last executing test programs: 6.539333465s ago: executing program 0 (id=5700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000440)) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x0, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x83}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r7) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000200)) r8 = socket$unix(0x1, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r10 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) (async) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) ioctl$PPPIOCGMRU(r12, 0x80047453, &(0x7f0000000280)) r13 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) sendmsg$nl_route_sched(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="040000000075000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r14, &(0x7f0000000080)}, 0x20) (async) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.111242664s ago: executing program 0 (id=5705): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x110, r1, 0x218, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @NL80211_ATTR_TX_RATES={0xf4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x18, 0x30, 0x1, 0x1b, 0x48, 0x24, 0x12, 0x1, 0x2, 0x0, 0x30, 0x24, 0x1b, 0x12, 0x30, 0x1b, 0x60, 0x18, 0x18, 0x4, 0x16, 0x48, 0x30, 0x1b, 0x1, 0x9, 0x36, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1b23, 0x4, 0x72, 0x1efb, 0x44, 0x704e, 0x362]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x30, 0x18, 0xb, 0x48, 0x48, 0x48, 0x18, 0x36, 0x16, 0x5, 0x5, 0x18, 0xc, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3f9e, 0x400, 0xe6, 0xc, 0x4, 0xfff9, 0x22, 0x2]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x60, 0x1, 0x9, 0x1, 0x24, 0x1, 0x2, 0x16, 0xb, 0x4, 0x4, 0x2, 0x5, 0x31, 0x60, 0x16, 0xc, 0x5, 0xb, 0x18, 0x6c, 0x1, 0x7, 0x6, 0x48, 0x30, 0x1, 0x6c, 0xc, 0x48, 0x1b]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0x7}, {0x3, 0x4}, {0x3, 0xa}, {0x3, 0x5}, {0x7, 0x7}, {0x7, 0xa}, {0x5, 0x6}, {0x1, 0x7}, {0x5, 0x9}, {0x7, 0x4}, {0x4, 0x5}, {0x1, 0x8}, {0x4, 0x4}, {0x2, 0x2}, {0x0, 0x6}, {0x0, 0x5}, {0x6, 0x6}, {0x5, 0x4}, {0x6, 0x9}, {0x7, 0x8}, {0x5, 0x3}, {0x0, 0x4}, {0x4, 0x1}, {0x1, 0xa}, {0x0, 0xa}, {0x1, 0x4}, {0x1, 0x5}, {0x6}, {0x7, 0x2}, {0x7, 0x7}, {0x4, 0x3}, {0x6, 0x3}, {0x0, 0x6}, {0x0, 0x4}, {0x7}, {0x5, 0x8}, {0x0, 0x5}, {0x6, 0x8}, {0x4, 0x8}, {0x1, 0x1}, {0x0, 0x4}, {0x0, 0x4}, {0x0, 0x5}, {0x6, 0x7}, {0x6, 0x4}, {0x1, 0x1}, {}, {0x1, 0x9}, {0x0, 0x6}, {0x1, 0x1}, {0x3, 0x9}, {0x3, 0x8}, {0x2}, {0x7, 0x3}, {0x0, 0x9}]}]}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x895}, 0x4) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r0) socketpair(0x25, 0x800, 0x80000000, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x800, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x40000) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r6, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x8001}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x44841) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xf8, r8, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20011}, 0x20004000) r9 = accept$packet(r3, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000007c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000800)={'vxcan0\x00', 0x0}) bind$packet(r9, &(0x7f0000000840)={0x11, 0x17, r11, 0x1, 0xd, 0x6, @multicast}, 0x14) close(r7) syz_80211_inject_frame(&(0x7f0000000880), &(0x7f00000008c0)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7}, @initial, @device_a, @initial, {0x3, 0x4}, "", @value={0x8, 0x0, 0x0, 0x1, 0x5}}, @random="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"}, 0x8a6) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x50, r12, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x804) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001380)={0xd4, r8, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x240008c1}, 0x4000) r14 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r15 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001540)='ns/user\x00') sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x4c, r2, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r14}, @GTPA_NET_NS_FD={0x8, 0x7, r15}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40084}, 0xc0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000001680)={@any, 0x1, 0x3ff, 0xa, 0x5, 0x82c, "d8a653dfe81c59afa373df2f0ff1a018e8f74308406b9984ebc3dc59d0e3f25808ba35fac440c3129c944731e3d667917ce0b62ab4ece874a762050532e3d3508436c7be64dac16dc6e6c68ca4bb91c93b7c55deda3421f2e6509fe1418fb54599c42970f13fee5869580a715b43fcaa4c51de9ed55e26b0ef1b7604decd718e"}) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000001740)={0x40, {{0xa, 0x4f, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff}}}, 0x88) getpid() ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000001900)={r9, &(0x7f0000001800)='\x00', 0x82140, &(0x7f0000001840)={@_ha_fsid={[0x84dd, 0x5]}, {0x2, 0x66d9, 0x7, 0x3}}, 0x8, &(0x7f0000001880), &(0x7f00000018c0)=0x945f}) sendmsg$nl_route_sched(r16, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x7, 0xb}, {0xf, 0x10}, {0xffe0, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x7f}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) getsockname$packet(r4, &(0x7f0000001a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001a80)=0x14) 5.942382933s ago: executing program 2 (id=5706): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000190081154e81f782db4cb904021d0800fd02fe02e8fe50a10a000548258848000c600e41b0000900ac00080325000000040015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xf, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @local}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x18, &(0x7f0000000440)=0x1, 0x4) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001800011306007000000000000a001400fe04ff06"], 0x1c}}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000f3eb00329111490000000000e50000000000910000003412e9d6835d5ce82ad57ea9f77902c4202665083de6ddb142543916c55fdfae31c17267466e09f954b7571d3f75ca24a22b567b2e35871bb80d8be1fde30faa5964ae72f1f440adfeadf6dc4a0562c7dc9fc7a38188f606beab2b2f7270e7a9ee9c47b9bfe956e4f9a79ee2c9e6e0d38bfe8591925536356da8d96fd315c61cdc9abf96"], &(0x7f0000000c40)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 5.60473957s ago: executing program 2 (id=5712): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r4], 0x78}, 0x1, 0x0, 0x0, 0x24040004}, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e24, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0x7, 0x0, @val=0x80}, "ffaec30a5fd5a15a489075ed"}}}}, 0x3e) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x0, 0xe}}}, 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b907ef23f66a54f05c13e5f0888e", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 5.228287124s ago: executing program 1 (id=5716): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0xfffffffe}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(r0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x1004) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0xfffffffe}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) (async) bind$tipc(r0, 0x0, 0x0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x1004) (async) 5.030170089s ago: executing program 0 (id=5719): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 4.922493163s ago: executing program 1 (id=5720): r0 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x31, &(0x7f0000001600), 0x4) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r6, 0x0, 0x4000) r7 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e1d, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@dstopts={{0x18, 0x29, 0x3b, {0x73}}}], 0x18}, 0x440e0) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) 4.764981952s ago: executing program 0 (id=5722): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xcf, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000240)={{0x2, 0x4e24, @multicast2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x6, {0x2, 0x4e20, @local}, 'bridge0\x00'}) writev(r1, &(0x7f0000000700)=[{&(0x7f00000000c0)="0232e600", 0x4}, {&(0x7f0000000140)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d671416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cdeae62faa71a5f2383e963aba417592d7a84958b0378e15fa25bca4ceabb5", 0x7e}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) poll(&(0x7f0000000100)=[{r1, 0xf028}, {r1, 0x5110}, {r1, 0x10}, {r3, 0x408a}, {r1, 0x22e0}, {r1, 0x8010}, {r1, 0x614}], 0x7, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000072019a00000000009500000000000000c9e283f0e978b6e5c8b041c7cba56b1beacb102a314cff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000002f0081002bbd7000ffdbdf250800e900aaeedf22a97c5c7cef55a408467459dac0bd342ff6c986383ee4dc25cda8d2e281c6dbe0972534cdcd7aaa3c79167e584dafd594095a3df12b85c6d7855b4900a1b686e5019b0d4264e70d6179943646bf21c534475b30919214fa065227ac765b5131", @ANYRES32=0x0, @ANYBLOB], 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f00000002c0)=0xfa0, 0xfee3) getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000000180)=""/8, &(0x7f0000000240)=0xffffffffffffff61) ioctl$FS_IOC_SETFLAGS(r5, 0x401c5820, &(0x7f0000000080)) 4.749394533s ago: executing program 2 (id=5723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e105000000884800001144ee163cd4b8bf4a31accbe1", 0x27}, {&(0x7f00000001c0)="499a6c5dc76e448334d65303e4dabcfacbeecc643a0537d8471de7776687bb4ae9e1b90e0f35399366773327462fca494e8d50c99924bccb9ed6694e38def4a59096a00fe69ea80825053c2e2e30bbf2b41898c4d6a5154a74b4d588a157ccd36bc3aa1d503c051fefa5e96a2561d15c18ebf5cc7427d0b244465c3d7a5f67542422199f31b53153fa7d", 0x8a}, {&(0x7f0000000280)="9bba2b5f8fb9159bfc9d41ff0c4e83d8402e2ed300059b85be923db3058022ef199ebabdc1ebc49efa23c710bf131973d473be84bb89d09f58e9a8a7b0c6836d9a0eedc372520af79fe74cfd94ff586017c935290532dfc50463d3f1cbfacd6631281a1c09bb136b567074bbc2496e61585152f0fc535d90c510032841e3f7c60e5e51caae35cb79", 0x88}, {&(0x7f0000000440)="e6f0f4e3201c65a571fe1599be3efad3647add40c3b6594fed13cdd37808b8efff98c6dd09a7b28048b871af15c67887f8b7e996306e0053b50833b0f7f57f0902605d42e576e4d8334996df8b7263dcece4ac4815c1914b1991a12dc85674a348af8331c61d722b4e4aa92c622cef9de6ad8f763b82855b3bf75e994483f5d82fadb2a4090e75cdc0117d9f52cd7c0f85dc2322ae9243422714b68407f364b5bc704043473f8fde84c0d618f015a0f345efe9614cc6eb6915314eeadef53e9d5c030f446f227ad4bc870ab247aabf565168a319", 0xd4}, {&(0x7f0000000640)="bab7237c666fbaea7e234615b0cd86a02bd67fc33f1b5d4326c47c8ab0a3d17c72b6a2bf140b0b0e60c260261221fb47b5e6a964b15c15deaae895a4a6c85fffb929777dfaf84a894c23d78d75175e6f5a8af3bd5924f59d413ac47b62d429df153b1e573a68465297009d", 0x6b}], 0x5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710437000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r5, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x428, 0x3f3, 0x100, 0x70bd29, 0x25dfdbff, {0x2, 0x2, 0xa, [0x3, 0x1, 0x800, 0xffffff00, 0x4, 0x8, 0x7, 0x6, 0x1, 0x7, 0x8, 0x80, 0x0, 0x10000, 0x8, 0xfffffff9, 0x4, 0x3ff, 0x5, 0x8000, 0x7, 0xfff, 0xff, 0xc61, 0x0, 0x2, 0x7, 0x1, 0x0, 0x9, 0x1, 0x0, 0x7fff, 0x8, 0x6, 0x2, 0x18000, 0xe, 0x8, 0x4, 0x200000, 0x1, 0xffffffff, 0x80, 0x2, 0x4, 0x7, 0x7, 0x400, 0x7d, 0x3, 0x7, 0x1c93, 0x0, 0xe, 0xa, 0x8, 0x1, 0x2, 0x3, 0x3, 0x1000, 0x8, 0x101], [0xd8c9, 0x7450, 0xffffff7f, 0x4, 0x4, 0x4, 0x7, 0xb, 0x3, 0xd, 0x1, 0x95e, 0x5, 0x9, 0x1000, 0x0, 0x61, 0x4, 0x2, 0x3, 0x2, 0x5, 0x1, 0xb, 0x0, 0x40, 0xffffff81, 0x7, 0x7, 0x4, 0x4, 0x3, 0x5, 0xa, 0x1c00000, 0x1ff, 0x2, 0x8000, 0x5, 0x8, 0x3, 0x65, 0xfffffff9, 0x15ee, 0x7fffffff, 0x1, 0x3, 0x0, 0x5, 0xff, 0x2, 0x10, 0x0, 0x8, 0x1cf000, 0x9, 0x4, 0x3, 0x200, 0x8, 0x2, 0x9, 0xfffffe00, 0x2], [0x8, 0x6, 0x5, 0x2, 0x80, 0x5, 0x8, 0x6, 0xd87, 0x16, 0x0, 0x3, 0x7fffffff, 0x2b7, 0xbf, 0x1000, 0x18000, 0xfffffffb, 0x400, 0x6, 0xb, 0x7, 0x3, 0x1, 0x9, 0x5, 0xffff, 0xfffffff7, 0x5, 0x401, 0x2, 0x2, 0x6, 0x4, 0x1c8a, 0x6, 0x3, 0x7, 0x4, 0x80, 0x8, 0x8, 0xfffeffff, 0xffffff00, 0xb, 0xc0, 0x4, 0x0, 0x9, 0x2, 0x7ff, 0x6d1d, 0x2, 0x2, 0xb66, 0x8609, 0x4, 0x9, 0xfffff800, 0x7, 0x10001, 0x8, 0x1ff, 0x1], [0x3, 0x3ff, 0x9, 0x7fffffff, 0x81, 0x0, 0x1, 0x8, 0x3, 0x0, 0x4, 0x6, 0x80, 0x4, 0x4, 0x80000001, 0x6b7e, 0x9, 0x1b, 0xf7, 0x4, 0x4, 0xfffffffd, 0x3, 0x10, 0x1, 0x80, 0x5859, 0xc913, 0xfffffff7, 0x9, 0x8, 0x3ca2, 0xc, 0x5, 0x0, 0xfffffff9, 0x10000, 0xa, 0x5, 0x8, 0x5, 0xff, 0x51fc, 0x7, 0x400, 0x1, 0x9, 0x8, 0xd, 0x6, 0x3, 0x8001, 0xa, 0x558, 0x3, 0x7, 0x9, 0x400, 0x2, 0x6, 0xa, 0x81, 0x1f7f727d], 0x5, ['@}[-\x00']}, ["", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x80}, 0x404c010) 4.738497955s ago: executing program 1 (id=5724): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000800)={0xf, 0x2, 0x1, 0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@ipmr_newroute={0x1c, 0x18, 0x1, 0x70bd2d, 0x25dfdbff, {0x80, 0x14, 0x20, 0x7, 0xfe, 0x1, 0xfe, 0x6, 0x100}}, 0x1c}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000004480)={&(0x7f0000004380), 0xc, &(0x7f0000004440)={&(0x7f00000043c0)={0x24, 0x1407, 0x1e6a54407809f069, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}}, 0x40) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0xfffffe4b, &(0x7f0000000480)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000400)=""/99}], 0x1}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) close(0x4) getsockname(r6, &(0x7f0000000340)=@hci, &(0x7f00000003c0)=0x80) r7 = socket(0x80000000000000a, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) write$cgroup_subtree(r9, &(0x7f0000000040), 0xfffffc3f) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}}}, 0x108) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=@framed={{}, [@printk={@i, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@x}]}, &(0x7f0000000100)='GPL\x00'}, 0x90) r10 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000006c0)={{{@in, @in=@multicast2}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f00000007c0)=0xe8) setsockopt$inet6_group_source_req(r10, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r10, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r7) syz_emit_ethernet(0x4c, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000ece65ff1cd17ac33f45e8a0248ef1c7fbcee5586dd6001010000161100fe8000000000000000000000000000bbfe80000000000000000000be000000aa00030e22001690780203000000000000ffb00afe4e70"], 0x0) 4.49110733s ago: executing program 1 (id=5728): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000040)=0x200000, 0x4) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000001c0), 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) accept4(r0, &(0x7f0000000440)=@pppol2tpv3in6, &(0x7f00000004c0)=0x80, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt(r5, 0x2, 0x5, &(0x7f00000002c0)="44d819c53f56eb069c0124e26cbf6ad450403f75a0be8847489d4913ff2dbb9b7fdedd26a8bd7d5d87ef3e4a00fddbb3534a1ad61a13b1bbb2ddef9423e7c6694bab46fbc3256d49e96cf8b77069733da4ecd8fa68d551988ea16abad7408d4d7c178b1538bfae19450432cd79e9dd5c0240f0c435cd08955836085a48b51c6bc355350653ff9568835e21845e37937fc7f486ff782a712af2cc3ad43764ec09d999bc9fbdfcc367aa3596d558382436a5f99716d9f9e7", 0xb7) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, 0x0, 0x2300, 0x0) close(0x4) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) bind$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xda, 0x4}, 0x20) 4.422726112s ago: executing program 0 (id=5729): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket(0x1e, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2d, &(0x7f0000000180), 0x4) (async) r5 = accept4(r3, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r7, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newspdinfo={0x14, 0x24, 0x400, 0x70bd29, 0x9ed4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8814) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x4, 0x5, [0x400, 0x4, 0x1, 0x6, 0x9]}, &(0x7f00000000c0)=0x12) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched_retired(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@newqdisc={0x98, 0x24, 0x800, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x5, 0x9}, {0xfff2, 0xfff2}}, [@q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xe0e}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x26}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x5}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfe01}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8080}, 0x20000080) setsockopt(r12, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r12, 0x84, 0x17, &(0x7f0000000100)={0x0, 0x3, 0x1, 'x'}, 0x9) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r12, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0xbec, @private2, 0x6}, @in={0x2, 0x4e20, @loopback}], 0x2c) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000000100)={r11, 0x8}, 0x8) 4.404883915s ago: executing program 2 (id=5730): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0xfffffffe}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x68, &(0x7f0000000200)}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x1, 0xfffffff8, 0xdf6, 0x40100, r3, 0x100, '\x00', r5, r2, 0x1, 0x3, 0x4}, 0x50) 4.339246128s ago: executing program 3 (id=5731): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x2, 0x0, 0x20}, 0x10) (async) listen(r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000105000000000000000000000001000085000000000000000001"], 0x0, 0x42}, 0x28) (async) listen(r0, 0x7) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], &(0x7f00000002c0)=""/185, 0x32, 0xb9, 0x1}, 0x1f) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)={0x420, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x60, 0x84, 0x0, 0x0, @fd=r2}]}, @typed={0x4, 0x8}, @nested={0x338, 0x119, 0x0, 0x1, [@nested={0x62, 0x39, 0x0, 0x1, [@generic="000574fc1d5f48528e6340f2509fec8685c69793d064b012731145f63d7e15b3e551ec9c0c7ea17ff91bfaac5f20b039bb9ce8d601bc86b57038eb16161a752a12c6e7bb2265ab75bb402ae210ba7fe564fb9fa6ce7e4a55e09cfeaa118b"]}, @generic="8b66a37cf98edd6b644688b9a425bdfe02cb693c8aee466e5a5456e52704008d56cf1d634d9a02010643b94c741b506b0328c02006f86cb229794fd2a4551a6575115f61cb423a56660a13c5d04c6699750ad009870bed9834fe768a4820390cb79a08a1bb4011457db859f1ce077f638864092dfd1d832548e685c747b68fbb53ae358f0569ad199f71d53e74af77cd201b954c67e1729deed5deb0121d0c486a8c18fbe397e2e1f7ec100ff118de9c4109f41b25a4129e77820367", @nested={0x1e8, 0x9e, 0x0, 0x1, [@nested={0x55, 0x1a, 0x0, 0x1, [@typed={0x0, 0x75, 0x0, 0x0, @pid}, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x7f}, @generic="951b564ec0683bb881d0baa5dd3eab18f79a3c5080456133f30ab6696ed81fb2a4335ef4163ae4496d38a25024e5710a66f90f013cb97d2ba53de21a41", @nested={0x4, 0x33}]}, @generic="809c6fac5c44db024f2a6a05e07986b690092ffa93df89c86bbd179c36ffe0bb6c1e396d1a0eee5a9828ceb97c6c1753e964ec14c45a870f4e25040d53341193d31667b659af73a7c1d856068045f6f1d0daa096a64c96ae65f909a68c30e4c7fcc4b772920af7abc5dbc18a8c47163e105a581f3cfc235aebd53909510d261e12a557d3ac2e2807b68d", @typed={0x8, 0x45, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}}, @generic="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"]}, @generic="5fa2c016cd304ea17709114cba92274c36adcdb634dc7b3bff6b1738211e39ef7818ac5541dd6a06f0b72551"]}, @typed={0x6, 0x74, 0x0, 0x0, @str=']\x00'}, @generic="563035d5bfad85eadacdf06106633e04a418de8e40eb962cd47dc95716e5fbebff58d0147c5bbbfd6d1c6e04de84ff132ace7a62964513525b0d1cf7600ced0c4d1fc15306bff54268123ef539a87b3b0eaedcba3131c9e372f93f88c41a6a8705cb9c92bef2b41f560fa1a25a943769e7ecddf47ed79eb291f96420f908af6a4e0ffddb914e601e237ed65727f9a27ed74a403e8b8207f9c51fd632ff89941ef1e38e8ae77089c22274b9a7174a", @typed={0x8, 0x40, 0x0, 0x0, @u32=0x1}]}, 0x420}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) socket(0x10, 0x803, 0x0) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) sendfile(r2, r3, &(0x7f0000000040)=0x7f, 0x4) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) 4.194691402s ago: executing program 2 (id=5733): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6010104000380600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e40000009078000013126cc800000000000000000000000000000105111fad1e0aa040ac1e0501000c000000"], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x34) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbf8, {0x0, 0x0, 0x0, r3, {0xfff3, 0xfff1}, {0x5, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x64, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x59, '\x00', 0x4, 0xd4d, 0x401, 0x2}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x8, 0x0, 0x3, 0xff}}, @TCA_CBS_PARMS={0x18, 0x1, {0xf, '\x00', 0x7fffffff, 0x8, 0x3, 0xffffc}}, @TCA_CBS_PARMS={0x18, 0x1, {0x9, '\x00', 0x3ff, 0xffffff76, 0x3ff, 0x10001}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xa0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x6c, 0x2, [@TCA_U32_ACT={0x44, 0x7, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0xf, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x6, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x9, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbf9, {0x0, 0x0, 0x0, r11, {0xfff3}, {0x10}, {0x7, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000400}, 0x20004804) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r13 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x101880, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='.