last executing test programs: 21.344677149s ago: executing program 0 (id=3478): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000040)={'dummy0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101101, 0x0) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000000140)) connect$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x29, 0x2}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a01020000000000000000000000000900020073797a3100000000080003400000004008000a4000000000080005400000000c0900010073797a3100000000140000001100010000000000000000000000000a"], 0x6c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18060000000000000000000000000000711076000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 20.690089451s ago: executing program 0 (id=3481): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@ptr={0x6}]}, {0x0, [0x2e, 0x51, 0x556c9cad818221ea, 0x2e, 0x5f, 0x61]}}, &(0x7f00000004c0)=""/226, 0x2c, 0xe2, 0x1}, 0x28) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x6) 5.477298399s ago: executing program 2 (id=3601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000740)=ANY=[], 0x21c}}, 0x4000081) setsockopt$sock_linger(r1, 0x1, 0x3d, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x44008) r2 = socket$inet6(0xa, 0x3, 0x3a) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x38, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x4, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0xff, @rand_addr=' \x01\x00', @empty, [], "ccd151d71f80b0c9"}}}}}}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) bind$inet(r3, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000020603000000000000000000000000000c000300686173683a697000050004000000000009000200730800124000fc1603050005000200000005000100060000006b6143f61783ee85eb2264785375b16f2e87fe593b11c7fdd19f2d6bd8bab001e6e4135da9d659a7cee033b5d58491a41812fbb15f98127a7ee7ccda7b9900674442277a04d60c40dfffe5064f4f484c9c0ec8db627baab152bb4f486436bda39cef241843c1"], 0x50}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000001c0)=0xc) 5.284427366s ago: executing program 2 (id=3603): r0 = socket(0x1e, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendto$packet(r0, &(0x7f0000000000)="f222b810fd7be91727e02047ff1ed470cd37f863dbf756fd726821fea7b04a7d80ee6b3710ed66f09de20a61f4048b6c717b0421568d979a31e262f582", 0x3d, 0x20000800, &(0x7f0000000040)={0x11, 0x1a, r3, 0x1, 0x5}, 0x14) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0xffffffffffffffff, &(0x7f0000000580)=0x4e) 4.903295052s ago: executing program 2 (id=3604): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e00010000000000007f000007000000", @ANYRES32, @ANYBLOB="000000000a000500aaaaaaaaaabb0000080009"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x5) (async) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x5) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000", @ANYRES16=r11, @ANYBLOB="010027bd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000084) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000", @ANYRES16=r11, @ANYBLOB="010027bd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000084) r12 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000840), 0x7) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x1c}, @algo_auth={0x48, 0x1, {{'blake2s-256-generic\x00'}}}, @XFRMA_SET_MARK={0x8}]}, 0x15c}}, 0x0) 3.479830733s ago: executing program 4 (id=3609): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) (async, rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000030a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x28, r2, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1a0000004a00010000010000000000000a"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000020301080000000000000000000000000800010001000000090002000029260c6a000000080003"], 0x30}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)={0x2, 0x9, 0x0, 0x2, 0x2}, 0x10}}, 0x0) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x2c, r7, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x2c}}, 0x20000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r10, 0x1, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2000, 0xfffa, 0x3, 0x9, 0x2, 0x8000, 0x1, 0xd0d]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r11, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xd4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3ff}, @CTA_EXPECT_FLAGS={0x8}]}, 0xd4}, 0x1, 0x0, 0x0, 0x400c001}, 0x4800) 2.394099845s ago: executing program 3 (id=3610): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000ffffffd70700001000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2681d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e6e83d15645aa818d92b21aa6459512f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa8666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a0ea49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed186a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d36df524b760ab92efcce7dd1574a0730a9e015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a980010000fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9d3696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f21d9d5bc27d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3d70001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f8add5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f11b615c87c441dc970ec896a5af6bf69b50a244bc138a1cae3d220bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032b75649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8f556e07f292ab66b9bcea0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a6e5e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b6eb3c325d5687644a4c0a1d44d9dfd82896f56bdfa0790406984c123e1d37da4a9a9444485e9b1e3b6b548528989d2aecc1e7b6ee92ca19298801105ced8964e000000000000000000000000000000000000000000000000000000000003d1c031ee2fc25c7ad34283187545b1343f7ab862e66cf5bf4ba4dbf5fda31619c05ddb97199ad4d01471e9b3c7f485b1e74d0ed34201915e79d5ed229f0773ab6b38529c45b10d0796e005b6d663b942320339b9fe1d4e393b4bcb596898cde06955a345db3cb956b0e5da1c1dba7046f4d12fc65085302f333516804d9f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x4, 0x9, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x50, 0x20, 0x2, 0x9}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x43}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffda3}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@mpls_newroute={0xd0, 0x18, 0x200, 0x70bd25, 0x25dfdbfe, {0x1c, 0x0, 0x0, 0x47, 0xfd, 0x4, 0x0, 0xb, 0xa00}, [@RTA_NEWDST={0x84, 0x13, [{}, {0x10}, {0x1, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x30656}, {0x1f}, {0x400}, {0x7, 0x0, 0x1}, {0x1}, {0x7}, {0x5}, {0x1b2c, 0x0, 0x1}, {0x9}, {0x2e, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0x7}, {0x8}, {0xa}, {0x81}, {0x3}, {}, {0x6}, {0xe511}, {0x6, 0x0, 0x1}, {0x2e3}, {0x4, 0x0, 0x1}, {}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6}, {0x3ff}, {0x7, 0x0, 0x1}]}, @RTA_OIF={0x8}, @RTA_VIA={0x14, 0x12, {0x10, "960896f43c251b1a3d00a27f019f"}}, @RTA_VIA={0x14, 0x12, {0x29, "b2756b16510832cd13514d9a0bf7"}}]}, 0xd0}}, 0x0) 2.276073238s ago: executing program 2 (id=3612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000000030000000000", @ANYRES32, @ANYRES32=r0, @ANYRES8=r0, @ANYRES32, @ANYRES8=r0], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000440), &(0x7f0000000080)=@tcp, 0x3}, 0x20) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'pimreg0\x00', 0x6bf1c2d5adba8c32}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) (async) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="00200000ffffffffffffb7bbbbbbbbbb08004500003d00000078ac1efc01e000000103007000002990780200a318010000e0ebc7a1e0ff5befe1fd0800000000000000de422b4a81099bccf91722f9b0246d0fff0fc123cc04000000002935419dc2f3e99843f1ec25f4cc3d"], 0x4f) 2.273824365s ago: executing program 4 (id=3613): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000600)="270502001a0014000600002fb96dbcf706e105000000890600001144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e57", 0x3d}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010027bd700403dcdf2500000000", @ANYRES32=r3, @ANYBLOB="800000000168030024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) 2.139402124s ago: executing program 3 (id=3614): r0 = socket(0x2, 0x80805, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080), &(0x7f0000000100)=0x8) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x13}, 0x4e20, 0x3, 'dh\x00', 0x5, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x9c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xfffffe01}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x81}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xff00}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x10, 0xd195, 0xd, 0x0, 0xff, 0x1, 0x4, {0x0, @in6={{0xa, 0x4e21, 0x6, @mcast1, 0x80000000}}, 0x1000, 0x2ed, 0x3, 0x1, 0x6}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000740)={r5, @in6={{0xa, 0x4e23, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x41}, 0xd}}, 0x8, 0xd, 0x1, 0xfffffffc, 0x2}, &(0x7f0000000800)=0x98) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000080)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0xbb, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f00000001c0), 0x8, 0x55, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e22, 0x7, @mcast1, 0x2}}}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x3, &(0x7f00000000c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x2, 0x71, 0x11, 0x97}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000000)='syzkaller\x00', 0x10005, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) 1.977824115s ago: executing program 1 (id=3615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000200)=0xfffffffd, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000280)={0x1d, r3, 0x2, {0x0, 0x1, 0x2}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f384", 0x6}], 0x1}, 0x4048081) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x0, 0x7, 0xfffffffa, 0x12, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0xd}, 0x50) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x5}, @TCA_GRED_MAX_P={0x8, 0x4, 0x9}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002680)={'team0\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000002740)={&(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000002600)=[{&(0x7f0000000800)="ec9c7f21fc69e51ee96945b2df2cba628335f5387e918787ba71c47ff7d8e1f925b2e099bfdb0b38d46c72068b9313663c39b1113080259fe512ceaeb508cebb9aa3e741348809323593213f30e1aa9327067ea3a4f7be649084d6909ce20bd2410d2610d6dfe67e74c55b88299678f28a66da36bee984b5932a83ccf3c48ae42d08ffadfd8a166358ba4da2cbe3f1324104618ac08b657b362f240d", 0x9c}, {&(0x7f00000008c0)="b4090f6adf1d973cff63cb3e7833d3d6aeec7563e0b9d99c34f6268eddbf2c4f0b99ebe50deb9e9995", 0x29}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="c4bc1799ebfe2c8b75dc95ec40967a54f8ebc1605d4bb5c943ddb7fcd2ac5125430e7d5fb45004d5c89294b1fc374f680cedbefec60899dcff01de67015282b09441a624f232ebcdcf6c068c5b9d36a5a3b936d7f73b42cfedbaa8faf12dc13fdc3b8a2d0da06dcbc867abcb6228893ef329819d8e4e16402aedf0cd4d72de0db719a781a0fba502cc5e5701ed8f8a48b1c08fe1a3bbd3e8cc7119c6470ddea722345db37ecae09604f76d4ae9d7b2584040163331d7e3867dd9b1d73f0f25f1b11d7e0b895c427f5e6e8d05ea85a4306f474e9fc0a887835145e249a0217d8b52d0", 0xe2}, {&(0x7f0000002400)="e94a58c557adb51c9b704e1ffed80da677e9a77ae0dbd912e4907fc02c065ee00764ed7bf6c4d533b923a3be770bffd28391f7793f4681cc66ba5185e5825b288c536479566682f1cd97ad27471e9fdd0d39b5e7bbc5e6c91249ccec8834aa03f18f122d2df62cde98aa3b9d9c31144b6257a2417530205523eaf1a0220d58439a401bdd8ae846f98ba13d41bec262c6ff06a91203b8bd8f2ba2da6309bac07b5723d2c54e9ad4feb3b9a59a89241b30a1c958ae3bd4b9d7998d9d075127482fa10f2159fa4df05e812bf5a81c70dc15dd90cabf160ec1a80984", 0xda}, {&(0x7f0000002500)="83c7568f650e2229a95adc01ee8dca90f891374ab738816745e5c9778278f1ccc1255798e3532488db0df2964294857841f5df55376388111e7143ac063698a99bc1e7a4fa7247ca12608876e05c97c1d4ac930ffda86f281151302d8692ec3717d22d9d42ecc9dc82ff33b7281c22a56e8fa4b2a3cb611921d07fa0c6013a8881dad484c15d045300fabf2438b7ec790a429e743f7c780de09ad44e7a6ef8b5351c1377eecc7fd66270b7cf78e3dc62836aa3f96483f89586bbf34bb0e44bbf1e77b3cad5ce3ba6b4b4f4df94aec7220880c9143422d3a3b59b2681634ee740ad164e1b", 0xe4}], 0x6, &(0x7f00000026c0)=[@ip_retopts={{0x20, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x75, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @private=0xa010102]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf0}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x1b}, @loopback}}}], 0x58}, 0x20000810) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_GET_MR(r9, 0x114, 0x2, &(0x7f0000000140)={{0x0}, 0x0, 0x3b}, 0x20) (async) r10 = socket(0x400000000010, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0xfff2}, {}, {0x9, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xf7}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="18001100000000000000000000e9ffff94000000000000001ad03d65c9e32cbfbfbfec3b5bf55b0849f5054776aeddcc99ca2b774bf8a2516fad67917916cc5e09d68e5c16fc2efbd7d45df5d93bd6d87bb4209432ac262220b0437bece8d54879ef0b69220fcf3e6bf0efe60012962851bd2b3c3edf2d12df50a4f9e3f3d8ea490362ba723de21354f8f239e603b508a0a46f670bc5582e"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r13, 0xc, &(0x7f00000000c0), 0x8}, 0x94) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 1.892101893s ago: executing program 4 (id=3616): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0xfffb, 0x5, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000940), 0xfffe, r0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1.81929244s ago: executing program 0 (id=3482): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$phonet_pipe(0x23, 0x5, 0x2) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040"], 0x50}}, 0x4080) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000800)="38c8114fa3db529ed03bcef786dd", 0xe}], 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811248000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r7, &(0x7f0000000080)={0x0, 0xfffffffffffffeff, &(0x7f0000000040)}, 0x810) getsockopt$WPAN_SECURITY(r6, 0x0, 0x1, 0x0, &(0x7f0000000380)) 1.742643793s ago: executing program 3 (id=3617): syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6002173600442b00fc0206000000000000000000000000010420880b0000000000000800000086dd"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x40004010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003}, 0x18) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8054}, 0x80) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) close(r4) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000003c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, @dev={0xfe, 0x80, '\x00', 0x29}, 0x3, 0x6, 0x9, 0x0, 0x4f9a, 0x210004, r3}) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000300)=0x9, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWTABLE={0x38, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x2, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}, 0x1, 0x0, 0x0, 0xc000080}, 0x0) 1.626472913s ago: executing program 4 (id=3618): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{}], "00ba00"}, @datasec={0x0, 0x3, 0x0, 0xf, 0x1, [{0x3, 0x2, 0x401}, {0x1, 0x9, 0xffffabc1}, {0x1, 0xf98, 0x7ff}], 'I'}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000080)=""/203, 0x68, 0xcb, 0x1}, 0x28) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20000400) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) unshare(0x4000000) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x24, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, [@empty]}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000229bdff030000df25040000004000078008000100a40f00000c00040001000000000000000c00030002080000000000000c000400000c0000800000000800010074000000080000002c0005801400028008000200040000000800010001000000140002800800020010000000080001"], 0x80}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4008c50) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x40000) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000a, 0x8032, 0xffffffffffffffff, 0x0) 1.558614391s ago: executing program 1 (id=3619): r0 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x6a, 0x3, 0x0, &(0x7f0000000000)=0xfffffffffffffd68) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xe4, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0xa5, 0xc, "2682eb6447bf31cc7a80ba206c625cdec13ce8ba7c11472c6585bd185fe693439be0d5d25a5f4d591278957b06cd51274c146a813a8ef2e3907489cedf10d9270722ddd61751cb2f52a5495c01637ec6f3b6f509ddb8b5baa3ad95433c3b3ef88f7c9065ac53fb982e4d69c100daf946e9ffdec83dbf71c38917f315186f3a1e3edcc3fae0e19a496b1a9735d4433fa0fec2636e262def2747c40dbf707cbbb44d"}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x12c}}, 0x0) 1.4783716s ago: executing program 2 (id=3620): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xce, &(0x7f0000000040), &(0x7f0000000000)=0x4) (async) getsockopt$MRT(r0, 0x0, 0xce, &(0x7f0000000040), &(0x7f0000000000)=0x4) 1.359114943s ago: executing program 2 (id=3621): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendto$inet(r1, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x800, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r5, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/230, 0xa}], 0x1}, 0x2000000}], 0x2, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x2, 0x0, 0x3, {0xa, 0x4e22, 0xf, @private1, 0x1}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000200)="45eb63aeb8c4e6fd94b65cb971e578fc2866c7dda079265f13697344516517bfe7388ab7bbad59a3e073869df4add8afaf22823591b3359f78db70cc10f8633ced042985a72fcdacb38b5e7cf0ba3b07f7562ec31e53d0dce10e548fee01b48e71cefaf01505ae957d099af7d3ce88e28051102bb371384b84064f421021db7a145e19611a54b864def8a17a89f4", 0x8e}, {&(0x7f0000000300)="10deabf315744043f593dc8c530c2ee1a790d22671b026da14ffbead994ffe40a7ac8ef8c6b75b7e40531e64aa2080fa1346ce94072fba92d2be14a10560a82596418ebc274fad05fb5a0ab1629699c44609878a52e1476d1d8e07208453e6e000018b0cab667280b63107246e36f655a3abecaa6cebe66eacc47020d091f4f76707890fd5fdd6f685075b3cd428ec598c2ba0c148d3caa40792ac47c59c85b733ca5fa1a72a0a2163364b22f547cdfa02ff2dbf57ea0528e39ec93707ce0baaf1e945565bfe05241df827590fcdc749f801543a53c11e2af2", 0xd9}, {&(0x7f0000000400)="f48a51a7b058fc7169519fd80b42a619e4fbef4487edd3a155c96637887e1a731ea0c6f1d9c0caf091785edc17f3578189982bbf82ac52a681057edf46751d95cddb3400b7d7364ad2caff59d0ed453642e20954f82c3ae2620b8ec607ce7e099dbc8f2327c96521435451d9055cbc51830632e5e60547f4bd4e4ef97a2908b153be77f7368526a291069598e33f240216a37fcc6723fe898d30f9e9e32c5d91c226bd0cc3c5ac74bb0cb068661615b6e5e574ba4b65f5dfaf3f5d2b139c4cedfdb64b88", 0xc4}, {&(0x7f0000000500)="acca263e1ba93d8e5c11231bd9209b31bc5ef1b785f2b4e15f7977e8bb36425d338a95121fecdd69de5c9614f70d9fa2093d5993bb80d7690dd10bf52e11d5a2ce60b3d4889d367679dcb4728a316814a9ca0c31125ea83754f293aa12c6bc7e87d6f54142a8558f12d75a8eca1a5f67fabd3e2cea3b94e411bd909081ee45caa6775de78d33d6641f4a5c", 0x8b}], 0x4, &(0x7f0000000600)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xe}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x90}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0x20}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) 1.29116816s ago: executing program 1 (id=3622): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0}, 0x94) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in=@broadcast, 0x4e20, 0x3, 0x4e20, 0x0, 0x2, 0x80, 0xe0, 0x2f, 0x0, r1}, {0x7, 0x7fff, 0x90, 0x7, 0xc1b1, 0x6, 0x9, 0x8}, {0x4, 0x4, 0xff, 0x7}, 0xfffffff7, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@remote, 0x4d6, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x3, 0x1, 0x0, 0x0, 0x40, 0x8001}}, 0xe8) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 1.005958064s ago: executing program 1 (id=3623): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000001c0)=0xfffffffd, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x2, 0x3, 0xf7}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r5 = getpid() write$cgroup_pid(r4, &(0x7f0000000880)=r5, 0x12) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000380)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x1, 0x2, 0x2, 0x7ff, 0xc}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x2000) ioctl$TUNSETNOCSUM(r8, 0xff04, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r9, 0x40189429, &(0x7f0000000300)={0x1, 0x4, 0x5}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000180)=0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r14, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r14, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r15 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r15, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r15, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070200003900000000000000080009000d000000", 0x24) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r16, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000020301080000000000000000000000000800010001000000090002000029260c6a000000080003"], 0x30}}, 0x0) r17 = gettid() sendmsg$nl_route(r12, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000580000012dbd7000fbdbdf2500080001000000000008000200", @ANYRES32=r13, @ANYBLOB="c8b5b200000200000095d3198d2e7129ffff0000", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r17, @ANYBLOB='\x00\x00\x00'], 0x44}, 0x1, 0x0, 0x0, 0x260bb706925a19be}, 0x240c9080) 811.087389ms ago: executing program 0 (id=3624): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {0x28}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={'bond_slave_0\x00', @ifru_addrs=@nl=@unspec}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x20, r4, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe5}]}]}, 0x3a}, 0x1, 0x0, 0x0, 0x240280d0}, 0x8090) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "87b0347ebdfe8aa8", "e312c90b21c36e9000ed79bde44e1e3c", "1dd12ea9", "8a00a710551f6826"}, 0x28) 736.075656ms ago: executing program 1 (id=3625): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r3) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000400)={0x6, {{0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}}, 0x88) preadv(r7, &(0x7f0000000ac0)=[{&(0x7f00000004c0)=""/83, 0x53}], 0x1, 0x80000000, 0xffffffff) socket$unix(0x1, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x85, "587a2cb4d7ef080351ac9c8fd9eae6aee6572b5e32d5226fe070458808155cdad07efbde89f8741d373714348fc5268f1c7315d4537902558170a33564afcbc0ff5852438c14d0afd7cf466080d6de85ae7981a3fa0ba07658b68d39d224850f7081738424eac771f1662263a302e9b1c39b05b8461bf6b5e3d3d092414a149c215a0fadb3"}, &(0x7f0000000180)=0x8d) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={r8, 0x1, 0x4, 0x3, 0x80000001, 0x7fffffff}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x83, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r9}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11, 0x0, 0x20040011}, 0x0) r12 = socket(0x10, 0x3, 0x0) ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f00000003c0)={{[0x9cd, 0xfffffffa, 0x5, 0x7f]}, 0x0, 0x1, 0x80000000, 0x0, &(0x7f0000000240)=[{{@align=0x400000000000, {0xff7f, 0x8, 0x0, 0x4}}, 0x8001, 0x0, 'batadv_slave_1\x00'}, {{@align=0x9, {0x101, 0x8001, 0x878, 0xfffffffffffffc79}}, 0x2, 0x0, ',#}]\x00'}, {{@align=0x6, {0x3b, 0x5, 0xc95, 0x7fff}}, 0x2, 0x0, 'E*\x00'}, {{@align=0x1fd, {0x3, 0x8, 0x6, 0x7}}, 0x9, 0x0, '\'&{+\x00'}, {{@align=0x6, {0x8, 0x4, 0x1, 0x7}}, 0x1000, 0x0, '*@.\x00'}, {{@_ha_fsid={[0x0, 0x4]}, {0x2, 0x1, 0x7fff, 0x9}}, 0x81, 0x0, '\x00'}, {{@_ha_fsid={[0x10, 0x7ff]}, {0xc, 0x9, 0xffff, 0xfffffffffffffffc}}, 0x7, 0x0, '\'\x00'}, {{@_ha_fsid={[0x1, 0x1]}, {0x2, 0x81, 0x47, 0x8}}, 0x5, 0x0, '+)\'\'!\x00'}, {{@_ha_fsid={[0xb8, 0x80000]}, {0x8, 0x49b, 0x39ce, 0x2}}, 0x5, 0x0, ' \x01\x00'}, {{@align=0x4, {0x8, 0x4, 0x4, 0x80000000}}, 0xffff6453, 0x0, 'batadv_slave_1\x00'}]}) sendmmsg$alg(r12, &(0x7f0000000140), 0x4924b68, 0x0) 669.636021ms ago: executing program 3 (id=3626): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x18, 0x42, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x146}]}, 0x18}, 0x1, 0x0, 0x0, 0x20048808}, 0xc000) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r1) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fcffffff8869b915171e4522c0baa239c260457124a90ffee9b7d4719c5cf1677731801cec2d67b65e5044811aa18a3e802b7a2526a45df0a0f0bcc2fa6323", @ANYRES16=r3, @ANYBLOB="030f00000000000000000800000015000100"/38], 0x2c}}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000040000701faffffff00000000017c0000040042801800018006000600800a00000c0035b41bd9061c00050000000000000004000280"], 0x34}}, 0xc000) 384.475683ms ago: executing program 0 (id=3627): socket$kcm(0xa, 0x1, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r1, 0x0, 0x31, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x2, [0x9, 0x100000000]}}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000007c0), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0}) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$NFT_BATCH(r4, &(0x7f0000000940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x30c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000804) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f00000003c0), 0x7fff}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7ffff, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xb, 0xb}, {0xffe8, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$kcm(0xa, 0x5, 0x0) 361.49938ms ago: executing program 4 (id=3628): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'team_slave_1\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x32, 0x11, 0x4, {0x8, @tcp_ip4_spec={@remote, @empty, 0x4e21, 0x4e22, 0x4}, {0x0, @remote, 0xa7, 0x0, [0x40, 0x132]}, @ether_spec={@remote, @random="787ac0791d6b", 0x3}, {0x0, @empty, 0x0, 0x2, [0x1c00]}, 0x6, 0x7}}}) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f0000000040)=@random="ca83", 0x2, 0x1) 233.881726ms ago: executing program 3 (id=3629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006301530000000000950000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_ZONE={0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040080}, 0x4040000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x400b4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) 168.692852ms ago: executing program 1 (id=3630): mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6000002, 0x8032, 0xffffffffffffffff, 0x0) r0 = socket(0x1, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="260045009f1754f81328a21c35f72dd129ecb56725c3b88033b6af441f108bd1278adebcf6280000930045000eed43bd603868d4379631a7232b01037c27189205591ffb8cb6859b0064c35cf10c803232ce9b40d2dfc3c253be054d10957830d3e30983106bef4093e59e91033e7a9509b39282f9cd644cf87f71f5e8fd95cfb337ffb697869f7b6f43d236941a820f614142fb2459307656e608c11ab7caaf11f46795861c0ae492b7f5242cd9cca0f38240456b75a98a575b610004004500a2004500259a525794ef4c24c623a371d96d49f560e3916c695ebc7b3c794f7dbd10d37b8e746defca9a5b1babe712fac1f730fa29ab04c2cbd9d224febfe888e0ae4630e2540958d16aa7c846bb36e91ece694d46ee6707a9811581fc04ebe19f9fb474025a0505bace4f04c9b517df979cb907caad68daeac656f5a5393c8921c6bc18ca200de6f7673eb99c9007cfd4c92ec43e5cc7deb239b42eb26b3b9750050000ec004500db154dcc0f1fbf087b9fd4d1d4a489d80e1e6bc1559253c0e36268ac08fc7fe60ffdd170fbc4b9dfc8127ef471fa9a96e9ea46e01bcca37303903954ccc1a650051ac2639d6fb9e2e3ede705b9d91ef1593f0f369d827e8db4ad9c41d374dcb79aac0bf9ab2fa964b7106f76fe1d1bad33b3b4c1469e300f97c8e95b9ce28de27ad01e3212f542a8cb466c3aaa56372f59a5e4859c04b18a21923116c4280d9942c1257d5d3f8f6d85fd22232217fc12e5fc5c6dbd70caa18e3ad164a715abc9aa9eaf5d5d1d1f8219f2fb7cefb88b08d74937ca85a99bc93317156424c4b86be83d5efb84bc158c7d00450020789b15ef91dd41602a6fec1e26d867ffe313aa6785579e21a3bd14bd2f689a8ddf08eba11ff499fe7cffa32cb79a9ab419e6fc6129228dfb27f879940fd033fe83623615647554e4b46c7e971af4d5bdf787f66a7912e967e346e353fba78ac6f4619a93f33780793df24edc28999f78b0f598baa44051140000003d00450053e6d29f9842dbade22e60fb3dafebe641ef51424e35c32287e02b33f1f860b282eb4ffc329bcd43065dd82fe85050cd624b5c5c337284781f000000"], 0x32c}}, 0x44040) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) syz_init_net_socket$llc(0x1a, 0x802, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) r4 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0xc080) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000400)=ANY=[@ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket(0x840000000002, 0x3, 0x100) setsockopt$sock_int(r7, 0x1, 0x1a, &(0x7f0000000240), 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r9, 0x10e, 0x2, &(0x7f0000000000)=0xf, 0x4) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r8, 0xc038943b, &(0x7f00000000c0)={0x0, 0x38, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000ca9bf2d3f550a5b40014000000000000000071105d00000000009500008200000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) 2.488404ms ago: executing program 0 (id=3631): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x50}}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x50}}, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r5, 0x0, 0x20000000002) 1.389451ms ago: executing program 4 (id=3632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x98, 0x3, 0xa, 0x5, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'nicvf0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'vcan0\x00'}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}}, @NFT_MSG_DELRULE={0x7c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x9200}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x11c, 0x14, 0xa, 0x307, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0xbd, 0x8, "f263129a9c454aea21987fdfbf8b7e6ffd6c5ff6ab180c6cde88713b24144678f488e4a33bb4b075e80eedd0995b80d2397508740cbc36ef76012829573f4a54cb3fb1867f0728e4ac655a6eb0b3d8e6b1407397e60c0e42d8a0f12157c3244c808a3720ed78a4b79e39f6c096ea4e1ed608131ae3ba2ddfe0ebd5f8fedc23fbe4255f9ecf0290c196d0ea9783413f030f9e6e850d1d12645e18d31b67cf6365f71115abfa27634400dbc55fea38bc1a7779e52049d71f06aa"}, @NFTA_OBJ_USERDATA={0x8, 0x8, "9147990d"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x88, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x49, 0x6, "4231375c08112ffddd3d9fabb190f79897aa2e45a518b6389619ad9b3a7191beb0f5f114ab7e5c80a84d615e3cfddd17cdbf63aac826de42ae2a52654de26730f04ffc24d6"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x368}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001100)={&(0x7f0000000c80)={0x440, r1, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x42}}}}, [@NL80211_ATTR_FRAME={0x28b, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1442}, @device_b, @device_a, @random="8bd2151594e2", {0x3, 0xd}, @value=@ver_80211n={0x0, 0xe5b, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x4018, 0x13, @random=0x6, @val={0x1, 0x5, [{0x1, 0x1}, {0x6}, {0xb, 0x1}, {0x12}, {0x60, 0x1}]}, @val={0x2d, 0x1a, {0x8, 0x0, 0x4, 0x0, {0x0, 0x6, 0x0, 0x40, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x800, 0x8, 0x6}}, [{0xdd, 0x6, "da44c2412828"}, {0xdd, 0xae, "5fb7eb6dfdfd9bb7a1b091b3878d364d7d13b2b27b0487a6d0483122b47291fd9a86f6778d419f9932a3b63b7df6313113e1c30df9d38e9a842ac7b48260905892ea04a5eb83f9bc5562031b9879970a5b26b5f22e7e9894f720e4f5e47f9426743695e5fb3b74161c31ffceee147a559be4e365957d1839f47e1f11066b479bcd5d89ff2c54fe812a89a42a39e4d9e2cc0d7dca16c9c548d662f1f76f0424f0b2ae8f6a111822825fe8b44b3326"}, {0xdd, 0x4a, "0ff1b539b9673eda5bf184a18e58b62be1cad08356f0756a72c065cb6ce8f75f19c1c5239e11dd3e8102f28933927ea3b3c366f3f0bf2a775fe2b0edc56078a8aa1b99c3cec70dffd3a7"}, {0xdd, 0xb4, "bd6d12fa893a9e0fd35183df3c757507ea63d9d29ded2058c4216222edd0d080203a282f2ace450ba382f06cde89eb51d6091cb6f16031ed71ccb831f58e2a9ffed8f0f7a37114f80248b8da0032adb62d1f277a7706ad5bb707aa313ce86fa2c5736006918a7cf712411a69435fee4b6eecd846ab204dfe5469311e3d64416e326a04fe605a7386b4e0a26c04a28a923ecef5a9222eb6397f0e20f83fb69253f00373e84b4f6b66c35998dfeec40c85980651f3"}, {0xdd, 0x86, "976c670b33fa627212568353120155dc12497abf2c046926cf53e9995023efa38b1362d730215aabec084e25cc1f9406b9d86d093dedd79231783f07dda1ee3bfd91412bc2171ddf1518ddef6fc85f66fa3c9acfba677612fd5c3fde27237b4bf84ca4c01a6365c8ede12025aeb117382bbfccee692f00c2dc243bd87aafc6803c238a7374e2"}]}}, @NL80211_ATTR_FRAME={0x186, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @broadcast, @broadcast, @initial, {0x0, 0x7}}, 0x8000, 0x1, {0x0, 0x2, @random="4b8b"}, @val={0x1, 0x2, [{0x18}, {0x60}]}, @val={0x2d, 0x1a, {0x2000, 0x0, 0x3, 0x0, {0xb, 0x36, 0x0, 0x14, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x800, 0x7}}, [{0xdd, 0x25, "3d0bd56e6b2147224f4f44a20d3eeb7c5b5a3e84cfd55ba397365dcb02afd0fb345ddbb621"}, {0xdd, 0x52, "48b3075e7ff029df0d4a443865e8ede1250219cd3917f6c13f09056ab48721a9f8a7d23c6db61781802fd2b0e54139e774d4b64a08fe4df15cb934555bc7ee9ce1a3b740679be95624d0e991df9053cdcebc"}, {0xdd, 0x47, "15a785be5285db96e2fdff228eb7adfd5626476f7930bd01925e740108cdc86a757ba40bb54496e01772b1e1fe1832868e4f67d47749a78965bf642fef27d3ba50b80276845a58"}, {0xdd, 0x7c, "ef3a20522f4bd9140b9dce3d3039124a30fffd6969b6a007ad0d837af69dbf52bab25772e1451524bedbc41eb28e8453e90727c48c49dfa7d76f4357a9576cf1c891eb1d87d5eea9fd81c79d143d60cb6a510689c4b02e362b33edae2f8742bea7f3029c21259a8fbebf41e374bd731eb993b34a73c58b232342805d"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x440}, 0x1, 0x0, 0x0, 0x24000090}, 0x4) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, 0x0, &(0x7f0000000100)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r3, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) socket$inet(0x2, 0x80000, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x0, 0xb, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0xa, 0x1, 'vcan0\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x28850}, 0xc00c000) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) syz_init_net_socket$llc(0x1a, 0x0, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e24, @empty}}) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0xa, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x24, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @random="1b93eafee775"}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) 0s ago: executing program 3 (id=3633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x17) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r2, 0x303, 0x4000, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x4000) kernel console output (not intermixed with test programs): ast mode [ 301.699188][T12097] dvmrp0: entered allmulticast mode [ 302.034347][ T1172] wlan1: Trigger new scan to find an IBSS to join [ 302.158558][T12106] tipc: Resetting bearer [ 302.242613][ T758] tipc: Resetting bearer [ 302.455462][T12124] __nla_validate_parse: 5 callbacks suppressed [ 302.455481][T12124] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1700'. [ 302.549132][T12134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1702'. [ 302.684942][T12142] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1704'. [ 302.702342][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1702'. [ 303.080010][T11387] smc: removing ib device syz0 [ 303.160980][T12143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1704'. [ 303.180240][T12143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1704'. [ 303.191260][T12143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1704'. [ 303.223609][ T6719] syz0: Port: 1 Link DOWN [ 303.240136][T12143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1704'. [ 303.281715][T12143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1704'. [ 303.327665][T12143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1704'. [ 303.497439][T11387] smbdirect: ib_dev[syz0] removed [ 303.580577][T12167] gtp1: entered promiscuous mode [ 303.600774][T12167] gtp1: entered allmulticast mode [ 303.890220][T12172] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.906030][T12172] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.361827][T12172] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.401057][T12172] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.746347][T12172] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.770339][T12172] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.064854][T12172] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.086681][ T6265] wlan1: Trigger new scan to find an IBSS to join [ 305.091712][T12172] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.729545][T12230] 8021q: adding VLAN 0 to HW filter on device bond9 [ 305.756669][ T758] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.777940][ T758] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.927797][ T6265] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.957659][ T6265] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.124777][ T6265] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.167584][ T6265] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.569093][ T6265] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.608069][ T6265] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.975775][T12265] netlink: 'syz.1.1738': attribute type 1 has an invalid length. [ 307.172359][T12265] 8021q: adding VLAN 0 to HW filter on device bond12 [ 307.187104][T12282] netlink: 'syz.4.1743': attribute type 5 has an invalid length. [ 307.235584][ T5645] Bluetooth: hci2: link tx timeout [ 307.248567][ T5645] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 307.310228][T12274] bridge4: entered promiscuous mode [ 307.339790][T12284] netlink: 'syz.4.1743': attribute type 5 has an invalid length. [ 307.344860][T12274] bridge4: entered allmulticast mode [ 307.360031][T12274] bond12: (slave bridge4): making interface the new active one [ 307.369984][T12274] bond12: (slave bridge4): Enslaving as an active interface with an up link [ 307.711729][T12304] netlink: 'syz.2.1750': attribute type 1 has an invalid length. [ 307.740514][T12304] netlink: 'syz.2.1750': attribute type 4 has an invalid length. [ 307.761556][T12304] __nla_validate_parse: 69 callbacks suppressed [ 307.761655][T12304] netlink: 7335 bytes leftover after parsing attributes in process `syz.2.1750'. [ 307.889847][T12317] netlink: 200656 bytes leftover after parsing attributes in process `syz.2.1750'. [ 307.909814][T12315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1754'. [ 307.951141][T12315] vlan0: entered allmulticast mode [ 307.956853][T12315] bridge5: entered allmulticast mode [ 307.994514][T12315] bridge5: port 1(bond13) entered blocking state [ 308.001351][T12315] bridge5: port 1(bond13) entered disabled state [ 308.010053][T12315] bond13: entered allmulticast mode [ 308.020008][T12315] bond13: entered promiscuous mode [ 308.033789][T10683] wlan1: Trigger new scan to find an IBSS to join [ 308.195570][T12330] netlink: 'syz.1.1757': attribute type 2 has an invalid length. [ 308.204199][T12330] netlink: 'syz.1.1757': attribute type 8 has an invalid length. [ 308.212303][T12330] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1757'. [ 308.456468][T12344] netlink: 'syz.4.1761': attribute type 2 has an invalid length. [ 308.761751][T12356] syzkaller0: entered promiscuous mode [ 308.768597][T12356] syzkaller0: entered allmulticast mode [ 308.960172][T10683] wlan1: Creating new IBSS network, BSSID 3a:52:0d:b7:a1:24 [ 309.027124][T12369] syzkaller0: entered promiscuous mode [ 309.044537][T12369] syzkaller0: entered allmulticast mode [ 309.316277][ T5637] Bluetooth: hci2: command 0x0406 tx timeout [ 309.539963][T12391] netlink: 'syz.1.1777': attribute type 10 has an invalid length. [ 309.679659][T12393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1778'. [ 309.706365][T12393] bridge_slave_0: entered promiscuous mode [ 