last executing test programs: 13.512646613s ago: executing program 2 (id=2799): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f0000000300)={0xa, 0x4e23, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000002900000034", @ANYRES32=r0], 0x18}, 0x48814) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e00)=@newtaction={0xfffffe05, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0xd0, 0x1, [@m_connmark={0xcc, 0x2, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xb0d0, 0x4, 0x0, 0x3}, 0xd89}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x5, 0x4, 0x1, 0xcea3}, 0x8001}}]}, {0x64, 0x6, "019143f8cad6988b622d8fab75f1e886d2a82d1e74a9e6c9cd993b8c9cfc104f96696ec389a20cda2a15309e9ace3e7caa2f520c45901363889db09bf5c27383f3c7a82cda3ed65b8a848617828d5420ea9d2c4d8c1b1d4a516866dbd6744363"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000fc"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x38) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c01000011002300"/20, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYBLOB='\b\x00.'], 0x14c}, 0x1, 0x0, 0x0, 0x40080c5}, 0x4000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r6, 0x0, 0x4008000) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYBLOB="000428bd7000fbdbdf25000000000800", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYRESHEX], 0x60}, 0x1, 0x0, 0x0, 0x200000c0}, 0xc004805) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000002640)=ANY=[@ANYBLOB="1c00ff00", @ANYRES64=r5, @ANYBLOB="00032cbd7000fddbdf253e00000008000300", @ANYRESDEC=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x11) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x3ff, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, &(0x7f0000001c80)={{r6, &(0x7f0000000540), 0x20000, &(0x7f00000002c0)={@_ha_fsid={[0x6, 0x3]}, {0x2, 0x3, 0x6, 0x10}}, 0x18, &(0x7f0000000700)={@_ha_fsid}, &(0x7f0000000740)=0x4}, 0x5, &(0x7f0000001bc0)=[{0x2, 0x3, &(0x7f0000000780)='DSCP\x00', &(0x7f00000007c0)="67cd0dce6bd64ab6fdb2b7efe95758741ef3a18ed1ae13a607fa1d9b8a674c43e5a897f9fd7e44fab1241b8d0ea977b5a1d4d73088e2c5d6ca958c84f041f9b1aadbe7d41e842d528f8e647155e2b3f6f12b547fc980dd14cff69e4a62bb479d7ecacd8164ac108573e7", 0x6a, 0x10}, {0x2, 0x49, &(0x7f0000000140)='SET\x00', &(0x7f0000000880)="63ac6ea8573a45f381c0c54ca3f841981875b6e84287d1c9547062868f757afc2e246d53a83d605573c7a36e6db44a21fd6b7ddd98705030f86b9613d6407a19d706330e1efb2a67dfdee7b66397908e2c1a1200c8bd873afe70c4251b0162b3790f3bd281349e71346636a6c827288e4a5ebc1d5b4cb75945b885de0008c2e877838fa2f34fa15b03b8d080dec5e7", 0x8f, 0x10}, {0x1, 0xfffffff7, &(0x7f0000000940)='mangle\x00', &(0x7f0000000980)="da66698b698798f1e442681657f925d22729a43c061f4dcdf1faad24eff4362e9b2bd5d8ac9a66bfd80c807a6c34b699c256854b88733e15ef797562a9c3227a5081d1ecad55f6fe9bde2b80e7d5881d44052c233515cb3430b670cfdd56e0d2056140fda7c675f6c5dc19463db5f15aa0cee211c1fe68939c4c50a7830df83435cf1dce00716935323030a0df53bd73f93aab8a467db9da80b559211786142d591b69ad97", 0xa5, 0x8}, {0x1, 0x7, &(0x7f0000000a40)='nl80211\x00', &(0x7f0000000a80)="26422af04b4ec21f7e643f1524cfbc1e56f5f27ff6d84a9e53505978db2d2874bbb6ec590f1973d1b55271b78c53d4a6ea5c4c0c86c755a6b4df0795d419a813bf4524308d428907c7a89345dbc65ae3d3ceee16feb706a9bac7d77db9ed5cdadbe84eaa35232664fc1ddd2757f4f508a4266518a1c67ec6e5424132d0f64824ce0b1bf12911663235debd08a9671681e88da41b4a39da4c0540264b6778324538f84c880668bbf40d4a9795bb88a76baee727a89b235c1f60b01a30369bf128303d625ae313be1a9e6a2542ca2079f8a61eb006c7ff5467396504ae42e910c34dcf72eef90bc26129", 0xe9, 0x18}, {0x0, 0x6, &(0x7f0000000b80)='\'\xb3+,`\x00', &(0x7f0000000bc0)="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", 0x1000, 0x12}]}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001d80)={@initdev, 0x0}, &(0x7f0000001dc0)=0x14) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002040)=ANY=[@ANYBLOB="340000001100010028bd7000ffdbdf2500000000", @ANYBLOB="7c8d231b5851f9007c4ed3b2a690587aff06825847b809d28fa5fe61209ceeac8d31274dbed0440d0ef1256156591053565ae23b87b2d0cacc9c0a92f37fd7f0e990f875470f341272e67099aaadc748", @ANYBLOB="20100000000004001400030076657468315f766c616e00000000000048ff6a7508a2f65087e0178213ed64b706e9cc084be2b85a05382e4dce26d642a3069a45594a7f65387df94cf5b9f9b0152df3b85c27ffd5d53139706c8a9aa7b46c6cc77ef9fc0000fe363538ce8000000000000000000000000000000000d75a069031ae9e429588376a23c43ca802b535a75df9deecf63e120ab2c4"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000002e40)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000020feffff720af0fff8ffffff71a4f2ff000000001f03000000000000e5000200000000002604fdffff0200007b010000000000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6c45dc8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000000000000017b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189030000000000000064163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318292570a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa96863ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981004cbcb70000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968ff0f00006ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457910000f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558e97f1dc5eae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d35dd6a7c0955fa4be344768f2dafa7918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0656fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f44e1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1d4f9374df85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb35d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x6131}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "d5ddef660dfc6065", "f10c5597965cd5b42992cad93d6f4d9d", "000500", "2666adfa35327b65"}, 0x28) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 13.1035389s ago: executing program 2 (id=2802): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010000506fcffffff8300000000000000", @ANYRES32=0x0, @ANYBLOB="0110000000000000240012800b0001006d616373656300001400028005000a000100000005000b000000000008000500", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x13, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) (async, rerun: 32) r5 = accept(r3, &(0x7f0000000280)=@qipcrtr, &(0x7f0000000400)=0x80) (rerun: 32) ioctl$BTRFS_IOC_SPACE_INFO(r5, 0xc0109414, &(0x7f0000000e00)={0x2e0, 0xe, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 12.647726988s ago: executing program 2 (id=2811): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000500), &(0x7f0000000540)=0x30) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000240], 0x0, &(0x7f0000000200), &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000040000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r1) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x8, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) recvmmsg(r5, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r7, 0x701, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x481}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=@polexpire={0xcc, 0x1b, 0x3, 0x70bd27, 0x25dfdbfd, {{{@in6=@remote, @in=@multicast1, 0x4e22, 0x0, 0x4e23, 0x1, 0xa, 0xa0, 0x20, 0x32}, {0x8001, 0x5, 0xfffffffffffffff8, 0x1ff, 0x1, 0x8000000000000000, 0x9, 0x1158000000000}, {0x2, 0x1, 0x101, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x29}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xff}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc040}, 0x8010) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) sendmsg$nl_xfrm(r3, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYBLOB="240100001a0000042dbd7000fcdbdf252001000000000000000000000000000200000000000000000000ffff0a0101004e2000404e2400000a0000000800000094e96aa06a7439cf46b8d080f7b5f1b06be23e6ec0689499fbb383ba43f4092c161c966a7b572cf75e9a8771d1607ad7d695e68d3cbdb617c2feca8405b734a50c51863b", @ANYRES32=r8, @ANYRES32=r10, @ANYBLOB="ff020000000000000000000000000001000004d53c000000ac1414bb000000000000000000000000070000000000000005000000000000005700000000000000ff00000000000000020000000000000002000000000000000300000000000000040000000000000000000000000000000600000000000000090000000000000000010000000000000800000003000000ff0300002cbd70000135000002000200040000000000000008001f00800000002c001300fc01000000000000000000000000000000000000000000000000000000000001000000000a000000"], 0x124}, 0x1, 0x0, 0x0, 0x8810}, 0x4884) getpid() getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000c40)={@local}, &(0x7f0000000c80)=0x14) 9.898345999s ago: executing program 2 (id=2833): socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x915c}, 0x8) (async, rerun: 64) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) (async, rerun: 64) write(0xffffffffffffffff, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x3ffd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0xc0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000f2ff00000500000018"], 0x44}}, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32], 0x1c}}, 0x840) (async) bind$nfc_llcp(r1, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x3, 0x2, 0x1, "5688408dae1461bfabb2ccb55c47065c5bb435ee906d43431ab88988fd8e73695a79cdcf976669731773b721abc319c9306e1c3406353ddb4dec21354c2891", 0x20}, 0x60) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000240)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x4, 0x1000, 0x8, 0x1, 0xa84, 0xe0, 0xa, 0xfffffffa}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (rerun: 64) 9.632086809s ago: executing program 2 (id=2835): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x50) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000882}, 0x4000000) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x0, 0x0, 0x48, 0x1, 0x5, 0x8, 0x8, 0x1, 0xfffffffe, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000001880)=[{@fixed}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socket(0x10, 0x2, 0x0) (async) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x50) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r2) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r5, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000882}, 0x4000000) (async) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x0, 0x0, 0x48, 0x1, 0x5, 0x8, 0x8, 0x1, 0xfffffffe, 'syz0\x00'}) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000001880)=[{@fixed}]}) (async) 9.348469488s ago: executing program 2 (id=2842): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200e70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000200fffc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000031401002abd700001dc00250900020073797a30000000e70a00000072786500140033006970766c616e310000000000000000005f08527c0bce9de0fbf4dd26c3f3fbd344637c383cd2e91b52ad05fbb60e66e804d7a82d03c580542a9a33b3cd84c69fa16fd49213bccfcb5fe979350eaafbe9c275289a70638e2e4606bdd89788db63cd0515f77b315790582760e832e4"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200e70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000200fffc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000031401002abd700001dc00250900020073797a30000000e70a00000072786500140033006970766c616e310000000000000000005f08527c0bce9de0fbf4dd26c3f3fbd344637c383cd2e91b52ad05fbb60e66e804d7a82d03c580542a9a33b3cd84c69fa16fd49213bccfcb5fe979350eaafbe9c275289a70638e2e4606bdd89788db63cd0515f77b315790582760e832e4"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) (async) 2.355986195s ago: executing program 3 (id=2884): r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0xb2570000) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x43, "80d7cc8ed6322defd5a87e36125d382bfe6e1782f54f7a1171cc727770cbc2cfa4371296e6e88fb49a081c5a2340aafbf99bd8c9d57b96e71110fea1696bca5fe57efd"}, &(0x7f00000002c0)=0x4b) (async, rerun: 32) recvmmsg(0xffffffffffffffff, &(0x7f0000003180)=[{{&(0x7f0000000c00)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, 0x0}, 0xfff}, {{&(0x7f0000000e80)=@l2tp, 0x80, 0x0}}], 0x2, 0x42, 0x0) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20) (async, rerun: 64) sendmmsg$inet6(r1, &(0x7f0000002440), 0x400, 0x0) (rerun: 64) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xfffffe37, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x6, [{0x1, 0x5, 0x3}]}]}, {0x0, [0x0, 0x61, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6}, 0x28) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x4, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r4}, 0x8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000008f0b000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r6, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0x1d, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={0x38, r10, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x71a90f0fa04800ec}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x114, r10, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0xfd, 0x7f, [@tim={0x5, 0xee, {0x6a, 0x2c, 0x10, "eec87ff457b94065a25de12a6c42c1d80e9406e5ccd8b5e598854b821e6a6d3b3ff70f62814544978a228663003050ad4b739ee4aa243ed90c76733e7497dea94382f88867f750aba5ea561f496f772d9c98cb99f59e6fdadafe757b64c5735e44440a60e7ef96c0f65ca75337d52076bfc6918d90481b1b7424e19d01b17e62b089a41bf9cb02ca3e8df1f3e4319e4782bf18c7d74212abb6c592e0bab264a9a7710a307a20d03ddee5c6eaf925849663f2b3b20e47b7f464d3b00f2070976fb88a156e43384e433bc265840b519a724ac514ac861ea19f182b54b3df5d7d19e8d53f619652d647cc5be5"}}, @mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x5, 0x61}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0xc008}, 0x10) 2.046614153s ago: executing program 0 (id=2888): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000500000000000000", @ANYRES32=r4, @ANYBLOB="0c009900000000000000000008002600431700000800270001000000"], 0x38}, 0x1, 0x0, 0x0, 0xc804}, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="320000001400000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="e7c42e1d01fd570c1474132f43ff5b64ec69b7c328cece23f520a94424b224e80f29b59aa4cf6ad36abb24abc9441a73e9cdce949fb508a5eb2d8f38e299820f1ff988161d16e94bf8248acbec39b5aafc6925ebc8f07f08fa7d41072377c8e1eecfa33199d49550fba6fd41072594e0515f364bae17b711636791a0168fec53cc3dbf5ebe56d0fe95c917ceea6d0d44e09bd92f8b"], 0x20) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e00000000000000009dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r6, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) (async) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x310, 0x148, 0x0, 0x148, 0x148, 0x148, 0x278, 0x240, 0x240, 0x278, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@multiport={{0x50}, {0x0, 0x3, [0x4e20, 0x4e21, 0x4e23, 0x4e23, 0x4e20, 0x4e20, 0x4e20, 0x4e00, 0x4e21, 0x4e22, 0x4e23, 0x4e23, 0x4e21, 0x4e21, 0x4e24], [0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e22, 0x4e24, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4c, 0x100, 0x2}}}, {{@ip={@local, @remote, 0xff000000, 0xffffff00, 'geneve0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x1, 0x2}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x2, 0x3, 0x1, 0x7}}, @common=@ttl={{0x28}, {0x0, 0xa3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x15, 0x5, 0x7, 0x9, 'snmp\x00', 'syz0\x00', {0xf7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) 2.019960083s ago: executing program 3 (id=2889): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000840)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1a, &(0x7f00000009c0)=ANY=[@ANYBLOB="852000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000180000000100000000000000001000001861000005000000000000000e00000000080500050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a68900008500000006000000182a0000", @ANYRES32, @ANYBLOB="00000000f9ffffff856d8219e27c169fab34625585490004000700"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x15, &(0x7f0000000240)=""/21, 0x41000, 0x44, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xb, 0xca, 0x81}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0xfc6f}, 0x94) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f00000000c0), 0x8) r3 = socket$can_raw(0x1d, 0x3, 0x1) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f00000005c0)="1a9ef439feffff090000000003001000", 0x10}], 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x148, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0xff000000], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000740), 0x4) sendmsg$can_raw(r3, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r4}, 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x449c0}, 0x4c085) r5 = socket$netlink(0x10, 0x3, 0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000340)="ee", &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r6, &(0x7f0000000780)}, 0x20) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000780)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="f899a43de8700687e388c2138ee87c0a3bf2adead903ac06"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f00000000c0)={0xfffffffc}, 0x10, 0x0, r1}, 0x94) 1.707311334s ago: executing program 0 (id=2891): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000009000000080000000200000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001000000000000000000000000000000000000000000000000000a35e8ef3b42cefc56ba55a3e96d93badca442e21275493ac6adbbba2"], 0x50) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000009000000080000000200000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001000000000000000000000000000000000000000000000000000a35e8ef3b42cefc56ba55a3e96d93badca442e21275493ac6adbbba2"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x9}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf, 0x11, r0, 0x100000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x5e, @multicast1, 0x4e23, 0x2, 'wrr\x00', 0x0, 0xfffffff8, 0x48}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_qrtr_TIOCOUTQ(r2, 0x5411, &(0x7f00000003c0)) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x80) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r6, @ANYBLOB="0100000000000000b2664b1e000008000300", @ANYRES32=r5, @ANYBLOB], 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x882af8110f435e13) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000300)=0x1, 0x4) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) setsockopt$inet_group_source_req(r7, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) (async) setsockopt$inet_group_source_req(r7, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x10, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x64}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x4, 0x6, 0x0, 0x9, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 1.706714943s ago: executing program 3 (id=2892): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x1a0, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x184, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f70b00594a3f"}, 0x0, 0x0, @default, @val, @void, [{0xdd, 0x5c, "5d923d4bdfcfb83c930cb6d06883434ba28ab214a944c18318696c59ee51bb88bb8c94c85941d6ac44e4d2aea91603213691b557b0f42b812c5c040fbe823eecc1805a2b2c120fcfa7c3ec7b8fc97e2d5fa198fd5ad998f508929575"}, {0xdd, 0x45, "0dfa2e3db3c49b9f566515002008786d3385bed8bf49548682b7de0d8467da47e898990b0c8230abace6a632d61c950527089fb646dfdcfc49ba7da75c00687f964a500440"}, {0xdd, 0x13, "d9f13d600131aef135f44b9b9d8c4ba78065e3"}, {0xdd, 0x9c, "0ddf05ac5e3e7661836afc61595dd747611840e2a31d2e2c4b841b4b97b931c7117cce8cdb089dddc1a2d8bc86975b203fb05584dc5a221b34e410ab9f29e8c2aa2500112de22c2110fac35ab5df8ac88f9d1c3bca2960b553de0d51fe70c28781a1113bf5dd94bdda9a46458f5c57e3c91101b11db520b070d8fccfbcef631473d240d4cfcbcecb33cec4aab124b6b05c61b2c316450d22adb02bd3"}, {0xdd, 0x6, "5c9409ef6d74"}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x3aeb359a15da3ab0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x20, r5, 0x2cb3b0415539fbbb, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x6, 0xd}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fedbdf251f000000080001004e00000008000380", @ANYRES32=r8], 0x30}, 0x1, 0x0, 0x0, 0x24008004}, 0x1400c004) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r5, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x400, 0x2a}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'nicvf0\x00', 0x1000}) socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r11, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r10], 0x38}}, 0x10) 1.470417157s ago: executing program 4 (id=2893): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'nicvf0\x00', 0x1}) (async) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0xfffffffffffffff9) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r2, @ANYBLOB="0800020096a68e15670b"], 0x20}}, 0x40000c0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x440b0) (rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 64) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) (async) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x10000005}) (async) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x68, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfffffffe}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}, @NFULA_CFG_MODE={0xa, 0x2, {0xf, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x40}, @NFULA_CFG_MODE={0xa, 0x2, {0xffffffff, 0x1}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFULA_CFG_MODE={0xa, 0x2, {0x526, 0x2}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x10001}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8003}]}, 0x68}, 0x1, 0x0, 0x0, 0x4044}, 0x1) 1.429784436s ago: executing program 0 (id=2894): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) (async, rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000002c0)={0x0, @aes128, 0x0, @desc4}) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x170, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [0x0, 0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x35}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x1}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7fd, 0x8}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x4000000000000000, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f8) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x403, 0x78bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async, rerun: 64) connect$netlink(r3, &(0x7f00000000c0)=@unspec, 0xc) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000380)=0x4, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, 0x2c, 0x117, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000300)={0x0, @tipc=@id={0x1e, 0x3, 0x2, {0x4e20}}, @l2={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6b55}, @nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x80000000}, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0xff, 0x4, 0x8}) (rerun: 64) 1.37574297s ago: executing program 3 (id=2895): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='}&.