\x00', 0x0, 0x4000, r13}, 0x18) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000002000000950000000000000019131e1db7ece0bc"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x24}, 0x94) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r14, 0x84, 0x75, &(0x7f00000003c0), &(0x7f0000000480)=0x8) 4.129169959s ago: executing program 0 (id=5734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00123c0ff000000000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}, {0x0}], 0x2}, 0x4005) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x20) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$kcm(0x29, 0xa, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x25a5, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x67, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8}]}, 0x3c}}, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r12, 0x6, 0x3, &(0x7f0000000000)=0x4, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r12, 0x6, 0x3, &(0x7f0000001900), &(0x7f0000001940)=0x4) ioctl$PPPIOCGFLAGS1(r9, 0x8004745a, &(0x7f0000000080)) 4.127899137s ago: executing program 3 (id=5735): syz_emit_ethernet(0x7e, &(0x7f0000001a40)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002500)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="c000b2000a0002000000000000000000060005002e5f"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e20, 0x4, @loopback, 0xe712}, {0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1, {[0x10, 0xff, 0x4, 0x7, 0x80, 0x6ef, 0x4, 0x40]}}, 0x5c) 4.075701182s ago: executing program 1 (id=5736): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0x5}]}]}, 0x4c}}, 0x0) 3.934728512s ago: executing program 3 (id=5738): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000e00)={0x2, 0x1, 0x0, 0x9, 0x83, 0x0, 0x70bd2d, 0x25dfdbfd, [@sadb_address={0x3, 0x7, 0xff, 0xa0, 0x0, @in={0x2, 0x4e22, @private=0xa010102}}, @sadb_x_nat_t_type={0x1, 0x14, 0xff}, @sadb_key={0x1b, 0x8, 0x650, 0x0, "3cb69bd304aa28a58022ecd1d00105e7bf5fd16440d387b7998a058ec6c20ecd2aabef6550ba19a16e9844a89218fc6194a9316929b616f03f4b80936d1263341e3afa2083792a432eb2de2049b9ec715c575cbef6f0c6748bfc587a7808e2b806c926fc06b6173de432ee52898001fdb18f70dd6ed8ce396fe0b237b58c059d1df5b1071867e60588cbfc0fbe763c32932ae237d7eca51508f05d5fb49c23faec065405eb23ab44408f02d5caf668cab18f0f9a547e971fedf04bce3111c19a581ed893dff19dd6b480"}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d5}, @sadb_key={0x0, 0x8, 0x0, 0x0, "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"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e22, 0x8a8d, @mcast2, 0x1}}]}, 0x158}}, 0x20000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffff9}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x5}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10001}, @alu={0x4, 0x0, 0x6, 0xa, 0x3, 0x6, 0x4}]}, &(0x7f00000007c0)='GPL\x00', 0x7, 0xc8, &(0x7f0000000800)=""/200, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x2, 0xc, 0x6, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x3}, 0x94) writev(r1, &(0x7f0000000c40)=[{&(0x7f0000000a40)="c93425cbf878e9275dcf0082af0d02d2f006051a3a4b323968da05c8d0c58e9672c6fbf745703781d788ae99c998f5d09e664d3d23df2e4f8ba8c0df0fcfae66f321a41592a0679c1bbe68d1f6dbc4ed71", 0x51}, {&(0x7f0000000ac0)="bcf7e0b3c72406832e9645ac869287983e9c641be416867643c51211b32d6c168b1c57433354067adb1023f643083cf8ae919a918cb7d1df620b1932b7039591fa7a6aca8219d539043849b10087feb66dda99588e916947a8175c71", 0x5c}, {&(0x7f0000000b40)="8e05d409e5279707499b2804cd0965a1a68d8c85464194a586931508ad2720d058172210d1fea52ea5b8ddda9521ca1adf90dfda7772963d296f909a0da972da9468bc354273df6c98055cf1f50904b9474f0650ba795c6d92c770af91103f", 0x5f}, {&(0x7f0000000bc0)="235a21ff4a75168a9f6a62878c2aff07409f37258b86490860c86361682fc6a8d57fd1d5561fce87b9e4c401af28e79642b7c22f7d45979490f5d72488a13f7dc3cebd178b76ae48828bba13ab56e24fcf4497b524f96b0b0f42e31ca19c", 0x5e}], 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x0, 0x8003f}, {0x6, 0x2, 0x9, 0xfdfffff7}]}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000440)={{r0, &(0x7f00000000c0)='\x00', 0x80, &(0x7f0000000180)={@_ha_fsid={[0x1ff, 0x401]}, {0x886b, 0x4, 0xbb, 0x1000}}, 0xfffffffc, &(0x7f00000001c0), &(0x7f0000000540)=0x8}, 0x2, &(0x7f0000000400)=[{0x3, 0x1, &(0x7f0000000240)='-\\\x00', &(0x7f0000000280)="c8", 0x1, 0x20}, {0x6d8d44fafd7fd22b, 0xea4, &(0x7f00000002c0)='\x00', &(0x7f0000000340)="782e6dcf06f1bf5f77ca9f4d1388b667bfe83234236f61812f2709eae98f8b7ae7cf973d6c75713b4cf2eb75af539f8366dbe3fde910a3ef28dbcb6e6f12ea830f4bcabaa007bbe34ced09c868732afe7d2304126bd427448e807fddd23058403b6b11b964d872ecf1b98e658c200167b2677a90ee03cdc0c4fab275f7030b17e31fd1632ce579204f045a431cf3ac4d07dcccd0a30c673778dc81f630", 0x9d, 0x10}]}) getpeername$l2tp(r4, &(0x7f00000004c0)={0x2, 0x0, @local}, &(0x7f0000000500)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}, @IFLA_ADDRESS={0x8, 0x1, @dev}]}, 0x48}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff"], 0x4c}}, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x9, 0xa, 0x0, 0x1, 0x0, [@sadb_address={0x3, 0x6, 0xff, 0xa0, 0x0, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d6}, @sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) 3.884062356s ago: executing program 1 (id=5739): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r4, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="3247aa5d26ade6657672865d35a0a8d8ece9fd2bde", 0x15}], 0x1}, 0x4) 3.802043636s ago: executing program 4 (id=5740): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@gettaction={0x20, 0x32, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004080) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r5 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000005c0)={&(0x7f0000000280)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000440)="55116878cec666ce40016ac603fad0edf22b05cc9ab62e6a8c2e482e4f6e5e2d2b00"/49, 0x31}], 0x1, &(0x7f0000000580)=[@ip_tos_int={{0x2b, 0x0, 0x1, 0x101}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}], 0x30}, 0x8000) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010800000000000000000000000011000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073"], 0x58}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1060) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020026bddf2505000000080009000200000008000c00aa0a009e2efa4a000400000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbb9eb7b6f9bbbb88a84d008100660008004519001c00e4"], 0x36) (async) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2041) (async) r7 = socket$unix(0x1, 0x5, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001980)={0x314, r9, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x68}}}}, [@NL80211_ATTR_TX_RATES={0x2f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0xa1b9, 0x100, 0x6, 0x4, 0x1, 0x7fff, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x9, 0x1, 0x2, 0x2, 0x4, 0x6c, 0x30, 0x18, 0x2, 0x2, 0x16, 0xb, 0x8e0a047735d1ff9a, 0x6, 0x9, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x70, 0x2, 0x6, 0xfffb, 0x401, 0xffff, 0xcf]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x0, 0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x1, 0x1}, {0x3, 0x5}, {0x0, 0x6}, {0x3, 0x2}, {}, {0x1, 0x8}, {0x3, 0x2}, {0x7}, {0x5, 0x6}, {0x7, 0x7}, {0x3, 0x2}, {0x5, 0x2}, {0x5, 0x9}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x2, 0x7}, {0x4, 0xa}, {0x1, 0x8}, {0x7, 0x1}, {0x1, 0x4}, {0x6, 0x9}, {0x0, 0x2}, {0x7, 0x9}]}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x200, 0xfffc, 0x2, 0x1, 0x6, 0x7, 0x101]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xda0e, 0xb5, 0x1000, 0x5, 0xda, 0x2, 0x0, 0x5884]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xffc0, 0xfff, 0x7, 0x8, 0x7, 0xa05, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x80, 0x7f, 0x3, 0x0, 0x250c, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0xc8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xffff, 0x2, 0x7, 0x3, 0x1, 0x0, 0x100]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x2, 0x2}, {0x6, 0x7}, {0x1, 0x8}, {0x4, 0xa}, {0x0, 0x3}, {0x5, 0x2}, {0x7, 0x1}, {0x1}, {0x6, 0x1}, {0x1, 0x4}, {0x2, 0xa}, {0x1, 0x1}, {0x0, 0x4}, {0x4, 0x3}, {0x0, 0x1}, {0x0, 0x4}, {0x7, 0x1}, {0x6, 0x6}, {0x5, 0x7}, {0x7, 0x3}, {0x6, 0xa}, {0x0, 0x5}, {0x1, 0x2}, {0x4, 0x6}, {0x3}, {0x5, 0x2}, {0x6}, {0x1, 0x7}, {0x1, 0x6}, {0x2, 0x6}, {0x6, 0x8}, {0x4, 0x2}, {0x3, 0x8}, {0x1, 0x3}, {0x7, 0x5}, {0x5, 0x4}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x5}, {0x4}, {0x6}, {0x5, 0x1}, {0x0, 0x7}, {0x5, 0x4}, {0x2, 0x5}, {0x1, 0x8}, {0x3, 0x7}, {0x2}, {}, {0x4, 0x6}, {0x0, 0x6}, {0x3, 0x9}, {0x7, 0x6}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3ff, 0x8, 0x1, 0x8, 0x2, 0xfffa, 0xf]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x9}, {0x7, 0x1}, {0x5, 0xa}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0x2}, {0x1, 0x1}, {0x1, 0x4}, {0x0, 0x7}, {0x1}, {0x1, 0x2}, {0x4, 0x9}, {0x1, 0x1}, {0x2, 0x8}, {0x3, 0x2}, {0x3, 0x6}, {0x2, 0x2}, {0x3, 0x5}, {0x0, 0x8}, {0x6, 0x3}, {0x6, 0xa}, {0x4, 0x4}, {0x1, 0x1}, {0x6, 0x4}, {0x3, 0x1}, {0x7, 0x4}, {0x6, 0x4}, {0x2, 0x2}, {0x2, 0x9}, {0x2, 0x7}, {0x5, 0x4}, {0x7}, {0x1, 0x1}, {0x6, 0x8}, {0x3, 0x8}, {0x3, 0x6}, {0x4}, {0x0, 0x8}, {0x5, 0x5}, {0x4, 0x4}, {0x4, 0x6}, {0x2, 0x7}, {0x4, 0xb}, {}, {0x4, 0x2}, {0x1, 0x4}, {0x3, 0x2}, {0x1, 0x8}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x26, 0x16, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x22, 0x3, 0x90, 0x18, 0x6, 0x3, 0x16, 0x60, 0x3, 0x1b, 0x12, 0x5, 0x4, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x40, 0x2, 0x78e, 0xa97, 0x4, 0xa3]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x3ff, 0x9af9, 0x0, 0x4, 0xfffe, 0xf, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x66, 0x5, 0x7f, 0xf, 0xa, 0x1, 0x9, 0x2]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x205, 0x99a3, 0x4d88, 0x5e, 0xa8d, 0x5, 0xb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x190, 0x942d, 0x8, 0x3, 0x5, 0xe9a8, 0x5, 0xc29]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x1000, 0xd8, 0x8deb, 0x247e, 0x81, 0x4, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x386, 0xfff, 0x22, 0x4, 0xff1f, 0xf9, 0x669]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x5, 0x3, 0x9, 0x100, 0x1, 0x5, 0x2]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x4, 0x1}, {0x2, 0x9}, {0x6, 0x6}, {0x3, 0x4}, {0x3, 0x7}, {0x2, 0x1}, {0x0, 0x4}, {0x1, 0x5}, {0x0, 0x3}, {0x7, 0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x1, 0x7, 0x7, 0x768c, 0x0, 0x2, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xfff7, 0x6, 0x800, 0x0, 0x3, 0x5, 0x9]}}]}]}]}, 0x314}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c0005"], 0x108}}, 0x24040800) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r12 = accept4(r11, 0x0, 0x0, 0x0) sendmsg$alg(r12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000200000000000000000000006474f0f6b13a88626836cc3b479daa2ca4fc5259bb761f4112179be51beba2b704ef7135fd4b648d1362b7a133945b00000000000001ff129727aa899f8900272e98b20f500e971acf288f79a5bf44d6"], 0x18, 0x2400c098}, 0x4000010) 3.721754707s ago: executing program 3 (id=5741): r0 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00', 0x9}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x5, 0x6, [0xf5db, 0x7ff, 0x2, 0x1, 0x4, 0x4]}, &(0x7f00000000c0)=0x14) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000040)={r4, 0x1, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r2, 0x6}, 0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x4c, 0x3, 0x12, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x7, 0x1, 0xffffffff}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="760a0000000000006111b400000000009500000000000400"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) 3.689756151s ago: executing program 4 (id=5742): r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x5c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x2, 'sed\x00', 0x11, 0xff, 0x5a}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x5c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x2, 'sed\x00', 0x11, 0xff, 0x5a}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES16=r0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d00ff4300000800044a050000"], 0x4c}}, 0x0) 3.47902958s ago: executing program 3 (id=5743): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netdev_private(r7, 0x8910, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newtfilter={0x94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xffff, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xff00}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}}, 0x800) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x101640, 0x0) close(r9) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r10, 0x1, 0x1c, 0x0, &(0x7f00000005c0)) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r11 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet6_buf(r6, 0x29, 0x22, &(0x7f0000000fc0)="1459dd0be9ecc8ada8f5e07c3dd24daa7c4558502b90be9fcc70c72cb707567f9a34e7f454bb0c5e713e411cc4706f2a6c53ee71a033517653018455d72d06ed274bb3b655baea28b65f2bc3d2922f979dd5ec4dfcd68eeb9d2632848e77b52f82de84c5cb5ce9cbeadec3ec273ec41e3c4922e2015881297c59cc911273f0ab342c066c65b2ac86ca7d87c19a57d6461029b88716733e29f88a8c0c768c0feddcb0cd22", 0xa4) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)='\r', 0x1}], 0x1}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000001140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a44000000080a010200000000000000000a00000514000580080001400000883e080001400000000c0900010073797a300000000008000a400000000208000a400000000120000000060a02030000000000000000000000010900010073797a300000000048000000120a010200f323faf40c0b0af5e0602c07c800000000000000a9000003340004800900010070707470000000000600024006000000050003008400000009000100736e6d70000000000500030011000000300500000b0a01020000000000000000000000080c000b400000000000000009a802098008000140000000040800014000000000240002800c00018008000140000000051400018008000140000001ff0800014000000002080001400000000b0800014000000007a40102801c0001800800014000000003080001400000000908000140000089bd14000180080001400000000508000140000000b60c00018008000140000000082c000180080001400000000108000140fffffffa08000140fffffffd080001400000183708000140ffffff804c000180080001400000000308000140000031ad08000140000000030800014000000004080001400000007f08000140fffffff90800014000000010080001400000000508000140000005844c00018008000140000000080800014000000007080001400000b223080001400000000f080001400000000508000140000080000800014000000007080001400000000808000140000000014c000180080001400000000c080001400000ffff0800014000000acf0800014000000200080001400000008f080001400000000608000140000009aa08000140000000040800014000008001040001801c000180080001400000000908000140000001ff080001400000000a3400018008000140000000620800014000000005080001400000000c080001400000000108000140000000060800014000000800080001400000000708000140000000650800014000000005a40002802400018008000140000000050800014000000008080001400000000608000140000000002400018008000140ffffffff0800014000000005080001400000000408000140000000003c00018008000140000000090800014000000314080001400000000808000140000000030800014000000000080001400000000408000140000000051c00018008000140fffffff80800014000000009080001400000000208000640ffffff00080004400000000214001280100001800c00010062697477697365007c010980400102802c000180080001400000000008000140800000010800014000010001080001400000000308000140000000060400018014000180080001400000009208000140000000045400018008000140000000030800014000000010080001407fffffff0800014000000001080001400000800008000140000007ff08000140000004000800014000000006080001400000000708000140000000010c00018008000140000000064c0001800800014000000005080001400000000608000140000000650800014000000661080001400000000908000140000000000800014000000008080001400000000808000140000000044c000180080001400000ffff080001400000000308000140000000010800014000000400080001400000000908000140fffffff708000140000000000800014000000007080001400000eee73800028034000180080001400000000408000140000000040800014000010001080001400000000008000140ffffffff0800014000007fff900012800c0001800800010066696200340001800b000100736f636b657400002400028008000140000000010800014000000003080002400000000008000240000000143c0001800b0001007470726f787900002c00028008000140000000010800024000000003080001400000000208000140000000020800034000000000100001800a0001006c696d69740000002c0011800a00010072656469720000001c000280080003400000000c080001400000001208000240000000000c000b40000000000000000934000000050a010100000000000000000000000508000b40000000040c00024000000000000000040b00070066696c746572000054000000060a01010000000000000000000000080c000640000000000000000508000940000000020c00064000000000000000020900010073797a3100000000140005800800014000000000080001400000008830010000090a0500000000000000000000000007f4000980f00002802400018008000140000000ff0800014000000001080001400000004008000140ffffffff14000180080001400000000608000140000000081c0001800800014080000001080001400000000208000140000000062c00018008000140000000010800014000000001080001400000000508000140000140000800014000003c7c2c000180080001401bea4fd30800014000000006080001400000000908000140000092d80800014000000006340001800800014000004be008000140258d1f00080001400000800008000140000000050800014000000df608000140000000050c00018008000140000002000800054000000007080007400000003c08000340000000a8100011800b00010072656a656374000014000000110001"], 0x7bc}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x6], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 3.478297536s ago: executing program 4 (id=5744): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x2c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_SE_APDU={0x5, 0x19, 'O'}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)={[{0x2b, 'memory'}, {0x2d, 'cpu'}, {0x2d, 'rlimit'}]}, 0x15) (async) write$cgroup_subtree(r8, &(0x7f0000000300)={[{0x2b, 'memory'}, {0x2d, 'cpu'}, {0x2d, 'rlimit'}]}, 0x15) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000008500000056000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x4c, r2, 0x1, 0x70bd2a, 0x0, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3, 0xab, 0xfffffffc}}, {0x8, 0xb, 0x60a7}, {0x3, 0x11, 0x2}}]}, 0x4c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}}, 0x40) 3.229051519s ago: executing program 4 (id=5745): r0 = socket$kcm(0x10, 0x100000000002, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8040) setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f80), r3) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000005100)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000005040)={0x2c, r4, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0xfffffffffffffedc, 0x7, 0x2}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000011}, 0x48010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a05000000000000000000010000050c00024000000000000000010900010073797a300000000014000000110001000000000000000000"], 0x7c}}, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 3.081741189s ago: executing program 4 (id=5746): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 2.879051861s ago: executing program 4 (id=5747): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x15, 0x80000, 0xfff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05002abd7000feffffff2e00000008000300", @ANYRES32=r5, @ANYBLOB="0a00340001010101010100001000490008ac0f000bac0f0004ac0f0008004b000100000010004c"], 0x6c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0x3, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004005}, 0x41) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfffffffe}]}, 0x3c}}, 0x0) 117.208469ms ago: executing program 2 (id=5748): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000180)={0x40, 0x81}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@setneightbl={0x14, 0x43, 0x1}, 0x14}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000100)={0x7ea1, 0x9, 0xa, 0x4, 0x8, 0x5, 0x3c4, 0x9, r8}, &(0x7f0000000140)=0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r4, r5, 0x37, 0xce2d3afaee44ac6a, 0x4}, 0x20) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 0s ago: executing program 3 (id=5749): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={0x44, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x94d}]}]}, 0x44}}, 0x0) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r4, 0x25, 0x0, @void}, 0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) recvmmsg(r7, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000fc0)=""/4096, 0x1000}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000003680)=""/82, 0x52}], 0x2}, 0x8}], 0x2, 0x40000140, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000001c0)=@ethtool_rxnfc={0x32, 0x10, 0x6b6ccdec, {0x10, @udp_ip4_spec={@remote, @loopback, 0x4e21, 0x4e20, 0x5}, {0x0, @broadcast, 0xdf, 0x1, [0x8, 0xffff]}, @tcp_ip6_spec={@mcast1, @loopback, 0x4e23, 0x4e22, 0xe}, {0x0, @random="b872c61f995b", 0x2, 0x101, [0x7fff, 0x2]}, 0x100000000}, 0x7, [0x9, 0x9, 0x9, 0x5, 0x800, 0x2, 0x80000001]}}) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000140)={0xfffa, 0x0, 0x5, 0x1, 0x5, 0x1, 0x2, "abd4b1ceff06c91c18d89b8eed72a3a559831f67", "515864363c0d59ec6502f0879e73183d403c8215"}) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r6, 0x4) kernel console output (not intermixed with test programs): 09][T18546] ip6t_REJECT: ECHOREPLY is not supported [ 490.189990][ T10] IPVS: starting estimator thread 0... [ 490.208118][T18562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3380'. [ 490.273008][T18562] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 