309.733938][T12395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1778'. [ 309.780944][T12393] C: renamed from lo [ 309.817976][T12393] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 310.178592][T12410] veth7: entered allmulticast mode [ 310.203366][T12413] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 310.290658][T12417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1785'. [ 310.431015][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1789'. [ 310.449519][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1787'. [ 310.639249][T12434] veth0: entered promiscuous mode [ 310.673337][T12439] sock: sock_timestamping_bind_phc: sock not bind to device [ 310.675259][T12431] syzkaller0: entered promiscuous mode [ 310.719602][T12431] syzkaller0: entered allmulticast mode [ 310.741836][T12434] veth0: left promiscuous mode [ 310.877959][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1794'. [ 310.911949][T12447] x_tables: unsorted underflow at hook 2 [ 310.935686][T12445] veth1_to_bridge: entered allmulticast mode [ 310.988636][T12442] wg1 speed is unknown, defaulting to 1000 [ 311.170090][T12459] "syz.0.1799" (12459) uses obsolete ecb(arc4) skcipher [ 311.387686][T12468] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 311.454027][T12468] netlink: 'syz.4.1801': attribute type 32 has an invalid length. [ 311.514690][T12477] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 312.347772][T12513] netlink: 'syz.0.1811': attribute type 1 has an invalid length. [ 312.375472][T12513] netlink: 'syz.0.1811': attribute type 1 has an invalid length. [ 312.535977][T12515] veth0: entered promiscuous mode [ 312.552776][T12515] macvtap1: entered promiscuous mode [ 312.567807][T12515] macvtap1: entered allmulticast mode [ 312.573837][T12515] veth0: entered allmulticast mode [ 312.738075][T12518] macvtap2: entered promiscuous mode [ 312.754957][T12518] macvtap2: entered allmulticast mode [ 312.777209][T12521] bridge0: entered allmulticast mode [ 312.839397][T12533] x_tables: duplicate underflow at hook 1 [ 313.043647][T12541] nbd: couldn't find a device at index 0 [ 313.435524][T12562] __nla_validate_parse: 11 callbacks suppressed [ 313.435543][T12562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1824'. [ 313.544146][T12562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1824'. [ 313.555004][T12562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1824'. [ 313.564377][T12562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1824'. [ 313.573927][T12562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1824'. [ 313.586363][T12562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1824'. [ 313.984367][T12591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1827'. [ 314.299945][T12600] netlink: 'syz.3.1831': attribute type 24 has an invalid length. [ 314.435126][T12609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1835'. [ 314.646834][T12619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1838'. [ 314.747656][T12626] openvswitch: netlink: IP tunnel dst address not specified [ 314.939011][T12629] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1841'. [ 315.200245][T12642] syzkaller0: entered promiscuous mode [ 315.213192][T12645] netlink: 'syz.3.1845': attribute type 1 has an invalid length. [ 315.226058][T12642] syzkaller0: entered allmulticast mode [ 315.777695][T12665] syzkaller0: entered promiscuous mode [ 315.800991][T12665] syzkaller0: entered allmulticast mode [ 315.801036][T12669] netlink: 'syz.2.1855': attribute type 16 has an invalid length. [ 315.827934][T12667] lo speed is unknown, defaulting to 1000 [ 315.842642][T12669] netlink: 'syz.2.1855': attribute type 3 has an invalid length. [ 315.887414][T12665] netlink: 'syz.3.1853': attribute type 1 has an invalid length. [ 315.906932][T12667] lo speed is unknown, defaulting to 1000 [ 316.024609][T12665] bond10: entered promiscuous mode [ 316.061942][T12665] 8021q: adding VLAN 0 to HW filter on device bond10 [ 316.090864][T12667] lo speed is unknown, defaulting to 1000 [ 316.350315][T12694] gretap0: entered promiscuous mode [ 316.379327][T12694] vlan1: entered promiscuous mode [ 316.428019][T12702] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 316.472574][T12698] veth0: entered promiscuous mode [ 316.492542][T12703] veth0: left promiscuous mode [ 316.625609][T12707] xt_CT: You must specify a L4 protocol and not use inversions on it [ 316.751093][T12714] netlink: 'syz.1.1866': attribute type 4 has an invalid length. [ 316.891684][T12667] infiniband syz0: set down [ 316.896785][ T5766] lo speed is unknown, defaulting to 1000 [ 316.903180][T12667] infiniband syz0: added lo [ 316.947547][T12667] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 316.975202][T12667] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 317.032645][T12667] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 317.083295][T12667] RDS/IB: syz0: added [ 317.094987][T12667] smc: adding ib device syz0 with port count 1 [ 317.113521][T12667] smc: ib device syz0 port 1 has no pnetid [ 317.131222][ T5766] lo speed is unknown, defaulting to 1000 [ 317.145782][T12667] lo speed is unknown, defaulting to 1000 [ 317.222012][T12734] vxcan1: entered promiscuous mode [ 317.233998][T12738] xt_CT: You must specify a L4 protocol and not use inversions on it [ 317.235855][T12734] vxcan1: entered allmulticast mode [ 317.359873][T12738] bridge_slave_0: left allmulticast mode [ 317.428166][T12738] bridge_slave_0: left promiscuous mode [ 317.471725][T12738] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.583312][T12738] bridge_slave_1: left promiscuous mode [ 317.607015][T12738] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.724922][T12738] bond0: (slave bond_slave_0): Releasing backup interface [ 317.834115][T12738] team0: Port device team_slave_1 removed [ 317.859608][T12738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.868274][T12738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.883795][T12738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.891559][T12738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.903818][T12738] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 317.941277][T12667] lo speed is unknown, defaulting to 1000 [ 318.587710][T12766] 8021q: adding VLAN 0 to HW filter on device bond11 [ 318.725832][T12667] lo speed is unknown, defaulting to 1000 [ 318.952314][T12793] netlink: 'syz.3.1887': attribute type 3 has an invalid length. [ 319.047769][T12793] syzkaller0: entered promiscuous mode [ 319.054056][T12793] syzkaller0: entered allmulticast mode [ 319.368420][T12784] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 319.396545][T12784] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 319.537169][T12784] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 319.544579][T12784] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 319.575787][T12812] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 319.606617][T12784] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 319.617363][T12784] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 319.667522][T12813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.745825][T12784] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 319.755993][T12784] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 322.336475][T12667] lo speed is unknown, defaulting to 1000 [ 322.352229][T12784] tipc: Resetting bearer [ 322.585595][T12825] __nla_validate_parse: 7 callbacks suppressed [ 322.585615][T12825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1897'. [ 322.731341][ T5766] IPVS: starting estimator thread 0... [ 322.741691][T12825] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 322.870412][T12836] IPVS: using max 24 ests per chain, 57600 per kthread [ 323.182596][T12667] lo speed is unknown, defaulting to 1000 [ 323.284651][T12854] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 323.776601][T12838] smc: removing ib device syz1 [ 323.871879][T12838] smbdirect: ib_dev[syz1] removed [ 324.148531][T12897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1917'. [ 324.378948][T12905] netlink: 'syz.4.1919': attribute type 6 has an invalid length. [ 324.456672][T12910] netlink: 'syz.3.1920': attribute type 1 has an invalid length. [ 324.485943][T12910] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1920'. [ 324.516848][T12910] netlink: 'syz.3.1920': attribute type 1 has an invalid length. [ 324.544821][T12910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1920'. [ 324.817801][T12924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1923'. [ 325.047235][T12929] nbd: must specify a size in bytes for the device [ 325.061830][T12929] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 325.088308][T12929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1925'. [ 325.115856][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1928'. [ 325.203541][T12936] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 325.264275][T12936] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1928'. [ 325.618985][T12949] macvlan0: entered promiscuous mode [ 325.646398][T12949] macvlan0: entered allmulticast mode [ 325.666315][T12949] team0: Device macvlan0 is already an upper device of the team interface [ 325.741215][T12952] erspan0: entered promiscuous mode [ 326.376460][T12965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.748355][T12986] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1942'. [ 326.817173][T12989] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1942'. [ 326.921074][T12979] veth: renamed from vlan0 [ 327.735530][T13025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1950'. [ 327.770538][T13025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1950'. [ 328.110944][T13039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1955'. [ 328.146034][T13039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1955'. [ 328.198609][T13039] raw_sendmsg: syz.0.1955 forgot to set AF_INET. Fix it! [ 328.241016][T13039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.272008][T13046] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1957'. [ 328.451923][T13049] gre1: entered promiscuous mode [ 328.469479][T13049] gre1: entered allmulticast mode [ 328.797861][T13063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.943398][T13070] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1964'. [ 328.976242][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1964'. [ 329.938707][T13120] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1973'. [ 330.644576][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'. [ 330.686943][T13156] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 330.794390][T13164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1984'. [ 330.839666][T13164] netlink: 'syz.3.1984': attribute type 7 has an invalid length. [ 330.897282][T13164] netlink: 'syz.3.1984': attribute type 8 has an invalid length. [ 331.094372][T13171] netlink: 'syz.0.1986': attribute type 1 has an invalid length. [ 331.394068][T13171] 8021q: adding VLAN 0 to HW filter on device bond7 [ 331.484487][T13178] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 331.507460][T13183] ip6tnl2: entered allmulticast mode [ 331.670741][T13195] 8021q: adding VLAN 0 to HW filter on device bond8 [ 331.706439][T13195] bond7: (slave bond8): Enslaving as an active interface with a down link [ 332.371003][T13231] pimreg: entered allmulticast mode [ 332.604805][T13251] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 332.775836][T13250] xt_CT: No such helper "pptp" [ 333.678201][T13294] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20001 [ 333.699113][T13290] bond13 (unregistering): Released all slaves [ 334.230082][T13320] __nla_validate_parse: 3 callbacks suppressed [ 334.230101][T13320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2029'. [ 334.584863][T13332] vlan2: entered promiscuous mode [ 334.590233][T13332] bridge0: entered promiscuous mode [ 334.959148][T13344] gre2: entered promiscuous mode [ 335.069912][T13351] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2038'. [ 335.307679][T13362] Cannot find add_set index 0 as target [ 335.315313][T13362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2041'. [ 335.430015][T13364] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2043'. [ 335.456982][T13366] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 335.710364][T13384] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2048'. [ 336.036274][T13394] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2054'. [ 336.215965][T13414] xt_TPROXY: Can be used only with -p tcp or -p udp [ 336.399561][T13424] xt_hashlimit: invalid rate [ 336.509170][T13424] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 336.547410][T13424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.685266][T13424] bond12: invalid ARP target 0.0.0.0 specified for addition [ 336.702463][T13441] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 336.716351][T13424] bond12: option arp_ip_target: invalid value (0) [ 336.740914][T13424] bond12 (unregistering): Released all slaves [ 336.950959][T13446] sctp: [Deprecated]: syz.2.2068 (pid 13446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 336.950959][T13446] Use struct sctp_sack_info instead [ 336.996112][T13450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.214641][T13471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2072'. [ 337.390315][T13477] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2075'. [ 337.518557][T13483] netlink: 'syz.2.2076': attribute type 4 has an invalid length. [ 337.559983][T13483] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2076'. [ 337.813667][T13493] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x28 [ 338.229537][T13518] pim6reg527: entered allmulticast mode [ 338.483077][T13529] openvswitch: netlink: IP tunnel dst address not specified [ 338.500708][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2086'. [ 339.123664][T13557] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 339.141439][T13557] bond4: option packets_per_slave: allowed values 0 - 65535 [ 339.210859][T13561] Cannot find del_set index 4 as target [ 339.267187][T13557] bond4 (unregistering): Released all slaves [ 339.493805][T13560] bond13: (slave bond_slave_1): Device is not our slave [ 339.539209][T13560] bond13: option active_slave: invalid value (bond_slave_1) [ 339.573903][T13566] netlink: 'syz.2.2098': attribute type 3 has an invalid length. [ 339.586302][T13560] bond13 (unregistering): Released all slaves [ 339.593568][T13566] netlink: 'syz.2.2098': attribute type 3 has an invalid length. [ 339.632248][T13566] __nla_validate_parse: 6 callbacks suppressed [ 339.632267][T13566] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2098'. [ 339.660193][T13571] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2097'. [ 339.693616][T13574] tipc: Enabling of bearer rejected, failed to enable media [ 339.744312][T13574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2096'. [ 340.478235][T13601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2105'. [ 340.800289][T13613] netlink: 'syz.3.2110': attribute type 3 has an invalid length. [ 341.007230][T13618] netlink: 'syz.2.2112': attribute type 1 has an invalid length. [ 341.135382][T13627] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2108'. [ 341.168345][T13627] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2108'. [ 341.203468][T13626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2114'. [ 341.290370][T13616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2111'. [ 341.739718][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2121'. [ 341.765529][T13656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2122'. [ 341.807518][T13656] xt_hashlimit: overflow, rate too high: 0 [ 341.931096][T13663] netlink: 'syz.4.2124': attribute type 1 has an invalid length. [ 341.950985][T13660] netlink: 'syz.3.2123': attribute type 1 has an invalid length. [ 342.082492][T13671] erspan0: entered allmulticast mode [ 342.170751][T13674] netlink: 'syz.1.2127': attribute type 9 has an invalid length. [ 342.214847][T13676] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 342.405315][T13684] xt_hashlimit: size too large, truncated to 1048576 [ 342.445207][T13685] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 342.900059][T13708] netlink: 'syz.0.2136': attribute type 1 has an invalid length. [ 342.938302][T13708] netlink: 'syz.0.2136': attribute type 3 has an invalid length. [ 342.965601][T13712] sctp: [Deprecated]: syz.4.2138 (pid 13712) Use of struct sctp_assoc_value in delayed_ack socket option. [ 342.965601][T13712] Use struct sctp_sack_info instead [ 343.080402][T13716] netlink: 'syz.2.2139': attribute type 21 has an invalid length. [ 343.562042][T13742] netlink: 'syz.1.2147': attribute type 1 has an invalid length. [ 343.574577][T13743] netlink: 'syz.1.2147': attribute type 1 has an invalid length. [ 343.768841][T13742] 8021q: adding VLAN 0 to HW filter on device bond15 [ 343.801348][T13744] bond15: (slave gretap2): making interface the new active one [ 343.812248][T13744] bond15: (slave gretap2): Enslaving as an active interface with an up link [ 344.264760][T13770] netlink: 'syz.1.2154': attribute type 1 has an invalid length. [ 347.096110][T13770] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 347.098212][T13771] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 347.135988][T13772] bridge6: entered promiscuous mode [ 347.150635][T13772] bridge6: entered allmulticast mode [ 347.305053][T13780] netlink: 'syz.4.2156': attribute type 61 has an invalid length. [ 347.331065][T13780] __nla_validate_parse: 9 callbacks suppressed [ 347.331085][T13780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2156'. [ 347.602255][T13801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2161'. [ 347.651613][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2162'. [ 347.801055][T13805] bond16: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 347.845257][T13805] bond16 (unregistering): Released all slaves [ 347.898034][T13803] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2162'. [ 347.906941][T13822] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2165'. [ 348.364110][T13833] xt_hashlimit: invalid rate [ 348.382618][T13821] infiniband syz1: set down [ 348.388555][T13821] infiniband syz1: added bond_slave_1 [ 348.429283][T13821] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 348.465415][T13821] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 348.496853][T13821] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 348.557925][T13821] RDS/IB: syz1: added [ 348.582137][T13821] smc: adding ib device syz1 with port count 1 [ 348.614270][T13821] smc: ib device syz1 port 1 has no pnetid [ 348.651050][T13841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.859341][T13852] C: entered allmulticast mode [ 348.875745][T13827] netlink: 'syz.4.2166': attribute type 2 has an invalid length. [ 348.960823][T13853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2173'. [ 348.979748][T13858] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2174'. [ 349.196829][T13848] C: left allmulticast mode [ 349.489427][T13877] xt_l2tp: missing protocol rule (udp|l2tpip) [ 350.178214][T13903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2186'. [ 350.244928][T13907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2186'. [ 350.539930][T13917] tipc: Enabled bearer , priority 10 [ 350.589746][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2191'. [ 351.665092][T13960] netlink: 'syz.2.2204': attribute type 13 has an invalid length. [ 351.693606][T13960] netlink: 'syz.2.2204': attribute type 58 has an invalid length. [ 351.716181][T13960] netlink: 'syz.2.2204': attribute type 14 has an invalid length. [ 351.731123][T13960] netlink: 