last executing test programs: 4m47.152868661s ago: executing program 3 (id=1082): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000000)={0x4, 0x0, 0x1, 0x81, 0x6, 0x2, 0x18, "5e32292114e032b28aabcdd5348c43b5f529e8c4", "8ceb0b4cbabc78952ce3fdf6a6a73e8681eb5663"}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@mcast2, 0x200000, 0x0, 0xff, 0x1, 0x22d, 0x40}, 0x2f) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x5}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x3}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41bd31d4176420eb}, 0x24000000) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m46.842552686s ago: executing program 3 (id=1085): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)=0x6, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x51}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20004810) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000440)=0x8, 0x4) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000001500)=""/3, &(0x7f00000000c0)=0xfec2) close(0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r4], 0x68}}, 0x0) 4m46.088125672s ago: executing program 3 (id=1091): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83", 0x6a}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0x15}], 0x3}, 0xc854) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendfile(r2, r3, 0x0, 0xffffffff000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000004c0)='bbr', 0x3) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd23, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xb812f6b897940071}, {0xf, 0x2}, {0x2, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="33baf65c86ec0020000000080800470000300000000000069078ac141400ac07000109036b4404070300fffe0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5080772790780000"], 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m45.049991372s ago: executing program 3 (id=1098): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) (async, rerun: 32) pselect6(0x40, &(0x7f0000000100)={0x8, 0x6c1bd504, 0xf, 0x4, 0x1, 0x0, 0x3, 0x1}, 0x0, 0x0, &(0x7f00000003c0), 0x0) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.self_freezing\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r0, 0x100000000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 4m44.421474026s ago: executing program 3 (id=1106): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_to_batadv\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x12, 0x5, 0x1, 0x80}}) unshare(0x62040200) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0xa0, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_SCAN_SSIDS={0x6c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x5, 0x0, @random='2'}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x8}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x7b, &(0x7f0000000000), 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000002c0)={'a', ' *:* ', 'wm\x00'}, 0x9) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000400)="80004b77efe55463", 0x8}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES8=r7], 0x30}, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f0000000280)}) bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r10, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001e00431b000000000000000007000000", @ANYRES32, @ANYBLOB="000017000000000008000a00", @ANYRESHEX], 0x2c}}, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000000)=0x4fd0, 0x4) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r11, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x4d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m36.853007354s ago: executing program 3 (id=1133): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x48}}, 0x800) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r4, 0x1) 4m21.752870125s ago: executing program 32 (id=1133): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x48}}, 0x800) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) shutdown(r4, 0x1) 6.889446275s ago: executing program 5 (id=2815): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4809}, 0x14) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r5, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1e0, r1, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x3c}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x57}}}}, [@NL80211_ATTR_VENDOR_DATA={0xd8, 0xc5, "a89785aeb2389266ff8966f6a735ee2e633d009c320499c746bb56ca1606e3d8f2bb660c7b453736cd82bca69d9163fee124b6c73c4a0c0a673332e7ccbf4af90c18836cb41b8fc7fddfce7bc2c64961daf2654d312611cbcf3e3b2ca6102d07f92d0e1dfba2d0be5b0e37fe0ea0d28f62d84f7f0cf7152289464c48848c667e1530fd0f5d42c2480c40cafc7f1e78ac0e2571d3d27cfe4afbd93a7852ee47840beba65c72272e4510ca11f53afb2952daa9431347faddd4e78ef966e04f4f1accd38e0f322b86595841da8ca847ca854f418890"}, @NL80211_ATTR_VENDOR_DATA={0xd8, 0xc5, "8ba46b04435dea619284dfb7c7fbff1d8516b0fe86ba20ff4be47c954bcfcb995a4076674aa3b621cd846d9fe096a0d0a591923a15c96ce26ffbadbee1adb5f1f9dd2ca07fe12ab97132004906e69490ab60577e024dff7e5089aafdbbd135f9e0ec4089889932d1d9a6a444a85d3e6c4af2040ee744513aeb411c2bffb07fbfc4ad35b64c586defe64c3777ab15b0a7c7deb5ab299a61486c37495a1a12670cead19781ec96ca4c9f638bd3972bbd814040c7bb09c0f661d177a70d1eb15a7c55ac363777298a50b07942a866da7339c2c28bcd"}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x800}, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000000000010200000000000000005f"], 0x0, 0x58, 0x0, 0xa}, 0x28) 6.505633301s ago: executing program 5 (id=2819): unshare(0x42040400) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000140)=0x7, 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0x9, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x10, 0x4) bind$can_raw(r1, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000), 0x4) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in=@local, 0x4e23, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010102, 0xfffffffc, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r13 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r13, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0}, 0x48814) pselect6(0x40, &(0x7f0000000000)={0x88, 0x3, 0x7, 0x2, 0x7, 0x7, 0xa6b, 0x1000}, &(0x7f0000000040)={0x7fff, 0x80, 0x100, 0x8, 0x158, 0xa, 0xff, 0xa0fa}, &(0x7f0000000080)={0x7, 0xffffffff, 0x3, 0x10001, 0xffffffffffffffff, 0x3ff, 0x1ff, 0x7fff}, &(0x7f0000000180)={r9, r10+60000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x1]}, 0x8}) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) 5.597954456s ago: executing program 1 (id=2823): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000007050000850000001b000000b700000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) syz_emit_ethernet(0x86, &(0x7f0000000400)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@end]}}, @redirect={0x4, 0x2, 0x0, @multicast2, {0x16, 0x4, 0x0, 0x4, 0x0, 0x64, 0x0, 0x1, 0x11, 0x7, @empty, @dev={0xac, 0x14, 0x14, 0x15}, {[@cipso={0x86, 0x6, 0xfffffffffffffffe}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@multicast2}, {@rand_addr=0x80, 0x4}, {@private=0xa010102, 0x1}]}]}}}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x14, &(0x7f0000000440)={&(0x7f00000008c0)=@newtfilter={0x284, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x254, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x130, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xf5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x800}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x54, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x400}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x34, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe7fd}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xf11}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x400}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x44, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe147}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xec, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4000086}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x75}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xb7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x400}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xd5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}, @TCA_FLOWER_KEY_TCP_DST={0x6}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x80}]}}]}, 0x284}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5.37461069s ago: executing program 2 (id=2825): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)={0x38, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x2008040) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000002c0)={'dummy0\x00', @random="0100"}) 4.878481141s ago: executing program 5 (id=2827): socket$igmp(0x2, 0x3, 0x2) (async) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x3d) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000240)=0x3, 0x4) recvmmsg(r1, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) 4.549785034s ago: executing program 5 (id=2829): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x4, 0xcbf, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x8, 0x0, 0xd65}}) r3 = socket$inet6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, 0x4e20, 0x0, 0x4e22, 0x1ff, 0xa, 0xa0, 0x80, 0x8, 0x0, r4}, {0x6, 0x8, 0x1, 0x6, 0x6, 0xbdb, 0x1, 0x4}, {0x7, 0x8, 0x4, 0xfffffffffffffffc}, 0x10000, 0x6e6bb8, 0x2, 0x0, 0x3, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0xff}, 0xa, @in6=@private2, 0x3504, 0x2, 0x0, 0x9, 0x30e4, 0x1e2, 0x9}}, 0xe8) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0x2, 0x180, 0x20, 0x84, r1, r4}, {0xff, 0x2, 0x4, 0xa, 0x8000000000000001, 0x8001, 0x80000001, 0x8000000000000001}, {0x9, 0x7, 0xe2, 0x5}, 0x9, 0x6e6bb8, 0x2, 0x0, 0x2, 0x1}, {{@in=@rand_addr=0x64010100, 0x4d5, 0x6c}, 0xa, @in=@loopback, 0x3505, 0x0, 0x0, 0x9, 0x3, 0x4, 0x4000000}}, 0xe8) socket$key(0xf, 0x3, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4f}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) recvmsg(r8, 0x0, 0x12000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10}, @in6={0xa, 0x4e23, 0xfffffffd, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}], 0x38) unshare(0x8040480) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x11, &(0x7f0000000080)=0xfff, 0x4) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x4e, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) 4.387162114s ago: executing program 2 (id=2830): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000002040)="11054305", 0x4, 0xb01, &(0x7f00000004c0)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @random="02cac7f9a4c7"}, 0x14) readv(r0, &(0x7f0000000080)=[{0x0, 0x500}, {&(0x7f0000000980)=""/4096, 0x734}], 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 4.329277017s ago: executing program 1 (id=2831): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x1000000}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2e}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xb, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000013c0)=0xc7f) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x44b, 0x20000000, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x804) 3.640807391s ago: executing program 5 (id=2834): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x9, 0x3, 0x268, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0xe02d, 0xc, 0x5, 'syz0\x00', 'syz0\x00', {0xb}}}}, {{@ip={@empty, @private=0xa010102, 0xffffff00, 0xff, 'pim6reg1\x00', 'batadv0\x00', {}, {0xff}, 0x21, 0x2, 0x54}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x9, 0x7, [0x38, 0xc, 0x29, 0x24, 0x14, 0x3b, 0x38, 0x36, 0xd, 0xd, 0x38, 0x2f, 0x3b, 0x2d, 0xe, 0x17], 0x0, 0x1ef1, 0x40}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r3], 0x54}}, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff7f0000010000000100008000000000c231b30a0000000002000000000000000100000000000000000000000000000000000000000000000000000000000000ff070000feffffff0300000000000000090000000000000000800000000000004a06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900"/768]) 3.382253156s ago: executing program 0 (id=2837): r0 = socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a0000140002800c000680080001"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$igmp(0x2, 0x3, 0x2) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0xe, 0xfffffffc, 0xfffffffb, 0x3}, 0x10) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, 0x0, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) (async) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000040)) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e1d, @multicast1}, 0x10) 3.118669378s ago: executing program 1 (id=2838): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffd, 0xc, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000001080)={r3, 0x3, 0x20}, &(0x7f00000010c0)=0xc) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000003, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r4, @ANYBLOB="83040500000000003000128008000100736974002400028006000f0002000000060011004e210000060010000590000008000300ac1414"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 3.117602986s ago: executing program 0 (id=2839): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@empty, @private}, &(0x7f00000000c0)=0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000140), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r3, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000804) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) recvmmsg(r0, &(0x7f0000000880)=[{{&(0x7f00000006c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000740)=""/165, 0xa5}], 0x1, &(0x7f0000000840)=""/61, 0x3d}, 0x7}], 0x1, 0x4020, &(0x7f00000008c0)={0x0, 0x989680}) recvfrom$l2tp(r0, &(0x7f0000000900)=""/97, 0x61, 0x40000043, &(0x7f0000000980)={0x2, 0x0, @dev}, 0x10) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f00000009c0)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a40), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r10, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nicvf0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x8010) ioctl$sock_netdev_private(r9, 0x89f9, &(0x7f0000000b40)="ee58a9679e7f2798bcef52929463685b4808fba4272bd7d61c804ad09ceae75b1a44eb8ccdc7ca1d8047d55e3721b8a10235a82c04609893f0b145a2e57ea138d2a7a38e6ab5cb7cd36bc1053205024cd9b9bb559de2c1f961a370c823684722be3abd5492b62d66e284578fd796ffefd61b07f4909878656b6c2671a8017adf44387b4b8f6473492213cbe00169099bd285196b6a4a3da0436198e2804f61c8768226adf958dfe9b30097e06c1b2f69dae4fac20ad66a08b114f2025d8f70f46612f154869bf94380e2b95a6066efd8d16549f8e505c41d5ce20b54f923b0c6706e4f3cb5244b4a6b94") setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000c40)={@loopback, @rand_addr=0x64010100, 0x0, "b640291cd21d94c1b95a680cf6a71533dcf82238247c3696766e5f3cc7c24da1", 0xea, 0x2, 0x0, 0xef}, 0x3c) r11 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000c80)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x800) bind$vsock_stream(r11, &(0x7f0000000cc0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) r12 = socket(0x20, 0x3, 0x500) getsockopt$kcm_KCM_RECV_DISABLE(r12, 0x119, 0x1, &(0x7f0000000d00), 0x4) connect$rxrpc(r12, &(0x7f0000000d40)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x24) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$OCFS2_IOC_MOVE_EXT(r13, 0x40406f06, &(0x7f0000000d80)={0x200, 0x395, 0x9, 0x0, 0x2}) 3.010635267s ago: executing program 5 (id=2841): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x3, 0x2d75, 0x414, 0xc, 0x4]}, &(0x7f0000000080)=0x78) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x202, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000700)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}}}, 0x108) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r8, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}]]}, 0x34}}, 0x0) recvmmsg(r5, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_raw(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) socket$unix(0x1, 0x0, 0x0) getsockopt$MRT(r1, 0x0, 0xd0, 0x0, 0x0) 2.834486423s ago: executing program 2 (id=2842): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000380)}], 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000800000000be6f86cc1ce90f6a5c765e2bcb363a0d72f5e80c123c2cd9392c75e6db42605e073df2438776f9719e329f0f8cc8925f56d011b133ead9f34ea6346c12489feab757e9d1ec7e98c0f7514426d79b327068b0bb9127f19053cc753783f64b9800bb4cc2cf39f1f944eb4e9c3802524d00d2a8f377edfd570fd9e968e8a8651c94d4f49aff0820564c05bebe05e4bb4147912edd45392605646901f64f032bdb100a8d0fb4105eecb6313aa0f29d8f494f5329a1", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b000000000010001a80080002800400018004002d80"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) 2.73885079s ago: executing program 4 (id=2843): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="2800000025000701fefffffffcdbdf251f7c000004004580100001"], 0x28}}, 0xc000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002002000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ffffff000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="2800000025000701fefffffffcdbdf251f7c000004004580100001"], 0x28}}, 0xc000) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002002000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ffffff000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) (async) 2.60343847s ago: executing program 0 (id=2844): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) (async) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000700)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="e05a5de397ee362f573ea834553caa1d10689e25a2cbda2dbb0b", 0x1a}], 0x1, 0x0, 0x0, 0x4048015}], 0x1, 0x4000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000040010000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000010180000000000000000000000000000019500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffffeb702000008000000b50af8ffffff0000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/25, 0x19}, {&(0x7f0000000b00)=""/111, 0x6f}], 0x2}, 0x8dff) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0xf6, 0x0, 0x1, 0x5bd7, '\x00', 0x0, r3, 0x4, 0x5}, 0x50) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r8, r6, 0x25, 0x0, @val=@tcx={@void, @value=r7}}, 0x1c) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r4, 0x0, '\x00', r6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8008, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x29}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x7800, 0x0, 0x4, 0x1, {{0x8, 0x4, 0x1, 0x3, 0x20, 0x64, 0x0, 0xfd, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@generic={0x7, 0x8, "a58238c7c6b2"}, @noop]}}}}}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x3, [@decl_tag={0xa, 0x0, 0x0, 0x11, 0x4, 0x4}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x5, 0x3}, {0x6, 0x3}, {0xd, 0x5}, {0xb, 0x4}, {0xc, 0x4}]}, @enum64={0xe, 0x7, 0x0, 0x13, 0x0, 0xe, [{0x4, 0x0, 0xffff2bfa}, {0x8, 0x2, 0x6}, {0xc, 0x2, 0x9}, {0x7, 0xfffffc01, 0x80}, {0x9, 0xbf0, 0x2}, {0xf, 0x3, 0x6}, {0x4, 0x5, 0x7}]}, @float={0xf, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x2e]}}, &(0x7f00000009c0)=""/135, 0xcb, 0x87, 0x0, 0x1, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x400, '\x00', r10, r11, 0x0, 0x2, 0x4}, 0x50) (async) r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=r12, @ANYBLOB="00042bbd7000fddbdf25030000000800020005000000050006000900000014000100ff020000000000000000000000000001050005000400000014000100ff020000000000000000000000000001"], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r13, @ANYBLOB="0c0099000080000030000000140004006e69637666300000000000000000000008000500060000000c00178004000700"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40048a4) 2.546508676s ago: executing program 2 (id=2845): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) socket(0x22, 0xa, 0x2) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) (async) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_open_procfs$namespace(0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x0, 0x5, 0x3f}, 0x2c) (async) socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000140)={'geneve0\x00'}) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) (async) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.39475526s ago: executing program 4 (id=2846): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x8, 0x0, 0x9, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x6, 0xff, 0x0, 0xfffffeff}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1d88fb8f", @ANYRES16=r4, @ANYBLOB="00022bbd7000fbdbdf256d000000"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) sendto$l2tp6(r1, &(0x7f0000000300)="ab4c94c54f9439eb436521af9e0c7592e59e7ed50a6228f0d391703c68d52eecd82725f3843e32caec5a500399e018c74889b2f4ff56393ea4b11b441266184ed13885b8656f548ffb2b64bcf460f4de327f10cb3b627d692132563f6f31b150661b9b8d7b94c4bd79ae77b8571c74fc5efe9d180bdc92f6947150db499aabfd0e8607956db6f6c09c8312f9b0b3109ca3998e2d35f088938db590bd8358879062bfbc5307e11aba362c2b95", 0xac, 0x11, &(0x7f0000000400)={0xa, 0x0, 0x2, @private0, 0x6, 0x4}, 0x20) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000d00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000cc0)={0x0}, 0x1, 0x0, 0x0, 0x2f77884de46ea1b9}, 0xc8c0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7002}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x8002}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8885}, 0x410) 2.365021517s ago: executing program 0 (id=2847): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1d, &(0x7f0000000340)=0x3, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000480)={0x0, 0x0, 0x7, 0x2b, @vifc_lcl_addr=@local, @broadcast}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e657269"], 0xe0}}, 0x0) sendmsg$nl_crypto(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xf0}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r7, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000040a010100000000000000000a0000010900030073797a320000000083df0a63f183422e4215036c08a6377775327d731a22565a505990290b084f38d7af564b530c79f51a3b1c74ad86292d882cae"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r9, 0x1, 0x8, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r6, 0x3) sendmsg$inet6(r5, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) r10 = socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000380)="65be1a974c7584f4cc4d72438a7e286f1c10f14894214f4c60f8a4463db0eb8e798f959395fd1a53a804a223da4fb8be5b5ac627a67b46c9610b2cf4bb5505b608965726fd58a911c28d81e76324a22378d5a073537f1877c3616084c23ea6a5a7ba6e372dbce41339ec9defefb6ce95d315d657ffb271e4c925cdd5c5", 0x7d}], 0x1) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) sendfile(r1, r4, 0x0, 0x20000000002) 1.823191389s ago: executing program 4 (id=2848): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080)=0xf, 0x4) socketpair(0x6, 0x5, 0x7, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) getsockopt$nfc_llcp(r2, 0x118, 0x2, &(0x7f0000000140)=""/153, 0x99) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000400)={'filter\x00', 