490.281165][T18567] syzkaller0: entered promiscuous mode [ 490.311934][T18567] syzkaller0: entered allmulticast mode [ 490.323319][T18564] IPVS: using max 29 ests per chain, 69600 per kthread [ 490.487038][T18579] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3386'. [ 490.837912][T18592] netlink: 'syz.4.3390': attribute type 2 has an invalid length. [ 491.219345][T18613] netlink: 'syz.0.3398': attribute type 1 has an invalid length. [ 491.431788][T18613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.452289][T18620] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 491.558502][T18621] bond1: (slave geneve2): making interface the new active one [ 491.597560][T18621] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 492.428381][T18670] IPVS: Scheduler module ip_vs_sip not found [ 492.993654][T18712] __nla_validate_parse: 10 callbacks suppressed [ 492.993672][T18712] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3421'. [ 493.097471][ T5833] IPVS: starting estimator thread 0... [ 493.103535][T18715] IPVS: ip_vs_add_dest(): server weight less than zero [ 493.193765][T18716] IPVS: using max 24 ests per chain, 57600 per kthread [ 493.260025][T18715] syzkaller0: entered promiscuous mode [ 493.284016][T18715] syzkaller0: entered allmulticast mode [ 493.331766][T18715] syzkaller0: tun_net_xmit 64726 [ 493.359544][T18715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3422'. [ 493.572477][T18715] hsr_slave_1 (unregistering): left promiscuous mode [ 493.602194][ T9993] syzkaller0: tun_net_xmit 70 [ 493.726978][T18747] netlink: 'syz.3.3431': attribute type 2 has an invalid length. [ 493.797505][T18750] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3432'. [ 493.808626][T18750] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3432'. [ 493.846979][T18755] netlink: 'syz.1.3433': attribute type 10 has an invalid length. [ 493.961878][T18757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3434'. [ 493.992272][T18755] team0 (unregistering): Port device team_slave_0 removed [ 494.011537][T18761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3435'. [ 494.060419][T18755] team0 (unregistering): Port device team_slave_1 removed [ 494.248651][T18775] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3438'. [ 494.341390][T18778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3440'. [ 494.566297][T18784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.044939][T18797] xt_CT: You must specify a L4 protocol and not use inversions on it [ 495.086769][T18796] netlink: 'syz.0.3445': attribute type 28 has an invalid length. [ 495.133735][T18796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3445'. [ 496.296718][T18863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3461'. [ 496.356515][T18864] netlink: 'syz.1.3461': attribute type 1 has an invalid length. [ 496.416410][T18866] sock: sock_set_timeout: `syz.0.3462' (pid 18866) tries to set negative timeout [ 496.462194][T18864] 8021q: adding VLAN 0 to HW filter on device bond2 [ 496.524955][T18864] netlink: 'syz.1.3461': attribute type 11 has an invalid length. [ 496.551737][T18863] bond2: (slave geneve2): making interface the new active one [ 496.561508][T18863] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 496.571153][T18874] bond0: entered allmulticast mode [ 496.597316][T18874] bond_slave_0: entered allmulticast mode [ 496.607150][T18874] bond_slave_1: entered allmulticast mode [ 496.655563][T18878] ieee802154 phy0 wpan0: encryption failed: -22 [ 496.878743][T18886] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.886424][T18886] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.037302][T18887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.047583][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.456549][T18919] gre1: entered promiscuous mode [ 497.468696][T18919] gre1: entered allmulticast mode [ 497.550604][T12265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.673792][T18927] Cannot find add_set index 0 as target [ 497.710205][T18927] netlink: 'syz.4.3482': attribute type 1 has an invalid length. [ 497.738973][T18927] netlink: 'syz.4.3482': attribute type 4 has an invalid length. [ 498.153635][T18950] __nla_validate_parse: 10 callbacks suppressed [ 498.153654][T18950] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3488'. [ 498.187554][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.291401][T18956] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 498.542270][T18969] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3495'. [ 498.557430][T18969] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3495'. [ 498.578155][T18967] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3494'. [ 498.588684][T18969] gretap0: entered promiscuous mode [ 498.601046][T18969] gretap0: left promiscuous mode [ 498.632330][T18963] ipvlan2: entered allmulticast mode [ 498.638071][T18963] batadv_slave_1: entered allmulticast mode [ 498.651883][T18963] batman_adv: batadv0: Adding interface: ipvlan2 [ 498.671595][T18963] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.749593][T18963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 498.771944][T18963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 498.782408][T18963] batman_adv: batadv0: Interface activated: ipvlan2 [ 498.850057][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.872706][T18985] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 499.181638][T18992] syzkaller0: entered promiscuous mode [ 499.196262][T18992] syzkaller0: entered allmulticast mode [ 499.230010][T18997] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3501'. [ 499.575027][T19011] netlink: 'syz.3.3505': attribute type 3 has an invalid length. [ 499.666202][T19017] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3508'. [ 499.718986][T19019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3509'. [ 499.770816][T19022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3511'. [ 499.811758][T19022] Bluetooth: MGMT ver 1.23 [ 499.852151][T19025] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3510'. [ 499.916556][T19025] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3510'. [ 500.107172][T12267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.125985][T19034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 500.185719][T19049] netlink: 'syz.4.3518': attribute type 1 has an invalid length. [ 500.743763][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.073899][T19060] netlink: 'syz.0.3519': attribute type 5 has an invalid length. [ 501.360961][T19072] openvswitch: netlink: Key type 343 is out of range max 32 [ 501.391240][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.399447][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.937785][T19108] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 501.968208][T19111] netlink: 'syz.4.3537': attribute type 39 has an invalid length. [ 502.792494][T19153] netlink: 'syz.1.3554': attribute type 1 has an invalid length. [ 502.952707][T19168] rdma_rxe: rxe_newlink: failed to add veth1_vlan [ 503.256945][T19183] netlink: 'syz.4.3561': attribute type 33 has an invalid length. [ 503.278989][T19185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.501108][T19197] __nla_validate_parse: 12 callbacks suppressed [ 503.501127][T19197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3563'. [ 503.576351][T19197] erspan0: entered promiscuous mode [ 503.655773][T19188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3560'. [ 503.714658][T19169] infiniband syz0: set active [ 503.729655][T19169] infiniband syz0: added veth1_vlan [ 503.782104][ T5716] IPVS: starting estimator thread 0... [ 503.812580][T19214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3567'. [ 503.822821][T19214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3567'. [ 503.832761][T19214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3567'. [ 503.842147][T19214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3567'. [ 503.851947][T19214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3567'. [ 503.863953][T19214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3567'. [ 503.874412][T19214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3567'. [ 503.884470][T19214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3567'. [ 503.888580][T19209] IPVS: using max 31 ests per chain, 74400 per kthread [ 503.912909][T19169] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 503.975183][T19169] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 504.009085][T19169] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 504.059303][T19223] xt_l2tp: unknown flags: 10 [ 504.103075][T19169] RDS/IB: syz0: added [ 504.121293][T19169] smc: adding ib device syz0 with port count 1 [ 504.146161][T19169] smc: ib device syz0 port 1 has no pnetid [ 504.307655][T19238] netlink: 'syz.0.3574': attribute type 6 has an invalid length. [ 504.339081][T19238] netlink: 'syz.0.3574': attribute type 4 has an invalid length. [ 504.378028][T19238] netem: change failed [ 504.590670][T19248] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 504.619020][T19247] netlink: 'syz.4.3576': attribute type 1 has an invalid length. [ 504.642937][T19247] netlink: 'syz.4.3576': attribute type 1 has an invalid length. [ 504.651734][T19251] netlink: 'syz.0.3578': attribute type 1 has an invalid length. [ 504.671860][T19247] netlink: 'syz.4.3576': attribute type 8 has an invalid length. [ 504.732460][T19251] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 504.904987][ T5833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.927941][T19259] netlink: 'syz.3.3579': attribute type 3 has an invalid length. [ 505.228696][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.288987][T19268] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 505.680822][T19277] netlink: 'syz.3.3584': attribute type 4 has an invalid length. [ 505.945270][T19283] gtp0: entered promiscuous mode [ 505.958974][T19283] gtp0: entered allmulticast mode [ 506.220767][T19292] netlink: 'syz.4.3589': attribute type 10 has an invalid length. [ 506.258513][T19287] hsr_slave_1 (unregistering): left promiscuous mode [ 506.278473][T19295] netlink: 'syz.0.3592': attribute type 30 has an invalid length. [ 506.334978][T19300] netlink: 'syz.0.3592': attribute type 30 has an invalid length. [ 506.503687][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 506.766391][ T9993] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.787016][ T9993] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.820402][ T9993] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.858177][ T9993] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.262074][T19314] syzkaller1: entered promiscuous mode [ 507.288758][T19314] syzkaller1: entered allmulticast mode [ 507.329142][T19319] Cannot find add_set index 65532 as target [ 507.398258][T19324] netlink: 'syz.3.3599': attribute type 1 has an invalid length. [ 507.793660][ T50] Bluetooth: hci0: command tx timeout [ 507.804428][T19332] xt_l2tp: v2 doesn't support IP mode [ 507.881136][T19339] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 509.221510][T19402] __nla_validate_parse: 38 callbacks suppressed [ 509.221529][T19402] netlink: 776 bytes leftover after parsing attributes in process `syz.4.3624'. [ 509.260186][T19402] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3624'. [ 509.540563][T19405] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.547839][T19405] bridge0: port 2(bridge_slave_1) entered listening state [ 509.555359][T19405] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.562584][T19405] bridge0: port 1(bridge_slave_0) entered listening state [ 509.767497][T19405] bond1: left promiscuous mode [ 509.772435][T19405] veth0_to_bond: left promiscuous mode [ 509.781464][T19405] bond1: left allmulticast mode [ 509.805809][T19405] veth0_to_bond: left allmulticast mode [ 509.822477][T19405] 8021q: adding VLAN 0 to HW filter on device bond1 [ 509.850271][T19405] ipvlan2: left allmulticast mode [ 509.863730][T19405] batadv_slave_1: left allmulticast mode [ 509.922887][T19405] 8021q: adding VLAN 0 to HW filter on device bond3 [ 509.952819][T19410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3627'. [ 510.456070][T19441] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 510.552477][T19448] validate_nla: 3 callbacks suppressed [ 510.552496][T19448] netlink: 'syz.1.3636': attribute type 83 has an invalid length. [ 510.684571][T19442] 8021q: adding VLAN 0 to HW filter on device bond5 [ 510.792444][T19452] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3638'. [ 511.001952][T19458] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3639'. [ 511.113097][T19458] geneve2: entered promiscuous mode [ 511.137085][T19458] geneve2: entered allmulticast mode [ 511.207391][T19465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3642'. [ 511.244860][T19467] netlink: 'syz.3.3643': attribute type 1 has an invalid length. [ 511.268555][T19467] netlink: 'syz.3.3643': attribute type 2 has an invalid length. [ 511.432470][T19470] Cannot find add_set index 0 as target [ 511.478921][T19473] netlink: 'syz.3.3646': attribute type 1 has an invalid length. [ 511.524907][T19473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3646'. [ 511.560192][T19473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3646'. [ 511.619428][T19473] netlink: 'syz.3.3646': attribute type 2 has an invalid length. [ 511.687415][T19473] netlink: 'syz.3.3646': attribute type 2 has an invalid length. [ 511.734431][T19473] netlink: 'syz.3.3646': attribute type 2 has an invalid length. [ 511.853749][T19482] netlink: 'syz.0.3651': attribute type 11 has an invalid length. [ 511.889929][T19482] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3651'. [ 511.957493][T19486] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.3650'. [ 511.976655][T19487] netlink: 'syz.3.3652': attribute type 58 has an invalid length. [ 512.044284][T19486] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 513.697476][T19551] netlink: 'syz.0.3672': attribute type 1 has an invalid length. [ 514.255339][T19578] __nla_validate_parse: 10 callbacks suppressed [ 514.255359][T19578] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3682'. [ 514.282805][T19578] netem: invalid attributes len -24 [ 514.289622][T19578] netem: change failed [ 514.301477][T19581] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3679'. [ 514.545321][T19592] syzkaller1: entered promiscuous mode [ 514.555974][T19592] syzkaller1: entered allmulticast mode [ 514.595368][T19599] sctp: [Deprecated]: syz.1.3688 (pid 19599) Use of int in maxseg socket option. [ 514.595368][T19599] Use struct sctp_assoc_value instead [ 514.626305][T19600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.881516][T19611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3692'. [ 515.184419][T19622] xt_cgroup: path and classid specified [ 515.415577][T19638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3698'. [ 515.455897][T19638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3698'. [ 515.511587][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.519756][T19641] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3698'. [ 515.567984][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.589308][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.669064][T19650] validate_nla: 3 callbacks suppressed [ 515.669084][T19650] netlink: 'syz.0.3702': attribute type 10 has an invalid length. [ 515.687087][T19650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3702'. [ 515.715648][T19653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3700'. [ 515.760944][T19645] syzkaller0: entered promiscuous mode [ 515.769257][T19654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3702'. [ 515.793948][T19657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3704'. [ 518.332871][T19662] netlink: 'syz.1.3705': attribute type 4 has an invalid length. [ 518.487621][T19640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 518.980131][T19693] netlink: 'syz.0.3715': attribute type 1 has an invalid length. [ 519.182860][T19693] 8021q: adding VLAN 0 to HW filter on device bond2 [ 519.336916][T19715] __nla_validate_parse: 3 callbacks suppressed [ 519.336936][T19715] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3721'. [ 519.357095][T19715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3721'. [ 519.381779][T19717] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3722'. [ 519.588627][T19730] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3724'. [ 519.637146][T19730] veth0_to_bond: default FDB implementation only supports local addresses [ 519.696033][T19731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3724'. [ 519.921498][T19743] netlink: 'syz.3.3730': attribute type 32 has an invalid length. [ 519.943661][T19743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3730'. [ 520.192886][T19733] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.200588][T19733] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.215854][T19733] bond0: left allmulticast mode [ 520.220841][T19733] bond_slave_0: left allmulticast mode [ 520.226605][T19733] bond_slave_1: left allmulticast mode [ 520.312432][T19733] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 520.338769][T19731] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 520.515087][T19743] bond1: option coupled_control: invalid value (192) [ 520.636701][T19743] bond1 (unregistering): Released all slaves [ 520.940466][T19767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3737'. [ 521.107408][T19775] xt_cluster: node mask cannot exceed total number of nodes [ 521.520871][T19797] netlink: 'syz.1.3746': attribute type 21 has an invalid length. [ 521.528762][T19796] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3747'. [ 521.528991][T19796] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3747'. [ 521.529190][T19796] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3747'. [ 521.588816][T19797] IPv6: NLM_F_CREATE should be specified when creating new route [ 521.930081][T19815] Cannot find del_set index 4 as target [ 522.681217][T19858] netlink: 'syz.4.3761': attribute type 1 has an invalid length. [ 522.830857][T19853] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 522.852350][T19853] bond6: option packets_per_slave: allowed values 0 - 65535 [ 522.878852][T19853] bond6 (unregistering): Released all slaves [ 523.572220][T19904] netlink: 'syz.3.3778': attribute type 1 has an invalid length. [ 523.601845][T19904] netlink: 'syz.3.3778': attribute type 1 has an invalid length. [ 523.810606][T19911] openvswitch: netlink: IP tunnel dst address not specified [ 523.944193][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 524.229313][T19928] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 524.502876][T19937] netlink: 'syz.0.3785': attribute type 1 has an invalid length. [ 524.516607][T19942] netlink: 'syz.3.3787': attribute type 1 has an invalid length. [ 524.573087][T19937] bond4: entered promiscuous mode [ 524.579653][T19937] 8021q: adding VLAN 0 to HW filter on device bond4 [ 524.620340][T19947] 8021q: adding VLAN 0 to HW filter on device bond4 [ 524.630718][T19947] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 524.643585][T19947] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 524.674716][T19947] bond4: (slave ip6gre1): making interface the new active one [ 524.697378][T19947] ip6gre1: entered promiscuous mode [ 524.714539][T19947] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 524.997683][T19956] __nla_validate_parse: 40 callbacks suppressed [ 524.997701][T19956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3790'. [ 525.298294][T19980] netlink: 'syz.2.3794': attribute type 4 has an invalid length. [ 525.307420][T19977] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3795'. [ 525.333012][T19981] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3796'. [ 525.633017][T19993] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3797'. [ 526.226171][T20024] sctp: [Deprecated]: syz.0.3804 (pid 20024) Use of struct sctp_assoc_value in delayed_ack socket option. [ 526.226171][T20024] Use struct sctp_sack_info instead [ 526.340141][T20033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3806'. [ 526.409739][T20033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.535508][T20033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.734568][T20043] vlan2: entered allmulticast mode [ 526.751605][T20043] bond0: entered allmulticast mode [ 526.770402][T20043] bond_slave_0: entered allmulticast mode [ 526.786891][T20043] bond_slave_1: entered allmulticast mode [ 526.933913][T20059] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 527.204891][T20074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 530.160431][T20073] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 539.306407][ T4942] Bluetooth: hci4: command 0x0405 tx timeout [ 539.784125][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 539.792183][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 549.546760][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 562.826364][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.834093][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.867491][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.874763][ C0] bridge0: topology change detected, propagating [ 569.881447][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.889365][ C0] bridge0: topology change detected, propagating [ 570.027054][T20125] Bluetooth: hci1: command 0x0406 tx timeout [ 585.123586][T20139] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 585.134453][T20139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.572367][T20160] syzkaller0: entered promiscuous mode [ 585.589755][T20160] syzkaller0: entered allmulticast mode [ 585.669033][T20167] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3829'. [ 586.943677][T20196] netlink: 'syz.3.3840': attribute type 1 has an invalid length. [ 587.168068][T20196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 587.236248][T20196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3840'. [ 587.390956][T20216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3844'. [ 587.431911][T20218] netlink: 'syz.4.3845': attribute type 1 has an invalid length. [ 587.519028][T20218] 8021q: adding VLAN 0 to HW filter on device bond6 [ 587.570100][T20221] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3845'. [ 587.599502][T20223] netlink: 81 bytes leftover after parsing attributes in process `syz.2.3846'. [ 587.609248][T20223] netlink: 81 bytes leftover after parsing attributes in process `syz.2.3846'. [ 587.711492][T20220] bond6: (slave dummy0): making interface the new active one [ 587.741796][T20220] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 587.799074][T20221] bond6: (slave dummy0): Releasing active interface [ 588.309608][T20240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3852'. [ 588.339783][T20242] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3854'. [ 588.950419][T20266] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.3859'. [ 590.410488][T20325] x_tables: unsorted underflow at hook 1 [ 590.435722][ T50] block nbd2: Receive control failed (result -32) [ 590.520416][T20334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.571350][T20338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3882'. [ 590.632671][T20342] netlink: 'syz.0.3881': attribute type 21 has an invalid length. [ 590.667088][T20342] netlink: 'syz.0.3881': attribute type 5 has an invalid length. [ 590.686363][T20342] __nla_validate_parse: 1 callbacks suppressed [ 590.686380][T20342] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3881'. [ 590.760056][T20344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3884'. [ 590.832370][T20353] IPv6: NLM_F_CREATE should be specified when creating new route [ 590.844318][T20353] netlink: 'syz.2.3885': attribute type 1 has an invalid length. [ 590.852317][T20353] netlink: 'syz.2.3885': attribute type 4 has an invalid length. [ 590.861386][T20353] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3885'. [ 590.916602][T20357] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3887'. [ 590.929242][T20358] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3887'. [ 590.967465][T20357] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 591.022812][T20358] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 591.115278][T20360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3888'. [ 591.323776][T20360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3888'. [ 591.342596][T20360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3888'. [ 591.459383][T20379] syzkaller1: entered promiscuous mode [ 591.487772][T20379] syzkaller1: entered allmulticast mode [ 591.632457][T20382] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3895'. [ 591.882525][T20388] xt_hashlimit: size too large, truncated to 1048576 [ 592.222566][T20405] netlink: 'syz.0.3904': attribute type 26 has an invalid length. [ 592.479582][T20410] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 592.532376][T20410] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 592.572384][T20410] gretap2: entered promiscuous mode [ 592.582891][T20410] gretap2: entered allmulticast mode [ 593.152314][T20443] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3916'. [ 593.168967][T20448] netlink: 'syz.3.3915': attribute type 4 has an invalid length. [ 593.220338][T20455] netlink: 'syz.3.3915': attribute type 4 has an invalid length. [ 593.770675][T20474] bridge_slave_0: left allmulticast mode [ 593.811028][T20474] bridge_slave_0: left promiscuous mode [ 593.849419][T20474] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.858667][T20478] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 593.951260][T20474] bridge_slave_1: left allmulticast mode [ 593.983611][T20491] netlink: 'syz.3.3928': attribute type 15 has an invalid length. [ 593.987266][T20474] bridge_slave_1: left promiscuous mode [ 594.004527][T20474] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.053722][T20474] bond0: (slave bond_slave_0): Releasing backup interface [ 594.099284][T20474] bond0: (slave bond_slave_1): Releasing backup interface [ 594.138349][T20474] team0: Port device team_slave_0 removed [ 594.155106][T20474] team0: Port device team_slave_1 removed [ 594.172941][T20474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.189662][T20474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.203643][T20474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.217325][T20474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.228776][T20474] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 594.585697][T20507] xt_hashlimit: size too large, truncated to 1048576 [ 594.970744][T20523] syzkaller0: entered promiscuous mode [ 594.980469][T20523] syzkaller0: entered allmulticast mode [ 595.030758][T20527] 8021q: adding VLAN 0 to HW filter on device bond6 [ 595.046399][T20523] simple: basic_2 [ 595.272785][T20540] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 595.796721][T20566] __nla_validate_parse: 5 callbacks suppressed [ 595.796742][T20566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3946'. [ 595.824628][T20565] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20000 [ 595.839555][T20565] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.3947'. [ 595.859736][T20568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3948'. [ 596.042037][T20576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3949'. [ 596.130973][T20577] syzkaller1: entered promiscuous mode [ 596.141723][T20577] syzkaller1: entered allmulticast mode [ 596.239042][T20584] bond7 (unregistering): Released all slaves [ 596.256441][T20588] netlink: 'syz.4.3952': attribute type 2 has an invalid length. [ 596.320767][T20591] netlink: 'syz.4.3952': attribute type 2 has an invalid length. [ 596.347947][T20592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3955'. [ 597.197249][T20615] nftables ruleset with unbound chain [ 599.026969][T20576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 599.302885][T20629] netlink: 'syz.4.3962': attribute type 32 has an invalid length. [ 599.381286][T20631] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3966'. [ 599.587733][T20642] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3970'. [ 599.611822][T20643] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3970'. [ 600.645156][T20691] Cannot find add_set index 3 as target [ 600.756310][T20697] netlink: 'syz.3.3983': attribute type 4 has an invalid length. [ 600.947142][T20709] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3984'. [ 601.420221][T20686] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 601.689649][T20719] netlink: 'syz.0.3987': attribute type 1 has an invalid length. [ 601.716274][T20719] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3987'. [ 601.732195][T20721] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 602.045985][T20745] bond0: option ad_select: unable to set because the bond device is up [ 602.276718][T20756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3999'. [ 602.305807][T20756] veth1_macvtap: left promiscuous mode [ 602.447632][T20767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4002'. [ 602.515135][T20770] netlink: 'syz.4.4003': attribute type 16 has an invalid length. [ 602.523188][T20770] netlink: 'syz.4.4003': attribute type 17 has an invalid length. [ 602.564869][T20770] 0·: left allmulticast mode [ 602.569588][T20770] hsr_slave_0: left allmulticast mode [ 602.601328][T20770] vlan2: left promiscuous mode [ 602.606434][T20770] bridge0: left promiscuous mode [ 602.612875][T20770] bond2: left allmulticast mode [ 602.620195][T20770] 8021q: adding VLAN 0 to HW filter on device bond2 [ 602.643704][T20770] 8021q: adding VLAN 0 to HW filter on device bond4 [ 602.656047][T20770] gtp0: left promiscuous mode [ 602.660798][T20770] gtp0: left allmulticast mode [ 602.670218][T20770] geneve2: left promiscuous mode [ 602.675631][T20770] geneve2: left allmulticast mode [ 602.910696][T20776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.041857][T20780] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4006'. [ 603.199210][T20789] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 603.236683][T20791] netlink: 'syz.3.4011': attribute type 28 has an invalid length. [ 603.245630][T20791] netlink: 'syz.3.4011': attribute type 3 has an invalid length. [ 603.257840][T20791] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4011'. [ 603.427320][T20795] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4013'. [ 603.442346][T20795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 603.461986][T20795] netlink: 'syz.3.4013': attribute type 1 has an invalid length. [ 603.661787][T20799] syzkaller0: entered promiscuous mode [ 603.667775][T20799] syzkaller0: entered allmulticast mode [ 605.109650][T20801] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 605.120497][T20801] syzkaller0: entered promiscuous mode [ 605.127780][T20801] syzkaller0: entered allmulticast mode [ 605.381795][T20762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 605.583457][T20809] xt_l2tp: missing protocol rule (udp|l2tpip) [ 605.590719][T20807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4018'. [ 605.610040][T20805] netlink: 'syz.1.4016': attribute type 10 has an invalid length. [ 605.839201][T20823] netlink: 'syz.4.4021': attribute type 2 has an invalid length. [ 605.937239][T20825] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 605.996290][T20835] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4021'. [ 606.242369][T20845] smc: net device team0 applied user defined pnetid SYZ2 [ 607.001337][T20886] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4037'. [ 607.020613][T20888] sctp: [Deprecated]: syz.1.4038 (pid 20888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 607.020613][T20888] Use struct sctp_sack_info instead [ 607.071499][T20888] sctp: [Deprecated]: syz.1.4038 (pid 20888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 607.071499][T20888] Use struct sctp_sack_info instead [ 607.092375][T20892] syzkaller0: entered promiscuous mode [ 607.104695][T20888] sctp: [Deprecated]: syz.1.4038 (pid 20888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 607.104695][T20888] Use struct sctp_sack_info instead [ 607.121467][T20892] syzkaller0: entered allmulticast mode [ 607.718068][T20922] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 607.732988][ T746] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.874791][T20928] netlink: 'syz.2.4051': attribute type 10 has an invalid length. [ 607.898059][T20928] syz_tun: entered promiscuous mode [ 607.920466][T20928] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 610.061523][T20894] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 610.382169][T20945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4058'. [ 610.570675][T20955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4060'. [ 610.615369][T20957] sch_fq: defrate 0 ignored. [ 610.629266][T20955] veth0_macvtap: left promiscuous mode [ 610.847537][T20972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4064'. [ 610.851506][T20960] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 611.130038][T20984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4067'. [ 611.156126][T20983] syzkaller0: entered promiscuous mode [ 611.187667][T20983] syzkaller0: entered allmulticast mode [ 611.453283][T20994] IPVS: length: 43 != 8 [ 611.661074][T21002] sctp: [Deprecated]: syz.0.4074 (pid 21002) Use of int in max_burst socket option. [ 611.661074][T21002] Use struct sctp_assoc_value instead [ 611.901914][T21016] syzkaller0: entered promiscuous mode [ 611.930066][T21016] syzkaller0: entered allmulticast mode [ 612.139657][T21036] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4082'. [ 612.156438][T21036] netlink: 21 bytes leftover after parsing attributes in process `syz.3.4082'. [ 612.181430][T21037] openvswitch: netlink: Key type 1632 is out of range max 32 [ 612.229456][T21036] netlink: 21 bytes leftover after parsing attributes in process `syz.3.4082'. [ 612.291051][T21036] netlink: 'syz.3.4082': attribute type 10 has an invalid length. [ 612.368300][T21036] team0 (unregistering): Port device team_slave_0 removed [ 612.437299][T21036] team0 (unregistering): Port device team_slave_1 removed [ 612.667404][T21060] netlink: 'syz.0.4088': attribute type 6 has an invalid length. [ 612.669577][T21059] ipvlan2: entered promiscuous mode [ 612.719851][T21066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4088'. [ 613.120135][T21089] netlink: 'syz.0.4093': attribute type 4 has an invalid length. [ 613.168037][T21086] syzkaller0: entered promiscuous mode [ 613.196168][T21086] syzkaller0: entered allmulticast mode [ 613.238411][T21094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4097'. [ 613.301017][T21083] syzkaller0: entered promiscuous mode [ 613.307668][T21083] syzkaller0: entered allmulticast mode [ 614.809300][ T29] IPVS: starting estimator thread 0... [ 614.904420][T21111] IPVS: using max 31 ests per chain, 74400 per kthread [ 616.956858][T21116] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.4104'. [ 616.997211][T21117] netlink: 'syz.1.4105': attribute type 1 has an invalid length. [ 617.050551][T21118] netlink: 'syz.4.4104': attribute type 2 has an invalid length. [ 617.060733][T21118] netlink: 'syz.4.4104': attribute type 1 has an invalid length. [ 619.169032][T21101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4101'. [ 619.317073][T21119] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 619.329884][T21119] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 619.344288][T21119] bond5: (slave ip6gre1): making interface the new active one [ 619.352872][T21119] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 619.457807][T21127] : entered promiscuous mode [ 619.768142][T21151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4111'. [ 619.790253][T21136] syzkaller0: entered promiscuous mode [ 619.799289][T21136] syzkaller0: entered allmulticast mode [ 619.831653][T21149] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4111'. [ 619.908998][T21151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4111'. [ 619.997395][T21151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4111'. [ 620.047234][T21151] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4111'. [ 620.297213][T21166] syzkaller0: entered promiscuous mode [ 620.303065][T21166] syzkaller0: entered allmulticast mode [ 620.511454][T21180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4121'. [ 620.530996][T21182] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4122'. [ 620.552427][T21182] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4122'. [ 621.390331][T21223] xt_hl: Unknown TTL match mode: 255 [ 623.585235][T21214] __nla_validate_parse: 7 callbacks suppressed [ 623.585255][T21214] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4128'. [ 623.987472][T21257] netlink: 'syz.1.4135': attribute type 29 has an invalid length. [ 624.018942][T21253] vlan1: entered allmulticast mode [ 624.029790][T21253] batadv_slave_1: entered allmulticast mode [ 624.091268][T21253] netlink: 284 bytes leftover after parsing attributes in process `syz.0.4140'. [ 624.161718][T21253] gre3: entered promiscuous mode [ 624.171888][T21267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4143'. [ 624.187436][T21267] block nbd4: Unsupported socket: should be TCP or UNIX. [ 624.282445][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.290215][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.438620][T21270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4144'. [ 624.439899][T21275] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4144'. [ 624.505107][T21275] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4144'. [ 624.515717][T21279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4146'. [ 624.517511][T21270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4144'. [ 624.540575][T21275] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4144'. [ 624.557130][T21270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4144'. [ 625.296582][T21311] bond0: entered promiscuous mode [ 625.310588][T21311] bond_slave_0: entered promiscuous mode [ 625.319477][T21311] bond_slave_1: entered promiscuous mode [ 625.340355][T21311] gretap0: entered promiscuous mode [ 625.378427][T21311] hsr1: entered promiscuous mode [ 625.559994][T21323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 626.044179][T21344] netdevsim netdevsim2 : renamed from netdevsim0 [ 626.078665][T21350] batadv_slave_1: entered promiscuous mode [ 626.228772][T21340] batadv_slave_1: left promiscuous mode [ 627.233362][T21417] netlink: 'syz.3.4183': attribute type 1 has an invalid length. [ 627.322037][T21417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 627.524104][T21421] bond2: (slave geneve2): making interface the new active one [ 627.546110][T21421] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 627.770909][T21444] syzkaller0: entered promiscuous mode [ 627.782126][T21444] syzkaller0: entered allmulticast mode [ 627.886660][T21447] block nbd0: reconnected socket [ 628.131874][T21464] IPVS: length: 239 != 24 [ 628.145920][T21465] IPVS: length: 239 != 24 [ 628.537193][ T50] block nbd0: Receive control failed (result -32) [ 628.571501][T21482] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 628.645662][T21490] __nla_validate_parse: 66 callbacks suppressed [ 628.645683][T21490] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4208'. [ 628.788346][T21494] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4205'. [ 628.812169][T21496] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4210'. [ 629.012817][T21500] netlink: 'syz.1.4212': attribute type 64 has an invalid length. [ 629.304392][T21515] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4218'. [ 629.348608][T21518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4219'. [ 629.401218][T21522] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4220'. [ 629.616414][T21531] netlink: 288 bytes leftover after parsing attributes in process `syz.4.4224'. [ 629.700816][T21536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4226'. [ 630.490863][T21582] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 630.779556][T21596] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 631.147690][T21613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4248'. [ 631.164923][T21613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4248'. [ 631.226357][T21611] netlink: 'syz.0.4247': attribute type 9 has an invalid length. [ 631.679735][T21641] netlink: 'syz.4.4256': attribute type 11 has an invalid length. [ 633.218328][T21725] netlink: 'syz.3.4277': attribute type 2 has an invalid length. [ 633.237679][T21712] bond6: entered promiscuous mode [ 633.266322][T21712] bond6: entered allmulticast mode [ 633.275842][T21725] netlink: 'syz.3.4277': attribute type 11 has an invalid length. [ 633.289259][T21712] 8021q: adding VLAN 0 to HW filter on device bond6 [ 633.341234][T21714] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 633.611925][T21741] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 633.689173][T21736] syzkaller1: entered promiscuous mode [ 633.708024][T21736] syzkaller1: entered allmulticast mode [ 634.092149][T21761] __nla_validate_parse: 7 callbacks suppressed [ 634.092171][T21761] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4287'. [ 634.165993][T21761] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4287'. [ 634.174583][T21764] netlink: 'syz.0.4288': attribute type 1 has an invalid length. [ 634.213463][T21764] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4288'. [ 634.252250][T21764] netlink: 654 bytes leftover after parsing attributes in process `syz.0.4288'. [ 634.290329][T21764] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4288'. [ 634.489640][T21775] netlink: 'syz.1.4291': attribute type 1 has an invalid length. [ 634.532976][T21775] netlink: 'syz.1.4291': attribute type 1 has an invalid length. [ 634.564572][T21775] netlink: 'syz.1.4291': attribute type 1 has an invalid length. [ 634.598000][T21779] xt_CT: No such helper "syz1" [ 635.097799][T21805] Can't find ip_set type hash:ip,por [ 635.290149][T21817] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4304'. [ 635.670118][T21827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4308'. [ 635.702361][T21834] netlink: 'syz.1.4310': attribute type 1 has an invalid length. [ 635.720922][T21834] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4310'. [ 635.781743][T21826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 635.827372][T21836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4311'. [ 635.857714][T21839] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 