\'-\x16,%\x00', 0x0, &(0x7f0000000040)={@align=0x9044, {0x3, 0x6, 0xd74, 0x7}}, 0x5, &(0x7f0000000080), &(0x7f00000000c0)}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) sendto$inet6(r0, &(0x7f0000000180)="5351196d7d9a9309dea56965b00f7d9405d9b0f17eeb3ba7bab16fcf3c8b271d20d637c6b55973f72747fcbd968283ece3944dd1fc2bd91a2f8f2f6c6cb7a31e3935d7fc027210a7a23f4b895c5e126786996fe99572b2365ff8f77a6d3cb8a47f4f825f68115805e541f7bb8c20eb0eebe332ed9c63ae1cfed9a312e69077225fde", 0x82, 0x4000011, &(0x7f0000000240)={0xa, 0x4e20, 0x1, @empty, 0x400}, 0x1c) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/234, 0xea}], 0x1, 0x3, 0xe) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000940)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f00000005c0)={0x328, r2, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x12}}}}, [@NL80211_ATTR_FRAME={0x2fe, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @broadcast, @initial, {0x6, 0xe}, "", @value={0xa, 0x1, 0x3, 0x0, 0x9}, @value=@ver_80211n={0x0, 0x7f52, 0x2, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0x6e, "d68256bf536f8b8c69ccfc74ae4b4bfa047f62bd1ea4bf6a3daba577ab8c9443bbfc3fe278fa8240c370a90c64d3290442f95de5cf840f89a3411f3e4affd56ead575d181cbea5b82404759d3c287b7722d712487f2b609deb460fd4df1a1216f54b092e94ff92e8feff94b5fccc"}, {@device_b, @broadcast, 0x92, "4820feb74c488899e1f5c8a065f68274e794b5b48df8d594a27592a4b4f471082ad0171335be8e12139b1f274ce372592d371362e40534991cb968d63d9be1b1b43757a2c65d3ebda81d21f989c2fd525f153afdee0f524f0f62dabb084b66a9d295841bc1be521679e490b7d7910c7d334fda89bafea04058363598e74219cf53588b449a0d2721f46279e6952b4895af59"}, {@broadcast, @broadcast, 0x91, "9570bc292508466cec3205a6eb84614669b167efcb4987dfcbce76aaa5ab34663198969b7f27edeadb45261681196682909ddbf688e32ba6bd56bcba9a2f047e89c7818fcd1a8bc1ee52fa30e117ed6614c1264baf845677db59e27e02e6d0cb7c920304f7e3bb7dddbd889e2f285b94623b7299b023ae8ae29e8e3290c72702c378a5d977ab9611fc934a99b62aeb0a68"}, {@device_b, @broadcast, 0xb6, "69360c5b7f651b02af649f6406e667de0069e2fb6499264453b886893882064f07d41c2708058515a63daad180a0526c1c7ad6be983e3d8122cadc32084c7600e83dca66f6fc92e6e0e8f9105090507a03ac569e5d6440a087b6527ffd0477db8151c93c1595c1ece26b5c6b98eaca790dc23da36816a82f2eeaeebc722edfde5cf0b46039128933c1baaf046822c482c87c475d612d4d286de818de9c45667e7d1a9b05b0a50f36a1125858f9d16721911242d4f94c"}, {@broadcast, @broadcast, 0x4b, "66f06650704b145ede879aae146115600d21502ee613957f184dbbad8b4777082647c0f4239df5d740c9629fd268f8366477dba980945a66ae17d5d2e7654dc24e1387cf09af2eba3902bd"}]}}]}, 0x328}, 0x1, 0x0, 0x0, 0x20048091}, 0x8000) nanosleep(&(0x7f0000000980)={0x77359400}, &(0x7f00000009c0)) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000a00)=0x60, 0x2) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000ac0)={0x0, 0x3, 0xffffffffffffffff}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000ec0)={{r0}, 0x0, 0x1a, @inherit={0x60, &(0x7f0000000a40)={0x1, 0x3, 0xffff, 0x91f4, {0x11, 0x4, 0x4, 0x6, 0x8}, [0xe621, 0x2, 0xd8]}}, @devid=r4}) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000001ec0)={0x1, {{0xa, 0x4e24, 0x9d, @mcast2, 0xd}}}, 0x88) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000001f80)={0x7, {0x2, 0xc, 0x400, 0x9, 0x8}}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) shutdown(r0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000002000), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000020c0)={&(0x7f0000001fc0), 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x34, r5, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x8000, @udp='udp:syz2\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20060000}, 0x8000) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, &(0x7f0000002100)=0x8, &(0x7f0000002140)=0x2) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000002180), &(0x7f00000021c0)=0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000002200), r0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000002280), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000002480)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002440)={&(0x7f00000022c0)={0x158, r7, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x158}, 0x1, 0x0, 0x0, 0x80}, 0x44000819) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x28, r2, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfff, 0x6d}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000002640), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(r9, &(0x7f0000002780)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)={0x60, r10, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, 'nl80211\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, 'TIPC\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '^'}, @NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, '0000:00:10.0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040}, 0x8018011) 1.255449913s ago: executing program 0 (id=2897): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x100, 0x0, 0x0, {[@mss={0x2, 0x4}]}}}}}}}}, 0x0) 1.003516373s ago: executing program 0 (id=2900): r0 = socket(0x840000000002, 0x3, 0xfa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) unshare(0x20050580) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r2}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000f00)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES64=r0, @ANYRES32=r4], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r7, &(0x7f0000000140), 0xfffffdef) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x1, @ANYRES64=r6, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000200000002000000030000000000000000000000722e99dfe5db19ecd8716f2f2b9d958e6a34575c7c232f177a4822d5c6cc997604562f0cec814dd2dad9b2bf69e241750e4af28169035bfea47e0c10d9d9a7445f3fd933ea7a705c8e69f7168082aa1f9d9a2235bdb2680909dcc4846befab50c6d9ea00ec826b4f17be30a3940cab32b280e4cb9da6013a80d71dfc6cfb5cd3fa1b70c17559c804af1cdf91de72253ce9b7c73a9d246fd90bd6559ece5dd9bc2922cf3c9a0e0633930ce9f9efb12cf15285", @ANYRESDEC, @ANYRESOCT=r1], 0x50) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0600000004000000080000000c00000000000000b2c2317517e60d58ba57280ae863d7b9e6d3520758bf63f5f2e0df874100c2e0c1e1d99be653511d41b37b57b9b4d6d9f3868e7519e01cc929a6a36da60cae1fc426abfb8847b00e64a6ca875ceac989857e6fc1dfc29c8bfc9ece", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r8], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYRES64=r10], 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r12}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRES16=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1f, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x10, 0x20, &(0x7f0000000fc0)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES8=r5, @ANYRES32=r4, @ANYRESOCT=r1], &(0x7f0000000300)='GPL\x00', 0x4, 0x96, &(0x7f00000003c0)=""/150, 0x100, 0x6, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000480)={0x8007, 0x7}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x10, 0x5ff00000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r6, @ANYRESOCT=r11], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)="f2378b59e3e2e675fdec65e5c74b9b4e500f3daf6d00"/32, &(0x7f0000000cc0)="23e2f6f35bdfa862b435c7ec60b435241a8941a7dbb1f8a05f5bbe11dff7ccdde37fa22e028ee71f7b76676ff0850d623689e3428ce6211059590eae546ebabf6c1303e1ccd97d647161cac72ad8d17454aef6b5108e4f012eb8dd07eea3a1d084d52c14be26ccbffa3a9b1cc51132b1b8edcd43cdc9568f4cc0661c73222fa9d669ab5589f28148b2c0684c33cc9b130bfd54269a114bc30ea239cc139e6570f4527c7cb9c45492c8cb39377df5257cffdcea61338c6c5119ac24aabc2e05b5f80c103aaa40360adaa531a70880cd2ed4d87541cabbac4399a5d038e286de", 0xffffffff, r4}, 0x38) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="810902000000000000000300000008000100000000001c0007801800018008000100", @ANYRESOCT=0x0], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)) 832.158085ms ago: executing program 4 (id=2901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x40, 0x3, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000004080101000000000000000002000003060002408808000f2300030011000000"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000800) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x3d) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000240)=0x3, 0x4) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) 831.765399ms ago: executing program 1 (id=2902): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r3, &(0x7f0000000a40)=[{&(0x7f00000007c0)='p', 0x1}], 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) bind$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg(r0, &(0x7f0000000040), 0x0, 0x0) 744.17326ms ago: executing program 4 (id=2903): r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_buf(r0, 0x0, 0x4, 0x0, &(0x7f0000000300)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000360001000000000000000000010100800c00010007000000000000001400030000000000000040"], 0x114}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000480)=0x78d) (async) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000480)=0x78d) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) listen(r6, 0x7) (async) listen(r6, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r5, 0x7) (async) listen(r5, 0x7) ioctl$TUNGETVNETLE(r4, 0x800454dd, &(0x7f0000000440)) setsockopt$inet6_tcp_int(r3, 0x6, 0x18, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100370c57411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048a0a6c35ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e39896f9f689bc06f4800d5c957102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f00000009c0)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d918ecf25bcd50415b0b23318fd574b1924b09351a3574df9ac47ca44e3a884162a1531d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100dd0180ffff32420677397aa63e880adc56d03d8799429f33741886bd6c4065bbe5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e865b94e1918eadb1cdf7a62c2ff4c2c3f60c041089687da21e23c5045f937c99529fe3123a312884923e0f34226789fc8e53129247ecf183588e3", 0xf3}, {&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000003b80)="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", 0xda9}, {&(0x7f0000000740)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b33aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a967d85159658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f0153a88f5", 0xaf}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e3c5dbbef439a209f049ad8d4f9447506fd70b000008246758f684f43999b717e119d1e9d46da8a0c25e7e3771b0cc1c56948171260ed44c97919f70210c914c1098c9ac622d460000ae376280c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d00000", 0x9c}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547eed457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x75}], 0x7}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000580)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000580)=0x40) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r9, r7, 0x26, 0x0, @val=@netfilter={0x0, 0x1, 0xea}}, 0x20) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r9, r7, 0x26, 0x0, @val=@netfilter={0x0, 0x1, 0xea}}, 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20020010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000208020300000000000000000300000a05000300110000000900010073797a300000000006000240883e0000060002400e9a0000090001fc72797a31000000001c00048008000340800000010800044000000008080005400000aeaa0600024000600000"], 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0x4000050) 685.532075ms ago: executing program 1 (id=2904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe880000000000000000000000000001ff01000000000000000000000000000100000000000000820000000033000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000001e308bba0100000000019f2b"], 0xf8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000440)=ANY=[@ANYRES64=r0], 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0xcd, "c516e2305ca0545d201373bf4e4563dfbf91d136a42427ff8256d025bfbad48f08682d4e971463c56c2951f00802dd5d42800b2cccab3e9575c18c5583ff699a6b23a9f7b56d141b389fda265ca41cda87a8091b0ee6347395e61efa82f4bd78116dc7ad52dcc147a797a4a0ca8b1c31715c3230d42e582033e313ae881d64787bab5f12ec3c0084e28975a0580d690e66c3bb3bdbb14f679002bcb7131e5ccdc0835634aa0ec637339e425d639dbb094d8f7c54e00b62a001e48daf1b2d5e95fa7f66e83787947f0b7630bd6e"}, &(0x7f0000000240)=0xd5) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000280)={r3, 0x81, 0x7}, &(0x7f0000000300)=0x8) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000346fc9290000000000000000000a40000000060a0b0400000000000000000200001014000480100001800986208703a7c3856d83fb422d4a0001006d6173710000f5000900010073797a30000000000900020073797a320000000014004000111000000000000000000000f500000a"], 0x68}}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001c40)="5346f7f87552", 0x6}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 583.832902ms ago: executing program 1 (id=2905): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'nicvf0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x7, 0xa0, "3f545fa51b9a2ab8086fd1aab6cc3e388425a375422e244a948d8672b938a01efe22ccb565c32a1da4c44fc84b5781c35d4a56e3c913f4cca2b8dab9c3729e5b916851d902311429f8b9df58d4676ff5dc2158f23a33efaf081172cfc163234c866a99459824d6507420d5f7e0eb7cb306381d40255e1ac84aed10bb19de948ab455c1135074e91306643b4f3f9cc2d7f804e186378bdd1d620c5f702a218fae"}}) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) syz_emit_ethernet(0x13f, &(0x7f0000000500)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x109, 0x3a, 0xff, @rand_addr=' \x01\x00', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0xd6, '\x00', @ipv4={'\x00', '\xff\xff', @empty}, [{0x19, 0x1e, "0a824e09786ecdf1f8f79e9da8b0d0bd6b334ac4ffd705951e76f87b1be8587d381d32da950ee621954f048f12939a9e7609713705713af6f9f6d3328964fddbcc0ad2baa9630ccc0981c5cdd2beae6bc85917ba25d3598d92aec42753dfc9c220f3380cb0c4f233c16589b4f907806b5da41ff3b62bebf785fa755d8d28fdfaeb90bedd43df57ce64a10c18c6ea058fc59575ad1f0436b8458ebab0159edddf8466c0b57add56f8620ca873ce792737a91848380afbe71f9c5e695492ea8d7fda6b5a6a7bd5e4c8d188eb26a21e986e7d20ef358ab31568c9ed74c6cbcc3ff83f413f602c49a2ab67bab5e2aeafb8"}]}}}}}}, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xc4, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x33}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x10}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x40890) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001cc0), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000002000)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 557.284787ms ago: executing program 1 (id=2906): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x30000, 0x1, 0x0, 0xffffffffffffffff, 0x6f3abde0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f0000"], 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = accept4(r1, &(0x7f0000000880)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000900)=0x80, 0x80000) getsockopt$sock_int(r2, 0x1, 0x2d, &(0x7f0000000940), &(0x7f0000000980)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r0, 0x0, 0x0, &(0x7f0000000080)={@_ha_fsid={[0x8, 0x5]}, {0xb, 0xe, 0x6, 0x81}}, 0xd62e, &(0x7f00000000c0)={@_ha_fsid}, 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x800) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a300000000009000200"], 0x110}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001e80)=[{{&(0x7f0000000280)=@ax25={{}, [@bcast, @null, @null, @rose, @netrom, @remote, @null, @bcast]}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000000580)=""/248, 0xf8}, {&(0x7f0000000680)=""/251, 0xfb}, {&(0x7f0000000780)=""/232, 0xe8}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x5, &(0x7f0000001c00)=""/28, 0x1c}, 0x3}, {{&(0x7f0000001c40)=@un=@abs, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001cc0)=""/108, 0x6c}], 0x1, &(0x7f0000001d80)=""/196, 0xc4}}], 0x2, 0x40012003, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0xe) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r6, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r8}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r10, &(0x7f00000002c0), 0x0}, 0x20) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010069703667726500000c000280080004000600000008000300", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) getsockname$packet(r3, &(0x7f0000000040), &(0x7f0000000180)=0x14) 470.149634ms ago: executing program 4 (id=2907): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'pimreg\x00', {0x2, 0x0, @remote}}) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x4000, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) sendmsg$inet6(r1, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000680)=[@pktinfo={{0x24, 0x29, 0x3e, {@private0}}}], 0x28}, 0x4004000) unshare(0x20000400) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x3c1, 0x3, 0x510, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x440, 0x2e8, 0x2e8, 0x440, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r3}}, @common=@inet=@dccp={{0x30}, {[0x4e23, 0x4e24], [0x4e20, 0x4e20], 0xb, 0x4, 0x8, 0x4}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x20000000}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x11, 0xe, 0x1}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x3, 0xec, 0x5, 0x400, 'syz1\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 388.182096ms ago: executing program 3 (id=2908): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)='%pi6 \x00'}, 0x20) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xfffffffd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, &(0x7f0000000140)}, 0x20) unshare(0x8000400) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f0000000600)}, 0x10) 379.774045ms ago: executing program 1 (id=2909): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x52, 0x1, 0x0, 0x25dfdbfd, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x4) unshare(0x22020600) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x1, 0x0, &(0x7f0000000000)) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000001000000000000008000200095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r2}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x41, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 190.82366ms ago: executing program 3 (id=2910): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@broadcast, 0x0, 0x0, 0x50, 0x0, [{@dev}, {@broadcast}, {@empty}, {@multicast2}, {@empty}]}}) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) 188.361267ms ago: executing program 4 (id=2911): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xd, '\x00', r3, 0xffffffffffffffff, 0x5, 0x4}, 0x50) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000000c0)={0x0, 'ip6gre0\x00', {0x2}, 0x9}) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xd, '\x00', r3, 0xffffffffffffffff, 0x5, 0x4}, 0x50) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000000c0)={0x0, 'ip6gre0\x00', {0x2}, 0x9}) (async) 85.320176ms ago: executing program 4 (id=2912): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x24, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000400)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6d, r2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x9c7ab000) preadv(r3, &(0x7f0000000500), 0x0, 0x4c, 0x3) 66.134217ms ago: executing program 0 (id=2913): unshare(0x2a000000) unshare(0x2c020400) socket(0x40000000015, 0x5, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) unshare(0x6020400) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x0, 0x0, 0x0, [0x100000000008, 0x200000000000075f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0x78) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x83}, @TCA_RATE={0x6, 0x5, {0x48, 0x6}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000040000000800020000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="030000a001000000020000800400000005a1dbdc5b780d05"], 0x48}, 0x1, 0x0, 0x0, 0x14041}, 0x20000000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x8}, {0x7, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x88) close(0x4) 0s ago: executing program 1 (id=2914): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e83, 0xfffffffe, 0xffffffff, {0x2, 0x14, 0x10, 0x4, 0xff, 0x0, 0xfe, 0x2, 0x300}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0xffffff7f}, 0x80) r4 = socket(0xa, 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000040)={0x6, 0xa, 0x4, 0x2, 0x6, 0x0, 0x0, 0x8, 0x80, 0x8, 0x0, 0xfe, 0x20}, 0xe) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r9, 0x8}, &(0x7f0000000340)=0x8) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8100020}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004000}, 0x44000) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000017c0)={0x3c, r10, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) ioctl$FITRIM(r11, 0xc0185879, &(0x7f0000000500)={0x40, 0xc0000000000000, 0x6}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r11, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) kernel console output (not intermixed with test programs): 0][T11045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.491290][T11045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.500708][T11045] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 269.591312][T11022] »»»»»» speed