0xf5, "6646a890d9629562814385fd96d8731d08cbc5770cc230052216f7a246fbeb43e0a23c3150c39dc09332ce8f66684029f13e933cc021e71401dd6a12ba8b4996a3e046609ca94246883e82b7e43b6ef5c8d6905f312af21bce6259ab261c5cd9a91898ce9a4b4c81cd26c2847af2c9bbb1c24fe8bc1954aa560fb45fa9a007452fe7cdf5a123be2e9448756b7e1e718b700167ff215dfa25dd1697113372f18d0c2496ece429c38836af049109f6242d011b995a7e9017250f5f36e19d221844ef9619bb8c7c101f9ad0ae91d38fe9359d599f3b2bc13f65de1a6af940e5d8f85b7e697b0bf8c3bd5c3aa9d1b2706f7af843c2eb2a"}, &(0x7f0000000540)=0x119) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'ip6_vti0\x00', r6, 0x29, 0x1, 0x4e, 0x9, 0x40, @mcast2, @local, 0x8, 0x8000, 0x7}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'veth1\x00', 0x0}) bind$xdp(r3, &(0x7f00000006c0)={0x2c, 0x4, r7, 0x7, r1}, 0x10) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000700)={0x1, 'U'}, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000780)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6c6, 0x8, 0x6, 0x400, 0x61, 0x100010, r8}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000800)=0x1100842, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x900048}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x80, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x50}, 0x48000) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000980)={'filter\x00', 0x45, "fa145b5ccf1f811bf59c21c84c8a8336780a806583a778904d87185572304d5fbb7c96a2c780ec43d003457e6406dad900f6c66dcf2caa1a33dc7b41999620a6528cebe284"}, &(0x7f0000000a00)=0x69) sendmsg$NFT_BATCH(r4, &(0x7f0000000dc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0xf8, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x27, 0x6, "bb72424e2c57638284ca6ce2bbfa0a7ecc5a133f7539c9e8a661d35fac144b451b2c69"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x94, 0x6, "87a6dbd14407a3e7a3f06131e6bf2885cb87d028a7bd323dcffc097adda0b88f6b71daaa2c698cbfea9cd32e78e93b85ff057dd6d221938e3bdc229a171a0dbcb2a96c93bd0fe046047934816711806efccd9c7574b32ca9203e277a6f72c528451ccead6f159bc5d3250447f8754c6c82360ff3a3208b782389952362634296022f809c8ecb19ed12731c414d449608"}]}, @NFT_MSG_DELRULE={0x1c4, 0x8, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_USERDATA={0xa0, 0x7, 0x1, 0x0, "e4200eaef59f5fc283b65881cf9150c5b7b46296262e9efbf8d332e9e21852ccdbfefc8099a9d024e676faab28f8613d3bed85db40da9eaa2d19b2e7ca8c23caae5425b4a19a56dc9c06362b651c1eb6148fb9fd71b7dcc39a03b25f792f0b302a12ed76b7d09dd7a31a16e8aca4a63a5433997e49eb117eedf20c5035474973419a0308325d9c67606c98cf17e0684388b7c571d0779232bd712e9d"}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8038}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1d}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}]}, @NFTA_RULE_EXPRESSIONS={0xb8, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x5c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}]}}}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x2f8}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_emit_ethernet(0x1015, &(0x7f0000000e00)={@remote, @broadcast, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@llc_tr={0x11, {@llc={0xf4, 0xf4, '@', "56f9e5753a79ee537c69af3efb6afce6be73bcd09cc074f6035f29f4c5f462546766eca7ce506c24ead4a3890f3f910e2af516970e783637131ab4fe37994aeff4f1a523eecbefc531b97fb370cd08a549e9e515e698e6f30507ac43818d8ff00e1fdf4c67f9b2468cc4041a537706928ecb1fa6ca929655ad924c5a76bed21037f9d12fc43316f92355988ea9c67c6ff8d7edaa5e3cde3e31fe085468aceed36fe9ade6dcbe8c04336aadbf4411ca0353a2856c31e705b9d32bcde685d7c2366c4ea7871169637371b242b17dde92eb2bd899a75e66eab1bb48cb829ca51a5eb63d777d2b56a18c2b1b4cb02a16870d3968e205b4179afdcb9da12b20f379092308cdbdba797efafd50bba93c1602812e02340e353cd20d8af716a6a20278c82ae610e4804e00bb2b7c651af37b4d460424b3a9301faac45a0854c8fa93fefefd2cb11de59711f0f71b3e174811d829c8ae7976a5af8a489429b1707bd5256ae1ab89d9ed672791f050ac627d5b8584178ca713eade75714e51001ea81aa9865cb95761cd0e028f7e33a75c1043506073c4e66d9dedd6045fe8b3f27a0cc221be055c79004a9361fd86302126a94605e5a081a56b680e2e45332640a5c8f0a0839aaa944c2e12c974dddcd304337895d9fd17e2cad8a3d6f3ae8f2e2ff056d12f0512ee0ea2ecc0c1ae733b83ea39c432fe6e08f17da241aec796ae2707b588f84fbc2c0437bf60ad926c645d9e6256face569d1d7b8cb80da39c6f293acb23493989f7ded00f6f35655a678d673a6b5496937a930129e7c093333a06fdac83ca6d716ad7951b30851de6bf893f45355429b36d2ab1f77dcc4ab19f57b4852f23ae23b4f0940207b14467addb77bbe4dd9d7c269a625e2bf11a447156e0afedeb0434756356025f45f1da0f5d3929d37b725165d9034516a93231def65a33455119e8d5398cb207bedf9c24c082b20c0aa31a4212e63d9968a9cab2aeb59a5524c5ede99f1eaf9bf3494e7ab8ac5a7f6ba2407527e383c05bc1385291d744af8faa2cdc16e1d1c62b8c3d39f4ab5f4fa91db0702aede11ebeca02dce871bea8aedfe54ac77d82d5ab5b87dac0f10a082b7ebced130af0928b7b79f13b1fd4cfa5a155680780effd6b4f551a4dbb25f7fbe3e0e85dc981cab800e7f70da8c6f1a9cb14bfd0358e54030c445d518d0ae6ebad7225827192e7ce264807b30249683e22e66de7a8abf5cd87f4edb55935b43257bd59f0c2a28dfec8ea09af543fe6caee81fd749a1e8aa7563438eda427b4119ead65940e1a5c689ab9d5a25b3826ff2d8f37fdebf33d31e8497af0cf84fbf3cb908e84c3d547316f5017f9e5ec93b7947d08a939782ee9140b480e3339b1e2ccd9d8c71490fdecf468f6946132b639c2040d832a7302f3021e4895e237b8747518cacaede631afdf7eb745b7cd1d550697b0babe4edea4efeb28852e77a4492f8550b3d5acc708d29c2ca2b0918da2d512091b26d36570674e7d25b4b5aeccbc832040aa57e2acfa7d840aa48d55fc0ed1ef8b4a8943792b3c6be1466cf9ef17d4053c72763c1b99bb6b6506160235a8d9775c41d140793a8ba5a51659433794bf04e97360b9996af71d27817c7feebc4f9b290032d7f2592f7771eac0947d5e6815fe9e82de1ddb913b359927f121820885fab03fa0794f5a4314e7918c50b39bb9e8f569c088e388a12e76fea7a9167f802386ca868b981c2c8fb5caca3134bb176a086469482e866228bd2024b516413d2ec974d6eec703c530bd35ae288a28de11c9411c3525e115a2c82789d25d4a51577df5a4104b033e3af8c4d8c17048a997f857b7886ea29ade1f849b693619246f6271a011564c55d9fd30fd30e34b39ec9fe72f26a8bae0546a634459f9999a011171836fe93372306af43673ac7efcdd6c68480d7c0824dca0ee1ad9d5629b83be472298a3737b5c6f0e4180f296ed824cd45cbbf22cc7c57ae5fee48dfdc684d871cb08ee8445d94d787862cfa4ac64abcbead8da503d2038db6960911d384a8cf285eb6138e2c93f7f139f94a88bf68d970dc7c2560d465e50cfae3621826294eb37487cd03efa642b30fe676f6f43c613c94f75a1cc80ce9b95b8b23130b188920cc07d6673064f7232c3637bd64b4926dd70a89ca62168e435dcb8c225c9050772057f9fd1e426c41b5462ecce152cc426146162fc24268b7b6c3e78f2e30f2640cc94b6b0ce18d16668430ee039ff5f5d94794ce1b60cb369bf34f0cf6460a2db3244f050c38c22d8ba71c46388e8432062eda0792afd88493c0a5d39ba2b4b0d38f9a48e535444384a5e25157130864ff435d0162ceefdb11793fcb21455b244c40a70517b7b28b2bb68ad3d71dcbb1dc686738fea66a2758634be2ff7eeee4416144532838d31cb8034975aaac1c90e1ea7cc9de9df42b5bb790c04ccc8ce11475268fb239fa188646e3a0af6c34d84a23f9af8bf77e419ec4e029970759d06227eed13b6406318f320c830ce3367afe751b89c0d2d4194b5cbe976868aeaa02ccaebb18db2f434e97772ab1a33c58f558d20ce47e2ce6e32d3e30f55e0b350be318df1b2eef0bcb02855e2fa48796f6f52f6df6eef3d877da9803daaadd54e24973f7c9eecbadcf4e8120299a57cd700135a9319eb15f53504c31be07d8c546b652cda71eed549b985b4f43212e3d37cda9383add7efae6e63839578e2d097a6418aa9135ceb2e9462cde951fb85d8ec7eebc4bbdfc081ac5403af4fe25f2a06faf9a4f9de9d162205319b9c5f36fcc01e3922d272a70aa0e3cf1b18f1e362b19223290df720c3a851668e51a0258a0374192d76099e85156134bfe3678f56732784734538f046e891fb67453b5f76e173bc0d4b92a9c3aa115812bdc0b95310203381dc8d41e0285d56df041e98b16282d8310fde82a36b0bf9d43f066a0d0b26cb1b337313ccd5a24326d569aa02c560fd0dc04d83a96fe258076b8c5539ecd5c6fc2ee02100eaf980cc87d08a46f6c13e60e483229795b60ddc07a0188256a0e53ebadd06695722d3d847a4a3a1b5ce625101fd6a4288317897045852af68328b619c7f3e57f27d44bc94d8406411f22241b5c6c5ab6285313149f3d7b71dddceae51deb77af370b88b979202c118a77424a18127da20803fecc7e76c6ef565ac8d7617aaf268c6f8414b9f41d79781a84f170ba93757a4047be403e5e99574c595a99ebc59eec39fa69b9e8555dde6b66edae8ae777ba7c0f255337f758b26a53f9a7d5d2af8426b03d387cfd7faddbd1d611f43fc59346223a8d22fe003ca7efcd1b166e712a615ef978d8a0c4da61e8b92178c001bd83bb39b736fcd81b373b44e246677c93812263bd23c3d8aa572d32a7074d7ccd36f07577170b711e173cc13d9b80c0e0761280fcd2f6e10776f2d21884c383c3a3128b9fbf462d242c01540f2ba1a6ade1472df7dc7c1015e12f950da06bb0172baee6a6a2665fc506fc02e70a3b9937587cad7c6cbd7cb7771e79966d3ed7eb68b980824e66e274582e61377cbe160d47472feaabbe84989e95a6566c61955ec5b71241b36e718212abbac03393d9a248e557769dcd26880398174692069aef172ef88fbc98c50d78ab04d78fed07dac435d528c304094c44978b24287fe0dc75d84f4b7e9806a1d07ca1481e3eb4ec0c3b3c4cd5c33541df8f4066f377c494766f95726e3fe33d21963c4835e7491163f81eefbe950403dc1be47f8e71189224ad0e7f4264d5dbe274e616c509d3523b37425f023d339e91382aa957d231708dca02e7adb3b94dc92a2a0355521db8061079163fdbac2d04f8163c49c2afcc2e680ff34b7b497c85b41d972daf1b4823f42bff5b01d263bb0544450073870a1528f6bef482278b0b62cc5a0cf2b10528fd33dacc59c3d8a9684e47dba5412d86c79ca505a231bd4eb85d9a3beb89699a9f049648047d93a62e08272ae9cc3cb56d7494e20faaf362f8a5f2ce313d9667c0a828bbde133c5fb2c3274521f50bd980a45bffb26a54051bf8f5c34f0c40609a823358f8002126d1fd5beb93a90523ca7b7a9b7f2a71ab2a193c2c9253fe8ed0297dc7cc0e5ea41f44c72fada1b520895b46e717477e57d5c3ba422df53f4251e57b6cc212b1adb886da468aad297475c4655d0269db8e5e433117d8fca2df7742eb98728e1b36825ba2c3570f91733fc7b01307e6d35849ea5c93b65620fe922533b714259099c86b14e4aa7c5248a97b430acc1fe9a07c32dfc5d1540d1ca625c9b5d5999e7ddd7b511d90c66417a48cf320e97defd9fd6779e982433274b4bf792125c822ecd3b5fe05fc02b5188135a6fc97d9849fb9150252b41114a962d9d1526eb72211ec9f0331a62c965ff852f69f9e526b6ab0ea4fe55b3f3c52f96b500a844af8e9ab62655768adc20772dc4591ca7a22ccd19220ffb535f1ea8b410937c1f72e09b270ab32c7816b2d775fd6068cd98709a8e6c4a4378865eaf5b22e5ae0539c15d2f9ec3a330a7b0781ad64036363e32e5f00a5090b76b954b0b29a388244496adec536a8ec6d630264f9b11b7bafbfb172ca818a1c787399822f8655270bc2ff4cc968ddbc488addfd0167989cf008058fdf202eb7fca7998b087d703e6ab111cb259ab20741d1c72f8dc37d6f2352c897e0c0a33b48dc7490cabccedd0682e7e029a13c895e719a74a80ae46aa24dd6fa7ae3ad113426a9448080b8cf0b8489d40e1575e9ce364da021de6379e9c284de469c05e2ab459393d31f405366fbd3b908c5e52688b603ffae70f24c4189a13745ae40d0c248510c19145a1f6e2050d508bd0abbf1fb6f6f202318d2b56a26bfa54eec606df93bd5a01ba429c93939ccd02bf6994351f69f51a1d0b54468a80ed8cd3b36737b1589b5065c13848ac51bbafc48a210aa73c02b5e1952f3ef73740ae1d90cdafc332be2b17d29da53cef639ea3f3bc1a90cf4d9169d9c956398b3070b86d2eb9adcb3686e39ab4e9dc08c5a25badbd1612d5de0557fea19e91f650c3d73aeba11590a0b26460b8a59d5144aa427b2dcbc1c4c50ddc4b5b06edcc24ccd6792aa4d13bfb86f2f0a0b4c06421f5f8e19637cd024878b5cd8b8ac00ccb3d3e6d9e6dadc6379d7a3fd185790002f543cdc56c2fa1086f3f8ce3340f93b22e25838690d6ac368cfa6ba7f2e6d67354b9a4395ead996a315bc2393fde965d76b712bd0ab6e39307291d004c756c5c2e6e51906bde18ecc3fa9f68533fa241cb58725d5964b61ff6c261bbe2e141a643025e9087afde1df56d0d636516c574caab17ea40b25b4d9631000810da1f42f4db95a7808739301f94e56a0d3fca5cade11b791bcaebf1323f6f138bb3692af314e915de31c8a177bd19d9e6cfcd131532121852611dff828d7c42374c7d4abb529d111bc7642bb26a1e5bb3bccafa5d4b09036663e3bd2a5f4c078afbb962b1a79b01d784a152740fc1f1200cbe5624e177ac10d07d891f7b9b789da77265765db38bbbe0a6a36f746c75fd0ff80d0d28f75a8cb63b4dd55d10f411b2122ec5f7ba6ba038212ce4d3a49085628d85ad26cce7a4f2f5a276be4b7b82dd1f78b5d453f521e4b800793fc7b9289a59d61c8d9906e9a51c4ae0c8310f258ecf2f9f1ec1fdbd995e9d2e1b867a56f6559b8b510f8216987070629763ef6972675144766a37a036a55e7e245d57aa7cd57331bae1743b3de13aea613078feaa0ccd1b1775519984bf050e3e93b59e0ba1f5fda77c20c637cd180738f66285388b7cd7a0541d"}}}}}, &(0x7f0000001e40)={0x0, 0x1, [0xa95, 0x8e9, 0x5eb, 0xe84]}) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000001e80)={0x0, 0x9}, &(0x7f0000001ec0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000001f00)={r10, 0xb}, &(0x7f0000001f40)=0x8) sendmsg$kcm(r3, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001f80)="6d574349d63b8ea85cb72372c1a3e81b567bb9104c33289c4f19ea5205358bae8c8a6dac651eb940fd5423a451d469cfeb989ac278602d69aa54", 0x3a}, {&(0x7f0000001fc0)="2faf03a1cb24d1a3ceffd0dd08573374ee83c9ad879c24aacc17d803e2824a4d535329a4358aca83b7a0ebd8258e74cfb54fa4b5c770fa7696dfb2e4f85b3804d0a555c285149c5c794bac5527ee8a94d01bdcfa05e120cd9559b18007fcf3a0d40f7ea52429ef150362ffcd4a", 0x6d}], 0x2, &(0x7f0000002080)=[{0xc0, 0x1, 0x2, "401f3e0534b486774532e64fe8aa7b9b3ce793c4e9f1f0dce4310f5e60548687ddb487dac3641c067732c3262be0cedd4ab1ee598cbc26ff0ea5a8762843119a418986a040f9e3de2ea8b7e1c694650f3fa764f53ccdd432305ae9f2bce77dadf41fb96aaf2da1498c8acae82e0e5c2b35a9771044dfbb70d983e99a61bd1831e806f40f8e4489f596b4bf3d2a47daeeb217d121172e5f2452796017a05380ed7885b15c4d5558a78443"}, {0x48, 0x10d, 0x80000001, "f26f9e0a6d679af01186d08bf6e68c326814edd2d04eea506cec7b3e3507de4e9c4016b75ae90405cfe09cf1cc92262bca75795b"}, {0xf8, 0x103, 0x0, "702eddb54a690754a1edbf102f1be4bf0b63a9ad843621494bb5c0f7a03ec6ba26fbec538f4c6bddb16ee306181388e8e1a98154b0c549cc1a9ac313b44400a72798b2a296bbb7cbeac384ee45e801f77d1ff3d67435a9d1196a593dc55ca85cf5ef9d9f0764b77b8c94bd3670f1790384fbb384b41278062dc67b76e331d002bf507921a2935af6fa415eb0ce8532cdd3603137b903a4a1b1439cf00fed44166eca20bd9db68933967b305e7230a78e26ccd59a92a9bca9eddbe2294a2fa9241df03d74fd00fdfd9b8975e17506dfe380bdbfa1fb287719cdb9aa528424ae9a38609c3700856d92"}, {0xb8, 0x11e, 0x2a4, "49ff0615af942200f8420d05e2226eae648635c382075a80f4d1d8598eaae854aa598fc0b24d624ca71bbfe19473dc989affbef6a14116156107392aba8f5c4002127cb2c55e4eb5a6699ab0f47494bb41f448fba73148bae4a6e0ee2583bc8fa2cb1b6b9f1aba29cbc0867015995c0362dd117b66e3d1edb3a0260830f91e04b663f574d797b5c471d95bb34e582a6b0c9366db56f15465ba85d7c91ea861bddfbf8af95f"}, {0xa0, 0x84, 0x0, "841052a94f6554974fc8fb8b7006d626e35cfbfe05f47b9c79916b89d64803995852be3ac9fec7e82b0cf8b5aa8bed1724c23c2e9924e4c2d9d7e5ea925879333cdfc15533ebc0c297daa13930ee67f186edd432501942f97c7e0dc07d256e0196545fbc33d70f4f4d8f522bcf17ff29edbb28332011c7e78ec2eae05f36de3b368cf7d5a01f329a916c2ccd10"}, {0x80, 0x10a, 0x3, "fe650c090a568128d2283e46273fba6d18de35e41bc057cfa4b22225b1f29b4f0f86949ffe559fa14fad2ec4182351db7316764768b5d723bd88d9fdcff62f3ccb640f0a0e490da6ec980d76c8875cff908b741ec6029d2b13332c197eedac0b31a4495bb8649162b45cde7dd0d47586"}, {0x108, 0x67cabc936486be1b, 0x0, "8374adf1b0b31cd024e48632fb627fdaaade0f7fb3186d82c93f0ce26c08180658a8cbdfdc5d58bee36d6aa88330bebbea84f374e89cc886741c73d5fa7f9d8fa207ff7ff2e975f459130bffac6195f61852c26ec4fad6ece75861360aacce921e8792d3b934d40cebd70434a1d6f6e2aaaa7bc92e4989e0b4476c3c6483e4797396282fd6268dc561ddea0364e01fd014864cfa1999d59c8a3711a8c7fcca28d83dedda4a3fb2b026e41707896fbc56da76a52d0b728f21e8df234ae6aa49fbde6ee1117b70f8f732f70bba444e72227c7e7a3fe60b9043048fc9996a8a0fb9684ad2d5173d03692b3b68935bbddf1f5b2f"}], 0x4e0}, 0x14) r11 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x22000020}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x48, r5, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3e}, @void, @val={0xc, 0x99, {0x10, 0x26}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r11}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x37}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 1.674644671s ago: executing program 1 (id=2849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x7c, 0x2, 0x6, 0x101, 0x0, 0x300, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x8f}, @IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x11d6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6c14}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040015}, 0x0) 1.497963187s ago: executing program 1 (id=2850): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup, 0xffffffffffffffff, 0x11, 0x18}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffff2e, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet_SIOCADDRT(r6, 0xff08, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x17, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x40, 0x0, 0x0, 0x41000, 0x29, '\x00', r2, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x3, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000480)=[r6, r6, r6, r6, r6, r6, r6], &(0x7f00000004c0)=[{0x0, 0x4, 0xe, 0x9}, {0x0, 0x4, 0x6, 0xb}, {0x4, 0x5, 0xe, 0x7}, {0x2, 0x3, 0x10, 0x3}], 0x10, 0x1}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000005c0)=r7, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r8, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xa9, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="01000000000000000000090000002000038014000200626174616476300000000000000000000800010002000000"], 0x34}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r10, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x12, r8, 0x604a6000) 1.454771698s ago: executing program 4 (id=2851): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000340)={r1, 0xc446, 0xffffffffffffff03, 0x39d}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, r2, 0x5, 0x3, 0x2}, 0x50) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@loopback, @in6=@local, 0x4e21, 0x5, 0x4e23, 0x1, 0x0, 0x0, 0x80, 0x18}, {0x0, 0x3, 0x5, 0xa400000000000000, 0x8, 0x7d, 0x1, 0x3}, {0x49c, 0x8, 0x80000001, 0x7fff}, 0x7, 0x0, 0x2, 0x0, 0x3, 0x2}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3506, 0x7, 0x0, 0x3, 0x1, 0x1, 0x22c}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002f20702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200020095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1403, 0x200, 0x70bd2c, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4805}, 0x40000c0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000001500), 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x2, 0xff22, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f0000000280)='syzkaller\x00'}, 0x94) sendmsg$can_bcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000470700000800000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0000004001"], 0x48}, 0x1, 0x0, 0x0, 0x15}, 0x60040090) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000d, 0x90c2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4, 0x5}}}]}, 0x34}}, 0x40045) 1.342402041s ago: executing program 2 (id=2852): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000002c0)=0x100000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000f40)=""/250, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x13, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0xd, 0x3, 0x3, 0xffffffffffffffc0, 0x8}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='syzkaller\x00', 0xda, 0xfd, &(0x7f0000000880)=""/253, 0x41100, 0x5f, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000009c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000a00)={0x5, 0x3, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000a40), &(0x7f0000000a80)=[{0x4, 0x2, 0x0, 0xa}, {0x4, 0x4, 0x4, 0x9}, {0x3, 0x1, 0x4, 0xb}, {0x2, 0x5, 0x4, 0x1}], 0x10, 0x9}, 0x94) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fedbdf250100000008000100030000002c00048005000300000000000500030006000000050003000200200a000003000500000005000300010000000800020001000000080008cfa55fdc80"], 0x58}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r6, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0xd9, &(0x7f0000000440)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xe2, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) ioctl$NILFS_IOCTL_GET_BDESCS(r6, 0xc0186e87, &(0x7f0000000140)={&(0x7f0000000000)=[{0x0, 0x2, 0x0, 0x3}, {0xc3cc, 0x4, 0x7, 0x2}, {0x9, 0x3, 0x7, 0x9, 0x8}, {0x8000000000000001, 0x3, 0x6, 0x4, 0x26a}, {0xf9b, 0x4, 0x4, 0x6edd, 0x200}, {0x6, 0x4, 0x8, 0x5, 0x7}, {0x6, 0x5, 0x0, 0x6, 0x401}], 0x7, 0x28, 0x7fff, 0xfffffffffffffe49}) 1.202860205s ago: executing program 0 (id=2853): r0 = socket(0x0, 0x3, 0x38) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x1100, 0x18c, 0x203, 0x1100, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1184, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x8d, 0x74c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="21b7258396f34927e1494cd5d84a708e", @ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="ca48b6ee1077f659d19b1b4d70", @ANYRES16=r9, @ANYRESOCT=r1, @ANYRES32=r9, @ANYRES16=r5, @ANYRESHEX=r10], 0x128}, 0x24004000) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4804) recvmsg(r11, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40000002) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000000000000000060000008500000061000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r13, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f00000001c0)=r13, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0xfd, @loopback, 0x3e}, 0x1c) recvmmsg(r1, &(0x7f00000063c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/28, 0x1c}], 0x1}, 0xfff}], 0x1, 0x123, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'pim6reg\x00', 0x2}) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) 1.178589543s ago: executing program 4 (id=2854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0xfdef) 865.790274ms ago: executing program 4 (id=2855): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) socket$rxrpc(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='GPL\x00'}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108fdefffff0000000800000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r3 = socket(0x10, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) recvmsg(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000925c9885fdb7f9fc5a2b3fd8de7cd7331a984e37747c3d3f6f086e6d0f68387d7739718ecfd79786e5fce277c58a3ff7f699de62b2a50f1a71c380ebb15f99858cc86045f5709929197c5728e865add3793ca27c70b34f1345de90a5cd34b4e7f764a010a001e69797ead703711817b0cf2fb1c6473d1cdf9ef8fc2fd8636ae63073a29c90b5f89ca0d76bc42c1573962787c5cbf3ee2ce8d48a9fe9ae8e4b7dfd7dfa696c320d85114cab1ad7689da12c9b73f28e218a7acb5d57b70af3d2b6b95f0633b269b0e6d64a4e16a6b295c96bdf493711c2d6eed50906f92504314b12b4719c24ff9c27e0a71232b51316ae4b9c97f78b0e244d6b63591fccb765a9"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r8, @ANYBLOB="8000260b0a0002000180c20000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000008000000060000000000001304000000030000000a00000604000000060000000080000000000000050000000800000008000000060000000000000000000000f7ffffff0800000000000000070000003a00000003000000060000000300000001000100080000002e71005f5f2e00"], &(0x7f0000003340)=""/5, 0x88, 0x5, 0x1, 0x6abb}, 0x28) 863.408654ms ago: executing program 1 (id=2856): unshare(0x28040680) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0xa, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x3c, r3, 0x1, 0x70bd29, 0xffffffbe, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004056) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000900)={0x6, 0x0, 0x6, 0x4, 0xe0, 0x8, 0x1}, 0xc) getsockopt$bt_BT_RCVMTU(r6, 0x112, 0xf, &(0x7f0000000000)=0x2, &(0x7f0000000180)=0x2) unshare(0x26020480) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00'}, 0x48) r9 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r9, r8}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x11}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond_slave_0\x00'}]}, 0x50}}, 0x0) 637.50445ms ago: executing program 2 (id=2857): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0a0200000800c4814111678f8bba000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x2, 0xffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf655c00000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00k'], 0x24}, 0x1, 0x0, 0x0, 0x44001}, 0xc800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000001900)={r8, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x0, @local}, 0x10) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000280)={r8, 0x1, 0x6, @random}, 