last executing test programs: 3.184157193s ago: executing program 1 (id=5258): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd42, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) 2.882854201s ago: executing program 4 (id=5263): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_proto_private(r0, 0x89e4, &(0x7f0000000080)="aac1d1eb4fd0ec391ce040facf2a9c65cff19449d3af516998e4c06b23b1aaeed9b367b72f3f6afb47160cc4544cb1625150a7c314a3b4b7859773e265638de7f1a7988514b786862cbe8f3263caef3e7ba0ece85a7f6b2dcd52f09a82b33126ab3ee488b74407a5952e57b54093321c1d046c4b5988691f43a689c252965d0e03d7bd06d9003aa09f63fdf106b47ba9abda3d9b888b579d72e888895262d7490e9c401a8f08f0f7b3b20fa0595dc63146f63ab64ee89748b43c900069dbab22d8e010041c36b9b20489993f758f6702ebfaa00f24613c1c00c2cc15bc86179bbfe0bec554") setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180)=0x9, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = socket(0x29, 0x6, 0x41b) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'sit0\x00', r3, 0x80, 0x40, 0x8, 0x1ecb, {{0xd, 0x4, 0x3, 0x2b, 0x34, 0x65, 0x0, 0x10, 0x4, 0x0, @private=0xa010102, @remote, {[@generic={0x83, 0x5, "bd18cf"}, @end, @timestamp={0x44, 0x10, 0x5c, 0x0, 0x4, [0x5, 0xde, 0x4]}, @rr={0x7, 0x7, 0x98, [@loopback]}]}}}}}) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000380)) ioctl$sock_proto_private(r0, 0x89eb, &(0x7f00000003c0)="a5a239021ce56807dcacfe6121e62ddcb1b0f5b1329f418c7ddb0687fbcd006cfde3c929e283b6f8056baee0d6039c881211c1f3a16245028786a42d841f75f5091e829a516a2f757159718d83a96c1174ed47d7623e683e3dc2914dde71d3e7725921945733ab54869110434c3c8bd4200ff8c4f4238e7127433c22e5eb3cc8ccd4119986e8bfb4aae8c6f1c2c77dc73f0acbee97bfa959bdfee374f68df6e15021974e064591a132df91c3be2f99e8332a6c80fea386") r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, '!/-${\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x54}, 0x1, 0x0, 0x0, 0x40004}, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r4) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000680)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000006c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000007c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x68, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x20, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xf2aa6df1318baef7}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000051}, 0xdc1d6f215e8c928a) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r5, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000940), r2) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, r9, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r6, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008059}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, ["", "", "", "", "", ""]}, 0x14}}, 0x8010) sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x50, r5, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(r2, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xc8, 0x3b, 0x100, 0x70bd26, 0x25dfdbfd, {0x1a}, [@typed={0x8, 0xf, 0x0, 0x0, @u32=0x5}, @typed={0x14, 0x130, 0x0, 0x0, @ipv6=@local}, @generic="795d7ebf6e489cfa708b41fe6197a3d86f7eb89d8e92df84733074c622b8a76a91278bf3e6bdef097bf73ae0d34e21fc17bea01774b055f3d3b22c501af4eb20266a7114424d47efbc496b298e6564f128c1c416137c665f651b7c1ade177983db2bf57228b6eb351bea43441965a9bdc9f90c55b95965c3e93f6edf041ed2c7aa377d", @typed={0x14, 0x143, 0x0, 0x0, @ipv6=@mcast1}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8001}, 0x20000041) getsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000001000)=0x3, 0x2) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x2c, r6, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x70, r6, 0x823, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.320666774s ago: executing program 4 (id=5271): socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x44}}, 0x0) 2.14868348s ago: executing program 3 (id=5274): write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="01"], 0x14f) (async) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000000c0)='/@\x00', 0x600000, &(0x7f0000000180)={@align=0x400, {0xa0, 0x4, 0x5, 0x9}}, 0x5, &(0x7f0000000200), &(0x7f0000000240)=0xffff4bc1}) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f00000002c0)={0x4, 0xb59, 0x2, 0xc9}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0x4, 0x6, 0x80000001, 0x81, 0x5, 0x100, 0x7, [0xd9bb, 0xd]}}) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r6) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd700000000000390000000800d800", @ANYRES32=r9, @ANYBLOB="10005a800c0004800500010018000000"], 0x2c}}, 0x2400c090) (async, rerun: 32) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x79}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4d, 0x4, 0x2b, 0x5, 0x3, 0xd, 0x13, 0xfd, 0xd, 0x4, [0x800, 0x6, 0x8, 0x8, 0x0, 0x5, 0x2, 0xf]}}) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002ebd700e000600001400000018000180140002006e657464657673696d30000000000000050019000000000308001500f1ffff01050018"], 0x44}}, 0x0) 2.056401526s ago: executing program 3 (id=5275): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$inet(0x2, 0x2, 0x1) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) socket$l2tp6(0xa, 0x2, 0x73) socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.956930093s ago: executing program 1 (id=5277): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) setsockopt$packet_int(r1, 0x107, 0x8, 0x0, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @empty}, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000005040)={r0}) 1.76942065s ago: executing program 1 (id=5279): r0 = socket$rxrpc(0x21, 0x2, 0xa) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) (async) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) (async) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000700000008000400e000000108000500"], 0x24}, 0x1, 0x0, 0x0, 0x88044}, 0x0) (async) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) (async) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4c, 0x99, 0x1, 0x1, [{@multicast2, 0x7fffffff}, {@remote, 0x5}, {@remote, 0x8}, {@local, 0x7}, {@rand_addr=0x64010100, 0xffff}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}, {@multicast1, 0x2}, {@broadcast, 0x7}]}]}}}], 0x60, 0x4c00}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x7fffffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) 1.61244306s ago: executing program 1 (id=5282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x30}}, 0x40000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000640101020000000000b48bbe4700000000000005000000030200200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000040a00000000000000000000008040000000000000000008000000000000000001000203000000004400050000000000000000000000000000000000000004d23c0000000a00"], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x6, @local, 0x7}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x240280d1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x25dfdbfd, {0x3, 0x2}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000880)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250200000008000300", @ANYRES32=r7, @ANYBLOB="0c009900000000000000000008002600f31600000800270003"], 0x40}}, 0x4004044) 1.434798965s ago: executing program 1 (id=5284): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, &(0x7f0000000000)=',-.[*\x00', 0x2, &(0x7f0000000040)={@align=0x2, {0x7, 0x4, 0x6, 0xc30}}, 0x1, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x5675bf78}, {[0x8, 0x0, 0x9, 0x2]}, 0xa, 0xc8, &(0x7f0000000100)=""/200}) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000280)=0x4, 0x4) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)=0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000300)=0xc9cb, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000900)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000380)={0x510, 0x3f, 0x400, 0x70bd25, 0x25dfdbff, {0x14}, [@nested={0x17b, 0x168, 0x0, 0x1, [@generic="d27837fff2d405dcaeee6d665c3ca6933cfdad5db5e5614fb3172f582547977e0462ac6abf395e6de5c94d67ed787a99ac4e80494f587f5586e347c479d8c2037b19cd45103b9d0fec8fa735b584125e7275bd42c71119c3dedf0363a6bd0a9528aea1b62e808786bb08196601a3b6cef9ab094f086468c4f9b0f01427791378e41d452ed22742320ab7d18be63f1ed9bbf0089f1eabd99cded1808640f76ae7f054f3a05ed368cf9fbf1662a697b0540f2e717b700e5e79d3f752ecfb4d03f6bbada3d70581aa7f2d515b9bceeb892da9eb609d446e69b1dc1d3f1ee3e4c6fd1f", @generic="c17c3f55d7c9fd52c2536bc86b48848f2b69084c99dd112c7586fdab8237d34ad56addd2be21842c267fbc4de4faaf850762027c5e9bc84ac6704a14f0b7b97e03cd59c9069873ad3fe80b072baf428703c4e180e47ec36c903cd7ce4fbf7f3cfd63307d125a301367ac887a983d95d9c212a31948f3074d00b18a9e6042572772a1", @typed={0x14, 0x11e, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @generic="e3cc8450267439cbce47cba429756c2b7d37d05e565446917fee9cf253a561a1b4c8d39018b410b84587fe508b1dd9aa7fae31dd6777a7c43b8110f3bd424e8c360605ee338d3505c5c465069c8b2cad01797cfc8a0462b68dc1495489435fe4be11f9cf9ca5ad9530dc309af75cab8e33c744f157a50b", @generic="24db6973851f34b20c5e67ff1445d086cc994564e7543b2a5386873baf06447f71b22a4189ac42550201b65a11357ede436c3c46ef5054d3a8f0bc51b3b808a1b4e651fed4289072d9a836ddd7227d1e7d5e5d238065c12fe9cdf07b805a7a6c8d5af2d03d87adc7ef5108b55a638aa744c69c0e9f0c0cd4f1d9fcb3a3d5c6ba6df600a0bef082fd97edced4f56dec197e9fa9c2e910d063220b346e39b2a3914a46bdf7bb7d671b47bdedfe89fc15924d0f6711e729b2cd8cb2701b17b7764f1c27fe2cd4082b0734ede581dda967f150099fc79157f19ecaff9f24a25d7ed93c4924e1b9fed443ab86b35c8f48f5ac9a054592e37e", @generic="d8a01c2bee8c9bc421eeebfd0a619c97e4b16e08b1e3ce4a330adbeef52d922be056b9ec0f93d37d8847e83cedd5e6aa81d8e2d77df1ceac1b9e8bdfce1bac07df1ff678f51a44db6377eac8b0cd94297fbab9a4750b736a1f2ed58d009299bf728547094da87ac9ff95316e55cf9e02a8ef75a8a6da36b97155a15544e9b0434dedd10021d3d4bb357e558da3da669ef8716f60e3bed1c299a54328c1b4647d7b6c914186a9c3e8cd5f29fee674", @generic="656581a05e2b0be28453d07d900a358fb1f44b8aada031ad51be385acbd8b210fd209a3aa668ee117a30747231330cbc7c65f57d", @nested={0x4b, 0xe4, 0x0, 0x1, [@typed={0x8, 0x12c, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="929fedaaa63398466328c68cb1d571768aeb4f3ec7967db89379fe5b58324333f4c20776596725fb33815f6e8bbeb2d3f8da1a1474963e", @typed={0x8, 0xa5, 0x0, 0x0, @fd=r0}]}, @typed={0xe3, 0x14e, 0x0, 0x0, @binary="d3c02379fc7711858125c506c16b2f4ed393b4f4c1b39ff826729a8dd9d474140f647d85a980222589e49e7bec264ce9e4b3df4e979aecb2faa7ff077eff1741f87b6da6e27782565a4a2427688572b813977a6bb9348d0cb45843b3bea5262146f1df8ec0165dced2b0e5bffb0cec86feb3c1db7e457f5c3e440b58d531f166cdbcf1cb442fbcb1aec3a0f560f5135eeeb13821f76fc821da9172d3e1970bfaf554916f0ed84580235fad8b9203ef903c5d7a0d74537d628fff64f503a184a107fe92cfe566d21599e2a4684bc192b1ea7b13cfc184ed815f803902993584"}]}, 0x510}, 0x1, 0x0, 0x0, 0xc0c0}, 0x881) r4 = socket$pppoe(0x18, 0x1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000940)={0x0, 0x0, 0x6, 0x2}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004894}, 0x44004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x7c, r7, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x2d}}}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x260}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x5d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040090}, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f0000000d00)={0x0, 0x3, {0x75, @usage, 0x0, 0x1, 0x9, 0x9, 0x3, 0x0, 0x44, @struct={0xffffffff, 0x80000000}, 0x9, 0x7, [0x3, 0x33, 0x100000000, 0x7, 0x1, 0x2]}, {0x8, @usage=0x8, 0x0, 0x7b, 0x5, 0x10001, 0x1, 0x400, 0x848, @struct={0xfff, 0x80000001}, 0x2, 0x0, [0x6, 0x9, 0x30, 0x3, 0x9, 0x2dcc]}, {0x2, @usage=0x9, 0x0, 0x6, 0x6, 0x700, 0x200, 0x8, 0x2, @struct={0x7}, 0x5, 0x101, [0x7ff, 0x6, 0x80000000, 0xaa, 0x3, 0xa]}, {0x7, 0x8, 0x7}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001100)={{r4}, r2, 0x8, @inherit={0x60, &(0x7f0000000c80)={0x0, 0x3, 0x40, 0x1, {0x2, 0xfffffffffffff9df, 0x2, 0xfffffffffffffffa, 0x100000}, [0xffff, 0x7, 0x2]}}, @devid=r9}) ioctl$BTRFS_IOC_FS_INFO(r6, 0x8400941f, &(0x7f0000002100)) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000026c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002680)={&(0x7f0000002540)={0x118, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x118}, 0x1, 0x0, 0x0, 0x40040}, 0x2000) ioctl$XFS_IOC_SET_RESBLKS(r6, 0xc0105872, &(0x7f0000002700)={0x101}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000002740)={'bond_slave_1\x00', {0x2, 0x0, @multicast2}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_LOGICAL_INO(r10, 0xc0389424, &(0x7f0000002800)={0x2, 0x8, '\x00', 0x0, &(0x7f00000027c0)=[0x0]}) clock_gettime(0x0, &(0x7f0000006280)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000006100)=[{{&(0x7f0000002840)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x80, &(0x7f0000002980)=[{&(0x7f00000028c0)=""/131, 0x83}], 0x1, &(0x7f00000029c0)=""/86, 0x56}, 0x9}, {{&(0x7f0000002a40)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/216, 0xd8}], 0x2, &(0x7f0000003c00)=""/4096, 0x1000}}, {{&(0x7f0000004c00)=@isdn, 0x80, &(0x7f0000004d00)=[{&(0x7f0000004c80)=""/14, 0xe}, {&(0x7f0000004cc0)=""/62, 0x3e}], 0x2}, 0x10001}, {{&(0x7f0000004d40)=@generic, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004dc0)=""/90, 0x5a}, {&(0x7f0000004e40)=""/160, 0xa0}], 0x2}, 0x3}, {{0x0, 0x0, &(0x7f0000004f40), 0x0, &(0x7f0000004f80)=""/113, 0x71}, 0x6}, {{&(0x7f0000005000)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000005080)}], 0x1, &(0x7f0000005100)=""/4096, 0x1000}, 0xea9c}], 0x6, 0x10000, &(0x7f00000062c0)={r11, r12+10000000}) syz_genetlink_get_family_id$tipc(&(0x7f0000006300), r6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000006380)={0x0, 0x3c, &(0x7f0000006340)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e21, 0x10000, @loopback, 0x8001}]}, &(0x7f00000063c0)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000006400)=@assoc_value={r13, 