is unknown, defaulting to 1000 [ 269.820214][T11062] __nla_validate_parse: 6 callbacks suppressed [ 269.820235][T11062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1274'. [ 269.837666][T11062] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1274'. [ 270.029184][T11063] veth1_vlan: Caught tx_queue_len zero misconfig [ 270.041554][T11064] netlink: 'syz.3.1273': attribute type 3 has an invalid length. [ 270.347653][T11076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1279'. [ 270.388282][T11076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1279'. [ 270.461554][T11079] syzkaller0: entered promiscuous mode [ 270.496870][T11079] syzkaller0: entered allmulticast mode [ 270.571954][T11082] netlink: set zone limit has 4 unknown bytes [ 270.737541][T11076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.767815][T11082] netlink: set zone limit has 4 unknown bytes [ 270.777547][T11076] bridge0: port 3(dummy0) entered blocking state [ 270.785713][T11076] bridge0: port 3(dummy0) entered forwarding state [ 270.811245][T11092] netlink: zone id is out of range [ 270.811983][T11076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.821010][T11092] netlink: zone id is out of range [ 270.829162][T11092] netlink: zone id is out of range [ 270.834580][T11092] netlink: zone id is out of range [ 270.839896][T11092] netlink: zone id is out of range [ 270.846739][T11092] netlink: zone id is out of range [ 270.852078][T11092] netlink: zone id is out of range [ 270.857501][T11092] netlink: zone id is out of range [ 270.891852][T11076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.902466][T11076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.917271][T11076] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 270.928825][T11076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.941798][T11076] hsr0: left promiscuous mode [ 270.952352][T11076] veth1_vlan: left promiscuous mode [ 270.964144][T11076] vlan1: left promiscuous mode [ 270.972591][T11076] vlan1: left allmulticast mode [ 270.978057][T11076] veth0_vlan: left allmulticast mode [ 270.984925][T11076] veth1_vlan: entered promiscuous mode [ 270.992968][T11076] tipc: Resetting bearer [ 271.000315][T11076] tipc: Resetting bearer [ 271.011224][T11076] veth1_macvtap: left promiscuous mode [ 271.018614][T11076] veth0_macvtap: left promiscuous mode [ 271.026612][T11076] veth0_macvtap: entered promiscuous mode [ 271.033998][T11076] veth1_macvtap: entered promiscuous mode [ 271.088179][T11076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 271.099287][T11076] 8021q: adding VLAN 0 to HW filter on device bond2 [ 271.179935][T11076] 8021q: adding VLAN 0 to HW filter on device bond3 [ 271.190047][T11076] geneve3: left promiscuous mode [ 271.202207][T11076] 8021q: adding VLAN 0 to HW filter on device eth0 [ 271.213987][T11076] 8021q: adding VLAN 0 to HW filter on device eth1 [ 271.225421][T11076] 8021q: adding VLAN 0 to HW filter on device eth2 [ 271.247017][T11076] 8021q: adding VLAN 0 to HW filter on device eth3 [ 271.293028][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.300517][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.423475][ T5723] syz0: Port: 1 Link ACTIVE [ 271.844567][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 271.940004][T11115] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1289'. [ 271.963897][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1289'. [ 272.080428][T11115] bridge3: port 1(veth7) entered blocking state [ 272.089075][T11115] bridge3: port 1(veth7) entered disabled state [ 272.097301][T11115] veth7: entered allmulticast mode [ 272.112204][T11115] veth7: entered promiscuous mode [ 272.125359][T11118] bridge3: port 2(veth0_to_bond) entered blocking state [ 272.133270][T11118] bridge3: port 2(veth0_to_bond) entered disabled state [ 272.143735][T11118] veth0_to_bond: entered allmulticast mode [ 272.152458][T11118] veth0_to_bond: entered promiscuous mode [ 272.810597][T11145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1296'. [ 272.840149][T11148] IPVS: set_ctl: invalid protocol: 59 172.20.20.54:20002 [ 272.916347][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1298'. [ 272.954367][T11150] netlink: 'syz.1.1298': attribute type 30 has an invalid length. [ 272.989606][T11151] netlink: 'syz.1.1298': attribute type 1 has an invalid length. [ 273.005356][T11151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1298'. [ 273.052719][ T57] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.078865][ T57] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.103693][ T57] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.131803][ T6677] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.336629][T11163] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1301'. [ 273.457926][T11161] bridge0: port 3(dummy0) entered disabled state [ 273.464844][T11161] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.517812][T11161] dummy0: left allmulticast mode [ 273.535855][T11161] dummy0: left promiscuous mode [ 273.544779][T11161] bridge0: port 3(dummy0) entered disabled state [ 273.600389][T11161] bridge_slave_1: left allmulticast mode [ 273.609341][T11161] bridge_slave_1: left promiscuous mode [ 273.617239][T11161] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.634086][T11161] bond0: (slave bond_slave_0): Releasing backup interface [ 273.651316][T11161] bond0: (slave bond_slave_1): Releasing backup interface [ 273.675728][T11161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.695689][T11161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.739004][T11161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.776476][T11161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.278478][ T29] audit: type=1804 audit(1778769279.629:20): pid=11195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1308" name="/newroot/290/cgroup.controllers" dev="tmpfs" ino=1502 res=1 errno=0 [ 274.371992][ T29] audit: type=1800 audit(1778769279.629:21): pid=11195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1308" name="cgroup.controllers" dev="tmpfs" ino=1502 res=0 errno=0 [ 274.508943][T11208] netlink: 'syz.1.1312': attribute type 12 has an invalid length. [ 274.528979][T11208] netlink: 'syz.1.1312': attribute type 11 has an invalid length. [ 274.829181][T11230] netlink: 'syz.3.1319': attribute type 1 has an invalid length. [ 274.986193][T11230] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 275.114069][T11242] __nla_validate_parse: 6 callbacks suppressed [ 275.114090][T11242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1320'. [ 275.199998][T11225] netlink: 'syz.1.1318': attribute type 4 has an invalid length. [ 275.604410][ C1] bridge0: port 1(1¾x9ÿ) entered forwarding state [ 275.611122][ C1] bridge0: topology change detected, propagating [ 275.618089][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.625382][ C1] bridge0: topology change detected, propagating [ 276.152237][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'. [ 276.200929][T11299] netlink: 'syz.0.1338': attribute type 6 has an invalid length. [ 276.230903][T11301] netlink: 'syz.0.1338': attribute type 6 has an invalid length. [ 276.495146][ T29] audit: type=1804 audit(1778769281.849:22): pid=11311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1341" name="/newroot/281/cgroup.controllers" dev="tmpfs" ino=1452 res=1 errno=0 [ 276.586377][ T29] audit: type=1800 audit(1778769281.879:23): pid=11311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1341" name="cgroup.controllers" dev="tmpfs" ino=1452 res=0 errno=0 [ 276.933841][T11326] netlink: 7636 bytes leftover after parsing attributes in process `syz.0.1344'. [ 276.979369][T11326] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1344'. [ 276.998315][T11285] »»»»»» speed is unknown, defaulting to 1000 [ 277.374687][T11353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1349'. [ 277.532081][ T5645] Bluetooth: hci4: link tx timeout [ 277.538935][ T5645] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 277.547755][ T50] Bluetooth: hci4: link tx timeout [ 277.553182][ T50] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 277.721039][T11358] bond6: option arp_interval: invalid value (18446744073709551615) [ 277.729775][T11358] bond6: option arp_interval: allowed values 0 - 2147483647 [ 277.741964][T11358] bond6 (unregistering): Released all slaves [ 277.773252][T11313] »»»»»» speed is unknown, defaulting to 1000 [ 277.776523][ T50] Bluetooth: hci4: link tx timeout [ 277.786168][ T50] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 277.817084][ T50] Bluetooth: hci4: link tx timeout [ 277.822368][ T50] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 277.855041][T11357] netlink: 'syz.1.1351': attribute type 1 has an invalid length. [ 277.863460][T11357] netlink: 'syz.1.1351': attribute type 2 has an invalid length. [ 277.876488][ T50] Bluetooth: hci4: link tx timeout [ 277.881678][ T50] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 278.726290][ T50] Bluetooth: hci4: link tx timeout [ 278.731682][ T50] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 278.906323][T11391] bridge0: port 3(vlan1) entered blocking state [ 278.933275][T11391] bridge0: port 3(vlan1) entered disabled state [ 278.946940][T11391] vlan1: entered allmulticast mode [ 278.958594][T11391] bridge0: entered allmulticast mode [ 278.980078][T11391] vlan1: left allmulticast mode [ 278.995449][T11391] bridge0: left allmulticast mode [ 279.054327][ T50] Bluetooth: hci4: link tx timeout [ 279.059643][ T50] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 279.336749][ T50] Bluetooth: hci4: link tx timeout [ 279.338330][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1358'. [ 279.341948][ T50] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 279.364583][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1358'. [ 279.459529][T11367] »»»»»» speed is unknown, defaulting to 1000 [ 279.471686][T11409] netlink: 'syz.4.1359': attribute type 3 has an invalid length. [ 279.566270][T11420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1361'. [ 279.591085][T11421] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1362'. [ 279.609910][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 279.637587][T11421] netlink: 'syz.1.1362': attribute type 9 has an invalid length. [ 279.651509][T11421] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1362'. [ 279.655675][ T50] Bluetooth: hci4: link tx timeout [ 279.803579][T11427] xt_TPROXY: Can be used only with -p tcp or -p udp [ 279.983300][T11439] Bluetooth: MGMT ver 1.23 [ 280.084452][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 280.368264][T11462] __nla_validate_parse: 4 callbacks suppressed [ 280.368281][T11462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1372'. [ 280.394688][T11464] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1370'. [ 281.837979][T11447] »»»»»» speed is unknown, defaulting to 1000 [ 282.501588][T11555] netlink: 'syz.0.1389': attribute type 1 has an invalid length. [ 282.628397][T11555] 8021q: adding VLAN 0 to HW filter on device bond6 [ 282.787310][T11473] »»»»»» speed is unknown, defaulting to 1000 [ 283.382050][T11589] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 283.399909][T11589] bond8 (unregistering): Released all slaves [ 284.842947][ T29] audit: type=1800 audit(1778769290.199:24): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1403" name="memory.events" dev="tmpfs" ino=1347 res=0 errno=0 [ 285.249429][ T1340] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 285.560865][T11672] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1411'. [ 285.603393][T11672] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1411'. [ 285.618971][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1410'. [ 285.636077][T11672] netlink: 'syz.1.1411': attribute type 5 has an invalid length. [ 285.663485][T11672] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1411'. [ 285.719854][T11672] netlink: 'syz.1.1411': attribute type 1 has an invalid length. [ 285.748398][T11653] »»»»»» speed is unknown, defaulting to 1000 [ 285.771102][T11682] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 285.771102][T11682] Please contact the netfilter-devel mailing list or update your nftables rules. [ 285.828035][T11672] 8021q: adding VLAN 0 to HW filter on device bond5 [ 285.849262][T11678] bond5 (unregistering): Released all slaves [ 285.903864][T11688] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1412'. [ 285.978175][T11672] netlink: 'syz.1.1411': attribute type 3 has an invalid length. [ 285.991984][T11672] netlink: 'syz.1.1411': attribute type 3 has an invalid length. [ 286.035405][T11691] Cannot find del_set index 14804 as target [ 287.971025][T11648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.980667][T11682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1412'. [ 288.266047][T11723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1422'. [ 288.285530][T11723] netlink: 'syz.4.1422': attribute type 29 has an invalid length. [ 288.303752][T11723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1422'. [ 288.316310][T11721] tipc: Enabled bearer , priority 0 [ 288.330150][T11726] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1423'. [ 288.345291][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1422'. [ 288.393159][T11723] veth0: entered promiscuous mode [ 288.397717][T11727] netlink: 'syz.4.1422': attribute type 29 has an invalid length. [ 288.468061][T11720] veth0: left promiscuous mode [ 288.485323][T11734] xt_TCPMSS: Only works on TCP SYN packets [ 289.014149][T11766] netlink: 'syz.0.1432': attribute type 21 has an invalid length. [ 289.054663][T11765] netlink: 'syz.0.1432': attribute type 21 has an invalid length. [ 289.217607][ T29] audit: type=1800 audit(1778769294.579:25): pid=11775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1435" name=CB dev="tmpfs" ino=1333 res=0 errno=0 [ 289.444934][ T24] tipc: Node number set to 3238231558 [ 289.455428][T11796] netlink: 'syz.3.1441': attribute type 5 has an invalid length. [ 289.630362][T11804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.641165][T11804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.720572][T11811] xt_hashlimit: size too large, truncated to 1048576 [ 289.734855][T11811] xt_hashlimit: max too large, truncated to 1048576 [ 289.805856][T11804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.815341][T11804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.787610][T11885] __nla_validate_parse: 12 callbacks suppressed [ 291.787628][T11885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1465'. [ 291.945579][T11848] »»»»»» speed is unknown, defaulting to 1000 [ 291.954980][T11895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1466'. [ 292.109093][T11901] netlink: 'syz.1.1465': attribute type 1 has an invalid length. [ 292.253824][T11892] »»»»»» speed is unknown, defaulting to 1000 [ 292.418194][T11905] netlink: 'syz.3.1468': attribute type 16 has an invalid length. [ 292.444733][T11905] netlink: 'syz.3.1468': attribute type 3 has an invalid length. [ 292.455804][T11905] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.1468'. [ 292.751534][T11897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1467'. [ 293.275199][T11926] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1475'. [ 294.818768][T11887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 295.441329][T11966] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1488'. [ 295.496585][T11968] netlink: 'syz.2.1486': attribute type 1 has an invalid length. [ 295.536241][T11968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1486'. [ 295.946449][T11988] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1490'. [ 296.724874][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 296.803481][T12017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1498'. [ 297.017656][T12026] tap0: tun_chr_ioctl cmd 1074025673 [ 297.287657][T12038] veth0: entered promiscuous mode [ 297.309005][T12041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1504'. [ 297.341174][T12037] veth0: left promiscuous mode [ 297.521017][T12047] net_ratelimit: 394 callbacks suppressed [ 297.521037][T12047] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 297.685852][T12056] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.1510'. [ 297.733249][T12059] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1511'. [ 297.923881][T12073] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1516'. [ 298.172572][T12070] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.197853][T12070] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.710501][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1519'. [ 300.863229][T12070] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.873648][T12070] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.045831][T12070] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.080424][T12070] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.262569][T12070] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.279717][T12070] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.327841][T12127] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_1 [ 301.363783][T12130] syzkaller0: entered promiscuous mode [ 301.381774][T12130] syzkaller0: entered allmulticast mode [ 301.553004][ T1340] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.570758][ T1340] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.651860][ T1340] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.668289][ T1340] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.698725][ T1340] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.713872][ T1340] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.758282][ T1340] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.776674][ T1340] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.114081][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1538'. [ 302.413227][T12180] syzkaller0: entered promiscuous mode [ 302.419301][T12180] syzkaller0: entered allmulticast mode [ 302.428150][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1542'. [ 302.539341][ T29] audit: type=1107 audit(1778769307.899:26): pid=12183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='l­iBŠ– -I\JáˆKŒxeä¶NWÀa'±N n‡V˜þl‰àŽ–¹‡z¢' [ 302.590098][T12159] »»»»»» speed is unknown, defaulting to 1000 [ 302.656521][T12187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1546'. [ 303.173425][T12196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1548'. [ 303.836745][T12193] »»»»»» speed is unknown, defaulting to 1000 [ 304.327469][T12236] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 304.399074][T12246] hmó3)óÿ: entered promiscuous mode [ 304.599856][T12246] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1561'. [ 304.662834][T12250] tipc: Resetting bearer [ 304.761033][T12250] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 304.783877][T12225] »»»»»» speed is unknown, defaulting to 1000 [ 304.934705][T12261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1567'. [ 304.955670][ T29] audit: type=1804 audit(1778769310.319:27): pid=12261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1567" name="/newroot/328/cgroup.controllers" dev="tmpfs" ino=1697 res=1 errno=0 [ 305.010913][ T29] audit: type=1800 audit(1778769310.339:28): pid=12261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1567" name="cgroup.controllers" dev="tmpfs" ino=1697 res=0 errno=0 [ 305.075309][ T29] audit: type=1804 audit(1778769310.369:29): pid=12261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1567" name="/newroot/328/cgroup.controllers" dev="tmpfs" ino=1697 res=1 errno=0 [ 305.143672][T12271] IPv6: Can't replace route, no match found [ 305.157570][T12271] IPv6: Can't replace route, no match found [ 305.360733][T12282] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1572'. [ 305.427106][T12281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1571'. [ 305.428109][T12282] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1572'. [ 305.520237][T12285] bridge5: port 1(veth13) entered blocking state [ 305.526981][T12285] bridge5: port 1(veth13) entered disabled state [ 305.536298][T12285] veth13: entered allmulticast mode [ 305.545695][T12285] veth13: entered promiscuous mode [ 305.661373][T12281] bridge5: port 2(veth15) entered blocking state [ 305.694179][T12281] bridge5: port 2(veth15) entered disabled state [ 305.715170][T12281] veth15: entered allmulticast mode [ 305.732747][T12281] veth15: entered promiscuous mode [ 305.802212][T12292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1574'. [ 305.959239][T12298] block nbd3: Unsupported socket: should be TCP or UNIX. [ 306.705242][T12327] netlink: 'syz.1.1582': attribute type 2 has an invalid length. [ 306.723615][T12327] netlink: 'syz.1.1582': attribute type 2 has an invalid length. [ 306.841837][T12330] xt_l2tp: v2 doesn't support IP mode [ 306.861874][T12332] macsec1: entered promiscuous mode [ 307.102578][T12341] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.277909][T12350] __nla_validate_parse: 3 callbacks suppressed [ 307.277922][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1589'. [ 307.332335][T12341] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.408886][T12341] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.485484][T12341] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.695306][ T6662] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.730166][ T6662] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.745730][T12370] xt_hashlimit: size too large, truncated to 1048576 [ 307.770910][ T1350] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.804621][ T6662] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.887547][T12343] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 308.182095][T12375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1593'. [ 308.305090][T12378] netem: change failed [ 308.314936][T12375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1593'. [ 