0x10) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, &(0x7f00000000c0)=0x80, 0x4) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012800e0001006970366772657461700000001400028006000f0000000000020000000000000048ae29ff953e980b30659a30bd6f683093c17f3ef95141c9d48142928151ddd9efb5f8a59835fbde4f48a3a5898171adb8fa98586d01ad7e666483bb0491bdb57f1ed94e29d5fdc85f287dc0ff89618c14fe7cfc9aba69314fc48f87"], 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f0000000900)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x3c, '\x00', r6}, 0x57) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x18000, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r9, 0xc038586b, &(0x7f0000000500)={r10, &(0x7f0000000380)='nl80211\x00', 0x408802, &(0x7f0000000540)={@align=0x1, {0x0, 0x7fff, 0x3ff, 0x8}}, 0x80000000, &(0x7f0000000480)={@_ha_fsid}, &(0x7f0000000440)=0x2}) 0s ago: executing program 0 (id=2858): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "1770e235285db2cb", "278aa3520f3a0ff8cef6713fa6b703a6", "610cde48", "dbb0e9ddc00c20ee"}, 0x28) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000005300)=""/4096, 0x1000}], 0x1}, 0xf}, {{0x0, 0x0, 0x0}, 0x1e3}], 0x2, 0x2042, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close(0x3) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffc, 0x2}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), 0x4) r6 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r6, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000001c0)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x800}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010102}], 0x30, 0x8090}, 0x24000052) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000010000004200000040000000c2000000", @ANYRES32=0x1, @ANYRESOCT, @ANYRES16=r0, @ANYRES32, @ANYBLOB="000000000000e2ffffffffffffff000000001d0424b28a0ee0f30000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)="cb423a11b33192d673ba4c831a9adca48ca7eb0d2f073f36dfc3a94144bfd9d81639fd65ac4e557e12e7b0d2dfea051a7b440ade19d879e209596bf44477ecf6370e0133e541ef9f9e3631dde33dabf7842deb7a72c3ffe0f611062628683e3db2c685af", &(0x7f0000000080), 0x1003, r7}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)="af", 0x0, 0x2, r7}, 0x38) kernel console output (not intermixed with test programs): d from eth2 [ 345.349763][T10860] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 345.374334][T10860] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 345.392229][T11235] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 345.420480][T10860] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 345.471166][T11235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1227'. [ 345.526418][T11235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1227'. [ 345.620925][T11235] ipvlan0: entered promiscuous mode [ 345.639493][T11235] ipvlan0: left promiscuous mode [ 345.708820][ T5293] 8021q: adding VLAN 0 to HW filter on device eth4 [ 345.938156][T10860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.998749][T11252] x_tables: duplicate underflow at hook 3 [ 346.013676][T11251] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1229'. [ 346.254906][T11259] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.1230'. [ 346.281719][T10860] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.348440][ T9385] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.355841][ T9385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.452160][ T9384] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.459551][ T9384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.179519][T11273] syzkaller0: entered promiscuous mode [ 347.185367][T11273] syzkaller0: entered allmulticast mode [ 347.548566][T11283] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1233'. [ 347.590572][T11284] veth0: entered promiscuous mode [ 347.624876][T11284] bond0: entered promiscuous mode [ 347.658330][T11284] bond_slave_0: entered promiscuous mode [ 347.684606][T11284] bond_slave_1: entered promiscuous mode [ 347.714093][T11282] bond0: left promiscuous mode [ 347.749828][T11282] bond_slave_0: left promiscuous mode [ 347.787839][T11282] bond_slave_1: left promiscuous mode [ 347.831799][T11282] veth0: left promiscuous mode [ 348.081328][T11300] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1238'. [ 348.225130][T10860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.489197][T10860] veth0_vlan: entered promiscuous mode [ 348.503006][T10860] veth1_vlan: entered promiscuous mode [ 348.543318][T10860] veth0_macvtap: entered promiscuous mode [ 348.554424][T10860] veth1_macvtap: entered promiscuous mode [ 348.581382][T10860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.602108][T10860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.621132][ T1118] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.630441][ T1118] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.646448][ T1118] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.655234][ T1118] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.782895][ T7053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.800774][ T7053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.830856][ T9384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.839519][ T9384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.569582][T11375] batadv_slave_0: entered promiscuous mode [ 367.588174][T11374] batadv_slave_0: left promiscuous mode [ 367.643253][T11383] netlink: get zone limit has 4 unknown bytes [ 367.971924][T11402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1245'. [ 368.041196][T11403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1246'. [ 368.282242][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1251'. [ 368.393675][T11426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1252'. [ 368.398429][T11416] ipvlan2: entered promiscuous mode [ 368.496998][T11409] dummy0 speed is unknown, defaulting to 1000 [ 368.599805][T11433] xfrm1: entered allmulticast mode [ 368.729967][T11437] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 368.834813][T11437] 8021q: adding VLAN 0 to HW filter on device bond2 [ 368.856892][T11437] 8021q: adding VLAN 0 to HW filter on device bond3 [ 368.908096][T11437] 8021q: adding VLAN 0 to HW filter on device eth0 [ 368.934890][T11442] netlink: 'syz.2.1257': attribute type 3 has an invalid length. [ 368.953301][T11437] 8021q: adding VLAN 0 to HW filter on device eth1 [ 368.971994][T11437] 8021q: adding VLAN 0 to HW filter on device eth2 [ 368.993423][T11437] 8021q: adding VLAN 0 to HW filter on device eth3 [ 369.028125][T11437] 8021q: adding VLAN 0 to HW filter on device bond8 [ 369.092635][T11444] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1258'. [ 369.145887][T11420] dummy0 speed is unknown, defaulting to 1000 [ 369.263315][T11446] openvswitch: netlink: Duplicate key (type 21). [ 369.555356][T11454] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1259'. [ 369.579940][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1259'. [ 369.627690][T11454] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1259'. [ 369.684591][T11454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1259'. [ 369.714290][T11454] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1259'. [ 369.779113][ T9384] bond8: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 369.793859][T11458] xt_SECMARK: invalid mode: 4 [ 369.813206][ T9384] bond8: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 369.853216][ T9384] bond8: (slave veth9): making interface the new active one [ 369.879944][ T9384] veth9: entered allmulticast mode [ 369.927423][ T9384] bond8: active interface up! [ 370.379658][T11460] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.387296][T11460] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.699657][T11480] netlink: 'syz.4.1268': attribute type 39 has an invalid length. [ 370.817970][T11478] netlink: 'syz.2.1267': attribute type 39 has an invalid length. [ 371.315088][T11494] nbd: must specify an index to disconnect [ 371.951329][T11490] dummy0 speed is unknown, defaulting to 1000 [ 372.491819][ T29] audit: type=1800 audit(1777884558.762:5): pid=11538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1284" name="blkio.bfq.time_recursive" dev="tmpfs" ino=59 res=0 errno=0 [ 372.734624][T11519] dummy0 speed is unknown, defaulting to 1000 [ 373.256614][T11558] __nla_validate_parse: 7 callbacks suppressed [ 373.256651][T11558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1289'. [ 373.294006][T11557] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1290'. [ 373.416656][ T5768] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 373.508159][T11560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1291'. [ 373.595910][ T5768] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 373.738350][T11560] bond9: entered promiscuous mode [ 373.751557][T11560] 8021q: adding VLAN 0 to HW filter on device bond9 [ 373.802997][T11560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1291'. [ 373.857227][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1291'. [ 373.981259][T11571] netlink: 'syz.1.1292': attribute type 1 has an invalid length. [ 373.993869][ T1118] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 374.121801][T11571] 8021q: adding VLAN 0 to HW filter on device bond2 [ 374.319594][T11569] bond2: (slave veth5): Enslaving as an active interface with a down link [ 374.531439][T11575] dvmrp0: entered allmulticast mode [ 374.657016][T11578] syzkaller0: entered promiscuous mode [ 374.683057][T11578] syzkaller0: entered allmulticast mode [ 374.878151][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1297'. [ 374.997825][ T3303] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 375.030012][ T3303] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 375.401994][T11614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1303'. [ 375.460537][ T5978] IPVS: starting estimator thread 0... [ 375.472609][T11625] IPVS: sh: FWM 3 0x00000003 - no destination available [ 375.511468][T11628] openvswitch: netlink: Actions may not be safe on all matching packets [ 375.523180][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 375.596800][T11627] IPVS: using max 30 ests per chain, 72000 per kthread [ 375.843917][T11639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.855854][T11643] netlink: 'syz.5.1311': attribute type 3 has an invalid length. [ 375.868409][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1311'. [ 375.877439][ T5971] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 376.613828][T11668] syzkaller0: entered promiscuous mode [ 376.647104][T11668] syzkaller0: entered allmulticast mode [ 376.667419][T11671] netlink: 'syz.4.1318': attribute type 6 has an invalid length. [ 376.854687][T11662] "syz.1.1315" (11662) uses obsolete ecb(arc4) skcipher [ 376.899417][T11687] netlink: 'syz.4.1322': attribute type 21 has an invalid length. [ 376.917892][T11687] IPv6: NLM_F_CREATE should be specified when creating new route [ 376.938828][T11681] netlink: 'syz.0.1320': attribute type 10 has an invalid length. [ 376.948096][T11687] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 376.955971][T11687] IPv6: NLM_F_CREATE should be set when creating new route [ 376.963467][T11687] IPv6: NLM_F_CREATE should be set when creating new route [ 376.971019][T11687] IPv6: NLM_F_CREATE should be set when creating new route [ 377.088646][T11687] netlink: 'syz.4.1322': attribute type 1 has an invalid length. [ 377.127186][T11681] team0 (unregistering): Port device team_slave_0 removed [ 377.182436][T11681] team0 (unregistering): Port device team_slave_1 removed [ 377.366437][T11702] hsr0: entered promiscuous mode [ 377.427841][T11695] dummy0 speed is unknown, defaulting to 1000 [ 377.523349][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1326'. [ 377.560992][T11707] netlink: 'syz.0.1327': attribute type 4 has an invalid length. [ 377.634815][T11711] netlink: 'syz.0.1327': attribute type 4 has an invalid length. [ 378.092807][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1332'. [ 378.208852][T11722] syzkaller0: entered promiscuous mode [ 378.234414][T11722] syzkaller0: entered allmulticast mode [ 378.282380][T11732] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1334'. [ 378.382524][T11732] xt_hashlimit: max too large, truncated to 1048576 [ 378.400146][T11732] xt_hashlimit: overflow, try lower: 2/0 [ 378.665006][T11748] netlink: 'syz.0.1338': attribute type 3 has an invalid length. [ 378.707761][T11748] netlink: 'syz.0.1338': attribute type 1 has an invalid length. [ 378.755018][T11748] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1338'. [ 379.019428][T11762] netlink: 'syz.5.1341': attribute type 10 has an invalid length. [ 379.131312][T11765] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.1342'. [ 379.145179][T11748] macvtap0: entered promiscuous mode [ 379.220121][T11762] team0: Failed to send options change via netlink (err -105) [ 379.246408][T11762] team0: Port device dummy0 added [ 379.313181][T11765] : entered promiscuous mode [ 379.321998][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.322137][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.396094][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 379.607537][T11780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1346'. [ 379.735815][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1344'. [ 379.791882][T11783] netlink: 'syz.0.1344': attribute type 13 has an invalid length. [ 379.828054][T11783] netlink: 'syz.0.1344': attribute type 17 has an invalid length. [ 380.088834][T11783] veth0_to_bridge: left allmulticast mode [ 380.214125][T11803] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20004 [ 380.581907][T11783] macvtap0: left promiscuous mode [ 380.614428][T11783] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 380.626542][T11783] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 380.642410][T11783] vlan2: left promiscuous mode [ 380.649318][T11783] bond_slave_1: left promiscuous mode [ 380.752004][T11783] ip6gre1: left promiscuous mode [ 380.758976][T11783] ip6gre1: left allmulticast mode [ 380.804389][T11783] bond5: left promiscuous mode [ 380.810293][T11783] veth5: left promiscuous mode [ 380.892560][T11783] bond6: left promiscuous mode [ 380.898716][T11783] bond6: left allmulticast mode [ 380.906921][T11783] bond7: left promiscuous mode [ 380.912184][T11783] veth7: left promiscuous mode [ 380.949578][T11783] bond8: left allmulticast mode [ 380.966113][T11783] veth9: left allmulticast mode [ 380.995483][T11783] ip6erspan0: left promiscuous mode [ 381.010769][T11783] ip6erspan0: left allmulticast mode [ 381.047829][T11783] xfrm1: left allmulticast mode [ 381.062283][T11783] bond9: left promiscuous mode [ 381.261739][T11811] syzkaller0: entered promiscuous mode [ 381.267879][T11811] syzkaller0: entered allmulticast mode [ 381.277101][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1352'. [ 381.330737][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1352'. [ 381.346755][T11822] bond10: entered allmulticast mode [ 381.562588][T11834] netlink: 'syz.0.1356': attribute type 11 has an invalid length. [ 381.593683][T11834] netlink: 'syz.0.1356': attribute type 11 has an invalid length. [ 381.640261][T11834] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1356'. [ 385.841022][T11865] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1358'. [ 385.878963][T11865] syzkaller0: entered promiscuous mode [ 385.887312][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'. [ 385.902756][T11865] syzkaller0: entered allmulticast mode [ 386.131993][T11880] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1362'. [ 386.512998][T11900] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1367'. [ 386.810013][T11915] netlink: 'syz.0.1371': attribute type 1 has an invalid length. [ 386.832748][T11915] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1371'. [ 386.845938][T11915] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1371'. [ 386.863650][T11915] netlink: 'syz.0.1371': attribute type 1 has an invalid length. [ 386.904220][T11893] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.950141][T11897] netlink: 65051 bytes leftover after parsing attributes in process `syz.5.1366'. [ 387.143641][T11925] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1376'. [ 387.246789][T11893] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.538980][T11893] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.763860][T11939] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1380'. [ 387.789641][T11940] netlink: 'syz.1.1381': attribute type 1 has an invalid length. [ 387.830665][T11893] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.878920][T11940] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 388.270584][ T7053] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.279446][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 388.318381][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1384'. [ 388.428042][ T7050] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.580346][ T9384] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.696125][ T7053] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.758906][T11972] netlink: 'syz.1.1387': attribute type 11 has an invalid length. [ 389.069283][T11984] netlink: 'syz.5.1390': attribute type 21 has an invalid length. [ 389.097504][T11984] netlink: 'syz.5.1390': attribute type 4 has an invalid length. [ 389.119184][T11984] netlink: 'syz.5.1390': attribute type 3 has an invalid length. [ 389.149246][T11991] xt_hashlimit: size too large, truncated to 1048576 [ 389.834426][T12029] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 390.328421][T12045] netlink: 'syz.2.1406': attribute type 61 has an invalid length. [ 390.372564][T12045] netlink: 'syz.2.1406': attribute type 62 has an invalid length. [ 390.394360][T12054] netlink: 'syz.1.1408': attribute type 1 has an invalid length. [ 390.524816][T12054] veth6: entered promiscuous mode [ 390.600014][T12054] veth7: entered promiscuous mode [ 390.616691][T12054] veth7: entered allmulticast mode [ 390.832590][T12075] netlink: 'syz.5.1415': attribute type 1 has an invalid length. [ 390.917796][T12080] __nla_validate_parse: 9 callbacks suppressed [ 390.917821][T12080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1416'. [ 390.983819][T12081] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 391.131888][T12075] macvlan2: entered promiscuous mode [ 391.144893][T12075] macvlan2: entered allmulticast mode [ 391.160098][T12075] bond1: entered promiscuous mode [ 391.195354][T12075] bridge2: entered promiscuous mode [ 391.220839][T12075] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 391.254108][T12075] bond1: left promiscuous mode [ 391.268856][T12075] bridge2: left promiscuous mode [ 391.618520][T12099] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1421'. [ 392.080169][ T29] audit: type=1804 audit(1777884578.352:6): pid=12115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1426" name="/newroot/37/cgroup.controllers" dev="tmpfs" ino=209 res=1 errno=0 [ 392.176758][ T29] audit: type=1800 audit(1777884578.372:7): pid=12115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1426" name="cgroup.controllers" dev="tmpfs" ino=209 res=0 errno=0 [ 392.199590][ T29] audit: type=1804 audit(1777884578.412:8): pid=12115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1426" name="/newroot/37/cgroup.controllers" dev="tmpfs" ino=209 res=1 errno=0 [ 392.465340][T12129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1430'. [ 392.611492][T12134] validate_nla: 1 callbacks suppressed [ 392.611516][T12134] netlink: 'syz.4.1432': attribute type 142 has an invalid length. [ 392.693764][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1433'. [ 392.734504][T12145] netlink: 'syz.0.1434': attribute type 3 has an invalid length. [ 392.777729][T12144] netlink: 'syz.2.1433': attribute type 30 has an invalid length. [ 392.810307][T12145] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 392.893298][T12145] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 392.900458][T12145] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 392.907973][T12145] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 392.914990][T12145] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 392.922174][T12145] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 392.929208][T12145] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 392.936275][T12145] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 392.943359][T12145] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 392.949776][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1434'. [ 392.951050][T12145] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 392.990172][T12154] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.1436'. [ 393.001564][ T9384] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.005800][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1433'. [ 393.039969][ T9384] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.060310][T12144] netlink: 'syz.2.1433': attribute type 30 has an invalid length. [ 393.109753][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1434'. [ 393.110493][ T9384] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.157890][T12161] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1438'. [ 393.168374][T12149] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1434'. [ 393.172601][ T9384] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.293752][T12157] dummy0 speed is unknown, defaulting to 1000 [ 394.166331][T12188] netlink: 'syz.2.1445': attribute type 5 has an invalid length. [ 395.993289][T12263] __nla_validate_parse: 14 callbacks suppressed [ 395.993313][T12263] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1460'. [ 396.107940][T12253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1462'. [ 396.139922][T12255] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1463'. [ 396.448427][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1466'. [ 396.473539][T12277] netlink: 'syz.0.1466': attribute type 5 has an invalid length. [ 396.499540][T12277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1466'. [ 396.525874][T12284] syzkaller0: entered promiscuous mode [ 396.538661][T12284] syzkaller0: entered allmulticast mode [ 396.575069][T12277] geneve3: entered promiscuous mode [ 396.592594][T12285] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1468'. [ 396.602047][T12277] geneve3: entered allmulticast mode [ 396.632096][ T9384] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 396.662337][ T9384] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 396.700850][ T9384] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 396.767671][ T9384] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 396.954508][T12300] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 396.974454][T12304] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1472'. [ 397.029361][T12304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1472'. [ 397.214613][T12311] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1474'. [ 397.280411][T12316] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1475'. [ 397.599713][T12330] netlink: 'syz.4.1478': attribute type 1 has