0.1802': attribute type 1 has an invalid length. [ 254.907734][T12566] 8021q: adding VLAN 0 to HW filter on device bond10 [ 255.196654][T12597] SET target dimension over the limit! [ 255.607728][T12615] netlink: 'syz.4.1816': attribute type 1 has an invalid length. [ 255.619435][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.627440][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.652293][T12623] __nla_validate_parse: 14 callbacks suppressed [ 255.652312][T12623] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1818'. [ 255.716684][T12615] 8021q: adding VLAN 0 to HW filter on device bond5 [ 255.734291][T12627] ip6gre3: entered promiscuous mode [ 255.739691][T12627] ip6gre3: entered allmulticast mode [ 255.794096][T12629] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 256.056627][T12648] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.163863][T12654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.194456][T12654] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 256.196431][ T6733] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 256.215922][ T6733] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 256.225028][ T6733] bond0: (slave batadv0): link status definitely down, disabling slave [ 256.239928][ T6733] bond0: now running without any active interface! [ 256.304309][T12670] netlink: 816 bytes leftover after parsing attributes in process `syz.3.1829'. [ 256.335845][T12662] syzkaller0: entered promiscuous mode [ 256.346801][T12662] syzkaller0: entered allmulticast mode [ 256.369971][T12673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1831'. [ 256.386321][T12678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1830'. [ 256.386919][T12662] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1829'. [ 256.406627][T12673] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 256.503238][T12681] ±ÿª¨úrBº: left allmulticast mode [ 256.544441][T12681] tunl0: left allmulticast mode [ 256.563528][T12683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1833'. [ 256.565491][T12681] gre0: left allmulticast mode [ 256.584941][T12681] gretap0: left allmulticast mode [ 256.593980][T12681] erspan0: left allmulticast mode [ 256.601269][T12681] ip_vti0: left allmulticast mode [ 256.608745][T12681] ip6_vti0: left allmulticast mode [ 256.615602][T12681] sit0: left allmulticast mode [ 256.626008][T12681] ip6tnl0: left allmulticast mode [ 256.642234][T12681] ip6gre0: left allmulticast mode [ 256.648606][T12681] ip6gretap0: left allmulticast mode [ 256.655768][T12681] bridge0: left allmulticast mode [ 256.664056][T12681] team0: left promiscuous mode [ 256.668916][T12681] team_slave_0: left promiscuous mode [ 256.674764][T12681] team_slave_1: left promiscuous mode [ 256.681309][T12681] dummy0: left allmulticast mode [ 256.687059][T12681] nlmon0: left allmulticast mode [ 256.692711][T12681] veth0: left allmulticast mode [ 256.698370][T12681] veth1: left allmulticast mode [ 256.704621][T12681] wg0: left allmulticast mode [ 256.709523][T12681] wg2: left allmulticast mode [ 256.714768][T12681] veth0_to_bridge: left allmulticast mode [ 256.720820][T12681] veth1_to_bridge: left allmulticast mode [ 256.727134][T12681] veth0_to_bond: left allmulticast mode [ 256.737494][T12681] veth1_to_bond: left allmulticast mode [ 256.743851][T12681] veth0_to_team: left allmulticast mode [ 256.750013][T12681] team_slave_0: left allmulticast mode [ 256.756123][T12681] veth1_to_team: left allmulticast mode [ 256.762010][T12681] team_slave_1: left allmulticast mode [ 256.767701][T12681] veth0_to_batadv: left allmulticast mode [ 256.774226][T12681] batadv_slave_0: left allmulticast mode [ 256.780090][T12681] veth1_to_batadv: left allmulticast mode [ 256.786051][T12681] batadv_slave_1: left allmulticast mode [ 256.792249][T12681] xfrm0: left allmulticast mode [ 256.797397][T12681] veth0_to_hsr: left allmulticast mode [ 256.804654][T12681] veth1_to_hsr: left allmulticast mode [ 256.811349][T12681] hsr0: left allmulticast mode [ 256.826583][T12681] hsr_slave_0: left allmulticast mode [ 256.841534][T12681] hsr_slave_1: left allmulticast mode [ 256.852309][T12681] veth1_virt_wifi: left allmulticast mode [ 256.866776][T12681] veth0_virt_wifi: left allmulticast mode [ 256.893208][T12681] virt_wifi0: left allmulticast mode [ 256.900131][T12681] veth1_vlan: left allmulticast mode [ 256.914172][T12681] vlan0: left allmulticast mode [ 256.926691][T12681] vlan1: left allmulticast mode [ 256.933359][T12681] macvlan0: left allmulticast mode [ 256.938616][T12681] macvlan1: left allmulticast mode [ 256.944336][T12681] ipvlan0: left allmulticast mode [ 256.949385][T12681] v: left allmulticast mode [ 256.955638][T12681] veth1_macvtap: left allmulticast mode [ 256.961330][T12681] veth0_macvtap: left allmulticast mode [ 256.968808][T12681] macvtap0: left allmulticast mode [ 256.974501][T12681] macsec0: left allmulticast mode [ 256.979705][T12681] geneve0: left allmulticast mode [ 256.985345][T12681] geneve1: left allmulticast mode [ 256.990998][T12681] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 256.998441][T12681] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 257.005963][T12681] netdevsim netdevsim4 netdevsim2: left allmulticast mode [ 257.013417][T12681] netdevsim netdevsim4 netdevsim3: left allmulticast mode [ 257.020735][T12681] mac80211_hwsim hwsim11 wlan0: left allmulticast mode [ 257.028467][T12681] mac80211_hwsim hwsim12 wlan1: left allmulticast mode [ 257.037047][T12681] bridge1: left allmulticast mode [ 257.048002][T12681] ipvlan2: left allmulticast mode [ 257.061522][T12681] bond0: left allmulticast mode [ 257.071874][T12681] bond_slave_0: left allmulticast mode [ 257.090098][T12681] bond_slave_1: left allmulticast mode [ 257.099229][T12681] batadv0: left allmulticast mode [ 257.107141][T12681] geneve2: left allmulticast mode [ 257.112737][T12681] erspan1: left allmulticast mode [ 257.117961][T12681] bond1: left allmulticast mode [ 257.123309][T12681] bond2: left allmulticast mode [ 257.128358][T12681] ip6gre1: left allmulticast mode [ 257.137052][T12681] bridge5: left promiscuous mode [ 257.142770][T12681] geneve3: left promiscuous mode [ 257.149829][T12681] vlan2: left promiscuous mode [ 257.155442][T12681] bridge0: left promiscuous mode [ 257.166991][T12681] ip6erspan0: left allmulticast mode [ 257.178041][T12681] bond4: left promiscuous mode [ 257.183578][T12681] bridge6: left promiscuous mode [ 257.192818][ T5747] ±ÿª¨úrBº speed is unknown, defaulting to 1000 [ 257.200414][ T5747] syú2: Port: 1 Link DOWN [ 257.364009][T12704] syzkaller0: entered promiscuous mode [ 257.376647][T12704] syzkaller0: entered allmulticast mode [ 257.404989][ T6733] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 59722 - 0 [ 257.854062][T12739] nbd2: detected capacity change from 0 to 63 [ 257.872822][ T4954] [ 257.875195][ T4954] ====================================================== [ 257.876131][T12733] block nbd2: NBD_DISCONNECT [ 257.882208][ T4954] WARNING: possible circular locking dependency detected [ 257.882231][ T4954] syzkaller #0 Not tainted [ 257.882240][ T4954] ------------------------------------------------------ [ 257.882247][ T4954] kworker/1:1H/4954 is trying to acquire lock: [ 257.882256][ T4954] ffff88807c323668 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0x1150 [ 257.882309][ T4954] [ 257.882309][ T4954] but task is already holding lock: [ 257.882316][ T4954] ffff888027de7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 257.882361][ T4954] [ 257.882361][ T4954] which lock already depends on the new lock. [ 257.882361][ T4954] [ 257.882367][ T4954] [ 257.882367][ T4954] the existing dependency chain (in reverse order) is: [ 257.882374][ T4954] [ 257.882374][ T4954] -> #6 ( [ 257.888035][T12733] block nbd2: Disconnected due to user request. [ 257.893954][ T4954] &cmd->lock){+.+.