308.346078][T12375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1593'. [ 308.448116][T12391] netlink: 'syz.1.1597': attribute type 1 has an invalid length. [ 308.603370][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1598'. [ 308.705237][T12404] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1599'. [ 308.706359][T12401] netlink: 'syz.0.1598': attribute type 1 has an invalid length. [ 308.738873][T12401] netlink: 'syz.0.1598': attribute type 1 has an invalid length. [ 308.748859][T12405] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1601'. [ 308.769194][T12401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1598'. [ 308.781776][T12404] xt_TCPMSS: Only works on TCP SYN packets [ 308.789458][T12401] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1598'. [ 308.814598][T12394] netlink: 'syz.0.1598': attribute type 1 has an invalid length. [ 308.815138][T12405] veth1_to_team: Caught tx_queue_len zero misconfig [ 308.828979][T12394] netlink: 'syz.0.1598': attribute type 1 has an invalid length. [ 308.842851][T12394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1598'. [ 309.241497][T12414] netlink: 'syz.1.1604': attribute type 10 has an invalid length. [ 309.359435][T12429] netlink: 'syz.4.1607': attribute type 1 has an invalid length. [ 309.485045][T12432] 8021q: adding VLAN 0 to HW filter on device bond5 [ 309.561873][T12429] 8021q: adding VLAN 0 to HW filter on device bond5 [ 309.598128][T12429] bond5: (slave geneve3): making interface the new active one [ 309.620897][T12429] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 309.651116][T12435] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR [ 309.662519][ T156] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 309.730025][ T156] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 309.948866][T12439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.990761][T12439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.072548][T12439] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 310.089060][ T156] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 310.101848][ T156] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 310.555914][T12473] block nbd3: Unsupported socket: should be TCP or UNIX. [ 310.973227][T12483] tipc: Enabling of bearer rejected, failed to enable media [ 311.156954][T12493] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 311.841386][T12524] 8021q: adding VLAN 0 to HW filter on device bond7 [ 312.487892][T12553] syzkaller0: entered promiscuous mode [ 312.499341][T12553] syzkaller0: entered allmulticast mode [ 312.512429][T12496] »»»»»» speed is unknown, defaulting to 1000 [ 313.089075][T12588] __nla_validate_parse: 14 callbacks suppressed [ 313.089094][T12588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1639'. [ 313.203477][T12595] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1641'. [ 313.865791][T12617] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1644'. [ 313.886810][T12590] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1640'. [ 313.979146][T12590] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1640'. [ 313.995531][T12624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1646'. [ 314.094115][T12624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1646'. [ 314.116435][T12624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1646'. [ 314.263888][T12632] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 314.417716][T12643] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1649'. [ 315.271794][T12671] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 315.346400][T12696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1660'. [ 315.584336][T12703] netlink: 'syz.2.1661': attribute type 21 has an invalid length. [ 315.650803][ T6669] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.658091][ T6669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.770269][T12678] syzkaller1: entered promiscuous mode [ 315.776680][T12678] syzkaller1: entered allmulticast mode [ 315.786398][T12703] netlink: 'syz.2.1661': attribute type 1 has an invalid length. [ 316.056436][T12724] dummy0: entered promiscuous mode [ 316.120013][T12724] batadv0: entered promiscuous mode [ 316.267292][T12736] xt_CT: You must specify a L4 protocol and not use inversions on it [ 316.281006][T12739] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 316.394038][T12739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.443701][T12739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.492483][T12739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.526957][T12736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.545709][T12739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.582506][T12739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.842212][T12771] netlink: 'syz.3.1673': attribute type 30 has an invalid length. [ 317.003356][T12771] bond5: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 317.033176][T12771] bond5 (unregistering): Released all slaves [ 317.126218][T12783] syzkaller0: entered promiscuous mode [ 317.143809][T12783] syzkaller0: entered allmulticast mode [ 317.207771][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.261188][T12783] bond0: entered promiscuous mode [ 317.287940][T12783] bond_slave_0: entered promiscuous mode [ 317.301865][T12783] bond_slave_1: entered promiscuous mode [ 317.317818][T12783] dummy0: entered promiscuous mode [ 317.336748][T12783] batadv0: entered promiscuous mode [ 317.363700][T12783] debugfs: 'hsr1' already exists in 'hsr' [ 317.389920][T12783] Cannot create hsr debugfs directory [ 317.411475][T12783] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 317.434635][T12783] bond0: left promiscuous mode [ 317.452174][T12783] bond_slave_0: left promiscuous mode [ 317.468377][T12783] bond_slave_1: left promiscuous mode [ 317.481897][T12783] dummy0: left promiscuous mode [ 317.516038][T12783] batadv0: left promiscuous mode [ 317.832852][T12818] netlink: 'syz.3.1682': attribute type 1 has an invalid length. [ 318.151853][T12833] syzkaller0: entered promiscuous mode [ 318.174797][T12833] syzkaller0: entered allmulticast mode [ 318.201922][T12833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.537974][T12850] __nla_validate_parse: 5 callbacks suppressed [ 318.537992][T12850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1691'. [ 318.748102][T12850] smbdirect: ib_dev[syú2] removed [ 318.935002][T12868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1695'. [ 319.091422][T12877] netem: change failed [ 319.395446][T12852] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 319.538849][T12894] tipc: Failed to remove unknown binding: 66,1,1/2978201972:3695508605/3695508607 [ 319.629863][T12894] tipc: Failed to remove unknown binding: 66,1,1/2978201972:3695508605/3695508607 [ 320.041775][T12928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1708'. [ 320.149130][T12930] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1709'. [ 320.181296][T12933] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1710'. [ 320.539704][ T5736] bridge0: entered promiscuous mode [ 321.291055][T12978] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1721'. [ 321.575290][T12994] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1723'. [ 321.940341][T13007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1727'. [ 322.515469][T12996] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.527773][T12996] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.585463][T13014] –: renamed from dummy0 (while UP) [ 322.756826][T12996] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.784847][T12996] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.832667][T13019] FAULT_INJECTION: forcing a failure. [ 322.832667][T13019] name failslab, interval 1, probability 0, space 0, times 0 [ 322.877547][T13019] CPU: 0 UID: 0 PID: 13019 Comm: syz.1.1731 Not tainted syzkaller #0 PREEMPT(full) [ 322.877572][T13019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 322.877593][T13019] Call Trace: [ 322.877601][T13019] [ 322.877608][T13019] dump_stack_lvl+0xe8/0x150 [ 322.877634][T13019] should_fail_ex+0x412/0x560 [ 322.877663][T13019] should_failslab+0xa8/0x100 [ 322.877690][T13019] __kvmalloc_node_noprof+0x178/0x8a0 [ 322.877715][T13019] ? alloc_netdev_mqs+0xa8/0x1210 [ 322.877740][T13019] alloc_netdev_mqs+0xa8/0x1210 [ 322.877757][T13019] ? __pfx_vlan_setup+0x10/0x10 [ 322.877781][T13019] rtnl_create_link+0x31f/0xd70 [ 322.877807][T13019] rtnl_newlink_create+0x277/0xb70 [ 322.877831][T13019] ? __pfx___nla_validate_parse+0x10/0x10 [ 322.877860][T13019] ? __mutex_lock+0x608/0x1550 [ 322.877879][T13019] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 322.877905][T13019] ? __pfx___mutex_lock+0x10/0x10 [ 322.877931][T13019] ? ns_capable+0x89/0xe0 [ 322.877956][T13019] rtnl_newlink+0x166a/0x1bb0 [ 322.877993][T13019] ? __pfx_rtnl_newlink+0x10/0x10 [ 322.878021][T13019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.878074][T13019] ? kasan_quarantine_put+0xbb/0x1f0 [ 322.878097][T13019] ? lockdep_hardirqs_on+0x7a/0x110 [ 322.878127][T13019] ? nlmon_xmit+0xb0/0x100 [ 322.878153][T13019] ? kmem_cache_free+0x182/0x650 [ 322.878187][T13019] ? __lock_acquire+0x6b5/0x2cf0 [ 322.878212][T13019] ? __dev_queue_xmit+0x2b6/0x3950 [ 322.878234][T13019] ? __local_bh_enable_ip+0xd0/0x130 [ 322.878252][T13019] ? lockdep_hardirqs_on+0x7a/0x110 [ 322.878276][T13019] ? __dev_queue_xmit+0x2b6/0x3950 [ 322.878293][T13019] ? __local_bh_enable_ip+0xd0/0x130 [ 322.878309][T13019] ? __dev_queue_xmit+0x2b6/0x3950 [ 322.878334][T13019] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 322.878372][T13019] ? __pfx_rtnl_newlink+0x10/0x10 [ 322.878395][T13019] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 322.878421][T13019] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 322.878444][T13019] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 322.878465][T13019] ? ref_tracker_free+0x693/0x840 [ 322.878492][T13019] ? __pfx_ref_tracker_free+0x10/0x10 [ 322.878514][T13019] ? __asan_memcpy+0x40/0x70 [ 322.878534][T13019] ? __skb_clone+0x63/0x7a0 [ 322.878568][T13019] netlink_rcv_skb+0x232/0x4b0 [ 322.878595][T13019] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 322.878621][T13019] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 322.878659][T13019] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.878683][T13019] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.878713][T13019] netlink_unicast+0x75c/0x8e0 [ 322.878747][T13019] netlink_sendmsg+0x813/0xb40 [ 322.878783][T13019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.878812][T13019] ? aa_sock_msg_perm+0xf1/0x1b0 [ 322.878837][T13019] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 322.878865][T13019] ____sys_sendmsg+0x972/0x9f0 [ 322.878890][T13019] ? __might_fault+0xaf/0x130 [ 322.878919][T13019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.878955][T13019] ? import_iovec+0x73/0xa0 [ 322.878993][T13019] ___sys_sendmsg+0x2a5/0x360 [ 322.879018][T13019] ? __lock_acquire+0x6b5/0x2cf0 [ 322.879041][T13019] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.879127][T13019] ? __fget_files+0x2a/0x420 [ 322.879153][T13019] ? __fget_files+0x3a0/0x420 [ 322.879184][T13019] __x64_sys_sendmsg+0x1bd/0x2a0 [ 322.879213][T13019] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 322.879249][T13019] ? __pfx_ksys_write+0x10/0x10 [ 322.879282][T13019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.879302][T13019] do_syscall_64+0x15f/0xf80 [ 322.879319][T13019] ? trace_irq_disable+0x3b/0x140 [ 322.879345][T13019] ? clear_bhb_loop+0x40/0x90 [ 322.879367][T13019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.879384][T13019] RIP: 0033:0x7f243159ce59 [ 322.879402][T13019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.879417][T13019] RSP: 002b:00007f243250c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.879438][T13019] RAX: ffffffffffffffda RBX: 00007f2431815fa0 RCX: 00007f243159ce59 [ 322.879451][T13019] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 322.879463][T13019] RBP: 00007f243250c090 R08: 0000000000000000 R09: 0000000000000000 [ 322.879473][T13019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.879484][T13019] R13: 00007f2431816038 R14: 00007f2431815fa0 R15: 00007ffda9feb9c8 [ 322.879513][T13019] [ 323.811713][T12996] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.864179][T12996] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.229748][T12996] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.261131][T12996] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.474149][T13069] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1734'. [ 324.737405][ T6662] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.749141][ T6662] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.823903][ T6662] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.879883][ T6662] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.903533][T13078] syzkaller1: entered promiscuous mode [ 324.940114][T13078] syzkaller1: entered allmulticast mode [ 325.022142][ T6662] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.038414][ T6662] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.050001][ T6662] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.059311][ T6662] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.218910][T13094] IPVS: Scheduler module ip_vs_sip not found [ 325.523896][T13098] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.531630][T13098] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.310218][T13102] FAULT_INJECTION: forcing a failure. [ 326.310218][T13102] name failslab, interval 1, probability 0, space 0, times 0 [ 326.353209][T13102] CPU: 0 UID: 0 PID: 13102 Comm: syz.3.1742 Not tainted syzkaller #0 PREEMPT(full) [ 326.353232][T13102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 326.353245][T13102] Call Trace: [ 326.353252][T13102] [ 326.353260][T13102] dump_stack_lvl+0xe8/0x150 [ 326.353287][T13102] should_fail_ex+0x412/0x560 [ 326.353313][T13102] should_failslab+0xa8/0x100 [ 326.353340][T13102] __kvmalloc_node_noprof+0x178/0x8a0 [ 326.353363][T13102] ? alloc_netdev_mqs+0xa8/0x1210 [ 326.353391][T13102] alloc_netdev_mqs+0xa8/0x1210 [ 326.353408][T13102] ? __pfx_vlan_setup+0x10/0x10 [ 326.353434][T13102] rtnl_create_link+0x31f/0xd70 [ 326.353456][T13102] rtnl_newlink_create+0x277/0xb70 [ 326.353482][T13102] ? __pfx___nla_validate_parse+0x10/0x10 [ 326.353508][T13102] ? __mutex_lock+0x608/0x1550 [ 326.353528][T13102] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 326.353555][T13102] ? __pfx___mutex_lock+0x10/0x10 [ 326.353582][T13102] ? ns_capable+0x89/0xe0 [ 326.353603][T13102] rtnl_newlink+0x166a/0x1bb0 [ 326.353643][T13102] ? __pfx_rtnl_newlink+0x10/0x10 [ 326.353664][T13102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.353716][T13102] ? kasan_quarantine_put+0xbb/0x1f0 [ 326.353737][T13102] ? lockdep_hardirqs_on+0x7a/0x110 [ 326.353775][T13102] ? nlmon_xmit+0xb0/0x100 [ 326.353796][T13102] ? kmem_cache_free+0x182/0x650 [ 326.353827][T13102] ? __lock_acquire+0x6b5/0x2cf0 [ 326.353849][T13102] ? __dev_queue_xmit+0x2b6/0x3950 [ 326.353870][T13102] ? __local_bh_enable_ip+0xd0/0x130 [ 326.353889][T13102] ? lockdep_hardirqs_on+0x7a/0x110 [ 326.353911][T13102] ? __dev_queue_xmit+0x2b6/0x3950 [ 326.353926][T13102] ? __local_bh_enable_ip+0xd0/0x130 [ 326.353942][T13102] ? __dev_queue_xmit+0x2b6/0x3950 [ 326.353967][T13102] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 326.354003][T13102] ? __pfx_rtnl_newlink+0x10/0x10 [ 326.354026][T13102] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 326.354052][T13102] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 326.354074][T13102] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 326.354097][T13102] ? ref_tracker_free+0x693/0x840 [ 326.354123][T13102] ? __pfx_ref_tracker_free+0x10/0x10 [ 326.354144][T13102] ? __asan_memcpy+0x40/0x70 [ 326.354164][T13102] ? __skb_clone+0x63/0x7a0 [ 326.354198][T13102] netlink_rcv_skb+0x232/0x4b0 [ 326.354222][T13102] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 326.354245][T13102] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 326.354277][T13102] ? netlink_deliver_tap+0x2e/0x1b0 [ 326.354302][T13102] ? netlink_deliver_tap+0x2e/0x1b0 [ 326.354329][T13102] netlink_unicast+0x75c/0x8e0 [ 326.354358][T13102] netlink_sendmsg+0x813/0xb40 [ 326.354389][T13102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.354415][T13102] ? aa_sock_msg_perm+0xf1/0x1b0 [ 326.354437][T13102] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 326.354460][T13102] ____sys_sendmsg+0x972/0x9f0 [ 326.354484][T13102] ? __might_fault+0xaf/0x130 [ 326.354512][T13102] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.354547][T13102] ? import_iovec+0x73/0xa0 [ 326.354583][T13102] ___sys_sendmsg+0x2a5/0x360 [ 326.354607][T13102] ? __lock_acquire+0x6b5/0x2cf0 [ 326.354629][T13102] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.354687][T13102] ? __fget_files+0x2a/0x420 [ 326.354708][T13102] ? __fget_files+0x3a0/0x420 [ 326.354739][T13102] __x64_sys_sendmsg+0x1bd/0x2a0 [ 326.354773][T13102] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 326.354808][T13102] ? __pfx_ksys_write+0x10/0x10 [ 326.354839][T13102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.354857][T13102] do_syscall_64+0x15f/0xf80 [ 326.354873][T13102] ? trace_irq_disable+0x3b/0x140 [ 326.354896][T13102] ? clear_bhb_loop+0x40/0x90 [ 326.354918][T13102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.354935][T13102] RIP: 0033:0x7f72f399ce59 [ 326.354951][T13102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.354966][T13102] RSP: 002b:00007f72f4806028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.354985][T13102] RAX: ffffffffffffffda RBX: 00007f72f3c15fa0 RCX: 00007f72f399ce59 [ 326.354997][T13102] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 326.355007][T13102] RBP: 00007f72f4806090 R08: 0000000000000000 R09: 0000000000000000 [ 326.355017][T13102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.355027][T13102] R13: 00007f72f3c16038 R14: 00007f72f3c15fa0 R15: 00007ffc242ad288 [ 326.355058][T13102] [ 326.898858][T13139] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1751'. [ 326.926617][ T57] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.960159][ T57] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.980903][ T57] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 327.018018][T13151] netlink: 'syz.3.1756': attribute type 39 has an invalid length. [ 327.072907][ T57] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.084575][ T57] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.093108][ T57] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 327.139798][ T57] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.172018][ T57] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.206400][ T57] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 327.235456][ T57] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.244588][ T57] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.253905][ T57] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 327.338881][T13168] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1761'. [ 327.447952][T13176] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1762'. [ 327.475573][T13176] gretap0: entered promiscuous mode [ 327.582719][T13176] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1762'. [ 327.605623][T13176] 0ªî{X¹¦: renamed from gretap0 [ 327.651876][T13176] 0ªî{X¹¦: left promiscuous mode [ 327.661131][T13176] 0ªî{X¹¦: entered allmulticast mode [ 327.675137][T13187] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1766'. [ 327.686689][T13176] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 328.194765][T13204] syzkaller0: entered promiscuous mode [ 328.211118][T13204] syzkaller0: entered allmulticast mode [ 328.501261][T13211] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 328.550680][T13211] batadv_slave_0: entered promiscuous mode [ 328.559575][T13216] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1775'. [ 328.752002][T13210] batadv_slave_0: left promiscuous mode [ 328.915489][T13231] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1778'. [ 328.931202][T13232] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1778'. [ 329.170709][T13243] netlink: 'syz.4.1782': attribute type 6 has an invalid length. [ 329.678917][T13268] xt_hashlimit: overflow, try lower: 18446744073709551615/32 [ 329.813824][T13277] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1791'. [ 329.855697][T13277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1791'. [ 329.893272][T13279] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1791'. [ 329.897310][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1793'. [ 330.224332][T13305] xt_l2tp: missing protocol rule (udp|l2tpip) [ 330.401960][T13318] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1801'. [ 330.428320][T13320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1799'. [ 330.623894][T13329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1804'. [ 331.449775][T13370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1811'. [ 331.762881][T13391] netlink: 'syz.4.1815': attribute type 2 has an invalid length. [ 331.775630][T13391] openvswitch: netlink: IP tunnel TTL not specified. [ 331.783217][T13391] netlink: 'syz.4.1815': attribute type 2 has an invalid length. [ 332.131182][T13402] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 332.214176][ T29] audit: type=1804 audit(1778769337.569:30): pid=13405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1821" name="/newroot/335/cgroup.controllers" dev="tmpfs" ino=1729 res=1 errno=0 [ 332.274482][ T29] audit: type=1800 audit(1778769337.569:31): pid=13405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1821" name="cgroup.controllers" dev="tmpfs" ino=1729 res=0 errno=0 [ 332.337777][ T29] audit: type=1800 audit(1778769337.569:32): pid=13405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1821" name="cgroup.controllers" dev="tmpfs" ino=1729 