0x6}, &(0x7f0000006440)=0x8) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000065c0)={&(0x7f0000006480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000006580)={&(0x7f0000006500)={0x80, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) 1.31709179s ago: executing program 4 (id=5287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r9 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r5, r10, 0x25, 0x0, @val=@netkit={@void, @value=r5}}, 0x1c) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r8, @ANYBLOB="a4280400000000001400350073797a5f74756e000000000077eef46608000a00", @ANYRES32=r4], 0x3c}}, 0x8000) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.310591194s ago: executing program 1 (id=5288): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd42, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48) 1.213492527s ago: executing program 2 (id=5289): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='\"', 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r2, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9ac8188bc50003042d000053be6191b7253e6e74", @ANYRES32=0x0, @ANYBLOB="0008000007500500240012800b00010062726964676500001400028005001900020000000500170000000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.196510828s ago: executing program 0 (id=5290): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000000)=""/161, &(0x7f00000000c0)=0xa1) getsockopt$packet_int(r0, 0x107, 0xb, 0x0, &(0x7f0000000100)=0x2be628de19587dbc) socket(0x2, 0x2, 0xff) close(0x3) 1.071398467s ago: executing program 2 (id=5291): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000001855090100000000009500000000000000b7020000000000007b9a18fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf980000000000003e08f0ff0000000085000000b4005400b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 956.345765ms ago: executing program 3 (id=5292): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0xc800) getsockopt$netlink(r0, 0x10e, 0x2, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, 0x0, 0x20000801) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_WME={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x6f}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000090}, 0xc000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x8054) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f80)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x41) syz_genetlink_get_family_id$devlink(0x0, r4) 955.502699ms ago: executing program 0 (id=5293): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x0, 0x600}}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000180)=0x9, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000002c0)=0x8, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x8c, 0x4, 0x8, 0xb00, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6ef}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc2fe}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40030}, 0x24000044) 890.462184ms ago: executing program 0 (id=5294): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x34, r1, 0x6ff, 0x0, 0x25dfdbfc, {0x52}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48004}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000900000000000000000000001010"}}}]}, 0x48}}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r7 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x4a, &(0x7f0000000040), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x38, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}]}, 0xcc}}, 0x0) 883.107574ms ago: executing program 2 (id=5295): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8d00, 0x0) 800.115566ms ago: executing program 3 (id=5296): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) 781.255358ms ago: executing program 3 (id=5297): socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x44}}, 0x0) 661.365412ms ago: executing program 0 (id=5298): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002"], 0xfc}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x601, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2003}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4400c04c}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c9", 0x1) r4 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000005e80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x24, 0x0, 0x7, {[@cipso={0x86, 0xe, 0xffffffffffffffff, [{0x2, 0x8, "2755f8bebdaf"}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14}}], 0x40}}], 0x1, 0x804) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x4, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 596.475397ms ago: executing program 2 (id=5299): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000002600090026bd397000fddbdf25080000000b0001006175746f66730000"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r5}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r5}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x8, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x1, 0x1, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0xfffc, 0x0, 0x1000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x198e, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x7, 0x10, 0x8e10, 0x3, {{0xf, 0x4, 0x1, 0x6, 0x3c, 0x66, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1, {[@cipso={0x86, 0x11, 0x0, [{0x1, 0xb, "59e1307b6e71f0a5d4"}]}, @end, @cipso={0x86, 0x14, 0x3, [{0x0, 0x9, "ac10de700938da"}, {0x2, 0x5, "fbe1e3"}]}]}}}}}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000100001002abd70000000000000000000", @ANYRES32=r8, @ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES16=r8], 0x24}, 0x1, 0x8000000, 0x0, 0x400c800}, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r6) 594.588106ms ago: executing program 4 (id=5300): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010020304000000001b00000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800900010069706970000000000c0002800600100007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x8, 0x0, 0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00010000000000000000000a8000000000000000000000080001"], 0x24}}, 0x0) 483.853473ms ago: executing program 0 (id=5301): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x7a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x3}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x30}}, 0xa000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x2, 0x2008, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x40, 0x1, 0x4, 0x0, {{0x11, 0x4, 0x2, 0x7, 0x44, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x42}, {[@rr={0x7, 0xb, 0xcb, [@remote, @dev={0xac, 0x14, 0x14, 0x1b}]}, @cipso={0x86, 0x15, 0x2, [{0x0, 0xc, "8821ee90cf8559b4a8ef"}, {0x5, 0x3, '4'}]}, @noop, @ssrr={0x89, 0xf, 0x97, [@remote, @broadcast, @rand_addr=0x64010101]}]}}}}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r6, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x78, r7, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x6d}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x95}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r3, 0x25, 0x0, @void}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x7a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x3}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x30}}, 0xa000) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x2, 0x2008, 0x6}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) close(0x4) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x40, 0x1, 0x4, 0x0, {{0x11, 0x4, 0x2, 0x7, 0x44, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x42}, {[@rr={0x7, 0xb, 0xcb, [@remote, @dev={0xac, 0x14, 0x14, 0x1b}]}, @cipso={0x86, 0x15, 0x2, [{0x0, 0xc, "8821ee90cf8559b4a8ef"}, {0x5, 0x3, '4'}]}, @noop, @ssrr={0x89, 0xf, 0x97, [@remote, @broadcast, @rand_addr=0x64010101]}]}}}}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r6, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x78, r7, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x6d}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x95}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r3, 0x25, 0x0, @void}, 0x10) (async) 481.625855ms ago: executing program 4 (id=5302): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d4e496b"], 0x2c}}, 0x60040050) (async) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d4e496b"], 0x2c}}, 0x60040050) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r3, &(0x7f0000000000), 0x10) (async) bind$llc(r3, &(0x7f0000000000), 0x10) close(r3) (async) close(r3) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r5, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendto$packet(r2, &(0x7f0000000300)="fd", 0x1, 0x4000880, &(0x7f0000000200)={0x11, 0xf8, r5, 0x1, 0x8, 0x6, @random="156f60af7478"}, 0x14) (async) sendto$packet(r2, &(0x7f0000000300)="fd", 0x1, 0x4000880, &(0x7f0000000200)={0x11, 0xf8, r5, 0x1, 0x8, 0x6, @random="156f60af7478"}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 314.404845ms ago: executing program 4 (id=5303): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "4ab27a5bbf34f8bb", "801f5316346f6be5e67ad1b39021558717e2a4267e0661c1025ae933d34a275f", "1e4fba9a", "c6bbc09f5c48fece"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x80) listen(0xffffffffffffffff, 0x3) sendfile(r0, r3, 0x0, 0x20000000002) socket$inet6(0xa, 0x80002, 0x0) 252.282309ms ago: executing program 0 (id=5304): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x4, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120900000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2c, r3, 0x11, 0x0, 0xffffffff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000000c0)=0x4) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5004000041bb92b58eb49aff6f70de090070b6e39aad342f02a3578d29cb58c8c5b8f2b0ed60390ff7d9aaca50512fbda6865f45d766bfc8f4391b5ecfe9fc42f80000000000000020000000", @ANYRES16=r3, @ANYBLOB="000326bd7000fcdbdf25080000000a000900000000000000000008000300", @ANYRES32=r4, @ANYBLOB="05002f0000000000050029000000000005003500f500000008002b00030000000600280001000000"], 0x50}, 0x1, 0x0, 0x0, 0x20}, 0x0) 251.079492ms ago: executing program 2 (id=5305): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000001955090100000000009500000000000000b7020000000000007b9a18fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf980000000000003e08f0ff0000000085000000b4005400b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 180.379342ms ago: executing program 2 (id=5306): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x20, 0x45, 0x1, 0x80003, 0x25dfdbfd, {0x2}, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x3}]}, 0x45}, 0x1, 0x0, 0x0, 0x400c8d1}, 0x24008084) sendmsg$nl_generic(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001500010000200000000000000a"], 0x14}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffff0988a81200810009006558"], 0x4d) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001c80)={{r0, &(0x7f0000000080)='$\'}]&!):/)@\'\x00', 0x101040, &(0x7f00000000c0)={@_ha_fsid={[0x8001, 0x9]}, {0x0, 0x1031, 0x7, 0x100000001}}, 0x8, &(0x7f0000000140), &(0x7f00000001c0)=0xed}, 0x9, &(0x7f0000001b40)=[{0x3, 0x8, &(0x7f0000000200)=']z(/\x00', &(0x7f0000000240)="6b611a7f5df51337a512b5557abfd7aad89ac7dba23295496491b8021958cbe525d46ae94637e0a9171b6abf8ef67f028726f3d0118838995be9d4ae817dfbd0da8b47d17f89b2cfce588c", 0x4b, 0x30}, {0x2, 0x8, &(0x7f00000002c0)='wlan1\x00', &(0x7f0000000300)="1c6ca3d6d108028119cebb969aefc17586e6f496db16eb581ba20b50c256afef865af718c4e018c5ab18b35f776526d760fb8968b1e328d6252391e68048b2b7344e6d9c10a4a3cf1bf79efe218ae39217fb81ee5f7c", 0x56, 0x8}, {0x2, 0x2, &(0x7f0000000380)='wlan1\x00', &(0x7f0000001ec0)="8c3a3e523e8ba3a3e18a13e0981cd1b9983f1765de859682f3f749380b96c6e4619cf75cb8281ddcacf9f91bc03248a55a0fa57570dece4761fd0e2ba5104d1ad5aa2ec92158ffad43794793bb270d2f56236c9e1b8d68749974a596c7a99493560b0c3093c633f04d96e8b916cbdbbca9c9e34ab1c3050564588f0023da5e05e0f239fc459c2c69325778645f6430f7127a8a78b0cc82f391ed72bd2c7334d11262", 0xa2, 0x30}, {0x0, 0x6, &(0x7f0000000480)='\x00', &(0x7f0000000580)="004212a682170f9e89c3eb6e90c9b9b94754be4133f30d2c13946792bb70350b954cea99ea5cdc903daec3a678d1236f4781cfea9d1976f76a4886ba958a0fd6f6919cd5ff46c9d1a2d7c0e87c16b6f5911ffc8c02a99bc69f29b9fc8181ec7eca0cbb8dd477a16fa6ff56d39e04da053ac744c6d0196f6a9c862ae4b7e4a26a8d002391cd1386d5ec1506d14c2717caac6b1e934f5e41d14b77e058ba41992546bc1a718caa26bf85d1b5fb9450fcaa7733c167ce96c25aff5cd2bd35bf2afadd61cb557c9d68ea47422a00078a658b3686d2c88b44dbbec790", 0xda}, {0x1, 0x44a3cd58, &(0x7f0000000680)='\xaa\xaa\xaa\xaa\xaa', &(0x7f00000006c0)="1cba6c8fa55376d7c589147b58ddc4f9f9ae037d4be29b336ba6f2060a7d9efa65ced1549ade1c72f873f303c265b86ab16088fa3e47a9799e5ab10a46978c9263487770126f5c734464af3d845e10d2e2dcd6012ee5a8ff931defcd01606b9299366e630b4dd1a80b55a7a4b5ec89f5d9a882d9790542ab25497231166d3c06df2e33998d43b61df01becf3aa55ebe438e21806523f7a32a4f3", 0x9a}, {0x3, 0x1, &(0x7f0000000840)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000880)="7825c8ad557618821f3761fdd80f409e373187be57cbdd38872f0272653b5853b8b22143156c621c61fe04e2a4fa521ee3365e7b51460511319fea633d00753230f1069caf57c6bc926cb471", 0x4c, 0x8}, {0x1, 0x8000, &(0x7f00000004c0)='/,\x00', &(0x7f0000000940)="58dd35893cb7cd82a45ebd5dd178753d2153eaac348a0596c9d69c797d33ac24fad5df43e2612d0bedcf341c36cbcee5dc58f98ca4421c9bb52ba6717537800079b6d624d07f5015dc2f27baa61635fe6c8a2357012aff271c52a18fe93f49b5d1c981f0889419b8e60e512c440fdd157c69aeaab29eff5609d5c585088d3562eb149e719fcd6c27dc49d01708a3397695555cb75f75af9f3c3a2627b5a388f2e830aa57c3253038f6f0d469e34b90248fde6154abae44793d6b4f031e9b", 0xbe, 0x2}, {0x3, 0x0, &(0x7f0000000a00)='&+%\x00', &(0x7f0000000a40)="635302ea624496bbb7cb5638c2b620e471e351f28527711e9d46a8155225b5f54d75decc5703e565c7eb4c3bce6aed38327fa89f205f8a4342330edbe590265dbc51fbe9e3810f1d1b0e244e8951e7f5cab667a73dd48e33bcd228a83bc4c18a41a5ab656d75e581071595642e24bd58d2b46c1fa9dd2e4e1e4a7baa007b558532a7f6dfc269c06b8aa36c1e6a75d7dd420b1a8a33", 