an invalid length. [ 397.705456][T12330] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 397.757788][T12338] dummy0 speed is unknown, defaulting to 1000 [ 398.226229][T12359] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 398.256585][T12359] CPU: 1 UID: 0 PID: 12359 Comm: syz.4.1483 Not tainted syzkaller #0 PREEMPT(full) [ 398.256623][T12359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 398.256643][T12359] Call Trace: [ 398.256658][T12359] [ 398.256668][T12359] dump_stack_lvl+0xe8/0x150 [ 398.256704][T12359] sysfs_warn_dup+0x8e/0xa0 [ 398.256734][T12359] sysfs_do_create_link_sd+0xc0/0x110 [ 398.256767][T12359] device_add_class_symlinks+0x1cf/0x240 [ 398.256798][T12359] device_add+0x475/0xbb0 [ 398.256828][T12359] wiphy_register+0x21e8/0x32e0 [ 398.256878][T12359] ? __pfx_wiphy_register+0x10/0x10 [ 398.256907][T12359] ? __pfx_netdev_run_todo+0x10/0x10 [ 398.256940][T12359] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 398.256982][T12359] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 398.257016][T12359] ieee80211_register_hw+0x3d82/0x4a70 [ 398.257061][T12359] ? ieee80211_register_hw+0x1981/0x4a70 [ 398.257122][T12359] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 398.257157][T12359] ? __asan_memset+0x22/0x50 [ 398.257185][T12359] ? __hrtimer_setup+0x1b7/0x260 [ 398.257213][T12359] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 398.257246][T12359] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 398.257307][T12359] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 398.257339][T12359] ? kstrndup+0xbf/0x160 [ 398.257372][T12359] hwsim_new_radio_nl+0xf6a/0x1c00 [ 398.257423][T12359] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 398.257461][T12359] ? rcu_is_watching+0x15/0xb0 [ 398.257488][T12359] ? trace_kmalloc+0x2a/0xf0 [ 398.257527][T12359] ? __nla_parse+0x40/0x60 [ 398.257565][T12359] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 398.257602][T12359] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 398.257647][T12359] genl_family_rcv_msg_doit+0x22a/0x330 [ 398.257691][T12359] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 398.257743][T12359] ? bpf_lsm_capable+0x9/0x20 [ 398.257764][T12359] ? security_capable+0x7e/0x2c0 [ 398.257798][T12359] genl_rcv_msg+0x61c/0x7a0 [ 398.257840][T12359] ? __pfx_genl_rcv_msg+0x10/0x10 [ 398.257873][T12359] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 398.257915][T12359] netlink_rcv_skb+0x232/0x4b0 [ 398.257945][T12359] ? __pfx_genl_rcv_msg+0x10/0x10 [ 398.257981][T12359] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 398.258027][T12359] ? down_read+0x270/0x2e0 [ 398.258055][T12359] ? genl_rcv+0xd/0x40 [ 398.258090][T12359] genl_rcv+0x28/0x40 [ 398.258121][T12359] netlink_unicast+0x75c/0x8e0 [ 398.258159][T12359] netlink_sendmsg+0x813/0xb40 [ 398.258198][T12359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.258230][T12359] ? aa_sock_msg_perm+0xf1/0x1b0 [ 398.258260][T12359] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 398.258295][T12359] ____sys_sendmsg+0x972/0x9f0 [ 398.258335][T12359] ? __might_fault+0xaf/0x130 [ 398.258371][T12359] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.258412][T12359] ? import_iovec+0x73/0xa0 [ 398.258449][T12359] ___sys_sendmsg+0x2a5/0x360 [ 398.258477][T12359] ? __lock_acquire+0x6b5/0x2cf0 [ 398.258507][T12359] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.258545][T12359] ? futex_wait+0x2a2/0x390 [ 398.258608][T12359] ? __fget_files+0x2a/0x420 [ 398.258634][T12359] ? __fget_files+0x3a0/0x420 [ 398.258673][T12359] __x64_sys_sendmsg+0x1bd/0x2a0 [ 398.258705][T12359] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.258748][T12359] ? fput+0xa0/0xd0 [ 398.258781][T12359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.258806][T12359] do_syscall_64+0x15f/0xf80 [ 398.258833][T12359] ? trace_irq_disable+0x3b/0x140 [ 398.258868][T12359] ? clear_bhb_loop+0x40/0x90 [ 398.258896][T12359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.258916][T12359] RIP: 0033:0x7f3b18f9cdd9 [ 398.258938][T12359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.258957][T12359] RSP: 002b:00007f3b19e60028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.258984][T12359] RAX: ffffffffffffffda RBX: 00007f3b19215fa0 RCX: 00007f3b18f9cdd9 [ 398.259001][T12359] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006 [ 398.259015][T12359] RBP: 00007f3b19032d69 R08: 0000000000000000 R09: 0000000000000000 [ 398.259029][T12359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.259043][T12359] R13: 00007f3b19216038 R14: 00007f3b19215fa0 R15: 00007ffe5cf175a8 [ 398.259079][T12359] [ 398.800049][T12360] netlink: 'syz.5.1482': attribute type 1 has an invalid length. [ 399.317282][T12383] netlink: 'syz.2.1487': attribute type 1 has an invalid length. [ 400.784371][T12418] 8021q: adding VLAN 0 to HW filter on device bond3 [ 400.819263][T12423] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 400.863677][T12428] workqueue: Failed to create a rescuer kthread for wq "€": -EINTR [ 400.931224][T12424] bond0: entered promiscuous mode [ 400.956398][T12424] bond_slave_0: entered promiscuous mode [ 400.993455][T12424] batadv0: entered promiscuous mode [ 401.185489][T12449] netlink: 'syz.5.1503': attribute type 29 has an invalid length. [ 401.236574][T12449] netlink: 'syz.5.1503': attribute type 29 has an invalid length. [ 401.293437][T12456] __nla_validate_parse: 10 callbacks suppressed [ 401.293458][T12456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1505'. [ 401.310589][T12456] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1505'. [ 401.574946][T12461] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1509'. [ 401.786416][T12475] tipc: New replicast peer: 255.255.255.255 [ 401.802306][T12477] Cannot find del_set index 3 as target [ 401.813425][T12475] tipc: Enabled bearer , priority 10 [ 401.824597][T12478] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 401.854705][T12476] netlink: 'syz.2.1512': attribute type 1 has an invalid length. [ 401.893914][T12486] net_ratelimit: 888 callbacks suppressed [ 401.893955][T12486] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 401.966422][T12476] veth5: entered promiscuous mode [ 402.176983][T12501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1518'. [ 402.211487][T12501] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1518'. [ 402.258005][T12495] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 402.312310][T12495] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 402.348803][T12495] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 402.355083][T12506] netlink: 'syz.4.1519': attribute type 32 has an invalid length. [ 402.447086][T12495] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 402.548575][T12495] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 402.873765][T12532] syzkaller0: entered promiscuous mode [ 402.899812][T12532] syzkaller0: entered allmulticast mode [ 403.647603][T12568] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1533'. [ 403.690412][T12568] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1533'. [ 404.129186][T12595] tipc: Started in network mode [ 404.146056][T12595] tipc: Node identity 46e5378b7ad6, cluster identity 4711 [ 404.181776][T12595] tipc: Enabled bearer , priority 0 [ 404.203919][T12597] syzkaller0: entered promiscuous mode [ 404.229423][T12597] syzkaller0: entered allmulticast mode [ 404.297928][T12597] tipc: Resetting bearer [ 404.371480][T12597] tipc: Disabling bearer [ 404.504311][T12619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1544'. [ 404.527230][T12619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1544'. [ 404.780359][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1549'. [ 404.897004][ T9384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.909998][ T9384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.933254][T12646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.555765][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 405.676160][T12668] 8021q: VLANs not supported on vxcan1 [ 406.132275][T12693] netlink: 'syz.2.1561': attribute type 1 has an invalid length. [ 406.220173][T12695] ip6tnl3: entered allmulticast mode [ 406.247510][ T6444] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 406.292211][T10863] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 406.301140][T12702] netlink: 'syz.0.1564': attribute type 1 has an invalid length. [ 406.311174][ T6444] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 406.390117][T12693] bond7: entered promiscuous mode [ 406.418056][T12711] __nla_validate_parse: 3 callbacks suppressed [ 406.418078][T12711] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1565'. [ 406.437121][T12693] 8021q: adding VLAN 0 to HW filter on device bond7 [ 406.461299][T12713] bond7: (slave bridge2): making interface the new active one [ 406.469004][T12713] bridge2: entered promiscuous mode [ 406.475901][T12713] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 406.484904][T12698] bond7: entered allmulticast mode [ 406.494435][T12698] bridge2: entered allmulticast mode [ 406.531637][T12702] bond11: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 406.544723][T12702] bond11 (unregistering): Released all slaves [ 406.586102][ T5754] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 406.802838][T12722] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1567'. [ 406.893085][T12727] veth1_to_bond: entered allmulticast mode [ 406.922724][T12727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1569'. [ 407.027686][T12727] veth1_to_bond (unregistering): left allmulticast mode [ 407.082618][T12727] bond0: (slave bond_slave_1): Releasing backup interface [ 407.237874][T10863] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 407.433031][T12749] netlink: 'syz.4.1574': attribute type 1 has an invalid length. [ 407.483879][T12749] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1574'. [ 407.509785][T12755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 407.640932][T12760] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 407.651714][T12755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 407.655337][T12760] tipc: Enabled bearer , priority 0 [ 407.668767][T12760] syzkaller0: entered promiscuous mode [ 407.674355][T12760] syzkaller0: entered allmulticast mode [ 407.769142][T12765] tipc: Resetting bearer [ 407.781060][T12768] xt_hashlimit: max too large, truncated to 1048576 [ 407.813073][T12768] xt_ecn: cannot match TCP bits for non-tcp packets [ 407.823303][T12759] tipc: Resetting bearer [ 407.937374][T12759] tipc: Disabling bearer [ 408.090244][T12785] netlink: 'syz.1.1584': attribute type 3 has an invalid length. [ 408.300141][T12793] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1586'. [ 408.451817][T12807] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1585'. [ 408.913225][T12818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1592'. [ 409.125902][T12827] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1594'. [ 409.355031][T12832] netlink: 'syz.0.1596': attribute type 4 has an invalid length. [ 409.426292][T12838] dummy0 speed is unknown, defaulting to 1000 [ 410.049421][T12856] nbd: must specify at least one socket [ 410.275715][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 411.599144][T12905] syzkaller0: entered promiscuous mode [ 411.616905][T12905] syzkaller0: entered allmulticast mode [ 411.644857][T12923] __nla_validate_parse: 5 callbacks suppressed [ 411.644878][T12923] netlink: 656 bytes leftover after parsing attributes in process `syz.4.1614'. [ 411.791950][T12924] vxcan1: entered promiscuous mode [ 412.388450][T12938] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1618'. [ 412.552170][T12945] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20004 [ 412.677537][T12951] netlink: 440 bytes leftover after parsing attributes in process `syz.4.1623'. [ 412.861468][T12963] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1626'. [ 412.913202][T12964] raw_sendmsg: syz.4.1626 forgot to set AF_INET. Fix it! [ 415.750531][T12967] netlink: 'syz.2.1627': attribute type 8 has an invalid length. [ 415.788013][ T182] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.819549][ T182] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.853034][ T182] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.880689][ T182] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.002475][T12977] netlink: 'syz.2.1629': attribute type 1 has an invalid length. [ 416.088038][T12977] bond8: entered promiscuous mode [ 416.093778][T12977] 8021q: adding VLAN 0 to HW filter on device bond8 [ 416.093778][T12984] sctp: [Deprecated]: syz.4.1632 (pid 12984) Use of struct sctp_assoc_value in delayed_ack socket option. [ 416.093778][T12984] Use struct sctp_sack_info instead [ 416.184986][T12977] vlan0: entered allmulticast mode [ 416.208551][T12977] bond8: entered allmulticast mode [ 416.227474][T12995] bridge_slave_1: left allmulticast mode [ 416.236160][T12995] bridge_slave_1: left promiscuous mode [ 416.242457][T12995] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.257768][T12995] bridge_slave_0: left allmulticast mode [ 416.263739][T12995] bridge_slave_0: left promiscuous mode [ 416.271173][T12995] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.322687][T12982] IPv6: Can't replace route, no match found [ 416.508861][T12986] bond8: (slave bridge3): making interface the new active one [ 416.517724][T12986] bridge3: entered promiscuous mode [ 416.523419][T12986] bridge3: entered allmulticast mode [ 416.531190][T12986] bond8: (slave bridge3): Enslaving as an active interface with an up link [ 416.558396][T12999] batadv0: left allmulticast mode [ 416.633966][T12999] veth0_vlan: left promiscuous mode [ 416.651303][T12999] veth0_vlan: entered promiscuous mode [ 416.700534][T12999] veth1_macvtap: left promiscuous mode [ 416.718462][T12999] veth0_macvtap: left promiscuous mode [ 416.729850][T12999] veth0_macvtap: entered promiscuous mode [ 416.754765][T12999] veth1_macvtap: entered promiscuous mode [ 416.848055][T12999] ip6gre1: left allmulticast mode [ 416.913234][T13012] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1637'. [ 416.952390][T12999] 8021q: adding VLAN 0 to HW filter on device eth0 [ 416.994100][T12999] 8021q: adding VLAN 0 to HW filter on device eth1 [ 417.026754][T12999] 8021q: adding VLAN 0 to HW filter on device eth2 [ 417.040803][T12999] 8021q: adding VLAN 0 to HW filter on device eth3 [ 417.090033][T12999] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.134807][T12999] veth6: left promiscuous mode [ 417.153409][T12999] veth7: left promiscuous mode [ 417.158992][ T5978] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 417.173062][T12999] veth7: left allmulticast mode [ 417.190883][T12999] 8021q: adding VLAN 0 to HW filter on device bond4 [ 417.214620][T12999] vxcan1: left promiscuous mode [ 417.262535][ T6444] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 417.296326][ T6444] bond2: (slave veth5): making interface the new active one [ 417.319979][ T6444] bond2: active interface up! [ 417.419177][ T5754] dummy0 speed is unknown, defaulting to 1000 [ 417.469880][ T182] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.496456][ T182] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.535215][ T182] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.568433][T13033] openvswitch: netlink: IPv4 tun info is not correct [ 417.641781][ T182] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.743220][ T7053] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 417.779852][ T5978] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 417.788325][ T7053] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 417.935005][T13022] netlink: 832 bytes leftover after parsing attributes in process `syz.0.1642'. [ 418.195913][ T5971] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 418.282776][ T5971] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 418.310815][T13047] tipc: New replicast peer: 255.255.255.255 [ 418.329120][T13047] tipc: Enabled bearer , priority 10 [ 418.355764][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 418.596623][ T5971] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 418.804922][T13070] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1655'. [ 419.058212][T13081] syzkaller0: entered promiscuous mode [ 419.069503][T13081] syzkaller0: entered allmulticast mode [ 419.892995][T13116] netlink: 'syz.2.1670': attribute type 62 has an invalid length. [ 420.074583][T13125] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1672'. [ 420.105411][T13125] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1672'. [ 420.177579][T13125] hmac(sha224): entered promiscuous mode [ 420.539408][T13137] dummy0 speed is unknown, defaulting to 1000 [ 420.928134][T13151] netlink: 'syz.1.1679': attribute type 1 has an invalid length. [ 421.071329][T13151] bond5: entered promiscuous mode [ 421.096263][T13151] 8021q: adding VLAN 0 to HW filter on device bond5 [ 421.163011][T13135] RDS: rds_bind could not find a transport for fe88::106, load rds_tcp or rds_rdma? [ 421.209178][T13160] bond5: (slave veth9): making interface the new active one [ 421.233668][T13160] veth9: entered promiscuous mode [ 421.256902][T13160] bond5: (slave veth9): Enslaving as an active interface with an up link [ 421.368567][T13170] netlink: 'syz.4.1681': attribute type 1 has an invalid length. [ 421.494535][T13170] 8021q: adding VLAN 0 to HW filter on device bond8 [ 421.518844][T13161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.559320][T13175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1682'. [ 421.596695][T13171] veth7: entered promiscuous mode [ 421.654394][T13171] bond8: (slave veth7): Enslaving as an active interface with an up link [ 421.795996][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 421.933681][T13184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1683'. [ 422.000269][ T5978] IPVS: starting estimator thread 0... [ 422.096040][T13185] IPVS: using max 24 ests per chain, 57600 per kthread [ 422.147037][T13181] dummy0 speed is unknown, defaulting to 1000 [ 422.754408][T13208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1689'. [ 423.743636][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1698'. [ 424.051902][T13259] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 424.242421][T13258] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.261101][T13258] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.346959][T13274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1701'. [ 424.391472][T13274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.448202][T13274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.731339][T13258] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.762257][T13281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1703'. [ 424.771853][T13258] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.859680][T13261] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 425.138181][T13293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1705'. [ 425.192381][T13258] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.225994][T13258] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.459112][T13258] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.505590][T13258] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.040614][T13334] netlink: 'syz.0.1710': attribute type 13 has an invalid length. [ 426.070258][ T6441] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.093107][ T6441] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.169071][T13343] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1712'. [ 426.341934][T13349] netlink: 'syz.5.1714': attribute type 61 has an invalid length. [ 426.398890][T13353] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1713'. [ 426.796571][T13336] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.869259][ T6444] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.880674][ T6444] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.913889][T13365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1717'. [ 427.060550][T13336] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.098025][ T6444] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.107721][ T6444] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.143491][ T7053] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.166111][T13365] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1717'. [ 427.182480][ T7053] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.353311][T13336] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.555186][T13336] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.713766][T13399] ieee802154 phy1 wpan1: encryption failed: -22 [ 427.779596][T13390] tun0: tun_chr_ioctl cmd 1074025672 [ 427.803353][T13390] tun0: ignored: set checksum disabled [ 427.830451][T13393] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1725'. [ 427.844490][ T6444] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.946849][T13397] dummy0 speed is unknown, defaulting to 1000 [ 427.947433][ T7050] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.038252][ T7050] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.105272][ T6444] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.144101][T13414] RDS: rds_bind could not find a transport for ::ffff:172.20.20.21, load rds_tcp or rds_rdma? [ 429.409146][T13439] ip6erspan0: entered allmulticast mode [ 429.745346][T13456] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1737'. [ 429.765359][T13456] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1737'. [ 429.876299][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 430.529291][T13489] syzkaller0: entered promiscuous mode [ 430.548427][T13489] syzkaller0: entered allmulticast mode [ 430.634557][T13494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1742'. [ 430.876617][T13488] syzkaller0: entered promiscuous mode [ 430.890517][T13488] syzkaller0: entered allmulticast mode [ 431.101079][T13505] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 431.720881][T13522] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1747'. [ 431.767775][T13524] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1748'. [ 431.940522][T13532] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1750'. [ 431.960834][T13531] syzkaller0: entered promiscuous mode [ 432.191870][T13513] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 432.217366][T13535] netlink: 'syz.4.1751': attribute type 1 has an invalid length. [ 432.566753][T13543] syzkaller0: entered promiscuous mode [ 432.572398][T13543] syzkaller0: entered allmulticast mode [ 432.644333][T13546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1756'. [ 433.178800][T13556] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1758'. [ 433.715740][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 433.735452][T13425] Set syz1 is full, maxelem 65536 reached [ 433.745387][T13567] dummy0 speed is unknown, defaulting to 1000 [ 434.399454][T13597] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1769'. [ 434.523422][T13591] syzkaller1: entered promiscuous mode [ 434.536224][T13591] syzkaller1: entered allmulticast mode [ 440.116119][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 