}-{4:4}: [ 257.893976][ T4954] __mutex_lock+0x19d/0x1550 [ 257.893996][ T4954] nbd_queue_rq+0xc1/0x1150 [ 257.898730][T12733] block nbd2: shutting down sockets [ 257.905423][ T4954] blk_mq_dispatch_rq_list+0x499/0x1990 [ 257.905452][ T4954] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 257.905475][ T4954] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 257.905495][ T4954] blk_mq_run_work_fn+0x16c/0x300 [ 257.905510][ T4954] process_scheduled_works+0xa8e/0x14e0 [ 257.905527][ T4954] worker_thread+0xa47/0xfb0 [ 257.905544][ T4954] kthread+0x388/0x470 [ 257.905564][ T4954] ret_from_fork+0x514/0xb70 [ 257.905585][ T4954] ret_from_fork_asm+0x1a/0x30 [ 257.905599][ T4954] [ 257.905599][ T4954] -> #5 (set->srcu){.+.+}-{0:0}: [ 257.905624][ T4954] __synchronize_srcu+0xc9/0x2f0 [ 257.905642][ T4954] elevator_switch+0x1e8/0x7b0 [ 257.905660][ T4954] elevator_change+0x2fa/0x480 [ 258.061006][ T4954] elevator_set_default+0x375/0x440 [ 258.066723][ T4954] blk_register_queue+0x3f3/0x4e0 [ 258.072281][ T4954] __add_disk+0x6cb/0xe30 [ 258.077118][ T4954] add_disk_fwnode+0x100/0x3a0 [ 258.082389][ T4954] nbd_dev_add+0x733/0xb60 [ 258.087318][ T4954] nbd_init+0x15f/0x1e0 [ 258.091982][ T4954] do_one_initcall+0x250/0x870 [ 258.097257][ T4954] do_initcall_level+0x10a/0x1a0 [ 258.102697][ T4954] do_initcalls+0x59/0xa0 [ 258.107537][ T4954] kernel_init_freeable+0x29d/0x3e0 [ 258.113251][ T4954] kernel_init+0x1d/0x1d0 [ 258.118087][ T4954] ret_from_fork+0x514/0xb70 [ 258.123192][ T4954] ret_from_fork_asm+0x1a/0x30 [ 258.128461][ T4954] [ 258.128461][ T4954] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 258.136261][ T4954] __mutex_lock+0x19d/0x1550 [ 258.141375][ T4954] elevator_change+0x1af/0x480 [ 258.146653][ T4954] elevator_set_none+0xb5/0x140 [ 258.152015][ T4954] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 258.158341][ T4954] nbd_start_device+0x189/0xb30 [ 258.163704][ T4954] nbd_genl_connect+0x1597/0x1c10 [ 258.169261][ T4954] genl_family_rcv_msg_doit+0x233/0x340 [ 258.175324][ T4954] genl_rcv_msg+0x614/0x7a0 [ 258.180338][ T4954] netlink_rcv_skb+0x226/0x4a0 [ 258.185657][ T4954] genl_rcv+0x28/0x40 [ 258.190171][ T4954] netlink_unicast+0x7bb/0x940 [ 258.195468][ T4954] netlink_sendmsg+0x813/0xb40 [ 258.200769][ T4954] sock_sendmsg_nosec+0x13a/0x180 [ 258.206303][ T4954] ____sys_sendmsg+0x54e/0x850 [ 258.211644][ T4954] ___sys_sendmsg+0x2a5/0x360 [ 258.216852][ T4954] __x64_sys_sendmsg+0x1b1/0x290 [ 258.222385][ T4954] do_syscall_64+0x174/0x580 [ 258.227505][ T4954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.233905][ T4954] [ 258.233905][ T4954] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 258.242520][ T4954] blk_alloc_queue+0x544/0x690 [ 258.247811][ T4954] __blk_mq_alloc_disk+0x194/0x390 [ 258.253437][ T4954] nbd_dev_add+0x494/0xb60 [ 258.258369][ T4954] nbd_init+0x15f/0x1e0 [ 258.263031][ T4954] do_one_initcall+0x250/0x870 [ 258.268301][ T4954] do_initcall_level+0x10a/0x1a0 [ 258.273744][ T4954] do_initcalls+0x59/0xa0 [ 258.278598][ T4954] kernel_init_freeable+0x29d/0x3e0 [ 258.284302][ T4954] kernel_init+0x1d/0x1d0 [ 258.289178][ T4954] ret_from_fork+0x514/0xb70 [ 258.294278][ T4954] ret_from_fork_asm+0x1a/0x30 [ 258.299546][ T4954] [ 258.299546][ T4954] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 258.306834][ T4954] fs_reclaim_acquire+0x71/0x100 [ 258.312321][ T4954] __kmalloc_noprof+0xbc/0x720 [ 258.317598][ T4954] tls_sw_sendmsg+0x599/0x2860 [ 258.322876][ T4954] sock_sendmsg_nosec+0x90/0x180 [ 258.328327][ T4954] sock_sendmsg+0x1ca/0x2d0 [ 258.333357][ T4954] splice_to_socket+0xb5e/0x12a0 [ 258.338824][ T4954] direct_splice_actor+0x101/0x160 [ 258.344458][ T4954] splice_direct_to_actor+0x57b/0xcb0 [ 258.350339][ T4954] do_splice_direct+0x195/0x290 [ 258.355704][ T4954] do_sendfile+0x52e/0x7c0 [ 258.360646][ T4954] __se_sys_sendfile64+0x144/0x1a0 [ 258.366280][ T4954] do_syscall_64+0x174/0x580 [ 258.371384][ T4954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.377792][ T4954] [ 258.377792][ T4954] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 258.385857][ T4954] lock_sock_nested+0x41/0x100 [ 258.391141][ T4954] inet_shutdown+0x6a/0x390 [ 258.396175][ T4954] nbd_mark_nsock_dead+0x2cb/0x550 [ 258.401794][ T4954] recv_work+0x1cee/0x1e10 [ 258.406717][ T4954] process_scheduled_works+0xa8e/0x14e0 [ 258.412810][ T4954] worker_thread+0xa47/0xfb0 [ 258.417920][ T4954] kthread+0x388/0x470 [ 258.422516][ T4954] ret_from_fork+0x514/0xb70 [ 258.427643][ T4954] ret_from_fork_asm+0x1a/0x30 [ 258.432916][ T4954] [ 258.432916][ T4954] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 258.440544][ T4954] __lock_acquire+0x1520/0x2cf0 [ 258.445913][ T4954] lock_acquire+0x106/0x350 [ 258.450927][ T4954] __mutex_lock+0x19d/0x1550 [ 258.456021][ T4954] nbd_queue_rq+0x373/0x1150 [ 258.461119][ T4954] blk_mq_dispatch_rq_list+0x499/0x1990 [ 258.467172][ T4954] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 258.474040][ T4954] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 258.480549][ T4954] blk_mq_run_work_fn+0x16c/0x300 [ 258.486099][ T4954] process_scheduled_works+0xa8e/0x14e0 [ 258.492170][ T4954] worker_thread+0xa47/0xfb0 [ 258.497283][ T4954] kthread+0x388/0x470 [ 258.501880][ T4954] ret_from_fork+0x514/0xb70 [ 258.506989][ T4954] ret_from_fork_asm+0x1a/0x30 [ 258.512268][ T4954] [ 258.512268][ T4954] other info that might help us debug this: [ 258.512268][ T4954] [ 258.522523][ T4954] Chain exists of: [ 258.522523][ T4954] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 258.522523][ T4954] [ 258.534649][ T4954] Possible unsafe locking scenario: [ 258.534649][ T4954] [ 258.542088][ T4954] CPU0 CPU1 [ 258.547444][ T4954] ---- ---- [ 258.552789][ T4954] lock(&cmd->lock); [ 258.556753][ T4954] lock(set->srcu); [ 258.563148][ T4954] lock(&cmd->lock); [ 258.569645][ T4954] lock(&nsock->tx_lock); [ 258.574047][ T4954] [ 258.574047][ T4954] *** DEADLOCK *** [ 258.574047][ T4954] [ 258.582170][ T4954] 4 locks held by kworker/1:1H/4954: [ 258.587489][ T4954] #0: ffff88801e6e4540 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 258.598517][ T4954] #1: ffffc9000f55fc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 258.611388][ T4954] #2: ffff88801fb3a998 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 258.620813][ T4954] #3: ffff888027de7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0x1150 [ 258.629758][ T4954] [ 258.629758][ T4954] stack backtrace: [ 258.635632][ T4954] CPU: 1 UID: 0 PID: 4954 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) [ 258.635646][ T4954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 258.635653][ T4954] Workqueue: kblockd blk_mq_run_work_fn [ 258.635682][ T4954] Call Trace: [ 258.635688][ T4954] [ 258.635694][ T4954] dump_stack_lvl+0xe8/0x150 [ 258.635710][ T4954] print_circular_bug+0x2e1/0x300 [ 258.635722][ T4954] check_noncircular+0x12e/0x150 [ 258.635739][ T4954] __lock_acquire+0x1520/0x2cf0 [ 258.635757][ T4954] ? nbd_queue_rq+0x373/0x1150 [ 258.635772][ T4954] lock_acquire+0x106/0x350 [ 258.635785][ T4954] ? nbd_queue_rq+0x373/0x1150 [ 258.635806][ T4954] __mutex_lock+0x19d/0x1550 [ 258.635828][ T4954] ? nbd_queue_rq+0x373/0x1150 [ 258.635852][ T4954] ? ret_from_fork_asm+0x1a/0x30 [ 258.635868][ T4954] ? unwind_next_frame+0x8f/0x2550 [ 258.635882][ T4954] ? nbd_queue_rq+0x373/0x1150 [ 258.635896][ T4954] ? __pfx___mutex_lock+0x10/0x10 [ 258.635905][ T4954] ? ret_from_fork_asm+0x1a/0x30 [ 258.635914][ T4954] ? stack_trace_save+0xa9/0x100 [ 258.635928][ T4954] ? __pfx_stack_trace_save+0x10/0x10 [ 258.635941][ T4954] nbd_queue_rq+0x373/0x1150 [ 258.635957][ T4954] ? __lock_acquire+0x13e8/0x2cf0 [ 258.635970][ T4954] ? __pfx_nbd_queue_rq+0x10/0x10 [ 258.635988][ T4954] blk_mq_dispatch_rq_list+0x499/0x1990 [ 258.636005][ T4954] ? sbitmap_get+0x229/0x390 [ 258.636020][ T4954] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 258.636032][ T4954] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 258.636047][ T4954] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 