last executing test programs: 2.649853168s ago: executing program 3 (id=2328): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@nat={'nat\x00', 0x670, 0x5, 0x4e0, 0x0, 0x2d0, 0xffffffff, 0x0, 0x228, 0x448, 0x448, 0xffffffff, 0x448, 0x448, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0xf2, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff, 0x0, 0xff], @ipv4=@loopback, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x87, 0x4e1c, 0x4e23, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xb, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @icmp_id=0x66}}}}, {{@ip={@multicast1, @rand_addr=0x64010101, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x73, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x5, 0x3}, {0xffffffffffffffff, 0x0, 0x4}, {0xffffffffffffffff, 0x3, 0x1}, 0x1, 0x10001}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @icmp_id=0x65}}}}, {{@ip={@broadcast, @multicast1, 0xffffff00, 0xffffffff, 'geneve1\x00', 'macvlan1\x00', {0xff}, {}, 0x2, 0x2, 0x12}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$tipc(0x0, r2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r6, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r8, &(0x7f0000000840)=[{&(0x7f0000000880)="80fd02000000", 0x6}], 0x1, 0xfffffffc, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) 2.491129249s ago: executing program 0 (id=2332): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x50) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x33, 0x0, 0x7f2e, 0x0, 0xfffffffb, 0x2, 0x80000000, 0xfffffffe, 0xffff2ee0, 0x40, 0x8, 0x4000004, 0xfffffe00, 0x5, 0x0, 0xb, 0x0, 0x7, 0x20002, 0x0, 0x2, 0x0, 0x3ff}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x36}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) r2 = epoll_create(0x7) r3 = epoll_create1(0x0) r4 = epoll_create(0x7) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0xed3, 0x66fd, 0x7e, 0xf, 0x8, 0x1751d193, 0x8}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) r5 = epoll_create1(0x0) r6 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000100)) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000000080)={0x1008}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000000)) 2.371884831s ago: executing program 4 (id=2333): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x500, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4840}, 0x2000c000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x8810}, 0x1) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000300)={@multicast1, @private, 0x0}, &(0x7f0000000340)=0xc) bind$xdp(r4, &(0x7f0000000380)={0x2c, 0x0, r5, 0xf}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bind$xdp(r4, &(0x7f0000000480)={0x2c, 0xc, r6, 0x8, r4}, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x30046009}, 0x20000081) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r8, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000004) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r7, 0x4048587b, &(0x7f00000012c0)={{r4, &(0x7f0000000800)='/@}.\xac%*\x00', 0x40000, &(0x7f0000000840)={@align=0x1, {0x4, 0x6, 0xb0ad, 0x3}}, 0x1, &(0x7f0000000880), &(0x7f00000008c0)=0x3}, 0xa, &(0x7f0000001180)=[{0x0, 0x100, &(0x7f0000000900)='![@\x9f@]\x00', &(0x7f0000000940)="e55efe6580e3651bbdd86ffb34cf7082eb7a65bde0774c161ecba6715784399e537b296f1d210fd26ce5f4c2ff13983e2e6db41717a657bebc62825b393bd902283a6ee339036f330b13be25d1e0449b0855d12a2d37717cc28ccd6f81e5d38d47978c3d41da09a85981b065fa92aaeba8a3692b327be9e0aa7752f6e87bf366c06adfb2d1bbf7e2a4d65938a6253226a99aea411346b5ade1ef192926", 0x9d, 0x10}, {0x2, 0xc, &(0x7f0000000a00)='nl802154\x00', &(0x7f0000000a40)="e5ff0cbd13164233d31d3ac037baf41a0ef21971ab315016ff80852994e52388b1ca587f4e79c78c7018c1c08ba905f0dc21910b31b670fce58b83e82df783", 0x3f, 0x18}, {0x2, 0x6, &(0x7f0000000a80)='\x9e,\\\'\xb7\x00', &(0x7f0000000ac0)="bbf6e00d5e5a89b62f8adcd2a1bfe4e4801630ebb416f3a8de4fbf1505635d1f9a27098b1a3433", 0x27}, {0x3, 0xffff, &(0x7f0000000b00)='\x00', &(0x7f0000000b40)="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", 0xfe, 0x10}, {0x1, 0x9, &(0x7f0000000c40)='\x00', &(0x7f0000000c80)="2a1d168085849ebe99a7a955d4815929d1050bc800b716c03b06c690e897eea35b1fb6513f2873301a21b189f395e89c18e862ca5a123acdafc1ab5fb6c7deca241baa1bacb9299ed79d162f7cd61c454d4765ece5dada7ab34dc97461015131c235b93c530fce2bbb7146b285d659f5936d7289093a6d3240a9d8b2cfc1", 0x7e, 0x28}, {0x1, 0x7fff, &(0x7f0000000d00)='\\:$\x00', &(0x7f0000000d40)="c6a2f44e846631335e6bc0e64b3ee130a83639f3fd58ead78b8a8019f242466e3abe0002e577ccb066de6ff4f6eb5f54ef2de99dcd7e9f55c6f5923bf5e4074d2dfaf9dc2a0270e65fee3abc07aa05597e0b49327bd66c0565e698de785d", 0x5e, 0x30}, {0x1, 0x3, &(0x7f0000000dc0)='TIPCv2\x00', &(0x7f0000000e00)="833eafd79509ea74010720c421ce6415355b631052aa1cca2560912e5f7ad0582309aebb2d006a92e65d4cb13f8ca34e76e088f5ec4c1626556e4d1cf51b17d6a7d90e5088b63ac22c8e173484c478a82d2a2c8f09a448faee8dda3908ae5bef81f80b616c6716db", 0x68, 0x38}, {0x2, 0x200, &(0x7f0000000e80)='wpan0\x00', &(0x7f0000000ec0)="dcfe30567fce68959b371cea5c1bae4189f6cd6bebd182c4f24d8bc5c28f9e43e2191dfc44e0919622290925733ccd1ce3e3cd6bcb003cf885ccc186776692997bfc9406593caf8d8c2312881177d52541be29536a46cdb42dc9cd6ce73c3d13ede00d382ed945bb25598baa1f0affb14848334b1e7dad99cfd9662bc20b4d74d39205a0bae48a7040a72b32a063cc7fbebdfe4de63fd95ff574f2b8c457c96c6905cef3314147e7d047c3390e949e695418b5498dd2d604", 0xb8, 0x2}, {0x1, 0x1ff, &(0x7f0000000f80)='%$!\x00', &(0x7f0000000fc0)="a093ec560e432b7931218b09a2aa9454014fb3f46b95564352629a431f5ed2dff6f3a27c98c12c3b711087963a66483e795679efff42eb163059491ce365ab7eecae4d70764233217ab9fc3d3539ff109c1c8532b154a32736b212d140fadcd8e6a11943e4b72e5eea577765185b93085d99439f77a28c90", 0x78, 0x28}, {0x2, 0x1, &(0x7f0000001040)='nl802154\x00', &(0x7f0000001080)="734de1de65220665cf3b3f4ccdf08d44beb24a2eab18cfe48b09c4d0528b16fb7a5e705f843f10aa7f027c9d1039ee90c7799be800bdcd9fc89ab17c9cbe1dd6d5b69c80a56037a62d7faebf20ead89cc2b07c8cbdf5d83ec4b1998f59a6900743056c6eefe8e23e151f26196d0f7d116bb5f6bcae9851109547434367946bb84de73da3a6498a4494b85ed795bf943610411cd5e3e6a1d87bcb144a1ef61c4911cab5b7485348b860a58beefe783b83080633c7af8ed8867348736e50c7e79cda4baf4ae17c6a3af54897a56726789fb8bf9994cbf4ca10c5446928f0af3f1e3054737016", 0xe5, 0x10}]}) write$cgroup_subtree(r9, &(0x7f0000001340)={[{0x2d, 'net'}, {0x2d, 'memory'}, {0x2b, 'net_prio'}]}, 0x17) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x50, r1, 0x801, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001500)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x60, r1, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x24}, 0x0) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001680), r0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, r11, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x480c0) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x400c015) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000018c0), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x5c, r12, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x98}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001a00)={'veth1_to_team\x00'}) getsockopt$inet6_mreq(r9, 0x29, 0x15, &(0x7f0000001a40)={@private2, 0x0}, &(0x7f0000001a80)=0x14) bind$xdp(r4, &(0x7f0000001ac0)={0x2c, 0xb, r13, 0x20, r9}, 0x10) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x40c0) 2.248699459s ago: executing program 3 (id=2336): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000013076888639148dc8e8ed03c404370000000000000000000300000a30000000050a01020000a16c00e6ff000a0000000c00024000000000040000020900010073797a310000000100000080140000001100010000000000000000000000000a"], 0x58}, 0x1, 0x0, 0x0, 0x80b0}, 0x20008890) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xc}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x5e41}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8881}, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000008, 0x10, r3, 0x180000000) 2.213988229s ago: executing program 4 (id=2337): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0x1, 0x35, 0x1, 0xe, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x14, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xa8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ldst={0x0, 0x1, 0x0, 0x1, 0xa, 0xfffffffffffffff0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x78, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000380)=[{0x3, 0x5, 0xd, 0x9}, {0x2, 0x5, 0x1, 0xb}, {0x4, 0x4, 0xd, 0x6}, {0x4, 0x5, 0xb, 0xa}, {0x4, 0x2, 0xe, 0xba448da83ffaad0b}], 0x10, 0x1000}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x1f, 0x0, @val=@netkit={@void, @value=r3, @void, @void, r2}}, 0x1c) ioctl$int_out(r0, 0x5460, &(0x7f00000004c0)) (async) sendto(r4, &(0x7f0000000500)="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", 0x1000, 0x0, &(0x7f0000001500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3, 0x1, {0xa, 0x4e20, 0x4, @local, 0x9}}}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000001700)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001600)={0xb4, r6, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffc}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3772b0a2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x21}, 0x800) r7 = openat$cgroup_ro(r1, &(0x7f0000001780)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x1014) (async) ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000001880)=r7) (async) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f00000028c0)={&(0x7f00000018c0)=""/4096, 0x1000, 0x0, 0x5}) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000002900)={0x0}, &(0x7f0000002940)=0xc) syz_open_procfs$namespace(r8, &(0x7f0000002980)='ns/uts\x00') (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) (async) r9 = socket$igmp(0x2, 0x3, 0x2) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002cc0)={r3, 0xe0, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000029c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000002a00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002a40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xae, &(0x7f0000002a80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000002b00), &(0x7f0000002b40), 0x8, 0x48, 0x8, 0x8, &(0x7f0000002b80)}}, 0x10) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000002d00)={0x0, 0x8, 0x81, 0x80000000, @vifc_lcl_ifindex=r10, @multicast1}, 0x10) (async) r11 = accept(r5, &(0x7f0000002d40)=@phonet, &(0x7f0000002dc0)=0x80) write(r5, &(0x7f0000002e00)='\f', 0x1) (async) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000002e80), r7) sendmsg$TIPC_CMD_SET_NODE_ADDR(r11, &(0x7f0000002f40)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x24, r12, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xc00}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) connect$rxrpc(r11, &(0x7f0000002f80)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010101}}, 0x24) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000003100)={r0, &(0x7f0000003000)='%/\x00', 0x40000, &(0x7f0000003040)={@align=0x8, {0x9, 0x5, 0x81}}, 0x1, &(0x7f0000003080)={@_ha_fsid}, &(0x7f00000030c0)=0x8}) (async) r14 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003180)=@o_path={&(0x7f0000003140)='./file0\x00', 0x0, 0x10, r3}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002fc0)={@cgroup=r13, r7, 0x35, 0x14, 0x0, @void, @value=r14, @void, @void, r2}, 0x20) pipe(&(0x7f00000031c0)={0xffffffffffffffff}) setsockopt$MRT_ADD_VIF(r15, 0x0, 0xca, &(0x7f0000003200)={0x1, 0x1, 0x4, 0x5, @vifc_lcl_ifindex=r10, @broadcast}, 0x10) 2.134191176s ago: executing program 2 (id=2338): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x0) 2.067581252s ago: executing program 4 (id=2340): socket(0x39, 0xa, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000081000000030000000500000016010000", @ANYRES32, @ANYBLOB="ffffffff"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.960038701s ago: executing program 3 (id=2341): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="01002ebd700e000600001400000018000180140002006e657464657673696d30000000000000050019000000000308001500f1ffff01050018"], 0x44}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xfffffffffffffe62}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x6f, @mcast1, 0x8}, @in={0x2, 0x4e22, @broadcast}], 0x2c) 1.768292592s ago: executing program 2 (id=2342): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x130, 0x30, 0xb, 0x0, 0x0, {}, [{0x11c, 0x1, [@m_ctinfo={0x118, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffffd}]}, {0xca, 0x6, "f38a39a7dbd2f23ea3ebdb01ef48f56a2e7ec730b7fcde93c9265bb5071299e3aa53f7c5edae1eb716a6908c08449c4e62c57d50f9555c069683194a510a980e518423fe60e87e0d83a5728f9578757de87584aedf16e5303badb5362106c857da7e50a1bb4b83f051a51c3c43d6e6af24eaa6046fdbe4ac7e28ead2aff985ac0ef936dc80c1bdeec4296d7787d758058d61bf86c720e0002dc62619ea9a8e3ee16b4a634959e05f62e4f325314219f4a5457de1e457b526fd4be74c9b4e00991b3b7182b9bd"}, {0xc, 0x7, {0x0, 0xe961357ff8ba7d2a}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x130}}, 0x0) 1.767742414s ago: executing program 2 (id=2344): r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@sco={0x1f, @fixed}, &(0x7f0000000140)=0x80) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$alg(0x26, 0x5, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000000580)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="a905000000407464000100000000000000e5c0d8af7a6417e436a106993e1e5ad8311dab", 0x2c}], 0x1}}], 0x1, 0x800) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x40, r1, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x820}, 0xc014) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x4, [@float={0x4, 0x0, 0x0, 0x10, 0x4}, @enum64={0x4, 0x3, 0x0, 0x13, 0x1, 0x1a, [{0x8, 0xa, 0x5}, {0x3, 0xfffff800}, {0x4, 0x7, 0xfffffffd}]}, @struct={0x6, 0x6, 0x0, 0x4, 0x0, 0x7, [{0x1, 0x4, 0x9}, {0x4, 0x2, 0x2}, {0x7, 0x3, 0x1400000}, {0xd, 0x1, 0x6}, {0x10, 0x4, 0x4}, {0xd, 0x2, 0x4}]}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000400)=""/29, 0xac, 0x1d, 0x1, 0x200, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x3, 0xb1a, 0x10000, 0x9850, 0x1, 0x51de, '\x00', 0x0, r4, 0x4, 0x5, 0x5, 0x0, @value=r5}, 0x50) 1.767128414s ago: executing program 3 (id=2345): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r1, 0x0) accept(r1, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{}, "3f968a231afa0e18", "4a952e4ea416ad75f769d6386c3c044b", '\by\x00', "e4eb37b07ad86ed7"}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x24, &(0x7f0000000280)=0x3, 0x4) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002"], 0x5c}, 0x1, 0x0, 0x0, 0x4004800}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900919e01"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x40001) 1.656519993s ago: executing program 4 (id=2347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000c0}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) (async, rerun: 64) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 64) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) (async, rerun: 64) r9 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r9, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) (async) getsockopt$inet_tcp_buf(r9, 0x6, 0x18, 0x0, &(0x7f0000000340)) (async) sendmsg$NFC_CMD_FW_DOWNLOAD(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r7, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c040) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x49, 0x10, &(0x7f0000000340)}, 0x42) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) (async, rerun: 32) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) (rerun: 64) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r14], 0x1c}}, 0x840) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x5c, r2, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) 1.582058316s ago: executing program 4 (id=2348): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ab3700000029101900"/31], 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @multicast1}]}, &(0x7f0000000100)=0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000000095007400"/32], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) (async) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r3, &(0x7f0000000600)="6459df536e39c72401df00e39f31561fde3bb80bac686827534cf60be8fdefc76c65806bb8f09878182b793929e034a5d78a57a18afda3cde2fb36d45d4b1c694bd33c71c03a84cfaa054b08ac9b4f99e2b4f30bcc790e5bd6bfba9ce11e0c2241efba8011", 0x65, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @loopback, 0x10001}, 0x1c) shutdown(r3, 0x1) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000008000000000000000", @ANYRES32=0x1, @ANYBLOB='f\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000400"/28], 0x50) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000340)={@private, @local, 0x0}, &(0x7f0000001740)=0xc) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f0000001540)=ANY=[@ANYBLOB="9feb010018000000000000005700000057000000090000000d000000000000010000000057004501070000000100000f0300000004000000ff7f000091b800008086c3000000000400000d0000000005000000000000000a000000050000000b000000030000000c2e0040010000000000612e102e222e0000"], &(0x7f00000015c0)=""/73, 0x79, 0x49, 0x0, 0x8f6, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="04000000feffffff49d60000ff7f000000280000", @ANYRES32=r6, @ANYBLOB='\t\x00'/20, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="04000000050000000500000000000000000000000000000000000000581866f43725580dccfb921144f01c3d789b5c1309218bdd43ed388dcad5ff77337f52e8b84b37abfe4c77d0299d72b84a6bebc9ff051f3162982493d1f09c"], 0x50) (async, rerun: 64) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="3fabf82df2c3"}) (async) write$tun(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800080007030300020014009b0a4514000000000000082f9078ac14140cffffffff810088a8", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="1020000590780000"], 0x36) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001640)={r2, r10, 0x4}, 0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001840)=ANY=[@ANYBLOB="2800000010005fba0000002200000000000000009bc7", @ANYRES8=r10, @ANYRESOCT=r8], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8000) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000280000000000679078ac1e0001e00000010e00906800"/54], 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000000)={'veth0_to_batadv\x00', &(0x7f0000000140)=@ethtool_channels={0x3d, 0x5, 0x40, 0x0, 0x3ff, 0x9, 0x1, 0x5, 0x2}}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 1.476525836s ago: executing program 0 (id=2350): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="a7"], 0x18}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x11, 0x3, 0x4000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', 0x0}) bind$packet(r5, &(0x7f0000000540)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f01"], 0xdd12}], 0x1, 0x0, 0x0, 0x24000054}, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={r3, 0xc2a9}, &(0x7f0000000180)=0x8) writev(r0, &(0x7f0000000840)=[{&(0x7f0000000380)="46ecc5d9", 0x4}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000940)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}]}, 0x2c}}, 0x0) 1.426529268s ago: executing program 4 (id=2351): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000280)={r1}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x4070bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x89}, 0x24048800) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000200000d"], 0x0, 0x3a, 0x0, 0x8}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@map=r4, 0x4, 0x1, 0x6, &(0x7f0000000680)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0}, 0x40) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r7, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x0, 0xba, 0xce02cd}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x81, 0xffffffff, 0x6940000, 0x80, 0x9, 0x77}, &(0x7f0000000940)=0x9c) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x14, 0x7a3cc0df0763377f, 0x0, 0x0, {0x10, 0x24}}, 0x14}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@map=r3, r4, 0x3f, 0x30, 0x0, @void, @void, @void, @value, r5}, 0x20) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8831, 0x26}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x405c844}, 0x40cd4) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x6, [@var={0x7, 0x0, 0x0, 0xe, 0x1, 0x2}, @const={0xd}, @typedef={0xa, 0x0, 0x0, 0x8, 0x5}, @restrict={0xd, 0x0, 0x0, 0xb, 0x4}, @const={0xe, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x5f, 0x0, 0x2e, 0x2e]}}, &(0x7f0000000100)=""/141, 0x5e, 0x8d, 0x1, 0x7}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000007000000b7080000000000007b8af8ff00000000b70800000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300"/92, @ANYRES32=r3, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x39}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x2, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 