635.895074][T21839] bond0: (slave bond_slave_1): Releasing backup interface [ 635.912380][T21839] bond_slave_1: left promiscuous mode [ 636.035151][T21847] netlink: 'syz.1.4314': attribute type 1 has an invalid length. [ 636.054635][T21847] netlink: 'syz.1.4314': attribute type 4 has an invalid length. [ 636.066169][T21847] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4314'. [ 636.126770][T21847] bond7: entered promiscuous mode [ 636.226180][T21854] netlink: 'syz.1.4317': attribute type 1 has an invalid length. [ 636.405159][T21863] netlink: 'syz.2.4318': attribute type 16 has an invalid length. [ 636.418751][T21863] netlink: 'syz.2.4318': attribute type 17 has an invalid length. [ 636.539257][T21856] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 636.560300][T21856] bond8: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 636.577580][T21856] bond8: (slave vxcan3): making interface the new active one [ 636.586477][T21856] bond8: (slave vxcan3): Enslaving as an active interface with an up link [ 636.852192][T21860] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 636.875069][T21860] bond8: (slave vxcan5): Enslaving as a backup interface with an up link [ 636.949330][T21863] syz_tun: left promiscuous mode [ 637.069317][T21863] 8021q: adding VLAN 0 to HW filter on device  [ 637.115418][T21863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 637.144725][T21863] veth0_to_team: entered promiscuous mode [ 637.160558][T21863] vlan2: left allmulticast mode [ 637.172107][T21863] mac80211_hwsim hwsim34 wlan0: left allmulticast mode [ 637.210398][T21863] 8021q: adding VLAN 0 to HW filter on device bond4 [ 637.228272][T21863] 8021q: adding VLAN 0 to HW filter on device bond5 [ 637.238345][T21863] bond5: entered promiscuous mode [ 637.244131][T21863] macvlan5: left promiscuous mode [ 637.249297][T21863] macvlan5: left allmulticast mode [ 637.256704][T21863] bond5: entered allmulticast mode [ 637.263777][T21863] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 637.314164][T21863] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 638.198977][T21933] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 638.255756][T21942] openvswitch: netlink: Key type 30 is not supported [ 638.936057][T21964] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 639.706168][T21998] __nla_validate_parse: 7 callbacks suppressed [ 639.706190][T21998] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.4351'. [ 639.785062][ T746] wlan1: Trigger new scan to find an IBSS to join [ 639.811925][T21998] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 640.355823][T22025] sctp: [Deprecated]: syz.1.4357 (pid 22025) Use of int in max_burst socket option. [ 640.355823][T22025] Use struct sctp_assoc_value instead [ 640.432423][T22029] bond7: entered allmulticast mode [ 640.484291][T22032] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4358'. [ 640.616118][T22034] bond8: Removing last ns target with arp_interval on [ 640.631304][T22037] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4359'. [ 640.658083][T22034] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4359'. [ 640.696612][T22034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4359'. [ 640.725266][T22034] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4359'. [ 641.125317][T22054] syzkaller0: entered promiscuous mode [ 641.136223][T22054] syzkaller0: entered allmulticast mode [ 642.689164][T22099] x_tables: unsorted entry at hook 1 [ 644.570921][T22124] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4383'. [ 644.624087][T22124] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4383'. [ 644.824778][ T9993] wlan1: Trigger new scan to find an IBSS to join [ 645.308020][T22164] x_tables: duplicate entry at hook 2 [ 645.411151][T22167] Cannot find set identified by id 65534 to match [ 645.437709][T22167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4396'. [ 645.457626][T22167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4396'. [ 645.730187][T22186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4399'. [ 645.752200][ T13] wlan1: Creating new IBSS network, BSSID 16:fa:ad:35:02:44 [ 645.775245][T22186] validate_nla: 1 callbacks suppressed [ 645.775262][T22186] netlink: 'syz.4.4399': attribute type 1 has an invalid length. [ 645.906947][T22186] 8021q: adding VLAN 0 to HW filter on device bond9 [ 646.014864][T22196] bond7: entered promiscuous mode [ 646.082747][T22203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 646.188804][T22205] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.4405'. [ 646.550641][T22218] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4409'. [ 646.567993][T22218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4409'. [ 646.602476][T22221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4409'. [ 646.611744][T22224] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4411'. [ 646.672639][T22221] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4409'. [ 646.756878][T22223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4411'. [ 646.804100][T22223] openvswitch: netlink: Flow actions attr not present in new flow. [ 647.047682][T22229] wg1 speed is unknown, defaulting to 1000 [ 647.057241][T22234] tipc: Enabling of bearer rejected, failed to enable media [ 647.147619][T22239] SET target dimension over the limit! [ 647.644211][T22257] netlink: 'syz.3.4421': attribute type 24 has an invalid length. [ 647.828998][T22260] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 647.922444][T22260] bond3 (unregistering): Released all slaves [ 648.271609][T22279] tipc: Started in network mode [ 648.285374][T22279] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 648.315556][T22279] tipc: Enabling of bearer rejected, failed to enable media [ 648.500173][T22284] sctp: [Deprecated]: syz.2.4429 (pid 22284) Use of struct sctp_assoc_value in delayed_ack socket option. [ 648.500173][T22284] Use struct sctp_sack_info instead [ 648.765291][T22296] netlink: 'syz.3.4435': attribute type 11 has an invalid length. [ 648.788769][T22299] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 648.862863][T22298] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 648.897004][T22298] bond8: (slave lo): Enslaving as an active interface with an up link [ 648.908521][T22298] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 649.108526][T22314] ieee802154 phy0 wpan0: encryption failed: -22 [ 649.332107][T22322] netlink: 'syz.3.4442': attribute type 1 has an invalid length. [ 649.505002][T22322] 8021q: adding VLAN 0 to HW filter on device bond3 [ 649.648661][T22328] bond3: (slave geneve3): making interface the new active one [ 649.739274][T22328] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 650.286804][T22362] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 650.304939][T22362] syzkaller1: Refused to change device type [ 650.525602][T22388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 650.541983][T22388] netlink: 'syz.1.4460': attribute type 10 has an invalid length. [ 651.119413][T22413] : entered promiscuous mode [ 651.130032][T22417] netlink: 'syz.2.4469': attribute type 1 has an invalid length. [ 651.170113][T22419] netlink: 'syz.3.4470': attribute type 1 has an invalid length. [ 651.237703][T22426] __nla_validate_parse: 9 callbacks suppressed [ 651.237718][T22426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4470'. [ 651.285741][T22428] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 651.299511][T22419] bond4: entered promiscuous mode [ 651.306066][T22419] 8021q: adding VLAN 0 to HW filter on device bond4 [ 651.330324][T22424] team0: Port device gretap2 added [ 651.396097][T22426] 8021q: adding VLAN 0 to HW filter on device bond4 [ 651.431151][T22426] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 651.456340][T22426] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 651.506547][T22426] bond4: (slave vti0): making interface the new active one [ 651.528573][T22434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4475'. [ 651.542152][T22426] vti0: entered promiscuous mode [ 651.568340][T22426] bond4: (slave vti0): Enslaving as an active interface with an up link [ 651.615313][T22444] sit4: entered promiscuous mode [ 651.632146][T22444] sit4: entered allmulticast mode [ 652.096930][T22471] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 652.149258][T22471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4483'. [ 652.361590][T22476] syzkaller0: entered promiscuous mode [ 652.385964][T22476] syzkaller0: entered allmulticast mode [ 652.575457][T22484] IPv6: NLM_F_CREATE should be specified when creating new route [ 652.598358][T22484] netlink: 'syz.3.4492': attribute type 1 has an invalid length. [ 652.646707][T22484] 8021q: adding VLAN 0 to HW filter on device bond5 [ 653.249492][T22528] netlink: 'syz.3.4504': attribute type 1 has an invalid length. [ 653.287401][T22528] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4504'. [ 653.374960][T22527] netlink: 'syz.2.4503': attribute type 2 has an invalid length. [ 653.526798][T22540] Cannot find set identified by id 1 to match [ 653.727152][T22550] netlink: 'syz.1.4511': attribute type 1 has an invalid length. [ 653.842144][T22550] bond9: (slave ipip0): The slave device specified does not support setting the MAC address [ 653.870087][T22550] bond9: (slave ipip0): Error -95 calling set_mac_address [ 653.947973][T22566] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4516'. [ 654.273580][T22590] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 654.481554][T22600] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4524'. [ 654.511475][T22602] netlink: 'syz.0.4522': attribute type 10 has an invalid length. [ 654.570151][T22602] team0: Port device dummy0 added [ 654.731833][T22609] syzkaller0: entered promiscuous mode [ 654.753030][T22609] syzkaller0: entered allmulticast mode [ 655.057995][T22621] netlink: 'syz.1.4530': attribute type 1 has an invalid length. [ 655.087307][T22621] bond10: entered promiscuous mode [ 655.092988][T22621] 8021q: adding VLAN 0 to HW filter on device bond10 [ 655.128731][T22621] bond10: (slave bridge5): making interface the new active one [ 655.137153][T22621] bridge5: entered promiscuous mode [ 655.151401][T22621] bridge5: left promiscuous mode [ 655.248641][T22625] : entered promiscuous mode [ 655.338052][T22603] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 655.591640][T22637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4534'. [ 655.674759][T22642] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4535'. [ 655.989806][T22667] netlink: 'syz.4.4542': attribute type 1 has an invalid length. [ 656.688887][T22698] netlink: 'syz.2.4551': attribute type 4 has an invalid length. [ 656.710302][T22698] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4551'. [ 656.729042][T22699] netlink: 'syz.3.4553': attribute type 1 has an invalid length. [ 656.761798][T22700] netlink: 'syz.3.4553': attribute type 1 has an invalid length. [ 656.807165][T22698] .`: renamed from bond0 (while UP) [ 656.898679][T22699] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 657.008690][T22700] bond6: entered promiscuous mode [ 657.047357][T22700] 8021q: adding VLAN 0 to HW filter on device bond6 [ 657.215001][T22718] wg1 speed is unknown, defaulting to 1000 [ 657.257705][T22723] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4557'. [ 657.983804][T22750] syzkaller0: entered promiscuous mode [ 658.002430][T22750] syzkaller0: entered allmulticast mode [ 658.126758][T22760] 8021q: adding VLAN 0 to HW filter on device bond11 [ 658.190058][T22760] 8021q: adding VLAN 0 to HW filter on device bond11 [ 658.197900][T22760] bond11: (slave xfrm1): The slave device specified does not support setting the MAC address [ 658.209355][T22760] bond11: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 658.230274][T22760] bond11: (slave xfrm1): making interface the new active one [ 658.240875][T22760] bond11: (slave xfrm1): Enslaving as an active interface with an up link [ 658.378392][T22769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4572'. [ 658.417456][T22769] bond12: Unable to set up delay as MII monitoring is disabled [ 658.433344][T22769] bond12 (unregistering): Released all slaves [ 658.874355][T22775] xt_TCPMSS: Only works on TCP SYN packets [ 660.173417][ T8899] dvmrp0: left allmulticast mode [ 660.494840][ T8899] bond0 (unregistering): (slave geneve2): Releasing active interface [ 660.948278][T22752] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 661.257690][ T8899] bond1 (unregistering): Released all slaves [ 661.309654][ T8899] bond2 (unregistering): Released all slaves [ 661.350011][T22798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4578'. [ 661.392912][ T8899] bond0 (unregistering): Released all slaves [ 661.432437][ T8899] bond3 (unregistering): Released all slaves [ 661.474512][ T8899] bond4 (unregistering): Released all slaves [ 661.547885][ T8899] bond5 (unregistering): Released all slaves [ 661.631615][ T8899] bond6 (unregistering): (slave veth3): Releasing active interface [ 661.675789][ T8899] bond6 (unregistering): Released all slaves [ 661.779541][T22819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4581'. [ 661.805654][ T8899] bond7 (unregistering): Released all slaves [ 661.858867][ T8899] bond8 (unregistering): Released all slaves [ 661.922443][ T8899] bond9 (unregistering): Released all slaves [ 662.046024][ T8899] bond10 (unregistering): Released all slaves [ 662.105958][ T8899] bond11 (unregistering): Released all slaves [ 662.162302][ T8899] bond12 (unregistering): Released all slaves [ 662.226537][ T8899] bond13 (unregistering): Released all slaves [ 662.576081][ T8899] tipc: Left network mode [ 663.071757][T22853] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4588'. [ 663.147224][T22855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4591'. [ 663.177818][T22845] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 663.246539][T22845] bond7 (unregistering): Released all slaves [ 664.017454][T22850] wg1 speed is unknown, defaulting to 1000 [ 664.892844][T22920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4604'. [ 665.000511][T22929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4604'. [ 665.074398][T22929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4604'. [ 665.101332][ T60] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.122095][ T60] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.151135][ T60] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.339559][ T60] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.395190][T22933] netlink: 'syz.2.4607': attribute type 6 has an invalid length. [ 666.858788][T22985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4614'. [ 666.970961][T22988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4616'. [ 667.011876][T22989] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 667.032624][T22988] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4616'. [ 667.199890][T22988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4616'. [ 667.235019][T22988] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4616'. [ 667.430592][T22999] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.4618'. [ 667.489552][ T8899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.499626][ T8899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.560225][ T8899] veth0_macvtap: left promiscuous mode [ 667.571700][ T8899] : left promiscuous mode [ 667.583881][ T8899] veth0_vlan: left promiscuous mode [ 668.040856][ T8899] team0 (unregistering): Port device team_slave_1 removed [ 668.072497][ T8899] team0 (unregistering): Port device team_slave_0 removed [ 668.204354][ T8899] team0 (unregistering): Port device dummy0 removed [ 668.286828][ T746] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 668.298250][ T746] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 668.313973][T12273] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 668.391758][T23004] vlan2: entered promiscuous mode [ 668.397868][T23004] veth1_to_bridge: entered promiscuous mode [ 668.624831][T23011] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4620'. [ 669.104711][T23031] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 669.124572][T23035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4626'. [ 669.225092][T11081] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 669.273937][T23042] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4624'. [ 669.384771][T12273] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 669.556725][ T8899] IPVS: stop unused estimator thread 0... [ 669.592495][T22953] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 669.630077][T22953] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 669.678548][T23054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4630'. [ 669.995796][T23061] bond12: option lp_interval: invalid value (0) [ 670.002867][T23061] bond12: option lp_interval: allowed values 1 - 2147483647 [ 670.029558][T23061] bond12 (unregistering): Released all slaves [ 670.172419][T22953] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 670.191581][T22953] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 670.524451][T22953] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 670.550963][T22953] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 670.747903][T23092] team0: Device vlan3 is already an upper device of the team interface [ 670.802693][T23097] netlink: 'syz.3.4640': attribute type 1 has an invalid length. [ 670.845883][T23097] netlink: 'syz.3.4640': attribute type 1 has an invalid length. [ 670.880338][T23097] netlink: 'syz.3.4640': attribute type 8 has an invalid length. [ 670.938558][T22953] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 670.959154][T22953] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 671.026639][T23101] team0: Device vlan3 is already an upper device of the team interface [ 671.072781][T23112] xt_TPROXY: Can be used only with -p tcp or -p udp [ 671.107782][T23110] team0: Device gtp2 is up. Set it down before adding it as a team port [ 671.589106][T23127] netlink: 'syz.4.4644': attribute type 21 has an invalid length. [ 671.748823][T23127] bond12: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 671.765929][T23127] bond12 (unregistering): Released all slaves [ 671.798037][T23139] nbd: nbd3 already in use [ 672.052027][T23147] __nla_validate_parse: 6 callbacks suppressed [ 672.052049][T23147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4649'. [ 672.092124][T23153] netlink: 'syz.3.4650': attribute type 11 has an invalid length. [ 672.128707][T23153] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.4650'. [ 672.227515][T23158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4651'. [ 672.263424][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 672.489927][T23174] netlink: 'syz.1.4654': attribute type 11 has an invalid length. [ 672.512453][T23172] netlink: 'syz.2.4655': attribute type 1 has an invalid length. [ 672.534824][T23174] netlink: 'syz.1.4654': attribute type 11 has an invalid length. [ 672.548823][T23174] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4654'. [ 672.685289][T23172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.868849][T23186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4657'. [ 673.001517][T23180] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4656'. [ 673.015110][T23180] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4656'. [ 673.247934][T23180] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4656'. [ 673.297569][T23180] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4656'. [ 673.439304][T23209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4663'. [ 673.807094][T23221] syzkaller1: entered promiscuous mode [ 673.845220][T23221] syzkaller1: entered allmulticast mode [ 674.467702][T23243] wireguard0: entered promiscuous mode [ 674.502094][T23243] wireguard0: entered allmulticast mode [ 674.726783][T23261] netlink: 'syz.3.4676': attribute type 3 has an invalid length. [ 674.767101][T23261] netlink: 'syz.3.4676': attribute type 1 has an invalid length. [ 675.132626][T23280] netlink: 'syz.3.4681': attribute type 12 has an invalid length. [ 675.581830][T23301] veth0: entered promiscuous mode [ 675.624338][T23301] 8021q: VLANs not supported on wlan0 [ 675.674095][T23293] veth0: left promiscuous mode [ 676.059072][ T50] block nbd4: Receive control failed (result -32) [ 676.176193][T23328] x_tables: unsorted entry at hook 1 [ 676.740996][T23352] openvswitch: netlink: IPv4 tun info is not correct [ 676.766655][T23359] netlink: 'syz.3.4700': attribute type 1 has an invalid length. [ 677.278334][T23357] veth5: entered promiscuous mode [ 677.291453][T23354] syzkaller1: entered promiscuous mode [ 677.300568][T23354] syzkaller1: entered allmulticast mode [ 677.424849][T23369] geneve3: entered promiscuous mode [ 677.434218][T23369] geneve3: entered allmulticast mode [ 677.460563][T23366] syzkaller1: entered promiscuous mode [ 677.467805][T23366] syzkaller1: entered allmulticast mode [ 677.720562][T23396] __nla_validate_parse: 16 callbacks suppressed [ 677.720585][T23396] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4707'. [ 677.903868][T23403] only policy match revision 0 supported [ 677.903889][T23403] unable to load match [ 678.218668][T23420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4715'. [ 