res=0 errno=0 [ 332.401026][ T29] audit: type=1800 audit(1778769337.609:33): pid=13409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1821" name="cgroup.controllers" dev="tmpfs" ino=1729 res=0 errno=0 [ 332.476019][ T29] audit: type=1800 audit(1778769337.609:34): pid=13409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1821" name="cgroup.controllers" dev="tmpfs" ino=1729 res=0 errno=0 [ 332.527331][ T29] audit: type=1800 audit(1778769337.609:35): pid=13409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1821" name="cgroup.controllers" dev="tmpfs" ino=1729 res=0 errno=0 [ 332.681846][ T29] audit: type=1800 audit(1778769337.609:36): pid=13405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1821" name="cgroup.controllers" dev="tmpfs" ino=1729 res=0 errno=0 [ 332.798811][ T29] audit: type=1800 audit(1778769337.609:37): pid=13405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1821" name="cgroup.controllers" dev="tmpfs" ino=1729 res=0 errno=0 [ 332.866854][ T29] audit: type=1800 audit(1778769337.609:38): pid=13405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1821" name="cgroup.controllers" dev="tmpfs" ino=1729 res=0 errno=0 [ 332.952136][ T29] audit: type=1800 audit(1778769337.609:39): pid=13409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1821" name="cgroup.controllers" dev="tmpfs" ino=1729 res=0 errno=0 [ 333.169884][T13466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1832'. [ 333.208909][T13466] netlink: 'syz.4.1832': attribute type 1 has an invalid length. [ 333.355760][T13475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1838'. [ 333.409434][T13475] 8021q: adding VLAN 0 to HW filter on device bond9 [ 333.429459][T13481] vlan0: entered promiscuous mode [ 333.434788][T13481] bond9: entered promiscuous mode [ 333.440513][T13481] vlan0: entered allmulticast mode [ 333.448839][T13481] bond9: entered allmulticast mode [ 333.509575][T13475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.518810][T13475] batadv0: entered promiscuous mode [ 333.526719][T13475] batadv0: entered allmulticast mode [ 333.533293][T13475] bond9: (slave batadv0): Enslaving as an active interface with an up link [ 333.609085][T13491] netlink: 'syz.3.1840': attribute type 2 has an invalid length. [ 334.262532][T13530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.681471][T13541] syzkaller0: entered promiscuous mode [ 334.687449][T13541] syzkaller0: entered allmulticast mode [ 335.024631][T13548] __nla_validate_parse: 10 callbacks suppressed [ 335.024650][T13548] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1854'. [ 335.060322][T13547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1854'. [ 336.369802][T13603] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1870'. [ 336.414908][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1870'. [ 336.452877][T13603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1870'. [ 336.474580][T13608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1870'. [ 336.507621][T13603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1870'. [ 336.564096][T13608] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1870'. [ 336.608396][T13612] bond6: entered promiscuous mode [ 336.617022][T13607] bridge_slave_0 (unregistering): left allmulticast mode [ 336.636456][T13607] bridge_slave_0 (unregistering): left promiscuous mode [ 336.648249][T13607] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.656778][T13616] netlink: 'syz.2.1873': attribute type 13 has an invalid length. [ 336.665696][T13616] netlink: 'syz.2.1873': attribute type 17 has an invalid length. [ 336.795666][T13616] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 337.102272][T13640] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1879'. [ 337.131829][T13640] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1879'. [ 337.142933][T13643] netlink: 'syz.1.1880': attribute type 1 has an invalid length. [ 337.254327][T13643] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 337.257059][T13645] syzkaller0: entered promiscuous mode [ 337.294643][T13645] syzkaller0: entered allmulticast mode [ 338.351723][T13691] pimreg: entered allmulticast mode [ 338.382789][T13693] pimreg: left allmulticast mode [ 338.858940][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 338.858956][ T29] audit: type=1804 audit(1778769344.219:97): pid=13710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1890" name="/newroot/404/cgroup.controllers" dev="tmpfs" ino=2084 res=1 errno=0 [ 338.995341][ T29] audit: type=1800 audit(1778769344.219:98): pid=13710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1890" name="cgroup.controllers" dev="tmpfs" ino=2084 res=0 errno=0 [ 340.095060][T13772] __nla_validate_parse: 6 callbacks suppressed [ 340.095080][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1902'. [ 340.154193][T13772] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1902'. [ 340.762205][T13785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1906'. [ 341.178988][T13803] netlink: 'syz.2.1911': attribute type 5 has an invalid length. [ 341.202152][T13803] netlink: 'syz.2.1911': attribute type 4 has an invalid length. [ 341.252413][T13803] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1911'. [ 341.353996][T13816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1916'. [ 341.376560][T13816] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1916'. [ 341.809944][T13842] netlink: 'syz.2.1921': attribute type 2 has an invalid length. [ 341.844772][T13842] sch_tbf: burst 240 is lower than device lo mtu (32783) ! [ 341.886419][T13858] TCP: TCP_TX_DELAY enabled [ 341.893449][T13842] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1921'. [ 342.075797][T13862] netlink: 'syz.2.1922': attribute type 1 has an invalid length. [ 342.145353][T13866] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1924'. [ 342.157019][T13864] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 342.195946][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1922'. [ 342.226766][T13862] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1922'. [ 342.247918][T13862] netlink: 'syz.2.1922': attribute type 2 has an invalid length. [ 342.276209][T13862] netlink: 'syz.2.1922': attribute type 1 has an invalid length. [ 342.341761][T13875] netlink: 'syz.1.1926': attribute type 1 has an invalid length. [ 342.345552][T13873] netlink: 'syz.3.1927': attribute type 1 has an invalid length. [ 342.422953][T13873] 8021q: adding VLAN 0 to HW filter on device bond7 [ 342.453305][T13870] netlink: 'syz.4.1925': attribute type 2 has an invalid length. [ 342.573875][T13882] netlink: 'syz.3.1929': attribute type 6 has an invalid length. [ 342.627264][T13883] af_packet: tpacket_rcv: packet too big, clamped from 29 to 4294967272. macoff=96 [ 342.691008][T13889] lo: entered allmulticast mode [ 342.890959][T13883] lo: left allmulticast mode [ 343.059058][T13912] xt_NFQUEUE: number of total queues is 0 [ 343.336816][T13931] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 343.355916][T13935] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 343.478762][T13920] tipc: Resetting bearer [ 343.658309][ T9] syz0: Port: 1 Link DOWN [ 343.665584][T13853] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.692836][T13853] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.711979][T13853] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.737385][T13853] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.876513][T13949] geneve3: entered allmulticast mode [ 343.900579][T13853] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.937164][T13954] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20003 [ 343.938022][T13853] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.977362][T13853] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.986134][T13853] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.346256][T13972] bond8: entered promiscuous mode [ 344.351940][T13972] 8021q: adding VLAN 0 to HW filter on device bond8 [ 344.387245][T13972] bond8: (slave bridge4): making interface the new active one [ 344.396274][T13972] bridge4: entered promiscuous mode [ 344.403236][T13972] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 345.383773][T14010] __nla_validate_parse: 243 callbacks suppressed [ 345.383795][T14010] netlink: 548 bytes leftover after parsing attributes in process `syz.3.1962'. [ 345.707306][T14012] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 347.134995][T13962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.382217][T14025] validate_nla: 50 callbacks suppressed [ 347.382235][T14025] netlink: 'syz.4.1967': attribute type 8 has an invalid length. [ 347.406917][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1967'. [ 347.451075][T14025] bond0: entered promiscuous mode [ 347.464493][T14025] bond_slave_0: entered promiscuous mode [ 347.476703][T14025] gretap0: entered promiscuous mode [ 347.495455][T14025] team0: entered promiscuous mode [ 347.505027][T14025] team_slave_1: entered promiscuous mode [ 347.528167][T14025] debugfs: 'hsr1' already exists in 'hsr' [ 347.538634][T14025] Cannot create hsr debugfs directory [ 347.544681][T14025] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 347.556810][T14025] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 347.567304][T14025] hsr1: Interlink (team0) is not up; please bring it up to get a fully working HSR network [ 347.580431][T14025] hsr1: entered promiscuous mode [ 347.592515][T14031] netlink: 'syz.0.1968': attribute type 21 has an invalid length. [ 347.622118][T14031] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1968'. [ 347.643827][T14031] netlink: 'syz.0.1968': attribute type 1 has an invalid length. [ 347.657386][T14039] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.692256][T14039] netlink: 'syz.1.1971': attribute type 1 has an invalid length. [ 347.850542][T14051] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 348.096393][T14064] openvswitch: netlink: Message has 496 unknown bytes. [ 348.106189][T14064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.232329][T14075] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1981'. [ 348.404023][T14081] netlink: 'syz.2.1983': attribute type 83 has an invalid length. [ 348.648897][T14077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1982'. [ 349.020499][T14114] netlink: 'syz.2.1992': attribute type 1 has an invalid length. [ 349.033352][T14106] bond9: option arp_validate: invalid value (18446744073709551613) [ 349.053054][T14106] bond9 (unregistering): Released all slaves [ 349.172679][T14119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1992'. [ 349.248460][T14114] sctp: [Deprecated]: syz.2.1992 (pid 14114) Use of int in maxseg socket option. [ 349.248460][T14114] Use struct sctp_assoc_value instead [ 349.353082][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1995'. [ 349.562739][T14142] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 349.622907][T14142] hma(’àÆÂkX: entered promiscuous mode [ 349.999825][T14166] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2001'. [ 350.333051][T14180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2004'. [ 350.662278][T14198] bond6: entered allmulticast mode [ 350.745418][T14198] netlink: 'syz.4.2006': attribute type 1 has an invalid length. [ 350.776247][T14211] netlink: 'syz.2.2009': attribute type 32 has an invalid length. [ 350.781060][T14204] macvlan0: entered promiscuous mode [ 350.792675][T14211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2009'. [ 350.822313][T14198] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2006'. [ 350.855998][T14204] macvlan0: entered allmulticast mode [ 350.862821][T14204] bond6: (slave macvlan0): Opening slave failed [ 350.989591][T14220] netlink: 'syz.0.2010': attribute type 1 has an invalid length. [ 351.001104][T14220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.070077][T14225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2012'. [ 351.353286][T14231] IPVS: persistence engine module ip_vs_pe_‘‚ not found [ 351.415223][T14236] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 351.528916][T14238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2015'. [ 351.600905][T14252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2015'. [ 352.010038][T14268] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2022'. [ 352.116864][T14281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.399766][T14285] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_0 [ 352.558668][T14295] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2029'. [ 352.950131][T14303] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2031'. [ 353.396860][T14302] : renamed from veth0_to_bond [ 353.726543][T14319] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2035'. [ 355.508848][T14322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2036'. [ 355.751348][T14323] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address [ 355.772884][T14323] bond10: (slave vxcan5): Error -95 calling set_mac_address [ 355.829056][T14329] macvlan0: entered promiscuous mode [ 355.835132][T14329] macvlan0: entered allmulticast mode [ 355.841480][T14329] bond10: (slave macvlan0): Error -98 calling set_mac_address [ 355.982018][T14337] syzkaller0: entered promiscuous mode [ 356.019008][T14337] syzkaller0: entered allmulticast mode [ 356.478623][T14358] netlink: 'syz.3.2042': attribute type 1 has an invalid length. [ 356.593868][T14364] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2045'. [ 356.686199][T14371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2048'. [ 356.697325][T14371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2048'. [ 357.140577][T13847] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.174622][T13847] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.194966][T13847] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.214668][T13847] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.817208][T14407] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2058'. [ 358.010722][T14415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2060'. [ 358.106893][T14415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2060'. [ 358.131495][T14420] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.140507][T14425] x_tables: duplicate underflow at hook 1 [ 358.141474][T14420] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.271110][T14428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.281710][T14428] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.335976][T14428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 358.347368][T14428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.362744][T14428] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 358.386503][T13847] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.393918][T13847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.412458][T13847] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.419692][T13847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.533328][T14420] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.561066][T14420] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.669309][T14420] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.680103][T14420] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.783576][T14420] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.808941][T14420] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.958754][T14446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2070'. [ 359.077258][T14448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2069'. [ 359.102986][T13847] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.111960][T13847] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.120731][T13847] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.135521][T13847] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.206537][T14458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.233725][T13847] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.242677][T13847] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.288684][T13847] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.321445][T13847] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.348504][T14465] netlink: 'syz.2.2074': attribute type 1 has an invalid length. [ 359.486540][T14471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2075'. [ 359.516410][T14471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2075'. [ 359.539279][T14471] netlink: 'syz.0.2075': attribute type 20 has an invalid length. [ 360.441737][T14534] tipc: Enabled bearer , priority 0 [ 360.613047][T14534] syzkaller0: entered promiscuous mode [ 360.624980][T14534] syzkaller0: entered allmulticast mode [ 360.635632][T14534] tipc: Resetting bearer [ 360.656731][T14532] tipc: Resetting bearer [ 363.283120][T14532] tipc: Disabling bearer [ 363.548945][T14574] __nla_validate_parse: 1 callbacks suppressed [ 363.548969][T14574] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2100'. [ 363.619566][T14574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2100'. [ 364.313933][ T5289] veth1_macvtap: left promiscuous mode [ 364.436696][T14617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2107'. [ 364.720545][T14621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2109'. [ 364.742518][T14621] IPv6: NLM_F_CREATE should be specified when creating new route [ 365.019888][T14627] syzkaller0: entered promiscuous mode [ 365.041367][T14627] syzkaller0: entered allmulticast mode [ 365.907835][T14650] xt_NFQUEUE: number of total queues is 0 [ 366.057991][T14659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2117'. [ 366.107220][T14659] veth0_macvtap: left promiscuous mode [ 366.121920][T14662] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2118'. [ 366.196793][T14663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2118'. [ 366.207118][T14662] sch_tbf: peakrate 67108864 is lower than or equals to rate 4294966145 ! [ 366.447666][T14678] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 366.591071][T14678] netlink: 'syz.2.2122': attribute type 1 has an invalid length. [ 366.610248][T14678] netlink: 15974 bytes leftover after parsing attributes in process `syz.2.2122'. [ 366.770121][T14691] xt_socket: unknown flags 0x4 [ 366.920253][T14700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2128'. [ 366.972127][T14700] 8021q: adding VLAN 0 to HW filter on device bond10 [ 366.982658][T14700] bond9: (slave bond10): Enslaving as an active interface with an up link [ 367.168393][T14724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2132'. [ 367.386091][T14734] netlink: 'syz.4.2135': attribute type 4 has an invalid length. [ 367.664488][T14752] netlink: 'syz.4.2139': attribute type 8 has an invalid length. [ 367.826647][ T29] audit: type=1800 audit(1778769373.189:99): pid=14758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2142" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2029 res=0 errno=0 [ 368.022958][T14773] syzkaller0: entered promiscuous mode [ 368.034460][T14773] syzkaller0: entered allmulticast mode [ 368.320998][T14787] IPVS: set_ctl: invalid protocol: 47 172.30.0.4:20003 [ 368.329039][T14788] IPVS: set_ctl: invalid protocol: 47 172.30.0.4:20003 [ 368.562860][T14800] __nla_validate_parse: 3 callbacks suppressed [ 368.562892][T14800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2153'. [ 368.580976][T14800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2153'. [ 368.718069][T14808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2154'. [ 368.738532][T14810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2155'. [ 368.763552][T14807] bond11: option arp_interval: invalid value (18446744073709551615) [ 368.771972][T14807] bond11: option arp_interval: allowed values 0 - 2147483647 [ 368.796094][T14807] bond11 (unregistering): Released all slaves [ 368.828103][T14802] block nbd3: server does not support multiple connections per device. [ 368.839780][T14802] block nbd3: shutting down sockets [ 368.883407][T14810] vlan2: entered promiscuous mode [ 368.981854][T14813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2157'. [ 369.220213][T14802] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.227903][T14802] bridge0: port 1(1¾x9ÿ) entered disabled state [ 369.490568][T14802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.517480][T14802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.149864][T14821] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 370.156062][T13850] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.230369][T13850] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 370.268061][T13850] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 370.298899][T13850] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.328195][T13850] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 370.365543][T13850] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 370.420558][T13850] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.440471][T13850] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 370.465356][T13850] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 370.492242][T13850] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.520808][T13850] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 370.539794][T13850] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 370.570188][T14851] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2162'. [ 370.841915][T14867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2165'. [ 372.818047][T14943] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2178'. [ 373.367147][T14965] netlink: 'syz.2.2179': attribute type 10 has an invalid length. [ 375.354157][T14956] tipc: Enabled bearer , priority 0 [ 375.364731][T14957] syzkaller0: entered promiscuous mode [ 375.371478][T14957] syzkaller0: entered allmulticast mode [ 375.389447][T14967] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2180'. [ 375.427514][T14967] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2180'. [ 