last executing test programs: 2m29.735874763s ago: executing program 0 (id=46): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_timeval(r0, 0x1, 0x2f, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @exit, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x31a19b3c}, 0x94) 2m29.573331251s ago: executing program 0 (id=49): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102, 0x1400}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x81, 0x5a1, 0x7fff}}]}]}]}, 0x4c}}, 0x24040800) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r3, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000029c0)=""/190, 0xbe}, {&(0x7f00000028c0)=""/236, 0xec}, {&(0x7f0000000840)=""/4100, 0x1004}, {&(0x7f00000000c0)=""/252, 0xfc}, {&(0x7f0000000740)=""/251, 0x23}], 0x5}, 0xb}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0x7}], 0x9, 0x4022, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000240)={0x0, 0xffffffff, 0x1, 0x2, 0xd, 0xda84, 0xc, 0x5, {0x0, @in={{0x2, 0x4e20, @broadcast}}, 0xb0, 0x7, 0x9, 0x20003, 0x1}}, &(0x7f0000000040)=0xb0) connect$netrom(r4, 0x0, 0x0) 2m29.224735405s ago: executing program 0 (id=52): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x2}, 0x20}}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x4010744d, &(0x7f0000000000)=0x20000002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket(0x10, 0x80002, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0800450000b00000000000019078ac1e0001ac1414aa0300907803000000450000000010010000ac1e0001ac141435867100000000000ce256b28c04000000fb520009789607675ca638000e7434954373561de584b703c80009e706d30bd224f80607cea11cab1a0010c600000000000000000000000000000a6580a5e97612fe86001273bc2300ad9d19a30000000000000000000cc8f4690000000001067f36c5250000008bad3577bedc19ca05699f2e528cc9dcca218f000000000000000000"], 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6(0xa, 0x3, 0x87) r9 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x4}}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)="01", 0x0}, 0x50) 2m28.083598338s ago: executing program 0 (id=63): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x14}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x11}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x10000000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4004840) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x8, 0x3, "e4edf2b7"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlabel\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x3, 0x0) vmsplice(r2, &(0x7f0000001e40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r3, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x2048040) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20010000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x2, 0x2, 0x5, 0x0, 0x0, {}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xe27}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) 2m27.86781284s ago: executing program 0 (id=65): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x58, r2, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x76}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x38}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x28}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r4, 0x11, 0x2, &(0x7f0000000580)=""/4096, &(0x7f0000000200)=0x1000) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x300, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x48}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x8c}}, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e0001000000000000ffffffff020000080001"], 0x1c}}, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m27.539725316s ago: executing program 0 (id=68): unshare(0x400) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x7, 0x8, 0x0, 0x2}, 0xfffffffe, 0x1, 0xffffffff, 0x0, 0xe9, 0x14, 0xc, 0xc, 0x0, 0x7, {0x4, 0xfac0, 0x8, 0x3, 0x3, 0xffffffff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) bpf$BPF_PROG_TEST_RUN(0x12, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x800) bind$unix(r5, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 2m27.091679189s ago: executing program 32 (id=68): unshare(0x400) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x81, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e000}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x7, 0x8, 0x0, 0x2}, 0xfffffffe, 0x1, 0xffffffff, 0x0, 0xe9, 0x14, 0xc, 0xc, 0x0, 0x7, {0x4, 0xfac0, 0x8, 0x3, 0x3, 0xffffffff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) bpf$BPF_PROG_TEST_RUN(0x12, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x800) bind$unix(r5, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 1.919497205s ago: executing program 4 (id=1919): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000100008018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000220000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085005248b313c4d5b200004500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.54372572s ago: executing program 4 (id=1925): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) (async) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x44, 0x10}, 0x8000) (async) r1 = socket(0x2a, 0x2, 0x0) (async) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, 0x0, 0x0) (async) listen(r2, 0x8) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00'}) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000002000, 0x0, 0x0) (async) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='highspeed', 0x9) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, 0x0, 0xfdef) (async) r7 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x7, 0x5d6, 0x4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) socketpair(0x27, 0x6, 0x5, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) 1.428676506s ago: executing program 1 (id=1927): socket(0x1, 0x803, 0x0) (async) r0 = socket(0x1, 0x803, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000980)={&(0x7f0000000580)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc001}, 0x800) (async) sendmsg$tipc(r1, &(0x7f0000000980)={&(0x7f0000000580)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc001}, 0x800) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001180)={&(0x7f0000000140)={0x1018, 0x14, 0x20, 0x70bd2a, 0x25dfdbfc, {0x21, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1018}, 0x1, 0x0, 0x0, 0x81}, 0x40) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001180)={&(0x7f0000000140)={0x1018, 0x14, 0x20, 0x70bd2a, 0x25dfdbfc, {0x21, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1018}, 0x1, 0x0, 0x0, 0x81}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001200)={0xffffffffffffffff, 0x23, 0x8}, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0x12, 0x21, &(0x7f0000001240)=ANY=[@ANYBLOB="1800000009000000000000000b00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001861000008000000000000000600000018550000070000000000000000000000185500000b000000000000000000000085000000b000000005690400070000001801000020207025000000dfff2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000001a908000000000041450000ffffffffbf9100000000eb00b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001380)='GPL\x00', 0x4, 0x1000, &(0x7f00000013c0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, @cgroup_sock_addr=0x1e, r4, 0x8, &(0x7f00000023c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000002400)={0x3, 0x7, 0x1, 0x401}, 0x10, 0xffffffffffffffff, r5, 0x6, 0x0, &(0x7f0000002440)=[{0x1, 0x4, 0x6, 0x8}, {0x0, 0x1, 0xc, 0x1}, {0x1, 0x2, 0x0, 0x5}, {0x5, 0x4, 0x8, 0x8}, {0x1, 0x1, 0xa, 0x3}, {0x3, 0x1, 0x2, 0xa}], 0x10, 0x2f2}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) 1.427536283s ago: executing program 5 (id=1928): r0 = socket(0x840000000002, 0x3, 0x9) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x1b8, 0x206, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @empty, 0xffffffff, 0x0, 'tunl0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x1}, 0x1ea, 0xc0, 0x120, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket3={{0x28}, 0x1}, @common=@icmp={{0x28}, {0x12, "e07c", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x2, 0x3, 0x1, 0x2, 0x7], 0x2, 0x5}, {0x0, [0x3, 0x6f455bfb4ce26171, 0x6, 0x6, 0x2, 0x21debfafc4f76fce], 0x3}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xe2002454fb7b9fcc, 0xff, 'team0\x00', 'gre0\x00', {}, {0xff}, 0x8, 0x2, 0x5}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0xf9}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) r1 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r1, &(0x7f0000004380)=[{{&(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010100}}}], 0x20}}, {{&(0x7f0000000300)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0x40000c4) 1.267690674s ago: executing program 2 (id=1929): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket(0x40000000015, 0x5, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x1) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000000), 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) 1.25075937s ago: executing program 1 (id=1930): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_OKEY={0x8, 0x18}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffa54, 0x40}}}}, [@NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x91, 0x2}, {0x0, 0x7}, {0x5, 0x3}, {0x9, 0x7}, {0x4, 0x2}, {0x9}, {0x2, 0x5}, {0x6, 0x3}, {0x1, 0x4}, {0x8, 0x7}], "e577d0013de51d6e"}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000840}, 0x4000) 1.230455906s ago: executing program 5 (id=1931): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005a00010000000000000000d531000000040005"], 0x18}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x32, 0xfffc, 0x0, 0x1000}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e6400000008000240"], 0x10c}}, 0x0) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005a00010000000000000000d531000000040005"], 0x18}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r1, 0x3) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x32, 0xfffc, 0x0, 0x1000}}}}}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e6400000008000240"], 0x10c}}, 0x0) (async) 1.095944272s ago: executing program 5 (id=1932): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e1e, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="86edb1c6000000e5db6417e58f44aa00348f0399", 0x14}], 0x1}}], 0x1, 0x20004086) 1.095565319s ago: executing program 3 (id=1933): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001380), r0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000001500)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x6c, r1, 0x1, 0x70bd29, 0x4, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x1c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x20, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40059}, 0xc000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000002000010300000000000000000200000000000000000000fa0b0018"], 0x28}}, 0x0) r3 = accept4(r2, &(0x7f0000000040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}}, &(0x7f00000000c0)=0x80, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xd4, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x7c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x44, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x4001) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000340)=@req={0xc87e, 0xffff, 0x2, 0x1}, 0x10) 1.092573813s ago: executing program 4 (id=1934): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) getsockopt$netlink(r1, 0x10e, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0x2a}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000050000088500000088000000a7000000000000001800000000893d5f51596ea900000000000000000000009500007d000000009500000000000000fbb3a99ca41c0cfda2405d6c2402e1afb9e09fd4cc8f6327a89ab55c157eca92b39dc851434a550050dde303f483756a13f76b9fd797899ac02145205931491d35592e2f0e2ee226ad84b1b3171cbe77799860380d2f8c59cb9d5e7f54be6bb0297d323ed98696136074a99bc03459e96c66cc1ab1c018926da467dbfd2f2f74bdcec35d5cae0870fe66a4066d6b9d50044d202611e9bddfb16a279c66fad86931f27d9a086a46c67d0911"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x90) 1.075166198s ago: executing program 1 (id=1935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x6}, &(0x7f00000000c0)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x2b, 0x4, 0x8, 0x1, 0x2, @private0={0xfc, 0x0, '\x00', 0xa}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7, 0x7, 0xe87, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x7, 0x8000, 0x1, 0x12, {{0x17, 0x4, 0x2, 0x8, 0x5c, 0x65, 0x0, 0x5, 0x4, 0x0, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x11, 0x0, [{0x6, 0xb, "6614d8c9e0b37672d1"}]}, @timestamp={0x44, 0x18, 0x9f, 0x0, 0x6, [0x7, 0x2, 0x9, 0x3, 0x0]}, @ssrr={0x89, 0x1f, 0x8f, [@broadcast, @remote, @remote, @multicast2, @multicast2, @multicast2, @multicast1]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xb4, r3, 0x6ce052c51800d674, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14f5ff00160001000000000000000000d6cdf427a4133f39d50c0d35571ea52660393a81000000000000000000"], 0x14}}, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001bc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000001c00)=ANY=[@ANYBLOB="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"/6055], 0x175c}, 0x1, 0x0, 0x0, 0x240008c1}, 0x8040) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600010700000000000000000d"], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x44) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r7, 0x400454c9, 0x17) ioctl$TUNSETGROUP(r7, 0x400454ce, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r2) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r8, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x134500ca728ae115) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={r1, 0x9}, &(0x7f0000000140)=0x8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a090400000000000000000200000024000480200001800b0001006f626a7265660000100002800900020073797a30000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a814e36b51307d8de2bac32dec09df9e0439a2e300a397cb32699043bb0a9927ef5a0af34b061595871cb3e0bcf8bba409da4e08c197450e0ab3a563b37ed49adb4d67a9d0069d77400e07a2927678b92386cc2991f586525af475c2a450c0b9f9767bb6e3dee0187ff9f2100ea5ac61e9ad7c20bef9135fece7ffbd83b08e255e431420e7d0f99306d33386abf9bd554cf7ca9ec66151bf68681d1904a845eced95468506dc95c55da4bdadfaed32e08e12603a646f295fcb8f7ad171de6d34a14aa5d"], 0x78}}, 0x0) 1.071864424s ago: executing program 2 (id=1936): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7060000b3beb5bd7b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x75, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, 0x0, &(0x7f0000000840)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f00000006c0)={0x3, 0xfffffc01, "bca2f106773d41620ef84130ee6dd87371021286cd19ec9e6fc7fea673eba59f4bbf55858df683e2465cafb33d0ea5017289a97eed50985052cf4fe5d2a09a82b95acf4f8e96f7bd4599a2a00b3737e317c449c3a66d901734e93ee843803d637dbaf4b52b04c6e269a0e213313c938a4538c6b993724a0a35292ed37292678894d680d38a65329512ef48ab5b176145c6313a330628665ebfa4edacd2b39530ec7b01eca045c7a4a2dd0e"}, 0xb3, 0x814, &(0x7f00000002c0)={0x22, 0xe, 0x1, 0xb5, 0xe7}, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000090000000801000002", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 883.660152ms ago: executing program 5 (id=1937): r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{0x4, 0x1, 0x1}, 0x0, 0x1, 0x0, 0x0, "2ed32b48a47711d8"}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x10000) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r2) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000001c0)=0x1, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xcc, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3106d6df47d582c2243d1cd5ab"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f422fb3a61b0284c12b8b0c154"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "b0b57c543159a1e94203ea7c9c"}], @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "fb71a8ea303a69d975e20fdc2b"}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "08717a9dec"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "0e29f6da"}], @NL80211_ATTR_MAC={0xa, 0x6, @random="f9b8a9a49c0d"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4400}, 0x90) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000400)={0x0, 0x1000, "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"}, &(0x7f0000001440)=0x1008) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000001480)={0x7, 0x1f, 0x209, 0x401, 0x200, 0x2, 0x3, 0x6f, r6}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000014c0)={'dvmrp1\x00', 0x0}) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000001500)={0x0, 0x7, 0x1}) (async) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000001540)=0xe807) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001580)={r6, 0x1}, &(0x7f00000015c0)=0x8) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)=@ipv6_deladdr={0x28, 0x15, 0x10, 0x70bd2d, 0x25dfdbff, {0xa, 0x20, 0x1, 0xc8, r7}, [@IFA_FLAGS={0x8, 0x8, 0x2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7eb}]}, 0x28}, 0x1, 0x0, 0x0, 0x24048000}, 0x4000000) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001700)) r10 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r10, &(0x7f0000001900), 0x10) (async) ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f0000001940)={r0, 0x3, 0x8, 0x1}) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000001980)={'ip6erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}) ioctl$sock_inet_SIOCSARP(r11, 0x8955, &(0x7f00000019c0)={{0x2, 0x4e22, @empty}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x54, {0x2, 0x4e21, @remote}, 'pim6reg1\x00'}) (async) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$sock_int(r12, 0x1, 0x27, &(0x7f0000001a40)=0xffffff7f, 0x4) (async) connect$netrom(r12, &(0x7f0000001a80)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) (async) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000001b00), &(0x7f0000001b40)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, &(0x7f0000001b80)={r8, 0xb0a3}, 0x8) 881.969314ms ago: executing program 4 (id=1938): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x200, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xfff1}, {0xfff3, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}]}}]}, 0x3c}}, 0x8014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x4000005}, 0x4008840) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) 880.853523ms ago: executing program 3 (id=1939): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac04}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 843.973323ms ago: executing program 2 (id=1940): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80d, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xc}, @private0, @mcast2, 0x6, 0x7, 0xfff0, 0x400, 0x7, 0x8}) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x25dfdbff, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xfff2}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000000}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@gettaction={0x78, 0x32, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x5}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffff7}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40810}, 0x100) 769.972428ms ago: executing program 3 (id=1941): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000040)='%ps \x00'}, 0x20) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000840)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040), 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000001c0)=0x51) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r9, 0x84, 0x20, &(0x7f0000000000)=0xc, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="feffffff00000005", &(0x7f0000000700)=""/8, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 723.906034ms ago: executing program 1 (id=1942): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xfffe, 0x2}, 0x6) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async, rerun: 32) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x20, 0x1, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) (rerun: 32) 723.417676ms ago: executing program 4 (id=1943): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x5, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}}, 0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000140)={r4}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={r4, 0x5}, 0x8) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd", 0x59}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000340)=""/83, 0x53}], 0x2}, 0x2000) 720.411839ms ago: executing program 5 (id=1944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, 0x0, 0x8094) socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000a62161bedc008753777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) 657.032188ms ago: executing program 2 (id=1945): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x43, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611177000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x82580d03}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffd}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newnexthop={0x34, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_ENCAP_TYPE={0x6}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) (rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r10, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000000580)=0x4000000, 0x4) (async, rerun: 64) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xf8, r8, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x7, 0x13, [{0x6c}, {0x6c}, {0x48}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb2, 0xac, "a4c06cd1ebf48a7f0da577051b8e902ec5902d908d4a8a48b35a97565cda9c7bfd7c445ed4873f300aac8b6b691f50205bf96bea1cbfda3357de7f99f6e680551ae80403d3747c61a6b98584e3e5fe381c0def1428e2a1c1be6fa0654ed89bf23cf0e154db3d6ad557f69dc9e996b736a275a971bb9a320a4a9915308adaaf33a82d549e37808782e0b05dcf91668a13f24a94ce97e92719752ae3fa3482ee68a19a0d895ff9fdc834dd8201c91f"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4c3}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 64) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r11, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2b}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x772f6f21bec27c02) (async, rerun: 32) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) (rerun: 32) 551.808302ms ago: executing program 1 (id=1946): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) recvmmsg$unix(r1, &(0x7f0000001a40)=[{{&(0x7f00000011c0)=@abs, 0x6e, &(0x7f0000001300)=[{&(0x7f0000001240)=""/156, 0x9c}], 0x1, &(0x7f0000001340)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000001380)=@abs, 0x6e, &(0x7f0000001980)=[{&(0x7f0000001400)=""/248, 0xf8}, {&(0x7f0000001500)=""/230, 0xe6}, {&(0x7f0000001600)=""/198, 0xc6}, {&(0x7f0000001700)=""/104, 0x68}, {&(0x7f0000001780)=""/134, 0x86}, {&(0x7f0000001840)=""/146, 0x92}, {&(0x7f0000001900)=""/80, 0x50}], 0x7, &(0x7f0000001a00)}}], 0x2, 0x80002001, &(0x7f0000001ac0)) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001080), &(0x7f0000001180)=0x4) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r2, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) bind$alg(r2, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-256-arm\x00'}, 0x58) 550.742929ms ago: executing program 2 (id=1947): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x8004) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)={@local, @rand_addr=0x64010102, 0x0, 0x3, [@multicast2, @loopback, @private]}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x11}, @val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000880) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3b}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r4, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x35}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x55}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000050}, 0x20008880) ioctl(r2, 0x1, &(0x7f00000005c0)="5c0f45b2ce11293a241e4477b8edd24adf959a052fcf848e7c235639a2ef8957911eaebb31297c5f47ed085b81b028ce1421db99e6bcc16c4966e70b587e105ba54c170d0e942c65bc60a4ccb73fb04f1c0cb75123097d7b") r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x10}, 0x18) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000006c0)=r6, 0x4) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000700)={0x29, @local, 0x4e22, 0x3, 'wrr\x00', 0x1, 0xf5, 0x28}, 0x2c) setsockopt$inet_mreq(r2, 0x0, 0x0, &(0x7f0000000740)={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x8) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000780)=""/105, &(0x7f0000000800)=0x69) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r7, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, r8, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xa242}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x200}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x240400c4) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000009c0)={{0x2c, @remote, 0x4e22, 0x1, 'rr\x00', 0x20, 0x7, 0x2e}, {@loopback, 0x4e20, 0x2, 0x7, 0x1, 0x7}}, 0x44) recvmmsg(r0, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a40)=""/151, 0x97}, {&(0x7f0000000b00)=""/229, 0xe5}, {&(0x7f0000000c00)=""/31, 0x1f}, {&(0x7f0000000c40)=""/231, 0xe7}], 0x4, &(0x7f0000000d80)=""/120, 0x78}, 0x6}, {{&(0x7f0000000e00)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000e80)=""/183, 0xb7}, {&(0x7f0000000f40)=""/215, 0xd7}], 0x2, &(0x7f0000001080)=""/180, 0xb4}, 0xff}, {{&(0x7f0000001140)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, 0x80, &(0x7f00000011c0), 0x0, &(0x7f0000001200)=""/85, 0x55}, 0x9}, {{&(0x7f0000001280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001300)=""/78, 0x4e}, {&(0x7f0000001380)=""/144, 0x90}, {&(0x7f0000001440)=""/41, 0x29}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/24, 0x18}], 0x5, &(0x7f0000002540)=""/45, 0x2d}, 0x6}], 0x4, 0x41, &(0x7f0000002680)={0x0, 0x3938700}) sendmsg$NL80211_CMD_DEL_PMKSA(r9, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002780)={&(0x7f0000002700)={0x64, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2e}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "982f831a9306c2ee39943ce9bcde292d"}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="83caa7a27c9b"}, @NL80211_ATTR_PMK={0x14, 0xfe, "ff5cc37aed8395bf9e46f7cc68bdb4ac"}, @NL80211_ATTR_FILS_CACHE_ID={0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x20000000) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002880)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000028c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002900)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002940)={0xd4, r10, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x54, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x7f}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xa}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40011}, 0x800) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r9, 0x84, 0x1c, &(0x7f0000002ac0), &(0x7f0000002b00)=0x4) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000003200)={&(0x7f0000002b40), 0xc, &(0x7f00000031c0)={&(0x7f0000003000)={0x188, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20048041}, 0x880) 545.048469ms ago: executing program 4 (id=1948): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x3a) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$802154_raw(r3, &(0x7f0000000140)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x1, 0x4, 0x3, @vifc_lcl_ifindex=r4, @remote}, 0x10) sendto$inet6(r1, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000380)={0x1f, "8e62e30cd7410d0a129955c2ba805a61e7ecae56635caae3b228e032e73707190b985938445eaf94850313c816be9dcb79740f972a674b1fbca7cf14956e8d3fd65753f36898dc1e911a85410a350e09c51669a8c49cf598a80a6c24f2d97d6a4be89bf6b3f05e0b99e9a511eedf780f81f799a88730d36fd51b3c09922b7354"}) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvmsg$unix(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x120) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x60, r6, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x60}}, 0x20000000) splice(r1, &(0x7f0000000240)=0x8000000000000000, r9, &(0x7f0000000280), 0x4, 0x1) 537.245788ms ago: executing program 5 (id=1949): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x88, 0x5, 0x6}) (async) r2 = getpid() syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/time_for_children\x00') (async) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@RTM_NEWNSID={0x3c, 0x58, 0x200, 0x70bd2a, 0x6, {}, [@NETNSA_FD={0x8, 0x3, r1}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_PID={0x8, 0x2, r2}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000005}, 0x400c810) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4800) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a00)={0x338, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}]}, @TIPC_NLA_NODE={0x154, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "267a34d2112357c8b96d36ebec18ed3d153720f31a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x67, 0x3, "6a806ee4362137ba845889fcb35038a02721163c2165a0490d6ac0e9277b003d60a0b34e6548d365534dcb157b17899c7ce3148701bfea401b219ae654746613b2dbca7190c3bd37ee5d6219afad40096fe79cfe0d15aba7513149eaff59001a5a555c"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "ff0819b351d363b48950791227b7747be43a933e687a"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "46c921399439b9907fb1f2b400c78e25f2e0e9e828f0f4ce16007f277aacb197d487"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x401}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc0000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa2e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x338}}, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xf}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/217, 0xd9}, {&(0x7f0000000900)=""/229, 0xe5}, {&(0x7f0000004100)=""/4104, 0x1008}, {&(0x7f0000000640)=""/248, 0xf8}], 0x4}, 0x8001}], 0x4, 0x40010020, 0x0) 407.820592ms ago: executing program 3 (id=1950): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x1, 0x2, 0x4, 0x4, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x5, &(0x7f00000002c0)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x19}, 0x90) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0xa0}}, 0x0) 407.253985ms ago: executing program 1 (id=1951): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3fab00000000000000002e00"], 0x50}}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000c, 0x3032, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000040)={0x5, 0x800007, 0x2, 0x6, 0x8, 0x8, 0x7, 0x4}, &(0x7f0000000080)={0x97, 0x8, 0x0, 0x1, 0x5, 0x4, 0x3, 0x4}, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80082002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040026bd7000fcdbdf254a00000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000006d6500000800030000000000080001007063690011000200303030303a30303a31302e3000000000487e116258f48e4ea0960e721ca60f17dacda5d5370ad1c15ae42344f1879d4c09c32154c6d6de2de6fcd0223373900bc1e7b9c45d66e2d533393f79177958c53015575952bd4331c20b0dcd25f9a853241293eb8721e8547f33"], 0x70}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 363.03195ms ago: executing program 2 (id=1952): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, r2, 0x4}, 0x38) accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, 0x0) 323.071674ms ago: executing program 3 (id=1953): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) (async) unshare(0x22020400) r1 = epoll_create1(0x0) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x2}) (async) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80800000, 0x0, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 0s ago: executing program 3 (id=1954): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='percpu_alloc_percpu\x00', r0}, 0x10) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (rerun: 64) kernel console output (not intermixed with test programs): : batadv0: Interface activated: batadv_slave_1 [ 97.723200][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.740631][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.776036][ T4573] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.792436][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.812728][ T4342] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.822496][ T4342] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.855348][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.872492][ T4342] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.882434][ T4573] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.910897][ T4573] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.922835][ T4573] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.947065][ T4573] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.997094][ T5149] Bluetooth: hci2: command tx timeout [ 98.077310][ T5149] Bluetooth: hci1: command tx timeout [ 98.078702][ T5843] Bluetooth: hci4: command tx timeout [ 98.082806][ T5149] Bluetooth: hci0: command tx timeout [ 98.088819][ T5843] Bluetooth: hci3: command tx timeout [ 98.094653][ T4573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.110161][ T5829] veth0_vlan: entered promiscuous mode [ 98.120108][ T4573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.175008][ T5838] veth0_vlan: entered promiscuous mode [ 98.185204][ T5827] veth0_vlan: entered promiscuous mode [ 98.202977][ T5838] veth1_vlan: entered promiscuous mode [ 98.211047][ T4573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.219428][ T4573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.236583][ T5827] veth1_vlan: entered promiscuous mode [ 98.271671][ T5829] veth1_vlan: entered promiscuous mode [ 98.309921][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.330833][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.354286][ T5827] veth0_macvtap: entered promiscuous mode [ 98.358930][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.402177][ T5827] veth1_macvtap: entered promiscuous mode [ 98.440076][ T5838] veth0_macvtap: entered promiscuous mode [ 98.467071][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.475529][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.520132][ T5838] veth1_macvtap: entered promiscuous mode [ 98.542232][ T5829] veth0_macvtap: entered promiscuous mode [ 98.573593][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.609551][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.631643][ T5829] veth1_macvtap: entered promiscuous mode [ 98.687794][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.721435][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.739195][ T4573] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.751844][ T4573] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.769100][ T4573] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.801080][ T4573] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.862556][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.916266][ T4573] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.929098][ T4573] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.959226][ T4573] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.969039][ T4573] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.000445][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.079981][ T4573] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.102917][ T4573] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.142980][ T4573] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.155789][ T4573] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.168641][ T5965] syz.3.10 uses obsolete (PF_INET,SOCK_PACKET) [ 99.219931][ T5966] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 99.244872][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.256904][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.453557][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.475677][ T4573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.487563][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.496699][ T4573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.539286][ T5974] Zero length message leads to an empty skb [ 99.614715][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.662756][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.748572][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.779951][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.829009][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.867011][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.886036][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 100.086808][ T5843] Bluetooth: hci2: command tx timeout [ 100.157326][ T5835] Bluetooth: hci4: command tx timeout [ 100.163164][ T5835] Bluetooth: hci1: command tx timeout [ 100.166775][ T5149] Bluetooth: hci3: command tx timeout [ 100.169320][ T5843] Bluetooth: hci0: command tx timeout [ 100.206351][ T5993] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.221400][ T5993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 100.537414][ T6007] dvmrp0: entered allmulticast mode [ 100.595048][ T5999] trusted_key: syz.2.17 sent an empty control message without MSG_MORE. [ 100.825841][ T6020] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.112323][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 101.135487][ T6032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.163216][ T6036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.171984][ T6030] syzkaller0: entered promiscuous mode [ 101.216781][ T6030] syzkaller0: entered allmulticast mode [ 101.244924][ T6032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.275729][ T6034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.332964][ T6034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.405414][ T6030] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 101.429587][ T6046] netlink: 788 bytes leftover after parsing attributes in process `syz.4.25'. [ 101.911764][ T6066] netlink: 256 bytes leftover after parsing attributes in process `syz.3.30'. [ 101.947450][ T6066] sctp: [Deprecated]: syz.3.30 (pid 6066) Use of struct sctp_assoc_value in delayed_ack socket option. [ 101.947450][ T6066] Use struct sctp_sack_info instead [ 102.271631][ T6073] tipc: Started in network mode [ 102.277632][ T6073] tipc: Node identity ca1efcba7a87, cluster identity 4711 [ 102.277925][ T6080] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 102.285551][ T6073] tipc: Enabled bearer , priority 0 [ 102.310970][ T6073] tipc: Resetting bearer [ 102.324715][ T6081] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 102.490774][ T6094] netlink: 'syz.3.37': attribute type 1 has an invalid length. [ 102.552589][ T6098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.37'. [ 102.848476][ T6072] tipc: Disabling bearer [ 103.345131][ T6113] netlink: 488 bytes leftover after parsing attributes in process `syz.1.43'. [ 103.410241][ T6119] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 103.601135][ T6131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.47'. [ 104.189665][ T6157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.54'. [ 104.384975][ T6157] bond1 (unregistering): Released all slaves [ 104.566070][ T6165] tipc: Enabling of bearer rejected, failed to enable media [ 104.930208][ T6179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.251068][ T6190] xt_l2tp: v2 tid > 0xffff: 1114244 [ 105.258965][ T6191] Unknown options in mask b7f2 [ 105.601173][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'. [ 105.811032][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.844843][ T6213] netlink: 'syz.2.70': attribute type 11 has an invalid length. [ 105.953484][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.008885][ T6213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.70'. [ 106.090559][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.287914][ T6226] netlink: 63 bytes leftover after parsing attributes in process `syz.2.75'. [ 106.363980][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.867304][ T12] bridge_slave_1: left allmulticast mode [ 106.906701][ T12] bridge_slave_1: left promiscuous mode [ 106.933898][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.046493][ T12] bridge_slave_0: left allmulticast mode [ 107.056712][ T12] bridge_slave_0: left promiscuous mode [ 