1.369899135s ago: executing program 0 (id=2352): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) close(0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x2c000850) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_virt_wifi\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) 1.304956311s ago: executing program 1 (id=2353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x6000) 1.136455604s ago: executing program 1 (id=2354): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002840)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="bc31df99c6ebffbe9f2555e501c968a715f6342df32dad7286b14001789ccc50957cfeabf3c491437971d8d856f740bb6e9ae0287bebff62f2e558d3cccd820c92864a3286311f1d9c8f58a4f9146d5983a5f856e685de564e48f80e027dd6dcd46c00e74166f1d0cb42e00d8aca3cfad5eb5ebee863a0eaecb13304107f005c3319a8603f32281f741562d4178faf5a7a336fe9d301", 0x96}, {&(0x7f0000000200)="ebea06ecc412241f859335dcbc7acbbb1010a84a3fd3e597b828a6984f12a44628f39b54b9b12c2c0e11dd810182bac472388f533c249a1e06a36a2202c743648ce0def879034335977c28e622b977118d18198273dc22b651300fbe27c77b89e2", 0x61}, {&(0x7f0000000280)="5705fa7493c7bbf2ab28fa509e9ff76895d26e2dac28c6e97ff54f", 0x1b}, {&(0x7f00000002c0)="07edee3954dd9b0b715c4fdfd3e678f10e055b145e80d834020aaf75cc36d0a2eb6b3a2eeb4a4466885961430f8c29a701e6f34ef4356335053beb26c9a264e88699a1b12352594af31100124f32bf829a4d5af01a6578ac417d", 0x5a}], 0x4, &(0x7f0000000380)=[@iv={0xa8, 0x117, 0x2, 0x92, "2522ca9ceee954518a0da1f10ac6de53ff966a78f2a5f1d6d21758fcbd9f96f2e84c65f26e8a33942f916dc814ac915bc01a7a1c28e040206d81c8acc7a55f82c87ab4ea92c2179ad8de7ef1f323737c09438fc10252320be2ad596e1672d0b1d09322e20c3cae486b599e2673b9fbb1f5e5e2748ab36e6f5df05072935482b24f74d721762b1f65672a2635f5ba21d0b24d"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xbe6}], 0xd8, 0x14}, {0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000480)="bb9140e3e61330bbb60f54bdd81b27ab59c831595fc8af39627c25668bf2e3c9c84d276beae746c5e60403b0657c2f0afbb3c25819228a0b2514fdfbf13aa9c5eef84ae9500249c61987863e20be73990072c1fa361aab869763249f060eaec4188365e81c62850b89c97dcd76", 0x6d}, {&(0x7f0000000500)="ef1eb220cd18760a78ef235c033676984cf83aecfcb9bf751483897bb570c3165ca59f5e3ef057f095e02861d473997709856d0c92b7aebf7e20d6823b7f68dda457778c8844ecf41bfb924b15d578e32bd4a5c85f427c5d40ab981c6dabb4875fa3019dbaf807940f47a44c196b1b2ea4642afd8f48bcb82e53c5fdb63cca7b1daebd246bffd369ed7e2fc72cd3fd3d8e447f90352d6c7954e039b10927c44ff99c6f395dea56655232383bdf9293383871e2b3cc3beb658b928ce38d536d6cac0a4d43c2f0e2bb58aec0f55b8e7780a99bab2aeeec90b8b84edbe77ae78afcf448ff", 0xe3}, {&(0x7f0000000600)="56276225f9e28d00925911f280c7554b782b5ecb662f4e7cdbe595bb6fd1234a4dd04fef52d72fba1c900c972099141c0cab6eadf55f482aff19fd357fd48eaedc12ce5f779b7cc7bff5d6df40edb82f0bbc694122a5cd1f1944049baa8fd62ea69814d0abe4232c8a2fbcf8570ef7013691e5f2cda9a4119318791ebdf22e51b10790d5db298936bf61", 0x8a}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="4f8c2508e677c236f9e6ef44fa8c0de24db9f2e375a257704ed2f9ed1d9721028bc2833e7d018daadc1fdb", 0x2b}, {&(0x7f0000001700)="2d1a22f2898d23a77a746ef2ca2ab73da35fc2c22c4ec6b90f98cf0c152969dfdfae3b153eab5f2de993c5ca08a33aad93b2ccd30fcd66c7936a1513a83054556be7ac264e4bfe515921568a84967a85be9ebb7704e2e659b7934a67a65c169cf8d484eed0f4c75081610cb230c43c37cac2cd55012de5dbd0c52ad6fb874c902bed0c69", 0x84}, {&(0x7f00000017c0)="8b7718cd77156811cfe00882375120672ce97a98f4ed63a3f1f0d206f92e4a6d47f2e65b2238dce225da1d598ec727b19386885cf1e563127160694c9e3c817e5af95d5b50c7e2a4bed208e1b204850a85d0787c3aebcd21feddfbf70d5048a26ded0021e4476613acaf7b8f40c77a57e5b0ba1dc2103e0d0e5b460727233d9612ee75dc2390655e815ab9175f23f2712ee032d88436304a4633093a79d7332bc7b99945c9c6e8fafafb3ce5abff069e9aecf484c852dd3d7a8d8acf7548f3efd6051a3c769215822eb848ed5614f46d5358e7bb3d95fdc5f38e91c06dff9c4c797771584b14e1646206f8886f91e7826b", 0xf1}], 0x7, &(0x7f0000001940)=[@op={0x18}, @assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x4044080}, {0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000019c0)="91b998a36f78069056c9ade8a96a691e06974ddd84f18a8360f7a0afeb49fdc33cd3e110cf9bfee583cdf616e8578dbc5d1d6ca52f3b130d27035a2e9955f4e3a8e56322ca30351e4fe02c6662f35b56a65841647ca12d336ed0379508ef0c054d6ed135d037e3fa8009089a2deba66b9763c2d52bd496999e1537aee94678676d7182955f81bdabeefdb27f350ec07408dc49f5d78e74a9f60b3ac77eb670755e7d194d52b4c5f57d80", 0xaa}, {&(0x7f0000001a80)="03399aaf48db3a76e4389ce8c7c6d985684c3a68535054ec", 0x18}, {&(0x7f0000001ac0)="5b11477e6e757dc14311410dc61af1146bfffa75a05f153dc2d35beb562d89a2c585a7f9c52da4fba63f2a73384db56c763d11fc2252a197524050bbc57931ce9822d3006f54057ca2653d877463405612b7d66019", 0x55}, {&(0x7f0000001b40)="e8c965a2deb2d76653252277aa73968eef29e04aba468d8a5c9b9a6d2c51685c9c669fa4f74fa340f6a29b4e1bfcf8e6d37bec5d51149e7d10363b4f9f3fd58031c4b2cf2ca353c1baf62c287a6c027d65b7ba6f7152b63ef4dd6459610f90653ea04475dab1de1c691691719ab6687744686990e6a7232a98ee1f96c79b216c23836b89bd51e65959b129fdd7bcc47ed0a4844071904ad7e3f25d05ca7e61baf5", 0xa1}], 0x4, &(0x7f0000001c40)=[@iv={0x70, 0x117, 0x2, 0x55, "667c1a9f4b0fb6b2926e718dc92b1fe78d0ef4571044566f77bd7ff6ec0dcdb98c006084c3c87d9c8fcb4da3d0334a1d5fa8dfc21d8cdbafd3b4ee2d81872dbb08c45df84f9120179525e300beba62c5aa45097a1e"}], 0x70, 0x10}, {0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001cc0)="ac8bbd4f913ba99cc730000fc4c4b9e4f1f839431fc751aeee0b3b14e101d563a945cd3957943de40bf1e02736ee6b3031c88f6b933efba7899f6b1e5bd657a5f446be1fe5b9085edc187ea137c1b626b3b85aa51872772f3e5146c88a0b70373a0bebf44db0efcbee82aa4674b1edbe051fc4452ac78e9a105da88b33c11cc5730ac555828923f2c8c564e8e72aeb85542a904631ece3c112eca1da5478548acae1ec8c8af171eaf91eb83f8c0ff402f37bb3c98991881d2004f107ed4be8cad68bc0748c1f04cb77540675ce7b8176af983b28027938f2fa0ce49bf584f93f9adf8a1ada20", 0xe6}, {&(0x7f0000001dc0)="1c9028a365bfc9a3d08b377eb7de5a7fe87538ed7980b721bc8d88e9939212fc79c4a9b5c70a6f52ab8633eff050e65f9b8bec65f24d5baa779f32094d6c4c542e35ae4d2fb642d9e756c95ca935d4364b429bedaf1f3ac8539c8fdbe84377", 0x5f}, {&(0x7f0000001e40)="f293bf16adb7ac1c1e385360aa46a57d217fe9981d7ad9dad1508b08061f68319182d099fa93d5a658209e194b6755224e3dc3542eb5a7bb126127bf746d8b4a05dc485f99d6a94614f4c25ea3248c7734148b7ead3f4a57b9c19def6127c9a6114ba72e937fa84546ee9a82d72899632d193eed106c0a0d256340fa0062896d81ed946e1263c5ab573c284170eefbc090331f61dbd061c139ffbf3db7c39f90250c85ced0238d3d90e55982806bc97dca860cbb2545be6fd747346a71c8f1763f630d610ec616139dcc40030ad07c70b1b682809670b22f49fb6d8ce0", 0xdd}], 0x3, &(0x7f0000001f80)=[@op={0x18}, @iv={0x50, 0x117, 0x2, 0x39, "bcbee4fd3f01425bb6357aeabf0637dfa65b7cc1cbfa1a4c00564f75ca7fd2cebaa42ca1abf9e5dd890beea5c33975fbae59e1ef28da47b542"}, @assoc={0x18, 0x117, 0x4, 0xd1a1}, @iv={0x110, 0x117, 0x2, 0xf7, "115b7c13925734433f610ffeec5e83243c487d593da9f485f744134f515ccf4813d9aaa5db33ed53e094c82ccefd203bbba32daef5cbb2316599f06f2b39cd2eb26d92311dbbde689f6a9d93f6dd657059d3dfd7de07fcf330305038ecf2da0a5e0a14a142095ae11d291a2de05f1a093653e3a8bb1fa4b60560a7f325e3804fa36579e59d611099b11019c88156437c9f230809d97b0fafa1f988f868d0528b76b9f9638a4bd83799878b9fbdd10b7a5fd6f23e2c37f9302eacda32c3346087ec964734e118efaa8c8ea414dd845a5c5c916bff1cf5448d8f926e5e5e3ad741b46f523979d70796860c5ab84e373f9d24bd8f9251155e"}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x7c17}], 0x1d8, 0x90}, {0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000002180)="2a962b6ca72233ba707fe36a08", 0xd}, {&(0x7f00000021c0)="d993d4ee3794d41938f0cc3d65f2e1a5fffdb2017f2fa766e039c4ad988ee82c0b406b40fb333fed96e4ff1401b7b5723e46c2be311028cdc67c221d9b3235b29bec43b25fac664896a80ff0e9a1a3308b643d0eef3f033e96ad88f83339cce4015c1a69911544a7194a77c58cccf48f42f7560762042d6b1503502147c78c7bbaae1fec3963d0b414e33be7f8f95e3cfc44dec7c7fe42fa751f67265e8e13c991f0e5daf100eb23277dbb54bab0e91337ca1f896d5f05c526d95cf10b", 0xbd}], 0x2, &(0x7f00000022c0)=[@assoc={0x18, 0x117, 0x4, 0x3}, @iv={0x40, 0x117, 0x2, 0x2a, "afb647dbe5cdad99aa27f851420f1a946f4514d1accfaa9f08a3582b8a7afb02c353cb44e098023a72a4"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x10000}], 0x88, 0x20040000}, {0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002380)="1bd83fcdff157ad82c0bb61a1afaab0ce36f5782ae957baae56618fedf283b04e2352b504813f7916c35faf5d34e44af1cb434651543d55fc68fb82cf7ae3b940f2ef47921414eeb23d7f583c553910c0b0f7abfe2c45c7ec3e56b327ef1cc45a25e43f615ab7b94806b3493fadf8a4ce5c875873ef5db2e28", 0x79}, {&(0x7f0000002400)="ac0ae60cde136e2ebe28857df152da7b651672bf27e208784d59c822450344192a39e30bbd72508f89a16359b5cb499a235192a1e0b0dba4e92ee3366d1b86bc84d4f7d286e55321592c8e39011f127e55383967f803cca2e60cd39b7d0e02db7b85d1cbd8b8b376114337a46bbbef6d27a64e4f2966a1a1813b811a3588ba9733b3689ac1c0aaa29d28f6f911c115ae70ea619cb15a76638b8ea8cbee8a0325d9c2e54ab6abbf1be8e1b0b0de7adf19b4c54f8309d0c3509851dd3a", 0xbc}, {&(0x7f00000024c0)="248bfebbebd24f6ea5e4f9addebdaa4c92bfcb9d7328e3482c6aed7fb3dd047cf4817854103bb3765bf8a671f50cac117673e932c879e14bdada14c07d4b36dd73d9bd", 0x43}, {&(0x7f0000002540)="0e953b03601276615ef756a9efbc46b8445b04d6cd186f1f958366e0a22561fe2b219e26d651fb5c12e7457544a27420021a6ad90066ef25aa5b8b927959f5a50e1bf1a739502bfdf996406aa3c0303556996805941486325f5b0ec333", 0x5d}, {&(0x7f00000025c0)="3afd42c14d33312990d793cc615fc3ccc3dcdaf3cd98f15455ce26374630bbaf2e2cc77ade2d8cf14f1207969c69fb636c60ddcd4cde3ed4f68fc2481a1259eef36a90f8fad3bc9d9a59aec4e1663e764026ba1dab347cf4be12e153266a5bc74ec094d29691", 0x66}, {&(0x7f0000002640)="a7882fc785a454c07d43616433685ce50ddc3a0d44b94c67b04742e5c6abbf931f97ef2c843780923525f17351575c24aaf19fafee14fda43294eed2a62db3462bb1c11e6cb9709274aa7ed9c0d906198aee04e583cc75adbe7d4625b83c46141849b971af307179ea0363835415e1c7456536428944d364f92f165595e75b593e556a1cc63ebd1a965ae78368796fb8b5424b51b09e44a38557908b1205d90ddbc02535f328e36eb34b9b897079346da902ccaf6c1d351d52657c57264dbc9eeff277cae7116c8bd315f65d149aa8780c97db8e6fefe0b78eb9095b85df5de675e5fa", 0xe3}, {&(0x7f0000002740)="5cbb95509dcb9650cb9f76", 0xb}], 0x7, &(0x7f0000002800)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x30, 0x4001}], 0x6, 0x2000c040) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x24}}, 0x0) 1.109651627s ago: executing program 2 (id=2355): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000200000000000000000000008500000087000000850000000500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="5767c331e895cd135c5b7feeffd9", 0x0, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x4000, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000002f00090027bd7000000000000400000004000d"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 873.998752ms ago: executing program 3 (id=2356): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xa850, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x15, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x1, 0x9, 0x3, 0x6, 0x0, 0x10}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x48, '\x00', r6, 0x0, r5, 0x8, &(0x7f0000000400)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x7, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000580)=[r3, r0, r0, r0, r0, 0x1, r7, r1], &(0x7f00000005c0)=[{0x5, 0x5, 0xa, 0x6}, {0x0, 0x5, 0xd, 0x1}, {0x3, 0x4, 0x5, 0x5}, {0x5, 0x4, 0xf, 0x9}, {0x0, 0x1, 0xb, 0x3}, {0x0, 0x4, 0xc, 0x9}, {0x4, 0x4, 0x5, 0xc}]}, 0x94) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r5, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r9, 0x2, {0x1, 0xf0, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x300, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xb, 0xfff2}, {0xffef, 0xf}, {0x2, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 611.804916ms ago: executing program 1 (id=2357): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8001}]}, @dstopts={0x62}], @echo_reply}}}}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000015c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 567.61886ms ago: executing program 0 (id=2358): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) 522.540104ms ago: executing program 1 (id=2359): socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000540), &(0x7f0000000740)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xfccf4adb913cf4b9}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x5}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) 344.397368ms ago: executing program 2 (id=2360): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FRA_DST={0x14, 0x1, @private2}]}, 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x21}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FRA_DST={0x14, 0x1, @private2}]}, 0x30}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x21}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async) 343.959814ms ago: executing program 1 (id=2361): r0 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x80c0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001900010000000000000000001d0109002900838025b57efaa223b473fe7783bc4a506cf756740574b89d316af9b5963870ef3391f3ac176f880000004d000f"], 0x90}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000300a5eb1e25"], 0x94}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x1100, 0x18c, 0x203, 0x0, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x75}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x41, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x8d, 0x74d}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180100002028782500000000002020207b1bf0ff00000000bfa10000000000000701000000feffffb702000008000000b50afbff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0xc}, 0x94) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000040), 0x4) 342.798713ms ago: executing program 0 (id=2362): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000040)={0x23, 0x14}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bind$phonet(r2, &(0x7f0000000000)={0x23, 0x4}, 0x10) close(0x3) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) 202.393558ms ago: executing program 2 (id=2363): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x2000800) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x2401c800}, 0x20000015) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r5) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r6, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000841}, 0x2000040) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000140012800900010076630900000000000400028008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x880) 178.957664ms ago: executing program 1 (id=2364): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x5c83}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x48010) 120.256749ms ago: executing program 0 (id=2365): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r3, 0x89e1, &(0x7f00000001c0)={@empty, @private1={0xfc, 0x1, '\x00', 0x1}}) (async) syz_emit_ethernet(0x3a, &(0x7f0000000340)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x7}}}}}}, 0x0) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, r4, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xdd1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x583a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd52}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xedf}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010128bd7000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000500340000000000080026006c09000024205180200000"], 0x54}, 0x1, 0x0, 0x0, 0xf040}, 0x20004800) (async, rerun: 32) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbab091435470000300000000000069078ac1414baac1414aa0703e0070200000000000000f03c4e2be1c72d366c3aec374e1ace3140fdf73eff9143ba27e6824c0553", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) 0s ago: executing program 3 (id=2366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900a60d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x2}}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0xd0, 0x0, 0x10, 0x7c6, 0xfdb1, 0x5, 0xc16d, 0x7}, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0xf05a}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r4, 0x3}, &(0x7f00000001c0)=0x8) pipe(&(0x7f0000000040)) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xbe3) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) kernel console output (not intermixed with test programs): 38][ T6575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.679806][ T6576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.704334][ T6562] netlink: 40 bytes leftover after parsing attributes in process `syz.2.211'. [ 103.846165][ T6578] netlink: 32 bytes leftover after parsing attributes in process `syz.1.215'. [ 103.984246][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.991028][ T6596] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.220'. [ 104.013905][ T6578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.075117][ T6587] erspan0: entered promiscuous mode [ 104.120657][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 104.134809][ T6596] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 104.148771][ T6596] 0ªX¹¦Dö»: entered allmulticast mode [ 104.165694][ T6594] syzkaller0: entered promiscuous mode [ 104.181902][ T6594] syzkaller0: entered allmulticast mode [ 104.414957][ T6615] netlink: 'syz.0.225': attribute type 64 has an invalid length. [ 104.463768][ T6615] netlink: 'syz.0.225': attribute type 64 has an invalid length. [ 104.532390][ T6621] xt_hashlimit: size too large, truncated to 1048576 [ 104.798377][ T6634] Cannot find del_set index 0 as target [ 105.600953][ T6675] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 106.426127][ T6729] sctp: [Deprecated]: syz.4.260 (pid 6729) Use of int in maxseg socket option. [ 106.426127][ T6729] Use struct sctp_assoc_value instead [ 106.594269][ T6738] netlink: 'syz.4.263': attribute type 2 has an invalid length. [ 106.665038][ T6740] warning: `syz.3.264' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.682574][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.708404][ T6743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.710589][ T6744] __nla_validate_parse: 7 callbacks suppressed [ 106.710605][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.265'. [ 106.844738][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.153968][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.359504][ T6775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.274'. [ 107.487095][ T6779] netlink: 'syz.3.276': attribute type 21 has an invalid length. [ 107.618486][ T6784] block nbd1: not configured, cannot reconfigure [ 107.794297][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.803289][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.823321][ T6784] netlink: 1 bytes leftover after parsing attributes in process `syz.1.278'. [ 107.885562][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.982590][ T6794] netlink: 28 bytes leftover after parsing attributes in process `syz.4.281'. [ 108.035615][ T6794] netlink: 28 bytes leftover after parsing attributes in process `syz.4.281'. [ 108.075350][ T6803] netlink: 84 bytes leftover after parsing attributes in process `syz.1.284'. [ 108.384229][ T6811] syzkaller0: entered promiscuous mode [ 108.400486][ T6811] syzkaller0: entered allmulticast mode [ 108.784297][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'. [ 108.808699][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'. [ 108.911550][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.965927][ T6834] netlink: 'syz.4.295': attribute type 11 has an invalid length. [ 109.085735][ T6834] xt_hl: Unknown Hop Limit match mode: 206 [ 109.129587][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'. [ 109.215102][ T6849] netlink: zone id is out of range [ 109.246784][ T6849] netlink: zone id is out of range [ 109.252250][ T6849] netlink: get zone limit has 4 unknown bytes [ 109.825197][ T6879] netlink: 'syz.0.311': attribute type 5 has an invalid length. [ 109.876576][ T6882] netlink: 'syz.4.310': attribute type 1 has an invalid length. [ 109.960327][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.078572][ T6882] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.194182][ T6887] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 110.458884][ T6914] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 110.581858][ T6909] bond3: option lp_interval: invalid value (0) [ 110.589570][ T6909] bond3: option lp_interval: allowed values 1 - 2147483647 [ 110.610764][ T6909] bond3 (unregistering): Released all slaves [ 110.826866][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.865313][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 111.006411][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.327532][ T6962] netlink: 'syz.2.337': attribute type 4 has an invalid length. [ 111.479295][ T6969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.521356][ T6969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.577450][ T6976] erspan0: entered promiscuous mode [ 111.630769][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.785879][ T6986] __nla_validate_parse: 4 callbacks suppressed [ 111.785896][ T6986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.344'. [ 111.840144][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 111.911729][ T6990] team0: entered promiscuous mode [ 111.921111][ T6990] team_slave_0: entered promiscuous mode [ 111.933770][ T6990] team_slave_1: entered promiscuous mode [ 111.941317][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'. [ 111.948399][ T6990] erspan0: entered promiscuous mode [ 111.963401][ T6986] bond0: entered promiscuous mode [ 111.975541][ T6986] bond0: entered allmulticast mode [ 112.012591][ T147] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 112.030584][ T7000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.347'. [ 112.033056][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.137327][ T7000] netlink: 'syz.4.347': attribute type 2 has an invalid length. [ 112.470685][ T7026] syzkaller0: entered promiscuous mode [ 112.481143][ T7026] syzkaller0: entered allmulticast mode [ 112.540966][ T7031] netlink: 36 bytes leftover after parsing attributes in process `syz.1.357'. [ 112.604291][ T7032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.357'. [ 112.724196][ T6993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.973529][ T7044] netlink: 44 bytes leftover after parsing attributes in process `syz.0.359'. [ 112.995745][ T7038] can: request_module (can-proto-3) failed. [ 113.139755][ T7044] netlink: 'syz.0.359': attribute type 4 has an invalid length. [ 113.167984][ T7051] netlink: 'syz.1.362': attribute type 58 has an invalid length. [ 113.192241][ T7044] netlink: 'syz.0.359': attribute type 4 has an invalid length. [ 113.193356][ T7051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.362'. [ 113.433028][ T7061] vcan1: entered promiscuous mode [ 113.456618][ T7061] vcan1: entered allmulticast mode [ 113.617849][ T7073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.370'. [ 113.641223][ T7073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.370'. [ 113.885213][ T7091] syzkaller0: entered promiscuous mode [ 113.895010][ T7091] syzkaller0: entered allmulticast mode [ 114.124601][ T24] net_ratelimit: 4 callbacks suppressed [ 114.124617][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.586113][ T7117] netlink: 'syz.2.385': attribute type 83 has an invalid length. [ 114.680331][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.210092][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.270425][ T7151] ieee802154 phy0 wpan0: encryption failed: -22 [ 115.612950][ T7169] lo speed is unknown, defaulting to 1000 [ 115.630824][ T7169] lo speed is unknown, defaulting to 1000 [ 115.699998][ T7169] lo speed is unknown, defaulting to 1000 [ 115.711603][ T7172] ±ÿª¨úrBº“: renamed from lo (while UP) [ 115.742322][ T7169] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 115.748668][ T7175] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.764329][ T7175] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.782780][ T7169] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 115.808064][ T7169] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 115.824010][ T7169] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 115.851756][ T7169] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 115.971228][ T7169] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 115.996061][ T7169] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 116.014734][ T7186] bridge_slave_1: left allmulticast mode [ 116.025484][ T7186] bridge_slave_1: left promiscuous mode [ 116.032055][ T7186] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.042122][ T7186] bridge_slave_0: left allmulticast mode [ 116.050704][ T7186] bridge_slave_0: left promiscuous mode [ 116.057362][ T7186] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.084436][ T7169] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 116.105943][ T7169] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 116.119652][ T7169] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 116.267052][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.434879][ T7202] netlink: 'syz.3.410': attribute type 2 has an invalid length. [ 116.797662][ T7221] netlink: 'syz.4.417': attribute type 1 has an invalid length. [ 116.966108][ T7221] bond3: entered promiscuous mode [ 116.984531][ T7221] 8021q: adding VLAN 0 to HW filter on device bond3 [ 117.028456][ T7223] bond3: (slave bridge1): making interface the new active one [ 117.036969][ T7223] bridge1: entered promiscuous mode [ 117.053098][ T7223] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 117.272599][ T7232] bond1: entered allmulticast mode [ 117.307180][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.328390][ T7246] __nla_validate_parse: 10 callbacks suppressed [ 117.328407][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 117.718393][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.769020][ T7265] netlink: 112 bytes leftover after parsing attributes in process `syz.0.430'. [ 117.772203][ T7267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.432'. [ 117.850440][ T7273] netlink: 'syz.4.434': attribute type 4 has an invalid length. [ 117.985484][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.435'. [ 117.996757][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.435'. [ 118.064164][ T7287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'. [ 118.119338][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.149368][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.171794][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.211574][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.349492][ T2173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.678532][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.387832][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.086048][ T7330] netlink: 'syz.1.448': attribute type 2 has an invalid length. [ 120.140433][ T7307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.294577][ T24] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 120.303827][ T24] syú2: Port: 1 Link DOWN [ 120.340614][ T7330] : entered promiscuous mode [ 120.376448][ T156] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.426987][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.456325][ T7333] netlink: 'syz.2.449': attribute type 12 has an invalid length. [ 120.466698][ T7333] netlink: 'syz.2.449': attribute type 29 has an invalid length. [ 120.486657][ T7333] netlink: 148 bytes leftover after parsing attributes in process `syz.2.449'. [ 120.528451][ T7333] netlink: 51 bytes leftover after parsing attributes in process `syz.2.449'. [ 120.553002][ T156] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.601043][ T156] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.605630][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'. [ 120.635615][ T156] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.748851][ T5728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.791996][ T7355] netlink: 'syz.2.455': attribute type 1 has an invalid length. [ 120.812782][ T30] audit: type=1804 audit(1783070147.103:2): pid=7354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.454" name="/newroot/89/cgroup.controllers" dev="tmpfs" ino=468 res=1 errno=0 [ 120.875894][ T7355] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.884581][ T30] audit: type=1800 audit(1783070147.113:3): pid=7354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.454" name="cgroup.controllers" dev="tmpfs" ino=468 res=0 errno=0 [ 120.950294][ T7355] vlan2: entered allmulticast mode [ 120.955490][ T7355] bond2: entered allmulticast mode [ 120.963267][ T7367] netlink: 20 bytes leftover after parsing attributes in process `syz.0.459'. [ 120.985414][ T7355] bond2: (slave geneve2): making interface the new active one [ 120.993177][ T7355] geneve2: entered allmulticast mode [ 121.002756][ T7355] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 121.285629][ T7376] gretap0: entered promiscuous mode [ 121.317081][ T7376] gretap0: entered allmulticast mode [ 121.352409][ T7391] netlink: 'syz.2.462': attribute type 1 has an invalid length. [ 121.432497][ T7391] bond3: entered promiscuous mode [ 121.438615][ T7391] 8021q: adding VLAN 0 to HW filter on device bond3 [ 121.458830][ T7396] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 121.468931][ T2173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.489374][ T7394] syzkaller0: entered promiscuous mode [ 121.509413][ T7394] syzkaller0: entered allmulticast mode [ 121.560378][ T7394] netlink: 'syz.4.468': attribute type 15 has an invalid length. [ 121.825510][ T7412] netlink: 'syz.1.473': attribute type 11 has an invalid length. [ 121.868598][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.989767][ T7418] vlan3: entered promiscuous mode [ 122.007249][ T7418] bridge0: entered promiscuous mode [ 122.263389][ T7437] gtp0: entered promiscuous mode [ 122.277144][ T7437] gtp0: entered allmulticast mode [ 122.302936][ T7438] Bluetooth: MGMT ver 1.23 [ 122.351303][ T7441] veth3: entered allmulticast mode [ 122.474817][ T7446] netlink: 'syz.0.482': attribute type 1 has an invalid length. [ 122.507708][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.645835][ T7448] tipc: Enabling of bearer rejected, media not registered [ 122.815311][ T7462] __nla_validate_parse: 5 callbacks suppressed [ 122.815329][ T7462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.486'. [ 122.909100][ T7468] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 122.959475][ T7471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.147857][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.434133][ T7495] netlink: 36 bytes leftover after parsing attributes in process `syz.1.495'. [ 123.550074][ T2173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.571204][ T7504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.498'. [ 123.852520][ T7521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.501'. [ 123.888870][ T7521] block nbd0: Unsupported socket: should be TCP or UNIX. [ 124.333170][ T7550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.509'. [ 124.360650][ T7550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.509'. [ 124.588050][ T2173] net_ratelimit: 2 callbacks suppressed [ 124.588066][ T2173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.727016][ T7557] syzkaller0: entered promiscuous mode [ 124.732833][ T7557] syzkaller0: entered allmulticast mode [ 124.907229][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.553237][ T30] audit: type=1804 audit(1783070151.843:4): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.518" name="/newroot/105/cgroup.controllers" dev="tmpfs" ino=554 res=1 errno=0 [ 125.592567][ T30] audit: type=1800 audit(1783070151.853:5): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.518" name="cgroup.controllers" dev="tmpfs" ino=554 res=0 errno=0 [ 125.631294][ T2173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.687059][ T2173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.915391][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 126.945088][ T7622] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 126.968937][ T7622] bond2 (unregistering): Released all slaves [ 127.239047][ T7622] netlink: 24 bytes leftover after parsing attributes in process `syz.0.527'. [ 127.580689][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'. [ 127.746937][ T2173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.768164][ T7677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.539'. [ 127.779340][ T7677] openvswitch: netlink: EtherType 0 is less than min 600 [ 127.836085][ T7675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.953052][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.344062][ T7703] netlink: 'syz.0.549': attribute type 21 has an invalid length. [ 128.373170][ T7705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.547'. [ 128.401589][ T7703] netlink: 128 bytes leftover after parsing attributes in process `syz.0.549'. [ 128.435450][ T7703] netlink: 'syz.0.549': attribute type 5 has an invalid length. [ 128.447521][ T7703] netlink: 'syz.0.549': attribute type 6 has an invalid length. [ 128.455306][ T7703] netlink: 3 bytes leftover after parsing attributes in process `syz.0.549'. [ 128.548533][ T7715] netlink: 84 bytes leftover after parsing attributes in process `syz.2.551'. [ 128.702940][ T7719] netlink: 36 bytes leftover after parsing attributes in process `syz.4.553'. [ 128.756555][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.553'. [ 128.826787][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.869039][ T7731] netlink: 220 bytes leftover after parsing attributes in process `syz.0.556'. [ 128.923533][ T7733] netlink: 168 bytes leftover after parsing attributes in process `syz.3.557'. [ 128.983235][ T7740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.124151][ T7744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'. [ 129.199169][ T7738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.399378][ T7763] netlink: 576 bytes leftover after parsing attributes in process `syz.1.566'. [ 129.797914][ T7780] syz_tun: entered allmulticast mode [ 129.813918][ T7779] syz_tun: left allmulticast mode [ 129.840513][ T7778] netlink: 'syz.1.572': attribute type 30 has an invalid length. [ 129.873542][ T5784] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.929541][ T7790] ipt_rpfilter: unknown options [ 129.937899][ T7791] ipt_rpfilter: unknown options [ 130.025399][ T7794] netlink: 'syz.0.577': attribute type 10 has an invalid length. [ 130.040650][ T7794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.060407][ T7794] : (slave batadv0): Enslaving as an active interface with an up link [ 130.111393][ T7796] bond0 (unregistering): Released all slaves [ 130.230442][ T7802] netlink: 'syz.3.579': attribute type 1 has an invalid length. [ 130.394097][ T7802] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.406877][ T7818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.475474][ T7816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.907618][ T2173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.948908][ T7843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.987077][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.093514][ T7843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.209863][ T7843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.275179][ T7843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.291577][ T7843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.301140][ T7843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.346476][ T7841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.750278][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.757022][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.991021][ T7887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.024767][ T7884] bond4: (slave ip6gretap1): making interface the new active one [ 133.043929][ T7884] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 133.191871][ T7885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.365526][ T7916] veth0: entered promiscuous mode [ 133.375437][ T7916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.384054][ T7916] IPv6: NLM_F_CREATE should be set when creating new route [ 133.450515][ T7915] veth0: left promiscuous mode [ 133.718239][ T7932] __nla_validate_parse: 6 callbacks suppressed [ 133.718254][ T7932] netlink: 165 bytes leftover after parsing attributes in process `syz.4.616'. [ 133.767588][ T7929] netlink: 220 bytes leftover after parsing attributes in process `syz.1.615'. [ 134.124230][ T5784] IPVS: starting estimator thread 0... [ 134.227857][ T7959] IPVS: using max 28 ests per chain, 67200 per kthread [ 134.630958][ T7983] netlink: 'syz.3.630': attribute type 4 has an invalid length. [ 135.085956][ T8001] net_ratelimit: 342 callbacks suppressed [ 135.085975][ T8001] netlink: ct family unspecified [ 135.114701][ T8001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.203888][ T8018] netlink: 28 bytes leftover after parsing attributes in process `syz.3.638'. [ 136.048165][ T8067] netlink: 'syz.0.650': attribute type 4 has an invalid length. [ 136.639616][ T8054] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.664812][ T8080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.798705][ T8108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.943614][ T8113] geneve2: entered promiscuous mode [ 136.959380][ T8113] geneve2: entered allmulticast mode [ 137.013327][ T8120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.660'. [ 137.152088][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.663'. [ 137.163287][ T8124] netlink: 'syz.3.662': attribute type 1 has an invalid length. [ 137.273549][ T8124] 8021q: adding VLAN 0 to HW filter on device bond4 [ 137.358161][ T8140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.666'. [ 137.470923][ T8149] netlink: 'syz.2.668': attribute type 1 has an invalid length. [ 137.479701][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 137.505879][ T8146] bond5: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 137.518712][ T8146] bond5 (unregistering): Released all slaves [ 137.599416][ T8155] netlink: 'syz.1.670': attribute type 21 has an invalid length. [ 137.612972][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'. [ 137.653963][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.675971][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.693733][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.705137][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.137680][ T8178] netlink: 20 bytes leftover after parsing attributes in process `syz.2.676'. [ 138.281092][ T8189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.679'. [ 138.397604][ T8189] netlink: 'syz.3.679': attribute type 11 has an invalid length. [ 138.434056][ T8198] Driver unsupported XDP return value 0 on prog (id 120) dev N/A, expect packet loss! [ 139.149378][ T8241] netlink: 'syz.1.684': attribute type 4 has an invalid length. [ 139.376119][ T8240] bond5: option fail_over_mac: invalid value (16) [ 139.430509][ T8240] bond5 (unregistering): Released all slaves [ 139.705355][ T8266] netlink: 16 bytes leftover after parsing attributes in process `syz.2.691'. [ 140.217879][ T30] audit: type=1107 audit(1783070166.513:6): pid=8293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='–r¶²_êÐ*8´Ø›óBºçøÒŽLA£ÎÔ®¢]”èz?