375.563759][T14973] netlink: 'syz.3.2182': attribute type 1 has an invalid length. [ 375.563759][T14974] netlink: 'syz.3.2182': attribute type 1 has an invalid length. [ 375.642433][T14967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.656908][T14967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.740838][T14967] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 375.772721][T14967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 375.828164][T14967] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 375.856075][T14980] x_tables: duplicate underflow at hook 2 [ 375.872499][T14965] tipc: Resetting bearer [ 375.919342][T14965] tipc: Disabling bearer [ 376.003515][T14974] 8021q: adding VLAN 0 to HW filter on device bond9 [ 376.013240][T14973] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 376.196130][T14993] 8021q: adding VLAN 0 to HW filter on device bond5 [ 376.216849][T14993] nicvf0: tun_chr_ioctl cmd 3222296690 [ 376.627359][T15017] bridge7: entered promiscuous mode [ 376.643329][T15017] bridge7: entered allmulticast mode [ 376.692032][T15024] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.016724][T15039] syzkaller1: entered promiscuous mode [ 377.034048][T15039] syzkaller1: entered allmulticast mode [ 377.070250][T15039] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 377.195675][T15049] netlink: 'syz.0.2199': attribute type 3 has an invalid length. [ 377.215100][T15050] netlink: 'syz.0.2199': attribute type 3 has an invalid length. [ 377.243269][T15050] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2199'. [ 377.263682][T15049] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2199'. [ 377.938706][T15076] xt_hashlimit: size too large, truncated to 1048576 [ 378.061024][T15086] netlink: 'syz.2.2207': attribute type 1 has an invalid length. [ 378.098150][T15086] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2207'. [ 378.131066][T15079] ¾x9ÿ (unregistering): left allmulticast mode [ 378.161468][T15079] ¾x9ÿ (unregistering): left promiscuous mode [ 378.179805][T15079] bridge0: port 1(1¾x9ÿ) entered disabled state [ 378.657658][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.980706][T15121] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2214'. [ 379.096989][T15126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2215'. [ 379.110250][T15121] netlink: 'syz.2.2214': attribute type 1 has an invalid length. [ 379.168604][T15131] netlink: 'syz.0.2217': attribute type 1 has an invalid length. [ 379.192281][T15131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2217'. [ 379.438897][T15142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2219'. [ 379.636592][T15154] netlink: 'syz.2.2223': attribute type 1 has an invalid length. [ 379.677969][T15154] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 379.703285][T15156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2224'. [ 379.809611][T15152] netlink: 'syz.3.2222': attribute type 4 has an invalid length. [ 379.877063][T15165] netlink: 'syz.1.2226': attribute type 1 has an invalid length. [ 379.892832][T15165] netlink: 'syz.1.2226': attribute type 1 has an invalid length. [ 380.116142][T15157] tipc: Resetting bearer [ 380.887539][T15179] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 380.922537][T13851] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.954946][T13851] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.986226][T13851] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.997387][T13851] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.042118][T13851] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.051969][T13851] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.065757][T13851] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.089216][T13851] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.215465][T15193] __nla_validate_parse: 2 callbacks suppressed [ 381.215485][T15193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2234'. [ 381.414701][T15207] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.498196][T15207] bond0: Error: Cannot enslave bond to itself. [ 381.559515][T15195] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2233'. [ 381.569198][T15195] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 381.647090][T15223] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2237'. [ 384.350081][T15202] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 384.362576][T15226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2239'. [ 384.671372][T15249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2246'. [ 384.689619][T15252] netlink: 'syz.4.2245': attribute type 1 has an invalid length. [ 384.711910][T15249] tc_dump_action: action bad kind [ 384.817683][T15258] netlink: 'syz.2.2249': attribute type 1 has an invalid length. [ 384.846943][T15258] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2249'. [ 384.869413][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2249'. [ 384.882672][T15263] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2251'. [ 385.102344][T15275] SET target dimension over the limit! [ 385.110774][T15276] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.333257][T15294] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20002 [ 385.339498][T15289] tipc: Enabled bearer , priority 0 [ 385.582571][T15289] syzkaller0: entered promiscuous mode [ 385.594493][T15289] syzkaller0: entered allmulticast mode [ 385.605292][T15289] tipc: Resetting bearer [ 385.647551][T15286] tipc: Resetting bearer [ 385.754437][T15318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2267'. [ 385.806545][T15320] Cannot find del_set index 8192 as target [ 387.773017][ T50] Bluetooth: hci4: command 0x0405 tx timeout [ 388.485790][T15286] tipc: Disabling bearer [ 389.016668][T15347] tunl0: entered promiscuous mode [ 389.041306][T15347] netlink: 'syz.4.2275': attribute type 4 has an invalid length. [ 389.071792][T15347] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2275'. [ 389.125946][T15331] netlink: 'syz.2.2270': attribute type 4 has an invalid length. [ 389.166090][T15331] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2270'. [ 390.605656][T15420] veth0: entered promiscuous mode [ 390.680947][T15417] netlink: 'syz.2.2287': attribute type 6 has an invalid length. [ 390.760322][T15419] veth0: left promiscuous mode [ 390.782902][T15433] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2291'. [ 390.985939][T15445] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2295'. [ 390.996237][T15445] openvswitch: netlink: Flow key attr not present in new flow. [ 391.031178][T15441] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma? [ 391.192158][T15453] netlink: 'syz.0.2297': attribute type 12 has an invalid length. [ 391.203199][T15453] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2297'. [ 391.528582][T15469] tipc: Enabled bearer , priority 10 [ 391.545152][T15471] team0: Device »»»»»» is loopback device. Loopback devices can't be added as a team port [ 391.574418][T15471] A link change request failed with some changes committed already. Interface »»»»»» may have been left with an inconsistent configuration, please check. [ 391.925711][T15492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2309'. [ 391.966623][T15494] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2308'. [ 392.185556][T15484] syzkaller0: entered promiscuous mode [ 392.211190][T15484] syzkaller0: entered allmulticast mode [ 392.547334][T15506] bridge0: left promiscuous mode [ 392.561310][T15506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.575675][T15506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.617637][T15506] veth0_to_team: left promiscuous mode [ 392.631870][T15506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.644071][T15506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.663567][T15506] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 395.533605][T13849] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.540884][T13849] bridge0: port 2(bridge_slave_1) entered listening state [ 395.570955][T15531] netlink: 'syz.2.2317': attribute type 29 has an invalid length. [ 396.102570][T15569] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2326'. [ 396.170963][T15574] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2327'. [ 396.204477][T15573] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2328'. [ 396.291598][T15573] hma(’àÆÂkX: entered promiscuous mode [ 396.341072][T15585] batadv0: entered promiscuous mode [ 396.375530][T15585] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 396.383766][T15587] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2332'. [ 396.400971][T15587] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2332'. [ 396.561148][T15599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2334'. [ 396.709397][T15607] dvmrp0: entered allmulticast mode [ 396.752954][T15609] netlink: 708 bytes leftover after parsing attributes in process `syz.2.2333'. [ 396.811642][T15607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2333'. [ 396.839560][T15612] netlink: 'syz.0.2335': attribute type 61 has an invalid length. [ 396.872020][T15612] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 396.963998][T15615] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2336'. [ 397.268011][T15638] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2341'. [ 400.013263][T15622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 400.279861][T15679] bond10: (slave bond_slave_1): Device is not bonding slave [ 400.288814][T15679] bond10: option active_slave: invalid value (bond_slave_1) [ 400.481296][T15679] bond10 (unregistering): Released all slaves [ 400.667527][T15703] netlink: 'syz.0.2358': attribute type 8 has an invalid length. [ 400.693665][T15703] netlink: 'syz.0.2358': attribute type 7 has an invalid length. [ 400.728795][T15703] netlink: 'syz.0.2358': attribute type 3 has an invalid length. [ 401.064578][T15727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.230894][T15739] bond11: (slave bond_slave_1): Device is not bonding slave [ 401.250994][T15739] bond11: option active_slave: invalid value (bond_slave_1) [ 401.308446][T15749] __nla_validate_parse: 11 callbacks suppressed [ 401.308466][T15749] netlink: 210640 bytes leftover after parsing attributes in process `syz.0.2366'. [ 401.448214][T15739] bond11 (unregistering): Released all slaves [ 401.681696][T15756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2370'. [ 402.440411][T15791] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 403.310037][T15825] netlink: 'syz.1.2390': attribute type 3 has an invalid length. [ 403.318332][T15825] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2390'. [ 403.391382][ T9097] bridge0: entered promiscuous mode [ 403.633445][T15838] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2394'. [ 403.963679][T15860] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2399'. [ 404.095308][T15868] netlink: 'syz.0.2400': attribute type 15 has an invalid length. [ 404.115252][T15870] netlink: 'syz.0.2400': attribute type 15 has an invalid length. [ 404.252456][T15877] macsec2: entered promiscuous mode [ 404.258301][T15877] macsec2: entered allmulticast mode [ 404.429706][T15887] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 404.525646][T15900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2408'. [ 404.907488][T15916] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2414'. [ 404.948047][T15919] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20003 [ 405.030438][T15922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2416'. [ 405.090450][T15925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2417'. [ 405.119799][T15925] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2417'. [ 405.269028][T15933] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 405.276602][T15933] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 406.390891][T15945] __nla_validate_parse: 2 callbacks suppressed [ 406.390904][T15945] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2422'. [ 407.434159][T15892] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 407.536881][T15952] netlink: 'syz.3.2423': attribute type 1 has an invalid length. [ 407.646552][T15953] xt_cluster: node mask cannot exceed total number of nodes [ 407.667612][T15953] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2423'. [ 407.670068][T15960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2426'. [ 407.695371][T15953] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2423'. [ 407.714854][T15953] netlink: 'syz.3.2423': attribute type 5 has an invalid length. [ 407.726011][T15962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2424'. [ 407.736343][T15953] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2423'. [ 407.750987][T15962] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2424'. [ 407.764865][T15962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2424'. [ 407.783477][T15962] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2424'. [ 407.832244][T15960] netlink: 'syz.4.2426': attribute type 17 has an invalid length. [ 407.889939][T15968] bond11: Unable to set down delay as MII monitoring is disabled [ 407.901328][T15968] bond11 (unregistering): Released all slaves [ 407.932573][T15973] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2427'. [ 407.946001][T15960] tunl0: left promiscuous mode [ 408.030742][T15960] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 408.050855][T15973] .70·X: renamed from veth1_virt_wifi (while UP) [ 408.063805][T15973] .70·X: entered allmulticast mode [ 408.076500][T15973] A link change request failed with some changes committed already. Interface .70·X may have been left with an inconsistent configuration, please check. [ 408.109163][T15984] ip6gre2: entered promiscuous mode [ 408.115238][T15984] ip6gre2: entered allmulticast mode [ 408.630912][T16003] netlink: 'syz.3.2436': attribute type 1 has an invalid length. [ 408.781840][T16005] bond10: (slave geneve5): making interface the new active one [ 408.795481][T16005] bond10: (slave geneve5): Enslaving as an active interface with an up link [ 408.828593][T16011] tipc: New replicast peer: 172.20.20.170 [ 408.849350][T16011] tipc: Enabled bearer , priority 10 [ 408.880190][T13849] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 408.937837][T13849] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 408.958434][T16020] xt_hashlimit: max too large, truncated to 1048576 [ 408.965019][T13849] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 409.042384][T13849] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 409.312401][T16039] bridge1: entered promiscuous mode [ 409.321642][T16039] bridge1: entered allmulticast mode [ 409.809311][T16072] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 409.970680][T16082] tipc: New replicast peer: 255.255.255.255 [ 410.003078][T16082] tipc: Enabled bearer , priority 10 [ 410.513523][T16119] netlink: 'syz.4.2466': attribute type 17 has an invalid length. [ 410.574739][T16117] veth17: entered promiscuous mode [ 410.684192][T16119] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.691909][T16119] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.976551][T16119] hsr1: left promiscuous mode [ 410.983680][T16119] bond6: left allmulticast mode [ 410.990492][T16119] bridge1: left promiscuous mode [ 410.996632][T16119] bridge1: left allmulticast mode [ 411.010919][T16130] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 411.033183][T16128] tipc: Enabled bearer , priority 0 [ 411.050377][T16130] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 411.182772][T16083] tipc: Resetting bearer [ 411.220603][T16131] syzkaller0: entered promiscuous mode [ 411.229112][T16131] syzkaller0: entered allmulticast mode [ 411.351205][T16076] tipc: Resetting bearer [ 411.407426][T16076] tipc: Disabling bearer [ 412.283984][T16179] bridge0: port 1(erspan0) entered blocking state [ 412.309423][T16179] bridge0: port 1(erspan0) entered disabled state [ 412.331858][T16179] erspan0: entered allmulticast mode [ 412.399685][T16179] erspan0: entered promiscuous mode [ 412.422156][T16179] bridge0: port 1(erspan0) entered blocking state [ 412.430327][T16179] bridge0: port 1(erspan0) entered listening state [ 412.538895][T16188] geneve6: entered promiscuous mode [ 412.549964][T16188] geneve6: entered allmulticast mode [ 412.678360][T16193] __nla_validate_parse: 12 callbacks suppressed [ 412.678379][T16193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2487'. [ 412.707581][T16191] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2487'. [ 412.758208][T16200] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2486'. [ 413.104110][T16219] PKCS7: Unknown OID: [4] (bad) [ 413.115320][T16219] PKCS7: Only support pkcs7_signedData type [ 413.250442][T16232] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2498'. [ 413.296533][T16233] syzkaller1: entered promiscuous mode [ 413.324644][T16233] syzkaller1: entered allmulticast mode [ 413.460031][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2501'. [ 413.488588][T16245] netlink: 'syz.0.2504': attribute type 13 has an invalid length. [ 413.500531][T16245] netlink: 'syz.0.2504': attribute type 17 has an invalid length. [ 413.548437][T16245] 0ªî{X¹¦: left allmulticast mode [ 413.602777][T16245] bridge0: left promiscuous mode [ 413.610760][T16245] team0: left promiscuous mode [ 413.615813][T16245] team_slave_0: left promiscuous mode [ 413.621636][T16245] team_slave_1: left promiscuous mode [ 413.628715][T16250] xt_hashlimit: overflow, try lower: 6/0 [ 413.637405][T16245] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.650557][T16245] –: left promiscuous mode [ 413.658838][T16255] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2504'. [ 413.673816][T16245] 0ªX¹¦À: left allmulticast mode [ 413.683010][T16245] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 413.708006][T16245] wireguard: wg0: Could not create IPv4 socket [ 413.718359][T16245] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 414.805962][T16323] netlink: 'syz.2.2521': attribute type 1 has an invalid length. [ 414.961918][T16323] 8021q: adding VLAN 0 to HW filter on device bond11 [ 415.008201][T16335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2522'. [ 415.060362][T16327] bond11: (slave veth19): Enslaving as an active interface with a down link [ 415.096221][T16332] bond0: (slave dummy0): Releasing backup interface [ 415.161407][T16332] bond11: (slave dummy0): making interface the new active one [ 415.196141][T16332] dummy0: entered promiscuous mode [ 415.207376][T16332] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 415.221749][T16333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2523'. [ 416.073019][T16336] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 416.087099][T16336] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 416.192692][T16336] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 416.215078][T16336] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 416.312936][T16336] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 416.322125][T16336] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 416.375109][T16336] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 416.393367][T16377] ieee802154 phy0 wpan0: encryption failed: -22 [ 416.413137][T16336] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 417.013846][T16407] IPv6: NLM_F_CREATE should be specified when creating new route [ 417.045185][T16407] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 417.052691][T16407] IPv6: NLM_F_CREATE should be set when creating new route [ 417.060542][T16407] IPv6: NLM_F_CREATE should be set when creating new route [ 417.068017][T16407] IPv6: NLM_F_CREATE should be set when creating new route [ 417.156094][T16410] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2539'. [ 417.182387][T16414] syzkaller0: entered promiscuous mode [ 417.193032][T16414] syzkaller0: entered allmulticast mode [ 417.836079][T16430] dvmrp8: entered allmulticast mode [ 417.945875][T16431] bond7: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 418.217981][T16431] bond7 (unregistering): Released all slaves [ 418.327325][T16434] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2544'. [ 418.652405][T16442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2547'. [ 418.687627][T16442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2547'. [ 418.742853][T16442] netlink: 'syz.1.2547': attribute type 13 has an invalid length. [ 418.798115][T16442] netlink: 'syz.1.2547': attribute type 11 has an invalid length. [ 419.240503][T16461] x_tables: duplicate underflow at hook 1 [ 419.276690][T16461] raw_sendmsg: syz.1.2550 forgot to set AF_INET. Fix it! [ 419.728542][T16476] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2553'. [ 420.030249][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2554'. [ 420.075314][T16484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2556'. [ 420.097538][T16484] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 420.827422][T16492] tipc: Enabled bearer , priority 0 [ 420.862087][T16493] syzkaller0: entered promiscuous mode [ 420.875178][T16493] syzkaller0: entered allmulticast mode [ 420.910236][T16500] tipc: Resetting bearer [ 420.947534][T16486] tipc: Resetting bearer [ 421.022561][T16486] tipc: Disabling bearer [ 421.038399][T16511] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2560'. [ 421.118873][T16515] tipc: Enabled bearer , priority 0 [ 421.133008][T16515] syzkaller0: entered promiscuous mode [ 421.150765][T16515] syzkaller0: entered allmulticast mode [ 421.186727][T16516] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2562'. [ 421.213268][T16515] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2561'. [ 421.257465][T16515] tipc: Resetting bearer [ 421.296330][T16513] tipc: Resetting bearer [ 421.338321][T16513] tipc: Disabling bearer [ 421.629597][T16537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2568'. [ 