107.066230][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.391486][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.400393][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.411036][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 107.419995][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.431262][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 107.623223][ T6262] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 107.783827][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.795593][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.807946][ T12] bond0 (unregistering): Released all slaves [ 108.020928][ T6267] syzkaller0: entered promiscuous mode [ 108.038660][ T6267] syzkaller0: entered allmulticast mode [ 108.148070][ T6270] bridge_slave_0: left allmulticast mode [ 108.152513][ T6282] netlink: 'syz.3.85': attribute type 1 has an invalid length. [ 108.154112][ T6270] bridge_slave_0: left promiscuous mode [ 108.182777][ T6282] netlink: 204 bytes leftover after parsing attributes in process `syz.3.85'. [ 108.192962][ T6270] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.219016][ T6270] bridge_slave_1: left allmulticast mode [ 108.224925][ T6270] bridge_slave_1: left promiscuous mode [ 108.232777][ T6270] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.254418][ T6270] bond0: (slave bond_slave_0): Releasing backup interface [ 108.266471][ T6270] bond0: (slave bond_slave_1): Releasing backup interface [ 108.281998][ T6270] team0: Port device team_slave_0 removed [ 108.292874][ T6270] team0: Port device team_slave_1 removed [ 108.299760][ T6270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.307689][ T6270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.316392][ T6270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.324362][ T6270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.335088][ T6270] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 108.358835][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 108.371264][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 108.386713][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 108.400580][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 108.412571][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 108.424022][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 108.630353][ T6280] warning: `syz.1.88' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.518875][ T5843] Bluetooth: hci2: command tx timeout [ 110.190311][ T4573] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.200353][ T4573] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.256720][ T6320] netlink: 'syz.4.95': attribute type 3 has an invalid length. [ 110.270897][ T6320] netlink: 'syz.4.95': attribute type 3 has an invalid length. [ 110.285236][ T4573] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.323384][ T4573] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.537920][ T12] hsr_slave_0: left promiscuous mode [ 110.571042][ T6328] Cannot find add_set index 1 as target [ 110.584351][ T12] hsr_slave_1: left promiscuous mode [ 110.630533][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.670956][ T6331] raw_sendmsg: syz.1.97 forgot to set AF_INET. Fix it! [ 110.690706][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.772207][ T12] veth1_macvtap: left promiscuous mode [ 110.793900][ T12] veth0_macvtap: left promiscuous mode [ 110.824893][ T12] veth1_vlan: left promiscuous mode [ 110.838694][ T12] veth0_vlan: left promiscuous mode [ 111.239879][ T12] team0 (unregistering): Port device team_slave_1 removed [ 111.273794][ T12] team0 (unregistering): Port device team_slave_0 removed [ 111.596701][ T5843] Bluetooth: hci2: command tx timeout [ 111.616683][ T6342] erspan0: entered promiscuous mode [ 111.629954][ T6342] erspan0: entered allmulticast mode [ 111.751061][ T6354] __nla_validate_parse: 70 callbacks suppressed [ 111.751083][ T6354] netlink: 28 bytes leftover after parsing attributes in process `syz.1.107'. [ 112.094433][ T6371] unsupported nla_type 52263 [ 112.198003][ T6365] netlink: 44 bytes leftover after parsing attributes in process `syz.4.109'. [ 112.321526][ T6372] xfrm1: entered allmulticast mode [ 112.503294][ T6254] chnl_net:caif_netlink_parms(): no params data found [ 112.537820][ T6383] syz_tun: entered allmulticast mode [ 112.714460][ T6391] syz_tun: left allmulticast mode [ 113.155305][ T6254] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.211943][ T6254] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.259129][ T6254] bridge_slave_0: entered allmulticast mode [ 113.293429][ T6254] bridge_slave_0: entered promiscuous mode [ 113.346062][ T6254] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.370009][ T6254] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.400871][ T6254] bridge_slave_1: entered allmulticast mode [ 113.428813][ T6254] bridge_slave_1: entered promiscuous mode [ 113.478260][ T6415] lo: entered allmulticast mode [ 113.521612][ T6415] tunl0: entered allmulticast mode [ 113.530986][ T6415] gre0: entered allmulticast mode [ 113.556892][ T6415] gretap0: entered allmulticast mode [ 113.574831][ T6415] erspan0: entered allmulticast mode [ 113.594282][ T6415] ip_vti0: entered allmulticast mode [ 113.606189][ T6415] ip6_vti0: entered allmulticast mode [ 113.618433][ T6415] sit0: entered allmulticast mode [ 113.629995][ T6415] ip6tnl0: entered allmulticast mode [ 113.650539][ T6415] ip6gre0: entered allmulticast mode [ 113.673297][ T6415] syz_tun: entered allmulticast mode [ 113.679005][ T5843] Bluetooth: hci2: command tx timeout [ 113.691389][ T6415] ip6gretap0: entered allmulticast mode [ 113.703475][ T6415] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.711451][ T6415] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.721886][ T6415] bridge0: entered allmulticast mode [ 113.733811][ T6415] vcan0: entered allmulticast mode [ 113.746298][ T6415] bond0: entered allmulticast mode [ 113.752027][ T6415] bond_slave_0: entered allmulticast mode [ 113.759067][ T6415] bond_slave_1: entered allmulticast mode [ 113.773927][ T6415] team0: entered allmulticast mode [ 113.779818][ T6415] team_slave_0: entered allmulticast mode [ 113.785663][ T6415] team_slave_1: entered allmulticast mode [ 113.798478][ T6415] dummy0: entered allmulticast mode [ 113.813414][ T6415] nlmon0: entered allmulticast mode [ 113.821956][ T6415] caif0: entered allmulticast mode [ 113.830262][ T6415] batadv0: entered allmulticast mode [ 113.851252][ T6415] vxcan0: entered allmulticast mode [ 113.858530][ T6415] vxcan1: entered allmulticast mode [ 113.868585][ T6415] veth0: entered allmulticast mode [ 113.880137][ T6415] veth1: entered allmulticast mode [ 113.892307][ T6415] wg0: entered allmulticast mode [ 113.907809][ T6415] wg1: entered allmulticast mode [ 113.920594][ T6415] wg2: entered allmulticast mode [ 113.928873][ T6415] veth0_to_bridge: entered allmulticast mode [ 113.947980][ T6415] veth1_to_bridge: entered allmulticast mode [ 113.961005][ T6415] veth0_to_bond: entered allmulticast mode [ 113.975183][ T6415] veth1_to_bond: entered allmulticast mode [ 113.995355][ T6415] veth0_to_team: entered allmulticast mode [ 114.009811][ T6415] veth1_to_team: entered allmulticast mode [ 114.022053][ T6415] veth0_to_batadv: entered allmulticast mode [ 114.047685][ T6415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.055853][ T6415] batadv_slave_0: entered allmulticast mode [ 114.077915][ T6415] veth1_to_batadv: entered allmulticast mode [ 114.090692][ T6415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.098980][ T6415] batadv_slave_1: entered allmulticast mode [ 114.110665][ T6415] xfrm0: entered allmulticast mode [ 114.119302][ T6415] veth0_to_hsr: entered allmulticast mode [ 114.131739][ T6415] hsr_slave_0: entered allmulticast mode [ 114.140819][ T6415] veth1_to_hsr: entered allmulticast mode [ 114.154756][ T6415] hsr_slave_1: entered allmulticast mode [ 114.164060][ T6415] hsr0: entered allmulticast mode [ 114.177446][ T6415] veth1_virt_wifi: entered allmulticast mode [ 114.189995][ T6415] veth0_virt_wifi: entered allmulticast mode [ 114.201923][ T6415] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 114.210925][ T6415] veth1_vlan: entered allmulticast mode [ 114.234296][ T6415] veth0_vlan: entered allmulticast mode [ 114.260951][ T6415] vlan0: entered allmulticast mode [ 114.267377][ T6415] vlan1: entered allmulticast mode [ 114.275264][ T6415] macvlan0: entered allmulticast mode [ 114.288293][ T6415] macvlan1: entered allmulticast mode [ 114.298332][ T6415] ipvlan0: entered allmulticast mode [ 114.304007][ T6415] ipvlan1: entered allmulticast mode [ 114.311019][ T6415] veth1_macvtap: entered allmulticast mode [ 114.320610][ T6415] veth0_macvtap: entered allmulticast mode [ 114.332095][ T6415] macvtap0: entered allmulticast mode [ 114.357007][ T6415] macsec0: entered allmulticast mode [ 114.373507][ T6415] geneve0: entered allmulticast mode [ 114.388147][ T6415] geneve1: entered allmulticast mode [ 114.397850][ T6415] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 114.418219][ T6415] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 114.428814][ T6415] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 114.447827][ T6415] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 114.466945][ T6415] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 114.495956][ T6415] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 114.557855][ T6437] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 114.588396][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.612278][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.706150][ T6254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.782637][ T6460] netlink: 'syz.1.130': attribute type 178 has an invalid length. [ 114.806306][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.829164][ T6254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.839148][ T6460] netlink: 'syz.1.130': attribute type 27 has an invalid length. [ 114.876669][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.135286][ T6254] team0: Port device team_slave_0 added [ 115.163379][ T6254] team0: Port device team_slave_1 added [ 115.285538][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.135'. [ 115.338458][ T6254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.361172][ T6254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.456215][ T6254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.480291][ T6254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.491092][ T6254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.526559][ T6254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.582806][ T6499] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 115.593682][ T6501] netlink: 64 bytes leftover after parsing attributes in process `syz.1.138'. [ 115.655352][ T6501] netlink: 64 bytes leftover after parsing attributes in process `syz.1.138'. [ 115.768488][ T5843] Bluetooth: hci2: command tx timeout [ 115.978042][ T6254] hsr_slave_0: entered promiscuous mode [ 115.985739][ T6254] hsr_slave_1: entered promiscuous mode [ 116.000728][ T6254] debugfs: 'hsr0' already exists in 'hsr' [ 116.006843][ T6254] Cannot create hsr debugfs directory [ 116.013356][ T6517] netlink: 24 bytes leftover after parsing attributes in process `syz.3.143'. [ 116.087285][ T6515] tipc: Started in network mode [ 116.092386][ T6515] tipc: Node identity ce8682d332eb, cluster identity 4711 [ 116.106795][ T6515] tipc: Enabled bearer , priority 0 [ 116.147931][ T6525] netlink: 20 bytes leftover after parsing attributes in process `syz.2.144'. [ 116.178958][ T6515] syzkaller0: entered promiscuous mode [ 116.184609][ T6515] syzkaller0: entered allmulticast mode [ 116.239622][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.145'. [ 116.262621][ T6526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.145'. [ 116.282430][ T6526] netlink: 'syz.3.145': attribute type 11 has an invalid length. [ 116.283425][ T6528] netlink: 48 bytes leftover after parsing attributes in process `syz.1.146'. [ 116.304082][ T6515] tipc: Resetting bearer [ 116.348025][ T6514] tipc: Resetting bearer [ 116.396250][ T6514] tipc: Disabling bearer [ 116.463391][ T6526] netlink: 'syz.3.145': attribute type 11 has an invalid length. [ 116.463410][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.482698][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.643800][ T6453] IPVS: starting estimator thread 0... [ 116.658303][ T6539] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 116.680896][ T6539] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 116.762236][ T6546] IPVS: using max 26 ests per chain, 62400 per kthread [ 116.864985][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.887408][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.215620][ T6572] xt_nat: multiple ranges no longer supported [ 117.598438][ T6254] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 117.653860][ T6254] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 117.760971][ T6254] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 117.813618][ T6254] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 118.094921][ T6254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.184383][ T6254] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.226126][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.233492][ T4342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.290825][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.298200][ T4342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.338085][ T6610] tipc: Failed to remove unknown binding: 66,1,1/0:3040774383/3040774385 [ 118.634882][ T6625] __nla_validate_parse: 2 callbacks suppressed [ 118.634905][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'. [ 118.663076][ T6625] netlink: 'syz.1.168': attribute type 5 has an invalid length. [ 118.671271][ T6625] netlink: 20 bytes leftover after parsing attributes in process `syz.1.168'. [ 118.835631][ T6625] geneve2: entered promiscuous mode [ 118.849456][ T6625] geneve2: entered allmulticast mode [ 118.868869][ T36] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 118.933663][ T6635] bridge0: port 3(batadv1) entered blocking state [ 118.967519][ T6635] bridge0: port 3(batadv1) entered disabled state [ 118.998654][ T6635] batadv1: entered allmulticast mode [ 119.020605][ T6635] batadv1: entered promiscuous mode [ 119.033937][ T6639] netlink: 68 bytes leftover after parsing attributes in process `syz.2.170'. [ 119.045370][ T36] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 119.076680][ T36] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 119.095593][ T36] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 119.240188][ T6647] netlink: 'syz.3.172': attribute type 12 has an invalid length. [ 119.310456][ T6254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.401867][ T6652] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20001 [ 119.406814][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 119.418511][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 119.432741][ T6655] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20001 [ 119.457889][ T6654] netlink: 'syz.1.174': attribute type 11 has an invalid length. [ 119.479694][ T6652] netlink: 5 bytes leftover after parsing attributes in process `syz.4.175'. [ 119.514278][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.176'. [ 119.871200][ T6672] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 119.918304][ T6673] syzkaller0: entered promiscuous mode [ 119.925282][ T6673] syzkaller0: entered allmulticast mode [ 119.992118][ T6665] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 120.019235][ T6681] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.182'. [ 120.155925][ T6686] syzkaller0: entered promiscuous mode [ 120.173786][ T6686] syzkaller0: entered allmulticast mode [ 120.268391][ T6691] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 120.282331][ T6694] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.291987][ T6691] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 120.305294][ T6698] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.482439][ T6254] veth0_vlan: entered promiscuous mode [ 120.528162][ T6254] veth1_vlan: entered promiscuous mode [ 120.692307][ T6254] veth0_macvtap: entered promiscuous mode [ 120.740266][ T6254] veth1_macvtap: entered promiscuous mode [ 120.771481][ T6720] netlink: 256 bytes leftover after parsing attributes in process `syz.3.192'. [ 120.828463][ T6254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.883535][ T6254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.948967][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.975355][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.009541][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.037878][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.279720][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.312960][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.413133][ T6747] netlink: 'syz.4.197': attribute type 1 has an invalid length. [ 121.582881][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.606620][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.828771][ T6760] x_tables: duplicate underflow at hook 3 [ 122.785822][ T6801] netlink: 20 bytes leftover after parsing attributes in process `syz.5.208'. [ 122.820847][ T6798] netlink: 68 bytes leftover after parsing attributes in process `syz.5.208'. [ 122.875804][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 123.274531][ T5851] udevd[5851]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 123.339815][ T5850] udevd[5850]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 123.545826][ T6832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.627945][ T6836] dvmrp0: left allmulticast mode [ 123.845824][ T6854] netlink: 'syz.1.225': attribute type 1 has an invalid length. [ 124.020638][ T6854] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.092493][ T6856] bond1: (slave ip6erspan0): making interface the new active one [ 124.105524][ T6856] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 124.483753][ T6891] __nla_validate_parse: 8 callbacks suppressed [ 124.483774][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'. [ 124.705581][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.238'. [ 124.822871][ T6912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.329887][ T6922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.244'. [ 125.616918][ T6947] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 125.649662][ T6947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.248'. [ 125.675242][ T6949] xt_limit: Overflow, try lower: 604147548/4200216962 [ 125.704287][ T6947] netlink: 'syz.1.248': attribute type 16 has an invalid length. [ 125.712641][ T6947] netlink: 'syz.1.248': attribute type 17 has an invalid length. [ 125.828520][ T6947] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.217365][ T6973] netlink: 'syz.3.257': attribute type 1 has an invalid length. [ 126.255820][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'. [ 126.283863][ T6985] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.291920][ T6993] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 126.305218][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.259'. [ 126.337463][ T6983] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 126.370520][ T6973] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.394990][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.262'. [ 126.905845][ T7020] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 126.938933][ T7014] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.946634][ T7014] IPv6: NLM_F_CREATE should be set when creating new route [ 126.953888][ T7014] IPv6: NLM_F_CREATE should be set when creating new route [ 126.983970][ T7020] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 127.036916][ T7014] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.132286][ T7030] netlink: 'syz.3.272': attribute type 4 has an invalid length. [ 127.144246][ T7035] pimreg: entered allmulticast mode [ 127.173992][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.272'. [ 127.248878][ T7038] netlink: 'syz.5.276': attribute