“ì£=‰ û@Î0¸6*KeùÞÈÁ¨­òòWøq›\”‰I€Òô GÚÐ{Xëñ-DlË=amæX´ž'Õã듊(¿êé¤fó?KE' [ 140.332096][ T8305] netlink: 112 bytes leftover after parsing attributes in process `syz.2.699'. [ 140.500267][ T8301] 8021q: adding VLAN 0 to HW filter on device bond4 [ 140.523687][ T8226] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.530939][ T8226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.739945][ T8322] netlink: 'syz.0.704': attribute type 11 has an invalid length. [ 140.906938][ T8334] netlink: 'syz.0.708': attribute type 11 has an invalid length. [ 140.921101][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.709'. [ 140.931828][ T8333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.709'. [ 141.215360][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.714'. [ 141.570515][ T30] audit: type=1804 audit(1783070167.873:7): pid=8371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.719" name="/newroot/148/cgroup.controllers" dev="tmpfs" ino=774 res=1 errno=0 [ 141.593471][ T30] audit: type=1800 audit(1783070167.873:8): pid=8371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.719" name="cgroup.controllers" dev="tmpfs" ino=774 res=0 errno=0 [ 141.841906][ T8383] netlink: 'syz.1.723': attribute type 1 has an invalid length. [ 141.969678][ T8383] 8021q: adding VLAN 0 to HW filter on device bond6 [ 141.984771][ T8392] netlink: 16 bytes leftover after parsing attributes in process `syz.4.724'. [ 142.130194][ T8387] bond6: (slave veth3): Enslaving as an active interface with a down link [ 142.219869][ T8401] netlink: 'syz.4.727': attribute type 21 has an invalid length. [ 142.248477][ T8401] netlink: 128 bytes leftover after parsing attributes in process `syz.4.727'. [ 142.308789][ T8401] netlink: 3 bytes leftover after parsing attributes in process `syz.4.727'. [ 142.404085][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.730'. [ 142.474936][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.731'. [ 142.924890][ T8434] team0: Port device syz_tun added [ 143.415937][ T8478] netlink: 'syz.1.751': attribute type 1 has an invalid length. [ 143.552401][ T8478] bond7: entered promiscuous mode [ 143.559792][ T8478] 8021q: adding VLAN 0 to HW filter on device bond7 [ 143.754773][ T8499] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 143.980312][ T8514] syzkaller1: entered promiscuous mode [ 143.986211][ T8514] syzkaller1: entered allmulticast mode [ 144.073201][ T8519] openvswitch: netlink: Missing key (keys=40, expected=80) [ 144.313807][ T8529] unsupported nla_type 7424 [ 144.401691][ T8540] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 144.731548][ T8549] __nla_validate_parse: 11 callbacks suppressed [ 144.731564][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.772'. [ 144.973507][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.776'. [ 145.151975][ T8577] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 145.185336][ T8577] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 145.541774][ T8600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.785'. [ 145.606892][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.785'. [ 145.795844][ T8618] netlink: 72 bytes leftover after parsing attributes in process `syz.0.790'. [ 146.160021][ T8633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.795'. [ 146.184358][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.795'. [ 146.212727][ T8633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'. [ 146.258953][ T8638] netlink: 'syz.2.797': attribute type 1 has an invalid length. [ 146.499715][ T8638] bond4: entered promiscuous mode [ 146.515350][ T8638] 8021q: adding VLAN 0 to HW filter on device bond4 [ 146.577288][ T8648] ipvlan1: entered allmulticast mode [ 146.582916][ T8648] bond4: entered allmulticast mode [ 146.628821][ T8666] netlink: 'syz.4.803': attribute type 1 has an invalid length. [ 146.640278][ T8665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.804'. [ 146.649669][ T8665] netlink: 16 bytes leftover after parsing attributes in process `syz.1.804'. [ 146.693572][ T8666] bond5: option mode: invalid value (7) [ 146.700925][ T8666] bond5 (unregistering): Released all slaves [ 146.966088][ T8680] sctp: [Deprecated]: syz.3.808 (pid 8680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 146.966088][ T8680] Use struct sctp_sack_info instead [ 147.011276][ T8687] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 147.137084][ T8688] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 147.222281][ T8695] bond5: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 147.242832][ T8695] bond5 (unregistering): Released all slaves [ 147.556345][ T5750] IPVS: starting estimator thread 0... [ 147.602704][ T8725] netlink: 'syz.4.821': attribute type 1 has an invalid length. [ 147.668993][ T8723] IPVS: using max 30 ests per chain, 72000 per kthread [ 147.708832][ T8731] netlink: 'syz.4.821': attribute type 2 has an invalid length. [ 147.735977][ T8733] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20004 [ 147.833393][ T8725] 8021q: adding VLAN 0 to HW filter on device bond5 [ 147.854463][ T8740] tipc: Enabling of bearer rejected, failed to enable media [ 147.929337][ T8725] bond5: (slave gretap2): making interface the new active one [ 147.939209][ T8725] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 148.182740][ T12] tipc: Subscription rejected, illegal request [ 148.688814][ T8777] netlink: 'syz.4.837': attribute type 6 has an invalid length. [ 148.824034][ T8786] netlink: 'syz.1.839': attribute type 11 has an invalid length. [ 148.833419][ T8786] netlink: 'syz.1.839': attribute type 1 has an invalid length. [ 149.076080][ T8801] netlink: 'syz.1.845': attribute type 83 has an invalid length. [ 149.188199][ T8804] syzkaller1: entered promiscuous mode [ 149.194453][ T8804] syzkaller1: entered allmulticast mode [ 150.030746][ T8855] netlink: zone id is out of range [ 150.078394][ T8855] netlink: zone id is out of range [ 150.105789][ T8855] netlink: zone id is out of range [ 150.125067][ T8855] netlink: zone id is out of range [ 150.136603][ T8855] netlink: zone id is out of range [ 150.141919][ T8855] netlink: zone id is out of range [ 150.148225][ T8855] netlink: zone id is out of range [ 150.257497][ T8873] netlink: 'syz.3.867': attribute type 10 has an invalid length. [ 150.273968][ T8873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.285431][ T8873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.297033][ T8873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.304475][ T8873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.365483][ T8876] syzkaller1: entered promiscuous mode [ 150.371124][ T8876] syzkaller1: entered allmulticast mode [ 152.821598][ T8847] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.139451][ T8922] __nla_validate_parse: 11 callbacks suppressed [ 153.139469][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 153.314389][ T8903] syzkaller0: entered promiscuous mode [ 153.355691][ T8903] syzkaller0: entered allmulticast mode [ 153.377995][ T8921] netlink: 844 bytes leftover after parsing attributes in process `syz.3.875'. [ 153.718190][ T8953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.890'. [ 153.723998][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 153.820358][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.892'. [ 153.829564][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.892'. [ 155.216901][ T8939] netlink: 'syz.0.887': attribute type 12 has an invalid length. [ 155.412450][ T8977] IPVS: ip_vs_add_dest(): server weight less than zero [ 155.420497][ T9] IPVS: starting estimator thread 0... [ 155.484231][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.899'. [ 155.511892][ T8985] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.900'. [ 155.529648][ T8981] IPVS: using max 32 ests per chain, 76800 per kthread [ 155.851926][ T9013] xt_cgroup: path and classid specified [ 156.060197][ T9026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.082429][ T9026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.134980][ T9031] netlink: 84 bytes leftover after parsing attributes in process `syz.0.914'. [ 156.344292][ T9044] netlink: 436 bytes leftover after parsing attributes in process `syz.2.917'. [ 156.381011][ T9044] nbd: must specify a device to reconfigure [ 156.570043][ T9057] bond5: Removing last ns target with arp_interval on [ 156.679024][ T9072] Unsupported ieee802154 address type: 0 [ 156.737809][ T9070] gretap0: entered promiscuous mode [ 156.841466][ T9070] gretap0: left promiscuous mode [ 157.588427][ T9139] netlink: 'syz.3.937': attribute type 4 has an invalid length. [ 157.604830][ T9139] netlink: 'syz.3.937': attribute type 4 has an invalid length. [ 157.617835][ T9139] netlink: 'syz.3.937': attribute type 10 has an invalid length. [ 157.638610][ T9139] geneve1: entered promiscuous mode [ 157.652332][ T9139] team0: Port device geneve1 added [ 157.720546][ T9143] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.345193][ T9191] netlink: 'syz.3.952': attribute type 1 has an invalid length. [ 158.459785][ T9194] veth1_to_bond: entered allmulticast mode [ 158.478530][ T9194] veth1_to_bond: entered promiscuous mode [ 158.583125][ T9193] veth1_to_bond: left promiscuous mode [ 158.594654][ T9193] veth1_to_bond: left allmulticast mode [ 158.611468][ T9196] __nla_validate_parse: 8 callbacks suppressed [ 158.611484][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.954'. [ 158.757543][ T9203] netlink: 72 bytes leftover after parsing attributes in process `syz.4.957'. [ 158.976275][ T9211] geneve2: entered promiscuous mode [ 159.024146][ T9211] geneve2: entered allmulticast mode [ 159.069896][ T9099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 159.099169][ T9099] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 159.125689][ T9099] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 159.147258][ T9099] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 159.185444][ T9222] netlink: 14 bytes leftover after parsing attributes in process `syz.2.962'. [ 159.275740][ T9228] netlink: 28 bytes leftover after parsing attributes in process `syz.4.963'. [ 159.311916][ T9228] netlink: 28 bytes leftover after parsing attributes in process `syz.4.963'. [ 159.452381][ T9238] netlink: 48 bytes leftover after parsing attributes in process `syz.2.968'. [ 159.496928][ T9239] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 159.534892][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 159.545599][ T9240] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 159.657664][ T9248] netlink: 'syz.2.971': attribute type 83 has an invalid length. [ 159.822091][ T9248] bond6: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 159.889635][ T9248] bond6 (unregistering): Released all slaves [ 160.063116][ T9256] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 160.325668][ T9255] netlink: 'syz.0.972': attribute type 10 has an invalid length. [ 160.356247][ T9255] : (slave macsec0): Error -34 calling dev_set_mtu [ 160.539919][ T9287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.984'. [ 160.567776][ T9287] TCP: TCP_TX_DELAY enabled [ 160.952673][ T9293] syzkaller0: entered promiscuous mode [ 160.963476][ T9293] syzkaller0: entered allmulticast mode [ 161.055190][ T9319] netlink: 20 bytes leftover after parsing attributes in process `syz.4.990'. [ 161.065613][ T9319] netlink: 20 bytes leftover after parsing attributes in process `syz.4.990'. [ 161.085045][ T9319] geneve2: entered promiscuous mode [ 161.264821][ T9331] netlink: 'syz.1.994': attribute type 10 has an invalid length. [ 163.204635][ T9373] netlink: 'syz.4.1005': attribute type 17 has an invalid length. [ 163.231024][ T9373] gretap0: entered promiscuous mode [ 163.238780][ T9373] gretap0: left promiscuous mode [ 163.489453][ T9384] block nbd0: NBD_DISCONNECT [ 163.500835][ T9388] netlink: 'syz.3.1011': attribute type 1 has an invalid length. [ 163.621128][ T9392] ip6gretap1: entered promiscuous mode [ 163.642921][ T9397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.644512][ T9392] ip6gretap1: entered allmulticast mode [ 163.680865][ T9392] bond5: (slave ip6gretap1): making interface the new active one [ 163.700102][ T9392] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 163.709962][ T9392] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 163.720873][ T9392] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 163.781818][ T9396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.847818][ T9405] __nla_validate_parse: 5 callbacks suppressed [ 163.847835][ T9405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1017'. [ 163.864078][ T9403] syzkaller1: entered promiscuous mode [ 163.881112][ T9403] syzkaller1: entered allmulticast mode [ 163.892411][ T9410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1018'. [ 164.120789][ T9422] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1023'. [ 164.240413][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1025'. [ 164.271994][ T9427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.309756][ T9427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.333467][ T9433] netlink: 420 bytes leftover after parsing attributes in process `syz.1.1027'. [ 164.343230][ T9427] ipt_rpfilter: unknown options [ 164.385418][ T9433] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1027'. [ 164.386940][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1026'. [ 164.416901][ T9434] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1027'. [ 164.765444][ T9454] syzkaller0: entered promiscuous mode [ 164.774290][ T9454] syzkaller0: entered allmulticast mode [ 165.039271][ T9471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.060918][ T9473] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1039'. [ 165.098511][ T9470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.463260][ T9493] tipc: Failed to remove unknown binding: 66,0,0/0:1064238727/1064238728 [ 165.474879][ T9493] tipc: Failed to remove unknown binding: 66,0,0/0:1064238727/1064238728 [ 165.725724][ T9502] netlink: 'syz.3.1047': attribute type 1 has an invalid length. [ 165.753035][ T9502] 8021q: adding VLAN 0 to HW filter on device bond7 [ 165.813550][ T9502] bond7: (slave geneve2): making interface the new active one [ 165.822155][ T9505] netlink: ct family unspecified [ 165.827578][ T9505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.840289][ T9502] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 165.858444][ T9502] syz.3.1047 (9502) used greatest stack depth: 19680 bytes left [ 166.093341][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1051'. [ 168.329367][ T9487] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 168.439096][ T9530] netlink: 'syz.2.1053': attribute type 49 has an invalid length. [ 168.575467][ T9535] x_tables: unsorted underflow at hook 1 [ 168.612348][ T9535] netlink: 'syz.0.1054': attribute type 1 has an invalid length. [ 168.964970][ T9565] __nla_validate_parse: 3 callbacks suppressed [ 168.964988][ T9565] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.1061'. [ 168.982701][ T9562] netlink: 'syz.3.1065': attribute type 1 has an invalid length. [ 169.104472][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1068'. [ 169.145766][ T9577] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 169.168098][ T9562] bond8: entered promiscuous mode [ 169.184341][ T9562] 8021q: adding VLAN 0 to HW filter on device bond8 [ 169.220567][ T9583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.278366][ T9564] 8021q: adding VLAN 0 to HW filter on device bond8 [ 169.298662][ T9564] bond8: (slave vti0): The slave device specified does not support setting the MAC address [ 169.316408][ T9564] bond8: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 169.318135][ T9582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.335126][ T9564] bond8: (slave vti0): making interface the new active one [ 169.344039][ T9564] vti0: entered promiscuous mode [ 169.357977][ T9564] bond8: (slave vti0): Enslaving as an active interface with an up link [ 169.409055][ T9573] bond8: option xmit_hash_policy: invalid value (64) [ 169.417236][ T9573] bond8 (unregistering): Released all slaves [ 169.445551][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1071'. [ 169.554800][ T9595] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1072'. [ 169.570128][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'. [ 169.586784][ T9595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1072'. [ 169.598252][ T9595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1072'. [ 169.608766][ T9593] netlink: 'syz.2.1073': attribute type 12 has an invalid length. [ 169.724216][ T9604] netlink: 'syz.1.1075': attribute type 39 has an invalid length. [ 169.818153][ T9604] hsr_slave_0: left promiscuous mode [ 169.838880][ T9604] hsr_slave_1: left promiscuous mode [ 170.133186][ T9625] netlink: 'syz.3.1083': attribute type 3 has an invalid length. [ 170.262282][ T9626] openvswitch: netlink: Message has 1 unknown bytes. [ 170.278713][ T9626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.471025][ T9641] xt_bpf: check failed: parse error [ 170.548312][ T9648] sock: sock_set_timeout: `syz.2.1089' (pid 9648) tries to set negative timeout [ 170.794693][ T9663] sctp: [Deprecated]: syz.0.1092 (pid 9663) Use of int in max_burst socket option. [ 170.794693][ T9663] Use struct sctp_assoc_value instead [ 170.907419][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1093'. [ 170.916717][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1093'. [ 170.979234][ T9672] sctp: [Deprecated]: syz.4.1095 (pid 9672) Use of struct sctp_assoc_value in delayed_ack socket option. [ 170.979234][ T9672] Use struct sctp_sack_info instead [ 171.151911][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1097'. [ 173.488308][ T9643] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.779412][ T9695] netlink: 'syz.3.1101': attribute type 2 has an invalid length. [ 173.838297][ T9689] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 174.009767][ T9698] bond3 (unregistering): Released all slaves [ 174.028137][ T9707] __nla_validate_parse: 3 callbacks suppressed [ 174.028157][ T9707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1105'. [ 174.114092][ T9703] 8021q: VLANs not supported on ip_vti0 [ 174.115205][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1105'. [ 174.208417][ T9710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1105'. [ 174.465958][ T9714] bond8: option fail_over_mac: invalid value (16) [ 174.482902][ T9714] bond8 (unregistering): Released all slaves [ 174.498349][ T9727] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1107'. [ 174.539413][ T9727] 8021q: VLANs not supported on sit0 [ 174.659677][ T9729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.743584][ T9728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.994174][ T9746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.012802][ T9746] sctp: [Deprecated]: syz.1.1117 (pid 9746) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.012802][ T9746] Use struct sctp_sack_info instead [ 175.044628][ T9744] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 175.063960][ T9744] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 175.435837][ T9760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1121'. [ 175.489030][ T9760] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 175.504670][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'. [ 175.504701][ T9763] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1122'. [ 175.527402][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1122'. [ 175.548905][ T9763] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1122'. [ 175.714839][ T9769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1125'. [ 175.793528][ T9769] bond8: entered promiscuous mode [ 175.800752][ T9769] 8021q: adding VLAN 0 to HW filter on device bond8 [ 175.876250][ T9769] lo: entered allmulticast mode [ 176.053547][ T9785] netlink: 'syz.4.1130': attribute type 39 has an invalid length. [ 176.133031][ T9788] veth0: entered promiscuous mode [ 176.155867][ T9788] veth0: left promiscuous mode [ 176.800768][ T9812] netlink: 'syz.0.1141': attribute type 24 has an invalid length. [ 177.030192][ T9826] netlink: 'syz.3.1144': attribute type 1 has an invalid length. [ 177.389238][ T9833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.534774][ T9848] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 177.751317][ T9830] syz.2.1143 (9830) used greatest stack depth: 15968 bytes left [ 177.778881][ T9858] netlink: 'syz.3.1153': attribute type 1 has an invalid length. [ 177.915169][ T9865] ieee802154 phy0 wpan0: encryption failed: -22 [ 178.039492][ T9858] bond9: entered promiscuous mode [ 178.092348][ T9858] 8021q: adding VLAN 0 to HW filter on device bond9 [ 178.143022][ T9852] bond9: entered allmulticast mode [ 178.223914][ T9875] bond9: (slave bridge2): making interface the new active one [ 178.237675][ T9875] bridge2: entered promiscuous mode [ 178.253330][ T9875] bridge2: entered allmulticast mode [ 178.276032][ T9875] bond9: (slave bridge2): Enslaving as an active interface with an up link [ 178.309791][ T9865] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.317679][ T9865] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.930867][ T9905] netlink: 'syz.3.1165': attribute type 7 has an invalid length. [ 179.043137][ T9907] __nla_validate_parse: 16 callbacks suppressed [ 179.043154][ T9907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1166'. [ 179.402749][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 179.499850][ T9915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1171'. [ 180.034075][ T9948] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1178'. [ 180.077639][ T9948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1178'. [ 180.425385][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'. [ 180.708453][ T9980] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1188'. [ 180.732499][ T9980] nbd: illegal input index 65508 [ 180.947236][ T9987] netlink: 'syz.4.1191': attribute type 1 has an invalid length. [ 180.955065][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880582e4800: rx timeout, send abort [ 180.964261][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880582e4800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 181.023578][ T9987] 8021q: adding VLAN 0 to HW filter on device bond6 [ 181.199506][T10002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1194'. [ 181.244954][T10002] team0: Port device team_slave_0 removed [ 182.309797][T10060] syzkaller1: entered promiscuous mode [ 182.330283][T10060] syzkaller1: entered allmulticast mode [ 182.395286][T10064] netlink: 'syz.3.1207': attribute type 20 has an invalid length. [ 182.427766][ T5641] Bluetooth: hci4: command 0x0405 tx timeout [ 182.471931][T10064] IPv6: NLM_F_CREATE should be specified when creating new route [ 182.523265][T10070] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1208'. [ 