440.760937][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.236071][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 453.075951][T13616] Bluetooth: hci5: command 0x0406 tx timeout [ 458.528644][T13634] veth0_vlan: left promiscuous mode [ 458.546629][T13634] veth0_vlan: entered promiscuous mode [ 458.562241][T13634] team0: Device veth0_vlan failed to register rx_handler [ 458.883670][T13662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1786'. [ 459.178551][T13675] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1790'. [ 459.367534][T13686] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1794'. [ 459.403171][T13686] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1794'. [ 459.822783][T13709] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1799'. [ 459.852237][T13703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1797'. [ 459.937473][T13714] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 460.139351][T13725] sctp: [Deprecated]: syz.1.1803 (pid 13725) Use of int in max_burst socket option deprecated. [ 460.139351][T13725] Use struct sctp_assoc_value instead [ 460.168786][T13726] sctp: [Deprecated]: syz.1.1803 (pid 13726) Use of int in max_burst socket option deprecated. [ 460.168786][T13726] Use struct sctp_assoc_value instead [ 460.284266][T13740] syzkaller0: entered promiscuous mode [ 460.291072][T13740] syzkaller0: entered allmulticast mode [ 460.315862][T13741] dummy0 speed is unknown, defaulting to 1000 [ 462.542734][T13691] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 462.813059][T13757] netlink: 'syz.1.1811': attribute type 29 has an invalid length. [ 462.838713][T13757] netlink: 'syz.1.1811': attribute type 29 has an invalid length. [ 462.873899][T13757] netlink: 'syz.1.1811': attribute type 32 has an invalid length. [ 462.899434][T13757] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1811'. [ 462.942489][T13763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1814'. [ 462.972246][T13763] veth1_to_batadv: entered allmulticast mode [ 463.025433][T13763] netlink: 'syz.2.1814': attribute type 7 has an invalid length. [ 463.050675][T13763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1814'. [ 463.285249][T13784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1819'. [ 463.358515][T13787] netlink: 'syz.5.1820': attribute type 32 has an invalid length. [ 464.417626][T13830] __nla_validate_parse: 2 callbacks suppressed [ 464.417650][T13830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1827'. [ 464.630323][T13844] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1831'. [ 464.642973][T13844] netlink: 'syz.4.1831': attribute type 1 has an invalid length. [ 464.770455][T13851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1834'. [ 465.282997][T13868] netlink: 'syz.5.1838': attribute type 5 has an invalid length. [ 465.679694][T13879] dummy0 speed is unknown, defaulting to 1000 [ 465.705433][T13884] netlink: 'syz.5.1843': attribute type 13 has an invalid length. [ 466.137733][T13898] syzkaller1: entered promiscuous mode [ 466.148952][T13898] syzkaller1: entered allmulticast mode [ 467.055127][T13930] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1853'. [ 467.084898][T13929] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1853'. [ 467.173636][T13937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1856'. [ 467.388617][T13940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1857'. [ 467.982302][T13967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1864'. [ 467.997783][T13967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1864'. [ 468.014504][T13968] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1866'. [ 469.152543][T14013] atomic_op ffff88802bae2998 conn xmit_atomic 0000000000000000 [ 469.692385][T14021] __nla_validate_parse: 4 callbacks suppressed [ 469.692408][T14021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1877'. [ 470.851851][T14045] dummy0 speed is unknown, defaulting to 1000 [ 471.035815][T14050] openvswitch: netlink: Key 6 has unexpected len 8 expected 2 [ 471.656826][T14046] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1882'. [ 471.717617][ T4948] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 471.770890][T14046] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 471.914027][T14054] team0: Device ip6tnl2 is of different type [ 471.921625][T14064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1884'. [ 472.350556][T14072] pim6reg1: entered promiscuous mode [ 472.369670][T14072] pim6reg1: entered allmulticast mode [ 472.751186][T14083] batadv_slave_0: entered promiscuous mode [ 472.827882][T14087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1892'. [ 472.870800][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1893'. [ 472.881383][T14092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1893'. [ 472.908810][T14093] netlink: 'syz.4.1892': attribute type 1 has an invalid length. [ 473.017946][T14092] syzkaller0: entered promiscuous mode [ 473.028793][T14092] syzkaller0: entered allmulticast mode [ 473.038269][T14095] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1890'. [ 473.074715][T14095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.148093][T14105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1895'. [ 473.538559][T14082] batadv_slave_0: left promiscuous mode [ 473.614129][T14116] bridge_slave_0 (unregistering): left allmulticast mode [ 473.639749][T14116] bridge_slave_0 (unregistering): left promiscuous mode [ 473.649353][T14116] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.997427][T14127] syzkaller1: entered promiscuous mode [ 474.020659][T14127] syzkaller1: entered allmulticast mode [ 474.189319][T14128] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1902'. [ 474.222899][T14146] –: renamed from dummy0 (while UP) [ 474.296693][T14148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1909'. [ 474.420899][T14128] bond2 (unregistering): Released all slaves [ 475.073946][T14187] netlink: 'syz.2.1921': attribute type 39 has an invalid length. [ 475.315826][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 476.520169][T14192] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 476.536670][T14192] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 476.589032][T14239] __nla_validate_parse: 4 callbacks suppressed [ 476.589056][T14239] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1935'. [ 476.768610][T14241] tipc: Enabled bearer , priority 10 [ 477.086278][T14260] – speed is unknown, defaulting to 1000 [ 477.655876][T14285] netlink: 'syz.2.1943': attribute type 4 has an invalid length. [ 477.664254][T14285] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1943'. [ 477.697764][T14285] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 479.555342][T14255] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 479.876354][T14296] – speed is unknown, defaulting to 1000 [ 479.992635][T14303] can: request_module (can-proto-0) failed. [ 480.047326][T14310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1950'. [ 480.057749][T14310] IPv6: NLM_F_CREATE should be specified when creating new route [ 480.311735][T14319] veth0_macvtap: entered allmulticast mode [ 480.326300][T14319] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 480.372572][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1955'. [ 480.393547][T14321] bridge_slave_1: left allmulticast mode [ 480.408786][T14321] bridge_slave_1: left promiscuous mode [ 480.426573][T14321] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.454198][T14321] bridge_slave_0: left allmulticast mode [ 480.473791][T14321] bridge_slave_0: left promiscuous mode [ 480.491917][T14321] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.605849][T14323] ip6tnl0: Caught tx_queue_len zero misconfig [ 480.759875][ T9385] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.783393][ T9385] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.864653][ T9385] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.940085][ T9385] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.100269][T14342] – speed is unknown, defaulting to 1000 [ 481.471535][T14352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.500298][T14352] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.521361][T14352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.611526][T14352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.623600][T14352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.641502][T14352] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 481.652289][T14352] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 481.671704][T14352] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 481.692997][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.700381][ T3303] bridge0: port 1(bridge_slave_0) entered listening state [ 481.740865][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.748312][ T3303] bridge0: port 2(bridge_slave_1) entered listening state [ 482.312113][T14369] netlink: 964 bytes leftover after parsing attributes in process `syz.0.1965'. [ 482.347528][T14369] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 482.582525][T14373] 8021q: adding VLAN 0 to HW filter on device bond9 [ 483.643167][T14421] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1980'. [ 483.822153][T14426] netlink: 'syz.4.1981': attribute type 63 has an invalid length. [ 483.850323][T14432] tipc: Enabled bearer , priority 0 [ 483.950337][T14437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1985'. [ 483.983827][T14433] d: renamed from syzkaller0 [ 483.995868][T14433] tipc: Disabling bearer [ 484.016990][T14435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1983'. [ 484.041875][T14435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1983'. [ 484.159166][T14437] team_slave_0 (unregistering): left promiscuous mode [ 484.198745][T14437] team_slave_0 (unregistering): left allmulticast mode [ 484.219053][T14437] team0: Port device team_slave_0 removed [ 484.487054][T14455] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1988'. [ 484.529791][T14455] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1988'. [ 485.939582][T14521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.990010][T14521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.103822][T14522] – speed is unknown, defaulting to 1000 [ 486.160874][T14526] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2002'. [ 486.183241][T14526] netlink: 'syz.1.2002': attribute type 9 has an invalid length. [ 486.242463][T14526] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2002'. [ 486.284934][T14526] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2002'. [ 486.366581][T14531] bond2: entered promiscuous mode [ 486.397263][T14531] bond2: entered allmulticast mode [ 487.004233][T14560] netlink: 'syz.4.2012': attribute type 1 has an invalid length. [ 487.209785][T14560] bond9: entered promiscuous mode [ 487.259983][T14560] 8021q: adding VLAN 0 to HW filter on device bond9 [ 487.356642][T14577] ipvlan2: entered allmulticast mode [ 487.371331][T14577] bond9: entered allmulticast mode [ 487.444302][T14560] bond9: (slave bridge8): making interface the new active one [ 487.469792][T14560] bridge8: entered promiscuous mode [ 487.496092][T14560] bridge8: entered allmulticast mode [ 487.508655][T14560] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 488.218279][T14596] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.327850][T14599] netlink: 'syz.1.2020': attribute type 39 has an invalid length. [ 488.449790][T14599] wg1 (unregistering): left allmulticast mode [ 488.503755][T14605] __nla_validate_parse: 1 callbacks suppressed [ 488.503773][T14605] netlink: 41 bytes leftover after parsing attributes in process `syz.2.2022'. [ 488.521679][T14609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2023'. [ 488.541562][T14596] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.552478][T14605] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2022'. [ 488.562295][T14609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2023'. [ 488.606177][T14605] netlink: 41 bytes leftover after parsing attributes in process `syz.2.2022'. [ 488.693531][T14596] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.749280][T14616] – speed is unknown, defaulting to 1000 [ 488.823227][T14596] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.173930][ T9385] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.237873][ T9385] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.308420][ T9385] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.368165][ T9385] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.588369][T14643] syzkaller1: entered allmulticast mode [ 489.620158][T14624] – speed is unknown, defaulting to 1000 [ 490.178671][T14636] – speed is unknown, defaulting to 1000 [ 490.359837][T14657] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2034'. [ 490.555986][T14663] nbd: socks must be embedded in a SOCK_ITEM attr [ 490.625658][T14663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2035'. [ 491.136366][T14677] bond11: down delay (5) is not a multiple of miimon (2), value rounded to 4 ms [ 491.149834][T14677] bond11: entered promiscuous mode [ 491.163183][T14688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2038'. [ 491.212117][T14688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2038'. [ 491.251480][T14688] netlink: 'syz.2.2038': attribute type 12 has an invalid length. [ 491.507102][T14688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2038'. [ 491.535067][T14688] netlink: 'syz.2.2038': attribute type 12 has an invalid length. [ 492.262096][T14728] xt_socket: unknown flags 0x8 [ 492.444620][T14710] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 492.834701][T14743] netlink: 'syz.2.2049': attribute type 10 has an invalid length. [ 492.891670][T14743] ipvlan0: entered allmulticast mode [ 492.932363][T14743] veth0_vlan: entered allmulticast mode [ 492.997310][T14743] team0: Device ipvlan0 failed to register rx_handler [ 493.781751][T14751] – speed is unknown, defaulting to 1000 [ 493.826337][T14758] netlink: 'syz.2.2054': attribute type 29 has an invalid length. [ 493.996640][T14765] nbd: must specify at least one socket [ 494.003560][T14765] __nla_validate_parse: 3 callbacks suppressed [ 494.003579][T14765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2056'. [ 494.935041][T14804] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2066'. [ 495.091015][T14795] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2064'. [ 495.264757][T14817] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2070'. [ 495.327030][T14817] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2070'. [ 495.515169][T14822] openvswitch: netlink: Multiple metadata blocks provided [ 496.142830][T14850] netlink: 'syz.4.2079': attribute type 4 has an invalid length. [ 496.303699][T14858] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 496.729276][T14874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2085'. [ 497.080429][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 497.090610][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 497.176422][ T807] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 497.206705][ T6447] bond5: (slave ip6gretap0): link status up again after 0 ms [ 497.241056][ T6447] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 497.255925][ T5768] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 497.267895][T14883] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2083'. [ 497.425778][ T9385] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 497.607251][ T9385] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 497.630837][T14910] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2091'. [ 497.665648][T14910] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2091'. [ 497.731537][ T7053] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 497.808881][T14913] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2092'. [ 497.905113][T14921] netlink: 'syz.0.2093': attribute type 13 has an invalid length. [ 497.913490][T14921] netlink: 'syz.0.2093': attribute type 17 has an invalid length. [ 497.994964][T14927] nbd: must specify a device to reconfigure [ 498.020955][T14921] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 498.044176][T14919] syzkaller0: entered promiscuous mode [ 498.065796][T14919] syzkaller0: entered allmulticast mode [ 498.076188][ T9385] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 498.281367][T14930] netlink: 'syz.4.2097': attribute type 7 has an invalid length. [ 498.322199][T14930] netlink: 'syz.4.2097': attribute type 23 has an invalid length. [ 498.395754][ T1118] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 498.506035][ T6447] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 498.519710][T14944] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 498.713920][T14952] netlink: 'syz.0.2104': attribute type 39 has an invalid length. [ 498.899374][T14952] hsr_slave_0 (unregistering): left promiscuous mode [ 499.104974][T14959] 8021q: adding VLAN 0 to HW filter on device bond10 [ 499.195438][T14965] netlink: 'syz.1.2108': attribute type 4 has an invalid length. [ 499.452006][T14979] netlink: 'syz.5.2112': attribute type 13 has an invalid length. [ 499.489452][T14979] netlink: 'syz.5.2112': attribute type 17 has an invalid length. [ 499.788307][T14974] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.796184][T14974] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.649054][T14974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.703605][T14974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.294610][T14979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.306350][T14979] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.327751][T14979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.401406][T14979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.413699][T14979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.437151][T14979] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 501.449148][T14979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 501.465737][T14979] net_ratelimit: 1 callbacks suppressed [ 501.465767][T14979] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 501.520854][T15000] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.532720][T15000] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.566115][ T6441] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 501.590965][ T9385] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.613528][ T7053] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.620889][ T7053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.632096][ T7053] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.639417][ T7053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.732013][ T9385] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.782850][T15000] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.813839][T15000] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.814947][T15030] netlink: 'syz.4.2118': attribute type 9 has an invalid length. [ 501.853323][T15030] netlink: 'syz.4.2118': attribute type 1 has an invalid length. [ 501.881996][ T9385] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.901408][ T9385] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.052477][T15000] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.066551][T15000] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.155118][T15000] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.193222][T15000] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.210692][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.273215][T15048] __nla_validate_parse: 7 callbacks suppressed [ 502.273238][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2122'. [ 502.307292][ T7050] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 502.504523][ T9385] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.526132][ T9385] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.549051][ T9385] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 502.632596][ T9385] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.651617][ T9385] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.704940][ T9385] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.724208][ T9385] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.783759][ T9385] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.802906][ T9385] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.870766][T15071] gretap1: entered allmulticast mode [ 502.895004][T15073] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 502.977102][ T7053] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 503.077896][T15081] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.095633][ T7053] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 503.131948][T15084] validate_nla: 2 callbacks suppressed [ 503.131969][T15084] netlink: 'syz.4.2135': attribute type 1 has an invalid length. [ 503.160086][T15084] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2135'. [ 503.186365][T15084] netlink: 'syz.4.2135': attribute type 64 has an invalid length. [ 503.265916][ T7053] bond5: (slave ip6gretap0): link status up again after 0 ms [ 503.295782][ T7053] bond5: (slave ip6gretap0): link status up again after 0 ms [ 503.304703][ T7053] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 503.312768][ T5971] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 503.356053][ T5971] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 503.437526][ T9385] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 503.673017][T15106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.728215][T15112] netlink: 'syz.1.2140': attribute type 1 has an invalid length. [ 503.853675][T15106] netlink: 'syz.1.2140': attribute type 32 has an invalid length. [ 505.104138][T15162] bond3: entered allmulticast mode [ 505.142702][T15174] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2148'. [ 505.268402][T15176] bond0: (slave bond_slave_1): Releasing backup interface [ 505.369899][T15185] netlink: 'syz.0.2151': attribute type 4 has an invalid length. [ 505.404745][T15185] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2151'. [ 505.846694][T15202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2154'. [ 505.903526][T15203] SET target dimension over the limit! [ 505.973396][T15208] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2156'. [ 506.061042][T15211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2157'. [ 506.248683][T15224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2160'. [ 506.280098][T14991] IPVS: starting estimator thread 0... [ 506.293227][T15211] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 506.312646][T15211] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.2157'. [ 506.379808][T15227] IPVS: using max 24 ests per chain, 57600 per kthread [ 506.455300][T15211] syzkaller0: entered promiscuous mode [ 506.478077][T15211] syzkaller0: entered allmulticast mode [ 506.500418][ T35] syzkaller0: tun_net_xmit 70 [ 506.525797][ T35] net_ratelimit: 18 callbacks suppressed [ 506.525820][ T35] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 506.540970][T15211] syzkaller0: tun_net_xmit 14 [ 506.737964][ T6440] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 506.995010][T15244] bond11: Removing last arp target with arp_interval on [ 507.027622][T15244] bond11: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 507.063553][T15244] bond11 (unregistering): Released all slaves [ 507.177045][ T35] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 507.342730][T15255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2166'. [ 507.475277][T15267] netlink: 'syz.1.2167': attribute type 4 has an invalid length. [ 507.496170][T15267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2167'. [ 507.547998][ T9385] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 507.667278][ T9385] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 507.805662][ T6440] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 507.925618][ T6447] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 508.125994][ T6447] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 508.276080][ T9385] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 508.374974][T15299] netlink: 'syz.4.2178': attribute type 16 has an invalid length. [ 508.384595][T15299] netlink: 'syz.4.2178': attribute type 17 has an invalid length. [ 508.392860][ T35] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 508.432705][T15302] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2178'. [ 508.456952][T10869] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 508.528571][T15299] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2178'. [ 509.214380][T15337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2188'. [ 509.477208][T10869] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 509.807483][T15361] tipc: Enabling of bearer rejected, failed to enable media [ 509.919170][T15367] smc: removing ib device syz0 [ 510.322018][T15367] smbdirect: ib_dev[syz0] removed [ 510.716568][T15381] bond12: ARP target 9.0.0.0 is already present [ 510.725703][T15381] bond12: option arp_ip_target: invalid value (9) [ 510.809015][T15381] bond12 (unregistering): Released all slaves [ 510.837858][T15398] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 510.981678][T15402] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2202'. [ 511.213832][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2204'. [ 511.250926][T15403] tipc: Enabled bearer , priority 0 [ 511.289472][T15391] syzkaller1: entered promiscuous mode [ 511.309933][T15391] syzkaller1: entered allmulticast mode [ 511.443626][T15407] syzkaller0: entered promiscuous mode [ 511.449427][T15407] syzkaller0: entered allmulticast mode [ 511.456936][T15407] tipc: Resetting bearer [ 511.465433][T15409] syzkaller1: entered promiscuous mode [ 511.499840][T15409] syzkaller1: entered allmulticast mode [ 511.582306][T15389] tipc: Resetting bearer [ 511.609726][T15418] netlink: 'syz.0.2205': attribute type 1 has an invalid length. [ 512.436971][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 512.439684][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.452087][ C1] bridge0: topology change detected, propagating [ 512.459137][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.466415][ C1] bridge0: topology change detected, propagating [ 515.642894][T15389] tipc: Disabling bearer [ 515.704469][T15418] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 515.815981][ T6440] net_ratelimit: 26 callbacks suppressed [ 515.816004][ T6440] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 516.152731][T15448] bond7: option lacp_active: invalid value (8) [ 516.177227][T15448] bond7 (unregistering): Released all slaves [ 516.245846][ T3274] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 516.370753][ T3274] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 516.535891][ T3274] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 516.559309][T15473] netlink: 'syz.5.2218': attribute type 1 has an invalid length. [ 516.716215][ T3274] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 516.847897][ T9385] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 516.935286][T15489] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2224'. [ 516.995776][ T3274] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 517.018852][T15481] x_tables: unsorted underflow at hook 3 [ 517.127236][ T9384] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 517.434016][T15510] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 517.545805][ T9384] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 517.686015][ T3274] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 518.083642][T15546] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2237'. [ 518.149379][T15548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2237'. [ 518.898158][T15579] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2244'. [ 518.982281][T15583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2245'. [ 519.069404][T15586] netlink: 'syz.5.2244': attribute type 21 has an invalid length. [ 519.090413][T15583] bond0: entered promiscuous mode [ 519.101507][T15583] bond_slave_0: entered promiscuous mode [ 519.140131][T15583] batadv0: entered promiscuous mode [ 519.148942][T15583] debugfs: 'hsr1' already exists in 'hsr' [ 519.157607][T15583] Cannot create hsr debugfs directory [ 519.332733][T15578] geneve3: left promiscuous mode [ 519.339997][T15578] bond11: left promiscuous mode [ 519.753670][T15607] netlink: 'syz.5.2250': attribute type 30 has an invalid length. [ 522.675795][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 522.906394][ T3274] net_ratelimit: 9 callbacks suppressed [ 522.906420][ T3274] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 523.106762][T15619] xt_socket: unknown flags 0x8 [ 523.146042][ T9385] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 523.335903][ T3274] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 523.344336][T15629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2256'. [ 523.696301][ T3274] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 523.815836][ T3274] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 523.948253][ T3274] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 523.989692][T15661] geneve4: entered promiscuous mode [ 523.995091][T15661] geneve4: entered allmulticast mode [ 524.001780][T15660] tap0: tun_chr_ioctl cmd 2148553947 [ 524.084389][ T6444] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 524.153172][T15665] netlink: 'syz.5.2269': attribute type 13 has an invalid length. [ 524.162020][T15665] netlink: 'syz.5.2269': attribute type 17 has an invalid length. [ 524.204733][T15665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.261149][T15665] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 524.297584][ T9384] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 524.359508][ T5978] page_pool_release_retry() stalled pool shutdown: id 100, 1 inflight 60 sec [ 524.426822][ T9384] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 524.461642][T15677] netlink: 'syz.5.2272': attribute type 30 has an invalid length. [ 524.655912][T15686] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2275'. [ 524.838715][T15695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2277'. [ 525.043754][T15708] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2279'. [ 525.997347][T15742] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2289'. [ 526.007848][T15742] netlink: 'syz.1.2289': attribute type 9 has an invalid length. [ 526.016654][T15742] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2289'. [ 526.026293][T15742] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2289'. [ 526.040043][T15745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2287'. [ 526.223633][T15751] netlink: 'syz.4.2291': attribute type 1 has an invalid length. [ 526.343962][T15761] ip6gre1: entered promiscuous mode [ 526.372102][T15761] ip6gre1: entered allmulticast mode [ 526.660336][T15779] netlink: 'syz.5.2297': attribute type 7 has an invalid length. [ 526.677281][T15780] netlink: 'syz.5.2297': attribute type 7 has an invalid length. [ 526.702171][T15781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2298'. [ 526.862070][ T9384] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.881511][ T9384] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.901302][T15790] gtp0: entered promiscuous mode [ 526.907721][T15790] gtp0: entered allmulticast mode [ 526.914568][ T9384] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 526.925869][ T9384] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.038222][T15800] netlink: 'syz.0.2302': attribute type 4 has an invalid length. [ 527.038222][T15794] netlink: 'syz.0.2302': attribute type 4 has an invalid length. [ 527.070030][T15799] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2303'. [ 527.089895][T15793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 527.471121][T15822] ieee802154 phy1 wpan1: encryption failed: -22 [ 527.536500][T15824] : renamed from veth0_to_bond (while UP) [ 527.576688][T15824] vlan2: entered promiscuous mode [ 527.596152][T15824] bridge0: entered promiscuous mode [ 527.752608][T15833] netlink: 'syz.5.2315': attribute type 27 has an invalid length. [ 528.073777][T15833] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.081389][T15833] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.614166][T15833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.665205][T15833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.822107][T15833] bond2: left promiscuous mode [ 528.833463][T15833] bond2: left allmulticast mode [ 528.847574][T15833] bond3: left allmulticast mode [ 528.856001][T15833] ip6gre1: left promiscuous mode [ 528.866772][T15833] ip6gre1: left allmulticast mode [ 528.885081][T15833] gtp0: left promiscuous mode [ 528.892075][T15833] gtp0: left allmulticast mode [ 528.899983][T15833] vlan2: left promiscuous mode [ 528.906417][T15833] bridge0: left promiscuous mode [ 528.915673][T13616] Bluetooth: hci5: command 0x0406 tx timeout [ 528.969326][ T6440] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.995247][ T6440] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.006332][ T6440] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.052358][ T6440] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.066603][ T6440] net_ratelimit: 20 callbacks suppressed [ 529.066623][ T6440] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 529.163115][T15858] __nla_validate_parse: 4 callbacks suppressed [ 529.163134][T15858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2319'. [ 529.179080][T15858] openvswitch: netlink: Flow actions attr not present in new flow. [ 529.188655][ T9385] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 529.316693][ T6440] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 529.326246][T15867] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2324'. [ 529.350346][T15868] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2324'. [ 529.429793][ T6440] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 529.565676][ T6440] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 529.696068][ T6440] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 529.815957][ T6440] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 529.949291][ T6440] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 530.066494][ T1118] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 530.306491][T15892] netlink: 41 bytes leftover after parsing attributes in process `syz.5.2330'. [ 530.335713][T15892] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2330'. [ 530.350414][T15892] netlink: 41 bytes leftover after parsing attributes in process `syz.5.2330'. [ 530.482661][T15898] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20002 [ 530.495195][T15900] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20002 [ 530.566877][T15899] ip6gre3: entered promiscuous mode [ 530.574530][T15899] ip6gre3: entered allmulticast mode [ 530.598631][T15903] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2333'. [ 530.738715][T15914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2337'. [ 530.809053][T15914] 8021q: adding VLAN 0 to HW filter on device bond7 [ 530.848911][T15914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2337'. [ 530.863273][T15915] 8021q: adding VLAN 0 to HW filter on device bond8 [ 530.873489][T15915] bond7: (slave bond8): Enslaving as an active interface with an up link [ 531.018310][T15914] bond7 (unregistering): (slave bond8): Releasing backup interface [ 531.073768][T15927] validate_nla: 2 callbacks suppressed [ 531.073788][T15927] netlink: 'syz.2.2341': attribute type 1 has an invalid length. [ 531.117417][T15914] bond7 (unregistering): Released all slaves [ 531.187533][T15927] 8021q: adding VLAN 0 to HW filter on device bond11 [ 531.356767][T15932] bond11: (slave veth11): Enslaving as an active interface with a down link [ 531.442565][T15927] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 531.468086][T15927] bond11: (slave batadv1): making interface the new active one [ 531.477863][T15927] batadv1: entered promiscuous mode [ 531.483685][T15927] bond11: (slave batadv1): Enslaving as an active interface with an up link [ 531.584197][T15943] bond11 (unregistering): (slave veth11): Releasing active interface [ 531.621585][T15943] bond11 (unregistering): (slave batadv1): Releasing active interface [ 531.682390][T15943] bond11 (unregistering): Released all slaves [ 531.965090][T15972] netlink: 'syz.0.2350': attribute type 32 has an invalid length. [ 531.973223][T15972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2350'. [ 532.097645][T15972] bond12: option coupled_control: invalid value (12) [ 532.134245][T15972] bond12 (unregistering): Released all slaves [ 532.577978][T16007] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 532.691407][T16012] bond11: Removing last ns target with arp_interval on [ 533.173720][T16037] x_tables: duplicate underflow at hook 2 [ 534.241010][ T6444] net_ratelimit: 20 callbacks suppressed [ 534.241039][ T6444] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 534.398444][ T9385] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 534.425280][T16100] ip6_vti0: entered promiscuous mode [ 534.447605][T16100] ip6_vti0: entered allmulticast mode [ 534.528581][ T35] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 534.837601][ T3274] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 534.955803][ T9385] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 535.095967][ T9384] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 535.226141][ T9385] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 535.260524][T16139] __nla_validate_parse: 7 callbacks suppressed [ 535.260548][T16139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2388'. [ 535.376863][ T6444] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 535.485369][T16152] netlink: 'syz.1.2390': attribute type 8 has an invalid length. [ 535.541181][T16152] sch_fq: defrate 0 ignored. [ 535.585949][ T9385] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 535.669879][T16167] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2393'. [ 535.786536][ T3303] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 535.833904][T16172] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2395'. [ 535.878832][T16172] unsupported nlmsg_type 40 [ 536.073341][T16186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2398'. [ 536.903412][T16233] dvmrp0: left allmulticast mode [ 537.049686][T16240] netlink: 'syz.2.2407': attribute type 1 has an invalid length. [ 537.149918][T16240] bond11: entered promiscuous mode [ 537.171915][T16240] 8021q: adding VLAN 0 to HW filter on device bond11 [ 537.275024][T16240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2407'. [ 537.372205][T16253] lo speed is unknown, defaulting to 1000 [ 537.401446][T16253] lo speed is unknown, defaulting to 1000 [ 537.413517][T16253] lo speed is unknown, defaulting to 1000 [ 537.431136][T16253] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 537.446862][T16257] netlink: 'syz.5.2411': attribute type 4 has an invalid length. [ 537.447282][T16253] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 537.472295][T16253] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 537.500577][T16260] netlink: 'syz.5.2411': attribute type 4 has an invalid length. [ 537.530636][T16253] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 537.540165][ T5978] lo speed is unknown, defaulting to 1000 [ 537.549038][ T5978] syz2: Port: 1 Link ACTIVE [ 537.624454][T16253] lo speed is unknown, defaulting to 1000 [ 537.646701][T16264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2409'. [ 537.669534][T16253] lo speed is unknown, defaulting to 1000 [ 537.683230][T16264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2409'. [ 537.711428][T16253] lo speed is unknown, defaulting to 1000 [ 537.732047][T16253] lo speed is unknown, defaulting to 1000 [ 537.774275][T16253] lo speed is unknown, defaulting to 1000 [ 537.993570][T16278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2415'. [ 538.036754][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 538.651063][T16315] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2426'. [ 538.746271][T16322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2428'. [ 538.979160][T16336] tun0: tun_chr_ioctl cmd 1074025672 [ 538.998019][T16336] tun0: ignored: set checksum disabled [ 539.295602][ T6440] net_ratelimit: 26 callbacks suppressed [ 539.295631][ T6440] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 539.323922][T16349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.425716][ T3274] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 539.667699][T16369] netlink: 'syz.1.2438': attribute type 13 has an invalid length. [ 539.677924][ T6440] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 539.688941][T16369] netlink: 'syz.1.2438': attribute type 17 has an invalid length. [ 539.970618][T16389] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 540.058641][T16369] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 540.088391][ T1118] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 540.305630][ T1118] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 540.317326][T16397] __nla_validate_parse: 4 callbacks suppressed [ 540.317344][T16397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2445'. [ 540.343468][T16384] lo speed is unknown, defaulting to 1000 [ 540.358548][T16397] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2445'. [ 540.496786][ T1118] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 540.721930][T16411] FAULT_INJECTION: forcing a failure. [ 540.721930][T16411] name failslab, interval 1, probability 0, space 0, times 0 [ 540.759553][T16411] CPU: 1 UID: 0 PID: 16411 Comm: syz.1.2449 Not tainted syzkaller #0 PREEMPT(full) [ 540.759586][T16411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 540.759600][T16411] Call Trace: [ 540.759610][T16411] [ 540.759619][T16411] dump_stack_lvl+0xe8/0x150 [ 540.759653][T16411] should_fail_ex+0x412/0x560 [ 540.759687][T16411] should_failslab+0xa8/0x100 [ 540.759725][T16411] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 540.759756][T16411] ? __alloc_skb+0x186/0x7d0 [ 540.759780][T16411] ? __alloc_skb+0x1d0/0x7d0 [ 540.759802][T16411] ? __local_bh_enable_ip+0xd0/0x130 [ 540.759830][T16411] __alloc_skb+0x1d0/0x7d0 [ 540.759854][T16411] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 540.759890][T16411] netlink_sendmsg+0x5d4/0xb40 [ 540.759929][T16411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 540.759961][T16411] ? aa_sock_msg_perm+0xf1/0x1b0 [ 540.759990][T16411] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 540.760022][T16411] ____sys_sendmsg+0x972/0x9f0 [ 540.760051][T16411] ? __might_fault+0xaf/0x130 [ 540.760085][T16411] ? __pfx_____sys_sendmsg+0x10/0x10 [ 540.760123][T16411] ? import_iovec+0x73/0xa0 [ 540.760158][T16411] ___sys_sendmsg+0x2a5/0x360 [ 540.760184][T16411] ? __lock_acquire+0x6b5/0x2cf0 [ 540.760213][T16411] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.760282][T16411] ? __fget_files+0x2a/0x420 [ 540.760308][T16411] ? __fget_files+0x3a0/0x420 [ 540.760342][T16411] __x64_sys_sendmsg+0x1bd/0x2a0 [ 540.760375][T16411] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 540.760414][T16411] ? __pfx_ksys_write+0x10/0x10 [ 540.760459][T16411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.760481][T16411] do_syscall_64+0x15f/0xf80 [ 540.760507][T16411] ? trace_irq_disable+0x3b/0x140 [ 540.760537][T16411] ? clear_bhb_loop+0x40/0x90 [ 540.760564][T16411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.760586][T16411] RIP: 0033:0x7f3b61f9cdd9 [ 540.760606][T16411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.760624][T16411] RSP: 002b:00007f3b62eb3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 540.760647][T16411] RAX: ffffffffffffffda RBX: 00007f3b62216090 RCX: 00007f3b61f9cdd9 [ 540.760662][T16411] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 540.760676][T16411] RBP: 00007f3b62eb3090 R08: 0000000000000000 R09: 0000000000000000 [ 540.760688][T16411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.760700][T16411] R13: 00007f3b62216128 R14: 00007f3b62216090 R15: 00007fff2bfcc408 [ 540.760735][T16411] [ 541.060675][T16416] syzkaller0: entered promiscuous mode [ 541.066316][T16416] syzkaller0: entered allmulticast mode [ 541.136765][ T6440] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 541.234797][T16424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2454'. [ 541.247145][T16424] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 541.254516][T16424] IPv6: NLM_F_CREATE should be set when creating new route [ 541.262055][T16424] IPv6: NLM_F_CREATE should be set when creating new route [ 541.267062][ T3274] bond5: (slave ip6gretap0): failed to get link speed/duplex [ 541.593894][T16436] netlink: 'syz.4.2458': attribute type 1 has an invalid length. [ 541.702963][T16449] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2461'. [ 541.734589][T16436] 8021q: adding VLAN 0 to HW filter on device bond12 [ 541.783135][T16452] netlink: 'syz.5.2462': attribute type 16 has an invalid length. [ 541.832013][T16453] netlink: 'syz.5.2462': attribute type 16 has an invalid length. [ 541.851091][T16452] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.2462'. [ 541.869912][T16453] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.2462'. [ 541.999908][T16460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2466'. [ 542.094133][T16472] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2465'. [ 542.221189][T16472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2465'. [ 542.354761][T16477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2468'. [ 542.743010][T16502] netlink: 'syz.2.2475': attribute type 10 has an invalid length. [ 542.791005][T16502] ieee802154 phy1 wpan1: encryption failed: -22 [ 542.979371][T16508] FAULT_INJECTION: forcing a failure. [ 542.979371][T16508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.040635][T16508] CPU: 1 UID: 0 PID: 16508 Comm: syz.5.2478 Not tainted syzkaller #0 PREEMPT(full) [ 543.040673][T16508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 543.040686][T16508] Call Trace: [ 543.040695][T16508] [ 543.040703][T16508] dump_stack_lvl+0xe8/0x150 [ 