0x95}, {0x1, 0x4700, &(0x7f0000000b00)='wlan1\x00', &(0x7f0000000b40)="c565490ae9b8cab9c1fbe7804d76cf9b0d84486435f7703ad701e7f6edced8baec0de2327c5d483ddf712583004601aa3e389bfaea1c37bb2476ea8882de48d2bcf4893f1e0a8fa0fddcb1c17e62f88e349d72c65b54fe28282e6212815f8e213cd80c6b783cb7f5d4a0b206f3e234dc94038e39cfa304a8454fca95671056cfce666d1d02ee7d7d775032925b381d7a0d8f513bcc099a31838a441ab2a92778928a2d2b95378e5c3c5f26e4f6424d0d14c0fde118a488366ad91ec821d73159f08cf7637b740e0fa1dc8e9c7da6d3658234fbeab9d4162a91a1a9e595fcd1c2a93808d2f3cbc254fae18bf6f4c502547a0897e7a983013ce1facd16947e1c7d2734acbebc55dcf67da695a0550fc5c43e6cd7bf416ab843709820b8ff9d8babca343fef7a6af5ddc5fb58e920edf6f40d8e9dcc71c51219076061ad181afee7b98f65df09c832b424d3219d26823451a8817992cc546d7ab59b4d508feb89d5d705b47b6994ca937d84e5c28731feca5c62ffc10f012e9f257ef8762c241b2acc696c71845fc79386a6a37644ac89943b1d698bb9f9966e4a00ed7b85982e40ba2ff7f87542acd01c9c73ba612bdfd55b5c2412c1f88a90479ea3bda0ad0ea346d6761dc58987da29f0008fe7be1ed96e42b1ac59c9eaecdcf9e0740245921fa0519ee823eb53bfcab1003429d72fdf9e8ec92f2fb01dbd3dde639b140fd426a2035a7fdd733969e41ece5c495050442563f86e49fdfa875cea1b7b225c245a286c919417131e24631a754e071de80756cbb09574ad12ecbc87641855aa906212770475a9b3d12ca43a93b3bea772fd78417fecd624ecdfbd20e514c73695fab7f18b634a970d2e769d1c9bc65f86965a2069ea72dacfa195657bd3915fecebd83e947c1e583f0d104b02f8bc2dce59636863568ebb1aeb0a712e26548c7f4688c45c8896489a934bfbc26cdd7d2763de2df5524c736bd4ff7faef519f04d1bae67c79d4e78ee5e31f9a5969fd48aa2a7d40f46c1c931cc29f38568a03d8eec40db60b49bd647613d0e8b3cac20c09faff18c6bf2bd1cd64a0eccb2dd5150c169cbba5e66be0d591c64c359de621de8e69fe4722365aaa44302e7f0347aaa41d11dc674e2570d9c64ea879922f5c2a78f24574a682e3eb0c60cff0a4bd8e091405f9da46137010dce487e58de57ff0b6baa5fadf8abf0b22771502731db249a3125003b41b31a6a8653c13b248dfbd3678eb0ccce03db7ec796561c39520a51cb9a10e45468b7949ded4f9cc08754f97a760b06423071466e72f81a13bb1587e9c8486d1ec1703fbf2c0f55a889de28c7025629dc03c34f2f994c51576753ff6892a85fe71707e859e442362718bba97eae28d79e7d1813dd2970d1babbfe570b134694a5885db873cd69ca1529d2c90aaa6719ad314491622a8910d5db617acfa7ea02ae9e8e3973bdc82edebc27ab1e8ede7b57f14e54f8c0216307ec0663bf5dbdaafbaa40d4944492ceae5254198482c91f3ecc44e995455f89dfb51562f92e0c7b35bcee0861c74029e27bb87f20098ecd557ef53eeb31e49268b27da10fc52a3c213214d5d1f5ce9a78821f4afd2a9349393c3a7754a2cee39849e8243ff823c8e0ec283e983ce55d3a2159611c7c2f85916655741b0106a44751e967717eebb4b9135d15800125b7c285b88ec868b51e910ba02e60a540d68c3d8495195365a1c1ea3239ed4c3512b1defead20d27d1b3ab7b99c4ed5b8d395130493e8132a472fde8b295edf212cff891462bf6f6ad550c074682aa2f3be56956f5a8d6733fd6247c5908d2496678efd3f3fa8c5fa377519738db822b3e21e2bd7d513e52b2df4454f7f4e9d56c137928fad38cfa37e742d776ac71aad320c3d3f95f5e43765f5862e81f721820caa9f54c554859afe38529238162e7a1e7a323d214ada67f48b63d712a3af8bc2f5859b6441f3384ea2ccd757d8b8e6021422c4f068c39f76a146d89f61db3bf0d95af0774897438cf71e9cee4b984731351bb399c0ba2191bc927323bc9a59e4fb465c5412d02ce460aac68487d1295792e71feab3c8a4f6d1ab76268121e065638710eb24ca2033a49d68f9d043696e65bb2fca4730b6d184f24b56899d71785aea0d7e0af3196d77a124fa9c57fa35e81411fd2b07dc8996c0ff339439f79c4735bd375ce4910f012597f42ad976eecee1fca7d25124e14e7c02cd72fa58dafad9d555843cbdc9ab0c592da9be6e117c36e99bc17e634907d2e6ea3731e4c35cde0649405dfee4963a1891ab803258e70b1a246c3f88489dc78b06f6df5c58daa1de5bb02955bee6dab7cfd2c41293affbe85ac1fe9e34f9e3a06c9c6b869554693c487332e3de42e5306ee5c1651ba5eebde9a555127948e527feb58cc129aced9ad3a24f87770fb2d15f54a12dc29678e76b1a3c0d4e16747f977a556ba2dab2321d154612de330c22cac9500478ae4bab50e447930020ccdb0136b6a0a48fbf1d4b4677b54838d96767578f41b9ca44527efdf5a8d280d5b7a5fcc20fbdbba1a3d966e0266d9537ee5fd9d50f83dacccad78bc28552fa345f84415fec27cccc8f1d7a4f6c5f98071851a32acdeeedfe6dbd69af83eca83635b70ccbeb6e9b9099a80a2b53b3097c3a118c2bf03b58cc3894b0735a612c5bcba5b542e8c055264ac2e96676fd6211544328a9c17b84b177f141db574a04355a056d29854a253ea9202a657d1262704d6886499d92d293fe312daa97d9657167278f67cd10bafab4116f40544bcbdb1e3d2c2faa3c5cea0fe5ae0a4412dae7c4740edf63224732dd295f538ab01beecc5750605880c49ea39ae1b5bcb4250cac84a60540ddd39fc3f4e827d48b1fbdbb27997ee8d5bf4358de05680872daacfc2401b1743cff2699644f2ad9087c46593e772519a1a4db8b56a20bd7f8190b5d7080b93a730bebb7efa2abf52aef622e30c8aacd51e3fc97d64d3120f152e45ea2ef15a328d9fb7d77b0821cfb8dcc30d10f0700d383ac8ec4b0e7b4ea7409b0ce4a84c738711604947841835c86c350f57e2c31b6a252ce1c130d48c47a65dfc73e8184bc555a07fb2efea502565d6203c4db3b02810ed96a9f8eaf85e5495a849a6b0cfa71d8dd3f8e2c8f2d137d0213a8c1c0b41bd41e2050f789f11256e1141d898884dd3a46bf0e04c92aed92b797382172121d308d9f28fe878393bb5a68c2d6f5ace901e716ccc494ff99557a91450c20e6cc90896949fba01c7146bb70b35ba895c35a16fb2d8de01724ab0c51c52e730bb5e792b4a15d78f07cfcded494e2c7f354d7f8a19cb5ea0b043cd626c08532e9bfb63c9b3735ac16f7cb6465e7684f5d100148de4e037a59cbb94bb53230ce6d6c2b797a6d59549dd044722c931ec4bb742686f5a5d6544a21636989a35a07a1043bed8f56fe937d91e64891546b54fd83316f496b806de0cc93b782f10c7072bac31771aab2ea4d398b156fceaf4ad6921ab7e495f342b8011f5ae6af8aa765c6a96c8db2e98dbb88df22b855908115db66960787c6f5eb03679a0abedf040d36542c879a664ecd5f479724c0be6c9751c751b704a511eaf4e024e1b26069c740e83215c1639df970017c09f9121cdae180a1f8a99d466bf78f84e7a05e97047fd23fc50671a0baffe9201b302851bb3d9310f2072b0d94de49542e34ec638c92f771d95759690f17b0c07c2b0162058882ab24c30bc1ccd3b2f2fde3cf3e0ea069df4e4656765405c8dd4d67a76dce94058fc9a44661d1e32a83e952adc06897007c28017dce6e557fd3ea42ddce138dbc2b8f3b4c2983e0c016103c22bc38fa1b08bc7b8c71bfc52a36a6979534496d383ac8f3c7ad781a6a5d2477ce82cd8221df68cb4addb6c2b1eda56b77c2187bca3ee5ce3646147fd8d4a1e586472467a983aa15cf8b6f51e22ed98c429b59673e505a863f68a42bc24a5b00fbc0eda62b31f045b32bf6334e65be4cbf5ada9f1d28c1415090b176731425cab9c738af00a0f2f0328f59c2d9a4a27029e3743ec5914ec9cf9b8d4cb680583ca33b6febca3238f08fafa14f38b216052a994d8d790e3d9eeb580365914206894ce72f9611ebf41f632732138f22a6588b640169b7650cdb266e9b001119a27cdbb223b526b930261d37decec2fe18cc1aa1143f8fa219deeb88d3aa2ba6936f75c78dc9c95862c5e863204f4425fd798b80cd3942f956c0f5e53d7910e069d76602a075e7b2a82148647ebc8c96f0433b8af6f30817853e2094fe1a2b3a90007219c754685a94e362b3d8fac76a290c3984cb55d6f3ee2a83b05803086520e5fcb5561c7faffb0d718da1304032180b4ad253085e0fc7e3886c2d158d351548f42421840caadaabcf0c1991992b6ab54ccea29e460828b9e51e93c15de36381753619c96b4d2cb4179dfbd4e4da4117a93b8c363c8237de0179a482731a64776ef1da35c08fcfa13ce5c904e29a3b19a527c9af370a959266cf1fc29777c305ef90e3d3a87c6b7d7be16d84202c4acbcd96efb6c619c05c34b1152722f033052fa7330cb169f97247fb9f846ba8d294d27b4f0f74ee1b6d86b436d2424209ccb79a2037189040ac3749eb05575e4710443496a604b057ee831a48a94076e99e04a421f7703119030d8fea7ded167d6ece85a68380f895e10de6949811d8a64bc9727ee65d936e7b9c43758339affcb51946228e5748a2c2bbe9a70b8e65a9e78d175475e8c6db11c13f2ede0233a08c0b0d9fecc2f17911f2e48bf2653b10f1fc70364c21f01df744556f75f03770a51cce9e581ac6d36c1dbcc8be1f40da3dd897e1b7672dc7eb0af7acf3e7326623d24991f75e82d12032ee5c3c180765f4e0ded6c9502afac722bf92f86639e7ece864cfa965f7463a19082d23057969ed073c82bae8ff09500cd6014eda39f55d9f7c34ad1aef07e5cb4b6131c671311e7c011161fb690d7f95b9c7c5f5e99b9531b903d89c256b671bd24afd1ef9da23c268eabd6035d7752561e80aa85843033f19e4b199890f048be03915238086f3355b4f70dbe2bd7d442d35d9be0f5132cb96abc1dfb4546361d9bc8663a28662b8babb0940ff6aeb263aa633a27fa8e472840b5d8d6e05fca6c0595a19933313a6d362084657d5dcc4cade535c8e474a75c7c60c3f101ba1a89d5878da101c6d5b72eb1d0815d344f9beec09f0384b240f2c9f3fc72e115057370c3a29fd7b5b48f3cd9da2382ea02c4c7ff56882bcb2c3837c1dd178e3e0e5b581f0dcc9ba5d23022e3af692ab5dd814dd12fd479113289372be3c20de0ac9b05875683fb0644f79b2f53cea9144ca954f43cb018bd64546b0496b90fc744eb47b5f3cb8ee8b26148dac5508a3e74888576a2a69c5a8b9b21eb0d721910c273b890afadb5e72aa7225951a92fc57002b65a5bdf615586f856bc45ef75044327bff771cc8dc09cceccec4511f618bad4cdf13e4abb2ca974f61c0ba98eeed056fe3e7aa8c1dac89937b7b8ea671128b903d4671970201994c56e201dc39e2c25962f02c03da11bcf4ae24a0ae8cb7e41d209127d7c636b37d004365aad78f2ea0ca7b6e991fd83c64a18806a340d28f86160f6dca898669e7df908e1c492084b83ee4317974b923f9cf9e0def6f2836552a71274c6fd72cc15a4801cafec81aa0d2fd52d88469aa0a4bd9ec040be90276a340a7cf6282ade07110780d0ac33226d1684a31f56bb51c0f007466581e34e0ace19924a5d7f0f5bef2a39b43bcef76ac5ce49356cde43b6c07b0e071", 0x1000}]}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b2c, &(0x7f0000000040)) syz_emit_ethernet(0xfdef, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a000700726f75746500"], 0x1ac}}, 0x0) 0s ago: executing program 3 (id=5307): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xff, 0x4, 0x6, 0x6}, 0x4}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x40804) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$can_raw(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000880)=""/234, 0xea}, {&(0x7f0000000a80)=""/133, 0x85}], 0x2}, 0x200) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x58, 0x140d, 0x800, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket(0x28, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r7, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x48}}, 0x4058) close(r6) getsockopt(r5, 0x28, 0x8, 0x0, &(0x7f0000000040)=0x47) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = socket(0x26, 0x1, 0x2) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x74, 0x14, 0x1, 0x170bd27, 0x25ffdbff, {0x23, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x5d, 0x1, "807c74bfd548c79dffc4aac3c92fc53a5224bc692800f35ff84e4fbe9727d9dba258ae092732b98d4e876133498421946701680ef7de1a2caff60a862053823ea1cb17fc3f3fbf6ef05a601f06c2d739a46baec1624a9a0638"}]}, 0x74}, 0x1, 0x0, 0x0, 0x8801}, 0x20000004) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r9, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r10, 0x400, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) kernel console output (not intermixed with test programs): bond8 (unregistering): Released all slaves [ 508.958669][ T3309] bond9 (unregistering): Released all slaves [ 509.191968][T18776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3418'. [ 509.205106][T18777] sctp: [Deprecated]: syz.4.3417 (pid 18777) Use of struct sctp_assoc_value in delayed_ack socket option. [ 509.205106][T18777] Use struct sctp_sack_info instead [ 509.268187][ T3309] : left promiscuous mode [ 509.318006][T18782] sctp: [Deprecated]: syz.4.3417 (pid 18782) Use of struct sctp_assoc_value in delayed_ack socket option. [ 509.318006][T18782] Use struct sctp_sack_info instead [ 509.586863][T18796] vlan0: entered promiscuous mode [ 509.656367][ T5642] Bluetooth: hci1: command tx timeout [ 510.100847][T18584] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.143575][T18827] netlink: 'syz.4.3431': attribute type 1 has an invalid length. [ 510.153503][T18584] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.170920][T18584] bridge_slave_0: entered allmulticast mode [ 510.188263][T18584] bridge_slave_0: entered promiscuous mode [ 510.217380][T18584] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.235411][T18584] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.245477][T18584] bridge_slave_1: entered allmulticast mode [ 510.253436][T18584] bridge_slave_1: entered promiscuous mode [ 510.302946][T18837] netlink: 'syz.1.3432': attribute type 1 has an invalid length. [ 510.408749][T18837] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 510.421314][T18847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3434'. [ 510.708629][T18584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.803309][T18584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.863797][T18867] veth0_to_bond: entered allmulticast mode [ 510.963724][T18867] netlink: 928 bytes leftover after parsing attributes in process `syz.4.3437'. [ 510.983540][T18878] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3441'. [ 511.029298][T18881] netlink: 'syz.1.3439': attribute type 10 has an invalid length. [ 511.160154][T18584] team0: Port device team_slave_0 added [ 511.212925][T18881] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 511.273894][T18584] team0: Port device team_slave_1 added [ 511.470318][T18906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3446'. [ 511.504281][T18906] netlink: 'syz.2.3446': attribute type 7 has an invalid length. [ 511.521123][T18906] netlink: 'syz.2.3446': attribute type 8 has an invalid length. [ 511.529681][T18906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3446'. [ 511.621590][T18584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.635400][T18584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.661908][T18584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.674993][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 511.738119][ T5642] Bluetooth: hci1: command tx timeout [ 511.759914][T18896] syzkaller0: entered promiscuous mode [ 511.765515][T18896] syzkaller0: entered allmulticast mode [ 511.826094][T18584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.849770][T18584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 511.914060][T18584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.969000][T18914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3449'. [ 512.088984][T18920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3451'. [ 512.098182][T18920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3451'. [ 512.303243][T18923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3452'. [ 512.514394][T18927] netlink: 'syz.1.3453': attribute type 1 has an invalid length. [ 512.522384][T18927] netlink: 'syz.1.3453': attribute type 2 has an invalid length. [ 513.750891][T18916] erspan0: entered promiscuous mode [ 513.757534][T18916] erspan0: entered allmulticast mode [ 513.816449][ T5642] Bluetooth: hci1: command tx timeout [ 513.902915][T18584] hsr_slave_0: entered promiscuous mode [ 513.926017][T18584] hsr_slave_1: entered