'syz.2.2204': attribute type 13 has an invalid length. [ 351.745920][T13962] netlink: 'syz.1.2205': attribute type 1 has an invalid length. [ 352.537738][T13994] netlink: 'syz.2.2214': attribute type 1 has an invalid length. [ 352.725535][T14003] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 352.779138][T14003] bond5: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 352.815850][T14011] netlink: 'syz.1.2218': attribute type 1 has an invalid length. [ 352.831948][T14003] bond5: (slave vxcan3): making interface the new active one [ 352.852050][T14011] netlink: 'syz.1.2218': attribute type 2 has an invalid length. [ 352.861415][T14003] bond5: (slave vxcan3): Enslaving as an active interface with an up link [ 352.893728][T13994] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 352.914701][T13994] bond5: (slave vxcan5): Enslaving as a backup interface with an up link [ 352.933915][T14014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.949016][T14011] netlink: 'syz.1.2218': attribute type 1 has an invalid length. [ 352.979653][T14016] tipc: Started in network mode [ 353.000636][T14016] tipc: Node identity ac141441, cluster identity 4711 [ 353.029166][T14016] tipc: Enabling of bearer rejected, failed to enable media [ 353.293848][T14034] __nla_validate_parse: 5 callbacks suppressed [ 353.293890][T14034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2225'. [ 353.333395][T14034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2225'. [ 353.460306][T14043] netlink: 13 bytes leftover after parsing attributes in process `syz.0.2226'. [ 353.697843][T14049] netlink: 'syz.4.2227': attribute type 11 has an invalid length. [ 353.877394][T14049] bond14: entered allmulticast mode [ 353.926061][T14056] veth7: entered allmulticast mode [ 353.966274][T14056] bond14: (slave veth7): Enslaving as an active interface with an up link [ 354.019201][T14058] 8021q: adding VLAN 0 to HW filter on device bond18 [ 354.033461][T14059] bond14 (unregistering): (slave veth7): Releasing backup interface [ 354.052559][T14059] bond14 (unregistering): Released all slaves [ 354.107173][T14060] bond18: (slave geneve3): making interface the new active one [ 354.119569][T14060] bond18: (slave geneve3): Enslaving as an active interface with an up link [ 354.262103][T14078] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2234'. [ 354.285523][T14078] netlink: Conntrack attr has 3 unknown bytes [ 354.711574][T14098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2241'. [ 354.731430][T14101] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2243'. [ 354.741209][T14098] openvswitch: netlink: Flow actions attr not present in new flow. [ 355.440181][T14139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2251'. [ 355.448001][T14133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2249'. [ 355.609432][T14146] validate_nla: 2 callbacks suppressed [ 355.609477][T14146] netlink: 'syz.1.2255': attribute type 4 has an invalid length. [ 356.257842][T14165] wg1 speed is unknown, defaulting to 1000 [ 356.364739][T14165] lo speed is unknown, defaulting to 1000 [ 356.602493][T14175] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 357.017439][T14177] 8021q: adding VLAN 0 to HW filter on device bond9 [ 357.262172][T14189] C: renamed from lo (while UP) [ 357.311225][T14189] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 357.517288][T14196] netlink: 'syz.0.2270': attribute type 1 has an invalid length. [ 357.557646][T14196] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2270'. [ 357.578613][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2271'. [ 358.249570][T14231] Cannot find set identified by id 65534 to match [ 358.542043][T14235] geneve4: entered promiscuous mode [ 358.567599][T14235] geneve4: entered allmulticast mode [ 359.085119][T14259] netlink: 'syz.3.2285': attribute type 3 has an invalid length. [ 359.124013][T14259] netlink: 'syz.3.2285': attribute type 1 has an invalid length. [ 359.151453][T14263] __nla_validate_parse: 4 callbacks suppressed [ 359.151473][T14263] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2285'. [ 359.164976][T14259] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2285'. [ 359.210899][T14263] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2285'. [ 359.230630][T14263] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2285'. [ 359.267794][T14263] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2285'. [ 359.334446][T14272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2286'. [ 359.360902][T14270] netlink: 81 bytes leftover after parsing attributes in process `syz.0.2288'. [ 359.387289][T14263] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2285'. [ 359.411625][T14263] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2285'. [ 359.465301][T14263] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2285'. [ 359.475337][T14262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.599089][T14262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.700128][T14282] nbd: couldn't find a device at index 0 [ 360.268367][T14303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 360.558573][T14316] 0·: renamed from hsr0 (while UP) [ 360.580998][T14316] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 360.821467][T14328] netlink: 'syz.3.2304': attribute type 1 has an invalid length. [ 361.000021][T14335] netlink: 'syz.3.2305': attribute type 1 has an invalid length. [ 361.508075][T14353] netlink: 'syz.3.2308': attribute type 1 has an invalid length. [ 361.610425][T14332] syzkaller0: entered promiscuous mode [ 361.638027][T14332] syzkaller0: entered allmulticast mode [ 365.101881][T14398] __nla_validate_parse: 31 callbacks suppressed [ 365.101904][T14398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2319'. [ 365.155566][T14398] netlink: 'syz.4.2319': attribute type 7 has an invalid length. [ 365.157613][T14406] netlink: 'syz.4.2319': attribute type 1 has an invalid length. [ 365.228656][T14410] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2322'. [ 365.245897][T14398] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2319'. [ 365.254667][T14406] netlink: 'syz.4.2319': attribute type 1 has an invalid length. [ 365.434604][T14416] bond12: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 365.507056][T14427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.550638][T14416] bond12 (unregistering): Released all slaves [ 365.661118][T14398] erspan0: entered promiscuous mode [ 365.675060][T14398] gretap0: entered promiscuous mode [ 365.684700][T14398] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 365.910292][T14441] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 366.304786][T14471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.446615][T14471] IPv6: addrconf: prefix option has invalid lifetime [ 366.485502][T14474] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 366.501134][T14474] bond6 (unregistering): Released all slaves [ 366.849404][T14491] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2341'. [ 367.154547][T14498] netlink: 'syz.3.2344': attribute type 10 has an invalid length. [ 367.200979][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2344'. [ 367.229468][T14508] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2346'. [ 367.395616][T14504] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 367.465025][T14524] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 367.474723][T14505] tipc: Enabling of bearer rejected, already enabled [ 367.563222][ T30] audit: type=1800 audit(1777673156.749:2): pid=14505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2345" name="memory.events" dev="tmpfs" ino=2565 res=0 errno=0 [ 367.871699][T14536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2353'. [ 367.931957][T14542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2353'. [ 367.978441][T14552] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 367.994694][T14536] netlink: 'syz.0.2353': attribute type 29 has an invalid length. [ 368.031703][T14554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2353'. [ 368.080202][T14542] netlink: 'syz.0.2353': attribute type 29 has an invalid length. [ 368.094419][T14536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2353'. [ 368.640419][T14579] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 369.182617][ T5286] veth0_vlan: left promiscuous mode [ 369.217461][ T5286] veth0_vlan: entered promiscuous mode [ 369.447550][T14615] ipvlan2: entered promiscuous mode [ 369.578639][T14623] sctp: [Deprecated]: syz.1.2375 (pid 14623) Use of int in max_burst socket option. [ 369.578639][T14623] Use struct sctp_assoc_value instead [ 369.738303][T14623] veth1_to_bond: entered promiscuous mode [ 369.762529][T14623] macsec2: entered promiscuous mode [ 369.999943][T14623] veth1_to_bond: left promiscuous mode [ 370.400872][T14666] __nla_validate_parse: 68 callbacks suppressed [ 370.400894][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2383'. [ 370.468168][T14672] netlink: 'syz.2.2386': attribute type 10 has an invalid length. [ 370.737240][T14672] team0 (unregistering): Port device team_slave_0 removed [ 370.761128][T14672] team0 (unregistering): Port device team_slave_1 removed [ 371.140313][T14702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2390'. [ 371.146797][T14704] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2389'. [ 371.218207][T14699] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2389'. [ 371.228227][T14709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2393'. [ 371.240938][T14709] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2393'. [ 371.257456][T14699] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2389'. [ 371.279555][T14708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2392'. [ 371.299044][T14699] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2389'. [ 371.326913][T14699] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2389'. [ 371.361242][T14713] tls_set_device_offload_rx: netdev not found [ 372.677663][T14776] sctp: [Deprecated]: syz.2.2411 (pid 14776) Use of int in max_burst socket option deprecated. [ 372.677663][T14776] Use struct sctp_assoc_value instead [ 373.318930][T14815] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 373.484976][T14826] openvswitch: netlink: Flow actions attr not present in new flow. [ 374.037277][T10683] bond4: (slave bridge0): link status definitely down, disabling slave [ 374.084715][T10683] bond4: now running without any active interface! [ 375.510171][T14911] __nla_validate_parse: 55 callbacks suppressed [ 375.510191][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2450'. [ 375.565137][T14914] sctp: [Deprecated]: syz.2.2451 (pid 14914) Use of int in maxseg socket option. [ 375.565137][T14914] Use struct sctp_assoc_value instead [ 375.686425][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.702220][T14922] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2453'. [ 375.716490][T14921] netlink: 'syz.2.2454': attribute type 29 has an invalid length. [ 375.743554][T14921] netlink: 'syz.2.2454': attribute type 29 has an invalid length. [ 375.759413][T14924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2455'. [ 375.759757][T14921] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2454'. [ 375.784716][T14921] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2454'. [ 375.792532][T14924] veth1_macvtap: left promiscuous mode [ 375.798748][T14921] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2454'. [ 375.960535][T14934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2457'. [ 375.981101][T14934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2457'. [ 376.026332][T14934] netem: change failed [ 376.719523][T14964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2467'. [ 376.994932][T14980] 8021q: VLANs not supported on gre0 [ 377.073551][T14985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2471'. [ 377.256181][T14988] netlink: 'syz.1.2472': attribute type 29 has an invalid length. [ 377.702077][T15002] veth0: entered promiscuous mode [ 377.722186][T14994] veth0: left promiscuous mode [ 377.925142][T15016] gtp1: entered promiscuous mode [ 377.942176][T15016] gtp1: entered allmulticast mode [ 378.291658][T15037] SET target dimension over the limit! [ 378.589289][T15049] netlink: 'syz.0.2488': attribute type 4 has an invalid length. [ 378.927308][T15066] syzkaller1: entered promiscuous mode [ 378.943191][T15066] syzkaller1: entered allmulticast mode [ 380.352275][T15137] syzkaller1: entered allmulticast mode [ 380.725964][T15157] : entered promiscuous mode [ 380.932188][T15168] __nla_validate_parse: 11 callbacks suppressed [ 380.932209][T15168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2527'. [ 381.226127][T15179] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2532'. [ 381.250335][T15180] netlink: 'syz.0.2531': attribute type 6 has an invalid length. [ 381.558289][T15193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2536'. [ 381.909738][T15207] IPv6: NLM_F_CREATE should be specified when creating new route [ 381.928512][T15208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2539'. [ 381.948301][T15204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2538'. [ 381.998482][T15204] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 382.628013][T15248] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2548'. [ 382.662297][T15248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2548'. [ 382.680254][T15225] veth5: entered promiscuous mode [ 382.710536][T15225] veth5: entered allmulticast mode [ 383.326704][T15272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2554'. [ 383.616835][T15294] netlink: 'syz.2.2560': attribute type 32 has an invalid length. [ 383.638440][T15294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2560'. [ 383.732586][T15294] bond6: Setting coupled_control to off (0) [ 384.219520][T15324] Cannot find set identified by id 1 to match [ 384.481554][T15335] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 384.550156][T15336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2570'. [ 384.610482][T15344] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 384.904932][T15356] IPv4: Oversized IP packet from 127.202.26.0 [ 385.219425][T15372] netlink: 'syz.2.2580': attribute type 1 has an invalid length. [ 385.236963][T15369] geneve3: entered promiscuous mode [ 385.242976][T15369] geneve3: entered allmulticast mode [ 385.266076][T15372] netlink: 'syz.2.2580': attribute type 1 has an invalid length. [ 385.382198][T15372] 8021q: adding VLAN 0 to HW filter on device bond7 [ 386.045651][T15392] bond10: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 386.070142][T15392] bond10 (unregistering): Released all slaves [ 386.201265][T15404] __nla_validate_parse: 7 callbacks suppressed [ 386.201285][T15404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2590'. [ 386.338373][T15404] team1: entered promiscuous mode [ 386.344267][T15404] team1: entered allmulticast mode [ 386.384520][T15418] xt_hashlimit: size too large, truncated to 1048576 [ 387.250506][T15463] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2602'. [ 387.271298][T15463] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2602'. [ 387.320867][T15470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2604'. [ 387.350028][T15470] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2604'. [ 387.438637][T15479] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.2606'. [ 387.546056][T15487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2608'. [ 387.729334][T15495] openvswitch: netlink: Missing key (keys=40, expected=100) [ 387.916835][T15503] netlink: 'syz.2.2613': attribute type 1 has an invalid length. [ 387.959017][T15503] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2613'. [ 387.994031][T15503] NCSI netlink: No device for ifindex 0 [ 388.011951][T15512] netlink: 'syz.3.2617': attribute type 5 has an invalid length. [ 388.023194][T15511] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 388.183898][T15517] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2617'. [ 389.127761][T15565] netlink: 404 bytes leftover after parsing attributes in process `syz.1.2630'. [ 389.189088][T15569] ksmbd: Unknown IPC event: 6, ignore. [ 389.932513][T15611] netlink: 'syz.1.2642': attribute type 1 has an invalid length. [ 389.977251][T15611] netlink: 'syz.1.2642': attribute type 2 has an invalid length. [ 390.018663][T15611] netlink: 'syz.1.2642': attribute type 1 has an invalid length. [ 390.389147][T15632] bond19: option all_slaves_active: invalid value (222) [ 390.605295][T15632] bond19 (unregistering): Released all slaves [ 390.620217][T15653] netlink: 'syz.3.2653': attribute type 1 has an invalid length. [ 390.631490][T15653] netlink: 'syz.3.2653': attribute type 4 has an invalid length. [ 390.674728][T15644] netlink: 'syz.0.2651': attribute type 3 has an invalid length. [ 390.684331][T15644] netlink: 'syz.0.2651': attribute type 3 has an invalid length. [ 391.315984][T15683] __nla_validate_parse: 11 callbacks suppressed [ 391.316007][T15683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2660'. [ 391.355984][T15681] netlink: 'syz.2.2661': attribute type 2 has an invalid length. [ 392.311071][T15710] netem: change failed [ 392.331308][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2665'. [ 392.480163][T15720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2668'. [ 392.529581][T15720] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2668'. [ 392.559521][T15720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2668'. [ 392.583131][T15720] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2668'. [ 392.763107][T15725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 392.789703][T15737] x_tables: duplicate entry at hook 2 [ 392.804147][T15724] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 393.188270][T15750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2676'. [ 393.406456][T15760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2680'. [ 393.551118][T15765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2681'. [ 393.670259][T15784] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2683'. [ 394.117637][T15797] xt_hashlimit: size too large, truncated to 1048576 [ 394.443879][T15799] xt_hashlimit: size too large, truncated to 1048576 [ 394.524680][T15816] netlink: 'syz.3.2687': attribute type 13 has an invalid length. [ 394.566632][T15816] gretap0: refused to change device tx_queue_len [ 394.587208][T15819] netlink: 'syz.0.2688': attribute type 1 has an invalid length. [ 394.597898][T15816] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 394.839604][T15819] 8021q: adding VLAN 0 to HW filter on device bond10 [ 394.919338][T15823] 8021q: adding VLAN 0 to HW filter on device bond10 [ 394.970961][T15823] bond10: (slave vcan0): The slave device specified does not support setting the MAC address [ 395.052489][T15823] bond10: (slave vcan0): Error -95 calling set_mac_address [ 395.207851][T15832] netem: change failed [ 395.517457][T15855] wg1 speed is unknown, defaulting to 1000 [ 395.574144][T15857] set match dimension is over the limit! [ 395.695921][T15854] syzkaller0: entered promiscuous mode [ 395.696429][T15862] netlink: 'syz.2.2696': attribute type 6 has an invalid length. [ 395.712297][T15854] syzkaller0: entered allmulticast mode [ 396.231656][T15873] netlink: 'syz.1.2699': attribute type 24 has an invalid length. [ 399.287713][T15865] __nla_validate_parse: 1 callbacks suppressed [ 399.287733][T15865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2696'. [ 399.346889][T15869] macvlan4: entered allmulticast mode [ 399.378709][T15869] hsr0: entered allmulticast mode [ 399.394146][T15869] hsr_slave_0: entered allmulticast mode [ 399.411691][T15869] hsr0: entered promiscuous mode [ 