678.285624][T23429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4715'. [ 678.369335][T23420] xfrm1: entered promiscuous mode [ 678.402814][T23420] xfrm1: entered allmulticast mode [ 679.254470][T23463] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4726'. [ 679.319510][T23465] openvswitch: netlink: IP tunnel dst address not specified [ 679.824040][T23485] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4732'. [ 679.860709][T23497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4734'. [ 679.970636][T23498] netlink: 'syz.3.4734': attribute type 10 has an invalid length. [ 680.030123][T23505] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4736'. [ 680.067025][T23497] 8021q: adding VLAN 0 to HW filter on device bond7 [ 680.174840][T23498] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.182707][T23498] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.223606][T23498] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.230864][T23498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.238665][T23498] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.245906][T23498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.322522][T23498] bridge0: entered allmulticast mode [ 680.340326][T23498] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 680.387850][T23505] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4736'. [ 680.585855][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 680.660998][T23528] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 681.354933][T23545] netlink: 'syz.2.4744': attribute type 12 has an invalid length. [ 681.398437][T23545] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4744'. [ 681.662921][T23570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4749'. [ 681.745390][T23570] netlink: 'syz.0.4749': attribute type 7 has an invalid length. [ 682.055057][T23585] syzkaller0: entered promiscuous mode [ 682.083206][T23585] syzkaller0: entered allmulticast mode [ 682.267280][T23603] netlink: 'syz.3.4757': attribute type 8 has an invalid length. [ 682.301886][T23603] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.309285][T23603] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.670108][T23624] netlink: 'syz.4.4763': attribute type 1 has an invalid length. [ 682.817095][T23630] netlink: 'syz.4.4763': attribute type 21 has an invalid length. [ 682.954981][T23624] 8021q: adding VLAN 0 to HW filter on device bond12 [ 682.995337][T23637] netlink: 'syz.1.4765': attribute type 1 has an invalid length. [ 683.022537][T23636] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 683.089796][T23642] __nla_validate_parse: 4 callbacks suppressed [ 683.092610][T23642] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4768'. [ 683.505548][T23660] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4774'. [ 683.508191][T23658] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:52496 [ 683.564238][T23665] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 683.894281][T23683] s5ÿÿø: renamed from vlan1 (while UP) [ 683.971879][T23688] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4782'. [ 684.270626][T23698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4785'. [ 684.742463][T23721] IPv6: sit3: Disabled Multicast RS [ 684.785060][T23721] sit3: entered allmulticast mode [ 684.960901][T23731] sock: sock_timestamping_bind_phc: sock not bind to device [ 685.021793][T23733] netlink: 'syz.4.4794': attribute type 21 has an invalid length. [ 685.058847][T23733] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4794'. [ 685.102500][T23733] netlink: 'syz.4.4794': attribute type 11 has an invalid length. [ 685.322800][T23740] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 685.381924][T23744] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4796'. [ 685.710582][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.718027][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.621150][ T9992] dvmrp0: left allmulticast mode [ 687.222097][ T9992] team0: Port device ip6tnl2 removed [ 687.318841][ T9992] bond2 (unregistering): (slave xfrm1): Releasing backup interface [ 687.349036][ T9992] bond8 (unregistering): (slave vti0): Releasing backup interface [ 687.357355][ T9992] vti0 (unregistering): left promiscuous mode [ 687.480490][ T9992] bond11 (unregistering): (slave gretap2): Releasing active interface [ 687.525056][ T9992] bond5 (unregistering): (slave geneve4): Releasing active interface [ 687.559478][ T9992] bond3 (unregistering): (slave geneve3): Releasing active interface [ 687.578745][ T9992] bond1 (unregistering): (slave geneve2): Releasing active interface [ 687.893166][ T9992] bond11 (unregistering): (slave bridge5): Releasing active interface [ 688.231377][ T9992] bond1 (unregistering): Released all slaves [ 688.266535][ T9992] bond0 (unregistering): Released all slaves [ 688.307308][ T9992] bond2 (unregistering): Released all slaves [ 688.331080][ T9992] bond3 (unregistering): Released all slaves [ 688.350906][ T9992] bond4 (unregistering): Released all slaves [ 688.376385][ T9992] bond5 (unregistering): Released all slaves [ 688.394063][ T9992] bond6 (unregistering): Released all slaves [ 688.410892][ T9992] bond7 (unregistering): Released all slaves [ 688.429147][ T9992] bond8 (unregistering): Released all slaves [ 688.459023][ T9992] bond9 (unregistering): Released all slaves [ 688.486472][ T9992] bond10 (unregistering): Released all slaves [ 688.506815][ T9992] bond11 (unregistering): Released all slaves [ 688.532216][ T9992] bond12 (unregistering): Released all slaves [ 688.551185][ T9992] bond13 (unregistering): Released all slaves [ 688.928662][T23809] netlink: 'syz.2.4809': attribute type 1 has an invalid length. [ 688.937806][T23811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4808'. [ 689.001240][T23811] netlink: 'syz.4.4808': attribute type 5 has an invalid length. [ 689.055329][T23811] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4808'. [ 689.178116][T23811] geneve3: entered promiscuous mode [ 689.216151][T23811] geneve3: entered allmulticast mode [ 689.255989][T23821] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4811'. [ 689.337491][ T9993] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 689.371613][ T9993] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 689.461225][T23835] netlink: 'syz.0.4813': attribute type 1 has an invalid length. [ 690.013306][T23832] IPv6: sit1: Disabled Multicast RS [ 690.042197][ T9993] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 690.102456][T23825] syzkaller1: entered promiscuous mode [ 690.113006][T23825] syzkaller1: entered allmulticast mode [ 690.561756][T23868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4819'. [ 690.812549][T23880] netlink: 'syz.3.4822': attribute type 1 has an invalid length. [ 690.855308][T23880] netlink: 280 bytes leftover after parsing attributes in process `syz.3.4822'. [ 690.884737][T23881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4822'. [ 690.924585][T23883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4821'. [ 691.210982][T23895] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 691.491097][T23919] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.4830'. [ 691.653537][T23924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4831'. [ 691.704683][T23924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4831'. [ 691.934358][T23924] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 692.231409][ T9992] hsr_slave_0: left promiscuous mode [ 692.257557][T23947] netlink: 'syz.0.4836': attribute type 1 has an invalid length. [ 692.296857][ T9992] hsr_slave_1: left promiscuous mode [ 692.345280][ T9992] veth1_macvtap: left promiscuous mode [ 692.365045][ T9992] veth0_macvtap: left promiscuous mode [ 692.377943][ T9992] veth1_vlan: left promiscuous mode [ 692.390252][ T9992] veth0_vlan: left promiscuous mode [ 693.352743][T23946] bridge0: port 3(syz_tun) entered blocking state [ 693.362881][T23946] bridge0: port 3(syz_tun) entered disabled state [ 693.392635][T23946] syz_tun: entered allmulticast mode [ 693.428540][T23946] syz_tun: entered promiscuous mode [ 693.447058][T23946] bridge0: port 3(syz_tun) entered blocking state [ 693.454943][T23946] bridge0: port 3(syz_tun) entered listening state [ 693.466277][T23947] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 693.793657][T23991] tipc: Enabling of bearer rejected, failed to enable media [ 694.057599][ T9992] IPVS: stop unused estimator thread 0... [ 694.631813][T24023] __nla_validate_parse: 2 callbacks suppressed [ 694.631837][T24023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4852'. [ 694.781611][T24022] sctp: [Deprecated]: syz.2.4855 (pid 24022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 694.781611][T24022] Use struct sctp_sack_info instead [ 694.950963][T24034] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4857'. [ 695.018175][T24038] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 695.418449][T24044] bond8: Unable to set down delay as MII monitoring is disabled [ 695.492513][T24044] bond8 (unregistering): Released all slaves [ 695.608945][T24055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4862'. [ 695.668375][T24055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4862'. [ 695.758749][T24058] netlink: 'syz.1.4863': attribute type 8 has an invalid length. [ 695.860513][T24064] xt_hashlimit: size too large, truncated to 1048576 [ 695.945958][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 696.143549][T24076] gre2: entered promiscuous mode [ 696.173370][T24076] gre2: entered allmulticast mode [ 696.302404][T24089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4868'. [ 696.392461][T24079] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4868'. [ 696.426809][T24089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4868'. [ 696.531126][T24079] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4868'. [ 696.549721][T24097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4870'. [ 696.752603][T24095] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 697.047721][T24107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.058347][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.142200][T24113] syzkaller0: entered promiscuous mode [ 697.159363][T24113] syzkaller0: entered allmulticast mode [ 697.908728][T24151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4880'. [ 698.221889][T24168] vcan1: entered promiscuous mode [ 698.355502][T24178] netlink: 'syz.3.4884': attribute type 1 has an invalid length. [ 698.489099][T24183] IPVS: length: 239 != 24 [ 698.541028][T24174] bond13 (unregistering): Released all slaves [ 699.302734][T24218] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 699.662762][T24228] __nla_validate_parse: 4 callbacks suppressed [ 699.662782][T24228] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4896'. [ 699.844476][T24235] netlink: zone id is out of range [ 699.855794][T24242] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4899'. [ 699.877140][T24235] netlink: zone id is out of range [ 699.897936][T24238] bridge5: entered promiscuous mode [ 699.903504][T24235] netlink: zone id is out of range [ 699.908946][T24238] bridge5: entered allmulticast mode [ 699.920022][T24235] netlink: zone id is out of range [ 699.928523][T24235] netlink: zone id is out of range [ 700.300966][T24257] net_ratelimit: 138 callbacks suppressed [ 700.300997][T24257] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 700.411598][T24264] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4907'. [ 700.615564][T24269] netlink: 'syz.0.4910': attribute type 10 has an invalid length. [ 700.673589][T24269] veth1_macvtap: left promiscuous mode [ 700.715668][T24269] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 700.743501][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.051125][T24291] netlink: 'syz.1.4914': attribute type 13 has an invalid length. [ 701.192006][T24299] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4916'. [ 701.290125][T24302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4917'. [ 702.322217][T24345] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4926'. [ 702.342124][T24336] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 702.369968][T24345] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4926'. [ 702.641305][T24347] bond8: (slave bond_slave_1): Device is not our slave [ 702.669727][T24347] bond8: option active_slave: invalid value (bond_slave_1) [ 702.711552][T24347] bond8 (unregistering): Released all slaves [ 703.362172][T24388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.406318][T24388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.434255][T24398] netlink: 'syz.3.4936': attribute type 1 has an invalid length. [ 703.569755][T24405] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4936'. [ 703.760912][T24405] 8021q: adding VLAN 0 to HW filter on device bond8 [ 704.497836][T24438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4946'. [ 704.546782][T24438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4946'. [ 704.686901][T24448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.289450][T24474] netlink: 'syz.1.4955': attribute type 10 has an invalid length. [ 705.330126][T24474] netlink: 'syz.1.4955': attribute type 10 has an invalid length. [ 705.364167][T24473] xt_hashlimit: size too large, truncated to 1048576 [ 705.407957][T24474] dummy0: entered promiscuous mode [ 705.428315][T24474] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 705.523233][T24480] __nla_validate_parse: 1 callbacks suppressed [ 705.523254][T24480] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4957'. [ 706.380001][T24521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4967'. [ 706.425034][T24521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4967'. [ 706.431217][T24522] team0: No ports can be present during mode change [ 706.715409][T24544] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4971'. [ 707.438997][T24574] netlink: 'syz.3.4979': attribute type 3 has an invalid length. [ 707.546873][T24579] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4981'. [ 707.670306][T24584] netlink: 'syz.4.4982': attribute type 1 has an invalid length. [ 707.719869][T24584] netlink: 15987 bytes leftover after parsing attributes in process `syz.4.4982'. [ 707.739209][T24586] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4983'. [ 707.776696][T24586] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 707.787242][T24586] IPv6: NLM_F_CREATE should be set when creating new route [ 707.942904][T24595] netlink: 'syz.4.4987': attribute type 1 has an invalid length. [ 707.959215][T24596] 0: reclassify loop, rule prio 0, protocol 700 [ 708.005815][T24600] xt_hashlimit: size too large, truncated to 1048576 [ 708.141415][T24602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4989'. [ 708.258056][T24609] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.658118][T24609] bridge_slave_0 (unregistering): left allmulticast mode [ 708.692579][T24609] bridge_slave_0 (unregistering): left promiscuous mode [ 708.724702][T24609] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.917083][T24623] can: request_module (can-proto-0) failed. [ 709.651323][T24653] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5001'. [ 710.050838][T24671] netlink: 'syz.1.5004': attribute type 21 has an invalid length. [ 710.078463][T24671] netlink: 'syz.1.5004': attribute type 22 has an invalid length. [ 710.114944][T24671] netlink: 'syz.1.5004': attribute type 23 has an invalid length. [ 710.132990][T24671] netlink: 'syz.1.5004': attribute type 25 has an invalid length. [ 710.170116][T24671] netlink: 'syz.1.5004': attribute type 26 has an invalid length. [ 710.177524][T24677] netlink: 'syz.0.5011': attribute type 2 has an invalid length. [ 710.208030][T24677] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 710.218378][T24671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5004'. [ 710.418249][T24683] IPv6: sit1: Disabled Multicast RS [ 710.568636][T24693] __nla_validate_parse: 2 callbacks suppressed [ 710.568656][T24693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5016'. [ 710.616667][T24693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5016'. [ 710.676391][T24693] erspan0: entered promiscuous mode [ 710.722318][T24693] erspan0: left promiscuous mode [ 711.005078][T24709] netlink: 'syz.3.5018': attribute type 11 has an invalid length. [ 711.084710][T24709] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.5018'. [ 711.101788][T24704] netlink: 'syz.3.5018': attribute type 1 has an invalid length. [ 711.130799][T24704] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5018'. [ 711.378015][T24720] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.900660][T24742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5030'. [ 711.947699][T24742] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5030'. [ 711.997228][T24746] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5030'. [ 712.019648][T24746] unsupported nlmsg_type 40 [ 712.817437][T24784] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5040'. [ 712.979373][T24796] syzkaller0: entered promiscuous mode [ 712.992511][T24796] syzkaller0: entered allmulticast mode [ 713.014974][T24796] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 713.166979][T24805] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.5046'. [ 713.364831][T24815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5050'. [ 713.430021][T24820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.769170][T24834] tipc: Enabling of bearer rejected, failed to enable media [ 714.176711][T24861] xt_HMARK: spi-set and port-set can't be combined [ 714.275084][T24863] sctp: [Deprecated]: syz.3.5061 (pid 24863) Use of int in max_burst socket option deprecated. [ 714.275084][T24863] Use struct sctp_assoc_value instead [ 714.336731][T24871] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 715.000257][T24905] x_tables: duplicate entry at hook 3 [ 715.016187][T24902] veth0_vlan: left promiscuous mode [ 715.049797][T24902] vlan0: entered promiscuous mode [ 715.082450][T24902] veth0_vlan: entered promiscuous mode [ 715.172547][T24909] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 715.403575][T24919] netlink: 'syz.0.5079': attribute type 4 has an invalid length. [ 715.557269][T24927] netlink: 'syz.4.5083': attribute type 1 has an invalid length. [ 715.576028][T24925] netlink: 'syz.2.5081': attribute type 4 has an invalid length. [ 715.607307][T24932] netlink: 'syz.3.5084': attribute type 1 has an invalid length. [ 715.646984][T24932] __nla_validate_parse: 4 callbacks suppressed [ 715.647004][T24932] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5084'. [ 715.716916][T24934] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5084'. [ 716.076386][T24945] bridge_slave_0: left allmulticast mode [ 716.091783][T24945] bridge_slave_0: left promiscuous mode [ 716.107260][T24945] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.125614][T24945] bridge_slave_1: left allmulticast mode [ 716.137746][T24945] bridge_slave_1: left promiscuous mode [ 716.155542][T24945] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.192057][T24945] bond0: (slave bond_slave_0): Releasing backup interface [ 716.240666][T24945] bond0: (slave bond_slave_1): Releasing backup interface [ 716.299848][T24945] team0: Port device team_slave_0 removed [ 716.357545][T24945] team0: Port device team_slave_1 removed [ 716.383523][T24945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.391957][T24945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.406405][T24945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.418312][T24945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.436139][T24945] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 716.457780][T24964] netlink: 'syz.1.5093': attribute type 2 has an invalid length. [ 716.466299][T24964] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5093'. [ 716.758975][T24974] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5095'. [ 717.170331][T24994] sock: sock_set_timeout: `syz.0.5102' (pid 24994) tries to set negative timeout [ 717.227104][T24999] syzkaller0: entered promiscuous mode [ 717.244099][T24999] syzkaller0: entered allmulticast mode [ 717.382934][T25006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5107'. [ 717.422239][T25006] vlan2: entered allmulticast mode [ 717.428863][T25006] mac80211_hwsim hwsim58 wlan0: entered allmulticast mode [ 717.511532][T25010] xt_CONNSECMARK: invalid mode: 0 [ 717.546613][T25013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5110'. [ 717.564984][T25013] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5110'. [ 717.582591][T25013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5110'. [ 717.597245][T25013] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5110'. [ 717.613435][T25013] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5110'. [ 718.070167][T25046] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 718.187957][T25042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.694469][T25072] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 718.791766][T25077] netlink: 'syz.1.5124': attribute type 1 has an invalid length. [ 718.965483][T25077] 8021q: adding VLAN 0 to HW filter on device bond12 [ 719.052068][T25078] bond1: (slave veth0_to_bond): Releasing active interface [ 719.097779][T25078] bond12: (slave veth0_to_bond): making