258.636066][ T4954] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 258.636082][ T4954] ? blk_mq_run_work_fn+0x144/0x300 [ 258.636091][ T4954] ? blk_mq_run_work_fn+0x144/0x300 [ 258.636103][ T4954] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 258.636117][ T4954] ? blk_mq_run_work_fn+0x144/0x300 [ 258.636126][ T4954] blk_mq_run_work_fn+0x16c/0x300 [ 258.636136][ T4954] ? process_scheduled_works+0xa20/0x14e0 [ 258.636147][ T4954] process_scheduled_works+0xa8e/0x14e0 [ 258.636163][ T4954] ? __pfx_process_scheduled_works+0x10/0x10 [ 258.636175][ T4954] ? assign_work+0x3cf/0x5d0 [ 258.636185][ T4954] worker_thread+0xa47/0xfb0 [ 258.636199][ T4954] ? __kthread_parkme+0x71/0x1f0 [ 258.636213][ T4954] kthread+0x388/0x470 [ 258.636226][ T4954] ? __pfx_worker_thread+0x10/0x10 [ 258.636236][ T4954] ? __pfx_kthread+0x10/0x10 [ 258.636248][ T4954] ret_from_fork+0x514/0xb70 [ 258.636263][ T4954] ? __pfx_ret_from_fork+0x10/0x10 [ 258.636276][ T4954] ? __switch_to+0xc89/0x1420 [ 258.636289][ T4954] ? __pfx_kthread+0x10/0x10 [ 258.636301][ T4954] ret_from_fork_asm+0x1a/0x30 [ 258.636313][ T4954] [ 258.895949][ T4954] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.905112][ T4954] Buffer I/O error on dev nbd2, logical block 0, async page read [ 259.015798][ T25] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 259.025024][ T25] Buffer I/O error on dev nbd2, logical block 1, async page read [ 259.033697][ T25] Buffer I/O error on dev nbd2, logical block 2, async page read [ 259.041647][ T25] Buffer I/O error on dev nbd2, logical block 3, async page read [ 259.056899][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 259.066661][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 259.074546][ T25] Buffer I/O error on dev nbd2, logical block 1, async page read [ 259.082493][ T25] Buffer I/O error on dev nbd2, logical block 2, async page read [ 259.090282][ T25] Buffer I/O error on dev nbd2, logical block 3, async page read [ 259.098893][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 259.108164][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 259.116119][ T25] Buffer I/O error on dev nbd2, logical block 1, async page read [ 259.124960][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 259.134458][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 259.143905][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 259.153764][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 259.163250][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 259.172739][ T25] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 259.183284][ T7432] ldm_validate_partition_table(): Disk read failed. [ 259.191367][ T7432] Dev nbd2: unable to read RDB block 0 [ 259.198746][ T7432] nbd2: unable to read partition table [ 259.222618][ T7432] ldm_validate_partition_table(): Disk read failed. [ 259.230247][ T7432] Dev nbd2: unable to read RDB block 0 [ 259.246332][ T7432] nbd2: unable to read partition table [ 260.365294][ T6733] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 59722 - 0 [ 260.374537][ T6733] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 59722 - 0 [ 260.384415][T12724] netlink: 404 bytes leftover after parsing attributes in process `syz.1.1838'. [ 260.393526][T12724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1838'. [ 260.402606][T12724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1838'. [ 260.412322][T12724] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1838'. [ 260.429117][T12720] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº may have been left with an inconsistent configuration, please check. [ 260.508520][T12741] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 260.520474][T12741] syzkaller0: entered promiscuous mode [ 260.526302][T12741] syzkaller0: entered allmulticast mode [ 260.537874][ T6733] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 59722 - 0 [ 263.692761][ T6728] batadv1: left promiscuous mode