promiscuous mode [ 513.943299][T18584] debugfs: 'hsr0' already exists in 'hsr' [ 513.962740][T18584] Cannot create hsr debugfs directory [ 514.471834][T18965] xt_TPROXY: Can be used only with -p tcp or -p udp [ 514.833017][T18984] __nla_validate_parse: 2 callbacks suppressed [ 514.833033][T18984] netlink: 608 bytes leftover after parsing attributes in process `syz.4.3466'. [ 514.902790][ T3309] hsr_slave_0: left promiscuous mode [ 514.931848][ T3309] hsr_slave_1: left promiscuous mode [ 514.942316][ T3309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.960517][ T3309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.245180][T18996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3469'. [ 515.288054][T18996] net_ratelimit: 10 callbacks suppressed [ 515.288069][T18996] openvswitch: netlink: Flow actions attr not present in new flow. [ 515.437778][T19002] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3471'. [ 515.474221][ T3309] team_slave_1 (unregistering): left allmulticast mode [ 515.487554][T19005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3469'. [ 515.490530][ T3309] team0 (unregistering): Port device team_slave_1 removed [ 515.520030][ T3309] team_slave_0 (unregistering): left allmulticast mode [ 515.528157][ T3309] team0 (unregistering): Port device team_slave_0 removed [ 515.687691][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 515.788500][T19005] team0: Port device team_slave_0 removed [ 516.061124][T19020] netlink: 'syz.2.3474': attribute type 1 has an invalid length. [ 516.368759][T19044] netlink: 'syz.4.3480': attribute type 21 has an invalid length. [ 516.392462][T19044] IPv6: NLM_F_CREATE should be specified when creating new route [ 516.632336][T19044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3480'. [ 516.650853][T19056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3483'. [ 516.687422][T19044] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 516.689106][ T3309] IPVS: stop unused estimator thread 0... [ 516.713719][T19044] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3480'. [ 516.755957][T19060] netlink: 'syz.0.3484': attribute type 20 has an invalid length. [ 516.768768][T19054] netlink: 'syz.1.3482': attribute type 1 has an invalid length. [ 516.791916][T19060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3484'. [ 516.928350][T19070] xt_TPROXY: Can be used only with -p tcp or -p udp [ 516.975123][T19054] 8021q: adding VLAN 0 to HW filter on device bond1 [ 517.009338][T19060] netlink: 'syz.0.3484': attribute type 20 has an invalid length. [ 517.022309][T19060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3484'. [ 517.087888][T19071] bond1: (slave ip6gretap1): making interface the new active one [ 517.102138][T19071] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 517.120439][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.152315][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.287125][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.402384][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 517.432408][T18584] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 517.479761][T18584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 517.512124][T18584] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 517.561834][T18584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 517.600373][T19091] syz_tun: entered allmulticast mode [ 517.638312][T18584] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 517.662344][T18584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 517.719162][T18584] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 517.752687][T18584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 517.964681][T19116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3494'. [ 518.010300][T18584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.076565][T18584] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.102522][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.109712][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.153346][T12747] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.160546][T12747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.533003][T19146] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 518.550184][T19146] bond2 (unregistering): Released all slaves [ 518.737424][T19152] xt_CT: No such helper "snmp" [ 519.260609][T18584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.298016][T19185] batadv_slave_0: entered promiscuous mode [ 519.319544][T19176] batadv_slave_0: left promiscuous mode [ 519.398219][T18584] veth0_vlan: entered promiscuous mode [ 519.426752][T18584] veth1_vlan: entered promiscuous mode [ 519.518804][T18584] veth0_macvtap: entered promiscuous mode [ 519.548554][T18584] veth1_macvtap: entered promiscuous mode [ 519.598586][T18584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.701718][T18584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.752277][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.793105][ T3309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.794545][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.829039][ T320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.875875][ T320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.926456][ T320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.042304][T19225] __nla_validate_parse: 7 callbacks suppressed [ 520.042318][T19225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3515'. [ 520.060494][T19225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3515'. [ 520.084734][T19225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3515'. [ 520.106825][T19228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3514'. [ 520.119074][T19225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3515'. [ 520.309774][ T320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.346018][ T320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.483082][ T3333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.500547][ T3333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.687212][T19254] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 520.774990][T19253] team0: Device xfrm0 is of different type [ 520.798044][T19258] tipc: Started in network mode [ 520.808865][T19258] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 520.829088][T19258] tipc: Enabled bearer , priority 0 [ 520.831535][T19262] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3526'. [ 520.849969][T19253] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 520.873405][T19261] openvswitch: netlink: Missing key (keys=40, expected=100) [ 521.180674][T19273] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.191713][T19273] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.209423][T19280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3532'. [ 521.232365][T19275] erspan0: entered promiscuous mode [ 521.426681][T19273] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.453169][T19273] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.477034][T19290] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 521.564347][T19292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3537'. [ 521.594536][T19273] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.622879][T19273] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.790110][T19273] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.829330][T19273] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.956510][ T808] tipc: Node number set to 11578026 [ 522.169166][ T320] nci: nci_ntf_packet: unknown ntf opcode 0x25 [ 522.304868][ T320] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.325937][ T320] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.356655][ T320] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.364942][ T320] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.401844][ T320] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.414296][ T320] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.456852][ T320] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 522.465150][ T320] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.536558][ T5631] Bluetooth: hci1: command 0x0405 tx timeout [ 522.556935][T19349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3552'. [ 522.583721][T19349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3552'. [ 522.873407][T19317] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 523.094475][T19368] netlink: 'syz.2.3558': attribute type 4 has an invalid length. [ 523.511398][T19400] netlink: 'syz.2.3567': attribute type 29 has an invalid length. [ 523.541078][T19400] netlink: 'syz.2.3567': attribute type 29 has an invalid length. [ 523.682706][T19406] netlink: 'syz.2.3567': attribute type 16 has an invalid length. [ 523.714224][T19404] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.729828][T19406] netlink: 'syz.2.3567': attribute type 17 has an invalid length. [ 523.750965][T19404] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.824183][T19400] xfrm0 speed is unknown, defaulting to 1000 [ 523.878021][T19406] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.885255][T19406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.899517][T19406] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.906751][T19406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.953602][T19406] vlan0: left promiscuous mode [ 523.991888][T19406] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 524.025172][T19406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 525.093004][T19417] netlink: 'syz.0.3572': attribute type 2 has an invalid length. [ 526.424200][T19414] __nla_validate_parse: 9 callbacks suppressed [ 526.424219][T19414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3569'. [ 526.506445][T19415] team0: Device gtp0 is up. Set it down before adding it as a team port [ 526.509890][T19430] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3575'. [ 526.663394][T19435] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 526.735510][T19438] netlink: 'syz.4.3577': attribute type 3 has an invalid length. [ 526.769834][T19438] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3577'. [ 526.864043][T19443] syzkaller0: entered promiscuous mode [ 526.883285][T19443] syzkaller0: entered allmulticast mode [ 526.918924][T19438] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3577'. [ 527.174908][T19461] netlink: 'syz.0.3585': attribute type 12 has an invalid length. [ 527.271717][T19465] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3587'. [ 527.273539][T19466] netlink: 'syz.4.3586': attribute type 75 has an invalid length. [ 527.380284][T19472] tipc: Started in network mode [ 527.436773][T19472] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 527.491651][T19472] tipc: Enabling of bearer rejected, failed to enable media [ 527.532529][T19472] tipc: Enabling of bearer rejected, failed to enable media [ 527.549248][T19485] xfrm0 speed is unknown, defaulting to 1000 [ 527.566130][T19472] tipc: Enabling of bearer rejected, failed to enable media [ 527.599149][T19489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3591'. [ 527.665916][T19472] tipc: Enabling of bearer rejected, failed to enable media [ 527.686065][T19472] tipc: Enabling of bearer rejected, failed to enable media [ 527.769219][T19472] tipc: Enabling of bearer rejected, failed to enable media [ 527.794569][T19472] tipc: Enabling of bearer rejected, failed to enable media [ 527.819603][T19472] tipc: Enabling of bearer rejected, failed to enable media [ 527.839367][T19499] dvmrp1: entered allmulticast mode [ 527.861176][T19472] tipc: Enabling of bearer rejected, failed to enable media [ 527.888735][T19472] tipc: Enabling of bearer rejected, failed to enable media [ 527.921129][T19495] dvmrp1: left allmulticast mode [ 528.013678][T19472] tipc: Enabling of bearer rejected, failed to enable media [ 528.250743][T19472] tipc: Enabling of bearer rejected, failed to enable media [ 528.822962][T19549] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3611'. [ 528.993881][T19560] netlink: 'syz.3.3615': attribute type 3 has an invalid length. [ 529.010639][T19560] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3615'. [ 529.064684][T19561] syzkaller1: entered promiscuous mode [ 529.081260][T19561] syzkaller1: entered allmulticast mode [ 529.254576][T19572] netlink: 'syz.3.3618': attribute type 16 has an invalid length. [ 529.415396][T19583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3621'. [ 529.427744][T19583] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3621'. [ 529.798283][T19611] ip6gre1: entered allmulticast mode [ 529.983723][T19621] syz.1.3636 (19621) used obsolete PPPIOCDETACH ioctl [ 530.048563][T19624] vlan2: entered promiscuous mode [ 530.057636][T19624] geneve1: entered promiscuous mode [ 530.063279][T19624] vlan2: entered allmulticast mode [ 530.068669][T19624] geneve1: entered allmulticast mode [ 530.459841][T19647] IPVS: Scheduler module ip_vs_sip not found [ 531.193331][T19695] netlink: 'syz.3.3655': attribute type 20 has an invalid length. [ 531.243832][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.253276][T19695] netlink: 'syz.3.3655': attribute type 20 has an invalid length. [ 531.277891][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.333877][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.357936][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.557627][T19714] netlink: 'syz.3.3660': attribute type 26 has an invalid length. [ 531.574845][T19716] netlink: 'syz.4.3661': attribute type 1 has an invalid length. [ 531.587544][T19714] __nla_validate_parse: 7 callbacks suppressed [ 531.587558][T19714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3660'. [ 531.617317][T19716] netlink: 'syz.4.3661': attribute type 1 has an invalid length. [ 531.631420][T19714] netlink: 'syz.3.3660': attribute type 26 has an invalid