399.587245][T15893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.753938][T15898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2703'. [ 400.076880][T15918] netlink: 'syz.3.2709': attribute type 1 has an invalid length. [ 400.119440][T15918] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 400.134942][T15925] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2711'. [ 400.872593][T15960] netlink: 'syz.0.2720': attribute type 1 has an invalid length. [ 401.914211][T15993] wg1 speed is unknown, defaulting to 1000 [ 401.945408][T15993] lo speed is unknown, defaulting to 1000 [ 403.086831][T16027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2736'. [ 403.127933][T16027] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2736'. [ 403.176514][T16027] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2736'. [ 403.494089][T16043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2740'. [ 405.032150][T16089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2753'. [ 405.119335][T16098] netlink: 'syz.0.2754': attribute type 3 has an invalid length. [ 405.155360][T16089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.262608][T16100] netlink: 'syz.0.2756': attribute type 8 has an invalid length. [ 405.271895][T16100] IPv6: NLM_F_CREATE should be specified when creating new route [ 405.818610][T16112] bond8: entered promiscuous mode [ 405.843656][T16112] bond8: entered allmulticast mode [ 405.860897][T16112] 8021q: adding VLAN 0 to HW filter on device bond8 [ 406.221599][T16149] IPVS: dh: FWM 3 0x00000003 - no destination available [ 406.581753][T16167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2772'. [ 406.607860][T16166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2772'. [ 406.631855][T16167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2772'. [ 406.685940][T16166] openvswitch: netlink: IP tunnel TTL not specified. [ 406.858191][T16178] xt_NFQUEUE: number of total queues is 0 [ 406.871743][T16180] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2777'. [ 407.157474][T16191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2780'. [ 407.474970][T16210] can: request_module (can-proto-3) failed. [ 407.676855][T16222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.881332][T16231] x_tables: duplicate underflow at hook 1 [ 407.886876][T16229] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2790'. [ 408.763841][T16277] netlink: 'syz.2.2805': attribute type 4 has an invalid length. [ 408.795434][T16277] netlink: 'syz.2.2805': attribute type 4 has an invalid length. [ 408.949511][T16285] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2809'. [ 408.991991][T16285] netlink: 'syz.0.2809': attribute type 1 has an invalid length. [ 409.001578][T16286] macvlan0: entered promiscuous mode [ 409.017984][T16286] bond0: entered promiscuous mode [ 409.026130][T16285] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2809'. [ 409.055347][T16286] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 409.073199][T16285] netlink: 658 bytes leftover after parsing attributes in process `syz.0.2809'. [ 409.504444][T16312] veth1_macvtap: entered allmulticast mode [ 409.591169][T16312] veth1_macvtap (unregistering): left allmulticast mode [ 409.646408][T16320] netlink: 'syz.2.2817': attribute type 1 has an invalid length. [ 410.197670][T16339] netlink: 'syz.0.2823': attribute type 7 has an invalid length. [ 410.473154][T16349] bridge0: port 1(veth0_to_bridge) entered blocking state [ 410.501185][T16349] bridge0: port 1(veth0_to_bridge) entered disabled state [ 410.523448][T16349] veth0_to_bridge: entered allmulticast mode [ 410.584379][T16349] veth0_to_bridge: entered promiscuous mode [ 410.617051][T16349] bridge0: port 1(veth0_to_bridge) entered blocking state [ 410.626696][T16349] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 410.973787][T16406] __nla_validate_parse: 5 callbacks suppressed [ 410.973810][T16406] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2833'. [ 411.177952][T16419] netlink: 'syz.4.2837': attribute type 1 has an invalid length. [ 411.320260][T16420] ipvlan1: entered promiscuous mode [ 411.327539][T16420] ipvlan1: entered allmulticast mode [ 411.333775][T16420] veth: entered allmulticast mode [ 411.515894][T16437] netlink: 'syz.0.2838': attribute type 6 has an invalid length. [ 411.761548][T16440] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 411.798007][T16442] tipc: Invalid UDP bearer configuration [ 411.798089][T16442] tipc: Enabling of bearer rejected, failed to enable media [ 411.918982][T16448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2842'. [ 412.421478][T16478] netlink: 'syz.2.2850': attribute type 1 has an invalid length. [ 412.458553][T16478] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2850'. [ 412.652375][T16483] bond9: entered promiscuous mode [ 412.670110][T16478] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2850'. [ 412.679997][T16491] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 412.777556][T16502] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2854'. [ 412.838768][T16502] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2854'. [ 412.908970][T16502] gretap0: entered promiscuous mode [ 412.970145][T16502] gretap0: left promiscuous mode [ 413.011276][T16512] openvswitch: netlink: IP tunnel dst address not specified [ 413.281936][T16525] netlink: 'syz.2.2862': attribute type 11 has an invalid length. [ 413.304489][T16525] netlink: 'syz.2.2862': attribute type 11 has an invalid length. [ 413.312550][T16525] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2862'. [ 413.636190][T16548] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 413.715604][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2870'. [ 414.324217][T16583] macvtap1: entered promiscuous mode [ 414.347401][T16583] macvtap1: entered allmulticast mode [ 414.368357][T16583] veth1_vlan: entered allmulticast mode [ 414.725019][T16611] xt_hashlimit: size too large, truncated to 1048576 [ 414.909344][T16629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2889'. [ 415.211861][T16639] vlan0: entered allmulticast mode [ 415.219307][T16639] bond0: entered allmulticast mode [ 415.260084][T16643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.505350][ T5645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 415.522512][ T5645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 415.536792][ T5645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 415.547845][ T5645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 415.561315][ T5645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 415.778311][T16656] bridge0: port 1(veth0_to_bridge) entered disabled state [ 415.811652][T16656] veth0_to_bridge (unregistering): left allmulticast mode [ 415.841600][T16656] veth0_to_bridge (unregistering): left promiscuous mode [ 415.856673][T16656] bridge0: port 1(veth0_to_bridge) entered disabled state [ 416.166996][T11387] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.187721][T11387] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 416.260221][T16646] wg1 speed is unknown, defaulting to 1000 [ 416.268263][T16646] lo speed is unknown, defaulting to 1000 [ 416.366876][T11387] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.378173][T11387] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 416.509059][T11387] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.539855][T11387] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 416.710188][T11387] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.732951][T11387] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 417.287817][T11387] bond13: left allmulticast mode [ 417.294342][T11387] bond13: left promiscuous mode [ 417.304661][T11387] bridge5: port 1(bond13) entered disabled state [ 417.317668][T11387] dvmrp0: left allmulticast mode [ 417.645588][ T5637] Bluetooth: hci5: command tx timeout [ 417.727138][T16615] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 417.814845][T11387] bond15 (unregistering): (slave gretap2): Releasing active interface [ 417.959411][T11387] bond18 (unregistering): (slave geneve3): Releasing active interface [ 417.975106][T11387] bond2 (unregistering): (slave geneve2): Releasing active interface [ 418.160083][T11387] bond12 (unregistering): (slave bridge4): Releasing active interface [ 418.308652][T11387] bond0 (unregistering): left promiscuous mode [ 418.330127][T11387] bond0 (unregistering): Released all slaves [ 418.342605][T11387] bond1 (unregistering): Released all slaves [ 418.367711][T11387] bond2 (unregistering): Released all slaves [ 418.384669][T11387] bond3 (unregistering): Released all slaves [ 418.401387][T11387] bond4 (unregistering): Released all slaves [ 418.417889][T11387] bond5 (unregistering): Released all slaves [ 418.434608][T11387] bond6 (unregistering): Released all slaves [ 418.461653][T11387] bond7 (unregistering): Released all slaves [ 418.483371][T11387] bond8 (unregistering): Released all slaves [ 418.500923][T11387] bond9 (unregistering): Released all slaves [ 418.531979][T11387] bond10 (unregistering): Released all slaves [ 418.548818][T11387] bond11 (unregistering): Released all slaves [ 418.566836][T11387] bond12 (unregistering): Released all slaves [ 418.583785][T11387] bond13 (unregistering): Released all slaves [ 418.612010][T11387] bond14 (unregistering): Released all slaves [ 418.632374][T11387] bond15 (unregistering): Released all slaves [ 418.648727][T11387] bond16 (unregistering): Released all slaves [ 418.670920][T11387] bond17 (unregistering): Released all slaves [ 418.689169][T11387] bond18 (unregistering): Released all slaves [ 418.860749][ T9] wg1 speed is unknown, defaulting to 1000 [ 418.888753][ T9] syz2: Port: 1 Link DOWN [ 419.321849][T11387] tipc: Disabling bearer [ 419.380555][T11387] tipc: Disabling bearer [ 419.409831][T16727] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 419.426482][T11387] tipc: Left network mode [ 419.727910][ T5637] Bluetooth: hci5: command tx timeout [ 419.810726][T16758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2920'. [ 419.887004][T16761] netlink: 'syz.0.2920': attribute type 1 has an invalid length. [ 419.909709][T16761] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2920'. [ 419.950512][T16761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2920'. [ 420.601343][T16646] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.631309][T16646] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.656537][T16646] bridge_slave_0: entered allmulticast mode [ 420.692522][T16646] bridge_slave_0: entered promiscuous mode [ 420.935217][T16646] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.948276][T16795] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 420.962896][T16646] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.012975][T16646] bridge_slave_1: entered allmulticast mode [ 421.035517][T16646] bridge_slave_1: entered promiscuous mode [ 421.097686][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 421.106188][T16798] netlink: 'syz.2.2928': attribute type 2 has an invalid length. [ 421.223298][T16803] netlink: 'syz.2.2928': attribute type 10 has an invalid length. [ 421.280087][T16646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.341342][T16805] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2929'. [ 421.352607][T16803] vlan0: left promiscuous mode [ 421.358495][T16803] veth0_vlan: left promiscuous mode [ 421.365094][T16803] vlan0: left allmulticast mode [ 421.388158][T16803] veth0_vlan: left allmulticast mode [ 421.600509][T16646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.646624][T16805] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2929'. [ 421.753463][T16811] netlink: 'syz.2.2930': attribute type 1 has an invalid length. [ 421.774789][T16646] team0: Port device team_slave_0 added [ 421.793320][ T5637] Bluetooth: hci5: command tx timeout [ 421.806344][T16646] team0: Port device team_slave_1 added [ 421.825149][T16818] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2933'. [ 421.880029][T16811] 8021q: adding VLAN 0 to HW filter on device bond10 [ 421.940897][T16646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.950567][T16646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.979301][T16646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.005558][T16646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.045102][T16646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.136434][T16646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.368409][T16838] netlink: 'syz.2.2936': attribute type 3 has an invalid length. [ 422.626778][T16646] hsr_slave_0: entered promiscuous mode [ 422.636372][T16646] hsr_slave_1: entered promiscuous mode [ 422.643715][T16646] debugfs: 'hsr0' already exists in 'hsr' [ 422.655862][T16646] Cannot create hsr debugfs directory [ 423.077228][T16856] syzkaller1: entered promiscuous mode [ 423.090638][T16869] netlink: 'syz.2.2941': attribute type 21 has an invalid length. [ 423.101461][T16856] syzkaller1: entered allmulticast mode [ 423.161615][T16869] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2941'. [ 423.289697][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 423.873749][ T5637] Bluetooth: hci5: command tx timeout [ 424.002714][T11387] hsr_slave_0: left promiscuous mode [ 424.013443][T16896] netlink: 'syz.0.2948': attribute type 39 has an invalid length. [ 424.029510][T11387] hsr_slave_1: left promiscuous mode [ 424.156268][T11387] veth0: left allmulticast mode [ 424.168613][T11387] veth0: left promiscuous mode [ 424.189950][T11387] veth1_macvtap: left promiscuous mode [ 424.199464][T11387] veth0_macvtap: left promiscuous mode [ 424.242505][T16898] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2947'. [ 424.777496][ T36] smbdirect: ib_dev[syz2] removed [ 425.145267][T16923] pim6reg: entered allmulticast mode [ 425.326208][T16930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.350484][T16929] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2953'. [ 425.435984][T16935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.489489][T16923] pim6reg: left allmulticast mode [ 425.610436][T16937] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 425.896038][T16945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2957'. [ 426.069123][T11387] IPVS: stop unused estimator thread 0... [ 426.280027][T16646] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 426.309276][T16957] netlink: 'syz.4.2960': attribute type 10 has an invalid length. [ 426.356907][T16646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 426.368862][T16957] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2960'. [ 426.381687][T16646] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 426.425122][T16954] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 426.436816][T16646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 426.465014][T16965] netlink: 'syz.0.2963': attribute type 8 has an invalid length. [ 426.478788][T16954] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 426.509246][T16963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2960'. [ 426.527377][T16646] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 426.554282][T16967] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2963'. [ 426.662114][T16646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 426.747190][T16965] bond12: entered promiscuous mode [ 426.757228][T16965] bond12: entered allmulticast mode [ 426.769298][T16965] 8021q: adding VLAN 0 to HW filter on device bond12 [ 426.779484][T16957] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 426.792371][T16957] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 426.813957][T16646] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 426.880492][T16646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.391674][T16646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.467670][T17004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2969'. [ 427.511517][T17004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2969'. [ 427.561722][T17010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2971'. [ 427.591291][T17010] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2971'. [ 427.613734][T17010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2971'. [ 427.628424][T16646] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.687200][T17011] netlink: 'syz.2.2971': attribute type 9 has an invalid length. [ 427.891646][T11387] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.898964][T11387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.930807][T17017] syzkaller0: entered promiscuous mode [ 427.940973][T17017] syzkaller0: entered allmulticast mode [ 428.018772][T17019] bond13: Unable to set peer notification delay as MII monitoring is disabled [ 428.039349][T17019] bond13 (unregistering): Released all slaves [ 428.239726][T11386] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.247022][T11386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.321097][T17031] h: entered promiscuous mode [ 428.580233][T17044] netlink: 'syz.2.2978': attribute type 3 has an invalid length. [ 428.619436][T17045] netlink: 'syz.4.2976': attribute type 1 has an invalid length. [ 428.664063][T17045] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 429.297251][T17049] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.312469][T17049] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.744999][T17078] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.758323][T17078] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.011655][T17049] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.076925][T17049] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.187976][T17113] netlink: 'syz.0.2989': attribute type 1 has an invalid length. [ 430.326181][T17078] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.337693][T17078] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.444688][T17049] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.461136][T17049] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.630015][T17078] bond0: (slave netdevsim1): Releasing backup interface [ 430.667024][T17078] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.718911][T17078] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.797122][T17128] __nla_validate_parse: 7 callbacks suppressed [ 430.797144][T17128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2991'. [ 431.155346][T17078] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.166749][T17078] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.227758][T16646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.242268][T17144] netlink: 'syz.0.2992': attribute type 1 has an invalid length. [ 431.280665][T17144] 8021q: adding VLAN 0 to HW filter on device bond13 [ 431.753251][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.778766][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.889815][T16646] veth0_vlan: entered promiscuous mode [ 431.917005][T11386] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.948288][T11386] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.985093][T16646] veth1_vlan: entered promiscuous mode [ 432.036459][ T111] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.071348][ T111] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.202589][ T111] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.231603][ T111] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.510520][T17199] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3000'. [ 432.536419][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3001'. [ 432.546500][T17199] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3000'. [ 432.564584][T16646] veth0_macvtap: entered promiscuous mode [ 432.598452][T17200] netlink: 'syz.3.3002': attribute type 1 has an invalid length. [ 432.608306][T16646] veth1_macvtap: entered promiscuous mode [ 432.757902][T17199] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3000'. [ 432.777769][T17199] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3000'. [ 432.780112][T17200] 8021q: adding VLAN 0 to HW filter on device bond12 [ 432.894022][T17210] bond12: (slave geneve4): making interface the new active one [ 432.932569][T17210] bond12: (slave geneve4): Enslaving as an active interface with an up link [ 432.954841][T17199] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3000'. [ 432.990662][T17199] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3000'. [ 433.044597][T16646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.104167][T16646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.217598][T11387] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.256619][T11387] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.287403][T11387] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.347684][T11387] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.386214][T17235] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3009'. [ 433.474915][T17238] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3010'. [ 433.611177][T17243] netlink: 'syz.4.3011': attribute type 1 has an invalid length. [ 433.628373][ T3257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.638199][ T3257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.681332][T17238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.807460][T17240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.837984][ T111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.869189][T17253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.886568][ T111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.021895][T17264] 8021q: VLANs not supported on ipvlan1 [ 434.295883][T17279] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 434.811589][T17296] netlink: 'syz.0.3022': attribute type 5 has an invalid length. [ 435.155071][ T5645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 435.176522][ T5645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 435.187012][ T5645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 435.209589][ T5645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 435.220388][ T5645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 435.257538][T17311] netlink: 'syz.1.3026': attribute type 1 has an invalid length. [ 435.610161][T17325] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 435.769701][T17333] syzkaller0: entered promiscuous mode [ 435.804988][T17333] syzkaller0: entered allmulticast mode [ 435.939358][T17346] __nla_validate_parse: 6 callbacks suppressed [ 435.939377][T17346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3033'. [ 436.261567][T17359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3035'. [ 436.292595][T17359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3035'. [ 436.427333][T17373] netlink: 'syz.3.3035': attribute type 23 has an invalid length. [ 437.325434][ T5637] Bluetooth: hci0: command tx timeout [ 439.404200][ T5637] Bluetooth: hci0: command tx timeout [ 439.681182][T17362] vlan2: entered promiscuous mode [ 439.689550][T17362] bridge0: entered promiscuous mode [ 439.868455][T17385] netlink: 'syz.1.3040': attribute type 1 has an invalid length. [ 440.087421][T17308] lo speed is unknown, defaulting to 1000 [ 440.489917][T17412] syzkaller0: entered promiscuous mode [ 440.496344][T17412] syzkaller0: entered allmulticast mode [ 440.523478][T17383] nbd2: detected capacity change from 0 to 63 [ 440.536419][T17412] veth1_macvtap: entered allmulticast mode [ 440.575601][ T5645] block nbd2: Receive control failed (result -32) [ 440.575650][ T5637] block nbd2: Receive control failed (result -32) [ 440.596418][T17412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3044'. [ 440.625464][T17382] block nbd2: Dead connection, failed to find a fallback [ 440.659082][T17382] block nbd2: shutting down sockets [ 440.711586][T17382] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.754045][T17382] Buffer I/O error on dev nbd2, logical block 0, async page read [ 440.806469][T17382] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.830501][T17382] Buffer I/O error on dev nbd2, logical block 1, async page read [ 440.860646][T17382] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.898882][T17382] Buffer I/O error on dev nbd2, logical block 2, async page read [ 440.929699][T17412] veth1_macvtap (unregistering): left allmulticast mode [ 440.953265][T17382] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 440.980212][T17382] Buffer I/O error on dev nbd2, logical block 3, async page read [ 441.009885][T17382] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 441.030969][T17382] Buffer I/O error on dev nbd2, logical block 0, async page read [ 441.040338][T17382] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 441.049888][T17382] Buffer I/O error on dev nbd2, logical block 1, async page read [ 441.058294][T17382] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 441.074059][T17382] Buffer I/O error on dev nbd2, logical block 2, async page read [ 441.085560][T17426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 441.092916][T17426] IPv6: NLM_F_CREATE should be set when creating new route [ 441.093677][T17382] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 441.100216][T17426] IPv6: NLM_F_CREATE should be set when creating new route [ 441.115423][T17382] Buffer I/O error on dev nbd2, logical block 3, async page read [ 441.126219][T17382] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 441.137520][T17382] Buffer I/O error on dev nbd2, logical block 0, async page read [ 441.145708][T17382] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 441.204740][T17382] Buffer I/O error on dev nbd2, logical block 1, async page read [ 441.230895][T17421] bond1 (unregistering): Released all slaves [ 441.261509][T17382] ldm_validate_partition_table(): Disk read failed. [ 441.276759][T17382] Dev nbd2: unable to read RDB block 0 [ 441.290121][T17382] nbd2: unable to read partition table [ 441.315546][T17382] ldm_validate_partition_table(): Disk read failed. [ 441.325353][T17382] Dev nbd2: unable to read RDB block 0 [ 441.335531][T17382] nbd2: unable to read partition table [ 441.475209][ T5637] Bluetooth: hci0: command tx timeout [ 441.586620][T17437] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3049'. [ 441.927096][T17452] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.984846][T17452] bridge_slave_0 (unregistering): left allmulticast mode [ 442.002927][T17452] bridge_slave_0 (unregistering): left promiscuous mode [ 442.022926][T17452] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.138296][T17448] netlink: 'syz.3.3051': attribute type 3 has an invalid length. [ 442.335786][T17468] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3058'. [ 442.536537][T17475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3060'. [ 443.044644][T17493] pim6reg527: entered allmulticast mode [ 443.189207][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3069'. [ 443.207405][T17506] netlink: 'syz.0.3068': attribute type 10 has an invalid length. [ 443.370136][T17308] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.377936][T17308] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.387071][T17308] bridge_slave_0: entered allmulticast mode [ 443.405290][T17308] bridge_slave_0: entered promiscuous mode [ 443.424470][T17308] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.431878][T17308] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.453627][T17308] bridge_slave_1: entered allmulticast mode [ 443.465445][T17308] bridge_slave_1: entered promiscuous mode [ 443.529226][T17308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.552258][T17308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.554508][ T5637] Bluetooth: hci0: command tx timeout [ 443.774319][T17308] team0: Port device team_slave_0 added [ 443.807191][T17308] team0: Port device team_slave_1 added [ 443.825434][T17525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3074'. [ 443.905938][T17308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.924803][T17308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.017157][T17308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.051231][T17308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.095843][T17308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.138453][T17308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.185283][T17534] IPVS: Unknown mcast interface: nicvf0 [ 444.346353][T17308] hsr_slave_0: entered promiscuous mode [ 444.379271][T17308] hsr_slave_1: entered promiscuous mode [ 444.408216][T17308] debugfs: 'hsr0' already exists in 'hsr' [ 444.424205][T17308] Cannot create hsr debugfs directory [ 444.517901][T17548] Bluetooth: MGMT ver 1.23 [ 444.841063][T17557] netlink: 'syz.4.3082': attribute type 3 has an invalid length. [ 444.882090][T17557] netlink: 'syz.4.3082': attribute type 1 has an invalid length. [ 444.918024][T17557] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3082'. [ 444.958610][T17557] NCSI netlink: No device for ifindex 813332851 [ 445.196436][T17308] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.222601][T17308] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.427094][T17308] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.463126][T17308] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.658147][T17308] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.675199][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3079'. [ 445.716173][T17581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3079'. [ 445.725573][T17308] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.818552][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3079'. [ 445.850616][T17581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3079'. [ 445.929359][T17308] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.964734][T17308] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.611084][ T6716] IPVS: starting estimator thread 0... [ 446.733917][T17623] IPVS: using max 38 ests per chain, 91200 per kthread [ 446.947571][T17635] __nla_validate_parse: 2 callbacks suppressed [ 446.947592][T17635] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3100'. [ 447.009011][T17308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 447.041345][T17308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 447.051332][T17308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 447.088576][T17308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 447.123201][T17308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 447.179542][T17308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 447.215610][T17308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 447.279096][T17308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 447.331573][T17647] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 447.404029][T17655] netlink: 'syz.0.3105': attribute type 1 has an invalid length. [ 447.429021][T17647] syzkaller0: entered promiscuous mode [ 447.453185][T17647] syzkaller0: entered allmulticast mode [ 447.557876][T17655] 8021q: adding VLAN 0 to HW filter on device bond14 [ 447.787819][T17666] pim6reg: entered allmulticast mode [ 447.804328][T17668] pim6reg: left allmulticast mode [ 447.999886][T17676] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3110'. [ 448.064559][T17308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.071963][T17676] netlink: 1024 bytes leftover after parsing attributes in process `syz.4.3110'. [ 448.138072][T17308] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.201690][ T6267] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.209002][ T6267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.317932][ T6267] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.325297][ T6267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.681404][T17708] netlink: 'syz.0.3119': attribute type 3 has an invalid length. [ 451.493661][T17735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3124'. [ 451.631663][T17741] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3126'. [ 451.828959][T17754] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3127'. [ 452.330958][T17308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.374120][T17778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3133'. [ 452.394333][T17778] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3133'. [ 452.410804][T17780] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 452.440699][T17780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3134'. [ 452.453711][T17780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3134'. [ 452.480837][T17780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3134'. [ 452.535420][T17780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3134'. [ 452.563063][T11388] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.572530][T17780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3134'. [ 452.596997][T17780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3134'. [ 452.597913][T11388] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.682284][T11388] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.709919][T11388] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.726842][T17308] veth0_vlan: entered promiscuous mode [ 452.746551][T17790] veth0: entered promiscuous mode [ 452.780636][T17308] veth1_vlan: entered promiscuous mode [ 452.811641][T17788] veth0: left promiscuous mode [ 452.952113][T17308] veth0_macvtap: entered promiscuous mode [ 452.983401][T17801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3140'. [ 453.002870][T17801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3140'. [ 453.017463][T17308] veth1_macvtap: entered promiscuous mode [ 453.067231][T17308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.102356][T17308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.134481][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.145786][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.219182][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.252530][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.471555][T17806] netlink: 'syz.0.3142': attribute type 4 has an invalid length. [ 453.559016][T11387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.604250][T11387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.712506][ T758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.772845][ T758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.135796][T17830] netlink: 'syz.2.3021': attribute type 4 has an invalid length. [ 454.575222][ T5645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 454.594676][ T5645] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 454.604394][ T5645] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 454.617343][ T5645] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 454.625604][ T5645] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 454.872093][T17858] openvswitch: netlink: IP tunnel dst address not specified [ 456.061908][T17846] lo speed is unknown, defaulting to 1000 [ 456.673661][ T5637] Bluetooth: hci4: command tx timeout [ 457.614233][T17944] __nla_validate_parse: 7 callbacks suppressed [ 457.614255][T17944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3186'. [ 457.635841][T17944] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 457.656226][T17946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3186'. [ 457.666283][T17946] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 457.965403][T17961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3190'. [ 458.387794][T17981] geneve4: entered promiscuous mode [ 458.393856][T17981] geneve4: entered allmulticast mode [ 458.427145][T17924] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 458.462316][T17924] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 458.528725][T17924] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 458.546196][T17924] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 458.756511][ T5637] Bluetooth: hci4: command tx timeout [ 458.815920][T17846] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.831326][T17846] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.839718][T17846] bridge_slave_0: entered allmulticast mode [ 458.850561][T17846] bridge_slave_0: entered promiscuous mode [ 458.861452][T17846] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.869162][T17846] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.879523][T17846] bridge_slave_1: entered allmulticast mode [ 458.888096][T17846] bridge_slave_1: entered promiscuous mode [ 459.085374][T17846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.160744][T17846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.228691][T18006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3200'. [ 459.403936][T18006] bond15: entered promiscuous mode [ 459.423897][T18006] 8021q: adding VLAN 0 to HW filter on device bond15 [ 459.473572][T17846] team0: Port device team_slave_0 added [ 459.523167][T17846] team0: Port device team_slave_1 added [ 459.568402][T18025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3203'. [ 459.600467][T18000] 8021q: adding VLAN 0 to HW filter on device bond15 [ 459.608206][T18000] bond15: (slave sit3): The slave device specified does not support setting the MAC address [ 459.624428][T18000] bond15: (slave sit3): Error -95 calling set_mac_address [ 459.762588][T17846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.798020][T17846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.827950][T17846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.861055][T17846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.880087][T17846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.928799][T18030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3207'. [ 459.967382][T17846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.208224][T17846] hsr_slave_0: entered promiscuous mode [ 460.225619][T17846] hsr_slave_1: entered promiscuous mode [ 460.241706][T17846] debugfs: 'hsr0' already exists in 'hsr' [ 460.272881][T17846] Cannot create hsr debugfs directory [ 460.739663][T18056] syzkaller0: entered promiscuous mode [ 460.751296][T18056] syzkaller0: entered allmulticast mode [ 460.834749][ T5637] Bluetooth: hci4: command tx timeout [ 461.178414][T18067] IPv6: sit3: Disabled Multicast RS [ 461.308444][T18071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3219'. [ 461.376509][T18077] netlink: 'syz.0.3221': attribute type 3 has an invalid length. [ 461.437291][T17846] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.476244][T18079] xt_cgroup: path and classid specified [ 461.752407][T17846] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.071542][T17846] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.189038][T18105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3228'. [ 462.243450][T18108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3228'. [ 462.377193][T17846] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.447131][T18105] bond0: entered promiscuous mode [ 462.452536][T18105] bond_slave_0: entered promiscuous mode [ 462.461833][T18105] bond_slave_1: entered promiscuous mode [ 462.478201][T18105] gretap0: entered promiscuous mode [ 462.498727][T18105] debugfs: 'hsr1' already exists in 'hsr' [ 462.510883][T18105] Cannot create hsr debugfs directory [ 462.554187][T18105] hsr1: entered promiscuous mode [ 462.634009][T18125] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3235'. [ 462.914488][ T5637] Bluetooth: hci4: command tx timeout [ 463.414436][T17846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 463.445274][T17846] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 463.545990][T17846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 