type 5 has an invalid length. [ 127.507141][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.5.279'. [ 127.519755][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.565781][ T7049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.783525][ T7067] ipt_REJECT: TCP_RESET invalid for non-tcp [ 127.948288][ T7081] netlink: 'syz.2.289': attribute type 15 has an invalid length. [ 127.965492][ T7081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.289'. [ 128.353082][ T7102] Driver unsupported XDP return value 0 on prog (id 50) dev N/A, expect packet loss! [ 128.383858][ T7104] netem: change failed [ 128.443066][ T7104] Cannot find add_set index 1 as target [ 128.700868][ T7116] netlink: 'syz.2.303': attribute type 1 has an invalid length. [ 128.767398][ T7130] netlink: 'syz.1.307': attribute type 2 has an invalid length. [ 128.801579][ T7130] netlink: 'syz.1.307': attribute type 2 has an invalid length. [ 128.829221][ T7130] netlink: 'syz.1.307': attribute type 1 has an invalid length. [ 128.848411][ T7132] bridge_slave_1: left allmulticast mode [ 128.874668][ T7132] bridge_slave_1: left promiscuous mode [ 128.895269][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.903304][ T7130] netlink: 'syz.1.307': attribute type 2 has an invalid length. [ 128.959013][ T7132] bridge_slave_0: left allmulticast mode [ 128.997120][ T7130] netlink: 'syz.1.307': attribute type 1 has an invalid length. [ 129.006482][ T7132] bridge_slave_0: left promiscuous mode [ 129.030415][ T7132] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.132712][ T7143] Unsupported ieee802154 address type: 0 [ 129.445128][ T7159] Unsupported ieee802154 address type: 0 [ 129.869412][ T7186] vlan2: entered promiscuous mode [ 129.874531][ T7186] bond0: entered promiscuous mode [ 129.892585][ T7186] bond_slave_0: entered promiscuous mode [ 129.904450][ T7186] bond_slave_1: entered promiscuous mode [ 130.133270][ T7201] __nla_validate_parse: 3 callbacks suppressed [ 130.133291][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.324'. [ 130.650729][ T7236] netlink: 16 bytes leftover after parsing attributes in process `syz.5.336'. [ 130.739104][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.337'. [ 130.778848][ T7240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.337'. [ 130.847840][ T7247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.023168][ T7251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'. [ 131.422171][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 131.432660][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 131.549299][ T7276] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.570887][ T7276] netlink: 'syz.2.351': attribute type 1 has an invalid length. [ 131.652688][ T7276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.682746][ T7279] sctp: [Deprecated]: syz.4.353 (pid 7279) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.682746][ T7279] Use struct sctp_sack_info instead [ 131.802083][ T7283] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.814101][ T7283] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 131.827028][ T7283] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 131.902429][ T7276] veth5: entered promiscuous mode [ 131.911687][ T7276] bond1: (slave veth5): Enslaving as an active interface with a down link [ 131.940629][ T7289] vlan2: entered allmulticast mode [ 131.946167][ T7289] bond1: entered allmulticast mode [ 132.156069][ T7300] netlink: 'syz.2.357': attribute type 10 has an invalid length. [ 132.207555][ T7300] batman_adv: batadv0: Adding interface: team0 [ 132.214161][ T7300] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.286599][ T7300] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 132.472947][ T7315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.362'. [ 132.492384][ T7313] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.499826][ T7313] IPv6: NLM_F_CREATE should be set when creating new route [ 132.507148][ T7313] IPv6: NLM_F_CREATE should be set when creating new route [ 132.518390][ T7313] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.743735][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.368'. [ 133.044483][ T7338] netlink: 256 bytes leftover after parsing attributes in process `syz.4.373'. [ 133.083146][ T7341] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 133.095348][ T7341] geneve2: left promiscuous mode [ 133.987064][ T7389] Bluetooth: MGMT ver 1.23 [ 134.711545][ T7377] tipc: Started in network mode [ 134.738521][ T7377] tipc: Node identity cad7a202a8d9, cluster identity 4711 [ 134.764499][ T7377] tipc: Enabled bearer , priority 0 [ 135.199063][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.393'. [ 135.361349][ T7376] tipc: Disabling bearer [ 136.058592][ T7476] netlink: 'syz.3.401': attribute type 1 has an invalid length. [ 136.081759][ T7476] netlink: 228 bytes leftover after parsing attributes in process `syz.3.401'. [ 136.491505][ T7488] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 136.536061][ T7488] bond2 (unregistering): Released all slaves [ 136.746830][ T7514] netlink: 'syz.3.408': attribute type 1 has an invalid length. [ 136.786567][ T7514] netlink: 228 bytes leftover after parsing attributes in process `syz.3.408'. [ 136.813830][ T7510] netlink: 'syz.3.408': attribute type 1 has an invalid length. [ 136.830996][ T7510] netlink: 228 bytes leftover after parsing attributes in process `syz.3.408'. [ 136.877000][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.408'. [ 136.911010][ T7520] netlink: 'syz.1.411': attribute type 6 has an invalid length. [ 136.940144][ T7522] netlink: 'syz.1.411': attribute type 6 has an invalid length. [ 137.418943][ T7554] netlink: 'syz.4.418': attribute type 1 has an invalid length. [ 137.437510][ T7554] netlink: 224 bytes leftover after parsing attributes in process `syz.4.418'. [ 137.683299][ T7569] netlink: 'syz.3.423': attribute type 2 has an invalid length. [ 137.716203][ T7569] netlink: 44 bytes leftover after parsing attributes in process `syz.3.423'. [ 138.162745][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.172094][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.229260][ T7605] netlink: 'syz.3.430': attribute type 1 has an invalid length. [ 138.263009][ T7594] syzkaller1: entered promiscuous mode [ 138.278950][ T7594] syzkaller1: entered allmulticast mode [ 138.655394][ T7619] netlink: 5636 bytes leftover after parsing attributes in process `syz.1.431'. [ 138.873918][ T7630] netlink: 'syz.3.438': attribute type 5 has an invalid length. [ 138.890929][ T7632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.436'. [ 138.917782][ T7633] xt_l2tp: wrong L2TP version: 0 [ 138.933398][ T7632] netlink: 104 bytes leftover after parsing attributes in process `syz.2.436'. [ 139.635104][ T7671] delete_channel: no stack [ 139.647837][ T7669] x_tables: duplicate underflow at hook 1 [ 139.862261][ T7672] syzkaller0: entered promiscuous mode [ 139.890096][ T7672] syzkaller0: entered allmulticast mode [ 140.554148][ T7714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.015375][ T7731] __nla_validate_parse: 40 callbacks suppressed [ 141.015398][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'. [ 142.039339][ T7719] tipc: Enabling of bearer rejected, failed to enable media [ 142.295702][ T7757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.468'. [ 142.334430][ T7757] netlink: 'syz.5.468': attribute type 1 has an invalid length. [ 142.357674][ T7758] netlink: 52 bytes leftover after parsing attributes in process `syz.2.470'. [ 142.370168][ T7757] netlink: 'syz.5.468': attribute type 1 has an invalid length. [ 142.406028][ T7757] netlink: 'syz.5.468': attribute type 2 has an invalid length. [ 142.444558][ T7757] netlink: 68 bytes leftover after parsing attributes in process `syz.5.468'. [ 142.678479][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.474'. [ 143.093533][ T7790] veth0_to_bond: entered allmulticast mode [ 143.329321][ T7809] netlink: 204 bytes leftover after parsing attributes in process `syz.1.481'. [ 143.928820][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.488'. [ 144.242529][ T7855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.491'. [ 144.296039][ T7855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.491'. [ 144.421831][ T7869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.568341][ T7875] netlink: 64 bytes leftover after parsing attributes in process `syz.5.495'. [ 144.749337][ T7885] netlink: 'syz.1.499': attribute type 1 has an invalid length. [ 144.791846][ T7881] dvmrp0: entered allmulticast mode [ 144.832765][ T7890] netlink: 'syz.2.500': attribute type 83 has an invalid length. [ 144.910759][ T7885] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.990907][ T7902] netlink: 'syz.2.500': attribute type 2 has an invalid length. [ 145.009414][ T7902] netlink: 'syz.2.500': attribute type 8 has an invalid length. [ 145.021728][ T7892] bond2: (slave geneve3): making interface the new active one [ 145.046097][ T7892] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 145.097323][ T7897] tipc: Enabled bearer , priority 0 [ 145.115990][ T7896] bond2: entered promiscuous mode [ 145.130069][ T7896] geneve3: entered promiscuous mode [ 145.172095][ T7887] syzkaller0: entered promiscuous mode [ 145.182959][ T7887] syzkaller0: entered allmulticast mode [ 145.223565][ T7886] tipc: Resetting bearer [ 145.259142][ T7886] tipc: Disabling bearer [ 145.280586][ T7883] bond2: left promiscuous mode [ 145.288427][ T7883] geneve3: left promiscuous mode [ 145.443523][ T7920] netlink: 'syz.1.505': attribute type 29 has an invalid length. [ 145.473520][ T7920] netlink: 'syz.1.505': attribute type 29 has an invalid length. [ 145.546035][ T7922] delete_channel: no stack [ 145.695512][ T7938] netlink: 'syz.3.511': attribute type 4 has an invalid length. [ 145.885169][ T7950] sctp: [Deprecated]: syz.2.514 (pid 7950) Use of int in max_burst socket option. [ 145.885169][ T7950] Use struct sctp_assoc_value instead [ 145.912990][ T7951] Bluetooth: MGMT ver 1.23 [ 146.166742][ T7961] __nla_validate_parse: 3 callbacks suppressed [ 146.166762][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'. [ 146.652503][ T7971] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 146.703912][ T7981] netlink: 'syz.1.524': attribute type 1 has an invalid length. [ 146.861541][ T7981] bond3: (slave bridge3): making interface the new active one [ 146.887011][ T7981] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 147.053068][ T7990] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 147.108471][ T7990] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 147.669661][ T8010] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.532'. [ 147.960804][ T8021] netlink: 'syz.2.536': attribute type 21 has an invalid length. [ 147.970295][ T8021] netlink: 128 bytes leftover after parsing attributes in process `syz.2.536'. [ 147.991800][ T8021] netlink: 'syz.2.536': attribute type 4 has an invalid length. [ 148.000600][ T8021] netlink: 3 bytes leftover after parsing attributes in process `syz.2.536'. [ 148.014544][ T8021] netlink: 128 bytes leftover after parsing attributes in process `syz.2.536'. [ 148.025618][ T8021] netlink: 3 bytes leftover after parsing attributes in process `syz.2.536'. [ 148.355168][ T8032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.540'. [ 148.668461][ T6454] IPVS: starting estimator thread 0... [ 148.723734][ T8048] 8021q: adding VLAN 0 to HW filter on device bond4 [ 148.762217][ T8054] IPVS: using max 26 ests per chain, 62400 per kthread [ 148.928348][ T8061] x_tables: duplicate underflow at hook 1 [ 149.012389][ T8063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'. [ 149.285239][ T8074] netlink: 24 bytes leftover after parsing attributes in process `syz.5.552'. [ 149.320107][ T8074] netlink: 256 bytes leftover after parsing attributes in process `syz.5.552'. [ 149.413495][ T5920] IPVS: starting estimator thread 0... [ 149.546644][ T8078] IPVS: using max 28 ests per chain, 67200 per kthread [ 149.573714][ T8082] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.845381][ T8087] sctp: [Deprecated]: syz.2.556 (pid 8087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.845381][ T8087] Use struct sctp_sack_info instead [ 150.352142][ T8112] vlan2: entered allmulticast mode [ 150.709796][ T8122] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 151.129570][ T8135] IPv6: NLM_F_CREATE should be specified when creating new route [ 151.141280][ T8135] openvswitch: netlink: Message has 512 unknown bytes. [ 151.285774][ T8143] __nla_validate_parse: 4 callbacks suppressed [ 151.285797][ T8143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.574'. [ 151.653479][ T8152] netlink: 32 bytes leftover after parsing attributes in process `syz.3.577'. [ 151.923441][ T8160] netlink: 168 bytes leftover after parsing attributes in process `syz.2.580'. [ 151.940135][ T8160] bridge0: port 1(veth0_to_bridge) entered blocking state [ 151.947887][ T8160] bridge0: port 1(veth0_to_bridge) entered disabled state [ 151.959859][ T8160] veth0_to_bridge: entered allmulticast mode [ 151.969073][ T8160] veth0_to_bridge: entered promiscuous mode [ 151.983473][ T8160] netlink: 48 bytes leftover after parsing attributes in process `syz.2.580'. [ 152.090802][ T8165] bridge0: port 2(batadv1) entered blocking state [ 152.099237][ T8165] bridge0: port 2(batadv1) entered disabled state [ 152.105887][ T8165] batadv1: entered allmulticast mode [ 152.115587][ T8165] batadv1: entered promiscuous mode [ 152.397210][ T7937] Set syz1 is full, maxelem 65536 reached [ 152.565815][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.587'. [ 152.589320][ T4342] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 152.598701][ T4342] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 152.660650][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.588'. [ 152.778418][ T8187] team0: Port device team_slave_1 removed [ 152.810420][ T8191] Cannot find set identified by id 65534 to match [ 152.838904][ T8195] netlink: 36 bytes leftover after parsing attributes in process `syz.1.590'. [ 152.861924][ T8194] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.591'. [ 153.008901][ T8201] validate_nla: 38 callbacks suppressed [ 153.008922][ T8201] netlink: 'syz.1.593': attribute type 1 has an invalid length. [ 153.023821][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.592'. [ 153.156325][ T8207] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 153.169810][ T61] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 153.194238][ T8201] 8021q: adding VLAN 0 to HW filter on device bond5 [ 153.314558][ T70] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 153.358723][ T8201] veth3: entered promiscuous mode [ 153.368973][ T8201] bond5: (slave veth3): Enslaving as a backup interface with a down link [ 153.752223][ T8238] netlink: 24 bytes leftover after parsing attributes in process `syz.5.604'. [ 153.799017][ T8238] tipc: Started in network mode [ 153.804127][ T8238] tipc: Node identity ee6030d7428e, cluster identity 4711 [ 153.812587][ T8238] tipc: Enabled bearer , priority 0 [ 153.847554][ T8238] syzkaller0: entered promiscuous mode [ 153.857294][ T8238] syzkaller0: entered allmulticast mode [ 153.899395][ T8237] tipc: Resetting bearer [ 153.976467][ T8245] xt_CT: No such helper "snmp" [ 153.989456][ T8237] tipc: Disabling bearer [ 154.951227][ T8288] netlink: 'syz.4.619': attribute type 21 has an invalid length. [ 154.969966][ T8288] team0: Device vti0 is of different type [ 155.690243][ T8367] lo: entered allmulticast mode [ 155.702730][ T8367] tunl0: entered allmulticast mode [ 155.752874][ T8367] gre0: entered allmulticast mode [ 155.803549][ T8367] gretap0: entered allmulticast mode [ 155.950113][ T8367] erspan0: entered allmulticast mode [ 156.038134][ T8367] ip_vti0: entered allmulticast mode [ 156.118855][ T8367] ip6_vti0: entered allmulticast mode [ 156.178123][ T8367] sit0: entered allmulticast mode [ 156.226384][ T8367] ip6tnl0: entered allmulticast mode [ 156.284264][ T8367] ip6gre0: entered allmulticast mode [ 156.298727][ T8367] ip6gretap0: entered allmulticast mode [ 156.313715][ T8367] vcan0: entered allmulticast mode [ 156.325262][ T8367] bond0: entered allmulticast mode [ 156.331024][ T8367] bond_slave_0: entered allmulticast mode [ 156.337680][ T8367] bond_slave_1: entered allmulticast mode [ 156.353434][ T8367] team0: entered allmulticast mode [ 156.360515][ T8367] team_slave_0: entered allmulticast mode [ 156.371086][ T8367] dummy0: entered allmulticast mode [ 156.384689][ T8367] nlmon0: entered allmulticast mode [ 156.406114][ T8367] caif0: entered allmulticast mode [ 156.412760][ T8367] batadv0: entered allmulticast mode [ 156.425946][ T8367] vxcan0: entered allmulticast mode [ 156.433209][ T8367] vxcan1: entered allmulticast mode [ 156.443023][ T8367] veth0: entered allmulticast mode [ 156.461703][ T8367] veth1: entered allmulticast mode [ 156.483256][ T8367] wg0: entered allmulticast mode [ 156.495147][ T8367] wg1: entered allmulticast mode [ 156.509143][ T8367] wg2: entered allmulticast mode [ 156.519765][ T8367] veth0_to_bridge: entered allmulticast mode [ 156.533559][ T8367] bridge_slave_0: entered allmulticast mode [ 156.546464][ T8367] veth1_to_bridge: entered allmulticast mode [ 156.560600][ T8367] bridge_slave_1: entered allmulticast mode [ 156.570390][ T8367] veth0_to_bond: entered allmulticast mode [ 156.585819][ T8367] veth1_to_bond: entered allmulticast mode [ 156.602084][ T8367] veth0_to_team: entered allmulticast mode [ 156.667825][ T8367] veth0_to_batadv: entered allmulticast mode [ 156.687067][ T8367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.695042][ T8367] batadv_slave_0: entered allmulticast mode [ 156.713333][ T8367] xfrm0: entered allmulticast mode [ 156.725550][ T8367] veth0_to_hsr: entered allmulticast mode [ 156.740888][ T8367] hsr_slave_0: entered allmulticast mode [ 156.755230][ T8367] veth1_to_hsr: entered allmulticast mode [ 156.773100][ T8367] hsr_slave_1: entered allmulticast mode [ 156.796757][ T8367] hsr0: entered allmulticast mode [ 156.808269][ T8367] veth1_virt_wifi: entered allmulticast mode [ 156.818675][ T8367] veth0_virt_wifi: entered allmulticast mode [ 156.830409][ T8367] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 156.839542][ T8367] veth1_vlan: entered allmulticast mode [ 156.878057][ T8367] veth0_vlan: entered allmulticast mode [ 156.915613][ T8367] vlan0: entered allmulticast mode [ 156.921426][ T8367] vlan1: entered allmulticast mode [ 156.935437][ T8367] macvlan0: entered allmulticast mode [ 156.951651][ T8367] macvlan1: entered allmulticast mode [ 156.965642][ T8367] ipvlan0: entered allmulticast mode [ 156.977446][ T8367] ipvlan1: entered allmulticast mode [ 156.983977][ T8367] veth1_macvtap: entered allmulticast mode [ 156.999245][ T8367] veth0_macvtap: entered allmulticast mode [ 157.017888][ T8367] macvtap0: entered allmulticast mode [ 157.037607][ T8367] macsec0: entered allmulticast mode [ 157.054805][ T8367] geneve0: entered allmulticast mode [ 157.069642][ T8367] geneve1: entered allmulticast mode [ 157.087221][ T8367] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 157.110220][ T8367] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 157.128973][ T8367] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 157.149653][ T8367] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 157.178046][ T8367] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode [ 157.205307][ T8367] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 157.217359][ T8367] xfrm1: entered allmulticast mode [ 157.222746][ T8367] bond1: entered allmulticast mode [ 157.230890][ T8367] xfrm2: entered allmulticast mode [ 157.238915][ T8367] bridge0: entered allmulticast mode [ 157.253161][ T8367] gre1: entered allmulticast mode [ 157.330226][ T61] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.375571][ T61] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.448699][ T8398] netlink: 'syz.5.634': attribute type 1 has an invalid length. [ 157.543250][ T61] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.566040][ T61] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.653294][ T8398] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.667047][ T8405] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 157.684669][ T8405] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 157.700050][ T8408] __nla_validate_parse: 3 callbacks suppressed [ 157.700072][ T8408] netlink: 20 bytes leftover after parsing attributes in process `syz.4.636'. [ 157.711334][ T8405] veth2: entered allmulticast mode [ 157.738832][ T8405] veth3: entered allmulticast mode [ 157.756091][ T8405] vxlan0: entered allmulticast mode [ 157.782586][ T8405] ip6tnl1: entered allmulticast mode [ 157.795543][ T8422] netlink: 'syz.4.636': attribute type 1 has an invalid length. [ 157.805725][ T8405] bond1: entered allmulticast mode [ 157.812894][ T8422] netlink: 228 bytes leftover after parsing attributes in process `syz.4.636'. [ 157.823919][ T8405] bond2: entered allmulticast mode [ 157.830287][ T8405] geneve2: entered allmulticast mode [ 157.837981][ T8405] gretap1: entered allmulticast mode [ 157.843827][ T8405] virt_wifi0.0000: entered allmulticast mode [ 157.860506][ T8349] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.876784][ T8349] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.018665][ T8349] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.045340][ T8430] netlink: 'syz.2.642': attribute type 28 has an invalid length. [ 158.053052][ T8349] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.078984][ T30] audit: type=1800 audit(1760118906.945:2): pid=8422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.636" name="memory.events" dev="tmpfs" ino=590 res=0 errno=0 [ 158.104805][ T8430] netlink: 'syz.2.642': attribute type 3 has an invalid length. [ 158.126926][ T8430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.642'. [ 158.467256][ T8443] netlink: 'syz.2.645': attribute type 2 has an invalid length. [ 158.475827][ T8443] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.645'. [ 158.486054][ T8443] nbd: must specify at least one socket [ 158.499127][ T8443] netlink: 220 bytes leftover after parsing attributes in process `syz.2.645'. [ 158.516091][ T8443] netlink: 220 bytes leftover after parsing attributes in process `syz.2.645'. [ 158.766710][ T8464] netlink: 'syz.1.653': attribute type 1 has an invalid length. [ 158.779579][ T8464] netlink: 'syz.1.653': attribute type 10 has an invalid length. [ 158.788411][ T8464] netlink: 'syz.1.653': attribute type 4 has an invalid length. [ 158.812739][ T8464] netlink: 136 bytes leftover after parsing attributes in process `syz.1.653'. [ 158.834995][ T8468] syzkaller0: entered promiscuous mode [ 158.854535][ T8468] syzkaller0: entered allmulticast mode [ 158.922372][ T8471] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 158.951225][ T8472] wg2: entered promiscuous mode [ 158.958036][ T8472] wg2: entered allmulticast mode [ 159.146350][ T8479] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 159.566415][ T8497] netlink: 'syz.3.664': attribute type 6 has an invalid length. [ 159.673044][ T5843] Bluetooth: hci2: link tx timeout [ 159.679648][ T5843] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 160.023139][ T8520] netlink: 20 bytes leftover after parsing attributes in process `syz.1.670'. [ 160.054635][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 160.088241][ T8522] netlink: 14 bytes leftover after parsing attributes in process `syz.2.671'. [ 160.225945][ T8525] netlink: 'syz.4.672': attribute type 10 has an invalid length. [ 160.279983][ T8525] team0: Device ipvlan1 failed to register rx_handler [ 160.497556][ T8537] 8021q: VLANs not supported on ip_vti0 [ 160.690539][ T8553] syzkaller1: entered promiscuous mode [ 160.696407][ T8553] syzkaller1: entered allmulticast mode [ 160.807491][ T8557] tipc: Enabled bearer , priority 0 [ 160.817641][ T8557] syzkaller0: entered promiscuous mode [ 160.827982][ T8557] syzkaller0: entered allmulticast mode [ 160.904683][ T8557] tipc: Resetting bearer [ 160.942200][ T8557] syzkaller1: entered promiscuous mode [ 160.952208][ T8557] syzkaller1: entered allmulticast mode [ 161.030066][ T8568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.079622][ T8568] bond0: (slave rose0): Enslaving as an active interface with an up link [ 161.270841][ T8588] sctp: [Deprecated]: syz.2.691 (pid 8588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.270841][ T8588] Use struct sctp_sack_info instead [ 161.291981][ T8556] tipc: Resetting bearer [ 161.292065][ T8589] sctp: [Deprecated]: syz.2.691 (pid 8589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.292065][ T8589] Use struct sctp_sack_info instead [ 161.327477][ T8556] tipc: Disabling bearer [ 161.749139][ T8593] erspan0: left promiscuous mode [ 161.756756][ T8593] erspan0: left allmulticast mode [ 161.763790][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 161.940680][ T8593] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.948648][ T8593] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.305356][ T8593] veth0_to_bond: left allmulticast mode [ 162.361963][ T8593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.391777][ T8593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.588657][ T8637] batadv1: left allmulticast mode [ 162.593862][ T8637] batadv1: left promiscuous mode [ 162.608398][ T8637] bridge0: port 2(batadv1) entered disabled state [ 162.659700][ T8637] veth0_to_bridge: left allmulticast mode [ 162.713762][ T8637] veth0_to_bridge: left promiscuous mode [ 162.736888][ T8637] bridge0: port 1(veth0_to_bridge) entered disabled state [ 162.808741][ T8646] __nla_validate_parse: 4 callbacks suppressed [ 162.808764][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.704'. [ 162.866098][ T70] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.890696][ T70] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.911295][ T70] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.936959][ T70] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.260847][ T8665] xt_hashlimit: max too large, truncated to 1048576 [ 163.298546][ T8670] tipc: Enabled bearer , priority 0 [ 163.431605][ T8670] syzkaller0: entered promiscuous mode [ 163.449839][ T8670] syzkaller0: entered allmulticast mode [ 163.468292][ T8670] tipc: Resetting bearer [ 163.623292][ T8669] tipc: Resetting bearer [ 163.907282][ T8692] netlink: 'syz.4.712': attribute type 11 has an invalid length. [ 163.942568][ T8692] netlink: 228 bytes leftover after parsing attributes in process `syz.4.712'. [ 163.989764][ T8687] netlink: 24 bytes leftover after parsing attributes in process `syz.5.711'. [ 164.389642][ T5920] tipc: Node number set to 1645126146 [ 164.525052][ T8706] can: request_module (can-proto-4) failed. [ 165.518255][ T8669] tipc: Disabling bearer [ 165.528095][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.5.711'. [ 165.718567][ T8726] netlink: 'syz.5.715': attribute type 11 has an invalid length. [ 165.741654][ T8726] netlink: 'syz.5.715': attribute type 5 has an invalid length. [ 165.780808][ T8726] netlink: 4112 bytes leftover after parsing attributes in process `syz.5.715'. [ 166.139890][ T8757] erspan0: entered promiscuous mode [ 166.155566][ T8757] erspan0: entered allmulticast mode [ 166.378625][ T8764] vlan3: entered promiscuous mode [ 166.387192][ T8764] vlan3: entered allmulticast mode [ 166.400923][ T8764] hsr_slave_1: entered allmulticast mode [ 166.419801][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.728'. [ 166.442006][ T8767] syzkaller1: entered promiscuous mode [ 166.450068][ T8770] netlink: 288 bytes leftover after parsing attributes in process `syz.3.728'. [ 166.470092][ T8767] syzkaller1: entered allmulticast mode [ 166.515313][ T8775] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 166.522190][ T8775] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 166.641357][ T8780] netlink: 'syz.1.730': attribute type 1 has an invalid length. [ 166.818114][ T8788] x_tables: duplicate underflow at hook 1 [ 166.882177][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'. [ 166.941094][ T8796] netlink: 20 bytes leftover after parsing attributes in process `syz.4.738'. [ 167.151315][ T8809] netlink: 'syz.5.741': attribute type 2 has an invalid length. [ 167.159267][ T8809] netlink: 119 bytes leftover after parsing attributes in process `syz.5.741'. [ 167.186385][ T8805] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 167.211966][ T8805] bond3 (unregistering): Released all slaves [ 167.411552][ T8822] Unsupported ieee802154 address type: 0 [ 167.438707][ T8821] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 167.446444][ T8821] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 167.512014][ T8828] netlink: 'syz.5.748': attribute type 11 has an invalid length. [ 167.649916][ T8821] IPVS: Scheduler module ip_vs_sip not found [ 167.731208][ T8835] netlink: 'syz.3.749': attribute type 1 has an invalid length. [ 168.177700][ T8855] __nla_validate_parse: 1 callbacks suppressed [ 168.177721][ T8855] netlink: 108 bytes leftover after parsing attributes in process `syz.2.757'. [ 168.379039][ T8864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.465890][ T8861] netlink: 20 bytes leftover after parsing attributes in process `syz.2.760'. [ 168.478804][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.760'. [ 168.494473][ T8867] netlink: 32 bytes leftover after parsing attributes in process `syz.1.761'. [ 168.688309][ T8871] syzkaller1: entered promiscuous mode [ 168.694011][ T8871] syzkaller1: entered allmulticast mode [ 169.023779][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.764'. [ 169.056597][ T8880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.764'. [ 169.078927][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.764'. [ 169.107098][ T8880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.764'. [ 169.248874][ T8890] netlink: 'syz.4.769': attribute type 1 has an invalid length. [ 169.264611][ T8890] netlink: 'syz.4.769': attribute type 1 has an invalid length. [ 169.528260][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.772'. [ 169.553114][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.776'. [ 169.572869][ T8903] netlink: 'syz.1.772': attribute type 5 has an invalid length. [ 169.702722][ T8917] lo speed is unknown, defaulting to 1000 [ 169.713695][ T8917] lo speed is unknown, defaulting to 1000 [ 169.724090][ T8917] lo speed is unknown, defaulting to 1000 [ 169.763946][ T8920] netlink: 'syz.5.780': attribute type 1 has an invalid length. [ 169.778591][ T8922] rdma_rxe: rxe_newlink: failed to add lo [ 169.909688][ T8929] netlink: 'syz.5.780': attribute type 1 has an invalid length. [ 169.948079][ T8931] netlink: 'syz.4.781': attribute type 5 has an invalid length. [ 170.034218][ T8935] xt_TCPMSS: Only works on TCP SYN packets [ 170.077435][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 170.221816][ T5906] lo speed is unknown, defaulting to 1000 [ 170.230674][ T8917] infiniband syz0: set down [ 170.239988][ T8917] infiniband syz0: added lo [ 170.265405][ T8917] syz0: rxe_create_cq: returned err = -12 [ 170.288620][ T8917] infiniband syz0: Couldn't create ib_mad CQ [ 170.300139][ T8945] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 170.308942][ T8917] infiniband syz0: Couldn't open port 1 [ 170.399354][ T8917] RDS/IB: syz0: added [ 170.430450][ T8917] smc: adding ib device syz0 with port count 1 [ 170.466854][ T8917] smc: ib device syz0 port 1 has no pnetid [ 170.475480][ T6450] lo speed is unknown, defaulting to 1000 [ 170.511366][ T8917] lo speed is unknown, defaulting to 1000 [ 171.111235][ T8991] validate_nla: 2 callbacks suppressed [ 171.111256][ T8991] netlink: 'syz.2.798': attribute type 8 has an invalid length. [ 171.221381][ T8917] lo speed is unknown, defaulting to 1000 [ 171.459321][ T8977] netlink: 'syz.1.794': attribute type 1 has an invalid length. [ 171.467816][ T8977] netlink: 'syz.1.794': attribute type 1 has an invalid length. [ 171.519477][ T8917] lo speed is unknown, defaulting to 1000 [ 171.735780][ T9006] netlink: 'syz.4.801': attribute type 1 has an invalid length. [ 171.825863][ T9006] veth3: entered promiscuous mode [ 171.909788][ T9007] batman_adv: batadv0: Removing interface: team0 [ 171.934719][ T9007] team0: Device ip6gre2 is up. Set it down before adding it as a team port [ 172.055162][ T9012] veth3: entered promiscuous mode [ 172.331206][ T9025] sctp: [Deprecated]: syz.2.805 (pid 9025) Use of int in maxseg socket option. [ 172.331206][ T9025] Use struct sctp_assoc_value instead [ 172.408849][ T8917] lo speed is unknown, defaulting to 1000 [ 172.906274][ T9056] netlink: 'syz.1.816': attribute type 1 has an invalid length. [ 172.944292][ T9056] netlink: 'syz.1.816': attribute type 1 has an invalid length. [ 172.973706][ T9056] netlink: 'syz.1.816': attribute type 1 has an invalid length. [ 173.004055][ T9056] netlink: 'syz.1.816': attribute type 2 has an invalid length. [ 173.364346][ T8917] lo speed is unknown, defaulting to 1000 [ 173.370968][ T9084] netlink: 'syz.2.824': attribute type 1 has an invalid length. [ 173.595971][ T9098] ipt_ECN: cannot use operation on non-tcp rule [ 173.631173][ T9092] veth7: entered promiscuous mode [ 173.720385][ T9104] __nla_validate_parse: 18 callbacks suppressed [ 173.720405][ T9104] netlink: 216 bytes leftover after parsing attributes in process `syz.5.830'. [ 173.905803][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.5.833'. [ 173.929028][ T9112] macvlan0: left allmulticast mode [ 173.934599][ T9112] netlink: 'syz.5.833': attribute type 1 has an invalid length. [ 174.290631][ T9135] tipc: Enabled bearer , priority 10 [ 174.743677][ T9157] netlink: 14 bytes leftover after parsing attributes in process `syz.1.849'. [ 175.054444][ T9157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.079693][ T9157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.102211][ T9157] bond0 (unregistering): Released all slaves [ 175.157801][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.857'. [ 175.292008][ T9188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.859'. [ 175.407146][ T5920] tipc: Node number set to 2901291223 [ 175.595070][ T9204] netlink: 24 bytes leftover after parsing attributes in process `syz.3.865'. [ 176.315543][ T9246] netlink: 300 bytes leftover after parsing attributes in process `syz.4.880'. [ 176.334356][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.880'. [ 176.569585][ T9262] netlink: 284 bytes leftover after parsing attributes in process `syz.3.886'. [ 176.699483][ T9271] xt_l2tp: unknown flags: 10 [ 176.922086][ T9284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'. [ 176.932412][ T9284] bridge_slave_1: left promiscuous mode [ 176.940078][ T9284] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.951890][ T9284] bridge_slave_0: left promiscuous mode [ 176.960696][ T9284] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.035843][ T9287] Bluetooth: MGMT ver 1.23 [ 177.041275][ T9287] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 177.045266][ T9288] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 177.074054][ T9281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.155369][ T9292] tipc: Enabled bearer , priority 0 [ 177.164889][ T9292] syzkaller0: entered promiscuous mode [ 177.171005][ T9292] syzkaller0: entered allmulticast mode [ 177.184495][ T9292] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 177.226182][ T9292] tipc: Resetting bearer [ 177.285176][ T9291] tipc: Resetting bearer [ 177.313336][ T9291] tipc: Disabling bearer [ 177.395114][ T9296] validate_nla: 3 callbacks suppressed [ 177.395136][ T9296] netlink: 'syz.5.899': attribute type 1 has an invalid length. [ 177.486268][ T9308] syz_tun: entered allmulticast mode [ 177.515668][ T9308] syz_tun: left allmulticast mode [ 177.640873][ T9320] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 177.738926][ T9317] syzkaller0: create flow: hash 3466708625 index 2 [ 177.758677][ T9323] netlink: 'syz.2.907': attribute type 2 has an invalid length. [ 177.976705][ T9312] syzkaller0: delete flow: hash 3466708625 index 2 [ 177.983604][ T9336] netlink: 'syz.1.908': attribute type 10 has an invalid length. [ 178.018857][ T9336] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.053192][ T9336] bridge_slave_1: left allmulticast mode [ 178.069906][ T9336] bridge_slave_1: left promiscuous mode [ 178.081880][ T9339] netlink: 'syz.5.911': attribute type 2 has an invalid length. [ 178.090155][ T9336] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.863642][ T9370] netlink: 'syz.1.916': attribute type 10 has an invalid length. [ 180.124898][ T9392] __nla_validate_parse: 5 callbacks suppressed [ 180.124917][ T9392] netlink: 80 bytes leftover after parsing attributes in process `syz.3.920'. [ 180.159700][ T9393] netlink: 'syz.1.923': attribute type 1 has an invalid length. [ 180.467158][ T9402] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 180.508640][ T9402] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 180.517127][ T9403] netlink: 16 bytes leftover after parsing attributes in process `syz.5.926'. [ 180.713280][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.931'. [ 181.202436][ T9438] netlink: 44 bytes leftover after parsing attributes in process `syz.2.935'. [ 181.454499][ T9443] netlink: 24 bytes leftover after parsing attributes in process `syz.5.937'. [ 181.883448][ T9466] netlink: 12 bytes leftover after parsing attributes in process `syz.5.944'. [ 181.897907][ T9468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.945'. [ 182.012868][ T9469] macvlan2: entered promiscuous mode [ 182.062819][ T9469] macvlan2: entered allmulticast mode [ 182.197872][ T9483] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 182.237343][ T9483] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 182.281595][ T9483] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 182.294499][ T9486] tipc: Enabled bearer , priority 0 [ 182.304203][ T9486] syzkaller0: entered promiscuous mode [ 182.310343][ T9486] syzkaller0: entered allmulticast mode [ 182.335342][ T9483] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 182.363935][ T9483] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 182.448842][ T9483] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 182.502945][ T9483] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 182.559185][ T9483] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 182.574131][ T9486] tipc: Resetting bearer [ 182.625772][ T9483] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 182.642159][ T9485] tipc: Resetting bearer [ 182.717599][ T9485] tipc: Disabling bearer [ 182.747625][ T9483] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 182.779074][ T9517] vlan2: entered promiscuous mode [ 182.784271][ T9517] bond0: entered promiscuous mode [ 182.789635][ T9517] bond_slave_0: entered promiscuous mode [ 182.796170][ T9517] bond_slave_1: entered promiscuous mode [ 182.806144][ T9517] bond0: (slave vlan2): Opening slave failed [ 182.832362][ T9483] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 182.903567][ T9483] bridge15: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 182.981698][ T9483] bridge16: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 183.006048][ T9483] bridge17: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 183.377829][ T9543] pim6reg1: entered promiscuous mode [ 183.399586][ T9543] pim6reg1: entered allmulticast mode [ 183.460934][ T9544] netlink: 40 bytes leftover after parsing attributes in process `syz.3.968'. [ 183.486695][ T9544] netlink: 40 bytes leftover after parsing attributes in process `syz.3.968'. [ 183.882946][ T9544] syzkaller0: entered promiscuous mode [ 183.910507][ T9544] syzkaller0: entered allmulticast mode [ 183.927997][ T9566] netlink: 36 bytes leftover after parsing attributes in process `syz.4.974'. [ 184.772950][ T9581] netlink: 'syz.2.976': attribute type 12 has an invalid length. [ 184.814883][ T9581] netlink: 'syz.2.976': attribute type 11 has an invalid length. [ 187.291982][ T9594] __nla_validate_parse: 2 callbacks suppressed [ 187.292002][ T9594] netlink: 32 bytes leftover after parsing attributes in process `syz.5.980'. [ 187.389611][ T9605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.983'. [ 187.737449][ T9619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.986'. [ 187.749448][ T9588] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.349165][ T9588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.370295][ T9588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.551889][ T9588] veth3: left promiscuous mode [ 188.652298][ T8345] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.666101][ T8345] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 188.675707][ T8345] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.697407][ T8345] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 188.706286][ T8345] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.715736][ T8345] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 188.726062][ T8345] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.766581][ T8345] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 189.080863][ T9649] tipc: Started in network mode [ 189.094577][ T9649] tipc: Node identity , cluster identity 4711 [ 189.112174][ T9651] netlink: 'syz.1.995': attribute type 10 has an invalid length. [ 189.120648][ T9649] tipc: Failed to set node id, please configure manually [ 189.130194][ T9649] tipc: Enabling of bearer rejected, failed to enable media [ 189.151063][ T9651] team0: Port device dummy0 added [ 189.181057][ T9649] netlink: 'syz.2.994': attribute type 12 has an invalid length. [ 189.218622][ T9651] netlink: 'syz.1.995': attribute type 10 has an invalid length. [ 189.321523][ T9651] team0: Port device dummy0 removed [ 190.059695][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1004'. [ 190.173720][ T9697] netlink: 'syz.1.1005': attribute type 11 has an invalid length. [ 190.409140][ T9707] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1007'. [ 190.589828][ T9707] bridge_slave_0: entered promiscuous mode [ 190.595893][ T9707] bridge_slave_0: left allmulticast mode [ 190.610795][ T9718] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1008'. [ 190.782298][ T9721] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1010'. [ 190.849650][ T9730] mac80211_hwsim hwsim16 : renamed from wlan1 [ 190.872328][ T9732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1008'. [ 191.060708][ T9736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1016'. [ 191.137519][ T9746] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1019'. [ 191.432620][ T9756] netlink: 'syz.4.1022': attribute type 1 has an invalid length. [ 191.446587][ T9756] netlink: 'syz.4.1022': attribute type 1 has an invalid length. [ 191.581464][ T9763] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.666318][ T9766] netlink: 'syz.3.1025': attribute type 1 has an invalid length. [ 192.125923][ T9789] netlink: 'syz.4.1032': attribute type 1 has an invalid length. [ 192.180666][ T9789] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.212501][ T9794] bond2: (slave gretap2): making interface the new active one [ 192.222655][ T9794] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 192.225480][ T5843] block nbd0: Receive control failed (result -107) [ 192.273077][ T9782] netlink: 'syz.3.1031': attribute type 11 has an invalid length. [ 192.299207][ T9782] __nla_validate_parse: 3 callbacks suppressed [ 192.299229][ T9782] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1031'. [ 192.410064][ T9799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1034'. [ 192.732067][ T30] audit: type=1107 audit(1760118941.605:3): pid=9809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 192.799712][ T9815] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1040'. [ 193.022851][ T9830] gre1: entered promiscuous mode [ 193.045075][ T9830] gre1: entered allmulticast mode [ 193.154853][ T9843] netlink: 'syz.1.1047': attribute type 1 has an invalid length. [ 193.189539][ T9843] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1047'. [ 193.239709][ T9843] netlink: 'syz.1.1047': attribute type 1 has an invalid length. [ 193.296011][ T9846] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1049'. [ 193.685914][ T9874] netlink: 'syz.3.1055': attribute type 13 has an invalid length. [ 193.714564][ T9874] macvtap0: refused to change device tx_queue_len [ 193.987519][ T9891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1059'. [ 194.072552][ T9893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1060'. [ 194.114032][ T9893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1060'. [ 194.220017][ T9897] ipt_rpfilter: unknown options [ 194.228415][ T9893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.607806][ T9905] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1064'. [ 194.797033][ T9916] netlink: 'syz.2.1067': attribute type 10 has an invalid length. [ 194.837619][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'. [ 195.035879][ T9932] netlink: 'syz.2.1073': attribute type 10 has an invalid length. [ 195.103040][ T9932] team0: Port device geneve0 added [ 195.127028][ T8350] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.143560][ T9932] sctp: [Deprecated]: syz.2.1073 (pid 9932) Use of int in maxseg socket option. [ 195.143560][ T9932] Use struct sctp_assoc_value instead [ 195.145686][ T8350] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.224595][ T8350] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.268440][ T8350] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.621823][ T9978] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 195.696686][ T9976] nbd1: detected capacity change from 0 to 127 [ 195.704396][ T5843] block nbd1: Receive control failed (result -32) [ 195.716329][ T5850] block nbd1: Dead connection, failed to find a fallback [ 195.733190][ T5850] block nbd1: shutting down sockets [ 195.742567][ T5850] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 195.753282][ T5850] Buffer I/O error on dev nbd1, logical block 0, async page read [ 195.762509][ T5850] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 195.772484][ T5850] Buffer I/O error on dev nbd1, logical block 1, async page read [ 195.780576][ T5850] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 195.790407][ T5850] Buffer I/O error on dev nbd1, logical block 2, async page read [ 195.798552][ T5850] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 195.833382][ T5850] Buffer I/O error on dev nbd1, logical block 3, async page read [ 195.842367][ T5850] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 195.852620][ T5850] Buffer I/O error on dev nbd1, logical block 0, async page read [ 195.862191][ T5850] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 195.871866][ T5850] Buffer I/O error on dev nbd1, logical block 1, async page read [ 195.879994][ T5850] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 195.889345][ T5850] Buffer I/O error on dev nbd1, logical block 2, async page read [ 195.946783][ T5850] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 195.982706][ T5850] Buffer I/O error on dev nbd1, logical block 3, async page read [ 196.027646][ T5850] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.054584][ T5850] Buffer I/O error on dev nbd1, logical block 0, async page read [ 196.064613][ T9994] syzkaller0: entered promiscuous mode [ 196.067559][ T5850] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.096188][ T5850] Buffer I/O error on dev nbd1, logical block 1, async page read [ 196.096919][ T9994] syzkaller0: entered allmulticast mode [ 196.122584][ T5850] ldm_validate_partition_table(): Disk read failed. [ 196.160183][ T5850] Dev nbd1: unable to read RDB block 0 [ 196.200198][ T5850] nbd1: unable to read partition table [ 196.244648][ T5850] ldm_validate_partition_table(): Disk read failed. [ 196.285134][ T5850] Dev nbd1: unable to read RDB block 0 [ 196.349838][ T5850] nbd1: unable to read partition table [ 196.442533][ T5850] ldm_validate_partition_table(): Disk read failed. [ 196.463152][ T5850] Dev nbd1: unable to read RDB block 0 [ 196.471530][ T5850] nbd1: unable to read partition table [ 196.554368][ T5850] ldm_validate_partition_table(): Disk read failed. [ 196.575777][ T5850] Dev nbd1: unable to read RDB block 0 [ 196.614718][ T5850] nbd1: unable to read partition table [ 196.921819][T10032] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 197.134590][T10047] netlink: 'syz.3.1105': attribute type 1 has an invalid length. [ 197.182248][T10050] netlink: 'syz.2.1106': attribute type 2 has an invalid length. [ 197.581310][T10069] netlink: 'syz.4.1112': attribute type 10 has an invalid length. [ 197.608736][T10069] team0: Device ipvlan1 failed to register rx_handler [ 197.648090][T10074] netlink: 'syz.5.1114': attribute type 16 has an invalid length. [ 197.671126][T10074] netlink: 'syz.5.1114': attribute type 3 has an invalid length. [ 197.702654][T10074] __nla_validate_parse: 12 callbacks suppressed [ 197.702675][T10074] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1114'. [ 197.718997][T10076] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1114'. [ 197.846550][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1116'. [ 197.874391][T10084] IPv6: sit1: Disabled Multicast RS [ 197.917936][T10080] bridge_slave_1 (unregistering): left allmulticast mode [ 197.926597][T10080] bridge_slave_1 (unregistering): left promiscuous mode [ 197.933814][T10080] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.123037][T10097] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1122'. [ 198.351956][T10111] netlink: 'syz.3.1127': attribute type 9 has an invalid length. [ 198.659344][T10120] netlink: 'syz.4.1131': attribute type 1 has an invalid length. [ 198.682912][T10122] netlink: 'syz.4.1131': attribute type 1 has an invalid length. [ 198.755678][T10120] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 198.886829][T10122] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.239784][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1137'. [ 199.399625][T10156] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1138'. [ 199.406115][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 199.601134][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.608410][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.697923][T10171] xt_NFQUEUE: number of queues (16) out of range (got 65549) [ 199.715780][T10176] netlink: 'syz.5.1144': attribute type 12 has an invalid length. [ 199.882376][T10184] xt_TCPMSS: Only works on TCP SYN packets [ 200.018278][T10195] netlink: 'syz.4.1147': attribute type 21 has an invalid length. [ 200.026228][T10195] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1147'. [ 200.133484][T10200] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1149'. [ 200.308973][T10209] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 200.363895][T10200] bond4 (unregistering): Released all slaves [ 200.683732][T10228] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 200.711681][T10221] syzkaller1: entered promiscuous mode [ 200.717640][T10221] syzkaller1: entered allmulticast mode [ 200.844738][T10233] bridge1: entered promiscuous mode [ 200.850967][T10233] bridge1: entered allmulticast mode [ 200.908482][T10237] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1160'. [ 201.547656][T10266] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 201.555912][T10266] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 202.403776][T10313] validate_nla: 1 callbacks suppressed [ 202.403795][T10313] netlink: 'syz.5.1185': attribute type 3 has an invalid length. [ 203.001645][T10330] ipvlan2: entered allmulticast mode [ 203.010160][T10330] macvlan2: entered allmulticast mode [ 203.015817][T10330] bridge0: entered allmulticast mode [ 203.040879][T10330] bridge1: entered allmulticast mode [ 203.061822][T10330] ip6tnl2: entered allmulticast mode [ 203.069921][T10330] bond3: entered allmulticast mode [ 203.093914][T10337] __nla_validate_parse: 4 callbacks suppressed [ 203.093935][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1190'. [ 203.138318][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1190'. [ 203.643551][T10378] Cannot find add_set index 0 as target [ 203.674806][T10375] netlink: 'syz.4.1203': attribute type 1 has an invalid length. [ 203.684365][T10375] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1203'. [ 203.694449][T10375] nbd: illegal input index 1048576 [ 203.956185][T10399] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 203.967388][T10399] team0: Device macvtap1 is already an upper device of the team interface [ 204.181269][T10413] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1213'. [ 204.268540][T10417] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1215'. [ 204.472878][T10428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1220'. [ 204.574075][ T8310] nci: nci_ntf_packet: unknown ntf opcode 0x13a [ 204.740394][T10449] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1223'. [ 204.875427][T10458] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1226'. [ 204.961894][T10463] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1228'. [ 204.973439][T10463] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1228'. [ 205.102482][T10466] lo speed is unknown, defaulting to 1000 [ 205.937217][T10508] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 205.946265][T10508] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 206.763220][T10553] netlink: 'syz.5.1252': attribute type 1 has an invalid length. [ 206.803577][T10553] netlink: 'syz.5.1252': attribute type 1 has an invalid length. [ 206.824718][T10553] netlink: 'syz.5.1252': attribute type 2 has an invalid length. [ 206.929927][T10559] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 206.943051][T10559] netlink: 'syz.4.1255': attribute type 24 has an invalid length. [ 207.245352][T10570] netlink: 'syz.4.1259': attribute type 4 has an invalid length. [ 208.594795][T10592] __nla_validate_parse: 9 callbacks suppressed [ 208.594817][T10592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1264'. [ 208.795875][T10607] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1267'. [ 208.889767][T10609] netlink: 'syz.4.1269': attribute type 29 has an invalid length. [ 208.940075][T10611] netlink: 'syz.4.1269': attribute type 29 has an invalid length. [ 208.949947][T10604] lo speed is unknown, defaulting to 1000 [ 208.949991][ T8310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.021626][ T8310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.055647][ T8350] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.100834][ T8350] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.743529][T10640] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1277'. [ 210.048529][T10657] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1281'. [ 210.665673][T10676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1286'. [ 210.678817][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1286'. [ 210.705113][T10676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1286'. [ 210.751119][T10678] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 210.774758][T10678] bond4 (unregistering): Released all slaves [ 210.899921][T10686] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1291'. [ 210.910834][T10686] gretap0: entered promiscuous mode [ 210.925844][T10686] gretap0: left allmulticast mode [ 210.956259][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1290'. [ 210.997392][T10692] netlink: 'syz.1.1292': attribute type 83 has an invalid length. [ 211.012229][T10686] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1291'. [ 211.031004][T10686] 0{X功: renamed from gretap0 [ 211.079181][T10686] 0{X功: left promiscuous mode [ 211.095211][T10686] 0{X功: entered allmulticast mode [ 211.104550][T10686] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 211.391778][T10709] geneve4: entered promiscuous mode [ 211.424928][T10709] geneve4: entered allmulticast mode [ 211.572922][T10725] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.068506][T10757] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20002 [ 212.097809][T10757] netlink: 'syz.2.1312': attribute type 1 has an invalid length. [ 212.120677][T10757] nbd: illegal input index 1048576 [ 212.327508][T10766] netlink: 'syz.2.1316': attribute type 11 has an invalid length. [ 212.334252][T10772] netlink: 'syz.3.1318': attribute type 1 has an invalid length. [ 212.343876][T10767] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000 [ 212.374129][T10772] netlink: 'syz.3.1318': attribute type 1 has an invalid length. [ 212.783720][T10785] netlink: 'syz.1.1321': attribute type 1 has an invalid length. [ 212.850741][T10785] bond0: (slave bridge6): making interface the new active one [ 212.859359][T10785] bond0: (slave bridge6): Enslaving as an active interface with an up link [ 212.952148][T10791] : renamed from vlan0 [ 213.049473][ T5843] block nbd2: Receive control failed (result -32) [ 213.572113][T10823] netlink: 'syz.5.1333': attribute type 15 has an invalid length. [ 213.596786][T10823] __nla_validate_parse: 13 callbacks suppressed [ 213.596805][T10823] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1333'. [ 213.622680][T10822] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1332'. [ 213.654658][T10823] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1333'. [ 213.670204][T10823] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1333'. [ 213.728071][T10827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1335'. [ 213.755024][T10827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1335'. [ 213.774717][T10827] bridge0: port 1(vlan0) entered blocking state [ 213.781692][T10827] bridge0: port 1(vlan0) entered disabled state [ 213.788560][T10827] vlan0: entered allmulticast mode [ 213.804386][T10827] vlan0: left allmulticast mode [ 213.837334][T10840] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1339'. [ 213.859522][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1338'. [ 213.881911][T10837] netlink: 'syz.1.1336': attribute type 1 has an invalid length. [ 213.939746][T10843] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1340'. [ 214.187835][T10860] netlink: 'syz.4.1346': attribute type 10 has an invalid length. [ 214.209270][T10860] team0: Port device dummy0 added [ 214.225500][T10860] netlink: 'syz.4.1346': attribute type 10 has an invalid length. [ 214.259017][T10860] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 214.340382][T10860] team0: Failed to send options change via netlink (err -105) [ 214.364656][T10860] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 214.396425][T10860] team0: Port device dummy0 removed [ 214.419508][T10860] dummy0: entered promiscuous mode [ 214.431247][T10860] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 214.466813][T10879] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1350'. [ 214.585712][T10884] netlink: 'syz.2.1351': attribute type 1 has an invalid length. [ 214.637038][ T5843] Bluetooth: hci1: command tx timeout [ 214.643559][T10888] x_tables: duplicate underflow at hook 1 [ 214.861605][T10906] nbd: must specify at least one socket [ 215.180735][T10919] nbd: must specify at least one socket [ 215.741761][T10950] netlink: 'syz.4.1373': attribute type 2 has an invalid length. [ 216.395361][T10993] nbd: nbd0 already in use [ 216.459522][T10996] netlink: 'syz.4.1384': attribute type 2 has an invalid length. [ 216.494045][T10997] tipc: New replicast peer: 255.255.255.255 [ 216.511131][T10997] tipc: Enabled bearer , priority 10 [ 216.563771][ T70] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.599485][ T70] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.611422][T10999] xt_hashlimit: size too large, truncated to 1048576 [ 216.631419][ T70] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.660921][ T70] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.040463][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 217.046594][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 217.046913][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 217.054331][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 217.131871][T11030] netlink: 'syz.1.1396': attribute type 5 has an invalid length. [ 217.165518][T11029] netlink: 'syz.4.1397': attribute type 13 has an invalid length. [ 217.176337][T11029] netlink: 'syz.4.1397': attribute type 13 has an invalid length. [ 217.299663][T11025] netlink: 