interface the new active one [ 719.136357][T25078] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 719.201992][T25081] macvlan2: entered promiscuous mode [ 719.217713][T25081] macvlan2: entered allmulticast mode [ 719.226552][T25081] bond12: entered promiscuous mode [ 719.232052][T25081] veth0_to_bond: entered promiscuous mode [ 719.255975][T25081] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 719.289591][T25081] bond12: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 719.347665][T25081] bond12: left promiscuous mode [ 719.361040][T25081] veth0_to_bond: left promiscuous mode [ 719.696388][T25109] netlink: 'syz.4.5130': attribute type 3 has an invalid length. [ 719.919023][T25111] bridge6: port 1(bond13) entered blocking state [ 719.969143][T25111] bridge6: port 1(bond13) entered disabled state [ 719.998407][T25111] bond13: entered allmulticast mode [ 720.017757][T25111] bond13: entered promiscuous mode [ 720.518653][T25147] netlink: 'syz.4.5141': attribute type 1 has an invalid length. [ 721.506541][T25198] netlink: 'syz.0.5154': attribute type 29 has an invalid length. [ 721.577339][T25202] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 721.616445][T25202] xt_hashlimit: size too large, truncated to 1048576 [ 722.307377][T25198] netlink: 'syz.0.5154': attribute type 29 has an invalid length. [ 722.319600][T25230] __nla_validate_parse: 13 callbacks suppressed [ 722.319621][T25230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5163'. [ 722.364789][T25230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5163'. [ 722.375963][T25230] netlink: 'syz.2.5163': attribute type 12 has an invalid length. [ 722.385388][T25230] netlink: 'syz.2.5163': attribute type 11 has an invalid length. [ 722.549982][T25241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5164'. [ 722.567162][T25242] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 722.888120][T25254] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5168'. [ 722.920837][T25254] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 723.281560][T25269] xt_NFQUEUE: number of total queues is 0 [ 723.332690][T25273] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5174'. [ 723.463285][ C1] bridge0: port 3(syz_tun) entered learning state [ 723.779115][T25293] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5183'. [ 723.878418][T25298] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5186'. [ 723.888617][T25298] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5186'. [ 723.933944][T25298] syzkaller0: entered allmulticast mode [ 724.588284][T25321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5191'. [ 724.617649][T25320] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5192'. [ 724.680126][T25325] netlink: 'syz.1.5194': attribute type 1 has an invalid length. [ 725.035484][T25341] sch_tbf: burst 12 is lower than device bridge8 mtu (1514) ! [ 725.437627][T25352] ip6gre2: entered allmulticast mode [ 725.670046][T25365] netlink: 'syz.4.5210': attribute type 11 has an invalid length. [ 725.690901][T25365] netlink: 'syz.4.5210': attribute type 11 has an invalid length. [ 725.888252][T25376] openvswitch: netlink: IP tunnel dst address not specified [ 726.090632][T25377] syzkaller0: entered promiscuous mode [ 726.107938][T25377] syzkaller0: entered allmulticast mode [ 727.074770][T25409] netlink: 'syz.3.5220': attribute type 2 has an invalid length. [ 727.306435][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 729.685697][T25388] netlink: 'syz.2.5217': attribute type 29 has an invalid length. [ 729.917322][T25416] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 729.928156][T25417] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 729.955862][T25416] netlink: 'syz.3.5223': attribute type 1 has an invalid length. [ 729.969823][T25417] netlink: 'syz.3.5223': attribute type 1 has an invalid length. [ 730.129651][T25427] bond11: (slave gretap2): making interface the new active one [ 730.137864][T25431] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 730.150441][T25427] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 730.621742][T25450] netlink: 'syz.3.5230': attribute type 1 has an invalid length. [ 730.763837][T25459] __nla_validate_parse: 9 callbacks suppressed [ 730.763857][T25459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5233'. [ 730.879499][T25462] sctp: [Deprecated]: syz.0.5234 (pid 25462) Use of struct sctp_assoc_value in delayed_ack socket option. [ 730.879499][T25462] Use struct sctp_sack_info instead [ 730.941374][T25462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5234'. [ 731.175721][T25475] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.5240'. [ 731.868680][T25501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5247'. [ 732.288062][T25512] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5249'. [ 732.357575][T25513] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.5249'. [ 732.466160][T25518] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5250'. [ 732.578433][T25525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5253'. [ 732.685656][T25529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5253'. [ 732.765579][T25529] gtp1: entered promiscuous mode [ 732.793436][T25529] gtp1: entered allmulticast mode [ 732.830276][T25532] netlink: 'syz.2.5255': attribute type 10 has an invalid length. [ 732.872824][T25532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5255'. [ 733.070494][T25534] syzkaller0: entered promiscuous mode [ 733.101156][T25534] syzkaller0: entered allmulticast mode [ 733.849563][T25577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.022352][T25586] syz_tun: left allmulticast mode [ 734.523381][T25599] tipc: Started in network mode [ 734.538086][T25599] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 734.558177][T25599] tipc: Enabled bearer , priority 14 [ 734.608386][T25599] netlink: zone id is out of range [ 734.646183][T25599] netlink: zone id is out of range [ 734.667507][T25599] netlink: zone id is out of range [ 734.682939][T25599] netlink: zone id is out of range [ 734.701656][T25599] netlink: zone id is out of range [ 734.716974][T25599] netlink: zone id is out of range [ 734.730021][T25599] netlink: zone id is out of range [ 734.739404][T25606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.761039][T25599] netlink: zone id is out of range [ 734.835604][T25610] netlink: 'syz.0.5277': attribute type 21 has an invalid length. [ 734.864537][T25610] netlink: 'syz.0.5277': attribute type 1 has an invalid length. [ 735.420706][T25634] netlink: 'syz.2.5285': attribute type 39 has an invalid length. [ 735.447537][T25634] hsr_slave_0: left promiscuous mode [ 735.470578][T25634] hsr_slave_1: left promiscuous mode [ 735.675640][T12273] tipc: Node number set to 10463914 [ 736.012921][T25656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5290'. [ 736.141481][T25657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5290'. [ 736.688717][T25678] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5298'. [ 736.708307][T25674] syzkaller0: entered promiscuous mode [ 736.725243][T25674] syzkaller0: entered allmulticast mode [ 736.963913][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 737.223645][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 737.451222][T25705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5303'. [ 737.451222][T25704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5303'. [ 737.694430][T25710] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5306'. [ 737.760500][T25713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5307'. [ 737.774236][T25714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5307'. [ 737.798921][T25714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5307'. [ 737.940667][T25718] syzkaller0: entered promiscuous mode [ 737.951618][T25718] syzkaller0: entered allmulticast mode [ 738.086475][T25727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5313'. [ 738.451225][T25747] syzkaller1: entered promiscuous mode [ 738.457419][T25747] syzkaller1: entered allmulticast mode [ 739.276608][T25777] netlink: 'syz.1.5331': attribute type 5 has an invalid length. [ 739.512123][T25785] netlink: 'syz.1.5335': attribute type 10 has an invalid length. [ 739.997951][T25816] netlink: 'syz.4.5344': attribute type 1 has an invalid length. [ 740.039278][T25816] 8021q: adding VLAN 0 to HW filter on device bond13 [ 740.109554][T25816] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 740.134207][T25816] netlink: 'syz.4.5344': attribute type 1 has an invalid length. [ 740.142158][T25816] netlink: 'syz.4.5344': attribute type 2 has an invalid length. [ 740.851726][T25855] netlink: 'syz.3.5355': attribute type 1 has an invalid length. [ 740.913970][T25852] 8021q: VLANs not supported on ip6_vti0 [ 740.922879][T25855] netlink: 'syz.3.5355': attribute type 2 has an invalid length. [ 747.148136][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.543295][ C1] bridge0: port 3(syz_tun) entered forwarding state [ 753.549959][ C1] bridge0: topology change detected, propagating [ 793.223401][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 796.152441][T25876] syzkaller0: entered promiscuous mode [ 796.167029][T25876] syzkaller0: entered allmulticast mode [ 796.182260][T25876] net_ratelimit: 138 callbacks suppressed [ 796.182275][T25876] 0: reclassify loop, rule prio 0, protocol 800 [ 796.214210][T25876] __nla_validate_parse: 12 callbacks suppressed [ 796.214229][T25876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5357'. [ 796.371695][T25876] bond14: option xmit_hash_policy: invalid value (64) [ 796.417599][T25876] bond14 (unregistering): Released all slaves [ 796.457943][T25887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5363'. [ 796.750195][T25898] syzkaller0: entered promiscuous mode [ 796.793896][T25898] syzkaller0: entered allmulticast mode [ 797.132631][T25916] netlink: get zone limit has 4 unknown bytes [ 797.382360][T25934] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5376'. [ 797.438387][T25935] 8021q: VLANs not supported on pim6reg0 [ 797.504764][T25937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5378'. [ 797.947570][T25963] tipc: Enabling of bearer rejected, failed to enable media [ 798.191462][T25970] bond14 (unregistering): Released all slaves [ 798.401947][T25979] netlink: 'syz.2.5390': attribute type 1 has an invalid length. [ 798.548967][T25986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5392'. [ 798.578515][T25986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5392'. [ 798.796044][T26000] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5396'. [ 799.186935][T26017] netlink: 'syz.4.5405': attribute type 4 has an invalid length. [ 799.441543][T26036] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5407'. [ 799.643670][T26045] tipc: Enabling of bearer rejected, failed to enable media [ 799.707525][T26048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5412'. [ 799.766067][T26057] netlink: 316 bytes leftover after parsing attributes in process `syz.0.5414'. [ 800.007125][T26065] bond14: option packets_per_slave: invalid value (18446744073709551615) [ 800.017438][T26065] bond14: option packets_per_slave: allowed values 0 - 65535 [ 800.038004][T26065] bond14 (unregistering): Released all slaves [ 800.049683][T26072] netlink: 'syz.3.5416': attribute type 5 has an invalid length. [ 800.090745][T26075] netlink: 'syz.0.5418': attribute type 30 has an invalid length. [ 800.165020][T26072] geneve5: entered promiscuous mode [ 800.171522][T26072] geneve5: entered allmulticast mode [ 800.281942][ T9993] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 800.294910][ T9993] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 800.424786][ T9993] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 800.441004][ T9993] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 800.476558][T26085] sctp: [Deprecated]: syz.1.5420 (pid 26085) Use of struct sctp_assoc_value in delayed_ack socket option. [ 800.476558][T26085] Use struct sctp_sack_info instead [ 800.542569][T26093] 8021q: adding VLAN 0 to HW filter on device bond10 [ 800.599912][T26102] xt_hashlimit: size too large, truncated to 1048576 [ 800.607616][T26086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 800.974590][T26111] block nbd5: server does not support multiple connections per device. [ 801.021309][T26111] block nbd5: shutting down sockets [ 801.198522][T26124] netlink: 'syz.4.5431': attribute type 1 has an invalid length. [ 801.253992][T26124] 8021q: adding VLAN 0 to HW filter on device bond14 [ 801.351092][T26124] __nla_validate_parse: 7 callbacks suppressed [ 801.351118][T26124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5431'. [ 801.375856][T26124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5431'. [ 801.420762][T26136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5434'. [ 801.438664][T26124] vlan0: entered promiscuous mode [ 801.478263][T26139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5434'. [ 801.481284][T26124] bond14: entered promiscuous mode [ 801.542212][T26124] vlan0: entered allmulticast mode [ 801.571306][T26124] bond14: entered allmulticast mode [ 801.807636][T26154] netlink: 'syz.3.5439': attribute type 10 has an invalid length. [ 801.943909][T26166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5443'. [ 801.985285][T26166] netlink: 'syz.4.5443': attribute type 3 has an invalid length. [ 801.995125][T26166] netlink: 'syz.4.5443': attribute type 1 has an invalid length. [ 802.003844][T26166] netlink: 204 bytes leftover after parsing attributes in process `syz.4.5443'. [ 802.017109][T26168] lo: entered allmulticast mode [ 802.057160][T26168] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 802.080053][T26168] lo: left allmulticast mode [ 802.405872][T26185] netlink: 'syz.1.5452': attribute type 1 has an invalid length. [ 802.527556][T26185] 8021q: adding VLAN 0 to HW filter on device bond14 [ 802.546049][T26178] wg1 speed is unknown, defaulting to 1000 [ 802.570255][T26198] netlink: 'syz.2.5455': attribute type 1 has an invalid length. [ 802.658115][T26203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5454'. [ 802.757740][T26198] 8021q: adding VLAN 0 to HW filter on device bond8 [ 802.892912][T26194] bond8: (slave veth0_to_bond): making interface the new active one [ 802.906059][T26194] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 803.484141][T26229] netlink: 'syz.1.5463': attribute type 1 has an invalid length. [ 803.541554][T26234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5463'. [ 803.560462][T26234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5463'. [ 803.784413][T26246] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5467'. [ 804.152201][T26229] bond15: entered promiscuous mode [ 804.174527][T26229] 8021q: adding VLAN 0 to HW filter on device bond15 [ 804.213930][T26237] dvmrp0: entered allmulticast mode [ 804.246722][T26251] netlink: 'syz.4.5468': attribute type 2 has an invalid length. [ 804.256526][T26251] netlink: 'syz.4.5468': attribute type 1 has an invalid length. [ 804.358661][T26238] bond15: (slave bridge9): making interface the new active one [ 804.368026][T26238] bridge9: entered promiscuous mode [ 804.406353][T26238] bond15: (slave bridge9): Enslaving as an active interface with an up link [ 804.415634][T26251] netlink: 'syz.4.5468': attribute type 1 has an invalid length. [ 804.722176][T26262] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 805.162980][T26272] syzkaller0: entered promiscuous mode [ 805.182364][T26272] syzkaller0: entered allmulticast mode [ 805.398455][T26293] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 805.662491][T26308] netlink: 'syz.0.5485': attribute type 1 has an invalid length. [ 805.941724][T26308] 8021q: adding VLAN 0 to HW filter on device bond11 [ 806.158852][T26301] nbd: socks must be embedded in a SOCK_ITEM attr [ 806.177502][T26141] block nbd64: NBD_DISCONNECT [ 806.215426][T26302] nbd: nbd64 already in use [ 806.699169][T26141] udevd[26141]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 806.781353][T26355] netlink: 'syz.0.5497': attribute type 1 has an invalid length. [ 807.041542][T26355] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 807.705240][T26399] __nla_validate_parse: 8 callbacks suppressed [ 807.705263][T26399] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5510'. [ 807.886247][T26407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5512'. [ 808.032901][T26413] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5514'. [ 808.070411][T26413] netlink: ct family unspecified [ 808.171881][T26415] xt_hashlimit: size too large, truncated to 1048576 [ 808.231336][T26418] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5515'. [ 808.326493][T26426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5518'. [ 808.556077][T26441] netlink: 'syz.2.5522': attribute type 1 has an invalid length. [ 808.586625][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.638991][T26446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5523'. [ 808.767162][T26441] 8021q: adding VLAN 0 to HW filter on device bond9 [ 808.877506][T26451] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 809.015522][T26457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5526'. [ 809.031005][T26456] netlink: 'syz.2.5525': attribute type 1 has an invalid length. [ 809.042536][T26457] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5526'. [ 809.052267][T26456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5525'. [ 809.068907][T26456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5525'. [ 809.091508][T26456] netlink: 'syz.2.5525': attribute type 2 has an invalid length. [ 809.113190][T26456] netlink: 'syz.2.5525': attribute type 2 has an invalid length. [ 809.121247][T26456] netlink: 'syz.2.5525': attribute type 2 has an invalid length. [ 809.198585][T26466] block nbd5: Unsupported socket: should be TCP or UNIX. [ 809.229581][T26468] dvmrp0: entered allmulticast mode [ 809.486565][T26478] netlink: 'syz.1.5532': attribute type 39 has an invalid length. [ 809.607862][T26490] dvmrp0: left allmulticast mode [ 809.752646][T26490] netlink: 'syz.3.5537': attribute type 1 has an invalid length. [ 810.093837][T26511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 810.416726][T26505] vlan4: entered promiscuous mode [ 810.421958][T26505] bridge0: entered promiscuous mode [ 810.498705][T26521] nbd: must specify at least one socket [ 810.509233][T26521] netlink: 'syz.3.5544': attribute type 1 has an invalid length. [ 811.322536][T26544] syzkaller1: entered allmulticast mode [ 811.358312][T26554] netlink: 'syz.4.5553': attribute type 1 has an invalid length. [ 812.018376][T26579] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 812.527442][T26605] syzkaller1: entered promiscuous mode [ 812.537545][T26605] syzkaller1: entered allmulticast mode [ 812.631313][T26603] netlink: 'syz.3.5569': attribute type 9 has an invalid length. [ 812.732635][T26614] __nla_validate_parse: 22 callbacks suppressed [ 812.732655][T26614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5572'. [ 812.851573][T26612] wireguard0: entered promiscuous mode [ 812.879299][T26612] wireguard0: entered allmulticast mode [ 813.437389][T26638] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5578'. [ 813.500121][T26640] openvswitch: netlink: Missing key (keys=40, expected=100) [ 813.767385][T26656] netlink: 'syz.0.5583': attribute type 12 has an invalid length. [ 813.804790][T26652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 813.822173][T26656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5583'. [ 813.875024][T26662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5583'. [ 814.215336][T26676] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5587'. [ 814.581861][T26692] veth1_mac: renamed from veth0_vlan (while UP) [ 814.652543][T26697] ±ÿ_congesti: renamed from lo (while UP) [ 814.699053][ T29] syz0: Port: 1 Link DOWN [ 814.736446][T26701] vcan1: entered promiscuous mode [ 814.754350][T26701] vcan1: entered allmulticast mode [ 814.819693][T26702] vcan1: entered promiscuous mode [ 814.851949][T26702] vcan1: entered allmulticast mode [ 814.902607][T26705] netlink: 'syz.1.5595': attribute type 1 has an invalid length. [ 814.984722][T26705] 8021q: adding VLAN 0 to HW filter on device bond16 [ 815.158088][T26715] syzkaller1: entered promiscuous mode [ 815.176483][T26715] syzkaller1: entered allmulticast mode [ 815.554676][T26732] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5603'. [ 815.594324][T26736] netlink: 'syz.4.5601': attribute type 1 has an invalid length. [ 815.646455][T26736] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5601'. [ 815.697922][T26736] NCSI netlink: No device for ifindex 0 [ 815.718561][T26747] h: entered promiscuous mode [ 815.937077][ T50] block nbd5: Receive control failed (result -32) [ 816.100026][T26765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5608'. [ 816.183762][T26771] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5611'. [ 816.314145][T26781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5615'. [ 816.813645][T26783] nbd6: detected capacity change from 0 to 63 [ 816.838913][ T50] block nbd6: Receive control failed (result -32) [ 816.846062][T20125] block nbd6: Receive control failed (result -32) [ 816.866970][T26663] block nbd6: Send control failed (result -32) [ 