463.593298][T17846] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 463.626245][T17846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 463.779162][T17846] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 463.890697][T17846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 463.944907][T17846] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 464.089451][T18193] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3248'. [ 464.201586][T18186] syzkaller0: entered promiscuous mode [ 464.209234][T18186] syzkaller0: entered allmulticast mode [ 464.219924][T18206] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3251'. [ 468.998767][T18239] x_tables: duplicate underflow at hook 1 [ 469.038465][T17846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.082218][T17846] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.116358][T17921] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.123654][T17921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.170159][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.177666][ T6265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.316739][T18256] netlink: 'syz.3.3267': attribute type 3 has an invalid length. [ 469.336607][T18256] netlink: 'syz.3.3267': attribute type 3 has an invalid length. [ 469.345483][T18256] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3267'. [ 469.366602][T18250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3264'. [ 469.381946][T18258] netlink: 'syz.3.3267': attribute type 21 has an invalid length. [ 469.396954][T18249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3264'. [ 469.411991][T18256] netlink: 'syz.3.3267': attribute type 21 has an invalid length. [ 469.698544][T18268] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.3268'. [ 470.160890][T18283] xt_HMARK: spi-set and port-set can't be combined [ 470.250956][T18289] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3275'. [ 470.576320][T18296] tipc: Can't bind to reserved service type 1 [ 470.645699][T18303] tipc: Failed to remove unknown binding: 66,0,0/0:1689508629/1689508630 [ 470.658182][T18303] tipc: Failed to remove unknown binding: 66,0,0/0:1689508629/1689508630 [ 470.965162][T18317] bond13: Unable to set peer notification delay as MII monitoring is disabled [ 471.020757][T18317] bond13 (unregistering): Released all slaves [ 471.179300][T17846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.538412][T18335] syzkaller0: entered promiscuous mode [ 471.551521][T18335] syzkaller0: entered allmulticast mode [ 471.776305][T18357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3289'. [ 471.880951][T18360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3290'. [ 472.051264][T18360] bond1: option xmit_hash_policy: invalid value (64) [ 472.314542][T18360] bond1 (unregistering): Released all slaves [ 472.832397][T18381] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3295'. [ 473.126816][T18390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3298'. [ 473.139007][T18390] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 473.400225][T18399] netlink: 'syz.3.3301': attribute type 1 has an invalid length. [ 473.595808][T18404] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3301'. [ 476.774370][T18399] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 476.985831][T17924] bond0: (slave bond_slave_0): interface is now down [ 477.041117][T17924] bond0: (slave bond_slave_1): interface is now down [ 477.063745][T18412] netlink: 'syz.1.3304': attribute type 1 has an invalid length. [ 477.071198][T17846] veth0_vlan: entered promiscuous mode [ 477.099966][T18412] netlink: 'syz.1.3304': attribute type 3 has an invalid length. [ 477.143070][T18412] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3304'. [ 477.189561][T18412] NCSI netlink: No device for ifindex 813332851 [ 477.207214][T17924] bond0: now running without any active interface! [ 477.220452][T18415] netlink: 'syz.2.3305': attribute type 9 has an invalid length. [ 477.241526][T17846] veth1_vlan: entered promiscuous mode [ 477.456765][T17846] veth0_macvtap: entered promiscuous mode [ 477.572232][T17846] veth1_macvtap: entered promiscuous mode [ 477.671144][T17846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.728710][T17846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.785558][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.833146][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.882275][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.912035][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.945522][T18444] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 478.554872][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.601797][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.706738][T18476] netlink: 4419 bytes leftover after parsing attributes in process `syz.2.3322'. [ 478.728375][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.767528][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.965413][T18485] xt_CT: You must specify a L4 protocol and not use inversions on it [ 479.813675][T18527] netlink: 'syz.2.3334': attribute type 24 has an invalid length. [ 479.866314][T18525] netlink: 'syz.2.3334': attribute type 24 has an invalid length. [ 479.882901][ T5645] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 479.901482][ T5645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 479.913604][ T5645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 479.928909][ T5645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 479.936827][ T5645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 480.786664][T18562] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3345'. [ 481.175911][T18583] xt_ecn: cannot match TCP bits for non-tcp packets [ 481.294067][T18529] lo speed is unknown, defaulting to 1000 [ 482.033956][ T5637] Bluetooth: hci2: command tx timeout [ 482.255628][T18625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3367'. [ 482.583304][T18633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3369'. [ 483.318393][T18662] macvtap1: entered promiscuous mode [ 483.325489][T18662] macvtap1: entered allmulticast mode [ 483.331040][T18662] veth1_vlan: entered allmulticast mode [ 483.517838][T18684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3384'. [ 483.528636][T18684] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3384'. [ 483.577277][T18691] netlink: 'syz.4.3382': attribute type 4 has an invalid length. [ 483.586122][T18691] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3382'. [ 483.600036][T18684] gretap1: entered promiscuous mode [ 483.623871][T18684] gretap1: entered allmulticast mode [ 483.718435][T18691] .`: renamed from bond0 (while UP) [ 483.791964][T18698] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3385'. [ 483.826119][T18698] 8021q: VLANs not supported on ip6_vti0 [ 483.870350][T18698] netlink: 'syz.0.3385': attribute type 1 has an invalid length. [ 483.901563][T18700] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3387'. [ 483.926471][T18698] netlink: 'syz.0.3385': attribute type 2 has an invalid length. [ 484.114047][ T5637] Bluetooth: hci2: command tx timeout [ 484.609547][T18529] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.626234][T18529] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.649592][T18529] bridge_slave_0: entered allmulticast mode [ 484.679052][T18529] bridge_slave_0: entered promiscuous mode [ 484.694320][T18736] tunl0: entered promiscuous mode [ 484.714877][T18529] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.746973][T18529] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.770186][T18529] bridge_slave_1: entered allmulticast mode [ 484.787608][T18529] bridge_slave_1: entered promiscuous mode [ 484.902244][T18752] netlink: 'syz.2.3398': attribute type 1 has an invalid length. [ 484.999101][T18529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.066654][T18761] netlink: 'syz.2.3398': attribute type 49 has an invalid length. [ 485.093951][T18752] bond2: entered promiscuous mode [ 485.108487][T18752] 8021q: adding VLAN 0 to HW filter on device bond2 [ 485.171415][T18755] 8021q: adding VLAN 0 to HW filter on device bond2 [ 485.197283][T18766] netlink: 'syz.0.3404': attribute type 2 has an invalid length. [ 485.220046][T18755] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 485.255053][T18755] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 485.278714][T18755] bond2: (slave vti0): making interface the new active one [ 485.286699][T18755] vti0: entered promiscuous mode [ 485.314758][T18755] bond2: (slave vti0): Enslaving as an active interface with an up link [ 485.340515][T18529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.374315][T18758] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3402'. [ 485.389444][T18758] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3402'. [ 485.409524][T18773] xt_l2tp: invalid flags combination: 8 [ 485.505098][T18776] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3409'. [ 485.521833][T18761] ip6gretap0: entered promiscuous mode [ 485.532935][T18761] ip6gretap0: entered allmulticast mode [ 485.616927][T18529] team0: Port device team_slave_0 added [ 485.628675][T18529] team0: Port device team_slave_1 added [ 485.888468][T18529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.906331][T18529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.948969][T18529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.002028][T18529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.019674][T18529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.131065][T18529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.194490][ T5637] Bluetooth: hci2: command tx timeout [ 486.375306][T18529] hsr_slave_0: entered promiscuous mode [ 486.382332][T18529] hsr_slave_1: entered promiscuous mode [ 486.391696][T18529] debugfs: 'hsr0' already exists in 'hsr' [ 486.400229][T18529] Cannot create hsr debugfs directory [ 487.723594][T18864] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3427'. [ 487.901851][T18866] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 487.906134][ T30] audit: type=1800 audit(1777673277.089:3): pid=18866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3428" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 487.932113][T18866] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 487.932170][T18866] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 487.985719][T18872] sctp: [Deprecated]: syz.4.3429 (pid 18872) Use of int in maxseg socket option. [ 487.985719][T18872] Use struct sctp_assoc_value instead [ 488.089292][T18866] syz.0.3428 (18866) used greatest stack depth: 17216 bytes left [ 488.099850][T18877] Unsupported ieee802154 address type: 0 [ 488.122222][T18529] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 488.143160][T18877] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3431'. [ 488.153062][T18878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3431'. [ 488.166658][T18880] netlink: 'syz.1.3430': attribute type 21 has an invalid length. [ 488.190076][T18529] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 488.226544][T18872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3429'. [ 488.239592][T18529] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 488.249940][T18884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3432'. [ 488.275709][ T5637] Bluetooth: hci2: command tx timeout [ 488.303072][T18529] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 488.335040][T18884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3432'. [ 488.408688][T18529] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 488.460950][T18529] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 488.547487][T18529] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 488.596936][T18529] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 488.718621][T18886] syzkaller0: entered promiscuous mode [ 488.724442][T18886] syzkaller0: entered allmulticast mode [ 493.195392][T18921] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3438'. [ 493.207702][T18921] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3438'. [ 493.217025][T18921] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3438'. [ 493.297000][T18937] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.514875][T18953] xt_l2tp: invalid flags combination: 0 [ 493.580172][T18529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.649500][T18529] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.691853][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.699316][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.744021][T18960] netlink: 'syz.4.3446': attribute type 1 has an invalid length. [ 493.778204][T10684] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.785480][T10684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.816746][T18959] ±ÿª¨úrBº“: renamed from lo (while UP) [ 493.878503][T18963] team0: No ports can be present during mode change [ 493.901505][T18963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.921926][T18964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.358779][T18990] netlink: 'syz.1.3455': attribute type 1 has an invalid length. [ 494.443406][T18990] bond1: (slave bridge1): making interface the new active one [ 494.477840][T18990] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 494.949721][T19016] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3460'. [ 494.977964][T19017] veth1_macvtap: left promiscuous mode [ 495.002251][T19015] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3460'. [ 495.487130][T18529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.620599][T19046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3467'. [ 495.730858][T18529] veth0_vlan: entered promiscuous mode [ 495.784392][T18529] veth1_vlan: entered promiscuous mode [ 495.904896][T18529] veth0_macvtap: entered promiscuous mode [ 495.929140][T18529] veth1_macvtap: entered promiscuous mode [ 495.950055][T19052] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3468'. [ 495.999798][T18529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.040025][T18529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.111291][T18680] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.147957][T18680] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.210637][T18680] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.226735][T18680] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.366551][T19065] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3472'. [ 496.611037][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.645703][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.138469][ T6265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.202520][ T6265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.384471][T19105] bond5 (unregistering): Released all slaves [ 497.774860][T19120] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 497.829320][T19120] syzkaller1: linktype set to 823 [ 497.920783][T19127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3484'. [ 498.347291][T19139] netlink: 'syz.4.3486': attribute type 1 has an invalid length. [ 498.465997][ T5645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 498.481023][ T5645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 498.498126][ T5645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 498.510641][ T5645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 498.522199][ T5645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 498.569628][T19145] syzkaller0: entered promiscuous mode [ 498.660721][T19145] 0: reclassify loop, rule prio 0, protocol 800 [ 499.066720][T19160] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3490'. [ 499.287395][T19171] netlink: 4240 bytes leftover after parsing attributes in process `syz.1.3494'. [ 500.277115][T19215] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3507'. [ 500.325899][T19143] lo speed is unknown, defaulting to 1000 [ 500.439501][T19224] netlink: 'syz.1.3509': attribute type 24 has an invalid length. [ 500.478116][T19223] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3510'. [ 500.593327][ T5637] Bluetooth: hci3: command tx timeout [ 501.592095][T19250] lo speed is unknown, defaulting to 1000 [ 501.609967][T19262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.640811][ T1313] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 501.672534][T19263] 8021q: VLANs not supported on lo [ 501.949006][T19276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3521'. [ 501.980617][T19276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3521'. [ 502.166786][T19276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3521'. [ 502.180614][T19276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3521'. [ 502.483342][T19290] netlink: 'syz.1.3524': attribute type 1 has an invalid length. [ 502.491411][T19290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3524'. [ 502.510082][T19292] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.3525'. [ 502.673736][ T5637] Bluetooth: hci3: command tx timeout [ 502.726351][T19301] netlink: 'syz.3.3527': attribute type 1 has an invalid length. [ 502.792430][T19269] lo speed is unknown, defaulting to 1000 [ 504.590233][T19143] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.600672][T19143] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.609104][T19143] bridge_slave_0: entered allmulticast mode [ 504.645948][T19143] bridge_slave_0: entered promiscuous mode [ 504.725902][T19143] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.745443][T19143] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.764448][ T5637] Bluetooth: hci3: command tx timeout [ 504.774006][T19143] bridge_slave_1: entered allmulticast mode [ 504.790787][T19143] bridge_slave_1: entered promiscuous mode [ 504.881663][T19348] __nla_validate_parse: 34 callbacks suppressed [ 504.881684][T19348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3534'. [ 504.941283][T19349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3534'. [ 505.116048][T19348] macvlan3: entered allmulticast mode [ 505.122475][T19348] dummy0: entered allmulticast mode [ 505.136399][T19348] dummy0: entered promiscuous mode [ 505.160640][T19349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3534'. [ 505.202517][T19143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.295215][T19143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.538118][T19143] team0: Port device team_slave_0 added [ 505.618566][T19143] team0: Port device team_slave_1 added [ 505.818299][T19143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.844153][T19143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.845867][T19376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3542'. [ 505.891252][T19376] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3542'. [ 505.902561][T19376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3542'. [ 505.927570][T19143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.977276][T19143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.985179][T19143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.017405][T19143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.257887][T19143] hsr_slave_0: entered promiscuous mode [ 506.281011][T19143] hsr_slave_1: entered promiscuous mode [ 506.305927][T19143] debugfs: 'hsr0' already exists in 'hsr' [ 506.312579][T19143] Cannot create hsr debugfs directory [ 506.385913][T19386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3544'. [ 506.800538][T19398] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3547'. [ 506.809794][T19398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3547'. [ 506.828290][T19398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3547'. [ 506.844135][ T5637] Bluetooth: hci3: command tx timeout [ 507.051418][T16392] IPVS: starting estimator thread 0... [ 507.153727][T19411] IPVS: using max 24 ests per chain, 57600 per kthread [ 507.230445][T19143] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.244102][T19143] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.259093][T19143] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 507.421173][T19408] kthread_run failed with err -4 [ 507.457353][T19143] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.469254][T19416] netlink: 'syz.4.3552': attribute type 1 has an invalid length. [ 507.479769][T19143] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.496247][T19143] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 507.613034][T19416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.632348][T19143] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.666494][T19143] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.712546][T19143] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 507.810350][T19435] netlink: 'syz.4.3557': attribute type 2 has an invalid length. [ 507.961930][T19143] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.012440][T19143] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.055546][T19143] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 508.126420][T19450] netlink: 'syz.4.3560': attribute type 1 has an invalid length. [ 508.266177][T19456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.292533][T19458] macvlan0: entered promiscuous mode [ 508.934425][T19143] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 508.996582][T19143] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 509.033539][T19143] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 509.103266][T19143] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 509.150825][T19143] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 509.181121][T19492] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 509.204045][T19143] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 509.222400][T19143] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 509.266780][T19143] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 509.301721][T19492] xt_hashlimit: size too large, truncated to 1048576 [ 509.674154][T19143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.749269][T19143] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.788962][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.796259][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.817709][T19519] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 509.837605][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.844836][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.249862][T19569] __nla_validate_parse: 7 callbacks suppressed [ 511.249882][T19569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3587'. [ 511.555990][ T6721] IPVS: starting estimator thread 0... [ 511.663352][T19584] IPVS: using max 24 ests per chain, 57600 per kthread [ 511.849267][T19598] netlink: 'syz.1.3593': attribute type 18 has an invalid length. [ 511.904373][T19603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3593'. [ 511.943954][T19604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3593'. [ 512.053217][T19143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.600410][T19143] veth0_vlan: entered promiscuous mode [ 512.654672][T19143] veth1_vlan: entered promiscuous mode [ 512.696835][T19143] veth0_macvtap: entered promiscuous mode [ 512.726666][T19636] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3601'. [ 512.746602][T19143] veth1_macvtap: entered promiscuous mode [ 512.887241][T19143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.965525][T19143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.076447][T10683] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.092584][T10683] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.103243][T10683] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.113920][T10683] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.199280][T19647] netlink: 'syz.2.3604': attribute type 5 has an invalid length. [ 513.307133][T19648] syzkaller0: entered promiscuous mode [ 513.328146][T19648] syzkaller0: entered allmulticast mode [ 513.510168][T19653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.526587][T19653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.549781][T19653] bond1: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 513.655153][T19657] bridge3: entered promiscuous mode [ 513.660549][T19657] bridge3: entered allmulticast mode [ 515.557757][T19630] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 515.705502][T19690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3610'. [ 515.752151][T17921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.773619][T19691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3610'. [ 515.794394][T17921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.954993][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.994567][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.064262][T19696] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.127052][T19704] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 516.158649][T19704] IPVS: set_ctl: invalid protocol: 20 60.0.7.1:0 [ 516.471039][T19716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3482'. [ 516.696379][T19732] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3618'. [ 516.726277][T19724] xt_hashlimit: size too large, truncated to 1048576 [ 516.768096][T19732] netlink: 'syz.4.3618': attribute type 2 has an invalid length. [ 516.882297][T19732] xt_ecn: cannot match TCP bits for non-tcp packets [ 517.558060][T19758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3626'. [ 517.592821][T19758] openvswitch: netlink: Flow actions attr not present in new flow. [ 517.661716][T19755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.669114][T19755] IPv6: NLM_F_CREATE should be set when creating new route [ 517.704517][T19755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.980044][T19740] sctp: [Deprecated]: syz.2.3621 (pid 19740) Use of struct sctp_assoc_value in delayed_ack socket option. [ 517.980044][T19740] Use struct sctp_sack_info instead [ 518.298265][T19778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3631'. [ 518.335250][T19780] tap0: tun_chr_ioctl cmd 1074025678 [ 518.373541][T19780] tap0: group set to 0 [ 518.461060][ T5637] block nbd3: Receive control failed (result -107) [ 518.508868][T10684] [ 518.511355][T10684] ====================================================== [ 518.518531][T10684] WARNING: possible circular locking dependency detected [ 518.525665][T10684] syzkaller #0 Not tainted [ 518.530180][T10684] ------------------------------------------------------ [ 518.537339][T10684] kworker/u8:12/10684 is trying to acquire lock: [ 518.543716][T10684] ffffffff8ea854e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 518.553830][T10684] [ 518.553830][T10684] but task is already holding lock: [ 518.561241][T10684] ffff88805a2daae0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 518.571149][T10684] [ 518.571149][T10684] which lock already depends on the new lock. [ 518.571149][T10684] [ 518.581587][T10684] [ 518.581587][T10684] the existing dependency chain (in reverse order) is: [ 518.590637][T10684] [ 518.590637][T10684] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 518.598611][T10684] lock_sock_nested+0x41/0x100 [ 518.604050][T10684] mptcp_sendmsg_fastopen+0x128/0x580 [ 518.610126][T10684] mptcp_sendmsg+0x1b0c/0x1dc0 [ 518.615474][T10684] ____sys_sendmsg+0x5c7/0x9f0 [ 518.620883][T10684] ___sys_sendmsg+0x2a5/0x360 [ 518.626150][T10684] __x64_sys_sendmsg+0x1bd/0x2a0 [ 518.631656][T10684] do_syscall_64+0x15f/0xf80 [ 518.636868][T10684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.643370][T10684] [ 518.643370][T10684] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 518.651220][T10684] lock_sock_nested+0x41/0x100 [ 518.656524][T10684] inet_shutdown+0x6a/0x390 [ 518.661668][T10684] nbd_mark_nsock_dead+0x2e9/0x560 [ 518.667412][T10684] recv_work+0x1c2e/0x1d40 [ 518.672372][T10684] process_scheduled_works+0xb5d/0x1860 [ 518.678580][T10684] worker_thread+0xa53/0xfc0 [ 518.683795][T10684] kthread+0x388/0x470 [ 518.688405][T10684] ret_from_fork+0x514/0xb70 [ 518.693566][T10684] ret_from_fork_asm+0x1a/0x30 [ 518.698891][T10684] [ 518.698891][T10684] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 518.706557][T10684] __mutex_lock+0x1a3/0x1550 [ 518.711770][T10684] nbd_queue_rq+0x37b/0x1100 [ 518.716902][T10684] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 518.723097][T10684] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 518.730030][T10684] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 518.736557][T10684] blk_mq_run_hw_queue+0x348/0x4f0 [ 518.742209][T10684] blk_mq_dispatch_list+0xd16/0xe10 [ 518.747956][T10684] blk_mq_flush_plug_list+0x48d/0x570 [ 518.753873][T10684] __blk_flush_plug+0x3ed/0x4d0 [ 518.759327][T10684] __submit_bio+0x28d/0x580 [ 518.764584][T10684] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 518.770768][T10684] block_read_full_folio+0x599/0x830 [ 518.776622][T10684] filemap_read_folio+0x137/0x3b0 [ 518.782223][T10684] do_read_cache_folio+0x358/0x590 [ 518.787881][T10684] read_part_sector+0xb6/0x2b0 [ 518.793191][T10684] adfspart_check_ICS+0xb1/0x960 [ 518.798710][T10684] bdev_disk_changed+0x817/0x1770 [ 518.804279][T10684] blkdev_get_whole+0x380/0x510 [ 518.809765][T10684] bdev_open+0x31e/0xd30 [ 518.814554][T10684] blkdev_open+0x470/0x610 [ 518.819514][T10684] do_dentry_open+0x785/0x14e0 [ 518.824844][T10684] vfs_open+0x3b/0x340 [ 518.829492][T10684] path_openat+0x2e08/0x3860 [ 518.834633][T10684] do_file_open+0x23e/0x4a0 [ 518.839679][T10684] do_sys_openat2+0x113/0x200 [ 518.844894][T10684] __x64_sys_openat+0x138/0x170 [ 518.850289][T10684] do_syscall_64+0x15f/0xf80 [ 518.855427][T10684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.861863][T10684] [ 518.861863][T10684] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 518.869105][T10684] __mutex_lock+0x1a3/0x1550 [ 518.874334][T10684] nbd_queue_rq+0xc6/0x1100 [ 518.879380][T10684] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 518.885479][T10684] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 518.892372][T10684] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 518.898903][T10684] blk_mq_run_hw_queue+0x348/0x4f0 [ 518.904565][T10684] blk_mq_dispatch_list+0xd16/0xe10 [ 518.910312][T10684] blk_mq_flush_plug_list+0x48d/0x570 [ 518.916236][T10684] __blk_flush_plug+0x3ed/0x4d0 [ 518.921639][T10684] __submit_bio+0x28d/0x580 [ 518.926692][T10684] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 518.932872][T10684] block_read_full_folio+0x599/0x830 [ 518.938706][T10684] filemap_read_folio+0x137/0x3b0 [ 518.944274][T10684] do_read_cache_folio+0x358/0x590 [ 518.949928][T10684] read_part_sector+0xb6/0x2b0 [ 518.955233][T10684] adfspart_check_ICS+0xb1/0x960 [ 518.960809][T10684] bdev_disk_changed+0x817/0x1770 [ 518.966379][T10684] blkdev_get_whole+0x380/0x510 [ 518.971784][T10684] bdev_open+0x31e/0xd30 [ 518.976571][T10684] blkdev_open+0x470/0x610 [ 518.981531][T10684] do_dentry_open+0x785/0x14e0 [ 518.986835][T10684] vfs_open+0x3b/0x340 [ 518.991444][T10684] path_openat+0x2e08/0x3860 [ 518.996923][T10684] do_file_open+0x23e/0x4a0 [ 519.001968][T10684] do_sys_openat2+0x113/0x200 [ 519.007186][T10684] __x64_sys_openat+0x138/0x170 [ 519.012582][T10684] do_syscall_64+0x15f/0xf80 [ 519.017733][T10684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.024166][T10684] [ 519.024166][T10684] -> #3 (set->srcu){.+.+}-{0:0}: [ 519.031314][T10684] __synchronize_srcu+0xca/0x300 [ 519.036828][T10684] elevator_switch+0x1e8/0x7a0 [ 519.042138][T10684] elevator_change+0x2cc/0x450 [ 519.047444][T10684] elevator_set_default+0x36c/0x430 [ 519.053219][T10684] blk_register_queue+0x3e9/0x4e0 [ 519.058804][T10684] __add_disk+0x677/0xd50 [ 519.063687][T10684] add_disk_fwnode+0xfb/0x480 [ 519.068913][T10684] nbd_dev_add+0x72c/0xb50 [ 519.074096][T10684] nbd_init+0x168/0x1f0 [ 519.078910][T10684] do_one_initcall+0x250/0x870 [ 519.084224][T10684] do_initcall_level+0x104/0x190 [ 519.089823][T10684] do_initcalls+0x59/0xa0 [ 519.094721][T10684] kernel_init_freeable+0x2a6/0x3e0 [ 519.100567][T10684] kernel_init+0x1d/0x1d0 [ 519.105454][T10684] ret_from_fork+0x514/0xb70 [ 519.110594][T10684] ret_from_fork_asm+0x1a/0x30 [ 519.116267][T10684] [ 519.116267][T10684] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 519.124122][T10684] __mutex_lock+0x1a3/0x1550 [ 519.129291][T10684] elevator_change+0x1b3/0x450 [ 519.134627][T10684] elevator_set_none+0xb5/0x140 [ 519.140025][T10684] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 519.146376][T10684] nbd_start_device+0x17f/0xb10 [ 519.151796][T10684] nbd_genl_connect+0x165b/0x1cf0 [ 519.157541][T10684] genl_family_rcv_msg_doit+0x22a/0x330 [ 519.163946][T10684] genl_rcv_msg+0x61c/0x7a0 [ 519.169018][T10684] netlink_rcv_skb+0x232/0x4b0 [ 519.174360][T10684] genl_rcv+0x28/0x40 [ 519.178897][T10684] netlink_unicast+0x75c/0x8e0 [ 519.184214][T10684] netlink_sendmsg+0x813/0xb40 [ 519.189522][T10684] ____sys_sendmsg+0x972/0x9f0 [ 519.194867][T10684] ___sys_sendmsg+0x2a5/0x360 [ 519.200089][T10684] __x64_sys_sendmsg+0x1bd/0x2a0 [ 519.205573][T10684] do_syscall_64+0x15f/0xf80 [ 519.210713][T10684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.217160][T10684] [ 519.217160][T10684] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 519.226066][T10684] blk_alloc_queue+0x546/0x680 [ 519.231394][T10684] __blk_mq_alloc_disk+0x197/0x390 [ 519.237174][T10684] nbd_dev_add+0x499/0xb50 [ 519.242160][T10684] nbd_init+0x168/0x1f0 [ 519.246960][T10684] do_one_initcall+0x250/0x870 [ 519.252279][T10684] do_initcall_level+0x104/0x190 [ 519.257770][T10684] do_initcalls+0x59/0xa0 [ 519.262649][T10684] kernel_init_freeable+0x2a6/0x3e0 [ 519.268404][T10684] kernel_init+0x1d/0x1d0 [ 519.273298][T10684] ret_from_fork+0x514/0xb70 [ 519.278724][T10684] ret_from_fork_asm+0x1a/0x30 [ 519.284052][T10684] [ 519.284052][T10684] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 519.291300][T10684] __lock_acquire+0x15a5/0x2cf0 [ 519.296728][T10684] lock_acquire+0x106/0x350 [ 519.301777][T10684] fs_reclaim_acquire+0x71/0x100 [ 519.307267][T10684] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 519.313636][T10684] __alloc_skb+0x1d0/0x7d0 [ 519.318602][T10684] tcp_stream_alloc_skb+0x3f/0x580 [ 519.324352][T10684] tcp_connect+0x15a9/0x53a0 [ 519.329551][T10684] tcp_v6_connect+0x128d/0x1b10 [ 519.335065][T10684] __inet_stream_connect+0x25a/0xdd0 [ 519.340998][T10684] inet_stream_connect+0x66/0xa0 [ 519.346495][T10684] kernel_connect+0x141/0x1c0 [ 519.351763][T10684] rds_tcp_conn_path_connect+0x6f6/0x930 [ 519.358057][T10684] rds_connect_worker+0x1d8/0x290 [ 519.363692][T10684] process_scheduled_works+0xb5d/0x1860 [ 519.369787][T10684] worker_thread+0xa53/0xfc0 [ 519.374923][T10684] kthread+0x388/0x470 [ 519.379534][T10684] ret_from_fork+0x514/0xb70 [ 519.384668][T10684] ret_from_fork_asm+0x1a/0x30 [ 519.389974][T10684] [ 519.389974][T10684] other info that might help us debug this: [ 519.389974][T10684] [ 519.400210][T10684] Chain exists of: [ 519.400210][T10684] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 519.400210][T10684] [ 519.413202][T10684] Possible unsafe locking scenario: [ 519.413202][T10684] [ 519.420679][T10684] CPU0 CPU1 [ 519.426140][T10684] ---- ---- [ 519.431549][T10684] lock(k-sk_lock-AF_INET6); [ 519.436253][T10684] lock(sk_lock-AF_INET6); [ 519.443297][T10684] lock(k-sk_lock-AF_INET6); [ 519.450512][T10684] lock(fs_reclaim); [ 519.454508][T10684] [ 519.454508][T10684] *** DEADLOCK *** [ 519.454508][T10684] [ 519.462833][T10684] 4 locks held by kworker/u8:12/10684: [ 519.468310][T10684] #0: ffff88805eb52940 ((wq_completion)krds_cp_wq#14/5){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 519.480254][T10684] #1: ffffc90003507c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 519.493080][T10684] #2: ffff888077a1cc80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x930 [ 519.504191][T10684] #3: ffff88805a2daae0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 519.514339][T10684] [ 519.514339][T10684] stack backtrace: [ 519.520283][T10684] CPU: 0 UID: 0 PID: 10684 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 519.520306][T10684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 519.520319][T10684] Workqueue: krds_cp_wq#14/5 rds_connect_worker [ 519.520359][T10684] Call Trace: [ 519.520369][T10684] [ 519.520439][T10684] dump_stack_lvl+0xe8/0x150 [ 519.520488][T10684] print_circular_bug+0x2e1/0x300 [ 519.520514][T10684] check_noncircular+0x12e/0x150 [ 519.520540][T10684] __lock_acquire+0x15a5/0x2cf0 [ 519.520568][T10684] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 519.520591][T10684] lock_acquire+0x106/0x350 [ 519.520608][T10684] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 519.520632][T10684] ? ip6_dst_check+0xe2/0x7e0 [ 519.520708][T10684] fs_reclaim_acquire+0x71/0x100 [ 519.520733][T10684] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 519.520756][T10684] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 519.520779][T10684] ? ip6_default_advmss+0x80/0x3b0 [ 519.520803][T10684] ? __alloc_skb+0x1d0/0x7d0 [ 519.520825][T10684] __alloc_skb+0x1d0/0x7d0 [ 519.520845][T10684] tcp_stream_alloc_skb+0x3f/0x580 [ 519.520872][T10684] ? __asan_memset+0x22/0x50 [ 519.520906][T10684] tcp_connect+0x15a9/0x53a0 [ 519.520944][T10684] ? __pfx_tcp_connect+0x10/0x10 [ 519.520967][T10684] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 519.521001][T10684] ? lockdep_hardirqs_on+0x7a/0x110 [ 519.521022][T10684] ? ktime_get_with_offset+0x93/0x2d0 [ 519.521047][T10684] ? seqcount_lockdep_reader_access+0xea/0x100 [ 519.521077][T10684] ? __asan_memset+0x22/0x50 [ 519.521100][T10684] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 519.521143][T10684] ? inet6_hash_connect+0xeb/0x170 [ 519.521227][T10684] tcp_v6_connect+0x128d/0x1b10 [ 519.521260][T10684] ? __pfx_tcp_v6_connect+0x10/0x10 [ 519.521287][T10684] ? __local_bh_enable_ip+0xd0/0x130 [ 519.521305][T10684] ? __bfs+0x153/0x290 [ 519.521322][T10684] ? __bfs+0x153/0x290 [ 519.521338][T10684] ? __pfx_hlock_conflict+0x10/0x10 [ 519.521361][T10684] __inet_stream_connect+0x25a/0xdd0 [ 519.521395][T10684] ? do_raw_spin_lock+0x12b/0x2f0 [ 519.521419][T10684] ? lock_sock_nested+0x6a/0x100 [ 519.521435][T10684] ? __pfx___inet_stream_connect+0x10/0x10 [ 519.521461][T10684] ? inet_stream_connect+0x51/0xa0 [ 519.521486][T10684] ? __local_bh_enable_ip+0xd0/0x130 [ 519.521505][T10684] inet_stream_connect+0x66/0xa0 [ 519.521530][T10684] kernel_connect+0x141/0x1c0 [ 519.521554][T10684] ? net_generic+0x1e/0x240 [ 519.521570][T10684] ? __pfx_kernel_connect+0x10/0x10 [ 519.521601][T10684] ? __local_bh_enable_ip+0xd0/0x130 [ 519.521620][T10684] rds_tcp_conn_path_connect+0x6f6/0x930 [ 519.521644][T10684] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 519.521665][T10684] ? process_scheduled_works+0xa70/0x1860 [ 519.521682][T10684] ? process_scheduled_works+0xa70/0x1860 [ 519.521720][T10684] rds_connect_worker+0x1d8/0x290 [ 519.521743][T10684] ? process_scheduled_works+0xa70/0x1860 [ 519.521761][T10684] process_scheduled_works+0xb5d/0x1860 [ 519.521791][T10684] ? __pfx_process_scheduled_works+0x10/0x10 [ 519.521811][T10684] ? assign_work+0x3d5/0x5e0 [ 519.521829][T10684] worker_thread+0xa53/0xfc0 [ 519.521858][T10684] kthread+0x388/0x470 [ 519.521880][T10684] ? __pfx_worker_thread+0x10/0x10 [ 519.521898][T10684] ? __pfx_kthread+0x10/0x10 [ 519.521920][T10684] ret_from_fork+0x514/0xb70 [ 519.521939][T10684] ? __pfx_ret_from_fork+0x10/0x10 [ 519.521956][T10684] ? __switch_to+0xc79/0x1410 [ 519.521982][T10684] ? __pfx_kthread+0x10/0x10 [ 519.522003][T10684] ret_from_fork_asm+0x1a/0x30 [ 519.522031][T10684]