421.632070][T16536] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 421.700754][T16535] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 422.157720][T16554] netlink: 'syz.1.2574': attribute type 4 has an invalid length. [ 422.196912][T16556] xt_TPROXY: Can be used only with -p tcp or -p udp [ 422.212706][T16563] netlink: 'syz.1.2574': attribute type 4 has an invalid length. [ 422.897180][T16588] netlink: 'syz.2.2583': attribute type 1 has an invalid length. [ 422.953525][T16586] macvlan2: entered promiscuous mode [ 422.983243][T16586] macvlan2: entered allmulticast mode [ 423.014059][T16586] veth0_to_batadv: entered allmulticast mode [ 423.218755][T16603] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 423.256145][T16599] bridge_slave_1: left allmulticast mode [ 423.293369][T16599] bridge_slave_1: left promiscuous mode [ 423.304663][T16603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.337157][T16599] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.387873][T16599] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 423.511771][T16605] netlink: 'syz.1.2588': attribute type 1 has an invalid length. [ 424.319977][T16644] __nla_validate_parse: 4 callbacks suppressed [ 424.319994][T16644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2595'. [ 424.343482][T16626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2591'. [ 424.372877][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2595'. [ 424.613146][T16651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2598'. [ 424.836434][T16659] netlink: 'syz.3.2601': attribute type 11 has an invalid length. [ 425.148242][T16677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2604'. [ 425.399215][T16677] netlink: 'syz.0.2604': attribute type 1 has an invalid length. [ 425.429553][ T29] audit: type=1804 audit(1778769430.789:100): pid=16685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2605" name="/newroot/528/memory.events" dev="tmpfs" ino=2728 res=1 errno=0 [ 425.491781][ T29] audit: type=1800 audit(1778769430.789:101): pid=16685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2605" name="memory.events" dev="tmpfs" ino=2728 res=0 errno=0 [ 425.551157][T16691] netlink: 'syz.4.2606': attribute type 1 has an invalid length. [ 425.671473][T16691] 8021q: adding VLAN 0 to HW filter on device bond7 [ 425.728195][T16700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2608'. [ 425.830546][T16700] batadv0 (unregistering): left promiscuous mode [ 426.121123][T16711] xt_limit: Overflow, try lower: 28676/2147483648 [ 426.152168][T16715] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2613'. [ 426.167372][T16714] openvswitch: netlink: IPv6 tunnel dst address is zero [ 426.179906][T16715] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2613'. [ 426.202384][T16714] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2614'. [ 426.335732][T13849] dummy0: left promiscuous mode [ 426.509497][T16721] netlink: 1216 bytes leftover after parsing attributes in process `syz.4.2616'. [ 426.926028][T16735] veth0_to_batadv: entered promiscuous mode [ 427.089880][T16738] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 427.176549][T16741] netlink: 'syz.4.2621': attribute type 1 has an invalid length. [ 427.281075][T16741] bond8: entered promiscuous mode [ 427.314563][T16741] 8021q: adding VLAN 0 to HW filter on device bond8 [ 427.928187][T16762] tipc: Enabled bearer , priority 0 [ 428.005704][T16762] tipc: Disabling bearer [ 428.411020][T16772] bond6: entered promiscuous mode [ 428.419578][ T29] audit: type=1804 audit(1778769433.779:102): pid=16785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2632" name="/newroot/500/cgroup.controllers" dev="tmpfs" ino=2586 res=1 errno=0 [ 428.494979][T16772] netlink: 'syz.1.2629': attribute type 10 has an invalid length. [ 428.508166][ T29] audit: type=1800 audit(1778769433.799:103): pid=16785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2632" name="cgroup.controllers" dev="tmpfs" ino=2586 res=0 errno=0 [ 428.595905][ T29] audit: type=1804 audit(1778769433.829:104): pid=16785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2632" name="/newroot/500/cgroup.controllers" dev="tmpfs" ino=2586 res=1 errno=0 [ 429.261760][T16810] rdma_op ffff88807ab491f0 conn xmit_rdma 0000000000000000 [ 429.506877][T16801] geneve2: left promiscuous mode [ 429.527509][T16801] veth5: left allmulticast mode [ 429.540168][T16801] vlan2: left promiscuous mode [ 429.554111][T16801] geneve1: left promiscuous mode [ 429.578040][T16801] vlan2: left allmulticast mode [ 429.605794][T16801] geneve1: left allmulticast mode [ 429.617120][T16801] vlan0: left promiscuous mode [ 429.644609][T16801] bond9: left promiscuous mode [ 429.655969][T16801] batadv0: left promiscuous mode [ 429.680147][T16801] vlan0: left allmulticast mode [ 429.705247][T16801] bond9: left allmulticast mode [ 429.726349][T16801] batadv0: left allmulticast mode [ 429.746958][T16801] bridge7: left promiscuous mode [ 429.783876][T16801] bridge7: left allmulticast mode [ 429.804385][T16815] veth1_to_bond: entered allmulticast mode [ 429.833584][T16832] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 429.989215][T16815] veth1_to_bond: left allmulticast mode [ 430.127683][T16835] syzkaller0: entered promiscuous mode [ 430.134496][T16835] syzkaller0: entered allmulticast mode [ 430.361298][T16850] netlink: 'syz.1.2647': attribute type 29 has an invalid length. [ 430.737855][T16861] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 430.740697][T16863] __nla_validate_parse: 7 callbacks suppressed [ 430.740717][T16863] netlink: 3820 bytes leftover after parsing attributes in process `syz.0.2653'. [ 430.835549][T16866] netlink: 'syz.2.2652': attribute type 4 has an invalid length. [ 431.020139][T16866] syzkaller0: entered allmulticast mode [ 431.732083][T16898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2660'. [ 432.651146][T16922] netlink: 'syz.1.2665': attribute type 3 has an invalid length. [ 432.671244][T16922] netlink: 'syz.1.2665': attribute type 3 has an invalid length. [ 432.690243][T16922] netlink: 'syz.1.2665': attribute type 1 has an invalid length. [ 432.734773][T16924] netlink: 41 bytes leftover after parsing attributes in process `syz.0.2666'. [ 432.758397][T16924] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2666'. [ 432.864815][T16926] macvlan5: entered promiscuous mode [ 432.885084][T16926] macvlan5: entered allmulticast mode [ 432.905293][T16926] bond7: entered promiscuous mode [ 432.924695][T16926] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 432.957134][T16926] bond7: left promiscuous mode [ 433.008535][T16924] netlink: 41 bytes leftover after parsing attributes in process `syz.0.2666'. [ 433.336469][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'. [ 433.342965][T16936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2669'. [ 433.362883][T16932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2668'. [ 433.400337][T16940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2669'. [ 433.505012][T16936] team1: entered promiscuous mode [ 433.513630][T16936] team1: entered allmulticast mode [ 433.527197][T16936] 8021q: adding VLAN 0 to HW filter on device team1 [ 433.573587][T16940] team2: entered promiscuous mode [ 433.580171][T16940] team2: entered allmulticast mode [ 433.587536][T16940] 8021q: adding VLAN 0 to HW filter on device team2 [ 433.700414][T16946] vlan2: entered promiscuous mode [ 433.749627][T16950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.434668][T16950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2674'. [ 435.894132][T16984] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2680'. [ 437.134120][T17027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2693'. [ 437.202335][T13853] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.228004][T17027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2693'. [ 437.243182][T13853] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.262650][T17036] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c) [ 437.282775][T13853] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.301918][T13853] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.440260][T17044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2695'. [ 437.454715][T17044] netlink: 'syz.1.2695': attribute type 30 has an invalid length. [ 437.548327][T13853] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.548433][T17044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2695'. [ 437.567579][T17044] netlink: 'syz.1.2695': attribute type 30 has an invalid length. [ 437.570019][T13853] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.584817][T13853] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.607278][T13853] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.609315][T17054] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2698'. [ 437.698661][T17027] nbd3: detected capacity change from 0 to 63 [ 437.710983][T17049] netlink: 'syz.3.2698': attribute type 1 has an invalid length. [ 437.715645][ T50] block nbd3: Receive control failed (result -32) [ 437.723078][ T5645] block nbd3: Receive control failed (result -32) [ 437.737452][T10885] block nbd3: Send control failed (result -32) [ 437.765037][T17049] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2698'. [ 437.774711][T10885] block nbd3: Request send failed, requeueing [ 437.791912][T10885] block nbd3: Dead connection, failed to find a fallback [ 437.799295][ T4972] block nbd3: Dead connection, failed to find a fallback [ 437.814362][ T4972] block nbd3: shutting down sockets [ 437.821261][ T4972] blk_print_req_error: 138 callbacks suppressed [ 437.821278][ T4972] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 437.838093][ T4972] buffer_io_error: 138 callbacks suppressed [ 437.838110][ T4972] Buffer I/O error on dev nbd3, logical block 0, async page read [ 437.853800][T10885] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 437.873622][T10885] Buffer I/O error on dev nbd3, logical block 1, async page read [ 437.881870][T10885] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 437.897010][T10885] Buffer I/O error on dev nbd3, logical block 2, async page read [ 437.911223][T10885] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 437.925736][T10885] Buffer I/O error on dev nbd3, logical block 3, async page read [ 437.934077][T10885] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 437.946624][T10885] Buffer I/O error on dev nbd3, logical block 0, async page read [ 438.000737][T10885] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 438.054517][T10885] Buffer I/O error on dev nbd3, logical block 1, async page read [ 438.079022][T10885] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 438.107676][T10885] Buffer I/O error on dev nbd3, logical block 2, async page read [ 438.127571][T10885] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 438.146041][T10885] Buffer I/O error on dev nbd3, logical block 3, async page read [ 438.166938][T10885] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 438.184906][T10885] Buffer I/O error on dev nbd3, logical block 0, async page read [ 438.200850][T10885] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 438.221441][T10885] Buffer I/O error on dev nbd3, logical block 1, async page read [ 438.236779][T10885] ldm_validate_partition_table(): Disk read failed. [ 438.246352][T10885] Dev nbd3: unable to read RDB block 0 [ 438.254832][T10885] nbd3: unable to read partition table [ 438.291166][T10885] ldm_validate_partition_table(): Disk read failed. [ 438.312186][T10885] Dev nbd3: unable to read RDB block 0 [ 438.326852][T10885] nbd3: unable to read partition table [ 438.472019][T17066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2701'. [ 438.565952][ T5645] block nbd4: Receive control failed (result -32) [ 438.678027][T17091] syzkaller0: entered promiscuous mode [ 438.686385][T17094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.713452][T17091] syzkaller0: entered allmulticast mode [ 438.777884][T17098] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2713'. [ 438.850014][T17108] netlink: 'syz.4.2715': attribute type 4 has an invalid length. [ 438.878914][T17108] netlink: 'syz.4.2715': attribute type 4 has an invalid length. [ 439.172802][T17128] netlink: 'syz.1.2717': attribute type 1 has an invalid length. [ 439.180745][T17128] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2717'. [ 439.558488][T17147] x_tables: duplicate underflow at hook 2 [ 439.622012][T17147] syzkaller1: entered promiscuous mode [ 439.652201][T17147] syzkaller1: entered allmulticast mode [ 440.088355][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.440649][T17177] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 440.766426][T17190] netlink: 'syz.1.2733': attribute type 1 has an invalid length. [ 441.041982][T17206] __nla_validate_parse: 2 callbacks suppressed [ 441.042002][T17206] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2736'. [ 441.188951][T17217] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2737'. [ 441.725471][T17252] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2748'. [ 441.737600][T17250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2749'. [ 441.748902][T17255] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2749'. [ 442.045433][T17281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2756'. [ 442.173717][T17290] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2759'. [ 442.197981][T17288] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2758'. [ 442.644305][ C0] bridge0: port 1(erspan0) entered learning state [ 442.693591][T17305] netlink: 'syz.3.2763': attribute type 12 has an invalid length. [ 442.713588][T17305] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2763'. [ 442.756621][T17307] bridge_slave_1: left promiscuous mode [ 442.768334][T17307] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.788658][T17307] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 443.390685][T17325] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 443.529078][T17329] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.565448][T17329] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2768'. [ 443.593377][T17329] 0ªX¹¦À: renamed from batadv0 [ 443.610209][T17329] 0ªX¹¦À: left promiscuous mode [ 443.631729][T17329] 0ªX¹¦À: entered allmulticast mode [ 443.655373][T17329] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 443.711267][T17329] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 443.774080][T17323] netlink: 'syz.4.2766': attribute type 1 has an invalid length. [ 444.336086][T17362] netlink: 'syz.4.2775': attribute type 14 has an invalid length. [ 445.001954][T17377] netlink: 'syz.4.2780': attribute type 1 has an invalid length. [ 445.269979][T17377] bond10: entered promiscuous mode [ 445.287174][T17377] 8021q: adding VLAN 0 to HW filter on device bond10 [ 445.367040][T17389] bond10: (slave bridge4): making interface the new active one [ 445.386754][T17389] bridge4: entered promiscuous mode [ 445.403040][T17389] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 445.595332][T17395] ip6gre3: entered promiscuous mode [ 445.602980][T17395] ip6gre3: entered allmulticast mode [ 446.176406][T17416] __nla_validate_parse: 7 callbacks suppressed [ 446.176426][T17416] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2787'. [ 446.217519][T17416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2787'. [ 446.339744][T17422] netlink: 'syz.2.2789': attribute type 3 has an invalid length. [ 446.397253][T17422] nbd: nbd2 already in use [ 446.422660][T17422] block nbd2: NBD_DISCONNECT [ 446.428116][T17422] block nbd2: Send disconnect failed -32 [ 446.448107][T17422] block nbd2: shutting down sockets [ 446.613011][T17422] .70·X: left allmulticast mode [ 446.623944][T17422] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 446.955379][T17440] netlink: 'syz.2.2792': attribute type 4 has an invalid length. [ 446.995635][T17440] netlink: 'syz.2.2792': attribute type 4 has an invalid length. [ 447.157835][T17446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2794'. [ 447.668946][T17459] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2798'. [ 447.700555][T17461] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2799'. [ 447.809032][T17464] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2799'. [ 448.114739][T17480] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2802'. [ 448.155725][T17480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2802'. [ 448.240024][T17480] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2802'. [ 448.294741][T17480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2802'. [ 448.318279][T17479] ip6gretap0: entered promiscuous mode [ 449.069709][T17542] netlink: 'syz.3.2815': attribute type 1 has an invalid length. [ 449.114080][T17542] netlink: 'syz.3.2815': attribute type 1 has an invalid length. [ 449.520572][T17561] netlink: 'syz.3.2819': attribute type 1 has an invalid length. [ 449.546984][T17563] gretap2: entered allmulticast mode [ 450.041133][T17587] openvswitch: netlink: IP tunnel dst address not specified [ 450.403202][T17594] sctp: [Deprecated]: syz.1.2826 (pid 17594) Use of struct sctp_assoc_value in delayed_ack socket option. [ 450.403202][T17594] Use struct sctp_sack_info instead [ 450.490358][T17597] netlink: 'syz.1.2826': attribute type 1 has an invalid length. [ 450.920531][T17619] veth7: entered allmulticast mode [ 451.223997][T17631] __nla_validate_parse: 14 callbacks suppressed [ 451.224016][T17631] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2832'. [ 451.296876][T17634] netlink: 'syz.4.2832': attribute type 13 has an invalid length. [ 451.302850][T17631] .70·X: renamed from veth1_virt_wifi [ 451.365928][T17631] .70·X: entered allmulticast mode [ 451.397162][T17631] A link change request failed with some changes committed already. Interface .70·X may have been left with an inconsistent configuration, please check. [ 451.863282][T17675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.280346][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 452.291716][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 452.303864][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 452.325904][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 452.333565][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 452.360422][ T5645] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 452.370149][ T5645] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 452.380837][ T5645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 452.396670][T17695] bond12: (slave »»»»»»): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 452.422441][ T5645] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 452.438319][ T5645] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 452.575481][T17695] bond12: (slave »»»»»»): Enslaving as an active interface with an up link [ 452.599675][T17695] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 452.885831][T17708] syzkaller0: entered promiscuous mode [ 452.922951][T17708] syzkaller0: entered allmulticast mode [ 453.699182][T17750] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2860'. [ 453.727544][T17750] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2860'. [ 453.804056][T17752] IPVS: set_ctl: invalid protocol: 255 10.1.1.1:21 [ 453.815150][T17752] IPVS: rr: FWM 3 0x00000003 - no destination available [ 453.873959][T17756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2862'. [ 454.492551][ T5645] Bluetooth: hci5: command tx timeout [ 456.486195][T17756] openvswitch: : Dropping previously announced user features [ 456.573260][ T5645] Bluetooth: hci5: command tx timeout [ 456.723729][T17772] sctp: [Deprecated]: syz.4.2864 (pid 17772) Use of struct sctp_assoc_value in delayed_ack socket option. [ 456.723729][T17772] Use struct sctp_sack_info instead [ 456.823573][T17779] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2866'. [ 457.105750][T17790] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2869'. [ 457.156660][T17790] netlink: 'syz.1.2869': attribute type 27 has an invalid length. [ 457.228817][T17791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2869'. [ 457.328857][T17805] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2873'. [ 457.346634][T17804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2872'. [ 457.816464][T17828] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2877'. [ 457.838383][T17828] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2877'. [ 457.865431][T17828] v: renamed from ip_vti0 [ 457.977469][T17835] netlink: 211712 bytes leftover after parsing attributes in process `syz.0.2878'. [ 458.177101][T17842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2879'. [ 458.406884][T17852] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2880'. [ 458.645030][ T5645] Bluetooth: hci5: command tx timeout [ 459.093524][T17696] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.120992][T17696] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.159532][T17696] bridge_slave_0: entered allmulticast mode [ 459.189704][T17696] bridge_slave_0: entered promiscuous mode [ 459.200568][T17896] xt_l2tp: missing protocol rule (udp|l2tpip) [ 459.213074][T17696] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.248011][T17696] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.267621][T17696] bridge_slave_1: entered allmulticast mode [ 459.290014][T17696] bridge_slave_1: entered promiscuous mode [ 459.308404][T17903] netlink: 'syz.4.2890': attribute type 10 has an invalid length. [ 459.545060][T17696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.599334][T17696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.732159][T17920] netlink: 'syz.4.2893': attribute type 1 has an invalid length. [ 459.776670][T17696] team0: Port device team_slave_0 added [ 459.802056][T17696] team0: Port device team_slave_1 added [ 459.921218][T17920] bond11: entered promiscuous mode [ 459.950096][T17920] 8021q: adding VLAN 0 to HW