'syz.5.1395': attribute type 5 has an invalid length. [ 217.494445][T11048] netlink: 'syz.1.1402': attribute type 1 has an invalid length. [ 217.560676][T11049] Can't find ip_set type [ 217.612061][T11048] bond6: entered promiscuous mode [ 217.617732][T11048] 8021q: adding VLAN 0 to HW filter on device bond6 [ 218.205472][T11097] gtp0: entered promiscuous mode [ 218.219237][T11097] gtp0: entered allmulticast mode [ 218.501311][T11113] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 218.711078][T11137] __nla_validate_parse: 13 callbacks suppressed [ 218.711110][T11137] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1427'. [ 218.911443][T11142] tunl0: entered promiscuous mode [ 218.929072][T11142] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1430'. [ 219.042526][T11150] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1433'. [ 219.155571][T11158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1435'. [ 219.246577][T11158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1435'. [ 219.367738][T11170] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1440'. [ 219.724851][T11193] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1444'. [ 219.737239][T11196] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1444'. [ 220.390151][T11231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1456'. [ 220.668331][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1460'. [ 220.738214][T11253] validate_nla: 2 callbacks suppressed [ 220.738234][T11253] netlink: 'syz.4.1463': attribute type 12 has an invalid length. [ 220.869442][T11262] netlink: 'syz.1.1461': attribute type 10 has an invalid length. [ 220.997005][T11267] netlink: 'syz.3.1467': attribute type 1 has an invalid length. [ 221.041177][T11267] netlink: 'syz.3.1467': attribute type 3 has an invalid length. [ 221.071350][T11267] NCSI netlink: No device for ifindex 0 [ 221.243707][T11278] netlink: 'syz.5.1471': attribute type 10 has an invalid length. [ 221.252672][T11278] geneve1: left allmulticast mode [ 221.263046][T11278] geneve1: entered allmulticast mode [ 221.278027][T11278] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 221.291419][ T70] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.316318][ T70] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.336036][ T70] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.363034][ T8308] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.484993][T11293] tipc: Enabled bearer , priority 0 [ 221.648010][T11294] syzkaller0: entered promiscuous mode [ 221.654141][T11294] syzkaller0: entered allmulticast mode [ 221.682538][T11294] tipc: Resetting bearer [ 221.693112][T11311] netlink: 'syz.2.1478': attribute type 10 has an invalid length. [ 221.786689][T11294] tipc: Resetting bearer [ 221.903395][T11317] netlink: 'syz.4.1482': attribute type 1 has an invalid length. [ 221.959213][ T43] IPVS: starting estimator thread 0... [ 222.011904][T11327] ipt_REJECT: TCP_RESET invalid for non-tcp [ 222.042731][T11329] netlink: 'syz.1.1486': attribute type 1 has an invalid length. [ 222.068646][T11325] IPVS: using max 26 ests per chain, 62400 per kthread [ 223.379320][T11294] tipc: Disabling bearer [ 223.389731][T11317] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 223.392352][T11329] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 223.461002][T11336] veth9: entered promiscuous mode [ 223.553991][T11330] bond4 (unregistering): Released all slaves [ 223.597237][T11352] netlink: 'syz.3.1490': attribute type 4 has an invalid length. [ 223.633069][T11352] netlink: 'syz.3.1490': attribute type 4 has an invalid length. [ 223.650323][ T43] lo speed is unknown, defaulting to 1000 [ 223.658323][ T43] syz0: Port: 1 Link ACTIVE [ 223.734321][T11356] __nla_validate_parse: 9 callbacks suppressed [ 223.734343][T11356] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1492'. [ 223.758432][ T43] lo speed is unknown, defaulting to 1000 [ 223.911927][T11366] policy can only be matched on NF_INET_PRE_ROUTING [ 223.911957][T11366] unable to load match [ 223.957805][T11366] IPv6: sit1: Disabled Multicast RS [ 223.965332][T11368] tipc: Started in network mode [ 223.980700][T11368] tipc: Node identity 080211, cluster identity 4711 [ 223.999651][T11368] tipc: Enabled bearer , priority 0 [ 224.159846][T11381] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.1499'. [ 224.247717][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.257116][T11381] bond7: Unable to set down delay as MII monitoring is disabled [ 224.268168][T11381] bond7 (unregistering): Released all slaves [ 224.281562][T11397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1503'. [ 224.289048][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.324704][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.328709][T11399] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1504'. [ 224.341569][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.349102][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.357225][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.361652][T11382] syzkaller1: entered promiscuous mode [ 224.364513][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.364550][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.382034][T11382] syzkaller1: entered allmulticast mode [ 224.387996][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.398055][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.406901][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.416790][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.424114][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.437461][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.446009][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.454051][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.489845][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.499892][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.507591][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.515142][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.525551][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.576729][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.584036][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.651777][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.682706][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.707333][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.714965][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.723534][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.735691][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.748705][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.786599][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.842803][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 224.888495][T11393] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 225.043207][T11424] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1513'. [ 225.116950][ T43] tipc: Node number set to 134353152 [ 225.125983][T11429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1515'. [ 225.163880][T11429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1515'. [ 225.870119][T11477] validate_nla: 13 callbacks suppressed [ 225.870141][T11477] netlink: 'syz.3.1528': attribute type 1 has an invalid length. [ 225.901956][T11476] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1531'. [ 225.915685][T11478] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1531'. [ 226.229811][T11498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1538'. [ 226.252778][T11498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.451734][T11513] dvmrp0: entered allmulticast mode [ 226.515724][T11516] netlink: 'syz.4.1542': attribute type 1 has an invalid length. [ 226.758745][T11523] ipt_REJECT: TCP_RESET invalid for non-tcp [ 227.016370][T11541] wg1 speed is unknown, defaulting to 1000 [ 227.037945][T11541] wg1 speed is unknown, defaulting to 1000 [ 227.069673][T11541] wg1 speed is unknown, defaulting to 1000 [ 227.148788][T11541] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 227.240352][T11541] wg1 speed is unknown, defaulting to 1000 [ 227.248397][T11551] netlink: 'syz.3.1553': attribute type 1 has an invalid length. [ 227.288162][T11541] wg1 speed is unknown, defaulting to 1000 [ 227.301307][T11541] wg1 speed is unknown, defaulting to 1000 [ 227.313113][T11551] netlink: 'syz.3.1553': attribute type 10 has an invalid length. [ 227.318901][T11541] wg1 speed is unknown, defaulting to 1000 [ 227.342852][T11554] netlink: 'syz.2.1552': attribute type 29 has an invalid length. [ 227.359252][T11554] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 227.369136][T11541] wg1 speed is unknown, defaulting to 1000 [ 227.553032][T11556] batadv1: left allmulticast mode [ 227.565224][T11556] batadv1: left promiscuous mode [ 227.593267][T11556] bridge0: port 3(batadv1) entered disabled state [ 227.619534][T11556] bridge_slave_0: left allmulticast mode [ 227.625426][T11556] bridge_slave_0: left promiscuous mode [ 227.633738][T11556] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.681688][T11578] netlink: 'syz.3.1559': attribute type 1 has an invalid length. [ 227.710102][T11581] netlink: 'syz.1.1560': attribute type 1 has an invalid length. [ 227.939986][T11588] SET target dimension over the limit! [ 228.125087][T11602] tipc: Enabled bearer , priority 0 [ 228.197225][T11602] syzkaller0: entered promiscuous mode [ 228.203006][T11602] syzkaller0: entered allmulticast mode [ 228.211348][T11607] netlink: 'syz.4.1568': attribute type 1 has an invalid length. [ 228.229493][T11606] macsec0: left allmulticast mode [ 228.245536][T11600] bridge0: port 2(batadv1) entered blocking state [ 228.273940][T11600] bridge0: port 2(batadv1) entered disabled state [ 228.284463][T11600] batadv1: entered allmulticast mode [ 228.301193][T11600] batadv1: entered promiscuous mode [ 228.320092][T11603] bridge0: port 3(batadv2) entered blocking state [ 228.330126][T11603] bridge0: port 3(batadv2) entered disabled state [ 228.337164][T11603] batadv2: entered allmulticast mode [ 228.344618][T11603] batadv2: entered promiscuous mode [ 228.391079][T11602] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 228.472123][T11625] netlink: 'syz.2.1570': attribute type 2 has an invalid length. [ 228.577112][T11630] netlink: 'syz.1.1572': attribute type 2 has an invalid length. [ 228.748374][ T8310] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 228.758161][ T8310] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 228.828763][ T8310] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 228.838545][ T8310] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 229.738244][T11616] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 229.749196][T11616] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 229.773029][T11617] gretap3: entered promiscuous mode [ 229.782261][T11617] bond4: (slave gretap3): making interface the new active one [ 229.790547][T11617] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 229.801124][T11610] tipc: Resetting bearer [ 229.812613][T11621] macvlan2: entered promiscuous mode [ 229.819349][T11621] macvlan2: entered allmulticast mode [ 229.825687][T11621] bond4: entered promiscuous mode [ 229.831687][T11621] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 229.842222][T11621] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap3 [ 229.854903][T11621] bond4: left promiscuous mode [ 229.877944][T11622] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 229.900755][T11601] tipc: Resetting bearer [ 230.003619][T11601] tipc: Disabling bearer [ 230.052162][T11640] __nla_validate_parse: 7 callbacks suppressed [ 230.052183][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1573'. [ 230.164144][T11635] 8021q: adding VLAN 0 to HW filter on device bond4 [ 230.218940][T11650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.274260][T11647] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 230.287706][T11647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.364408][T11647] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 230.693213][T11676] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1585'. [ 230.713449][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1584'. [ 230.732792][T11674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1584'. [ 230.758747][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1583'. [ 230.808485][T11679] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 230.887826][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1586'. [ 231.155502][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1591'. [ 231.169336][T11703] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1592'. [ 231.178777][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1591'. [ 231.189481][T11705] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1592'. [ 231.461873][T11714] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 231.488871][T11714] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 231.508707][T11714] tipc: Resetting bearer [ 231.972152][T11748] ieee802154 phy1 wpan1: encryption failed: -22 [ 232.586360][T11776] xt_bpf: check failed: parse error [ 232.616286][T11776] validate_nla: 4 callbacks suppressed [ 232.616308][T11776] netlink: 'syz.3.1615': attribute type 3 has an invalid length. [ 232.750656][T11781] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 232.838368][T11781] bond7 (unregistering): Released all slaves [ 232.951659][T11803] xt_l2tp: unknown flags: 10 [ 233.105093][T11809] tipc: Enabling of bearer rejected, failed to enable media [ 233.637732][T11844] netlink: 'syz.2.1634': attribute type 2 has an invalid length. [ 233.682592][T11848] batadv0: left allmulticast mode [ 233.695253][T11848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.300328][T11880] netlink: 'syz.2.1647': attribute type 9 has an invalid length. [ 234.535751][T11894] netlink: 'syz.2.1649': attribute type 1 has an invalid length. [ 234.889159][T11921] syzkaller1: entered promiscuous mode [ 234.894889][T11921] syzkaller1: entered allmulticast mode [ 235.113641][T11932] __nla_validate_parse: 9 callbacks suppressed [ 235.113662][T11932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1660'. [ 235.131941][T11933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1660'. [ 235.234140][T11937] netlink: 'syz.2.1661': attribute type 7 has an invalid length. [ 235.242493][T11937] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1661'. [ 235.418343][T11946] syzkaller0: entered promiscuous mode [ 235.425023][T11946] syzkaller0: entered allmulticast mode [ 235.631094][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1666'. [ 235.757908][T11960] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1669'. [ 235.891865][T11965] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1672'. [ 236.002878][T11973] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 236.017800][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1673'. [ 236.026948][T11974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1673'. [ 236.121756][T11983] ip6tnl2: entered promiscuous mode [ 236.148385][T11984] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1675'. [ 236.539661][T11999] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1682'. [ 236.554258][T12005] nbd: must specify at least one socket [ 236.739645][T12014] bridge0: left allmulticast mode [ 236.745182][T12014] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 236.801475][T12023] xt_CT: You must specify a L4 protocol and not use inversions on it [ 236.941698][T12030] tipc: Enabled bearer , priority 10 [ 238.077000][ T5834] tipc: Node number set to 2962881722 [ 238.162120][T12122] netlink: 'syz.4.1722': attribute type 10 has an invalid length. [ 238.230241][T12123] 0{X功: renamed from gretap0 [ 238.245365][T12123] 0{X功: entered allmulticast mode [ 238.254961][T12123] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 238.271035][ T5834] IPVS: starting estimator thread 0... [ 238.366570][T12129] IPVS: using max 27 ests per chain, 64800 per kthread [ 238.493548][T12140] rdma_op ffff88814d9e69f0 conn xmit_rdma 0000000000000000 [ 238.527238][T12140] rdma_op ffff88814d9e59f0 conn xmit_rdma 0000000000000000 [ 238.538265][T12138] netlink: 'syz.4.1727': attribute type 39 has an invalid length. [ 238.568882][T12140] rdma_op ffff88814d9e29f0 conn xmit_rdma 0000000000000000 [ 238.593365][T12140] rdma_op ffff88814d9e51f0 conn xmit_rdma 0000000000000000 [ 238.610259][T12140] rdma_op ffff88814d9e39f0 conn xmit_rdma 0000000000000000 [ 238.650859][T12140] rdma_op ffff88814d9e31f0 conn xmit_rdma 0000000000000000 [ 238.689109][T12140] rdma_op ffff88814d9e19f0 conn xmit_rdma 0000000000000000 [ 238.725832][T12140] rdma_op ffff88814d9e61f0 conn xmit_rdma 0000000000000000 [ 238.764242][T12140] rdma_op ffff8880266149f0 conn xmit_rdma 0000000000000000 [ 238.819886][T12140] rdma_op ffff8880266159f0 conn xmit_rdma 0000000000000000 [ 239.826045][T12209] syzkaller0: entered promiscuous mode [ 239.832046][T12209] syzkaller0: entered allmulticast mode [ 239.852194][T12209] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 240.048860][T12222] lo speed is unknown, defaulting to 1000 [ 240.234048][T12229] __nla_validate_parse: 15 callbacks suppressed [ 240.234072][T12229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1755'. [ 240.611596][T12222] wg1 speed is unknown, defaulting to 1000 [ 240.672549][T12250] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1764'. [ 241.002649][T12272] netlink: 'syz.2.1768': attribute type 11 has an invalid length. [ 241.033948][T12270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1769'. [ 241.089075][T12275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1769'. [ 241.102127][T12270] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1769'. [ 241.614478][T12298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1776'. [ 241.668067][T12302] batadv_slave_0: entered promiscuous mode [ 241.878384][T12294] batadv_slave_0: left promiscuous mode [ 241.934087][T12311] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1779'. [ 242.001691][T12311] vlan0: entered promiscuous mode [ 242.011429][T12311] bridge0: entered promiscuous mode [ 242.118506][T12326] netlink: 'syz.4.1783': attribute type 1 has an invalid length. [ 242.366049][T12346] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1788'. [ 242.406698][T12345] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1788'. [ 242.487929][T12346] bond5 (unregistering): Released all slaves [ 242.580672][T12345] bond5 (unregistering): Released all slaves [ 242.604355][T12361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1792'. [ 243.717899][T12432] netlink: 'syz.4.1815': attribute type 1 has an invalid length. [ 243.899503][ T70] tipc: Subscription rejected, illegal request [ 244.408631][T12466] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 244.870115][T12494] netlink: 'syz.4.1837': attribute type 1 has an invalid length. [ 244.909072][T12493] netlink: 'syz.4.1837': attribute type 1 has an invalid length. [ 245.050498][T12509] sctp: [Deprecated]: syz.3.1842 (pid 12509) Use of int in maxseg socket option. [ 245.050498][T12509] Use struct sctp_assoc_value instead [ 245.150575][T12512] tipc: Enabled bearer , priority 0 [ 245.276109][T12512] syzkaller0: entered promiscuous mode [ 245.282955][T12512] syzkaller0: entered allmulticast mode [ 245.333323][T12512] tipc: Resetting bearer [ 245.421499][ T8308] tipc: Resetting bearer [ 245.464727][T12510] bridge4: entered promiscuous mode [ 245.470217][T12510] bridge4: entered allmulticast mode [ 245.500440][T12521] tipc: Resetting bearer [ 246.911312][T12521] tipc: Disabling bearer [ 247.038520][T12552] __nla_validate_parse: 14 callbacks suppressed [ 247.038543][T12552] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1854'. [ 247.095099][T12553] tipc: Enabled bearer , priority 0 [ 247.130959][T12553] syzkaller0: entered promiscuous mode [ 247.138397][T12553] syzkaller0: entered allmulticast mode [ 247.259577][T12553] tipc: Resetting bearer [ 247.276209][T12565] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.305309][T12565] team0: Cannot enslave team device to itself [ 247.403208][T12572] netlink: 'syz.4.1856': attribute type 28 has an