543.040734][T16508] should_fail_ex+0x412/0x560 [ 543.040768][T16508] _copy_from_iter+0x1d3/0x1670 [ 543.040800][T16508] ? rcu_is_watching+0x15/0xb0 [ 543.040833][T16508] ? __pfx__copy_from_iter+0x10/0x10 [ 543.040869][T16508] ? netlink_sendmsg+0x650/0xb40 [ 543.040895][T16508] ? skb_put+0x11b/0x210 [ 543.040924][T16508] netlink_sendmsg+0x6c0/0xb40 [ 543.040962][T16508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.040993][T16508] ? aa_sock_msg_perm+0xf1/0x1b0 [ 543.041022][T16508] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 543.041055][T16508] ____sys_sendmsg+0x972/0x9f0 [ 543.041084][T16508] ? __might_fault+0xaf/0x130 [ 543.041121][T16508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 543.041161][T16508] ? import_iovec+0x73/0xa0 [ 543.041196][T16508] ___sys_sendmsg+0x2a5/0x360 [ 543.041223][T16508] ? __lock_acquire+0x6b5/0x2cf0 [ 543.041260][T16508] ? __pfx____sys_sendmsg+0x10/0x10 [ 543.041328][T16508] ? __fget_files+0x2a/0x420 [ 543.041353][T16508] ? __fget_files+0x3a0/0x420 [ 543.041391][T16508] __x64_sys_sendmsg+0x1bd/0x2a0 [ 543.041423][T16508] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 543.041462][T16508] ? __pfx_ksys_write+0x10/0x10 [ 543.041503][T16508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.041527][T16508] do_syscall_64+0x15f/0xf80 [ 543.041553][T16508] ? trace_irq_disable+0x3b/0x140 [ 543.041586][T16508] ? clear_bhb_loop+0x40/0x90 [ 543.041618][T16508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.041639][T16508] RIP: 0033:0x7f8ecd39cdd9 [ 543.041659][T16508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.041678][T16508] RSP: 002b:00007f8ecb5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.041701][T16508] RAX: ffffffffffffffda RBX: 00007f8ecd615fa0 RCX: 00007f8ecd39cdd9 [ 543.041717][T16508] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 543.041731][T16508] RBP: 00007f8ecb5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 543.041743][T16508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.041755][T16508] R13: 00007f8ecd616038 R14: 00007f8ecd615fa0 R15: 00007ffcf4b35f68 [ 543.041790][T16508] [ 543.410304][T16512] lo speed is unknown, defaulting to 1000 [ 543.724195][T16540] netlink: 'syz.4.2485': attribute type 13 has an invalid length. [ 543.752949][T16542] netlink: 'syz.0.2487': attribute type 1 has an invalid length. [ 543.754834][T16540] netlink: 'syz.4.2485': attribute type 17 has an invalid length. [ 543.769890][T16542] netlink: 'syz.0.2487': attribute type 1 has an invalid length. [ 543.806531][T16535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.855816][T16547] netlink: 'syz.0.2488': attribute type 1 has an invalid length. [ 543.879501][T16535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.965820][T16551] netlink: 'syz.2.2489': attribute type 31 has an invalid length. [ 544.408855][T16562] netlink: 'syz.0.2492': attribute type 32 has an invalid length. [ 544.430539][T16540] ip6_vti0: left promiscuous mode [ 544.446272][T16540] ip6_vti0: left allmulticast mode [ 544.481437][T16540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.494680][T16540] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.510104][T16540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.544667][T16540] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.551994][T16540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.584376][T16540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.603958][T16540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.634398][T16540] veth1_vlan: left promiscuous mode [ 544.641952][T16540] veth0_vlan: left promiscuous mode [ 544.649230][T16540] veth0_vlan: entered promiscuous mode [ 544.661241][T16540] veth1_vlan: entered promiscuous mode [ 544.673351][T16540] veth1_macvtap: left promiscuous mode [ 544.682926][T16540] veth0_macvtap: left promiscuous mode [ 544.699938][T16540] veth0_macvtap: entered promiscuous mode [ 544.719066][T16540] veth1_macvtap: entered promiscuous mode [ 544.731491][T16540] net_ratelimit: 14 callbacks suppressed [ 544.731507][T16540] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 544.768552][ T3303] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.779532][ T3303] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.041075][T16562] bond12: Setting coupled_control to off (0) [ 545.053367][T16570] tap0: tun_chr_ioctl cmd 1074025677 [ 545.060361][T16570] tap0: linktype set to 6 [ 545.098030][ T3303] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.173563][ T3303] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.200005][T16588] tipc: Enabled bearer , priority 0 [ 545.248393][T16584] syzkaller0: entered promiscuous mode [ 545.261261][T16584] syzkaller0: entered allmulticast mode [ 545.400246][T16584] tipc: Resetting bearer [ 545.469416][T16583] tipc: Resetting bearer [ 545.512750][T16583] tipc: Disabling bearer [ 545.612159][T16609] __nla_validate_parse: 5 callbacks suppressed [ 545.612186][T16609] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2503'. [ 545.810002][T16619] bond13: entered promiscuous mode [ 545.834301][T16622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.477172][T16638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2511'. [ 546.518298][T16638] veth13: entered promiscuous mode [ 546.527546][T16613] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 546.994472][T16665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2517'. [ 549.619078][T16641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 549.811240][T16683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2522'. [ 551.134573][T16684] lo speed is unknown, defaulting to 1000 [ 552.162044][T16697] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 552.175318][T16710] netlink: 'syz.1.2529': attribute type 4 has an invalid length. [ 552.184481][T16710] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2529'. [ 552.524428][T16742] nbd: must specify a device to reconfigure [ 552.714042][T16753] syzkaller1: entered promiscuous mode [ 552.739787][T16753] syzkaller1: entered allmulticast mode [ 552.801344][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2540'. [ 552.954861][T16764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2540'. [ 553.204878][T16775] bond12: Removing last arp target with arp_interval on [ 554.089383][T16814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2553'. [ 554.146469][T16822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2555'. [ 554.166207][T16819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2555'. [ 554.195065][T16814] vlan1: entered allmulticast mode [ 554.210951][T16814] bridge9: entered allmulticast mode [ 554.331793][T16826] bridge9: port 1(bond13) entered blocking state [ 554.355113][T16826] bridge9: port 1(bond13) entered disabled state [ 554.374318][T16826] bond13: entered allmulticast mode [ 554.400601][T16826] bond13: entered promiscuous mode [ 554.724966][T16842] netlink: 'syz.1.2559': attribute type 1 has an invalid length. [ 554.956675][T16842] bond9: entered promiscuous mode [ 554.978323][T16842] bond9: entered allmulticast mode [ 554.992448][T16842] 8021q: adding VLAN 0 to HW filter on device bond9 [ 555.038698][T16847] macvlan2: entered promiscuous mode [ 555.051999][T16847] macvlan2: entered allmulticast mode [ 555.076926][T16847] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 555.169036][T16854] netlink: 'syz.2.2562': attribute type 49 has an invalid length. [ 555.360183][T16856] netlink: 'syz.0.2563': attribute type 1 has an invalid length. [ 555.392067][T16856] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2563'. [ 556.423561][T16892] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 556.444623][T16892] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.855687][T16924] sctp: [Deprecated]: syz.4.2581 (pid 16924) Use of int in max_burst socket option deprecated. [ 556.855687][T16924] Use struct sctp_assoc_value instead [ 556.928169][T16926] sctp: [Deprecated]: syz.4.2581 (pid 16926) Use of int in max_burst socket option deprecated. [ 556.928169][T16926] Use struct sctp_assoc_value instead [ 556.994328][T16930] netlink: 'syz.5.2583': attribute type 5 has an invalid length. [ 557.120279][T16935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.136614][T16935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.147604][T16935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.156134][T16935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.167094][T16935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.176180][T16935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.190369][T16935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.120778][T16968] veth19: entered promiscuous mode [ 558.398574][T16986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2591'. [ 558.483136][T16989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2591'. [ 558.547705][T16991] netlink: 'syz.0.2592': attribute type 1 has an invalid length. [ 559.482623][T16971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.223909][T16971] bond5: left promiscuous mode [ 560.229280][T16971] veth9: left promiscuous mode [ 560.245369][T16971] ip6erspan0: left allmulticast mode [ 560.262811][T16971] bond9: left promiscuous mode [ 560.268251][T16971] bond9: left allmulticast mode [ 560.323777][ T5963] syz1: Port: 1 Link DOWN [ 560.331941][ T6440] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.378480][ T6440] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.428890][ T9385] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.498238][ T9385] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.533353][ T9385] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.563011][ T9385] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.598410][ T9385] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.627497][ T9385] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.640449][T17022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2601'. [ 560.874985][T17039] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2603'. [ 560.924535][T17041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2604'. [ 561.153760][T17056] netlink: 'syz.4.2608': attribute type 15 has an invalid length. [ 561.265310][T17059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2610'. [ 561.731621][T17083] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2617'. [ 562.363553][T17119] netlink: 'syz.0.2627': attribute type 32 has an invalid length. [ 562.386393][T17126] netlink: 'syz.5.2628': attribute type 1 has an invalid length. [ 562.396994][T17125] xt_l2tp: invalid flags combination: 8 [ 562.409282][T17126] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2628'. [ 562.721004][T17138] xt_hashlimit: size too large, truncated to 1048576 [ 562.757964][T17135] lo speed is unknown, defaulting to 1000 [ 562.984279][T17152] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 562.997358][T17151] netlink: 'syz.1.2634': attribute type 1 has an invalid length. [ 563.047717][T17151] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2634'. [ 563.207892][T17156] netlink: 'syz.2.2635': attribute type 4 has an invalid length. [ 563.584183][T17167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2638'. [ 563.642979][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.724016][T17166] syzkaller0: entered promiscuous mode [ 563.758723][T17166] syzkaller0: entered allmulticast mode [ 564.058264][T17188] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2642'. [ 564.398686][T17206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2648'. [ 564.552927][T17212] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes. [ 564.604960][T17212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2647'. [ 564.690750][T17216] netlink: 'syz.0.2649': attribute type 1 has an invalid length. [ 564.770063][T17223] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2650'. [ 564.842875][T17227] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 565.294335][T17238] syzkaller0: entered promiscuous mode [ 565.302585][T17238] syzkaller0: entered allmulticast mode [ 565.673562][T17253] tap0: tun_chr_ioctl cmd 1074025677 [ 565.680969][T17253] tap0: linktype set to 776 [ 565.867412][T17256] lo speed is unknown, defaulting to 1000 [ 565.950537][T17266] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.2660'. [ 566.021630][T17270] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 566.234164][T17277] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2664'. [ 566.248642][T17274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2663'. [ 566.520992][T17287] netlink: 'syz.1.2665': attribute type 21 has an invalid length. [ 566.559098][T17256] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 566.599392][T17287] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2665'. [ 566.629766][T17287] netlink: 'syz.1.2665': attribute type 4 has an invalid length. [ 566.648424][T17287] netlink: 'syz.1.2665': attribute type 3 has an invalid length. [ 566.659417][T17287] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2665'. [ 566.744989][T17293] lo speed is unknown, defaulting to 1000 [ 567.130446][T17311] IPVS: Unknown mcast interface: veth0_to_bond [ 567.289757][T17320] netlink: 'syz.5.2676': attribute type 10 has an invalid length. [ 567.418803][T17320] team0 (unregistering): Port device team_slave_0 removed [ 567.450138][T17320] team0 (unregistering): Port device team_slave_1 removed [ 567.489681][T17320] team0 (unregistering): Port device dummy0 removed [ 568.150594][T17355] netlink: 'syz.2.2682': attribute type 1 has an invalid length. [ 568.226773][T17355] 8021q: adding VLAN 0 to HW filter on device bond13 [ 568.343448][T17362] bond13: (slave veth15): Enslaving as an active interface with a down link [ 568.567567][ T9385] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.585879][ T9385] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.609579][T17374] lo speed is unknown, defaulting to 1000 [ 568.616352][ T9385] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.645190][ T9385] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 568.755221][T17388] __nla_validate_parse: 8 callbacks suppressed [ 568.755244][T17388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2690'. [ 568.781416][T17390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.210455][T17402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2694'. [ 569.443426][T17415] netlink: 'syz.4.2697': attribute type 39 has an invalid length. [ 569.511323][T17418] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 569.570571][T17415] bond2: (slave syz_tun): Removing an active aggregator [ 569.591074][T17415] bond2: (slave syz_tun): Releasing backup interface [ 570.156819][T17447] syzkaller0: entered promiscuous mode [ 570.171828][T17447] syzkaller0: entered allmulticast mode [ 570.667413][T17456] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2706'. [ 570.683760][T17473] Dead loop on virtual device ip6_vti0 (net 40), fix it urgently! [ 570.745076][T17473] Dead loop on virtual device ip6_vti0 (net 40), fix it urgently! [ 570.807467][T17460] lo speed is unknown, defaulting to 1000 [ 570.900316][T17481] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2711'. [ 571.204919][T17489] syzkaller0: entered promiscuous mode [ 571.226014][T17489] syzkaller0: entered allmulticast mode [ 571.810967][T17502] lo speed is unknown, defaulting to 1000 [ 571.866856][T17508] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2718'. [ 571.950552][T17508] netlink: 'syz.5.2718': attribute type 1 has an invalid length. [ 571.972633][T17511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2719'. [ 571.987704][T17508] netlink: 'syz.5.2718': attribute type 2 has an invalid length. [ 572.262558][T17526] siw: device registration error -23 [ 572.510384][T17547] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2729'. [ 572.523200][T17529] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2727'. [ 572.550651][T17547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2729'. [ 572.690924][T17527] netlink: 'syz.0.2724': attribute type 3 has an invalid length. [ 572.701292][T17527] netlink: 'syz.0.2724': attribute type 3 has an invalid length. [ 573.338429][T17580] syzkaller0: entered promiscuous mode [ 573.344270][T17580] syzkaller0: entered allmulticast mode [ 573.353760][T17576] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2738'. [ 573.372291][T17580] netlink: 'syz.0.2736': attribute type 11 has an invalid length. [ 573.472110][T17576] 8021q: adding VLAN 0 to HW filter on device bond14 [ 573.592970][T17576] 8021q: adding VLAN 0 to HW filter on device bond15 [ 573.974140][T17576] 8021q: adding VLAN 0 to HW filter on device bond16 [ 573.981658][T17576] __nla_validate_parse: 3 callbacks suppressed [ 573.981679][T17576] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2738'. [ 574.051636][T17576] 8021q: adding VLAN 0 to HW filter on device bond17 [ 574.060565][T17576] netlink: 51 bytes leftover after parsing attributes in process `syz.4.2738'. [ 574.116403][T17576] 8021q: adding VLAN 0 to HW filter on device bond18 [ 574.247239][T17608] lo speed is unknown, defaulting to 1000 [ 574.449547][T17620] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2745'. [ 574.474239][T17620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2745'. [ 574.705934][T17624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2746'. [ 574.715427][T17625] netem: change failed [ 574.758207][T17629] netlink: 'syz.4.2748': attribute type 15 has an invalid length. [ 574.806033][T17629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2748'. [ 574.825340][T17632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2749'. [ 574.974170][T17630] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 574.990605][T17632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2749'. [ 575.003493][ T9385] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 575.014849][T17637] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2750'. [ 575.026580][ T6444] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 575.060536][ T6444] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 575.079257][ T6444] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 575.439497][T17648] netlink: 'syz.0.2753': attribute type 3 has an invalid length. [ 575.747486][T17662] siw: device registration error -23 [ 575.817724][T17662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2757'. [ 576.223700][T17677] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 576.241221][T17677] syzkaller1: linktype set to 780 [ 576.849950][T17697] xt_CT: You must specify a L4 protocol and not use inversions on it [ 576.981042][T17697] Unsupported ieee802154 address type: 0 [ 577.225756][T17708] netlink: 'syz.1.2768': attribute type 7 has an invalid length. [ 577.245900][T17708] netlink: 'syz.1.2768': attribute type 8 has an invalid length. [ 577.260169][T17708] syzkaller0: entered promiscuous mode [ 577.271269][T17708] syzkaller0: entered allmulticast mode [ 578.737579][T17782] Bluetooth: MGMT ver 1.23 [ 579.035109][T17806] tipc: Failed to remove unknown binding: 66,0,0/0:2269024388/2269024390 [ 579.044299][T17807] netlink: 'syz.0.2797': attribute type 10 has an invalid length. [ 579.058291][T17806] tipc: Failed to remove unknown binding: 66,0,0/0:2269024388/2269024389 [ 579.082690][T17805] tipc: Failed to remove unknown binding: 66,0,0/0:2269024388/2269024390 [ 579.117502][T17805] tipc: Failed to remove unknown binding: 66,0,0/0:2269024388/2269024389 [ 579.148219][T17805] tipc: Failed to remove unknown binding: 66,0,0/0:2269024388/2269024390 [ 579.179239][T17805] tipc: Failed to remove unknown binding: 66,0,0/0:2269024388/2269024389 [ 579.455305][T17819] IPVS: Unknown mcast interface: veth0_to_bond [ 579.780345][T17831] __nla_validate_parse: 15 callbacks suppressed [ 579.780365][T17831] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2806'. [ 579.905003][T17840] 8021q: VLANs not supported on ipvlan0 [ 579.976385][T17833] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2806'. [ 580.050716][T17848] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2808'. [ 580.088498][T17848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2808'. [ 580.163729][T17851] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2808'. [ 581.012857][T17877] blkio.reset_stats is deprecated [ 581.145780][T17877] netlink: 'syz.0.2817': attribute type 6 has an invalid length. [ 581.165178][T17883] x_tables: duplicate underflow at hook 2 [ 581.190967][T17877] IPv6: NLM_F_CREATE should be specified when creating new route [ 581.302129][T17882] lo speed is unknown, defaulting to 1000 [ 581.855093][T17900] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 582.165832][T17902] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 582.488784][T17929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2826'. [ 584.118872][T18001] x_tables: duplicate underflow at hook 3 [ 584.159877][T18001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2834'. [ 584.271672][T18006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.307940][T18006] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 584.853865][T18030] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2842'. [ 584.938547][T18035] netlink: 'syz.4.2843': attribute type 1 has an invalid length. [ 585.258082][T18042] lo speed is unknown, defaulting to 1000 [ 585.327138][T18055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2847'. [ 585.390675][T13616] block nbd1: Receive control failed (result -107) [ 586.203445][T18075] bond0: (slave bond_slave_0): Releasing backup interface [ 586.238716][T18075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.292750][T18075] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 586.874416][T18099] netlink: 'syz.4.2855': attribute type 13 has an invalid length. [ 586.897699][T18099] netlink: 'syz.4.2855': attribute type 17 has an invalid length. [ 587.217350][T18094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.266947][T18094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.328648][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2857'. [ 587.679871][T18099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.701265][T18099] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.747543][T18099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.844027][T18099] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.851406][T18099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.943120][T18099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.972513][T18099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.009967][T18099] veth1_vlan: left promiscuous mode [ 588.028281][T18099] veth0_vlan: left promiscuous mode [ 588.035376][T18099] veth0_vlan: entered promiscuous mode [ 588.085206][T18099] veth1_vlan: entered promiscuous mode [ 588.132137][T18099] veth1_macvtap: left promiscuous mode [ 588.151738][T18099] veth0_macvtap: left promiscuous mode [ 588.184746][ T4948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 588.190974][T18099] veth0_macvtap: entered promiscuous mode [ 588.210425][ T4948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 588.219690][ T4948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 588.235830][ T4948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 