filter on device bond11 [ 460.092911][T17696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.117092][T17696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.156052][T17696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.177997][T17696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.185307][T17696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.215558][T17696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.345523][T17696] hsr_slave_0: entered promiscuous mode [ 460.358143][T17696] hsr_slave_1: entered promiscuous mode [ 460.376541][T17696] debugfs: 'hsr0' already exists in 'hsr' [ 460.392548][T17696] Cannot create hsr debugfs directory [ 460.417813][T17958] netlink: 'syz.4.2903': attribute type 3 has an invalid length. [ 460.724589][ T5645] Bluetooth: hci5: command tx timeout [ 460.760833][T17972] x_tables: ip6_tables: dccp match: only valid for protocol 33 [ 460.798811][T17975] netlink: 'syz.1.2909': attribute type 1 has an invalid length. [ 460.887238][T17975] bond8: entered promiscuous mode [ 460.894006][T17975] 8021q: adding VLAN 0 to HW filter on device bond8 [ 460.918488][T17979] 8021q: VLANs not supported on ip6gre0 [ 460.954033][T17975] bond8: (slave bridge2): making interface the new active one [ 460.962177][T17975] bridge2: entered promiscuous mode [ 460.970861][T17975] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 460.980468][T17982] 8021q: VLANs not supported on ip6gre0 [ 461.298175][T17995] sctp: [Deprecated]: syz.1.2914 (pid 17995) Use of struct sctp_assoc_value in delayed_ack socket option. [ 461.298175][T17995] Use struct sctp_sack_info instead [ 461.404786][T17995] block nbd2: server does not support multiple connections per device. [ 461.433454][T17995] block nbd2: shutting down sockets [ 461.444997][T17696] [ 461.447539][T17696] ====================================================== [ 461.454655][T17696] WARNING: possible circular locking dependency detected [ 461.461713][T17696] syzkaller #0 Not tainted [ 461.466144][T17696] ------------------------------------------------------ [ 461.473271][T17696] syz-executor/17696 is trying to acquire lock: [ 461.479609][T17696] ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0 [ 461.489303][T17696] [ 461.489303][T17696] but task is already holding lock: [ 461.496686][T17696] ffffffff8f38d660 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 461.505699][T17696] [ 461.505699][T17696] which lock already depends on the new lock. [ 461.505699][T17696] [ 461.516108][T17696] [ 461.516108][T17696] the existing dependency chain (in reverse order) is: [ 461.525135][T17696] [ 461.525135][T17696] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 461.532454][T17696] __mutex_lock+0x1a3/0x1550 [ 461.537754][T17696] get_device_parent+0x16f/0x3a0 [ 461.543228][T17696] device_add+0x2e1/0xbb0 [ 461.548107][T17696] device_create+0x269/0x300 [ 461.553232][T17696] msr_device_create+0x33/0x50 [ 461.558518][T17696] cpuhp_invoke_callback+0x445/0x860 [ 461.564330][T17696] cpuhp_thread_fun+0x36b/0x780 [ 461.569695][T17696] smpboot_thread_fn+0x541/0xa50 [ 461.575143][T17696] kthread+0x388/0x470 [ 461.579721][T17696] ret_from_fork+0x514/0xb70 [ 461.584819][T17696] ret_from_fork_asm+0x1a/0x30 [ 461.590202][T17696] [ 461.590202][T17696] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 461.597747][T17696] cpuhp_thread_fun+0x127/0x780 [ 461.603118][T17696] smpboot_thread_fn+0x541/0xa50 [ 461.608568][T17696] kthread+0x388/0x470 [ 461.613147][T17696] ret_from_fork+0x514/0xb70 [ 461.618330][T17696] ret_from_fork_asm+0x1a/0x30 [ 461.623694][T17696] [ 461.623694][T17696] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 461.631500][T17696] cpus_read_lock+0x42/0x160 [ 461.636607][T17696] static_key_slow_inc+0x12/0x30 [ 461.642058][T17696] ipv6_flowlabel_opt+0x1b94/0x28e0 [ 461.647855][T17696] do_ipv6_setsockopt+0xd9f/0x3150 [ 461.653478][T17696] ipv6_setsockopt+0x59/0x170 [ 461.658920][T17696] do_sock_setsockopt+0x17c/0x1b0 [ 461.664460][T17696] __x64_sys_setsockopt+0x13d/0x1b0 [ 461.670180][T17696] do_syscall_64+0x15f/0xf80 [ 461.675275][T17696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.681676][T17696] [ 461.681676][T17696] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 461.689395][T17696] lock_sock_nested+0x41/0x100 [ 461.694675][T17696] inet_shutdown+0x6a/0x390 [ 461.699689][T17696] nbd_mark_nsock_dead+0x2e9/0x560 [ 461.705482][T17696] sock_shutdown+0x15e/0x260 [ 461.710578][T17696] nbd_clear_sock+0x24/0x170 [ 461.715709][T17696] nbd_config_put+0x2dd/0x580 [ 461.720896][T17696] nbd_genl_connect+0x19d5/0x1cf0 [ 461.726517][T17696] genl_family_rcv_msg_doit+0x22a/0x330 [ 461.732661][T17696] genl_rcv_msg+0x61c/0x7a0 [ 461.737667][T17696] netlink_rcv_skb+0x232/0x4b0 [ 461.743030][T17696] genl_rcv+0x28/0x40 [ 461.747515][T17696] netlink_unicast+0x75c/0x8e0 [ 461.752868][T17696] netlink_sendmsg+0x813/0xb40 [ 461.758146][T17696] ____sys_sendmsg+0x972/0x9f0 [ 461.763426][T17696] ___sys_sendmsg+0x2a5/0x360 [ 461.768679][T17696] __x64_sys_sendmsg+0x1bd/0x2a0 [ 461.774135][T17696] do_syscall_64+0x15f/0xf80 [ 461.779244][T17696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.785703][T17696] [ 461.785703][T17696] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 461.793343][T17696] __mutex_lock+0x1a3/0x1550 [ 461.798456][T17696] nbd_queue_rq+0x37b/0x1100 [ 461.803590][T17696] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 461.809683][T17696] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 461.816625][T17696] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 461.823206][T17696] blk_mq_run_hw_queue+0x348/0x4f0 [ 461.828917][T17696] blk_mq_dispatch_list+0xd16/0xe10 [ 461.834723][T17696] blk_mq_flush_plug_list+0x48d/0x570 [ 461.840707][T17696] __blk_flush_plug+0x3ed/0x4d0 [ 461.846069][T17696] __submit_bio+0x28d/0x580 [ 461.851189][T17696] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 461.857421][T17696] block_read_full_folio+0x599/0x830 [ 461.863216][T17696] filemap_read_folio+0x137/0x3b0 [ 461.868760][T17696] do_read_cache_folio+0x358/0x590 [ 461.874393][T17696] read_part_sector+0xb6/0x2b0 [ 461.879675][T17696] adfspart_check_ICS+0xb1/0x960 [ 461.885124][T17696] bdev_disk_changed+0x817/0x1770 [ 461.890704][T17696] blkdev_get_whole+0x380/0x510 [ 461.896089][T17696] bdev_open+0x31e/0xd30 [ 461.900854][T17696] blkdev_open+0x470/0x610 [ 461.905823][T17696] do_dentry_open+0x785/0x14e0 [ 461.911415][T17696] vfs_open+0x3b/0x340 [ 461.916017][T17696] path_openat+0x2e08/0x3860 [ 461.921139][T17696] do_file_open+0x23e/0x4a0 [ 461.926195][T17696] do_sys_openat2+0x113/0x200 [ 461.931389][T17696] __x64_sys_openat+0x138/0x170 [ 461.936760][T17696] do_syscall_64+0x15f/0xf80 [ 461.942078][T17696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.948514][T17696] [ 461.948514][T17696] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 461.955726][T17696] __mutex_lock+0x1a3/0x1550 [ 461.960850][T17696] nbd_queue_rq+0xc6/0x1100 [ 461.965951][T17696] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 461.972106][T17696] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 461.978984][T17696] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 461.985571][T17696] blk_mq_run_hw_queue+0x348/0x4f0 [ 461.991201][T17696] blk_mq_dispatch_list+0xd16/0xe10 [ 461.996911][T17696] blk_mq_flush_plug_list+0x48d/0x570 [ 462.002795][T17696] __blk_flush_plug+0x3ed/0x4d0 [ 462.008161][T17696] __submit_bio+0x28d/0x580 [ 462.013264][T17696] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 462.019434][T17696] block_read_full_folio+0x599/0x830 [ 462.025230][T17696] filemap_read_folio+0x137/0x3b0 [ 462.030969][T17696] do_read_cache_folio+0x358/0x590 [ 462.036601][T17696] read_part_sector+0xb6/0x2b0 [ 462.041902][T17696] adfspart_check_ICS+0xb1/0x960 [ 462.047444][T17696] bdev_disk_changed+0x817/0x1770 [ 462.053000][T17696] blkdev_get_whole+0x380/0x510 [ 462.058449][T17696] bdev_open+0x31e/0xd30 [ 462.063288][T17696] blkdev_open+0x470/0x610 [ 462.068210][T17696] do_dentry_open+0x785/0x14e0 [ 462.073512][T17696] vfs_open+0x3b/0x340 [ 462.078096][T17696] path_openat+0x2e08/0x3860 [ 462.083199][T17696] do_file_open+0x23e/0x4a0 [ 462.088214][T17696] do_sys_openat2+0x113/0x200 [ 462.093752][T17696] __x64_sys_openat+0x138/0x170 [ 462.099111][T17696] do_syscall_64+0x15f/0xf80 [ 462.104216][T17696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.110619][T17696] [ 462.110619][T17696] -> #4 (set->srcu){.+.+}-{0:0}: [ 462.117997][T17696] __synchronize_srcu+0xca/0x300 [ 462.123532][T17696] elevator_switch+0x1e8/0x7a0 [ 462.129331][T17696] elevator_change+0x2cc/0x450 [ 462.134612][T17696] elevator_set_default+0x36c/0x430 [ 462.140328][T17696] blk_register_queue+0x3e9/0x4e0 [ 462.145860][T17696] __add_disk+0x677/0xd50 [ 462.150796][T17696] add_disk_fwnode+0xfb/0x480 [ 462.155980][T17696] nbd_dev_add+0x72c/0xb50 [ 462.160909][T17696] nbd_init+0x168/0x1f0 [ 462.165583][T17696] do_one_initcall+0x250/0x870 [ 462.170868][T17696] do_initcall_level+0x104/0x190 [ 462.176332][T17696] do_initcalls+0x59/0xa0 [ 462.181184][T17696] kernel_init_freeable+0x2a6/0x3e0 [ 462.186899][T17696] kernel_init+0x1d/0x1d0 [ 462.191767][T17696] ret_from_fork+0x514/0xb70 [ 462.196867][T17696] ret_from_fork_asm+0x1a/0x30 [ 462.202150][T17696] [ 462.202150][T17696] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 462.210056][T17696] __mutex_lock+0x1a3/0x1550 [ 462.215174][T17696] elevator_change+0x1b3/0x450 [ 462.220452][T17696] elevator_set_none+0xb5/0x140 [ 462.225815][T17696] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 462.232131][T17696] nbd_start_device+0x17f/0xb10 [ 462.237490][T17696] nbd_genl_connect+0x165b/0x1cf0 [ 462.243136][T17696] genl_family_rcv_msg_doit+0x22a/0x330 [ 462.249201][T17696] genl_rcv_msg+0x61c/0x7a0 [ 462.254231][T17696] netlink_rcv_skb+0x232/0x4b0 [ 462.259595][T17696] genl_rcv+0x28/0x40 [ 462.264096][T17696] netlink_unicast+0x75c/0x8e0 [ 462.269369][T17696] netlink_sendmsg+0x813/0xb40 [ 462.274642][T17696] ____sys_sendmsg+0x972/0x9f0 [ 462.280093][T17696] ___sys_sendmsg+0x2a5/0x360 [ 462.285303][T17696] __x64_sys_sendmsg+0x1bd/0x2a0 [ 462.290762][T17696] do_syscall_64+0x15f/0xf80 [ 462.295863][T17696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.302263][T17696] [ 462.302263][T17696] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 462.310853][T17696] blk_alloc_queue+0x546/0x680 [ 462.316171][T17696] __blk_mq_alloc_disk+0x197/0x390 [ 462.321800][T17696] nbd_dev_add+0x499/0xb50 [ 462.326730][T17696] nbd_init+0x168/0x1f0 [ 462.331509][T17696] do_one_initcall+0x250/0x870 [ 462.336871][T17696] do_initcall_level+0x104/0x190 [ 462.342756][T17696] do_initcalls+0x59/0xa0 [ 462.347598][T17696] kernel_init_freeable+0x2a6/0x3e0 [ 462.353311][T17696] kernel_init+0x1d/0x1d0 [ 462.358158][T17696] ret_from_fork+0x514/0xb70 [ 462.363259][T17696] ret_from_fork_asm+0x1a/0x30 [ 462.368578][T17696] [ 462.368578][T17696] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 462.375776][T17696] fs_reclaim_acquire+0x71/0x100 [ 462.381230][T17696] kmem_cache_alloc_lru_noprof+0x45/0x640 [ 462.387465][T17696] alloc_inode+0xb8/0x1b0 [ 462.392305][T17696] iget_locked+0x131/0x6a0 [ 462.397322][T17696] kernfs_get_inode+0x4f/0x780 [ 462.402598][T17696] kernfs_get_tree+0x5cd/0x980 [ 462.407873][T17696] sysfs_get_tree+0x46/0x110 [ 462.412973][T17696] vfs_get_tree+0x92/0x2a0 [ 462.417911][T17696] do_new_mount+0x341/0xd30 [ 462.422923][T17696] __se_sys_mount+0x31d/0x420 [ 462.428111][T17696] do_syscall_64+0x15f/0xf80 [ 462.433213][T17696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.439616][T17696] [ 462.439616][T17696] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 462.447619][T17696] __lock_acquire+0x15a5/0x2cf0 [ 462.452981][T17696] lock_acquire+0x106/0x350 [ 462.458169][T17696] down_write+0x96/0x200 [ 462.462919][T17696] kernfs_add_one+0x41/0x5c0 [ 462.468017][T17696] kernfs_create_dir_ns+0xde/0x130 [ 462.473638][T17696] sysfs_create_dir_ns+0x12f/0x2a0 [ 462.479259][T17696] kobject_add_internal+0x62b/0xd00 [ 462.484979][T17696] kobject_add+0x163/0x240 [ 462.489929][T17696] get_device_parent+0x316/0x3a0 [ 462.495491][T17696] device_add+0x2e1/0xbb0 [ 462.500426][T17696] netdev_register_kobject+0x178/0x310 [ 462.506441][T17696] register_netdevice+0x1456/0x1ec0 [ 462.512162][T17696] nsim_create+0xbed/0x1160 [ 462.517176][T17696] __nsim_dev_port_add+0x857/0xd30 [ 462.522888][T17696] nsim_dev_port_add_all+0x37/0xf0 [ 462.528558][T17696] nsim_drv_probe+0x905/0xc20 [ 462.533830][T17696] really_probe+0x267/0xaf0 [ 462.538842][T17696] __driver_probe_device+0x1ef/0x380 [ 462.544632][T17696] driver_probe_device+0x4f/0x240 [ 462.550179][T17696] __device_attach_driver+0x279/0x430 [ 462.556106][T17696] bus_for_each_drv+0x258/0x2f0 [ 462.561489][T17696] __device_attach+0x2c5/0x450 [ 462.566945][T17696] device_initial_probe+0xa1/0xd0 [ 462.572485][T17696] bus_probe_device+0x12a/0x220 [ 462.577841][T17696] device_add+0x7e9/0xbb0 [ 462.582683][T17696] new_device_store+0x37b/0x710 [ 462.588046][T17696] kernfs_fop_write_iter+0x3af/0x540 [ 462.593865][T17696] vfs_write+0x61d/0xb90 [ 462.598623][T17696] ksys_write+0x150/0x270 [ 462.603473][T17696] do_syscall_64+0x15f/0xf80 [ 462.608571][T17696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.614973][T17696] [ 462.614973][T17696] other info that might help us debug this: [ 462.614973][T17696] [ 462.625282][T17696] Chain exists of: [ 462.625282][T17696] &root->kernfs_rwsem --> cpuhp_state-up --> gdp_mutex [ 462.625282][T17696] [ 462.638135][T17696] Possible unsafe locking scenario: [ 462.638135][T17696] [ 462.645572][T17696] CPU0 CPU1 [ 462.650948][T17696] ---- ---- [ 462.656307][T17696] lock(gdp_mutex); [ 462.660195][T17696] lock(cpuhp_state-up); [ 462.667031][T17696] lock(gdp_mutex); [ 462.673464][T17696] lock(&root->kernfs_rwsem); [ 462.678220][T17696] [ 462.678220][T17696] *** DEADLOCK *** [ 462.678220][T17696] [ 462.686433][T17696] 8 locks held by syz-executor/17696: [ 462.691787][T17696] #0: ffff8880360e2410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 462.700674][T17696] #1: ffff88807c6cf880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 462.710494][T17696] #2: ffff88802a245a58 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 462.720504][T17696] #3: ffffffff8f64f860 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710 [ 462.730934][T17696] #4: ffff88805920b128 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 462.740156][T17696] #5: ffff888079fcd258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_drv_probe+0xc9/0xc20 [ 462.750098][T17696] #6: ffffffff8fdd0340 (rtnl_mutex){+.+.}-{4:4}, at: nsim_create+0x894/0x1160 [ 462.759050][T17696] #7: ffffffff8f38d660 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 462.768351][T17696] [ 462.768351][T17696] stack backtrace: [ 462.774238][T17696] CPU: 0 UID: 0 PID: 17696 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 462.774269][T17696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 462.774282][T17696] Call Trace: [ 462.774293][T17696] [ 462.774301][T17696] dump_stack_lvl+0xe8/0x150 [ 462.774319][T17696] print_circular_bug+0x2e1/0x300 [ 462.774346][T17696] check_noncircular+0x12e/0x150 [ 462.774370][T17696] __lock_acquire+0x15a5/0x2cf0 [ 462.774387][T17696] ? __lock_acquire+0x6b5/0x2cf0 [ 462.774403][T17696] ? preempt_schedule_common+0x82/0xd0 [ 462.774424][T17696] ? preempt_schedule_thunk+0x16/0x30 [ 462.774445][T17696] ? kernfs_add_one+0x41/0x5c0 [ 462.774462][T17696] lock_acquire+0x106/0x350 [ 462.774476][T17696] ? kernfs_add_one+0x41/0x5c0 [ 462.774498][T17696] down_write+0x96/0x200 [ 462.774513][T17696] ? kernfs_add_one+0x41/0x5c0 [ 462.774529][T17696] ? __pfx_down_write+0x10/0x10 [ 462.774544][T17696] ? kernfs_root+0x1c/0x230 [ 462.774559][T17696] ? kernfs_root+0x1c/0x230 [ 462.774576][T17696] ? kernfs_root+0x1ea/0x230 [ 462.774592][T17696] kernfs_add_one+0x41/0x5c0 [ 462.774611][T17696] kernfs_create_dir_ns+0xde/0x130 [ 462.774631][T17696] sysfs_create_dir_ns+0x12f/0x2a0 [ 462.774649][T17696] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 462.774671][T17696] ? do_raw_spin_unlock+0xf5/0x210 [ 462.774692][T17696] kobject_add_internal+0x62b/0xd00 [ 462.774712][T17696] kobject_add+0x163/0x240 [ 462.774728][T17696] ? __pfx_kobject_add+0x10/0x10 [ 462.774744][T17696] ? kobject_init+0x83/0x1e0 [ 462.774758][T17696] get_device_parent+0x316/0x3a0 [ 462.774776][T17696] device_add+0x2e1/0xbb0 [ 462.774790][T17696] ? device_initialize+0x26a/0x460 [ 462.774805][T17696] netdev_register_kobject+0x178/0x310 [ 462.774823][T17696] register_netdevice+0x1456/0x1ec0 [ 462.774838][T17696] ? dput+0x37/0x1a0 [ 462.774857][T17696] ? __pfx_register_netdevice+0x10/0x10 [ 462.774870][T17696] ? __debugfs_create_file+0x34f/0x400 [ 462.774886][T17696] ? debugfs_create_file_full+0x3f/0x60 [ 462.774901][T17696] nsim_create+0xbed/0x1160 [ 462.774920][T17696] __nsim_dev_port_add+0x857/0xd30 [ 462.774941][T17696] ? __pfx___nsim_dev_port_add+0x10/0x10 [ 462.774958][T17696] ? do_raw_spin_unlock+0xf5/0x210 [ 462.774979][T17696] ? __mod_timer+0xb37/0xf30 [ 462.775002][T17696] ? queue_delayed_work_on+0x12f/0x1e0 [ 462.775018][T17696] ? queue_delayed_work_on+0x171/0x1e0 [ 462.775036][T17696] nsim_dev_port_add_all+0x37/0xf0 [ 462.775055][T17696] nsim_drv_probe+0x905/0xc20 [ 462.775072][T17696] ? up_write+0x1ab/0x410 [ 462.775093][T17696] ? __pfx_nsim_drv_probe+0x10/0x10 [ 462.775109][T17696] ? kernfs_put+0x4bf/0x520 [ 462.775128][T17696] ? kernfs_create_link+0x187/0x200 [ 462.775144][T17696] ? driver_sysfs_add+0x1fe/0x210 [ 462.775161][T17696] ? __pfx_nsim_bus_probe+0x10/0x10 [ 462.775176][T17696] really_probe+0x267/0xaf0 [ 462.775195][T17696] __driver_probe_device+0x1ef/0x380 [ 462.775213][T17696] driver_probe_device+0x4f/0x240 [ 462.775231][T17696] __device_attach_driver+0x279/0x430 [ 462.775250][T17696] bus_for_each_drv+0x258/0x2f0 [ 462.775271][T17696] ? __pfx___device_attach_driver+0x10/0x10 [ 462.775288][T17696] ? __pfx_bus_for_each_drv+0x10/0x10 [ 462.775311][T17696] __device_attach+0x2c5/0x450 [ 462.775329][T17696] ? __pfx___device_attach+0x10/0x10 [ 462.775346][T17696] ? _raw_spin_unlock+0x28/0x50 [ 462.775365][T17696] device_initial_probe+0xa1/0xd0 [ 462.775382][T17696] bus_probe_device+0x12a/0x220 [ 462.775395][T17696] device_add+0x7e9/0xbb0 [ 462.775412][T17696] new_device_store+0x37b/0x710 [ 462.775428][T17696] ? __pfx_new_device_store+0x10/0x10 [ 462.775443][T17696] ? sysfs_file_kobj+0x1a/0x230 [ 462.775457][T17696] ? sysfs_file_kobj+0x1e4/0x230 [ 462.775471][T17696] ? sysfs_kf_write+0x166/0x260 [ 462.775487][T17696] ? __pfx_sysfs_kf_write+0x10/0x10 [ 462.775502][T17696] kernfs_fop_write_iter+0x3af/0x540 [ 462.775517][T17696] vfs_write+0x61d/0xb90 [ 462.775539][T17696] ? __pfx_vfs_write+0x10/0x10 [ 462.775558][T17696] ? do_sys_openat2+0x14c/0x200 [ 462.775573][T17696] ? kmem_cache_free+0x182/0x650 [ 462.775591][T17696] ? fd_install+0x94/0x3d0 [ 462.775611][T17696] ksys_write+0x150/0x270 [ 462.775631][T17696] ? __pfx_ksys_write+0x10/0x10 [ 462.775652][T17696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.775671][T17696] do_syscall_64+0x15f/0xf80 [ 462.775685][T17696] ? clear_bhb_loop+0x40/0x90 [ 462.775701][T17696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.775714][T17696] RIP: 0033:0x7fd432f5d68e [ 462.775728][T17696] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 462.775741][T17696] RSP: 002b:00007ffc97c7d928 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 462.775756][T17696] RAX: ffffffffffffffda RBX: 000055556cb68500 RCX: 00007fd432f5d68e [ 462.775767][T17696] RDX: 0000000000000003 RSI: 00007ffc97c7d9b0 RDI: 0000000000000005 [ 462.775776][T17696] RBP: 00007fd433033616 R08: 0000000000000000 R09: 0000000000000000 [ 462.775784][T17696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 462.775793][T17696] R13: 00007ffc97c7d9b0 R14: 00007fd433d44620 R15: 0000000000000003 [ 462.775809][T17696] [ 463.349362][T17696] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 463.359230][T17696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 463.367393][T17696] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 463.377052][T17696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 463.385136][T17696] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 463.395420][T17696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 463.403064][T17696] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 463.412128][T17696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 463.452322][T17696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.467314][T17696] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.479283][T13846] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.486390][T13846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.498703][T13851] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.505943][T13851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.707164][T17696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.732498][T17696] veth0_vlan: entered promiscuous mode [ 463.743377][T17696] veth1_vlan: entered promiscuous mode [ 463.762200][T17696] veth0_macvtap: entered promiscuous mode [ 463.770743][T17696] veth1_macvtap: entered promiscuous mode [ 463.784307][T17696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.796821][T17696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.808735][T13846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.818499][T13846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.828758][T13846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.838080][T13846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.861607][T17696] ieee80211 phy40: Selected rate control algorithm 'minstrel_ht' [ 463.882059][T13851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.886446][T17696] ieee80211 phy41: Selected rate control algorithm 'minstrel_ht' [ 463.890296][T13851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.917884][T13848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.926534][T13848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50