length. [ 531.644016][T19714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3660'. [ 531.678706][T19720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3664'. [ 531.717630][T19721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3664'. [ 531.832866][T19729] netlink: 344 bytes leftover after parsing attributes in process `syz.4.3666'. [ 531.969742][T19731] bond2: entered promiscuous mode [ 531.974881][T19731] bond2: entered allmulticast mode [ 532.081189][T19753] syzkaller0: entered promiscuous mode [ 532.087360][T19753] syzkaller0: entered allmulticast mode [ 532.179513][T19756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3672'. [ 532.201692][T19756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3672'. [ 532.227289][T19756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3672'. [ 532.317449][T19762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3675'. [ 532.449513][T19766] netlink: 'syz.2.3677': attribute type 7 has an invalid length. [ 532.494023][T19766] Bluetooth: MGMT ver 1.23 [ 532.580629][T19774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3680'. [ 533.311682][T19813] Cannot find add_set index 4 as target [ 533.641597][T19827] xt_l2tp: invalid flags combination: 8 [ 533.790035][T19836] xt_l2tp: unknown flags: 10 [ 533.809718][T19837] bridge0: port 3(batadv1) entered blocking state [ 533.819564][T19837] bridge0: port 3(batadv1) entered disabled state [ 533.827766][T19837] batadv1: entered allmulticast mode [ 533.835013][T19837] batadv1: entered promiscuous mode [ 534.080346][T19847] netlink: 'syz.3.3706': attribute type 11 has an invalid length. [ 534.107582][T19847] netlink: 'syz.3.3706': attribute type 21 has an invalid length. [ 534.131781][T19847] IPv6: NLM_F_CREATE should be specified when creating new route [ 534.156975][T19847] netlink: 'syz.3.3706': attribute type 1 has an invalid length. [ 534.306519][T12747] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 534.315853][T12747] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 534.386784][T19827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.808344][ T24] IPVS: starting estimator thread 0... [ 534.881754][T19897] team0: Device ipvlan2 failed to register rx_handler [ 534.897584][T19892] IPVS: using max 30 ests per chain, 72000 per kthread [ 535.292472][T19928] netlink: 'syz.0.3729': attribute type 23 has an invalid length. [ 535.986896][T19957] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.996995][T19957] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.062932][T19963] syz_tun: left allmulticast mode [ 536.531650][T19995] xt_hashlimit: size too large, truncated to 1048576 [ 536.626593][T20002] __nla_validate_parse: 12 callbacks suppressed [ 536.626610][T20002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3749'. [ 536.643782][T20003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3750'. [ 536.960507][T20009] bond2: entered promiscuous mode [ 536.967335][T20009] bond2: entered allmulticast mode [ 536.976915][T20019] netlink: 'syz.4.3752': attribute type 13 has an invalid length. [ 537.043235][T20021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.201605][ T5287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 537.258623][T20034] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3756'. [ 537.501220][T20056] ksmbd: Unknown IPC event: 1, ignore. [ 537.580519][T20060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3764'. [ 537.689872][T20072] syzkaller0: entered promiscuous mode [ 537.697083][T20072] syzkaller0: entered allmulticast mode [ 537.846384][T20082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3769'. [ 537.868636][T20082] openvswitch: netlink: Flow key attr not present in new flow. [ 538.318153][T20110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.364036][T20114] tls_set_device_offload: netdev not found [ 538.470602][T20123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3778'. [ 538.486027][T20123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3778'. [ 538.529654][T20116] bond3: entered promiscuous mode [ 538.569657][T20128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3781'. [ 538.584090][T20120] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3780'. [ 538.604322][T20116] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3778'. [ 539.062638][T20149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.627352][T20178] netlink: 'syz.2.3798': attribute type 11 has an invalid length. [ 539.679929][T20171] bridge0: port 3(gretap0) entered disabled state [ 539.964197][T20171] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.971857][T20171] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.000023][T20171] batman_adv: batadv0: Interface deactivated: dummy0 [ 540.152416][T20171] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 540.808149][T20215] syzkaller0: entered promiscuous mode [ 540.816054][T20215] syzkaller0: entered allmulticast mode [ 540.823700][T20221] nbd: must specify a size in bytes for the device [ 540.868489][T20225] xt_TPROXY: Can be used only with -p tcp or -p udp [ 540.891337][T20226] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 541.088332][T20232] xfrm0 speed is unknown, defaulting to 1000 [ 541.175184][T20243] netlink: 'syz.1.3820': attribute type 21 has an invalid length. [ 541.838248][T20270] syzkaller0: entered promiscuous mode [ 541.850479][T20270] syzkaller0: entered allmulticast mode [ 541.911099][T20286] netlink: 'syz.2.3832': attribute type 1 has an invalid length. [ 542.015242][T20275] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.026649][T20275] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.823959][T20296] bridge0: port 3(gretap0) entered blocking state [ 543.830562][T20296] bridge0: port 3(gretap0) entered forwarding state [ 543.837512][T20296] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.844673][T20296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.887039][ T5287] veth1_vlan: left promiscuous mode [ 543.925502][T20307] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 543.926937][T20308] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 544.045450][T20275] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.083300][T20275] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.184187][T20275] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.204439][T20275] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.291756][T20275] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.303755][T20318] nbd1: detected capacity change from 0 to 63 [ 544.310444][T20275] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.326838][ T5642] block nbd1: Receive control failed (result -32) [ 544.334897][ T5631] block nbd1: Receive control failed (result -32) [ 544.338404][ T1725] block nbd1: Send control failed (result -32) [ 544.348753][ T1725] block nbd1: Request send failed, requeueing [ 544.362225][ T1725] block nbd1: Dead connection, failed to find a fallback [ 544.373370][ T1725] block nbd1: shutting down sockets [ 544.382367][ T1725] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 544.395899][ T1725] Buffer I/O error on dev nbd1, logical block 0, async page read [ 544.404103][ T1725] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 544.414855][ T1725] Buffer I/O error on dev nbd1, logical block 1, async page read [ 544.424315][ T1725] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 544.433477][ T1725] Buffer I/O error on dev nbd1, logical block 2, async page read [ 544.442665][ T1725] Buffer I/O error on dev nbd1, logical block 3, async page read [ 544.452231][ T1725] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 544.461622][ T1725] Buffer I/O error on dev nbd1, logical block 0, async page read [ 544.470123][ T1725] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 544.479775][ T1725] Buffer I/O error on dev nbd1, logical block 1, async page read [ 544.489547][ T1725] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 544.499314][ T1725] Buffer I/O error on dev nbd1, logical block 2, async page read [ 544.507191][ T1725] Buffer I/O error on dev nbd1, logical block 3, async page read [ 544.517262][ T1725] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 544.528010][ T1725] Buffer I/O error on dev nbd1, logical block 0, async page read [ 544.536623][ T1725] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 544.546372][ T1725] Buffer I/O error on dev nbd1, logical block 1, async page read [ 544.555391][ T1725] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 544.565509][ T1725] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 544.583077][T17995] ldm_validate_partition_table(): Disk read failed. [ 544.594454][T17995] Dev nbd1: unable to read RDB block 0 [ 544.602532][T17995] nbd1: unable to read partition table [ 544.619735][T17995] ldm_validate_partition_table(): Disk read failed. [ 544.629759][T17995] Dev nbd1: unable to read RDB block 0 [ 544.639510][T17995] nbd1: unable to read partition table [ 544.671884][T20333] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 544.682185][T20333] bond1: option packets_per_slave: allowed values 0 - 65535 [ 544.694663][T20333] bond1 (unregistering): Released all slaves [ 544.979905][ T3333] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.993503][ T3333] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.044153][ T3333] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.053238][ T3333] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.114041][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.142311][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.214998][ T3333] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.233713][ T3333] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.471203][T20384] bond1: Removing last ns target with arp_interval on [ 545.491925][T20386] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 545.624851][T20397] __nla_validate_parse: 20 callbacks suppressed [ 545.624868][T20397] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3850'. [ 547.013934][T20317] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 547.216556][T20413] netlink: 'syz.1.3855': attribute type 1 has an invalid length. [ 547.368445][T20429] SET target dimension over the limit! [ 547.408328][T20413] 8021q: adding VLAN 0 to HW filter on device bond3 [ 547.421966][T20422] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.436649][T20422] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.446689][T20437] x_tables: duplicate underflow at hook 1 [ 547.446806][T20438] x_tables: duplicate underflow at hook 1 [ 547.510955][T20435] netlink: 'syz.3.3858': attribute type 4 has an invalid length. [ 547.554497][ T3333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.570268][T20422] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.585557][ T3333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.604930][T20443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.621078][T20422] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.729387][T20448] IPv6: NLM_F_CREATE should be specified when creating new route [ 547.748974][T20449] IPv6: NLM_F_CREATE should be specified when creating new route [ 547.764342][T20422] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.800306][T20422] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.874599][T20422] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.897286][T20422] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.090649][T20469] syz.2.3871: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 548.106566][T20469] CPU: 0 UID: 0 PID: 20469 Comm: syz.2.3871 Not tainted syzkaller #0 PREEMPT(full) [ 548.106588][T20469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 548.106648][T20469] Call Trace: [ 548.106655][T20469] [ 548.106664][T20469] dump_stack_lvl+0xe8/0x150 [ 548.106697][T20469] warn_alloc+0x24c/0x270 [ 548.106722][T20469] ? stack_depot_save_flags+0x33/0x800 [ 548.106746][T20469] ? __pfx_warn_alloc+0x10/0x10 [ 548.106771][T20469] ? kasan_save_track+0x3e/0x80 [ 548.106793][T20469] ? __kasan_kmalloc+0x93/0xb0 [ 548.106818][T20469] ? xsk_setsockopt+0x52a/0x960 [ 548.106838][T20469] ? do_sock_setsockopt+0x17c/0x1b0 [ 548.106870][T20469] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 548.106895][T20469] ? do_syscall_64+0x174/0x580 [ 548.106917][T20469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.106945][T20469] __vmalloc_node_range_noprof+0x12c/0x1730 [ 548.106995][T20469] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 548.107022][T20469] ? __kasan_kmalloc+0x93/0xb0 [ 548.107048][T20469] ? __kmalloc_cache_noprof+0x32d/0x660 [ 548.107071][T20469] ? __kmalloc_cache_noprof+0x150/0x660 [ 548.107097][T20469] vmalloc_user_noprof+0xad/0xe0 [ 548.107120][T20469] ? xskq_create+0xbf/0x170 [ 548.107143][T20469] xskq_create+0xbf/0x170 [ 548.107168][T20469] xsk_init_queue+0x8a/0xe0 [ 548.107192][T20469] xsk_setsockopt+0x52a/0x960 [ 548.107212][T20469] ? __fget_files+0x2a/0x420 [ 548.107237][T20469] ? __pfx_xsk_setsockopt+0x10/0x10 [ 548.107258][T20469] ? __pfx_aa_sk_perm+0x10/0x10 [ 548.107295][T20469] ? aa_sock_opt_perm+0xff/0x1a0 [ 548.107316][T20469] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 548.107335][T20469] ? __pfx_xsk_setsockopt+0x10/0x10 [ 548.107361][T20469] do_sock_setsockopt+0x17c/0x1b0 [ 548.107392][T20469] __x64_sys_setsockopt+0x13d/0x1b0 [ 548.107420][T20469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.107441][T20469] do_syscall_64+0x174/0x580 [ 548.107464][T20469] ? trace_irq_disable+0x3b/0x140 [ 548.107488][T20469] ? clear_bhb_loop+0x40/0x90 [ 548.107512][T20469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.107530][T20469] RIP: 0033:0x7fc0b9d9de59 [ 548.107548][T20469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.107564][T20469] RSP: 002b:00007fc0bad12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 548.107583][T20469] RAX: ffffffffffffffda RBX: 