182.893408][T10092] bond7: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 182.949239][T10092] bond7 (unregistering): Released all slaves [ 182.981385][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1215'. [ 182.994878][T10099] netlink: 'syz.0.1215': attribute type 10 has an invalid length. [ 183.078938][T10099] geneve3: entered promiscuous mode [ 183.091345][T10099] geneve3: entered allmulticast mode [ 183.111822][T10102] netlink: 'syz.2.1217': attribute type 9 has an invalid length. [ 183.143699][T10102] netlink: 'syz.2.1217': attribute type 6 has an invalid length. [ 183.155212][ T9099] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 183.190202][ T9099] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 183.223983][ T9099] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 183.260415][ T9099] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 183.423739][T10118] netlink: 'syz.0.1225': attribute type 1 has an invalid length. [ 183.444571][T10118] nbd: error processing sock list [ 183.468032][T10118] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 184.311543][T10171] __nla_validate_parse: 6 callbacks suppressed [ 184.311576][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1237'. [ 184.406295][T10174] netlink: 'syz.1.1238': attribute type 1 has an invalid length. [ 184.458207][T10171] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 184.481017][ T2173] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 184.520926][T10154] netlink: 'syz.2.1232': attribute type 12 has an invalid length. [ 184.557891][T10150] netlink: 'syz.2.1232': attribute type 12 has an invalid length. [ 184.582032][T10150] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 184.584163][T10154] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 184.728451][ T30] audit: type=1804 audit(1783070211.033:9): pid=10195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1242" name="/newroot/269/cgroup.controllers" dev="tmpfs" ino=1403 res=1 errno=0 [ 184.763117][ T30] audit: type=1800 audit(1783070211.033:10): pid=10195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1242" name="cgroup.controllers" dev="tmpfs" ino=1403 res=0 errno=0 [ 184.845432][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1244'. [ 185.008958][T10209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'. [ 185.028958][T10208] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1246'. [ 185.055914][T10208] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1246'. [ 185.118808][T10213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1246'. [ 185.132701][T10217] netlink: 'syz.2.1250': attribute type 24 has an invalid length. [ 185.150498][T10213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1246'. [ 185.219411][T10218] vcan1: entered promiscuous mode [ 185.224531][T10218] vcan1: entered allmulticast mode [ 185.224771][T10221] netlink: 'syz.1.1251': attribute type 9 has an invalid length. [ 185.239552][T10221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1251'. [ 185.769143][T10253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1261'. [ 185.778938][T10253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1261'. [ 185.999569][T10274] netlink: 'syz.1.1268': attribute type 11 has an invalid length. [ 186.362110][T10295] bond7: option lp_interval: invalid value (0) [ 186.371575][T10295] bond7: option lp_interval: allowed values 1 - 2147483647 [ 186.380472][T10295] bond7 (unregistering): Released all slaves [ 186.432141][T10301] bond7: option lp_interval: invalid value (0) [ 186.443967][T10301] bond7: option lp_interval: allowed values 1 - 2147483647 [ 186.483052][T10301] bond7 (unregistering): Released all slaves [ 186.852641][T10310] syzkaller0: entered promiscuous mode [ 186.866828][T10310] syzkaller0: entered allmulticast mode [ 187.023903][T10330] netlink: 'syz.3.1284': attribute type 21 has an invalid length. [ 188.473579][T10331] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 188.722101][T10344] syzkaller0: entered promiscuous mode [ 188.740750][T10344] syzkaller0: entered allmulticast mode [ 189.471242][T10390] netlink: 'syz.4.1304': attribute type 2 has an invalid length. [ 189.795426][T10423] netlink: 'syz.1.1312': attribute type 12 has an invalid length. [ 189.805124][T10426] netlink: 'syz.4.1309': attribute type 10 has an invalid length. [ 189.816421][T10426] __nla_validate_parse: 13 callbacks suppressed [ 189.823930][T10426] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1309'. [ 189.883876][T10426] team0: Port device geneve1 added [ 189.892482][T10430] netlink: 'syz.0.1313': attribute type 1 has an invalid length. [ 189.984465][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1314'. [ 189.988304][T10430] bond3: entered promiscuous mode [ 189.998863][T10430] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.009692][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1313'. [ 190.018787][T10438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1313'. [ 190.163870][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032a59000: rx timeout, send abort [ 190.172424][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888032a59000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 190.264839][T10446] nbd: must specify a size in bytes for the device [ 190.281230][T10447] nbd: must specify a size in bytes for the device [ 190.380621][T10456] netlink: 'syz.2.1320': attribute type 1 has an invalid length. [ 190.628045][T10456] bond6: entered promiscuous mode [ 190.663217][T10456] 8021q: adding VLAN 0 to HW filter on device bond6 [ 190.714652][T10465] 8021q: adding VLAN 0 to HW filter on device bond6 [ 190.726035][T10465] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 190.749471][T10465] bond6: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 190.769271][T10465] bond6: (slave vti0): making interface the new active one [ 190.777661][T10465] vti0: entered promiscuous mode [ 190.785949][T10465] vti0: left promiscuous mode [ 191.068711][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1332'. [ 191.125924][T10489] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1332'. [ 191.622311][T10505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1336'. [ 191.951574][T10524] netlink: 516 bytes leftover after parsing attributes in process `syz.0.1344'. [ 191.984531][T10529] set match dimension is over the limit! [ 192.034065][T10527] bond9 (unregistering): Released all slaves [ 192.244232][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bbcf400: rx timeout, send abort [ 192.252922][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807bbcf400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 192.263232][T10540] macsec1: entered allmulticast mode [ 192.273898][T10540] bond0: entered allmulticast mode [ 192.280117][T10540] bond_slave_0: entered allmulticast mode [ 192.286258][T10540] bond_slave_1: entered allmulticast mode [ 192.295561][T10540] bond_slave_0: entered promiscuous mode [ 192.302780][T10540] bond_slave_1: entered promiscuous mode [ 192.330938][T10540] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 192.342892][T10540] bond0: left allmulticast mode [ 192.350688][T10540] bond_slave_0: left allmulticast mode [ 192.356251][T10540] bond_slave_1: left allmulticast mode [ 192.371216][ T5728] bond_slave_0: left promiscuous mode [ 192.378129][ T5728] bond_slave_1: left promiscuous mode [ 192.400065][T10550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1351'. [ 192.456381][T10552] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1353'. [ 192.473311][T10552] tipc: Invalid UDP bearer configuration [ 192.473370][T10552] tipc: Enabling of bearer rejected, failed to enable media [ 192.576845][T10564] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20000 [ 192.617719][T10564] sctp: [Deprecated]: syz.2.1356 (pid 10564) Use of int in maxseg socket option. [ 192.617719][T10564] Use struct sctp_assoc_value instead [ 193.409123][T10568] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 193.521537][T10605] bridge_slave_0: invalid flags given to default FDB implementation [ 193.672313][T10609] blkio.reset_stats is deprecated [ 193.754379][T10619] veth0_macvtap: left promiscuous mode [ 194.110264][T10635] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 194.134552][T10636] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 194.142962][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805855b000: rx timeout, send abort [ 194.159923][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805855b000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 194.201954][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.214244][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.227552][ T1314] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 194.546163][T10659] team0: Port device team_slave_0 removed [ 194.668082][ T4941] Bluetooth: hci4: command 0x0405 tx timeout [ 194.874042][T10681] netlink: 'syz.1.1388': attribute type 1 has an invalid length. [ 194.897825][T10686] __nla_validate_parse: 6 callbacks suppressed [ 194.897842][T10686] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1390'. [ 194.964348][T10681] 8021q: adding VLAN 0 to HW filter on device bond9 [ 195.048176][T10692] bond9: (slave gretap1): making interface the new active one [ 195.064305][T10692] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 195.269553][T10710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1397'. [ 195.340634][T10716] gretap1: entered promiscuous mode [ 195.541371][T10723] xt_policy: output policy not valid in PREROUTING and INPUT [ 196.128057][T10758] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1411'. [ 196.198619][T10764] syzkaller0: entered promiscuous mode [ 196.212481][T10764] syzkaller0: entered allmulticast mode [ 196.252905][T10764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1413'. [ 196.268991][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a491400: rx timeout, send abort [ 196.277594][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a491400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 196.400513][ T5641] block nbd0: Receive control failed (result -107) [ 196.441501][T10754] nbd0: detected capacity change from 0 to 63 [ 196.484123][ T4941] block nbd0: Receive control failed (result -32) [ 196.485032][ T1666] block nbd0: Send control failed (result -32) [ 196.500382][ T1666] block nbd0: Request send failed, requeueing [ 196.511463][ T1666] block nbd0: Dead connection, failed to find a fallback [ 196.520274][ T1666] block nbd0: shutting down sockets [ 196.527167][ T1666] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.540612][ T1666] Buffer I/O error on dev nbd0, logical block 0, async page read [ 196.550470][ T1666] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.563129][ T1666] Buffer I/O error on dev nbd0, logical block 1, async page read [ 196.571352][ T1666] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.581009][ T1666] Buffer I/O error on dev nbd0, logical block 2, async page read [ 196.591169][ T1666] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.601244][ T1666] Buffer I/O error on dev nbd0, logical block 3, async page read [ 196.609997][ T1666] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 196.619207][ T1666] Buffer I/O error on dev nbd0, logical block 0, async page read [ 196.628272][ T1666] Buffer I/O error on dev nbd0, logical block 1, async page read [ 196.637260][ T1666] Buffer I/O error on dev nbd0, logical block 2, async page read [ 196.645071][ T1666] Buffer I/O error on dev nbd0, logical block 3, async page read [ 196.658857][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 196.669514][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 196.691428][T10779] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1421'. [ 196.692370][ T25] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 196.711104][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 196.720324][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 196.730687][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 196.742971][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 196.756743][ T5633] ldm_validate_partition_table(): Disk read failed. [ 196.771154][ T5633] Dev nbd0: unable to read RDB block 0 [ 196.780258][ T5633] nbd0: unable to read partition table [ 196.784794][T10776] syzkaller0: entered promiscuous mode [ 196.809273][T10776] syzkaller0: entered allmulticast mode [ 196.821057][T10785] vlan0: entered promiscuous mode [ 196.822781][T10776] netlink: 'syz.4.1417': attribute type 30 has an invalid length. [ 196.842518][ T5633] ldm_validate_partition_table(): Disk read failed. [ 196.877742][ T5633] Dev nbd0: unable to read RDB block 0 [ 196.893499][ T5633] nbd0: unable to read partition table [ 196.913343][T10785] netlink: 'syz.1.1420': attribute type 13 has an invalid length. [ 197.074714][T10785] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 197.096987][T10785] syzkaller0: entered promiscuous mode [ 197.102665][T10785] syzkaller0: entered allmulticast mode [ 197.163862][T10802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1426'. [ 197.297347][T10804] bond7: (slave ip6gretap1): making interface the new active one [ 197.308721][T10804] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 197.461312][T10809] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003 [ 197.482495][T10817] netlink: 'syz.3.1430': attribute type 1 has an invalid length. [ 197.607531][T10826] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.614866][T10826] IPv6: NLM_F_CREATE should be set when creating new route [ 197.622306][T10826] IPv6: NLM_F_CREATE should be set when creating new route [ 197.649753][T10817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1430'. [ 197.671221][T10817] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1430'. [ 197.690955][T10822] 8021q: adding VLAN 0 to HW filter on device bond11 [ 197.700514][T10822] bond10: (slave bond11): making interface the new active one [ 197.709370][T10822] bond10: (slave bond11): Enslaving as an active interface with an up link [ 197.762359][T10827] bond10: (slave gretap1): Enslaving as a backup interface with an up link [ 197.802280][T10817] 8021q: adding VLAN 0 to HW filter on device bond10 [ 198.151607][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1437'. [ 198.179265][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1437'. [ 199.005832][T10912] syzkaller0: entered promiscuous mode [ 199.023691][T10912] syzkaller0: entered allmulticast mode [ 199.070559][T10912] tipc: Started in network mode [ 199.089364][T10912] tipc: Node identity 0a11eb0969ee, cluster identity 4711 [ 199.109634][T10912] tipc: Enabled bearer , priority 0 [ 199.241270][T10903] tipc: Resetting bearer [ 199.298378][T10903] tipc: Disabling bearer [ 201.401808][ T5641] Bluetooth: hci2: command 0x0406 tx timeout [ 201.407949][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 201.407973][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 201.414019][ T5643] Bluetooth: hci0: command 0x0406 tx timeout [ 201.548552][T10958] __nla_validate_parse: 3 callbacks suppressed [ 201.548569][T10958] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1465'. [ 201.848644][T10977] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1471'. [ 202.129896][T10998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1475'. [ 202.182931][T10998] bridge3: port 1(veth5) entered blocking state [ 202.192720][T10998] bridge3: port 1(veth5) entered disabled state [ 202.200740][T10998] veth5: entered allmulticast mode [ 202.209472][T10998] veth5: entered promiscuous mode [ 202.239686][T11003] bridge3: port 2(veth0_to_bond) entered blocking state [ 202.254645][T11003] bridge3: port 2(veth0_to_bond) entered disabled state [ 202.282374][T11003] veth0_to_bond: entered allmulticast mode [ 202.317246][T11003] veth0_to_bond: entered promiscuous mode [ 202.710988][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'. [ 202.845408][T11030] netlink: 'syz.1.1479': attribute type 1 has an invalid length. [ 202.920783][T11036] netlink: 'syz.0.1482': attribute type 1 has an invalid length. [ 203.051050][T11030] bond10: entered promiscuous mode [ 203.059062][T11030] 8021q: adding VLAN 0 to HW filter on device bond10 [ 203.072584][T11051] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 203.183803][T11036] 8021q: adding VLAN 0 to HW filter on device bond4 [ 203.211234][T11041] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 203.244571][T11041] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 203.270158][T11041] bond10: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 203.302274][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1484'. [ 203.321209][T11050] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 203.344761][T11050] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 203.378410][T11062] sock: sock_set_timeout: `syz.3.1484' (pid 11062) tries to set negative timeout [ 203.441911][ T9099] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.475422][ T9099] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.531055][ T9099] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.538601][T11064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.556982][ T9099] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.810674][T11082] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.817945][T11082] bridge0: port 2(bridge_slave_1) entered listening state [ 203.825257][T11082] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.832475][T11082] bridge0: port 1(bridge_slave_0) entered listening state [ 203.912786][T11088] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.920120][T11088] IPv6: NLM_F_CREATE should be set when creating new route [ 203.927532][T11088] IPv6: NLM_F_CREATE should be set when creating new route [ 203.956431][T11082] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 204.089526][T11099] netlink: 'syz.0.1496': attribute type 2 has an invalid length. [ 204.126243][T11099] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1496'. [ 204.396695][T11122] netlink: 'syz.2.1504': attribute type 23 has an invalid length. [ 204.532251][T11116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1502'. [ 204.604435][T11116] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 204.638351][ T9] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 204.689284][T11141] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1509'. [ 204.708910][T11144] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1510'. [ 204.797894][T11142] SET target dimension over the limit! [ 205.201792][T11169] tipc: Started in network mode [ 205.207152][T11169] tipc: Node identity 080211000001, cluster identity 4711 [ 205.215793][T11169] tipc: Enabled bearer , priority 0 [ 205.247748][T11169] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 205.535449][T11185] netlink: 'syz.3.1521': attribute type 1 has an invalid length. [ 205.705063][T11185] bond12: entered promiscuous mode [ 205.734236][T11185] 8021q: adding VLAN 0 to HW filter on device bond12 [ 205.761761][T11195] netlink: 'syz.1.1524': attribute type 2 has an invalid length. [ 205.823114][T11189] bond12: (slave bridge3): making interface the new active one [ 205.842099][T11189] bridge3: entered promiscuous mode [ 205.859368][T11189] bond12: (slave bridge3): Enslaving as an active interface with an up link [ 206.084481][T11204] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1526'. [ 206.234690][T11215] tipc: Enabling of bearer rejected, media not registered [ 206.256175][T11216] netlink: 'syz.3.1529': attribute type 10 has an invalid length. [ 206.329918][ T2173] tipc: Node number set to 134418688 [ 206.394438][T11218] syzkaller0: entered promiscuous mode [ 206.412676][T11218] syzkaller0: entered allmulticast mode [ 207.123227][T11258] __nla_validate_parse: 2 callbacks suppressed [ 207.123244][T11258] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1547'. [ 207.158989][T11265] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1548'. [ 207.397491][T11272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1550'. [ 207.532764][T11284] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1553'. [ 207.630109][T11286] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1554'. [ 208.179819][T11312] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 208.212936][T11312] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 208.233997][T11312] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 208.508776][T11334] tipc: Started in network mode [ 208.530681][T11334] tipc: Node identity 1ee528eeaa07, cluster identity 4711 [ 208.548820][T11334] tipc: Enabled bearer , priority 0 [ 208.615638][T11345] syzkaller0: entered promiscuous mode [ 208.626374][T11345] syzkaller0: entered allmulticast mode [ 208.641546][T11345] tipc: Resetting bearer [ 208.784833][ T13] tipc: Resetting bearer [ 208.792524][T11332] tipc: Resetting bearer [ 210.442558][T11332] tipc: Disabling bearer [ 210.451301][T11355] netlink: 'syz.4.1575': attribute type 5 has an invalid length. [ 210.487401][ T5784] tipc: Node number set to 3034720494 [ 211.058996][T11391] veth1_to_team: Caught tx_queue_len zero misconfig [ 211.534969][T11340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.692609][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1585'. [ 211.762174][T11401] tipc: Enabling of bearer rejected, already enabled [ 212.128979][T11419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1592'. [ 212.141986][T11424] vcan0: entered allmulticast mode [ 212.225750][T11424] lo: Caught tx_queue_len zero misconfig [ 212.376137][T11433] veth0_macvtap: left promiscuous mode [ 212.473982][T11433] ipvlan2: entered promiscuous mode [ 212.491020][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1602'. [ 212.529459][T11446] netlink: 'syz.4.1601': attribute type 39 has an invalid length. [ 212.618309][T11444] team0: entered promiscuous mode [ 212.623536][T11444] team_slave_0: entered promiscuous mode [ 212.630065][T11444] team_slave_1: entered promiscuous mode [ 212.640975][T11444] team0: left promiscuous mode [ 212.645860][T11444] team_slave_0: left promiscuous mode [ 212.654895][T11444] team_slave_1: left promiscuous mode [ 212.688422][T11442] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 212.902536][T11466] sctp: [Deprecated]: syz.4.1604 (pid 11466) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.902536][T11466] Use struct sctp_sack_info instead [ 214.789377][T11483] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 214.908076][T11486] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1608'. [ 214.945022][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1611'. [ 214.966185][T11494] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1608'. [ 215.081466][T11496] syzkaller1: entered promiscuous mode [ 215.127051][T11496] syzkaller1: entered allmulticast mode [ 215.359004][T11513] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1617'. [ 215.450814][T11508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1616'. [ 215.615534][T11525] netlink: 'syz.1.1620': attribute type 1 has an invalid length. [ 215.648046][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1622'. [ 215.654569][T11525] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 215.719183][T11527] vlan2: entered allmulticast mode [ 215.750060][T11527] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 215.799187][T11537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1625'. [ 215.910742][T11542] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 216.001538][T11547] bond11 (unregistering): Released all slaves [ 216.151145][T11555] veth1_to_bond: entered allmulticast mode [ 216.179225][T11555] veth1_to_bond: left allmulticast mode [ 216.581483][T11587] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1642'. [ 216.701947][T11592] nbd: nbd64 already in use [ 216.800025][T11551] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 217.279151][T11619] __nla_validate_parse: 3 callbacks suppressed [ 217.279169][T11619] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1648'. [ 217.317121][T11619] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1648'. [ 217.363402][T11624] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1652'. [ 217.432685][T11623] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1653'. [ 217.484512][T11628] vlan2: entered promiscuous mode [ 217.521075][T11628] geneve1: entered promiscuous mode [ 217.531460][T11628] vlan2: entered allmulticast mode [ 217.538124][T11628] geneve1: entered allmulticast mode [ 217.564118][T11635] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1655'. [ 217.600559][T11635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'. [ 217.772084][T11638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1656'. [ 217.866976][T11650] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1660'. [ 218.251084][T11669] xt_time: unknown flags 0xf4 [ 218.467378][T11685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1668'. [ 218.485675][T11690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1668'. [ 218.495957][T11686] 8021q: VLANs not supported on ipvlan1 [ 218.499552][T11685] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 218.582867][T11693] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 218.655262][T11697] xt_hashlimit: size too large, truncated to 1048576 [ 219.015492][T11704] syzkaller1: entered promiscuous mode [ 219.025738][T11717] netlink: 'syz.0.1675': attribute type 11 has an invalid length. [ 219.047245][T11717] netlink: 'syz.0.1675': attribute type 4 has an invalid length. [ 219.055135][T11704] syzkaller1: entered allmulticast mode [ 219.073395][T11717] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 219.438318][T11736] netlink: 'syz.0.1680': attribute type 4 has an invalid length. [ 219.466048][T11739] xt_CONNSECMARK: invalid mode: 8 [ 219.617817][ T5750] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 219.671312][ T5750] syú2: Port: 1 Link ACTIVE [ 219.675633][T11733] sctp: [Deprecated]: syz.0.1680 (pid 11733) Use of int in max_burst socket option. [ 219.675633][T11733] Use struct sctp_assoc_value instead [ 219.800852][T11749] netlink: 'syz.3.1683': attribute type 4 has an invalid length. [ 219.880500][T11749] .`: renamed from bond0 (while UP) [ 220.014403][T11765] tipc: Enabling of bearer rejected, failed to enable media [ 220.356336][T11783] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 220.370943][T11783] netlink: 'syz.0.1691': attribute type 21 has an invalid length. [ 220.520974][T11790] macsec1: entered allmulticast mode [ 220.526604][T11790] bond0: entered allmulticast mode [ 220.531949][T11790] bond_slave_0: entered allmulticast mode [ 220.538670][T11790] bond_slave_1: entered allmulticast mode [ 220.546858][T11790] bond_slave_0: entered promiscuous mode [ 220.552606][T11790] bond_slave_1: entered promiscuous mode [ 220.559732][T11790] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 220.569471][T11790] bond0: left allmulticast mode [ 220.574374][T11790] bond_slave_0: left allmulticast mode [ 220.580533][T11790] bond_slave_1: left allmulticast mode [ 220.629780][ T5750] bond_slave_0: left promiscuous mode [ 220.635256][ T5750] bond_slave_1: left promiscuous mode [ 220.673665][T11791] macsec1: entered allmulticast mode [ 220.685866][T11791] bond0: entered allmulticast mode [ 220.693126][T11791] bond_slave_0: entered allmulticast mode [ 220.724286][T11791] bond_slave_1: entered allmulticast mode [ 220.732001][T11791] bond_slave_0: entered promiscuous mode [ 220.737874][T11791] bond_slave_1: entered promiscuous mode [ 220.755503][T11791] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 220.764256][T11791] bond0: left allmulticast mode [ 220.779114][T11791] bond_slave_0: left allmulticast mode [ 220.785128][T11791] bond_slave_1: left allmulticast mode [ 220.800928][ T2173] bond_slave_0: left promiscuous mode [ 220.806403][ T2173] bond_slave_1: left promiscuous mode [ 223.528985][T11792] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.714424][T11928] openvswitch: netlink: Missing key (keys=40, expected=100) [ 223.812552][T11933] bond9: option all_slaves_active: invalid value (222) [ 223.840677][T11933] bond9 (unregistering): Released all slaves [ 223.965177][T11946] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 224.146384][T11959] __nla_validate_parse: 14 callbacks suppressed [ 224.146403][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1714'. [ 224.194192][T11962] netlink: 'syz.0.1715': attribute type 1 has an invalid length. [ 224.210937][T11965] netdevsim netdevsim4: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 224.220955][T11959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1714'. [ 224.264452][T11962] 8021q: adding VLAN 0 to HW filter on device bond5 [ 224.344540][T11971] bond5: (slave gretap2): making interface the new active one [ 224.361982][T11971] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 224.384201][T11971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1715'. [ 224.543579][T11984] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1720'. [ 224.635857][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1720'. [ 224.870123][T12005] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1728'. [ 225.232833][T12015] team0 (unregistering): Port device team_slave_0 removed [ 225.288445][T12015] team0 (unregistering): Port device team_slave_1 removed [ 225.336715][T12015] team0 (unregistering): Port device geneve1 removed [ 225.488183][T12045] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1740'. [ 225.492326][T12046] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 225.506005][T12047] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1740'. [ 225.620334][T12040] netlink: 'syz.1.1739': attribute type 5 has an invalid length. [ 225.762380][T12052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1742'. [ 225.921170][T12061] syzkaller0: entered promiscuous mode [ 225.952535][T12061] syzkaller0: entered allmulticast mode [ 226.040003][T12061] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 226.175961][ T9] hid-generic 0005:0458:100E.0001: unknown main item tag 0x0 [ 226.315717][ T9] hid-generic 0005:0458:100E.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 227.046412][T12126] netlink: 'syz.2.1764': attribute type 29 has an invalid length. [ 227.065756][T12126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1764'. [ 227.102136][T12131] netlink: 'syz.2.1764': attribute type 29 has an invalid length. [ 227.338352][T12130] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.353884][T12130] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.549554][T12130] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.572466][T12154] x_tables: duplicate underflow at hook 1 [ 227.578356][T12130] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.778652][T12130] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.834068][T12130] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.119970][T12130] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.135129][T12130] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.470463][ T9099] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.497419][ T9099] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.615784][ T9090] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.652074][ T9090] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.726152][ T9090] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.745426][ T9090] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.761233][T12210] syzkaller0: entered promiscuous mode [ 228.767217][T12210] syzkaller0: entered allmulticast mode [ 228.843517][ T9094] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.869748][ T9094] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.961721][T12217] syzkaller0: entered promiscuous mode [ 228.970280][T12217] syzkaller0: entered allmulticast mode [ 229.177911][T12235] __nla_validate_parse: 21 callbacks suppressed [ 229.177928][T12235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1795'. [ 229.233629][T12240] netlink: 'syz.3.1796': attribute type 8 has an invalid length. [ 229.257449][T12240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1796'. [ 229.304614][T12240] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.313633][T12240] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.655435][T12264] netlink: 'syz.3.1804': attribute type 25 has an invalid length. [ 229.734761][T12271] netlink: 'syz.0.1806': attribute type 5 has an invalid length. [ 230.469225][T12309] ip6tnl0: Caught tx_queue_len zero misconfig [ 230.479875][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1813'. [ 230.495122][T12309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1811'. [ 230.512083][T12316] x_tables: duplicate underflow at hook 4 [ 230.522850][T12307] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 230.543297][T12317] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 230.665322][T12326] vcan0: tx address claim with dlc 0 [ 230.708240][T12325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1815'. [ 230.708789][T12326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1815'. [ 230.969065][T12341] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1822'. [ 231.014777][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1821'. [ 231.049391][T12346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1824'. [ 231.091832][T12340] bridge0: port 3(ipvlan3) entered blocking state [ 231.101500][T12343] can: request_module (can-proto-4) failed. [ 231.121280][T12340] bridge0: port 3(ipvlan3) entered disabled state [ 231.142569][T12340] ipvlan3: entered allmulticast mode [ 231.156003][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1825'. [ 231.165120][T12340] bridge0: entered allmulticast mode [ 231.175502][T12340] ipvlan3: left allmulticast mode [ 231.189813][T12340] bridge0: left allmulticast mode [ 231.529036][T12371] IPv6: NLM_F_CREATE should be specified when creating new route [ 231.895819][ T50] block nbd2: Receive control failed (result -107) [ 231.928702][T12371] nbd2: detected capacity change from 0 to 63 [ 231.979556][ T5636] block nbd2: Receive control failed (result -104) [ 232.261970][T12408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.311376][T12411] netlink: 'syz.2.1837': attribute type 3 has an invalid length. [ 232.471295][T12421] xt_TPROXY: Can be used only with -p tcp or -p udp [ 232.494669][T12424] nbd: must specify a device to reconfigure [ 232.581684][T12426] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 232.846196][T12443] team0: Cannot enslave team device to itself [ 232.884566][T12443] team0: Cannot enslave team device to itself [ 232.914094][T12443] team0: Cannot enslave team device to itself [ 232.945841][T12443] team0: Cannot enslave team device to itself [ 232.983565][T12443] team0: Cannot enslave team device to itself [ 233.003772][T12443] team0: Cannot enslave team device to itself [ 233.033887][T12443] team0: Cannot enslave team device to itself [ 233.065205][T12443] team0: Cannot enslave team device to itself [ 233.097642][T12443] team0: Cannot enslave team device to itself [ 233.134930][T12443] team0: Cannot enslave team device to itself [ 233.175135][T12443] team0: Cannot enslave team device to itself [ 233.196110][T12443] team0: Cannot enslave team device to itself [ 233.213900][T12462] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 233.237637][T12443] team0: Cannot enslave team device to itself [ 233.272776][T12443] team0: Cannot enslave team device to itself [ 233.300201][T12443] team0: Cannot enslave team device to itself [ 233.324590][T12443] team0: Cannot enslave team device to itself [ 233.407987][T12443] team0: Cannot enslave team device to itself [ 233.437269][T12443] team0: Cannot enslave team device to itself [ 233.443782][T12443] team0: Cannot enslave team device to itself [ 233.464215][T12443] team0: Cannot enslave team device to itself [ 233.481944][T12443] team0: Cannot enslave team device to itself [ 233.527515][T12443] team0: Cannot enslave team device to itself [ 233.552334][T12443] team0: Cannot enslave team device to itself [ 233.562439][T12477] netlink: 'syz.0.1857': attribute type 1 has an invalid length. [ 233.575889][T12443] team0: Cannot enslave team device to itself [ 233.584182][T12480] netlink: 'syz.0.1857': attribute type 1 has an invalid length. [ 233.603795][T12443] team0: Cannot enslave team device to itself [ 233.630642][T12443] team0: Cannot enslave team device to itself [ 233.659607][T12443] team0: Cannot enslave team device to itself [ 234.296989][T12525] netlink: 'syz.2.1870': attribute type 1 has an invalid length. [ 234.341611][T12534] __nla_validate_parse: 4 callbacks suppressed [ 234.341629][T12534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1872'. [ 234.755414][T12555] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1879'. [ 235.002765][T12567] openvswitch: netlink: IP tunnel attribute has 256 unknown bytes. [ 235.414103][T12588] bridge5: entered promiscuous mode [ 235.436609][T12588] bridge5: entered allmulticast mode [ 235.527261][T12597] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1893'. [ 235.571430][T12598] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1895'. [ 235.599215][T12597] team0: Device 26±ÿª¨úrBº“ is loopback device. Loopback devices can't be added as a team port [ 235.645908][T12597] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 235.661005][T12607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1896'. [ 236.035934][T12622] netlink: 'syz.0.1898': attribute type 1 has an invalid length. [ 236.092684][T12624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1901'. [ 236.177962][ T2173] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 236.193928][ T139] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.205954][ T2173] syú2: Port: 1 Link DOWN [ 236.218745][ T139] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 236.243917][ T139] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 236.402605][T12636] bridge3: port 1(veth5) entered blocking state [ 236.422387][T12636] bridge3: port 1(veth5) entered disabled state [ 236.445336][T12636] veth5: entered allmulticast mode [ 236.489285][T12636] veth5: entered promiscuous mode [ 236.510812][T12638] bridge3: port 2(veth0_to_bond) entered blocking state [ 236.519107][T12638] bridge3: port 2(veth0_to_bond) entered disabled state [ 236.547192][T12638] veth0_to_bond: entered allmulticast mode [ 236.570187][T12638] veth0_to_bond: entered promiscuous mode [ 236.599289][ T139] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.626579][ T139] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 236.652067][ T139] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 236.668932][ T139] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.679031][ T139] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 236.689433][ T139] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 236.946713][ T139] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.982897][ T139] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 237.021612][ T139] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 237.210201][T12684] tipc: Started in network mode [ 237.229031][T12684] tipc: Node identity ac14140f, cluster identity 4711 [ 237.252660][T12684] tipc: New replicast peer: 255.255.255.255 [ 237.286071][T12684] tipc: Enabled bearer , priority 10 [ 237.381916][T12693] sctp: [Deprecated]: syz.2.1914 (pid 12693) Use of int in max_burst socket option. [ 237.381916][T12693] Use struct sctp_assoc_value instead [ 237.428758][T12692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1915'. [ 237.469937][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1915'. [ 237.512945][T12692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.217862][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1925'. [ 238.283429][T12734] macsec1: entered promiscuous mode [ 238.328816][T12734] bridge0: entered promiscuous mode [ 238.351350][T12734] macsec1: entered allmulticast mode [ 238.375111][T12734] bridge0: entered allmulticast mode [ 238.401964][T12734] bridge0: port 3(macsec1) entered blocking state [ 238.442744][T12734] bridge0: port 3(macsec1) entered disabled state [ 238.516028][T12734] bridge0: left allmulticast mode [ 238.535236][T12734] bridge0: left promiscuous mode [ 238.612689][ T9] tipc: Node number set to 2886997007 [ 239.651819][T12828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.991063][T12846] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1954'. [ 240.013032][T12848] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 240.033593][T12848] pim6reg: entered allmulticast mode [ 240.125005][T12852] netlink: 'syz.1.1956': attribute type 1 has an invalid length. [ 240.143049][T12852] netlink: 'syz.1.1956': attribute type 3 has an invalid length. [ 240.158502][T12855] netlink: 'syz.0.1957': attribute type 4 has an invalid length. [ 240.172816][T12852] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1956'. [ 240.181870][T12857] netlink: 'syz.2.1955': attribute type 1 has an invalid length. [ 240.181890][T12857] netlink: 'syz.2.1955': attribute type 11 has an invalid length. [ 240.181903][T12857] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1955'. [ 240.254684][T12852] NCSI netlink: No device for ifindex 813332851 [ 240.603271][T12878] syzkaller0: entered promiscuous mode [ 240.608981][T12878] syzkaller0: entered allmulticast mode [ 240.636947][T12880] netlink: 'syz.0.1965': attribute type 1 has an invalid length. [ 240.653187][T12877] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 240.667091][ T5636] Bluetooth: hci4: command 0x0405 tx timeout [ 240.865451][T12882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1966'. [ 240.875473][T12888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1966'. [ 241.024579][T12895] bridge4: entered allmulticast mode [ 241.051034][T12898] netlink: 'syz.1.1971': attribute type 11 has an invalid length. [ 241.115577][T12898] netlink: 'syz.1.1971': attribute type 4 has an invalid length. [ 241.235860][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888058a80800: rx timeout, send abort [ 241.244736][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888058a80800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 241.259315][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888032c23400: rx timeout, send abort [ 241.269019][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888032c23400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 241.366101][T12914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1977'. [ 241.423864][T12914] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 241.453549][ T5728] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 241.611393][T12929] netlink: 'syz.3.1982': attribute type 33 has an invalid length. [ 241.709717][T12929] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 241.736267][T12929] bond0 (unregistering): Released all slaves [ 241.753555][ T30] audit: type=1804 audit(1783070268.053:11): pid=12940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1983" name="/newroot/402/cgroup.controllers" dev="tmpfs" ino=2061 res=1 errno=0 [ 241.836209][ T30] audit: type=1800 audit(1783070268.053:12): pid=12940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1983" name="cgroup.controllers" dev="tmpfs" ino=2061 res=0 errno=0 [ 242.201540][ T5636] Bluetooth: hci4: link tx timeout [ 242.211881][ T5636] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 242.485098][T12971] syzkaller0: entered promiscuous mode [ 242.498103][T12971] syzkaller0: entered allmulticast mode [ 242.512606][T12975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1996'. [ 243.335750][T13028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.267022][ T5636] Bluetooth: hci4: command 0x0405 tx timeout [ 244.475642][T13099] netlink: 'syz.0.2030': attribute type 3 has an invalid length. [ 244.491578][T13100] netlink: 'syz.0.2030': attribute type 3 has an invalid length. [ 244.527475][T13099] netlink: 586 bytes leftover after parsing attributes in process `syz.0.2030'. [ 244.555180][T13100] netlink: 586 bytes leftover after parsing attributes in process `syz.0.2030'. [ 244.757878][T13109] Can't find ip_set type bitmap:ip,mac [ 244.815339][T13119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2034'. [ 245.081802][T13134] sock: sock_set_timeout: `syz.4.2038' (pid 13134) tries to set negative timeout [ 245.114725][T13128] geneve3: entered promiscuous mode [ 245.309006][T13146] __nla_validate_parse: 3 callbacks suppressed [ 245.309024][T13146] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2041'. [ 245.423016][T13154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2042'. [ 245.453307][T13154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2042'. [ 245.678943][T13164] xt_hashlimit: size too large, truncated to 1048576 [ 245.757271][T13169] validate_nla: 1 callbacks suppressed [ 245.757287][T13169] netlink: 'syz.0.2048': attribute type 39 has an invalid length. [ 245.890452][T13182] netlink: 'syz.2.2052': attribute type 2 has an invalid length. [ 245.942285][T13182] netlink: 'syz.2.2052': attribute type 1 has an invalid length. [ 246.174686][T13193] siw: device registration error -23 [ 246.282717][T13210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2057'. [ 246.393609][T13203] IPVS: Scheduler module ip_vs_sip not found [ 246.443525][T13216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2059'. [ 246.485984][T13218] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2060'. [ 246.575966][T13220] veth1_macvtap: left promiscuous mode [ 246.779872][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2065'. [ 246.809753][T13234] netlink: 'syz.2.2065': attribute type 13 has an invalid length. [ 246.878537][T13238] netlink: 'syz.4.2066': attribute type 39 has an invalid length. [ 246.884072][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2065'. [ 246.911814][T13240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2067'. [ 246.984104][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2065'. [ 246.999503][ T9093] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.008248][T13243] openvswitch: netlink: Missing valid actions attribute. [ 247.034368][T13234] netlink: 'syz.2.2065': attribute type 13 has an invalid length. [ 247.034885][ T9093] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.046001][T13243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.118141][ T9093] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.135104][ T9093] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.304229][T13257] x_tables: duplicate underflow at hook 1 [ 247.574647][T13275] xt_bpf: check failed: parse error [ 247.593998][T13275] xt_bpf: check failed: parse error [ 247.613112][T13275] xt_bpf: check failed: parse error [ 247.628020][T13275] xt_bpf: check failed: parse error [ 247.644384][T13275] xt_bpf: check failed: parse error [ 247.659118][T13275] xt_bpf: check failed: parse error [ 247.676047][T13275] xt_bpf: check failed: parse error [ 247.697955][T13275] xt_bpf: check failed: parse error [ 247.709353][T13275] xt_bpf: check failed: parse error [ 247.728275][T13275] xt_bpf: check failed: parse error [ 247.949674][T13302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.998051][T13304] netlink: 'syz.3.2090': attribute type 39 has an invalid length. [ 248.088682][T13311] netlink: 'syz.2.2092': attribute type 8 has an invalid length. [ 248.101585][T13311] openvswitch: netlink: Missing key (keys=40, expected=100) [ 248.301240][ T9087] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 248.358576][T13322] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.670376][T13414] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.677661][T13414] bridge0: port 2(bridge_slave_1) entered listening state [ 249.685077][T13414] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.692316][T13414] bridge0: port 1(bridge_slave_0) entered listening state [ 249.721092][T13414] 8021q: adding VLAN 0 to HW filter on device .` [ 249.913078][T13414] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 250.319821][T13457] netlink: 'syz.0.2132': attribute type 21 has an invalid length. [ 250.519624][T13470] __nla_validate_parse: 9 callbacks suppressed [ 250.519641][T13470] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2135'. [ 250.857915][T13495] netlink: 'syz.3.2142': attribute type 1 has an invalid length. [ 250.958994][T13503] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2143'. [ 251.159185][T13514] xt_socket: unknown flags 0x8 [ 251.321738][T13526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2149'. [ 251.426943][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2149'. [ 251.959275][T13549] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 252.047933][T13549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2154'. [ 252.065552][T13545] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2153'. [ 252.299787][T13561] tipc: Can't bind to reserved service type 0 [ 252.443240][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807abb4800: rx timeout, send abort [ 252.452208][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807abb4800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 252.733914][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880591f3c00: rx timeout, send abort [ 252.743771][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880591f3c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 252.834703][T13589] SET target dimension over the limit! [ 252.837607][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2165'. [ 252.850305][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2165'. [ 253.471524][T13618] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20004 [ 253.653677][T13635] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2179'. [ 254.134164][T13673] bridge_slave_1: left promiscuous mode [ 254.171119][T13673] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.206052][T13673] bridge_slave_0: left allmulticast mode [ 254.211430][T13679] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2191'. [ 254.212693][T13673] bridge_slave_0: left promiscuous mode [ 254.227588][T13673] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.732871][T13701] bond11: entered promiscuous mode [ 254.734239][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058a8f800: rx timeout, send abort [ 254.738919][T13701] 8021q: adding VLAN 0 to HW filter on device bond11 [ 254.746791][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058a8f800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 254.828555][T13708] netlink: 'syz.0.2199': attribute type 1 has an invalid length. [ 254.911247][T13713] netlink: 'syz.4.2201': attribute type 83 has an invalid length. [ 254.951480][T13708] 8021q: adding VLAN 0 to HW filter on device bond6 [ 255.011022][T13715] bond6: (slave ip6gretap0): making interface the new active one [ 255.041289][T13715] bond6: (slave ip6gretap0): Enslaving as an active interface with an up link [ 255.427268][T13739] 8021q: adding VLAN 0 to HW filter on device bond7 [ 255.453756][T13739] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 255.643357][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.656627][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.677514][ T1314] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 256.118699][T13775] veth1_to_bond: entered allmulticast mode [ 256.140182][T13775] __nla_validate_parse: 4 callbacks suppressed [ 256.140199][T13775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2217'. [ 256.203675][T13775] veth1_to_bond (unregistering): left allmulticast mode [ 256.232810][T13789] netlink: 'syz.1.2222': attribute type 2 has an invalid length. [ 256.252796][T13789] netlink: 'syz.1.2222': attribute type 11 has an invalid length. [ 256.270639][T13775] : (slave bond_slave_1): Releasing backup interface [ 256.271384][T13789] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2222'. [ 256.290122][T13794] netlink: 'syz.4.2223': attribute type 1 has an invalid length. [ 256.323113][T13794] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2223'. [ 256.511531][T13797] syzkaller0: mtu less than device minimum [ 256.683004][T13819] veth1_to_bond: entered allmulticast mode [ 256.718586][T13819] veth1_to_bond: entered promiscuous mode [ 256.732759][T13819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2231'. [ 256.751131][T13823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2229'. [ 256.784567][T13823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2229'. [ 256.871314][T13819] veth1_to_bond (unregistering): left allmulticast mode [ 256.884418][ T5636] block nbd3: Receive control failed (result -107) [ 256.897473][T13819] veth1_to_bond (unregistering): left promiscuous mode [ 256.927557][T13805] nbd3: detected capacity change from 0 to 63 [ 256.939345][ T50] block nbd3: Receive control failed (result -32) [ 256.960249][ T1666] block nbd3: Dead connection, failed to find a fallback [ 256.967546][ T1666] block nbd3: shutting down sockets [ 256.974700][ T1666] blk_print_req_error: 97 callbacks suppressed [ 256.974716][ T1666] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 256.990785][ T1666] buffer_io_error: 138 callbacks suppressed [ 256.990802][ T1666] Buffer I/O error on dev nbd3, logical block 0, async page read [ 257.006394][ T1666] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.016001][ T1666] Buffer I/O error on dev nbd3, logical block 1, async page read [ 257.024390][ T1666] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 257.035367][ T1666] Buffer I/O error on dev nbd3, logical block 2, async page read [ 257.043774][ T1666] Buffer I/O error on dev nbd3, logical block 3, async page read [ 257.052198][T13819] bond0: (slave bond_slave_1): Releasing backup interface [ 257.052205][ T1666] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 257.052271][ T1666] Buffer I/O error on dev nbd3, logical block 0, async page read [ 257.077837][ T1666] Buffer I/O error on dev nbd3, logical block 1, async page read [ 257.085732][ T1666] Buffer I/O error on dev nbd3, logical block 2, async page read [ 257.088647][T13831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2233'. [ 257.093915][ T1666] Buffer I/O error on dev nbd3, logical block 3, async page read [ 257.112219][ T1666] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 257.121491][ T1666] Buffer I/O error on dev nbd3, logical block 0, async page read [ 257.129491][ T1666] Buffer I/O error on dev nbd3, logical block 1, async page read [ 257.140986][ T1666] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 257.151346][ T1666] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 257.161314][ T1666] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 257.170881][ T1666] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 257.182148][ T1666] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 257.191769][ T5633] ldm_validate_partition_table(): Disk read failed. [ 257.208063][ T5633] Dev nbd3: unable to read RDB block 0 [ 257.215930][ T5633] nbd3: unable to read partition table [ 257.234632][ T5633] ldm_validate_partition_table(): Disk read failed. [ 257.244069][ T5633] Dev nbd3: unable to read RDB block 0 [ 257.255060][ T5633] nbd3: unable to read partition table [ 257.323396][T13826] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 257.350492][T13826] bond12 (unregistering): Released all slaves [ 257.456864][T13846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2236'. [ 257.687591][T13857] netlink: 'syz.3.2241': attribute type 2 has an invalid length. [ 257.738988][T13858] netlink: ct family unspecified [ 257.755054][T13858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.832918][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2244'. [ 257.863684][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2244'. [ 257.933151][T13872] netlink: 'syz.3.2245': attribute type 12 has an invalid length. [ 257.943193][T13873] h: entered promiscuous mode [ 258.101161][T13882] netlink: 'syz.0.2247': attribute type 19 has an invalid length. [ 258.154178][ T9095] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.165155][ T9095] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.174639][T13882] netlink: 'syz.0.2247': attribute type 1 has an invalid length. [ 258.183030][ T9095] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.237069][T13882] 8021q: adding VLAN 0 to HW filter on device bond8 [ 258.248321][ T9095] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.485250][T13905] netlink: 'syz.3.2252': attribute type 2 has an invalid length. [ 258.532564][T13908] xt_policy: output policy not valid in PREROUTING and INPUT [ 259.039484][ T139] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.059455][ T139] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.074270][ T139] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.091086][ T139] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.295000][T13955] netlink: 'syz.1.2267': attribute type 1 has an invalid length. [ 259.427695][T13966] netlink: 'syz.0.2270': attribute type 1 has an invalid length. [ 259.514992][T13966] macvtap1: entered allmulticast mode [ 259.529662][T13972] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 259.683426][T13978] IPv6: addrconf: prefix option has invalid lifetime [ 259.691997][T13978] IPv6: addrconf: prefix option has invalid lifetime [ 260.057880][T13999] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 260.072059][T13999] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 260.321534][T14011] syzkaller0: entered promiscuous mode [ 260.344648][T14011] syzkaller0: entered allmulticast mode [ 260.528218][T14027] tun0: tun_chr_ioctl cmd 1074025675 [ 260.545202][T14027] tun0: persist enabled [ 260.590061][T14033] openvswitch: netlink: EtherType 0 is less than min 600 [ 260.650599][T14035] netlink: ct family unspecified [ 260.662171][T14033] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 260.677345][T14035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.692115][T14029] x_tables: duplicate underflow at hook 3 [ 260.771005][T14043] syzkaller0: entered promiscuous mode [ 260.804882][T14043] syzkaller0: entered allmulticast mode [ 261.518016][T14080] raw_sendmsg: syz.0.2308 forgot to set AF_INET. Fix it! [ 261.552409][ T30] audit: type=1804 audit(1783070287.853:13): pid=14080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2308" name="/newroot/463/cgroup.controllers" dev="tmpfs" ino=2376 res=1 errno=0 [ 261.575942][ T30] audit: type=1800 audit(1783070287.863:14): pid=14080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2308" name="cgroup.controllers" dev="tmpfs" ino=2376 res=0 errno=0 [ 261.877360][T14094] syzkaller0: entered promiscuous mode [ 261.892590][T14094] syzkaller0: entered allmulticast mode [ 261.972026][T14101] bridge0: entered promiscuous mode [ 261.990191][T14101] bridge0: entered allmulticast mode [ 262.037788][T10783] block nbd2: Connection timed out, retrying (0/2 alive) [ 262.051512][T10783] block nbd2: Connection timed out, retrying (0/2 alive) [ 262.060666][T10783] block nbd2: Connection timed out, retrying (0/2 alive) [ 262.068864][ T1620] block nbd2: Dead connection, failed to find a fallback [ 262.078163][T10783] block nbd2: Connection timed out, retrying (0/2 alive) [ 262.086202][ T1620] block nbd2: shutting down sockets [ 262.094703][ T1620] blk_print_req_error: 117 callbacks suppressed [ 262.094719][ T1620] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.111003][ T1620] buffer_io_error: 138 callbacks suppressed [ 262.111019][ T1620] Buffer I/O error on dev nbd2, logical block 1, async page read [ 262.126204][ T1620] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.136122][ T1620] Buffer I/O error on dev nbd2, logical block 0, async page read [ 262.143993][ T1620] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.153315][ T1620] Buffer I/O error on dev nbd2, logical block 3, async page read [ 262.163667][ T1620] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.173173][ T1620] Buffer I/O error on dev nbd2, logical block 2, async page read [ 262.184860][ T1620] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 262.196073][ T1620] Buffer I/O error on dev nbd2, logical block 0, async page read [ 262.204029][ T1620] Buffer I/O error on dev nbd2, logical block 1, async page read [ 262.212085][ T1620] Buffer I/O error on dev nbd2, logical block 2, async page read [ 262.220463][ T1620] Buffer I/O error on dev nbd2, logical block 3, async page read [ 262.228600][ T1620] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 262.237816][ T1620] Buffer I/O error on dev nbd2, logical block 0, async page read [ 262.238747][T14097] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 262.245613][ T1620] Buffer I/O error on dev nbd2, logical block 1, async page read [ 262.268626][ T1620] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 262.278418][ T1620] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 262.289066][ T1620] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 262.298678][ T1620] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 262.308696][ T5948] ldm_validate_partition_table(): Disk read failed. [ 262.318639][ T5948] Dev nbd2: unable to read RDB block 0 [ 262.327263][ T5948] nbd2: unable to read partition table [ 262.342278][ T5948] ldm_validate_partition_table(): Disk read failed. [ 262.352840][ T5948] Dev nbd2: unable to read RDB block 0 [ 262.356645][T14097] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 262.362685][ T5948] nbd2: unable to read partition table [ 262.380294][T14111] __nla_validate_parse: 17 callbacks suppressed [ 262.380312][T14111] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2319'. [ 262.402256][T14097] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 262.431522][T14097] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 262.545182][T14115] netlink: 'syz.4.2320': attribute type 10 has an invalid length. [ 262.556133][T14117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2322'. [ 262.570325][T14117] block nbd0: reconnected socket [ 262.585858][T14115] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 262.597576][T14117] netlink: 'syz.2.2322': attribute type 1 has an invalid length. [ 262.612427][T14117] nbd: error processing sock list [ 262.618902][T14121] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2321'. [ 262.642391][T14121] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2321'. [ 262.703756][ T50] block nbd0: Receive control failed (result -32) [ 262.797767][T14129] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2326'. [ 262.836050][T14129] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2326'. [ 262.941885][T14129] xt_TCPMSS: Only works on TCP SYN packets [ 263.005462][T14140] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 263.014865][T14129] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2326'. [ 263.031487][T14140] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 263.034621][T14129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2326'. [ 263.048841][T14147] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 263.061842][T14147] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 263.244122][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2335'. [ 263.285504][T14160] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2336'. [ 263.415457][T14170] netlink: 'syz.2.2338': attribute type 1 has an invalid length. [ 264.032322][T14214] nft_compat: unsupported protocol 0 [ 264.173701][T14221] netlink: 'syz.0.2352': attribute type 1 has an invalid length. [ 264.221757][T14221] 8021q: adding VLAN 0 to HW filter on device bond10 [ 264.282648][T14223] bond10: (slave veth5): Enslaving as an active interface with a down link [ 264.351894][T14221] 8021q: adding VLAN 0 to HW filter on device  [ 264.367563][T14221] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.378146][T14221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.410414][T14221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.421851][T14221] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 264.433685][T14221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.448554][T14221] veth1_vlan: left promiscuous mode [ 264.454782][T14221] veth0_vlan: left promiscuous mode [ 264.461631][T14221] veth0_vlan: entered promiscuous mode [ 264.472192][T14221] veth1_vlan: entered promiscuous mode [ 264.481406][T14221] veth1_macvtap: left promiscuous mode [ 264.487991][T14221] veth0_macvtap: left promiscuous mode [ 264.494278][T14221] veth0_macvtap: entered promiscuous mode [ 264.501189][T14221] veth1_macvtap: entered promiscuous mode [ 264.512365][T14221] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 264.520593][T14221] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 264.528826][T14221] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 264.537173][T14221] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 264.550938][T14221] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 264.591275][T14221] 8021q: adding VLAN 0 to HW filter on device bond1 [ 264.600170][T14221] 8021q: adding VLAN 0 to HW filter on device bond2 [ 264.622700][T14221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.640541][T14221] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 264.654372][T14221] 8021q: adding VLAN 0 to HW filter on device bond3 [ 264.663588][T14221] 8021q: adding VLAN 0 to HW filter on device bond4 [ 264.677371][T14221] 8021q: adding VLAN 0 to HW filter on device bond5 [ 264.685590][T14221] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 264.701094][T14221] 8021q: adding VLAN 0 to HW filter on device bond9 [ 264.708439][T14221] bond9: entered allmulticast mode [ 264.713996][T14221] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 264.733793][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.741278][ T139] bridge0: port 1(bridge_slave_0) entered listening state [ 264.750746][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.757872][ T139] bridge0: port 2(bridge_slave_1) entered listening state [ 264.788656][ T5728] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 264.797102][T14223] veth0_virt_wifi: entered promiscuous mode [ 264.804893][ T5728] syú2: Port: 1 Link ACTIVE [ 264.822694][T14223] bond10: (slave veth0_virt_wifi): making interface the new active one [ 264.833636][T14223] bond10: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 264.844452][ T9] bond_slave_0: entered promiscuous mode [ 264.852206][ T9] batadv0: entered promiscuous mode [ 264.865092][ T9095] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.877837][ T9095] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 264.887317][ T9095] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.896349][ T9095] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 264.900620][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804cca0400: rx timeout, send abort [ 264.982203][ T9095] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.002189][ T9095] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 265.034941][ T9095] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.055409][ T9095] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 265.203761][ T139] bond10: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 265.372610][T14248] sit0: Caught tx_queue_len zero misconfig [ 265.400784][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804cca1000: rx timeout, send abort [ 265.413380][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804cca0400: abort rx timeout. Force session deactivation [ 265.451670][T14218] infiniband syz0: set active [ 265.457005][T14218] infiniband syz0: added ipvlan0 [ 265.478504][T14218] [ 265.480867][T14218] ====================================================== [ 265.487885][T14218] WARNING: possible circular locking dependency detected [ 265.494918][T14218] syzkaller #0 Not tainted [ 265.499335][T14218] ------------------------------------------------------ [ 265.506441][T14218] syz.4.2351/14218 is trying to acquire lock: [ 265.512518][T14218] ffffffff8ec5ec40 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 265.522132][T14218] [ 265.522132][T14218] but task is already holding lock: [ 265.529498][T14218] ffffffff8e9f6cc0 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa9c/0x2060 [ 265.538811][T14218] [ 265.538811][T14218] which lock already depends on the new lock. [ 265.538811][T14218] [ 265.549201][T14218] [ 265.549201][T14218] the existing dependency chain (in reverse order) is: [ 265.558203][T14218] [ 265.558203][T14218] -> #8 (wq_pool_mutex){+.+.}-{4:4}: [ 265.565666][T14218] __mutex_lock+0x19d/0x1550 [ 265.570774][T14218] __alloc_workqueue+0xa9c/0x2060 [ 265.576310][T14218] alloc_workqueue_noprof+0xe3/0x210 [ 265.582106][T14218] padata_alloc+0xbe/0x360 [ 265.587070][T14218] pcrypt_init_padata+0x27/0x100 [ 265.592524][T14218] pcrypt_init+0x60/0xc0 [ 265.597361][T14218] do_one_initcall+0x250/0x870 [ 265.602641][T14218] do_initcall_level+0x10a/0x1a0 [ 265.608089][T14218] do_initcalls+0x59/0xa0 [ 265.612953][T14218] kernel_init_freeable+0x29d/0x3e0 [ 265.618662][T14218] kernel_init+0x1d/0x1d0 [ 265.623499][T14218] ret_from_fork+0x514/0xb70 [ 265.628600][T14218] ret_from_fork_asm+0x1a/0x30 [ 265.633874][T14218] [ 265.633874][T14218] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 265.641590][T14218] cpus_read_lock+0x42/0x160 [ 265.646699][T14218] static_key_slow_inc+0x12/0x30 [ 265.652246][T14218] nbd_genl_reconfigure+0x1301/0x1e80 [ 265.658132][T14218] genl_family_rcv_msg_doit+0x233/0x340 [ 265.664191][T14218] genl_rcv_msg+0x614/0x7a0 [ 265.669203][T14218] netlink_rcv_skb+0x226/0x4a0 [ 265.674479][T14218] genl_rcv+0x28/0x40 [ 265.678969][T14218] netlink_unicast+0x7bb/0x940 [ 265.684248][T14218] netlink_sendmsg+0x813/0xb40 [ 265.689524][T14218] sock_sendmsg_nosec+0x13a/0x180 [ 265.695085][T14218] ____sys_sendmsg+0x54e/0x850 [ 265.700359][T14218] ___sys_sendmsg+0x2a5/0x360 [ 265.705546][T14218] __x64_sys_sendmsg+0x1b1/0x290 [ 265.710996][T14218] do_syscall_64+0x174/0x580 [ 265.716100][T14218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.722502][T14218] [ 265.722502][T14218] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 265.730135][T14218] __mutex_lock+0x19d/0x1550 [ 265.735238][T14218] nbd_queue_rq+0x373/0x1150 [ 265.740341][T14218] blk_mq_dispatch_rq_list+0x499/0x1990 [ 265.746401][T14218] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 265.753244][T14218] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 265.759736][T14218] blk_mq_run_work_fn+0x16c/0x300 [ 265.765262][T14218] process_scheduled_works+0xa8e/0x14e0 [ 265.771315][T14218] worker_thread+0xa47/0xfb0 [ 265.776411][T14218] kthread+0x388/0x470 [ 265.781009][T14218] ret_from_fork+0x514/0xb70 [ 265.786110][T14218] ret_from_fork_asm+0x1a/0x30 [ 265.791382][T14218] [ 265.791382][T14218] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 265.798591][T14218] __mutex_lock+0x19d/0x1550 [ 265.803700][T14218] nbd_queue_rq+0xc1/0x1150 [ 265.808718][T14218] blk_mq_dispatch_rq_list+0x499/0x1990 [ 265.814776][T14218] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 265.821620][T14218] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 265.828114][T14218] blk_mq_run_work_fn+0x16c/0x300 [ 265.833646][T14218] process_scheduled_works+0xa8e/0x14e0 [ 265.839702][T14218] worker_thread+0xa47/0xfb0 [ 265.844802][T14218] kthread+0x388/0x470 [ 265.849382][T14218] ret_from_fork+0x514/0xb70 [ 265.854484][T14218] ret_from_fork_asm+0x1a/0x30 [ 265.859757][T14218] [ 265.859757][T14218] -> #4 (set->srcu){.+.+}-{0:0}: [ 265.866867][T14218] __synchronize_srcu+0xc9/0x2f0 [ 265.872318][T14218] elevator_switch+0x1e8/0x7b0 [ 265.877592][T14218] elevator_change+0x2fa/0x480 [ 265.882864][T14218] elevator_set_default+0x375/0x440 [ 265.888573][T14218] blk_register_queue+0x3f3/0x4e0 [ 265.894115][T14218] __add_disk+0x6cb/0xe30 [ 265.898956][T14218] add_disk_fwnode+0xfb/0x4b0 [ 265.904157][T14218] nbd_dev_add+0x733/0xb60 [ 265.909092][T14218] nbd_init+0x15f/0x1e0 [ 265.913767][T14218] do_one_initcall+0x250/0x870 [ 265.919049][T14218] do_initcall_level+0x10a/0x1a0 [ 265.924498][T14218] do_initcalls+0x59/0xa0 [ 265.929341][T14218] kernel_init_freeable+0x29d/0x3e0 [ 265.935046][T14218] kernel_init+0x1d/0x1d0 [ 265.939879][T14218] ret_from_fork+0x514/0xb70 [ 265.944981][T14218] ret_from_fork_asm+0x1a/0x30 [ 265.950255][T14218] [ 265.950255][T14218] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 265.958066][T14218] __mutex_lock+0x19d/0x1550 [ 265.963168][T14218] elevator_change+0x1af/0x480 [ 265.968441][T14218] elevator_set_none+0xb5/0x140 [ 265.973801][T14218] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 265.980121][T14218] nbd_start_device+0x189/0xb30 [ 265.985484][T14218] nbd_genl_connect+0x1597/0x1c10 [ 265.991022][T14218] genl_family_rcv_msg_doit+0x233/0x340 [ 265.997081][T14218] genl_rcv_msg+0x614/0x7a0 [ 266.002090][T14218] netlink_rcv_skb+0x226/0x4a0 [ 266.007365][T14218] genl_rcv+0x28/0x40 [ 266.011857][T14218] netlink_unicast+0x7bb/0x940 [ 266.017152][T14218] netlink_sendmsg+0x813/0xb40 [ 266.022429][T14218] sock_sendmsg_nosec+0x13a/0x180 [ 266.027966][T14218] ____sys_sendmsg+0x54e/0x850 [ 266.033243][T14218] ___sys_sendmsg+0x2a5/0x360 [ 266.038435][T14218] __x64_sys_sendmsg+0x1b1/0x290 [ 266.043887][T14218] do_syscall_64+0x174/0x580 [ 266.048985][T14218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.055387][T14218] [ 266.055387][T14218] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 266.063978][T14218] blk_alloc_queue+0x544/0x690 [ 266.069296][T14218] __blk_mq_alloc_disk+0x194/0x390 [ 266.074920][T14218] nbd_dev_add+0x494/0xb60 [ 266.079845][T14218] nbd_init+0x15f/0x1e0 [ 266.084519][T14218] do_one_initcall+0x250/0x870 [ 266.089794][T14218] do_initcall_level+0x10a/0x1a0 [ 266.095243][T14218] do_initcalls+0x59/0xa0 [ 266.100081][T14218] kernel_init_freeable+0x29d/0x3e0 [ 266.105786][T14218] kernel_init+0x1d/0x1d0 [ 266.110620][T14218] ret_from_fork+0x514/0xb70 [ 266.115727][T14218] ret_from_fork_asm+0x1a/0x30 [ 266.120996][T14218] [ 266.120996][T14218] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 266.128198][T14218] fs_reclaim_acquire+0x71/0x100 [ 266.133646][T14218] prepare_alloc_pages+0x15b/0x650 [ 266.139268][T14218] __alloc_frozen_pages_noprof+0x12f/0x380 [ 266.145582][T14218] __alloc_pages_noprof+0x10/0x100 [ 266.151203][T14218] pcpu_populate_chunk+0x181/0xb30 [ 266.156826][T14218] pcpu_alloc_noprof+0xbca/0x1900 [ 266.162453][T14218] bpf_map_alloc_percpu+0x65/0x180 [ 266.168076][T14218] prealloc_init+0x214/0x650 [ 266.173174][T14218] htab_map_alloc+0x6a0/0xc90 [ 266.178356][T14218] map_create+0xf2a/0x1b90 [ 266.183282][T14218] __sys_bpf+0xaea/0xd90 [ 266.188032][T14218] __x64_sys_bpf+0xba/0xd0 [ 266.192958][T14218] do_syscall_64+0x174/0x580 [ 266.198056][T14218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.204463][T14218] [ 266.204463][T14218] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 266.212198][T14218] __lock_acquire+0x1520/0x2cf0 [ 266.217587][T14218] lock_acquire+0x106/0x350 [ 266.222606][T14218] __mutex_lock+0x19d/0x1550 [ 266.227819][T14218] pcpu_alloc_noprof+0x231/0x1900 [ 266.233378][T14218] __alloc_workqueue+0xb2c/0x2060 [ 266.238927][T14218] alloc_workqueue_noprof+0xe3/0x210 [ 266.244737][T14218] ib_mad_init_device+0x993/0x2150 [ 266.250362][T14218] add_client_context+0x37c/0x7b0 [ 266.255906][T14218] enable_device_and_get+0x19c/0x3e0 [ 266.261714][T14218] ib_register_device+0x10af/0x1380 [ 266.267424][T14218] rxe_register_device+0x1e3/0x350 [ 266.273047][T14218] rxe_net_add+0x81/0x110 [ 266.277884][T14218] rxe_newlink+0xf4/0x1c0 [ 266.282722][T14218] nldev_newlink+0x5bc/0x650 [ 266.287995][T14218] rdma_nl_rcv+0x6ef/0xa40 [ 266.292920][T14218] netlink_unicast+0x7bb/0x940 [ 266.298199][T14218] netlink_sendmsg+0x813/0xb40 [ 266.303475][T14218] sock_sendmsg_nosec+0x13a/0x180 [ 266.309003][T14218] ____sys_sendmsg+0x54e/0x850 [ 266.314279][T14218] ___sys_sendmsg+0x2a5/0x360 [ 266.319469][T14218] __x64_sys_sendmsg+0x1b1/0x290 [ 266.324916][T14218] do_syscall_64+0x174/0x580 [ 266.330024][T14218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.336434][T14218] [ 266.336434][T14218] other info that might help us debug this: [ 266.336434][T14218] [ 266.346657][T14218] Chain exists of: [ 266.346657][T14218] pcpu_alloc_mutex --> cpu_hotplug_lock --> wq_pool_mutex [ 266.346657][T14218] [ 266.359693][T14218] Possible unsafe locking scenario: [ 266.359693][T14218] [ 266.367129][T14218] CPU0 CPU1 [ 266.372481][T14218] ---- ---- [ 266.377830][T14218] lock(wq_pool_mutex); [ 266.382062][T14218] lock(cpu_hotplug_lock); [ 266.389082][T14218] lock(wq_pool_mutex); [ 266.395831][T14218] lock(pcpu_alloc_mutex); [ 266.400318][T14218] [ 266.400318][T14218] *** DEADLOCK *** [ 266.400318][T14218] [ 266.408445][T14218] 6 locks held by syz.4.2351/14218: [ 266.413623][T14218] #0: ffffffff9ab1f188 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x33d/0xa40 [ 266.423625][T14218] #1: ffffffff8fd8a848 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x429/0x650 [ 266.433018][T14218] #2: ffffffff8fd7bd28 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0xff/0x3e0 [ 266.442942][T14218] #3: ffffffff8fd7c028 (clients_rwsem){++++}-{4:4}, at: enable_device_and_get+0x165/0x3e0 [ 266.452943][T14218] #4: ffff88802c100620 (&device->client_data_rwsem){++++}-{4:4}, at: add_client_context+0x33e/0x7b0 [ 266.463815][T14218] #5: ffffffff8e9f6cc0 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa9c/0x2060 [ 266.473557][T14218] [ 266.473557][T14218] stack backtrace: [ 266.479539][T14218] CPU: 0 UID: 0 PID: 14218 Comm: syz.4.2351 Not tainted syzkaller #0 PREEMPT(full) [ 266.479557][T14218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 266.479574][T14218] Call Trace: [ 266.479582][T14218] [ 266.479589][T14218] dump_stack_lvl+0xe8/0x150 [ 266.479613][T14218] print_circular_bug+0x2e1/0x300 [ 266.479629][T14218] check_noncircular+0x12e/0x150 [ 266.479654][T14218] __lock_acquire+0x1520/0x2cf0 [ 266.479675][T14218] ? check_path+0x21/0x40 [ 266.479695][T14218] ? check_noncircular+0xda/0x150 [ 266.479717][T14218] ? add_lock_to_list+0xc7/0x100 [ 266.479739][T14218] ? lockdep_unlock+0x5d/0xd0 [ 266.479755][T14218] ? __lock_acquire+0x13e8/0x2cf0 [ 266.479776][T14218] ? pcpu_alloc_noprof+0x231/0x1900 [ 266.479792][T14218] lock_acquire+0x106/0x350 [ 266.479811][T14218] ? pcpu_alloc_noprof+0x231/0x1900 [ 266.479832][T14218] __mutex_lock+0x19d/0x1550 [ 266.479851][T14218] ? pcpu_alloc_noprof+0x231/0x1900 [ 266.479868][T14218] ? __pfx___mutex_trylock_common+0x10/0x10 [ 266.479885][T14218] ? pcpu_alloc_noprof+0x231/0x1900 [ 266.479900][T14218] ? trace_contention_end+0x3d/0x140 [ 266.479914][T14218] ? __pfx___mutex_lock+0x10/0x10 [ 266.479932][T14218] ? __mutex_lock+0x30d/0x1550 [ 266.479956][T14218] ? __pfx___mutex_lock+0x10/0x10 [ 266.479975][T14218] pcpu_alloc_noprof+0x231/0x1900 [ 266.479992][T14218] ? __kmalloc_cache_node_noprof+0x3ce/0x630 [ 266.480015][T14218] __alloc_workqueue+0xb2c/0x2060 [ 266.480046][T14218] alloc_workqueue_noprof+0xe3/0x210 [ 266.480069][T14218] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 266.480090][T14218] ? __ib_alloc_pd+0x4d6/0x6d0 [ 266.480108][T14218] ? __ib_alloc_pd+0x191/0x6d0 [ 266.480127][T14218] ib_mad_init_device+0x993/0x2150 [ 266.480154][T14218] ? __pfx_ib_mad_init_device+0x10/0x10 [ 266.480169][T14218] ? do_raw_spin_unlock+0xf5/0x210 [ 266.480186][T14218] ? _raw_spin_unlock+0x28/0x50 [ 266.480203][T14218] add_client_context+0x37c/0x7b0 [ 266.480226][T14218] ? __pfx_add_client_context+0x10/0x10 [ 266.480247][T14218] ? xa_find+0x25b/0x2b0 [ 266.480271][T14218] enable_device_and_get+0x19c/0x3e0 [ 266.480292][T14218] ? __pfx_enable_device_and_get+0x10/0x10 [ 266.480316][T14218] ? device_add+0x6f6/0xb80 [ 266.480338][T14218] ib_register_device+0x10af/0x1380 [ 266.480363][T14218] ? __pfx_ib_register_device+0x10/0x10 [ 266.480386][T14218] ? xa_load+0x60/0x210 [ 266.480405][T14218] ? xa_load+0x60/0x210 [ 266.480423][T14218] ? xa_load+0x60/0x210 [ 266.480442][T14218] ? xa_load+0x1db/0x210 [ 266.480464][T14218] ? ib_device_set_netdev+0x5c9/0x6d0 [ 266.480480][T14218] rxe_register_device+0x1e3/0x350 [ 266.480502][T14218] rxe_net_add+0x81/0x110 [ 266.480523][T14218] rxe_newlink+0xf4/0x1c0 [ 266.480541][T14218] nldev_newlink+0x5bc/0x650 [ 266.480561][T14218] ? __pfx_nldev_newlink+0x10/0x10 [ 266.480578][T14218] ? lock_acquire+0x106/0x350 [ 266.480634][T14218] ? bpf_lsm_capable+0x9/0x20 [ 266.480652][T14218] ? security_capable+0x7e/0x2c0 [ 266.480675][T14218] ? __pfx_nldev_newlink+0x10/0x10 [ 266.480693][T14218] rdma_nl_rcv+0x6ef/0xa40 [ 266.480716][T14218] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 266.480742][T14218] ? netlink_deliver_tap+0x2e/0x1b0 [ 266.480764][T14218] ? netlink_deliver_tap+0x2e/0x1b0 [ 266.480786][T14218] netlink_unicast+0x7bb/0x940 [ 266.480809][T14218] netlink_sendmsg+0x813/0xb40 [ 266.480834][T14218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.480857][T14218] ? aa_sock_msg_perm+0xf1/0x1b0 [ 266.480873][T14218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.480893][T14218] sock_sendmsg_nosec+0x13a/0x180 [ 266.480911][T14218] ____sys_sendmsg+0x54e/0x850 [ 266.480933][T14218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.480957][T14218] ? import_iovec+0x73/0xa0 [ 266.480977][T14218] ___sys_sendmsg+0x2a5/0x360 [ 266.480997][T14218] ? __lock_acquire+0x683/0x2cf0 [ 266.481017][T14218] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.481043][T14218] ? futex_wake+0x51b/0x5f0 [ 266.481069][T14218] ? __fget_files+0x2a/0x420 [ 266.481087][T14218] ? __fget_files+0x3a2/0x420 [ 266.481109][T14218] __x64_sys_sendmsg+0x1b1/0x290 [ 266.481130][T14218] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 266.481157][T14218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.481173][T14218] do_syscall_64+0x174/0x580 [ 266.481191][T14218] ? trace_irq_disable+0x3b/0x140 [ 266.481209][T14218] ? clear_bhb_loop+0x40/0x90 [ 266.481226][T14218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.481241][T14218] RIP: 0033:0x7fb58859de59 [ 266.481260][T14218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.481273][T14218] RSP: 002b:00007fb58945d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.481289][T14218] RAX: ffffffffffffffda RBX: 00007fb588825fa0 RCX: 00007fb58859de59 [ 266.481300][T14218] RDX: 0000000024048800 RSI: 0000200000000100 RDI: 0000000000000005 [ 266.481310][T14218] RBP: 00007fb588633e6f R08: 0000000000000000 R09: 0000000000000000 [ 266.481320][T14218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.481329][T14218] R13: 00007fb588826038 R14: 00007fb588825fa0 R15: 00007ffe8f0fac58 [ 266.481346][T14218] [ 266.978534][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804cca1000: abort rx timeout. Force session deactivation [ 267.008373][T14218] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 267.009532][T14218] infiniband syz0: Couldn't open port 1 [ 267.034126][T14218] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 267.051193][T14218] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 267.070197][T14218] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 267.099353][T14218] RDS/IB: syz0: added [ 267.104036][T14218] smc: adding ib device syz0 with port count 1 [ 267.110408][T14218] smc: ib device syz0 port 1 has no pnetid