588.244430][T18099] veth1_macvtap: entered promiscuous mode [ 588.251548][ T4948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 588.266442][T13616] [ 588.268855][T13616] ====================================================== [ 588.275926][T13616] WARNING: possible circular locking dependency detected [ 588.282996][T13616] syzkaller #0 Not tainted [ 588.287458][T13616] ------------------------------------------------------ [ 588.294507][T13616] kworker/u9:0/13616 is trying to acquire lock: [ 588.300781][T13616] ffff88801be8d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4ed/0x5c0 [ 588.311296][T13616] [ 588.311296][T13616] but task is already holding lock: [ 588.318696][T13616] ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0 [ 588.328153][T13616] [ 588.328153][T13616] which lock already depends on the new lock. [ 588.328153][T13616] [ 588.338584][T13616] [ 588.338584][T13616] the existing dependency chain (in reverse order) is: [ 588.347625][T13616] [ 588.347625][T13616] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 588.355755][T13616] down_write+0x96/0x200 [ 588.360568][T13616] kernfs_add_one+0x41/0x5c0 [ 588.365705][T13616] kernfs_create_dir_ns+0xde/0x130 [ 588.371378][T13616] internal_create_group+0x425/0x1180 [ 588.377311][T13616] cpuhp_invoke_callback+0x445/0x860 [ 588.383159][T13616] cpuhp_issue_call+0x430/0x7a0 [ 588.388558][T13616] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 588.395166][T13616] __cpuhp_setup_state+0x3f/0x60 [ 588.400647][T13616] do_one_initcall+0x250/0x870 [ 588.405962][T13616] do_initcall_level+0x104/0x190 [ 588.411478][T13616] do_initcalls+0x59/0xa0 [ 588.416397][T13616] kernel_init_freeable+0x2a6/0x3e0 [ 588.422166][T13616] kernel_init+0x1d/0x1d0 [ 588.427059][T13616] ret_from_fork+0x514/0xb70 [ 588.432203][T13616] ret_from_fork_asm+0x1a/0x30 [ 588.437527][T13616] [ 588.437527][T13616] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 588.445393][T13616] [ 588.445393][T13616] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 588.453163][T13616] cpus_read_lock+0x42/0x160 [ 588.458307][T13616] static_key_slow_inc+0x12/0x30 [ 588.463794][T13616] tcp_md5_do_add+0x1d4/0x390 [ 588.469020][T13616] tcp_v6_parse_md5_keys+0x562/0x680 [ 588.474849][T13616] do_tcp_setsockopt+0x12ec/0x2060 [ 588.480508][T13616] do_sock_setsockopt+0x17c/0x1b0 [ 588.486078][T13616] __x64_sys_setsockopt+0x13d/0x1b0 [ 588.491823][T13616] do_syscall_64+0x15f/0xf80 [ 588.496955][T13616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.503394][T13616] [ 588.503394][T13616] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 588.511157][T13616] lock_sock_nested+0x41/0x100 [ 588.516473][T13616] inet_shutdown+0x6a/0x390 [ 588.521528][T13616] nbd_mark_nsock_dead+0x2e9/0x560 [ 588.527185][T13616] recv_work+0x1c2e/0x1d40 [ 588.532165][T13616] process_scheduled_works+0xb5d/0x1860 [ 588.538265][T13616] worker_thread+0xa53/0xfc0 [ 588.543406][T13616] kthread+0x388/0x470 [ 588.548028][T13616] ret_from_fork+0x514/0xb70 [ 588.553160][T13616] ret_from_fork_asm+0x1a/0x30 [ 588.558472][T13616] [ 588.558472][T13616] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 588.566152][T13616] __mutex_lock+0x1a3/0x1550 [ 588.571356][T13616] nbd_queue_rq+0x37b/0x1100 [ 588.576520][T13616] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 588.582722][T13616] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 588.589638][T13616] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 588.596238][T13616] blk_mq_run_hw_queue+0x348/0x4f0 [ 588.601978][T13616] blk_mq_dispatch_list+0xd16/0xe10 [ 588.607779][T13616] blk_mq_flush_plug_list+0x48d/0x570 [ 588.613768][T13616] __blk_flush_plug+0x3ed/0x4d0 [ 588.619253][T13616] __submit_bio+0x28d/0x580 [ 588.624400][T13616] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 588.630666][T13616] block_read_full_folio+0x599/0x830 [ 588.636553][T13616] filemap_read_folio+0x137/0x3b0 [ 588.642201][T13616] do_read_cache_folio+0x358/0x590 [ 588.647923][T13616] read_part_sector+0xb6/0x2b0 [ 588.653313][T13616] adfspart_check_ICS+0xb1/0x960 [ 588.658853][T13616] bdev_disk_changed+0x817/0x1770 [ 588.664475][T13616] blkdev_get_whole+0x380/0x510 [ 588.669946][T13616] bdev_open+0x31e/0xd30 [ 588.674790][T13616] blkdev_open+0x470/0x610 [ 588.679759][T13616] do_dentry_open+0x785/0x14e0 [ 588.685122][T13616] vfs_open+0x3b/0x340 [ 588.689859][T13616] path_openat+0x2e08/0x3860 [ 588.695049][T13616] do_file_open+0x23e/0x4a0 [ 588.700163][T13616] do_sys_openat2+0x113/0x200 [ 588.705443][T13616] __x64_sys_openat+0x138/0x170 [ 588.710898][T13616] do_syscall_64+0x15f/0xf80 [ 588.716089][T13616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.722577][T13616] [ 588.722577][T13616] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 588.729878][T13616] __mutex_lock+0x1a3/0x1550 [ 588.735065][T13616] nbd_queue_rq+0xc6/0x1100 [ 588.740188][T13616] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 588.746330][T13616] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 588.753267][T13616] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 588.759864][T13616] blk_mq_run_hw_queue+0x348/0x4f0 [ 588.765571][T13616] blk_mq_dispatch_list+0xd16/0xe10 [ 588.771397][T13616] blk_mq_flush_plug_list+0x48d/0x570 [ 588.777372][T13616] __blk_flush_plug+0x3ed/0x4d0 [ 588.782826][T13616] __submit_bio+0x28d/0x580 [ 588.787940][T13616] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 588.794178][T13616] block_read_full_folio+0x599/0x830 [ 588.800061][T13616] filemap_read_folio+0x137/0x3b0 [ 588.805696][T13616] do_read_cache_folio+0x358/0x590 [ 588.811507][T13616] read_part_sector+0xb6/0x2b0 [ 588.816887][T13616] adfspart_check_ICS+0xb1/0x960 [ 588.822455][T13616] bdev_disk_changed+0x817/0x1770 [ 588.828104][T13616] blkdev_get_whole+0x380/0x510 [ 588.833572][T13616] bdev_open+0x31e/0xd30 [ 588.838430][T13616] blkdev_open+0x470/0x610 [ 588.843435][T13616] do_dentry_open+0x785/0x14e0 [ 588.848783][T13616] vfs_open+0x3b/0x340 [ 588.853429][T13616] path_openat+0x2e08/0x3860 [ 588.858644][T13616] do_file_open+0x23e/0x4a0 [ 588.863744][T13616] do_sys_openat2+0x113/0x200 [ 588.868994][T13616] __x64_sys_openat+0x138/0x170 [ 588.874443][T13616] do_syscall_64+0x15f/0xf80 [ 588.879661][T13616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.886157][T13616] [ 588.886157][T13616] -> #4 (set->srcu){.+.+}-{0:0}: [ 588.893370][T13616] __synchronize_srcu+0xca/0x300 [ 588.898891][T13616] elevator_switch+0x1e8/0x7a0 [ 588.904262][T13616] elevator_change+0x2cc/0x450 [ 588.909647][T13616] elevator_set_default+0x36c/0x430 [ 588.915434][T13616] blk_register_queue+0x3e9/0x4e0 [ 588.921191][T13616] __add_disk+0x677/0xd50 [ 588.926103][T13616] add_disk_fwnode+0xfb/0x480 [ 588.931398][T13616] nbd_dev_add+0x72c/0xb50 [ 588.936408][T13616] nbd_init+0x168/0x1f0 [ 588.941156][T13616] do_one_initcall+0x250/0x870 [ 588.946511][T13616] do_initcall_level+0x104/0x190 [ 588.952068][T13616] do_initcalls+0x59/0xa0 [ 588.957039][T13616] kernel_init_freeable+0x2a6/0x3e0 [ 588.962864][T13616] kernel_init+0x1d/0x1d0 [ 588.967805][T13616] ret_from_fork+0x514/0xb70 [ 588.972990][T13616] ret_from_fork_asm+0x1a/0x30 [ 588.978353][T13616] [ 588.978353][T13616] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 588.986263][T13616] __mutex_lock+0x1a3/0x1550 [ 588.991454][T13616] elevator_change+0x1b3/0x450 [ 588.996827][T13616] elevator_set_none+0xb5/0x140 [ 589.002307][T13616] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 589.008701][T13616] nbd_start_device+0x17f/0xb10 [ 589.014123][T13616] nbd_genl_connect+0x165b/0x1cf0 [ 589.019723][T13616] genl_family_rcv_msg_doit+0x22a/0x330 [ 589.025916][T13616] genl_rcv_msg+0x61c/0x7a0 [ 589.031015][T13616] netlink_rcv_skb+0x232/0x4b0 [ 589.036393][T13616] genl_rcv+0x28/0x40 [ 589.040970][T13616] netlink_unicast+0x75c/0x8e0 [ 589.046308][T13616] netlink_sendmsg+0x813/0xb40 [ 589.051675][T13616] ____sys_sendmsg+0x972/0x9f0 [ 589.057047][T13616] ___sys_sendmsg+0x2a5/0x360 [ 589.062349][T13616] __x64_sys_sendmsg+0x1bd/0x2a0 [ 589.067887][T13616] do_syscall_64+0x15f/0xf80 [ 589.073096][T13616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.079577][T13616] [ 589.079577][T13616] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 589.088292][T13616] blk_alloc_queue+0x546/0x680 [ 589.093653][T13616] __blk_mq_alloc_disk+0x197/0x390 [ 589.099383][T13616] nbd_dev_add+0x499/0xb50 [ 589.104382][T13616] nbd_init+0x168/0x1f0 [ 589.109135][T13616] do_one_initcall+0x250/0x870 [ 589.114475][T13616] do_initcall_level+0x104/0x190 [ 589.120010][T13616] do_initcalls+0x59/0xa0 [ 589.124940][T13616] kernel_init_freeable+0x2a6/0x3e0 [ 589.130789][T13616] kernel_init+0x1d/0x1d0 [ 589.135722][T13616] ret_from_fork+0x514/0xb70 [ 589.140896][T13616] ret_from_fork_asm+0x1a/0x30 [ 589.146246][T13616] [ 589.146246][T13616] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 589.153530][T13616] fs_reclaim_acquire+0x71/0x100 [ 589.159075][T13616] kmem_cache_alloc_noprof+0x40/0x650 [ 589.165091][T13616] __kernfs_iattrs+0xdf/0x320 [ 589.170348][T13616] kernfs_iop_setattr+0xea/0x3f0 [ 589.175872][T13616] notify_change+0xc1a/0xf40 [ 589.181080][T13616] do_truncate+0x1c2/0x250 [ 589.186127][T13616] path_openat+0x2f89/0x3860 [ 589.191340][T13616] do_file_open+0x23e/0x4a0 [ 589.196444][T13616] do_sys_openat2+0x113/0x200 [ 589.201703][T13616] __x64_sys_openat+0x138/0x170 [ 589.207142][T13616] do_syscall_64+0x15f/0xf80 [ 589.212323][T13616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.218793][T13616] [ 589.218793][T13616] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 589.227408][T13616] __lock_acquire+0x15a5/0x2cf0 [ 589.232846][T13616] lock_acquire+0x106/0x350 [ 589.237942][T13616] down_write+0x96/0x200 [ 589.242785][T13616] kernfs_link_sibling+0x4ed/0x5c0 [ 589.248503][T13616] kernfs_add_one+0x1ca/0x5c0 [ 589.253783][T13616] kernfs_create_dir_ns+0xde/0x130 [ 589.259505][T13616] sysfs_create_dir_ns+0x12f/0x2a0 [ 589.265229][T13616] kobject_add_internal+0x62b/0xd00 [ 589.271039][T13616] kobject_add+0x163/0x240 [ 589.276045][T13616] device_add+0x408/0xbb0 [ 589.280971][T13616] hci_conn_add_sysfs+0xd5/0x210 [ 589.286488][T13616] hci_conn_complete_evt+0x84e/0x1290 [ 589.292444][T13616] hci_event_packet+0x6ab/0xef0 [ 589.297886][T13616] hci_rx_work+0x3ee/0x1040 [ 589.302994][T13616] process_scheduled_works+0xb5d/0x1860 [ 589.309120][T13616] worker_thread+0xa53/0xfc0 [ 589.314292][T13616] kthread+0x388/0x470 [ 589.318982][T13616] ret_from_fork+0x514/0xb70 [ 589.324149][T13616] ret_from_fork_asm+0x1a/0x30 [ 589.329509][T13616] [ 589.329509][T13616] other info that might help us debug this: [ 589.329509][T13616] [ 589.339770][T13616] Chain exists of: [ 589.339770][T13616] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 589.339770][T13616] [ 589.354327][T13616] Possible unsafe locking scenario: [ 589.354327][T13616] [ 589.361829][T13616] CPU0 CPU1 [ 589.367228][T13616] ---- ---- [ 589.372666][T13616] lock(&root->kernfs_rwsem); [ 589.377522][T13616] lock(cpuhp_state_mutex); [ 589.384694][T13616] lock(&root->kernfs_rwsem); [ 589.392070][T13616] lock(&root->kernfs_iattr_rwsem); [ 589.397423][T13616] [ 589.397423][T13616] *** DEADLOCK *** [ 589.397423][T13616] [ 589.405595][T13616] 4 locks held by kworker/u9:0/13616: [ 589.411036][T13616] #0: ffff88807bdb8140 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 589.422154][T13616] #1: ffffc90003dc7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 589.434273][T13616] #2: ffff8880863f00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xcd/0x1290 [ 589.444256][T13616] #3: ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0 [ 589.454140][T13616] [ 589.454140][T13616] stack backtrace: [ 589.460055][T13616] CPU: 0 UID: 0 PID: 13616 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 589.460079][T13616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 589.460093][T13616] Workqueue: hci1 hci_rx_work [ 589.460120][T13616] Call Trace: [ 589.460130][T13616] [ 589.460139][T13616] dump_stack_lvl+0xe8/0x150 [ 589.460160][T13616] print_circular_bug+0x2e1/0x300 [ 589.460193][T13616] check_noncircular+0x12e/0x150 [ 589.460220][T13616] __lock_acquire+0x15a5/0x2cf0 [ 589.460243][T13616] ? __lock_acquire+0x6b5/0x2cf0 [ 589.460267][T13616] ? kernfs_link_sibling+0x4ed/0x5c0 [ 589.460291][T13616] lock_acquire+0x106/0x350 [ 589.460308][T13616] ? kernfs_link_sibling+0x4ed/0x5c0 [ 589.460338][T13616] down_write+0x96/0x200 [ 589.460362][T13616] ? kernfs_link_sibling+0x4ed/0x5c0 [ 589.460385][T13616] ? __pfx_down_write+0x10/0x10 [ 589.460408][T13616] ? kernfs_root+0x1c/0x230 [ 589.460437][T13616] ? kernfs_root+0x1c/0x230 [ 589.460459][T13616] ? kernfs_root+0x1ea/0x230 [ 589.460481][T13616] kernfs_link_sibling+0x4ed/0x5c0 [ 589.460509][T13616] kernfs_add_one+0x1ca/0x5c0 [ 589.460536][T13616] kernfs_create_dir_ns+0xde/0x130 [ 589.460562][T13616] sysfs_create_dir_ns+0x12f/0x2a0 [ 589.460585][T13616] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 589.460607][T13616] ? do_raw_spin_unlock+0xf5/0x210 [ 589.460635][T13616] kobject_add_internal+0x62b/0xd00 [ 589.460664][T13616] kobject_add+0x163/0x240 [ 589.460690][T13616] ? __pfx_kobject_add+0x10/0x10 [ 589.460713][T13616] ? _raw_spin_unlock+0x28/0x50 [ 589.460732][T13616] ? get_device_parent+0x366/0x3a0 [ 589.460753][T13616] device_add+0x408/0xbb0 [ 589.460773][T13616] hci_conn_add_sysfs+0xd5/0x210 [ 589.460797][T13616] hci_conn_complete_evt+0x84e/0x1290 [ 589.460828][T13616] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 589.460856][T13616] hci_event_packet+0x6ab/0xef0 [ 589.460882][T13616] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 589.460906][T13616] ? __pfx_hci_event_packet+0x10/0x10 [ 589.460932][T13616] ? kcov_remote_start+0x49a/0x7a0 [ 589.460959][T13616] ? hci_send_to_monitor+0xe2/0x590 [ 589.460978][T13616] hci_rx_work+0x3ee/0x1040 [ 589.461005][T13616] ? process_scheduled_works+0xa70/0x1860 [ 589.461024][T13616] process_scheduled_works+0xb5d/0x1860 [ 589.461055][T13616] ? __pfx_process_scheduled_works+0x10/0x10 [ 589.461076][T13616] ? assign_work+0x3d5/0x5e0 [ 589.461112][T13616] worker_thread+0xa53/0xfc0 [ 589.461142][T13616] kthread+0x388/0x470 [ 589.461167][T13616] ? __pfx_worker_thread+0x10/0x10 [ 589.461184][T13616] ? __pfx_kthread+0x10/0x10 [ 589.461207][T13616] ret_from_fork+0x514/0xb70 [ 589.461226][T13616] ? __pfx_ret_from_fork+0x10/0x10 [ 589.461244][T13616] ? __switch_to+0xc79/0x1410 [ 589.461271][T13616] ? __pfx_kthread+0x10/0x10 [ 589.461294][T13616] ret_from_fork_asm+0x1a/0x30 [ 589.461322][T13616] [ 589.732389][T18099] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 590.068880][T18112] batadv_slave_0: entered promiscuous mode [ 590.101553][T18107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2855'. [ 590.147075][T18119] batadv_slave_0: left promiscuous mode [ 590.171025][ T6440] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 590.195704][ T6440] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 590.212328][ T6440] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 590.221201][ T6440] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 590.848994][ T6444] netdevsim netdevsim1 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.866619][ T6444] netdevsim netdevsim1 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.875785][ T6444] netdevsim netdevsim1 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.914540][ T6440] dvmrp8: left allmulticast mode [ 591.469030][ T6440] bond0 (unregistering): Released all slaves [ 591.477814][ T6440] bond1 (unregistering): Released all slaves [ 591.489241][ T6440] bond2 (unregistering): (slave veth5): Releasing active interface [ 591.499931][ T6440] bond2 (unregistering): Released all slaves [ 591.510347][ T6440] bond3 (unregistering): Released all slaves [ 591.524194][ T6440] bond4 (unregistering): Released all slaves [ 591.536016][ T6440] bond5 (unregistering): (slave veth9): Releasing backup interface [ 591.544759][ T6440] bond5 (unregistering): Released all slaves [ 591.558153][ T6440] bond6 (unregistering): Released all slaves [ 591.568786][ T6440] bond8 (unregistering): Released all slaves [ 591.580937][ T6440] bond7 (unregistering): Released all slaves [ 591.593206][ T6440] bond9 (unregistering): Released all slaves [ 591.625029][ T6444] netdevsim netdevsim1 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.689110][ T6440] : left promiscuous mode [ 591.788613][ T6440] tipc: Disabling bearer [ 591.798666][ T6440] tipc: Left network mode [ 592.059993][ T5293] 8021q: adding VLAN 0 to HW filter on device eth5 [ 592.237629][ T6440] hsr_slave_0: left promiscuous mode [ 592.243644][ T6440] hsr_slave_1: left promiscuous mode [ 592.501198][ T7053] smbdirect: ib_dev[syz1] removed [ 592.561782][ T5293] 8021q: adding VLAN 0 to HW filter on device eth6 [ 592.825582][ T6440] IPVS: stop unused estimator thread 0... [ 592.933389][ T5293] 8021q: adding VLAN 0 to HW filter on device eth7 [ 593.113590][ T6447] netdevsim netdevsim5 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.137845][ T6447] netdevsim netdevsim5 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.165046][ T6447] netdevsim netdevsim5 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.189812][ T6447] netdevsim netdevsim5 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.201870][ T6440] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.269650][ T6440] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.300387][ T5293] 8021q: adding VLAN 0 to HW filter on device eth8 [ 593.330285][ T6440] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.371213][ T6440] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.416248][ T7053] netdevsim netdevsim2 eth13: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.435203][ T3274] netdevsim netdevsim2 eth14: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.482452][ T3274] netdevsim netdevsim2 eth15: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.495016][ T6440] bridge_slave_1: left allmulticast mode [ 593.502197][ T6440] bridge_slave_1: left promiscuous mode [ 593.508570][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.518070][ T6440] bridge_slave_0: left allmulticast mode [ 593.523818][ T6440] bridge_slave_0: left promiscuous mode [ 593.530500][ T6440] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.544186][ T6440] dvmrp0: left allmulticast mode [ 593.562720][ T6440] bridge_slave_1: left allmulticast mode [ 593.570766][ T6440] bridge_slave_1: left promiscuous mode [ 593.577335][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.586912][ T6440] bridge_slave_0: left allmulticast mode [ 593.592690][ T6440] bridge_slave_0: left promiscuous mode [ 593.598786][ T6440] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.617124][ T6440] dvmrp0: left allmulticast mode [ 593.622253][ T6440] pimreg: left allmulticast mode [ 593.908927][ T6440] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 594.009739][ T6440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.019949][ T6440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.029696][ T6440] bond0 (unregistering): Released all slaves [ 594.038496][ T6440] bond1 (unregistering): Released all slaves [ 594.049338][ T6440] bond2 (unregistering): Released all slaves [ 594.059848][ T6440] bond3 (unregistering): Released all slaves [ 594.136724][ T6440] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 594.318453][ T6440] bond7 (unregistering): (slave bridge2): Releasing backup interface [ 594.326655][ T6440] bridge2 (unregistering): left promiscuous mode [ 594.333033][ T6440] bridge2 (unregistering): left allmulticast mode [ 594.359912][ T6440] bond8 (unregistering): (slave bridge3): Releasing backup interface [ 594.368175][ T6440] bridge3 (unregistering): left promiscuous mode [ 594.374561][ T6440] bridge3 (unregistering): left allmulticast mode [ 594.559499][ T6440] bond0 (unregistering): left promiscuous mode [ 594.565932][ T6440] bond_slave_0: left promiscuous mode [ 594.572701][ T6440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.584292][ T6440] bond0 (unregistering): Released all slaves [ 594.593191][ T6440] bond1 (unregistering): Released all slaves [ 594.604605][ T6440] bond2 (unregistering): Released all slaves [ 594.616084][ T6440] bond3 (unregistering): Released all slaves [ 594.626876][ T6440] bond4 (unregistering): Released all slaves [ 594.638805][ T6440] bond5 (unregistering): Released all slaves [ 594.652251][ T6440] bond6 (unregistering): Released all slaves [ 594.670513][ T6440] bond7 (unregistering): Released all slaves [ 594.684012][ T6440] bond8 (unregistering): Released all slaves [ 594.694763][ T6440] bond9 (unregistering): Released all slaves [ 594.705936][ T6440] bond10 (unregistering): Released all slaves [ 594.716464][ T6440] bond11 (unregistering): Released all slaves [ 594.737646][ T6440] bond12 (unregistering): Released all slaves [ 594.749392][ T6440] bond13 (unregistering): (slave veth15): Releasing active interface [ 594.758996][ T6440] bond13 (unregistering): Released all slaves [ 594.769515][ T6440] bond14 (unregistering): Released all slaves [ 594.781757][ T3274] netdevsim netdevsim2 eth16: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.791429][ T5293] 8021q: adding VLAN 0 to HW filter on device eth9 [ 594.977992][ T6440] hmac(sha224): left promiscuous mode [ 595.047571][ T6440] tipc: Left network mode [ 595.067665][ T6440] tipc: Disabling bearer [ 595.087402][ T6440] tipc: Disabling bearer [ 595.093704][ T6440] tipc: Left network mode [ 595.351592][ T5293] 8021q: adding VLAN 0 to HW filter on device eth10 [ 595.574491][ T6440] hsr_slave_0: left promiscuous mode [ 595.592299][ T6440] hsr_slave_1: left promiscuous mode [ 595.598387][ T6440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.607303][ T6440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.616797][ T6440] batadv0: left promiscuous mode [ 595.627875][ T6440] hsr_slave_0: left promiscuous mode [ 595.633873][ T6440] hsr_slave_1: left promiscuous mode [ 595.640430][ T6440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.649445][ T6440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.658573][ T6440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.667252][ T6440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.876389][ T6447] smbdirect: ib_dev[syz2] removed [ 596.052390][ T6440] team_slave_1 (unregistering): left promiscuous mode [ 596.060466][ T6440] team0 (unregistering): Port device team_slave_1 removed [ 596.075916][ T6440] team_slave_0 (unregistering): left promiscuous mode [ 596.083647][ T6440] team0 (unregistering): Port device team_slave_0 removed [ 596.159426][T14995] lo speed is unknown, defaulting to 1000 [ 596.167575][ T5293] 8021q: adding VLAN 0 to HW filter on device eth11 [ 596.174831][T14995] infiniband syz2: ib_query_port failed (-19) [ 596.621703][ T6440] IPVS: stop unused estimator thread 0... [ 596.625844][ T5293] 8021q: adding VLAN 0 to HW filter on device eth12 [ 596.628995][ T6440] IPVS: stop unused estimator thread 0... [ 596.954897][ T5293] 8021q: adding VLAN 0 to HW filter on device eth13 [ 597.258369][ T5293] 8021q: adding VLAN 0 to HW filter on device eth14 [ 597.545683][ T5293] 8021q: adding VLAN 0 to HW filter on device eth15 [ 597.835341][ T5293] 8021q: adding VLAN 0 to HW filter on device eth16