00007fc0ba025fa0 RCX: 00007fc0b9d9de59 [ 548.107597][T20469] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 548.107608][T20469] RBP: 00007fc0b9e33e6f R08: 0000000000000004 R09: 0000000000000000 [ 548.107619][T20469] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.107631][T20469] R13: 00007fc0ba026038 R14: 00007fc0ba025fa0 R15: 00007fffc2d6c138 [ 548.107661][T20469] [ 548.107702][T20469] Mem-Info: [ 548.253976][T20473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.260536][T20469] active_anon:6088 inactive_anon:0 isolated_anon:0 [ 548.260536][T20469] active_file:0 inactive_file:43338 isolated_file:0 [ 548.260536][T20469] unevictable:768 dirty:102 writeback:0 [ 548.260536][T20469] slab_reclaimable:11406 slab_unreclaimable:104726 [ 548.260536][T20469] mapped:29394 shmem:1296 pagetables:1402 [ 548.260536][T20469] sec_pagetables:0 bounce:0 [ 548.260536][T20469] kernel_misc_reclaimable:0 [ 548.260536][T20469] free:1319701 free_pcp:10074 free_cma:0 [ 548.491211][T20469] Node 0 active_anon:24140kB inactive_anon:0kB active_file:0kB inactive_file:173148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117632kB dirty:420kB writeback:0kB shmem:3648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14060kB pagetables:5496kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 548.545374][T20469] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 548.598239][T20469] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 548.631618][T20469] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 548.638348][T20469] Node 0 DMA32 free:1305144kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24116kB inactive_anon:0kB active_file:0kB inactive_file:173148kB unevictable:1536kB writepending:420kB zspages:0kB present:3129332kB managed:2548796kB mlocked:0kB bounce:0kB free_pcp:42144kB local_pcp:21308kB free_cma:0kB [ 548.685232][T20469] lowmem_reserve[]: 0 0 0 0 0 [ 548.696140][T20469] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 548.727186][T20469] lowmem_reserve[]: 0 0 0 0 0 [ 548.731958][T20469] Node 1 Normal free:3948940kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 548.764724][T20469] lowmem_reserve[]: 0 0 0 0 0 [ 548.771274][T20469] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 548.773126][T20481] netlink: 'syz.1.3873': attribute type 1 has an invalid length. [ 548.785365][T20469] Node 0 DMA32: 2712*4kB (UME) 1377*8kB (UM) 663*16kB (UME) 663*32kB (UME) 112*64kB (UME) 56*128kB (UME) 16*256kB (UME) 5*512kB (UM) 4*1024kB (M) 1*2048kB (M) 299*4096kB (UM) = 1305528kB [ 548.814643][T20469] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 548.827915][T20469] Node 1 Normal: 1*4kB (U) 1*8kB (M) 6*16kB (UM) 9*32kB (UM) 10*64kB (UM) 3*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 0*2048kB 963*4096kB (UM) = 3948940kB [ 548.893066][T20479] can: request_module (can-proto-5) failed. [ 548.900859][T20469] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 548.911274][T20469] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 548.921561][T20469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 548.931527][T20469] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 548.943997][T20469] 44630 total pagecache pages [ 548.962063][T20469] 0 pages in swap cache [ 548.968218][T20469] Free swap = 124996kB [ 548.975570][T20469] Total swap = 124996kB [ 548.982056][T20483] veth3: entered promiscuous mode [ 548.987327][T20469] 2097051 pages RAM [ 548.991167][T20469] 0 pages HighMem/MovableOnly [ 548.997521][T20469] 428171 pages reserved [ 549.013529][T20469] 0 pages cma reserved [ 549.060986][T20485] openvswitch: netlink: Flow actions attr not present in new flow. [ 549.092108][ T3333] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.107072][ T3333] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.210352][ T3333] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.230059][ T3333] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.245262][T20495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3876'. [ 549.257865][T20495] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3876'. [ 549.331324][T20495] gretap1: entered promiscuous mode [ 549.341683][T20495] gretap1: entered allmulticast mode [ 549.356533][ T47] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.369470][ T47] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.457807][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.474258][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.538335][T20507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3882'. [ 549.557330][T20507] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3882'. [ 549.570428][T20507] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3882'. [ 549.640428][T20514] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3884'. [ 549.676997][T20514] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3884'. [ 549.731343][T20517] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3885'. [ 550.841882][T20596] bridge1: entered promiscuous mode [ 550.862840][T20596] bridge1: entered allmulticast mode [ 550.932193][T20601] netlink: 'syz.0.3910': attribute type 21 has an invalid length. [ 550.962749][T20601] netlink: 'syz.0.3910': attribute type 1 has an invalid length. [ 550.974716][T20601] netlink: 'syz.0.3910': attribute type 21 has an invalid length. [ 550.984692][T20601] netlink: 'syz.0.3910': attribute type 1 has an invalid length. [ 551.043824][T20611] netlink: 'syz.2.3913': attribute type 18 has an invalid length. [ 551.095387][ T47] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.102880][T20611] netlink: 'syz.2.3913': attribute type 18 has an invalid length. [ 551.135516][ T47] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.165151][ T47] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.178806][T20615] netlink: 'syz.4.3912': attribute type 4 has an invalid length. [ 551.188724][ T47] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.363670][T20628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3916'. [ 551.386790][T20629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3917'. [ 551.489429][T20631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3917'. [ 551.503649][T20631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3917'. [ 551.529770][T20631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3917'. [ 551.557691][T20631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3917'. [ 552.418044][T20684] can: request_module (can-proto-3) failed. [ 552.560643][T20693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3936'. [ 552.894200][T20708] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.3941'. [ 552.963282][T20708] syzkaller0: entered promiscuous mode [ 552.977895][T20708] syzkaller0: entered allmulticast mode [ 553.151933][T20724] IPv6: NLM_F_CREATE should be specified when creating new route [ 553.186334][T20726] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3948'. [ 553.214544][T20725] syzkaller1: entered promiscuous mode [ 553.221847][T20725] syzkaller1: entered allmulticast mode [ 553.238052][T20731] vlan2: entered promiscuous mode [ 553.243266][T20731] geneve1: entered promiscuous mode [ 553.251839][T20731] vlan2: entered allmulticast mode [ 553.258456][T20731] geneve1: entered allmulticast mode [ 553.661041][T20741] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 553.675632][T20741] bond2: option packets_per_slave: allowed values 0 - 65535 [ 553.685143][T20741] bond2 (unregistering): Released all slaves [ 553.860579][T20764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3960'. [ 554.156553][T20779] syzkaller0: entered promiscuous mode [ 554.172704][T20779] syzkaller0: entered allmulticast mode [ 554.190980][T20784] vcan0: entered allmulticast mode [ 554.268500][T20779] tipc: Started in network mode [ 554.295241][T20779] tipc: Node identity ee6d71cfc7ad, cluster identity 4711 [ 554.321935][T20779] tipc: Enabled bearer , priority 0 [ 554.349422][T20796] team0: No ports can be present during mode change [ 554.378329][T20784] ip6tnl0: Caught tx_queue_len zero misconfig [ 554.421053][T20776] tipc: Resetting bearer [ 554.467285][T20776] tipc: Disabling bearer [ 555.429650][T20843] wlan1 speed is unknown, defaulting to 1000 [ 555.461468][T20843] wlan1 speed is unknown, defaulting to 1000 [ 555.483294][T20843] wlan1 speed is unknown, defaulting to 1000 [ 555.545057][T20843] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 555.567445][T20843] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 555.619077][T20843] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 555.686991][T20843] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 555.884087][T20869] Cannot find set identified by id 0 to match [ 555.917602][T20843] wlan1 speed is unknown, defaulting to 1000 [ 555.949796][T20843] wlan1 speed is unknown, defaulting to 1000 [ 555.975235][T20843] wlan1 speed is unknown, defaulting to 1000 [ 556.034605][T20843] wlan1 speed is unknown, defaulting to 1000 [ 556.079949][T20843] wlan1 speed is unknown, defaulting to 1000 [ 556.119700][T20843] wlan1 speed is unknown, defaulting to 1000 [ 556.225425][T20879] lo: Caught tx_queue_len zero misconfig [ 556.253268][T20879] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 556.382209][T20888] __nla_validate_parse: 9 callbacks suppressed [ 556.382224][T20888] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3995'. [ 556.434349][T20888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3995'. [ 556.454174][T20895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3997'. [ 556.470066][T20888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3995'. [ 556.489480][T20895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3997'. [ 556.515390][T20895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3997'. [ 556.564980][T20895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3997'. [ 556.590174][T20895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3997'. [ 556.722354][T20904] validate_nla: 1 callbacks suppressed [ 556.722370][T20904] netlink: 'syz.0.3999': attribute type 5 has an invalid length. [ 556.825026][T20907] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3998'. [ 556.871895][T20911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4002'. [ 556.973669][T20909] netlink: 'syz.4.4001': attribute type 1 has an invalid length. [ 557.020883][T20919] hsr0: entered promiscuous mode [ 557.093615][T20924] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20004 [ 557.128504][T20923] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20004 [ 557.219034][T20924] can: request_module (can-proto-3) failed. [ 557.237741][T20938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 557.257671][T20923] can: request_module (can-proto-3) failed. [ 557.566709][T20951] netlink: 'syz.2.4008': attribute type 3 has an invalid length. [ 557.858174][T20968] netlink: 'syz.2.4012': attribute type 13 has an invalid length. [ 557.877140][T20968] netlink: 'syz.2.4012': attribute type 58 has an invalid length. [ 558.248172][T20982] syzkaller0: entered promiscuous mode [ 558.253680][T20982] syzkaller0: entered allmulticast mode [ 559.116723][T21026] netlink: 'syz.2.4026': attribute type 2 has an invalid length. [ 559.179826][T21026] : entered promiscuous mode [ 559.496168][ T5642] Bluetooth: hci5: command 0x0406 tx timeout [ 559.622473][T21065] Cannot find del_set index 0 as target [ 559.645384][T21067] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.652852][T21064] sctp: [Deprecated]: syz.4.4032 (pid 21064) Use of int in maxseg socket option. [ 559.652852][T21064] Use struct sctp_assoc_value instead [ 559.653648][T21067] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.830398][T21077] openvswitch: netlink: Missing key (keys=40, expected=100) [ 560.109686][T21091] syzkaller0: entered promiscuous mode [ 560.142495][T21091] syzkaller0: entered allmulticast mode [ 560.162225][T21102] netlink: 'syz.4.4041': attribute type 1 has an invalid length. [ 560.403781][T21102] bond2: option mode: invalid value (8) [ 560.437672][T21102] bond2 (unregistering): Released all slaves [ 560.539250][T21111] syzkaller0: entered promiscuous mode [ 560.577431][T21111] syzkaller0: entered allmulticast mode [ 560.766797][T21130] syzkaller0: entered promiscuous mode [ 560.782559][T21130] syzkaller0: entered allmulticast mode [ 560.791791][T21136] netlink: 'syz.3.4048': attribute type 4 has an invalid length. [ 560.819524][ T29] audit: type=1804 audit(1783236385.398:13): pid=21135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4047" name="/newroot/200/cgroup.controllers" dev="tmpfs" ino=1040 res=1 errno=0 [ 560.893223][T21140] x_tables: duplicate underflow at hook 2 [ 560.905128][ T29] audit: type=1800 audit(1783236385.398:14): pid=21135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4047" name="cgroup.controllers" dev="tmpfs" ino=1040 res=0 errno=0 [ 561.095076][T21145] bond2: left promiscuous mode [ 561.103905][T21145] bond3: left promiscuous mode [ 561.273758][T21155] netlink: 'syz.0.4054': attribute type 20 has an invalid length. [ 561.294552][T21155] netlink: 'syz.0.4054': attribute type 21 has an invalid length. [ 561.606793][T21169] 8021q: adding VLAN 0 to HW filter on device bond1 [ 561.717187][T21169] geneve2: entered promiscuous mode [ 561.735004][T21169] geneve2: entered allmulticast mode [ 561.760258][ T3309] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 561.778661][ T3309] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 561.811706][ T3309] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 561.843307][T21183] syz_tun: entered allmulticast mode [ 561.873347][T21183] __nla_validate_parse: 7 callbacks suppressed [ 561.873362][T21183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4064'. [ 561.927175][T21182] syz_tun: left allmulticast mode [ 561.997142][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c647400: rx timeout, send abort [ 