816.882192][T26663] block nbd6: Request send failed, requeueing [ 816.910304][ T1664] block nbd6: Dead connection, failed to find a fallback [ 816.919079][ T1664] block nbd6: shutting down sockets [ 816.925176][ T1664] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 816.939097][ T1664] Buffer I/O error on dev nbd6, logical block 0, async page read [ 816.957692][T26663] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 816.971975][T26663] Buffer I/O error on dev nbd6, logical block 1, async page read [ 816.984922][T26663] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 816.994535][T26663] Buffer I/O error on dev nbd6, logical block 2, async page read [ 817.006413][T26663] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 817.015900][T26663] Buffer I/O error on dev nbd6, logical block 3, async page read [ 817.024392][T26663] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 817.034142][T26663] Buffer I/O error on dev nbd6, logical block 0, async page read [ 817.042233][T26663] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 817.052180][T26663] Buffer I/O error on dev nbd6, logical block 1, async page read [ 817.060695][T26663] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 817.070607][T26663] Buffer I/O error on dev nbd6, logical block 2, async page read [ 817.098915][T26663] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 817.144757][T26663] Buffer I/O error on dev nbd6, logical block 3, async page read [ 817.156406][T26798] syzkaller0: entered promiscuous mode [ 817.175067][T26798] syzkaller0: entered allmulticast mode [ 817.181065][T26663] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 817.225100][T26663] Buffer I/O error on dev nbd6, logical block 0, async page read [ 817.262165][T26663] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 817.316177][T26663] Buffer I/O error on dev nbd6, logical block 1, async page read [ 817.361747][T26663] ldm_validate_partition_table(): Disk read failed. [ 817.396455][T26663] Dev nbd6: unable to read RDB block 0 [ 817.424330][T26663] nbd6: unable to read partition table [ 817.468926][T26663] ldm_validate_partition_table(): Disk read failed. [ 817.492420][T26663] Dev nbd6: unable to read RDB block 0 [ 817.508851][T26663] nbd6: unable to read partition table [ 817.863637][T26826] __nla_validate_parse: 1 callbacks suppressed [ 817.863658][T26826] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5631'. [ 818.017518][T26830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 818.748821][T26845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5635'. [ 820.461115][T26858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5638'. [ 820.627225][T26866] syzkaller0: entered promiscuous mode [ 820.659792][T26866] syzkaller0: entered allmulticast mode [ 820.702043][T26875] ipvlan1: entered promiscuous mode [ 820.707985][T26875] ipvlan1: entered allmulticast mode [ 820.715573][T26875] veth0_vlan: entered allmulticast mode [ 820.817111][T26873] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 820.967001][T26890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5645'. [ 821.079564][T26898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 821.121512][T26901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5646'. [ 821.288195][T26907] netlink: 'syz.1.5649': attribute type 1 has an invalid length. [ 821.329568][T26911] netlink: 'syz.2.5651': attribute type 1 has an invalid length. [ 821.347807][T26911] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 821.706748][T26932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5656'. [ 821.772306][T26938] netlink: 'syz.1.5657': attribute type 1 has an invalid length. [ 821.806938][T26938] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 821.960439][T26932] smc: removing net device team0 with user defined pnetid SYZ2 [ 822.018523][T26932] team0 (unregistering): Port device team_slave_0 removed [ 822.121384][T26932] team0 (unregistering): Port device team_slave_1 removed [ 822.194149][T26956] sctp: [Deprecated]: syz.1.5661 (pid 26956) Use of int in maxseg socket option. [ 822.194149][T26956] Use struct sctp_assoc_value instead [ 822.217515][T26958] netlink: 'syz.0.5662': attribute type 3 has an invalid length. [ 822.229088][T26958] netlink: 'syz.0.5662': attribute type 1 has an invalid length. [ 822.251524][T26958] netlink: 212 bytes leftover after parsing attributes in process `syz.0.5662'. [ 822.282529][T26958] NCSI netlink: No device for ifindex 813332851 [ 822.319029][T26960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5663'. [ 822.386200][T20125] block nbd7: Receive control failed (result -1) [ 822.470907][T26970] netlink: 'syz.1.5664': attribute type 1 has an invalid length. [ 822.551490][T26970] netlink: 'syz.1.5664': attribute type 2 has an invalid length. [ 822.560374][T26969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5666'. [ 822.624686][T26969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5666'. [ 822.661421][T26973] tipc: Enabling of bearer rejected, failed to enable media [ 822.694553][T26973] netlink: 'syz.2.5667': attribute type 8 has an invalid length. [ 822.919246][T26977] __nla_validate_parse: 1 callbacks suppressed [ 822.919263][T26977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5669'. [ 822.952198][T26977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5669'. [ 823.177346][T26992] xfrm1: entered allmulticast mode [ 823.368444][T27002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5675'. [ 824.013768][T27035] netlink: 'syz.3.5689': attribute type 12 has an invalid length. [ 824.021809][T27035] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.5689'. [ 824.041842][T27035] xt_socket: unknown flags 0x50 [ 824.051885][T27038] netlink: 'syz.4.5688': attribute type 30 has an invalid length. [ 824.388808][T27047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.426647][T27047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 824.685432][T27064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5698'. [ 824.717414][T27064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5698'. [ 824.744317][T27054] 8021q: adding VLAN 0 to HW filter on device bond11 [ 824.760579][T27064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5698'. [ 825.138338][T27085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5704'. [ 825.165831][T27087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5701'. [ 825.189057][T27085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5704'. [ 825.201657][T27084] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 825.256266][T27087] gretap3: entered promiscuous mode [ 825.282542][T27087] gretap3: entered allmulticast mode [ 825.340209][T27084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 825.454094][T27100] IPv6: Can't replace route, no match found [ 825.472969][T27100] IPv6: Can't replace route, no match found [ 825.891495][T27124] pimreg: entered allmulticast mode [ 825.917669][T27127] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 826.149694][T27123] syzkaller1: entered promiscuous mode [ 826.167222][T27123] syzkaller1: entered allmulticast mode [ 826.615674][T27163] syzkaller0: entered promiscuous mode [ 826.626059][T27163] syzkaller0: entered allmulticast mode [ 826.856182][T27171] validate_nla: 9 callbacks suppressed [ 826.856203][T27171] netlink: 'syz.4.5727': attribute type 1 has an invalid length. [ 827.249453][T27193] syzkaller0: entered promiscuous mode [ 827.269824][T27193] syzkaller0: entered allmulticast mode [ 827.412951][T27209] netlink: 'syz.3.5738': attribute type 8 has an invalid length. [ 827.551417][T27190] syzkaller0: entered promiscuous mode [ 827.579700][T27190] syzkaller0: entered allmulticast mode [ 827.641010][T27224] IPVS: set_ctl: invalid protocol: 92 172.30.0.5:20001 [ 827.667874][T27226] IPVS: set_ctl: invalid protocol: 92 172.30.0.5:20001 [ 827.822489][T27230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 828.423719][T27256] __nla_validate_parse: 13 callbacks suppressed [ 828.423739][T27256] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5747'. [ 831.076166][T27217] syzkaller0: entered promiscuous mode [ 831.081700][T27217] syzkaller0: entered allmulticast mode [ 831.606766][ T746] [ 831.609159][ T746] ====================================================== [ 831.616201][ T746] WARNING: possible circular locking dependency detected [ 831.623253][ T746] syzkaller #0 Not tainted [ 831.627713][ T746] ------------------------------------------------------ [ 831.634761][ T746] kworker/u8:6/746 is trying to acquire lock: [ 831.640979][ T746] ffffffff8ea85460 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 831.650861][ T746] [ 831.650861][ T746] but task is already holding lock: [ 831.658337][ T746] ffff8880329a5360 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 831.668071][ T746] [ 831.668071][ T746] which lock already depends on the new lock. [ 831.668071][ T746] [ 831.678483][ T746] [ 831.678483][ T746] the existing dependency chain (in reverse order) is: [ 831.687499][ T746] [ 831.687499][ T746] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 831.695414][ T746] lock_sock_nested+0x41/0x100 [ 831.700713][ T746] mptcp_connect+0x4c3/0x830 [ 831.705832][ T746] __inet_stream_connect+0x25a/0xdd0 [ 831.711650][ T746] inet_stream_connect+0x66/0xa0 [ 831.717127][ T746] __sys_connect+0x312/0x450 [ 831.722248][ T746] __x64_sys_connect+0x7a/0x90 [ 831.727578][ T746] do_syscall_64+0x15f/0xf80 [ 831.732695][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.739116][ T746] [ 831.739116][ T746] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 831.746888][ T746] lock_sock_nested+0x41/0x100 [ 831.752190][ T746] inet_shutdown+0x6a/0x390 [ 831.757217][ T746] nbd_mark_nsock_dead+0x2e9/0x560 [ 831.762854][ T746] recv_work+0x1c2e/0x1d40 [ 831.767800][ T746] process_scheduled_works+0xb5d/0x1860 [ 831.773887][ T746] worker_thread+0xa53/0xfc0 [ 831.778998][ T746] kthread+0x388/0x470 [ 831.783680][ T746] ret_from_fork+0x514/0xb70 [ 831.788829][ T746] ret_from_fork_asm+0x1a/0x30 [ 831.794150][ T746] [ 831.794150][ T746] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 831.801819][ T746] __mutex_lock+0x1a3/0x1550 [ 831.807036][ T746] nbd_queue_rq+0x37b/0x1100 [ 831.812327][ T746] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 831.818493][ T746] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 831.825355][ T746] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 831.831864][ T746] blk_mq_run_hw_queue+0x348/0x4f0 [ 831.837513][ T746] blk_mq_dispatch_list+0xd16/0xe10 [ 831.843274][ T746] blk_mq_flush_plug_list+0x48d/0x570 [ 831.849204][ T746] __blk_flush_plug+0x3ed/0x4d0 [ 831.854695][ T746] __submit_bio+0x28d/0x580 [ 831.859750][ T746] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 831.865908][ T746] block_read_full_folio+0x599/0x830 [ 831.871738][ T746] filemap_read_folio+0x137/0x3b0 [ 831.877326][ T746] do_read_cache_folio+0x358/0x590 [ 831.882968][ T746] read_part_sector+0xb6/0x2b0 [ 831.888307][ T746] adfspart_check_ICS+0xb1/0x960 [ 831.893908][ T746] bdev_disk_changed+0x817/0x1770 [ 831.899484][ T746] blkdev_get_whole+0x380/0x510 [ 831.904861][ T746] bdev_open+0x31e/0xd30 [ 831.909625][ T746] blkdev_open+0x470/0x610 [ 831.914555][ T746] do_dentry_open+0x785/0x14e0 [ 831.920022][ T746] vfs_open+0x3b/0x340 [ 831.924616][ T746] path_openat+0x2e08/0x3860 [ 831.929821][ T746] do_file_open+0x23e/0x4a0 [ 831.934846][ T746] do_sys_openat2+0x113/0x200 [ 831.940046][ T746] __x64_sys_openat+0x138/0x170 [ 831.945423][ T746] do_syscall_64+0x15f/0xf80 [ 831.950540][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.956983][ T746] [ 831.956983][ T746] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 831.964210][ T746] __mutex_lock+0x1a3/0x1550 [ 831.969322][ T746] nbd_queue_rq+0xc6/0x1100 [ 831.974346][ T746] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 831.980417][ T746] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 831.987280][ T746] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 831.994084][ T746] blk_mq_run_hw_queue+0x348/0x4f0 [ 831.999734][ T746] blk_mq_dispatch_list+0xd16/0xe10 [ 832.005483][ T746] blk_mq_flush_plug_list+0x48d/0x570 [ 832.011391][ T746] __blk_flush_plug+0x3ed/0x4d0 [ 832.017229][ T746] __submit_bio+0x28d/0x580 [ 832.022299][ T746] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 832.028493][ T746] block_read_full_folio+0x599/0x830 [ 832.034321][ T746] filemap_read_folio+0x137/0x3b0 [ 832.039970][ T746] do_read_cache_folio+0x358/0x590 [ 832.046335][ T746] read_part_sector+0xb6/0x2b0 [ 832.051835][ T746] adfspart_check_ICS+0xb1/0x960 [ 832.058486][ T746] bdev_disk_changed+0x817/0x1770 [ 832.065536][ T746] blkdev_get_whole+0x380/0x510 [ 832.072710][ T746] bdev_open+0x31e/0xd30 [ 832.078304][ T746] blkdev_open+0x470/0x610 [ 832.085517][ T746] do_dentry_open+0x785/0x14e0 [ 832.090938][ T746] vfs_open+0x3b/0x340 [ 832.095555][ T746] path_openat+0x2e08/0x3860 [ 832.100816][ T746] do_file_open+0x23e/0x4a0 [ 832.106052][ T746] do_sys_openat2+0x113/0x200 [ 832.111275][ T746] __x64_sys_openat+0x138/0x170 [ 832.116654][ T746] do_syscall_64+0x15f/0xf80 [ 832.121860][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.128298][ T746] [ 832.128298][ T746] -> #3 (set->srcu){.+.+}-{0:0}: [ 832.135435][ T746] __synchronize_srcu+0xca/0x300 [ 832.140933][ T746] elevator_switch+0x1e8/0x7a0 [ 832.146368][ T746] elevator_change+0x2cc/0x450 [ 832.151704][ T746] elevator_set_default+0x36c/0x430 [ 832.157470][ T746] blk_register_queue+0x3e9/0x4e0 [ 832.163057][ T746] __add_disk+0x677/0xd50 [ 832.167962][ T746] add_disk_fwnode+0xfb/0x480 [ 832.173160][ T746] nbd_dev_add+0x72c/0xb50 [ 832.178109][ T746] nbd_init+0x168/0x1f0 [ 832.182801][ T746] do_one_initcall+0x250/0x870 [ 832.188109][ T746] do_initcall_level+0x104/0x190 [ 832.193688][ T746] do_initcalls+0x59/0xa0 [ 832.198566][ T746] kernel_init_freeable+0x2a6/0x3e0 [ 832.204298][ T746] kernel_init+0x1d/0x1d0 [ 832.209165][ T746] ret_from_fork+0x514/0xb70 [ 832.214283][ T746] ret_from_fork_asm+0x1a/0x30 [ 832.219571][ T746] [ 832.219571][ T746] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 832.227423][ T746] __mutex_lock+0x1a3/0x1550 [ 832.232539][ T746] elevator_change+0x1b3/0x450 [ 832.237837][ T746] elevator_set_none+0xb5/0x140 [ 832.243255][ T746] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 832.249605][ T746] nbd_start_device+0x17f/0xb10 [ 832.255003][ T746] nbd_genl_connect+0x165b/0x1cf0 [ 832.261188][ T746] genl_family_rcv_msg_doit+0x22a/0x330 [ 832.267266][ T746] genl_rcv_msg+0x61c/0x7a0 [ 832.272320][ T746] netlink_rcv_skb+0x232/0x4b0 [ 832.277625][ T746] genl_rcv+0x28/0x40 [ 832.282133][ T746] netlink_unicast+0x75c/0x8e0 [ 832.287426][ T746] netlink_sendmsg+0x813/0xb40 [ 832.292738][ T746] ____sys_sendmsg+0x972/0x9f0 [ 832.298055][ T746] ___sys_sendmsg+0x2a5/0x360 [ 832.303280][ T746] __x64_sys_sendmsg+0x1bd/0x2a0 [ 832.308789][ T746] do_syscall_64+0x15f/0xf80 [ 832.313902][ T746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.320316][ T746] [ 832.320316][ T746] -> #1 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 832.328925][ T746] blk_alloc_queue+0x546/0x680 [ 832.334234][ T746] __blk_mq_alloc_disk+0x197/0x390 [ 832.339908][ T746] nbd_dev_add+0x499/0xb50 [ 832.344849][ T746] nbd_init+0x168/0x1f0 [ 832.349556][ T746] do_one_initcall+0x250/0x870 [ 832.354851][ T746] do_initcall_level+0x104/0x190 [ 832.360405][ T746] do_initcalls+0x59/0xa0 [ 832.365262][ T746] kernel_init_freeable+0x2a6/0x3e0 [ 832.370986][ T746] kernel_init+0x1d/0x1d0 [ 832.375857][ T746] ret_from_fork+0x514/0xb70 [ 832.380991][ T746] ret_from_fork_asm+0x1a/0x30 [ 832.386293][ T746] [ 832.386293][ T746] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 832.393659][ T746] __lock_acquire+0x15a5/0x2cf0 [ 832.399065][ T746] lock_acquire+0x106/0x350 [ 832.404127][ T746] fs_reclaim_acquire+0x71/0x100 [ 832.409630][ T746] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 832.415966][ T746] __alloc_skb+0x1d0/0x7d0 [ 832.421009][ T746] tcp_stream_alloc_skb+0x3f/0x580 [ 832.426678][ T746] tcp_connect+0x15a9/0x53a0 [ 832.431803][ T746] tcp_v6_connect+0x128d/0x1b10 [ 832.437201][ T746] __inet_stream_connect+0x25a/0xdd0 [ 832.443097][ T746] inet_stream_connect+0x66/0xa0 [ 832.448602][ T746] kernel_connect+0x141/0x1c0 [ 832.453872][ T746] rds_tcp_conn_path_connect+0x6f6/0x930 [ 832.460233][ T746] rds_connect_worker+0x1d8/0x290 [ 832.465793][ T746] process_scheduled_works+0xb5d/0x1860 [ 832.471863][ T746] worker_thread+0xa53/0xfc0 [ 832.476994][ T746] kthread+0x388/0x470 [ 832.481601][ T746] ret_from_fork+0x514/0xb70 [ 832.486722][ T746] ret_from_fork_asm+0x1a/0x30 [ 832.492043][ T746] [ 832.492043][ T746] other info that might help us debug this: [ 832.492043][ T746] [ 832.502271][ T746] Chain exists of: [ 832.502271][ T746] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 832.502271][ T746] [ 832.515247][ T746] Possible unsafe locking scenario: [ 832.515247][ T746] [ 832.522713][ T746] CPU0 CPU1 [ 832.528077][ T746] ---- ---- [ 832.533487][ T746] lock(k-sk_lock-AF_INET6); [ 832.538197][ T746] lock(sk_lock-AF_INET6); [ 832.545329][ T746] lock(k-sk_lock-AF_INET6); [ 832.553093][ T746] lock(fs_reclaim); [ 832.557513][ T746] [ 832.557513][ T746] *** DEADLOCK *** [ 832.557513][ T746] [ 832.565924][ T746] 4 locks held by kworker/u8:6/746: [ 832.571212][ T746] #0: ffff888033cf0940 ((wq_completion)krds_cp_wq#25/0){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 832.582972][ T746] #1: ffffc900040f7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 832.595843][ T746] #2: ffff88802542b680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x930 [ 832.606973][ T746] #3: ffff8880329a5360 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 832.617295][ T746] [ 832.617295][ T746] stack backtrace: [ 832.623197][ T746] CPU: 0 UID: 0 PID: 746 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 832.623215][ T746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 832.623226][ T746] Workqueue: krds_cp_wq#25/0 rds_connect_worker [ 832.623253][ T746] Call Trace: [ 832.623262][ T746] [ 832.623270][ T746] dump_stack_lvl+0xe8/0x150 [ 832.623288][ T746] print_circular_bug+0x2e1/0x300 [ 832.623311][ T746] check_noncircular+0x12e/0x150 [ 832.623333][ T746] __lock_acquire+0x15a5/0x2cf0 [ 832.623353][ T746] ? finish_task_switch+0x15f/0xbe0 [ 832.623372][ T746] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 832.623391][ T746] lock_acquire+0x106/0x350 [ 832.623405][ T746] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 832.623426][ T746] ? ip6_dst_check+0xe2/0x7e0 [ 832.623444][ T746] fs_reclaim_acquire+0x71/0x100 [ 832.623464][ T746] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 832.623483][ T746] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 832.623502][ T746] ? ip6_default_advmss+0x80/0x3b0 [ 832.623521][ T746] ? __alloc_skb+0x1d0/0x7d0 [ 832.623539][ T746] __alloc_skb+0x1d0/0x7d0 [ 832.623556][ T746] tcp_stream_alloc_skb+0x3f/0x580 [ 832.623579][ T746] ? __asan_memset+0x22/0x50 [ 832.623598][ T746] tcp_connect+0x15a9/0x53a0 [ 832.623629][ T746] ? __pfx_tcp_connect+0x10/0x10 [ 832.623648][ T746] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 832.623671][ T746] ? lockdep_hardirqs_on+0x7a/0x110 [ 832.623687][ T746] ? ktime_get_with_offset+0x93/0x2d0 [ 832.623708][ T746] ? seqcount_lockdep_reader_access+0xea/0x100 [ 832.623733][ T746] ? __asan_memset+0x22/0x50 [ 832.623752][ T746] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 832.623771][ T746] ? inet6_hash_connect+0xeb/0x170 [ 832.623793][ T746] tcp_v6_connect+0x128d/0x1b10 [ 832.623821][ T746] ? __pfx_tcp_v6_connect+0x10/0x10 [ 832.623848][ T746] ? __local_bh_enable_ip+0xd0/0x130 [ 832.623863][ T746] ? __bfs+0x153/0x290 [ 832.623878][ T746] ? __bfs+0x153/0x290 [ 832.623893][ T746] ? __pfx_hlock_conflict+0x10/0x10 [ 832.623913][ T746] __inet_stream_connect+0x25a/0xdd0 [ 832.623936][ T746] ? do_raw_spin_lock+0x12b/0x2f0 [ 832.623957][ T746] ? lock_sock_nested+0x6a/0x100 [ 832.623981][ T746] ? __pfx___inet_stream_connect+0x10/0x10 [ 832.624003][ T746] ? inet_stream_connect+0x51/0xa0 [ 832.624023][ T746] ? __local_bh_enable_ip+0xd0/0x130 [ 832.624040][ T746] inet_stream_connect+0x66/0xa0 [ 832.624060][ T746] kernel_connect+0x141/0x1c0 [ 832.624082][ T746] ? net_generic+0x1e/0x240 [ 832.624104][ T746] ? __pfx_kernel_connect+0x10/0x10 [ 832.624131][ T746] ? __local_bh_enable_ip+0xd0/0x130 [ 832.624147][ T746] rds_tcp_conn_path_connect+0x6f6/0x930 [ 832.624168][ T746] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 832.624183][ T746] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 832.624205][ T746] ? process_scheduled_works+0xa70/0x1860 [ 832.624221][ T746] ? process_scheduled_works+0xa70/0x1860 [ 832.624239][ T746] rds_connect_worker+0x1d8/0x290 [ 832.624258][ T746] ? process_scheduled_works+0xa70/0x1860 [ 832.624273][ T746] process_scheduled_works+0xb5d/0x1860 [ 832.624300][ T746] ? __pfx_process_scheduled_works+0x10/0x10 [ 832.624318][ T746] ? assign_work+0x3d5/0x5e0 [ 832.624334][ T746] worker_thread+0xa53/0xfc0 [ 832.624360][ T746] kthread+0x388/0x470 [ 832.624379][ T746] ? __pfx_worker_thread+0x10/0x10 [ 832.624393][ T746] ? __pfx_kthread+0x10/0x10 [ 832.624412][ T746] ret_from_fork+0x514/0xb70 [ 832.624429][ T746] ? __pfx_ret_from_fork+0x10/0x10 [ 832.624444][ T746] ? __switch_to+0xc79/0x1410 [ 832.624468][ T746] ? __pfx_kthread+0x10/0x10 [ 832.624487][ T746] ret_from_fork_asm+0x1a/0x30 [ 832.624511][ T746]