invalid length. [ 247.411304][T12572] netlink: 'syz.4.1856': attribute type 3 has an invalid length. [ 247.420969][T12572] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1856'. [ 247.842343][T12550] tipc: Resetting bearer [ 247.893156][T12550] tipc: Disabling bearer [ 248.108838][T12589] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1866'. [ 248.418964][T12598] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1869'. [ 248.473746][ T5839] block nbd3: Receive control failed (result -107) [ 248.512094][T12609] netlink: 'syz.3.1872': attribute type 1 has an invalid length. [ 248.522980][T12609] netlink: 7890 bytes leftover after parsing attributes in process `syz.3.1872'. [ 248.528669][T12610] sctp: [Deprecated]: syz.2.1873 (pid 12610) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.528669][T12610] Use struct sctp_sack_info instead [ 248.562940][T12613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1874'. [ 248.573227][T12613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1874'. [ 248.583920][T12613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1874'. [ 248.595042][T12613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1874'. [ 248.713605][T12616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1875'. [ 248.881367][T12623] veth0_virt_wifi: renamed from veth1_vlan [ 248.924952][T12629] netlink: 'syz.5.1880': attribute type 13 has an invalid length. [ 249.171901][T12637] netlink: 'syz.4.1883': attribute type 58 has an invalid length. [ 250.545305][T12714] x_tables: duplicate underflow at hook 3 [ 250.891847][T12736] syzkaller1: entered promiscuous mode [ 250.917549][T12736] syzkaller1: entered allmulticast mode [ 250.970192][T12735] syzkaller1: entered promiscuous mode [ 250.986016][T12735] syzkaller1: entered allmulticast mode [ 251.050735][T12747] netlink: 'syz.2.1914': attribute type 1 has an invalid length. [ 251.055689][T12743] bond4: Unable to set up delay as MII monitoring is disabled [ 251.069386][T12747] netlink: 'syz.2.1914': attribute type 4 has an invalid length. [ 251.078354][T12747] netlink: 'syz.2.1914': attribute type 1 has an invalid length. [ 251.088094][T12743] bond4 (unregistering): Released all slaves [ 251.096429][T12747] netlink: 'syz.2.1914': attribute type 4 has an invalid length. [ 251.158750][T12752] netlink: 'syz.2.1914': attribute type 3 has an invalid length. [ 251.313067][T12757] xt_l2tp: missing protocol rule (udp|l2tpip) [ 251.629166][T12782] netlink: 'syz.5.1923': attribute type 2 has an invalid length. [ 251.656997][T12782] netlink: 'syz.5.1923': attribute type 9 has an invalid length. [ 251.664807][T12782] netlink: 'syz.5.1923': attribute type 1 has an invalid length. [ 251.770754][T12786] veth0: entered promiscuous mode [ 251.791406][T12787] syzkaller1: entered promiscuous mode [ 251.817021][T12787] syzkaller1: entered allmulticast mode [ 251.896405][T12798] Cannot find del_set index 0 as target [ 251.909135][T12786] veth0 (unregistering): left promiscuous mode [ 252.211031][T12821] __nla_validate_parse: 22 callbacks suppressed [ 252.211053][T12821] netlink: 2980 bytes leftover after parsing attributes in process `syz.1.1935'. [ 252.264287][T12821] tap0: tun_chr_ioctl cmd 1074025678 [ 252.276837][T12821] tap0: group set to 0 [ 252.334358][T12823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1938'. [ 252.779430][T12852] IPv6: NLM_F_CREATE should be specified when creating new route [ 253.239583][T12852] [ 253.241975][T12852] ====================================================== [ 253.249009][T12852] WARNING: possible circular locking dependency detected [ 253.256073][T12852] syzkaller #0 Not tainted [ 253.260522][T12852] ------------------------------------------------------ [ 253.267570][T12852] syz.4.1948/12852 is trying to acquire lock: [ 253.273668][T12852] ffff88814274b6f8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1e5/0x4c0 [ 253.283151][T12852] [ 253.283151][T12852] but task is already holding lock: [ 253.290634][T12852] ffff88814274b1b8 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 253.301068][T12852] [ 253.301068][T12852] which lock already depends on the new lock. [ 253.301068][T12852] [ 253.311577][T12852] [ 253.311577][T12852] the existing dependency chain (in reverse order) is: [ 253.320631][T12852] [ 253.320631][T12852] -> #6 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 253.329274][T12852] lock_acquire+0x120/0x360 [ 253.334314][T12852] blk_alloc_queue+0x538/0x620 [ 253.339795][T12852] __blk_mq_alloc_disk+0x15c/0x340 [ 253.345549][T12852] nbd_dev_add+0x46c/0xae0 [ 253.350508][T12852] nbd_init+0x168/0x1f0 [ 253.355229][T12852] do_one_initcall+0x233/0x820 [ 253.360734][T12852] do_initcall_level+0x104/0x190 [ 253.366224][T12852] do_initcalls+0x59/0xa0 [ 253.371181][T12852] kernel_init_freeable+0x334/0x4b0 [ 253.376919][T12852] kernel_init+0x1d/0x1d0 [ 253.381791][T12852] ret_from_fork+0x4bc/0x870 [ 253.386937][T12852] ret_from_fork_asm+0x1a/0x30 [ 253.392240][T12852] [ 253.392240][T12852] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 253.399476][T12852] lock_acquire+0x120/0x360 [ 253.404531][T12852] fs_reclaim_acquire+0x72/0x100 [ 253.410116][T12852] kmem_cache_alloc_node_noprof+0x48/0x710 [ 253.416709][T12852] __alloc_skb+0x112/0x2d0 [ 253.421779][T12852] __ip6_append_data+0x2c16/0x3f30 [ 253.427521][T12852] ip6_append_data+0x1c1/0x380 [ 253.432911][T12852] rawv6_sendmsg+0x1286/0x1830 [ 253.438400][T12852] __sock_sendmsg+0x19c/0x270 [ 253.443635][T12852] ____sys_sendmsg+0x505/0x830 [ 253.448932][T12852] ___sys_sendmsg+0x21f/0x2a0 [ 253.454143][T12852] __x64_sys_sendmsg+0x19b/0x260 [ 253.459619][T12852] do_syscall_64+0xfa/0xfa0 [ 253.464694][T12852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.471212][T12852] [ 253.471212][T12852] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 253.478963][T12852] lock_acquire+0x120/0x360 [ 253.484002][T12852] lock_sock_nested+0x48/0x100 [ 253.489511][T12852] inet_shutdown+0x6a/0x390 [ 253.494569][T12852] nbd_mark_nsock_dead+0x2e9/0x560 [ 253.500223][T12852] recv_work+0x2138/0x24f0 [ 253.505181][T12852] process_scheduled_works+0xae1/0x17b0 [ 253.511257][T12852] worker_thread+0x8a0/0xda0 [ 253.516401][T12852] kthread+0x711/0x8a0 [ 253.521007][T12852] ret_from_fork+0x4bc/0x870 [ 253.526129][T12852] ret_from_fork_asm+0x1a/0x30 [ 253.531609][T12852] [ 253.531609][T12852] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 253.539545][T12852] lock_acquire+0x120/0x360 [ 253.544770][T12852] __mutex_lock+0x187/0x1350 [ 253.549902][T12852] nbd_queue_rq+0x257/0xf10 [ 253.554952][T12852] blk_mq_dispatch_rq_list+0x4bd/0x1900 [ 253.561044][T12852] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 253.567949][T12852] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 253.574478][T12852] blk_mq_run_hw_queue+0x348/0x4f0 [ 253.580153][T12852] blk_mq_dispatch_list+0xd0c/0xe00 [ 253.585899][T12852] blk_mq_flush_plug_list+0x469/0x550 [ 253.591811][T12852] __blk_flush_plug+0x3d3/0x4b0 [ 253.597207][T12852] __submit_bio+0x2d3/0x5a0 [ 253.602262][T12852] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 253.608453][T12852] block_read_full_folio+0x599/0x830 [ 253.614293][T12852] filemap_read_folio+0x114/0x380 [ 253.619872][T12852] do_read_cache_folio+0x350/0x590 [ 253.625520][T12852] read_part_sector+0xb6/0x2b0 [ 253.631017][T12852] adfspart_check_ICS+0xa4/0xa50 [ 253.636505][T12852] bdev_disk_changed+0x75f/0x14b0 [ 253.642164][T12852] blkdev_get_whole+0x380/0x510 [ 253.647556][T12852] bdev_open+0x31e/0xd30 [ 253.652516][T12852] blkdev_open+0x457/0x600 [ 253.657468][T12852] do_dentry_open+0x953/0x13f0 [ 253.662785][T12852] vfs_open+0x3b/0x340 [ 253.667382][T12852] path_openat+0x2ee5/0x3830 [ 253.672503][T12852] do_filp_open+0x1fa/0x410 [ 253.677541][T12852] do_sys_openat2+0x121/0x1c0 [ 253.682754][T12852] __x64_sys_openat+0x138/0x170 [ 253.688132][T12852] do_syscall_64+0xfa/0xfa0 [ 253.693167][T12852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.699679][T12852] [ 253.699679][T12852] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 253.706924][T12852] lock_acquire+0x120/0x360 [ 253.711966][T12852] __mutex_lock+0x187/0x1350 [ 253.717137][T12852] nbd_queue_rq+0xc8/0xf10 [ 253.722277][T12852] blk_mq_dispatch_rq_list+0x4bd/0x1900 [ 253.728421][T12852] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 253.735315][T12852] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 253.741845][T12852] blk_mq_run_hw_queue+0x348/0x4f0 [ 253.747500][T12852] blk_mq_dispatch_list+0xd0c/0xe00 [ 253.753238][T12852] blk_mq_flush_plug_list+0x469/0x550 [ 253.759148][T12852] __blk_flush_plug+0x3d3/0x4b0 [ 253.764554][T12852] __submit_bio+0x2d3/0x5a0 [ 253.769596][T12852] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 253.775769][T12852] block_read_full_folio+0x599/0x830 [ 253.781596][T12852] filemap_read_folio+0x114/0x380 [ 253.787157][T12852] do_read_cache_folio+0x350/0x590 [ 253.792801][T12852] read_part_sector+0xb6/0x2b0 [ 253.798111][T12852] adfspart_check_ICS+0xa4/0xa50 [ 253.803590][T12852] bdev_disk_changed+0x75f/0x14b0 [ 253.809235][T12852] blkdev_get_whole+0x380/0x510 [ 253.814630][T12852] bdev_open+0x31e/0xd30 [ 253.819413][T12852] blkdev_open+0x457/0x600 [ 253.824368][T12852] do_dentry_open+0x953/0x13f0 [ 253.829747][T12852] vfs_open+0x3b/0x340 [ 253.834341][T12852] path_openat+0x2ee5/0x3830 [ 253.839464][T12852] do_filp_open+0x1fa/0x410 [ 253.844510][T12852] do_sys_openat2+0x121/0x1c0 [ 253.849727][T12852] __x64_sys_openat+0x138/0x170 [ 253.855283][T12852] do_syscall_64+0xfa/0xfa0 [ 253.860345][T12852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.866969][T12852] [ 253.866969][T12852] -> #1 (set->srcu){.+.+}-{0:0}: [ 253.874109][T12852] lock_sync+0xba/0x160 [ 253.878885][T12852] __synchronize_srcu+0x96/0x3a0 [ 253.884470][T12852] elevator_switch+0x12b/0x640 [ 253.889783][T12852] elevator_change+0x315/0x4c0 [ 253.895191][T12852] elevator_set_default+0x186/0x260 [ 253.901129][T12852] blk_register_queue+0x34e/0x3f0 [ 253.906710][T12852] __add_disk+0x677/0xd50 [ 253.911748][T12852] add_disk_fwnode+0xfc/0x480 [ 253.917053][T12852] nbd_dev_add+0x717/0xae0 [ 253.922006][T12852] nbd_init+0x168/0x1f0 [ 253.927511][T12852] do_one_initcall+0x233/0x820 [ 253.932828][T12852] do_initcall_level+0x104/0x190 [ 253.938392][T12852] do_initcalls+0x59/0xa0 [ 253.943324][T12852] kernel_init_freeable+0x334/0x4b0 [ 253.949236][T12852] kernel_init+0x1d/0x1d0 [ 253.954107][T12852] ret_from_fork+0x4bc/0x870 [ 253.959230][T12852] ret_from_fork_asm+0x1a/0x30 [ 253.964534][T12852] [ 253.964534][T12852] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 253.972628][T12852] validate_chain+0xb9b/0x2140 [ 253.977931][T12852] __lock_acquire+0xab9/0xd20 [ 253.983140][T12852] lock_acquire+0x120/0x360 [ 253.988166][T12852] __mutex_lock+0x187/0x1350 [ 253.993293][T12852] elevator_change+0x1e5/0x4c0 [ 253.998632][T12852] elevator_set_none+0x42/0xb0 [ 254.003946][T12852] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 254.010292][T12852] nbd_start_device+0x17f/0xb10 [ 254.015709][T12852] nbd_genl_connect+0x135b/0x18f0 [ 254.021277][T12852] genl_family_rcv_msg_doit+0x212/0x300 [ 254.027733][T12852] genl_rcv_msg+0x60e/0x790 [ 254.032769][T12852] netlink_rcv_skb+0x205/0x470 [ 254.038161][T12852] genl_rcv+0x28/0x40 [ 254.042682][T12852] netlink_unicast+0x82f/0x9e0 [ 254.048017][T12852] netlink_sendmsg+0x805/0xb30 [ 254.053311][T12852] __sock_sendmsg+0x21c/0x270 [ 254.058525][T12852] ____sys_sendmsg+0x505/0x830 [ 254.063818][T12852] ___sys_sendmsg+0x21f/0x2a0 [ 254.069027][T12852] __x64_sys_sendmsg+0x19b/0x260 [ 254.074504][T12852] do_syscall_64+0xfa/0xfa0 [ 254.079565][T12852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.086123][T12852] [ 254.086123][T12852] other info that might help us debug this: [ 254.086123][T12852] [ 254.096371][T12852] Chain exists of: [ 254.096371][T12852] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#53 [ 254.096371][T12852] [ 254.110154][T12852] Possible unsafe locking scenario: [ 254.110154][T12852] [ 254.117626][T12852] CPU0 CPU1 [ 254.123003][T12852] ---- ---- [ 254.128568][T12852] lock(&q->q_usage_counter(io)#53); [ 254.134061][T12852] lock(fs_reclaim); [ 254.140594][T12852] lock(&q->q_usage_counter(io)#53); [ 254.148504][T12852] lock(&q->elevator_lock); [ 254.153108][T12852] [ 254.153108][T12852] *** DEADLOCK *** [ 254.153108][T12852] [ 254.161346][T12852] 6 locks held by syz.4.1948/12852: [ 254.166571][T12852] #0: ffffffff8f545410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 254.175131][T12852] #1: ffffffff8f545228 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 254.184123][T12852] #2: ffff888024f191c8 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1ab0 [ 254.195550][T12852] #3: ffff888024f190d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1ab0 [ 254.206543][T12852] #4: ffff88814274b1b8 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 254.217383][T12852] #5: ffff88814274b1f0 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: elevator_change+0x1ca/0x4c0 [ 254.228533][T12852] [ 254.228533][T12852] stack backtrace: [ 254.234542][T12852] CPU: 1 UID: 0 PID: 12852 Comm: syz.4.1948 Not tainted syzkaller #0 PREEMPT(full) [ 254.234564][T12852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 254.234582][T12852] Call Trace: [ 254.234591][T12852] [ 254.234601][T12852] dump_stack_lvl+0x189/0x250 [ 254.234625][T12852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.234644][T12852] ? __pfx__printk+0x10/0x10 [ 254.234665][T12852] ? print_lock_name+0xde/0x100 [ 254.234683][T12852] print_circular_bug+0x2ee/0x310 [ 254.234708][T12852] check_noncircular+0x134/0x160 [ 254.234734][T12852] validate_chain+0xb9b/0x2140 [ 254.234767][T12852] __lock_acquire+0xab9/0xd20 [ 254.234787][T12852] ? elevator_change+0x1e5/0x4c0 [ 254.234811][T12852] lock_acquire+0x120/0x360 [ 254.234827][T12852] ? elevator_change+0x1e5/0x4c0 [ 254.234858][T12852] __mutex_lock+0x187/0x1350 [ 254.234882][T12852] ? elevator_change+0x1e5/0x4c0 [ 254.234907][T12852] ? xa_find_after+0xae/0x430 [ 254.234936][T12852] ? xa_find_after+0x402/0x430 [ 254.234960][T12852] ? elevator_change+0x1e5/0x4c0 [ 254.234982][T12852] ? xa_find_after+0xae/0x430 [ 254.235008][T12852] ? __pfx___mutex_lock+0x10/0x10 [ 254.235033][T12852] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 254.235067][T12852] elevator_change+0x1e5/0x4c0 [ 254.235094][T12852] elevator_set_none+0x42/0xb0 [ 254.235120][T12852] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 254.235160][T12852] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 254.235199][T12852] ? sysfs_add_file_mode_ns+0x259/0x300 [ 254.235223][T12852] nbd_start_device+0x17f/0xb10 [ 254.235250][T12852] ? device_create_file+0xf4/0x1c0 [ 254.235277][T12852] nbd_genl_connect+0x135b/0x18f0 [ 254.235309][T12852] ? __pfx_nbd_genl_connect+0x10/0x10 [ 254.235335][T12852] ? rcu_is_watching+0x15/0xb0 [ 254.235358][T12852] ? __nla_parse+0x40/0x60 [ 254.235384][T12852] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 254.235421][T12852] genl_family_rcv_msg_doit+0x212/0x300 [ 254.235449][T12852] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 254.235481][T12852] ? stack_trace_save+0x9c/0xe0 [ 254.235508][T12852] genl_rcv_msg+0x60e/0x790 [ 254.235535][T12852] ? __pfx_genl_rcv_msg+0x10/0x10 [ 254.235558][T12852] ? __pfx_nbd_genl_connect+0x10/0x10 [ 254.235587][T12852] netlink_rcv_skb+0x205/0x470 [ 254.235604][T12852] ? __lock_acquire+0xab9/0xd20 [ 254.235620][T12852] ? __pfx_genl_rcv_msg+0x10/0x10 [ 254.235644][T12852] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 254.235673][T12852] ? down_read+0x1ad/0x2e0 [ 254.235698][T12852] genl_rcv+0x28/0x40 [ 254.235720][T12852] netlink_unicast+0x82f/0x9e0 [ 254.235756][T12852] ? __pfx_netlink_unicast+0x10/0x10 [ 254.235784][T12852] ? netlink_sendmsg+0x642/0xb30 [ 254.235801][T12852] ? skb_put+0x11b/0x210 [ 254.235822][T12852] netlink_sendmsg+0x805/0xb30 [ 254.235845][T12852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.235865][T12852] ? aa_sock_msg_perm+0xf1/0x1d0 [ 254.235895][T12852] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 254.235912][T12852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.235931][T12852] __sock_sendmsg+0x21c/0x270 [ 254.235959][T12852] ____sys_sendmsg+0x505/0x830 [ 254.235983][T12852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.236008][T12852] ? import_iovec+0x74/0xa0 [ 254.236026][T12852] ___sys_sendmsg+0x21f/0x2a0 [ 254.236048][T12852] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.236087][T12852] ? __fget_files+0x2a/0x420 [ 254.236102][T12852] ? __fget_files+0x3a0/0x420 [ 254.236122][T12852] __x64_sys_sendmsg+0x19b/0x260 [ 254.236145][T12852] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 254.236174][T12852] ? do_syscall_64+0xbe/0xfa0 [ 254.236198][T12852] do_syscall_64+0xfa/0xfa0 [ 254.236218][T12852] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.236239][T12852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.236256][T12852] ? clear_bhb_loop+0x60/0xb0 [ 254.236276][T12852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.236294][T12852] RIP: 0033:0x7f9d6ed8eec9 [ 254.236318][T12852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.236334][T12852] RSP: 002b:00007f9d6fcf5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.236356][T12852] RAX: ffffffffffffffda RBX: 00007f9d6efe5fa0 RCX: 00007f9d6ed8eec9 [ 254.236370][T12852] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 254.236382][T12852] RBP: 00007f9d6ee11f91 R08: 0000000000000000 R09: 0000000000000000 [ 254.236399][T12852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.236410][T12852] R13: 00007f9d6efe6038 R14: 00007f9d6efe5fa0 R15: 00007ffcb47866b8 [ 254.236433][T12852] [ 254.762840][ T5839] block nbd4: Receive control failed (result -32) [ 254.769970][ T5839] block nbd4: Receive control failed (result -32) [ 254.770120][ T5149] block nbd4: Receive control failed (result -32) [ 254.777080][ T5839] block nbd4: Receive control failed (result -32) [ 254.806794][T12852] nbd4: detected capacity change from 0 to 127 [ 254.836042][ T5850] block nbd4: Dead connection, failed to find a fallback [ 254.843459][ T5850] block nbd4: shutting down sockets [ 254.849251][ T5850] blk_print_req_error: 286 callbacks suppressed [ 254.849268][ T5850] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 254.864803][ T5850] buffer_io_error: 286 callbacks suppressed [ 254.864819][ T5850] Buffer I/O error on dev nbd4, logical block 0, async page read [ 254.879211][ T5850] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 254.889493][ T5850] Buffer I/O error on dev nbd4, logical block 1, async page read [ 254.898958][ T5850] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 254.908300][ T5850] Buffer I/O error on dev nbd4, logical block 2, async page read [ 254.916232][ T5850] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 254.925839][ T5850] Buffer I/O error on dev nbd4, logical block 3, async page read [ 254.933882][ T5850] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 254.943115][ T5850] Buffer I/O error on dev nbd4, logical block 0, async page read [ 254.951395][ T5850] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 254.960874][ T5850] Buffer I/O error on dev nbd4, logical block 1, async page read [ 254.968909][ T5850] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 254.978132][ T5850] Buffer I/O error on dev nbd4, logical block 2, async page read [ 254.986068][ T5850] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 254.995318][ T5850] Buffer I/O error on dev nbd4, logical block 3, async page read [ 255.003259][ T5850] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.013601][ T5850] Buffer I/O error on dev nbd4, logical block 0, async page read [ 255.021871][ T5850] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.031258][ T5850] Buffer I/O error on dev nbd4, logical block 1, async page read [ 255.040927][ T5850] ldm_validate_partition_table(): Disk read failed. [ 255.048574][ T5850] Dev nbd4: unable to read RDB block 0 [ 255.055171][ T5850] nbd4: unable to read partition table [ 255.065197][ T5850] ldm_validate_partition_table(): Disk read failed. [ 255.072965][ T5850] Dev nbd4: unable to read RDB block 0 [ 255.079843][ T5850] nbd4: unable to read partition table