562.061602][T21206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4069'. [ 562.217694][T21210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4070'. [ 562.222413][T21213] validate_nla: 2 callbacks suppressed [ 562.222449][T21213] netlink: 'syz.4.4071': attribute type 1 has an invalid length. [ 562.254647][T21215] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.384913][T21232] xt_hashlimit: size too large, truncated to 1048576 [ 562.393664][T21223] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4071'. [ 562.445365][T21213] 8021q: adding VLAN 0 to HW filter on device bond2 [ 562.488301][T21229] batadv_slave_0: Caught tx_queue_len zero misconfig [ 562.497160][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c637000: rx timeout, send abort [ 562.506957][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c647400: abort rx timeout. Force session deactivation [ 562.538927][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.862371][T21258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4079'. [ 562.944241][T21260] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 562.957349][T21260] bond2 (unregistering): Released all slaves [ 563.010981][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806c637000: abort rx timeout. Force session deactivation [ 563.054596][T21264] tipc: Enabled bearer , priority 0 [ 563.233677][T21282] SET target dimension over the limit! [ 563.253215][T21284] batadv_slave_1: entered promiscuous mode [ 563.319882][T21286] ipvlan1: entered promiscuous mode [ 563.329505][T21286] ipvlan1: entered allmulticast mode [ 563.334889][T21286] veth0_vlan: entered allmulticast mode [ 563.351912][T21275] batadv_slave_1: left promiscuous mode [ 563.516561][T21295] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4090'. [ 563.543456][T21295] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4090'. [ 563.730295][T21307] Unsupported ieee802154 address type: 0 [ 563.857785][T21315] lo: entered allmulticast mode [ 563.880252][T21315] lo: left allmulticast mode [ 564.036446][T21328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4099'. [ 564.559572][T21354] bond0: Caught tx_queue_len zero misconfig [ 564.579399][T21356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4105'. [ 564.684185][T21361] netlink: 'syz.0.4108': attribute type 1 has an invalid length. [ 564.695484][T21363] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4109'. [ 564.952720][T21377] xt_policy: output policy not valid in PREROUTING and INPUT [ 565.024958][T21380] batadv0: entered promiscuous mode [ 565.046765][T21380] macsec1: entered promiscuous mode [ 565.063815][T21380] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 565.090035][T21380] batadv0: left promiscuous mode [ 566.282633][T21454] bond5: Invalid ad_actor_system MAC address. [ 566.288866][T21454] bond5: option ad_actor_system: invalid value (1) [ 566.298562][T21454] bond5 (unregistering): Released all slaves [ 566.905521][T21505] gtp0: entered promiscuous mode [ 566.916574][T21505] gtp0: entered allmulticast mode [ 567.507124][T21541] __nla_validate_parse: 38 callbacks suppressed [ 567.507141][T21541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4158'. [ 567.591711][T21547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4161'. [ 567.649205][T21549] netlink: 'syz.0.4162': attribute type 2 has an invalid length. [ 567.671042][T21549] netlink: 'syz.0.4162': attribute type 2 has an invalid length. [ 567.681673][T21549] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 567.777759][T21553] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4164'. [ 567.796930][T21557] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20002 [ 567.808959][T21553] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4164'. [ 567.876077][T21562] 8021q: VLANs not supported on ip_vti0 [ 567.963126][T21566] netlink: 'syz.4.4167': attribute type 2 has an invalid length. [ 567.975858][T21568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4168'. [ 567.985325][T21568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4168'. [ 567.996780][T21566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4167'. [ 568.008385][T21568] xt_hashlimit: size too large, truncated to 1048576 [ 568.083464][T21572] netlink: 165 bytes leftover after parsing attributes in process `syz.0.4170'. [ 568.254063][T21581] syzkaller0: entered promiscuous mode [ 568.260062][T21581] syzkaller0: entered allmulticast mode [ 568.269223][T21581] veth1_macvtap: Caught tx_queue_len zero misconfig [ 568.315313][T21578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4171'. [ 568.509064][T21578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4171'. [ 568.873613][T21622] syzkaller0: entered promiscuous mode [ 568.896941][T21622] syzkaller0: entered allmulticast mode [ 570.029872][T21701] netlink: 'syz.0.4208': attribute type 1 has an invalid length. [ 570.065303][T21701] 8021q: adding VLAN 0 to HW filter on device bond2 [ 570.080398][T21700] bond2: (slave veth0_to_bond): making interface the new active one [ 570.091069][T21700] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 572.384562][T21654] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 572.560111][T21710] __nla_validate_parse: 3 callbacks suppressed [ 572.560138][T21710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4212'. [ 572.615396][T21716] netlink: 'syz.3.4211': attribute type 2 has an invalid length. [ 572.654820][T21720] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 572.665063][T21720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.668026][T21715] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4213'. [ 572.704858][T21716] : entered promiscuous mode [ 572.719469][T21715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4213'. [ 572.917798][T21732] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 573.041881][T21740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4219'. [ 573.068392][T21740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4219'. [ 573.115552][T21745] netlink: 'syz.1.4220': attribute type 11 has an invalid length. [ 573.737662][T21777] bond2: entered allmulticast mode [ 573.853349][T21797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4233'. [ 573.943256][T21799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4236'. [ 573.963449][T21797] bond3: Invalid ad_actor_system MAC address. [ 573.970532][T21797] bond3: option ad_actor_system: invalid value (1) [ 573.986231][T21797] bond3 (unregistering): Released all slaves [ 574.062580][T21804] netlink: 'syz.1.4237': attribute type 30 has an invalid length. [ 574.162834][T21807] bridge_slave_0: default FDB implementation only supports local addresses [ 574.465198][T21832] netlink: 'syz.1.4246': attribute type 10 has an invalid length. [ 574.486190][T21832] batman_adv: batadv0: Removing interface: dummy0 [ 574.525078][T21832] team0: Port device dummy0 added [ 574.609527][T21839] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4248'. [ 574.661630][T21839] gretap0: left allmulticast mode [ 574.669649][T21839] gretap0: left promiscuous mode [ 574.674850][T21839] bridge0: port 3(gretap0) entered disabled state [ 574.700587][T21839] team0: Port device dummy0 removed [ 574.711974][T21839] bridge_slave_0: left allmulticast mode [ 574.719541][T21839] bridge_slave_0: left promiscuous mode [ 574.725279][T21839] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.734842][T21839] bridge_slave_1: left allmulticast mode [ 574.741362][T21839] bridge_slave_1: left promiscuous mode [ 574.747644][T21839] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.759633][T21839] bond0: (slave veth0_to_bond): Releasing backup interface [ 574.777324][T21839] bond0: (slave bond_slave_0): Releasing backup interface [ 574.793034][T21839] bond0: (slave bond_slave_1): Releasing backup interface [ 574.817733][T21839] team0: Port device team_slave_0 removed [ 574.832824][T21839] team0: Port device team_slave_1 removed [ 574.850921][T21839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.859036][T21839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.868579][T21839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.876553][T21839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.885134][T21839] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 575.422099][T21866] netlink: 'syz.1.4254': attribute type 1 has an invalid length. [ 575.458644][T21866] bond6: (slave gretap2): making interface the new active one [ 575.466985][T21866] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 576.751015][T21784] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 576.920857][T21875] x_tables: duplicate entry at hook 3 [ 577.004816][T21879] dvmrp0: entered allmulticast mode [ 577.171230][T21894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4263'. [ 577.212889][T21894] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4263'. [ 577.700266][T21926] nbd: must specify at least one socket [ 577.749086][T21913] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 577.764036][T21913] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 577.777780][T21913] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 578.027267][T21939] "syz.1.4279" (21939) uses obsolete ecb(arc4) skcipher [ 578.083435][T21939] team0: Port device syz_tun added [ 578.101008][T21942] __nla_validate_parse: 3 callbacks suppressed [ 578.101022][T21942] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4280'. [ 578.119968][T21944] netlink: 'syz.1.4279': attribute type 1 has an invalid length. [ 578.132288][T21939] sctp: [Deprecated]: syz.1.4279 (pid 21939) Use of int in max_burst socket option deprecated. [ 578.132288][T21939] Use struct sctp_assoc_value instead [ 578.155291][T21942] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4280'. [ 578.199140][T21942] gretap0: entered promiscuous mode [ 578.217443][T21942] gretap0: left promiscuous mode [ 578.347958][T21961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4281'. [ 578.439238][T21961] team0: Port device team_slave_0 removed [ 578.950048][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805bfce800: rx timeout, send abort [ 578.959324][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805bfce800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 579.177876][T21977] infiniband syz0: set down [ 579.183199][T21977] infiniband syz0: added ipvlan0 [ 579.204868][T21977] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 579.220507][T21977] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 579.238668][T21977] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 579.264505][T21977] RDS/IB: syz0: added [ 579.271076][T21977] smc: adding ib device syz0 with port count 1 [ 579.278119][T21977] smc: ib device syz0 port 1 has no pnetid [ 579.980204][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 581.075253][T21943] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 581.276273][T21994] netlink: 'syz.1.4292': attribute type 1 has an invalid length. [ 581.354116][T22002] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4290'. [ 581.625254][T21994] bond7: entered promiscuous mode [ 581.631997][T21994] 8021q: adding VLAN 0 to HW filter on device bond7 [ 581.714640][T22008] 8021q: adding VLAN 0 to HW filter on device bond7 [ 581.744506][T22008] bond7: (slave vti0): The slave device specified does not support setting the MAC address [ 581.757411][T22008] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 581.770527][T22008] bond7: (slave vti0): making interface the new active one [ 581.778623][T22008] vti0: entered promiscuous mode [ 581.787151][T22008] vti0: left promiscuous mode [ 581.922270][T22031] netlink: 'syz.4.4298': attribute type 1 has an invalid length. [ 581.931425][T22032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4297'. [ 583.494522][T22031] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 583.698189][T22046] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 583.754555][T22049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4302'. [ 583.799375][T22049] vlan2: entered promiscuous mode [ 583.804683][T22049] gretap0: entered promiscuous mode [ 583.819828][T22053] netlink: 'syz.1.4304': attribute type 4 has an invalid length. [ 583.830101][ T5792] IPVS: starting estimator thread 0... [ 583.852913][T22053] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4304'. [ 583.929114][T22054] IPVS: using max 30 ests per chain, 72000 per kthread [ 584.146340][T22078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4311'. [ 584.251516][T22086] openvswitch: netlink: Message has 4 unknown bytes. [ 584.258610][T22086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.494411][T22099] netlink: 'syz.4.4317': attribute type 13 has an invalid length. [ 584.566396][ T24] IPVS: starting estimator thread 0... [ 584.667657][T22105] IPVS: using max 29 ests per chain, 69600 per kthread [ 584.834023][T22103] bond3: down delay (2) is not a multiple of miimon (10944514), value rounded to 0 ms [ 585.120711][T22137] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4325'. [ 585.133171][T22144] netlink: zone id is out of range [ 585.141047][T22144] netlink: zone id is out of range [ 585.149466][T22144] netlink: zone id is out of range [ 585.163793][T22144] netlink: zone id is out of range [ 585.174004][T22144] netlink: zone id is out of range [ 585.185432][T22144] netlink: zone id is out of range [ 585.199454][T22144] netlink: zone id is out of range [ 585.479294][T22162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4329'. [ 585.629107][T22169] netlink: 'syz.3.4332': attribute type 11 has an invalid length. [ 585.654860][T22169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4332'. [ 585.692287][T22169] netlink: 'syz.3.4332': attribute type 11 has an invalid length. [ 585.711465][T22169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4332'. [ 585.722409][T22177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4335'. [ 585.769740][T22177] bond9: Invalid ad_actor_system MAC address. [ 585.776269][T22177] bond9: option ad_actor_system: invalid value (1) [ 585.834843][T22177] bond9 (unregistering): Released all slaves [ 586.049729][T22181] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4336'. [ 586.182971][T22201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4339'. [ 586.740358][T22243] netlink: 'syz.2.4352': attribute type 10 has an invalid length. [ 586.813025][T22251] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 587.647966][T22305] syzkaller0: entered promiscuous mode [ 587.669172][T22305] syzkaller0: entered allmulticast mode [ 587.707553][T22316] netlink: 'syz.2.4365': attribute type 1 has an invalid length. [ 587.901894][T22322] pim6reg527: entered allmulticast mode [ 588.334006][ T5287] veth1_macvtap: left promiscuous mode [ 588.667100][T22364] siw: device registration error -23 [ 588.749946][T22373] netlink: 'syz.1.4384': attribute type 4 has an invalid length. [ 588.974852][T22386] macsec1: entered allmulticast mode [ 589.008128][T22393] netlink: 'syz.2.4386': attribute type 1 has an invalid length. [ 589.020055][T22386] bond0: entered allmulticast mode [ 589.053690][T22386] bond_slave_0: entered allmulticast mode [ 589.095931][T22386] bond_slave_1: entered allmulticast mode [ 589.134620][T22386] bond_slave_0: entered promiscuous mode [ 589.141533][T22386] bond_slave_1: entered promiscuous mode [ 589.168680][T22405] ieee802154 phy0 wpan0: encryption failed: -22 [ 589.181609][T22386] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 589.210019][T22386] bond0: left allmulticast mode [ 589.217954][T22386] bond_slave_0: left allmulticast mode [ 589.229892][T22386] bond_slave_1: left allmulticast mode [ 589.263610][ T24] bond_slave_0: left promiscuous mode [ 589.270235][ T24] bond_slave_1: left promiscuous mode [ 589.392046][T22402] 8021q: adding VLAN 0 to HW filter on device bond5 [ 589.429778][T22402] bond4: (slave bond5): making interface the new active one [ 589.443837][T22402] bond4: (slave bond5): Enslaving as an active interface with an up link [ 589.471649][T22406] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 589.489200][T22413] netlink: 'syz.4.4389': attribute type 4 has an invalid length. [ 589.658967][T22429] net_ratelimit: 494 callbacks suppressed [ 589.658979][T22429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.686812][T22444] gretap0: entered promiscuous mode [ 590.693896][T22444] __nla_validate_parse: 10 callbacks suppressed [ 590.693907][T22444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4397'. [ 590.710534][T22444] gretap0: left promiscuous mode [ 590.768663][T22447] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4398'. [ 590.948578][T22452] syzkaller0: entered promiscuous mode [ 590.954085][T22452] syzkaller0: entered allmulticast mode [ 591.735715][T22373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 591.905194][T22458] netlink: 'syz.4.4401': attribute type 17 has an invalid length. [ 591.942994][T22461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4403'. [ 591.947769][T22458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4401'. [ 591.971110][T22458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4401'. [ 593.495142][T22457] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.508735][T22457] bridge_slave_0 (unregistering): left allmulticast mode [ 593.516172][T22457] bridge_slave_0 (unregistering): left promiscuous mode [ 593.523167][T22457] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.922201][T22489] openvswitch: netlink: Missing key (keys=40, expected=100) [ 594.002050][T22501] Unsupported ieee802154 address type: 0 [ 594.098896][T22507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4417'. [ 594.131241][T22507] netlink: 'syz.0.4417': attribute type 1 has an invalid length. [ 594.313891][T22524] siw: device registration error -23 [ 594.549545][T22536] netlink: zone id is out of range [ 595.016437][T22571] team_slave_1: mtu less than device minimum [ 595.272709][T22584] bridge0: port 1(veth1_to_bridge) entered blocking state [ 595.284999][T22584] bridge0: port 1(veth1_to_bridge) entered disabled state [ 595.293362][T22584] veth1_to_bridge: entered allmulticast mode [ 595.301383][T22584] veth1_to_bridge: entered promiscuous mode [ 595.308215][T22584] bridge0: port 1(veth1_to_bridge) entered blocking state [ 595.315477][T22584] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 595.547305][T22600] netlink: 'syz.0.4446': attribute type 2 has an invalid length. [ 595.563501][T22598] netlink: 'syz.4.4444': attribute type 13 has an invalid length. [ 595.727982][T22602] syzkaller0: entered promiscuous mode [ 595.733647][T22602] syzkaller0: entered allmulticast mode [ 598.077590][T22658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4460'. [ 598.120050][T22662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4461'. [ 598.208067][T22663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4461'. [ 598.388033][T22683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'. [ 598.424523][T22683] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4465'. [ 598.464409][T22683] bridge0: port 1(veth1_to_bridge) entered disabled state [ 598.582487][T22699] netlink: 'syz.2.4469': attribute type 9 has an invalid length. [ 598.641126][T22701] xt_CT: You must specify a L4 protocol and not use inversions on it [ 598.998412][T22710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4474'. [ 599.759079][T22734] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4480'. [ 599.797575][T22734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4480'. [ 599.840034][T22734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4480'. [ 600.027885][T22723] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.073492][T22723] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.102208][T22723] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 600.366706][T22723] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.406269][T22723] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.468734][T22723] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 600.762866][T22723] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.798741][T22723] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.866733][T22723] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 601.060555][T22801] vlan2: entered allmulticast mode [ 601.078473][T22801] veth1_virt_wifi: entered allmulticast mode [ 601.123731][T22806] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4496'. [ 601.390430][T21451] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.431258][T21451] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 601.449898][T22832] siw: device registration error -23 [ 601.464475][T21451] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 601.568008][T21451] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.587144][T21451] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 601.606252][T21451] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 601.767833][T21451] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.792990][T21451] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 601.821356][T21451] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 601.870531][T21451] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.910165][T21451] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 601.942266][T21451] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 603.551639][T22916] __nla_validate_parse: 5 callbacks suppressed [ 603.551657][T22916] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4523'. [ 603.607532][T22916] IPv6: NLM_F_CREATE should be specified when creating new route [ 603.632754][T22916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 603.640058][T22916] IPv6: NLM_F_CREATE should be set when creating new route [ 603.910733][T22930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4526'. [ 604.078924][T22929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4525'. [ 604.587335][T22956] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4532'. [ 604.671122][T22960] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 604.692830][T22962] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4534'. [ 604.713749][T22960] netlink: 'syz.4.4533': attribute type 1 has an invalid length. [ 604.780990][T22960] bond4: entered promiscuous mode [ 604.790603][T22960] 8021q: adding VLAN 0 to HW filter on device bond4 [ 604.870195][T22960] 8021q: adding VLAN 0 to HW filter on device bond4 [ 604.911945][T22960] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 604.993370][T22960] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 605.056867][T22960] bond4: (slave ip6gre1): making interface the new active one [ 605.100373][T22960] ip6gre1: entered promiscuous mode [ 605.140382][T22960] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 605.193458][T22987] netlink: 'syz.3.4541': attribute type 2 has an invalid length. [ 605.230190][T22974] syzkaller1: entered promiscuous mode [ 605.237398][T22974] syzkaller1: entered allmulticast mode [ 605.251702][T22989] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 605.259793][T22987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4541'. [ 605.495066][T22991] bond9: option arp_all_targets: invalid value (18446744073709551613) [ 605.574260][T22991] bond9 (unregistering): Released all slaves [ 605.991540][T23021] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 606.020952][T23021] bond5: option packets_per_slave: allowed values 0 - 65535 [ 606.050386][T23021] bond5 (unregistering): Released all slaves [ 606.127348][T23015] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4547'. [ 606.714368][T23053] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4556'. [ 606.830663][T23057] IPv6: NLM_F_CREATE should be specified when creating new route [ 606.914506][T23061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4559'. [ 607.202063][T23077] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4565'. [ 607.257315][T23074] netlink: 'syz.1.4563': attribute type 9 has an invalid length. [ 607.292289][T23074] netlink: 'syz.1.4563': attribute type 6 has an invalid length. [ 607.429359][T23084] netlink: 'syz.0.4567': attribute type 1 has an invalid length. [ 607.454716][T23087] netlink: 'syz.2.4569': attribute type 12 has an invalid length. [ 608.337817][T23122] bond0: Caught tx_queue_len zero misconfig [ 608.786541][T23143] batadv0: entered promiscuous mode [ 608.813076][T23143] macsec1: entered promiscuous mode [ 608.834490][T23143] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 608.879252][T23143] batadv0: left promiscuous mode [ 609.303324][T23170] __nla_validate_parse: 1 callbacks suppressed [ 609.303342][T23170] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4592'. [ 609.326610][T23170] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4592'. [ 609.389789][T23173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4594'. [ 609.416286][T23170] netlink: 'syz.4.4592': attribute type 4 has an invalid length. [ 609.444926][T23170] netlink: 'syz.4.4592': attribute type 3 has an invalid length. [ 609.463267][T23173] vlan4: entered allmulticast mode [ 609.469622][T23173] veth1_virt_wifi: entered allmulticast mode [ 609.483191][T23170] IPv6: NLM_F_CREATE should be specified when creating new route [ 609.733855][T23189] lo: entered allmulticast mode [ 609.825193][T23182] bond9: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 609.937136][T23182] bond9 (unregistering): Released all slaves [ 610.088145][T23184] lo: left allmulticast mode [ 610.179910][T23208] netlink: 'syz.0.4603': attribute type 2 has an invalid length. [ 610.278291][T23212] erspan0: entered promiscuous mode [ 610.310119][T23212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4604'. [ 610.336262][T23214] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4605'. [ 610.534350][T23225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4609'. [ 610.677351][T23231] vlan4: entered allmulticast mode [ 610.724577][T23231] bond0: entered allmulticast mode [ 610.754856][T23231] bond_slave_0: entered allmulticast mode [ 610.773232][T23231] bond_slave_1: entered allmulticast mode [ 613.440420][T23271] netlink: 'syz.1.4623': attribute type 1 has an invalid length. [ 613.909520][T23294] netlink: 420 bytes leftover after parsing attributes in process `syz.4.4628'. [ 614.278281][T13102] syz0: Port: 1 Link ACTIVE [ 614.417920][T23305] xt_CT: No such helper "snmp_trap" [ 614.620949][T23315] syzkaller1: entered promiscuous mode [ 614.633976][T23315] syzkaller1: entered allmulticast mode [ 614.798993][T23317] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4637'. [ 615.214234][T23339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4640'. [ 615.825819][ T5642] Bluetooth: hci4: command 0x0406 tx timeout [ 615.980069][T23379] netlink: 'syz.2.4651': attribute type 1 has an invalid length. [ 616.173001][T23379] bond6: entered promiscuous mode [ 616.208321][T23379] 8021q: adding VLAN 0 to HW filter on device bond6 [ 616.288166][T23394] SET target dimension over the limit! [ 616.322928][T23395] SET target dimension over the limit! [ 616.331224][T23381] bond6: (slave bridge3): making interface the new active one [ 616.341569][T23381] bridge3: entered promiscuous mode [ 616.351636][T23381] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 616.373277][T23391] wg2: Caught tx_queue_len zero misconfig [ 616.905130][T23420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4662'. [ 616.943990][T23420] netlink: 'syz.1.4662': attribute type 10 has an invalid length. [ 616.994556][T23420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4662'. [ 617.061531][T23432] IPVS: set_ctl: invalid protocol: 4 100.1.1.0:20004 [ 617.071856][T23420] geneve2: entered promiscuous mode [ 617.077956][T23420] geneve2: entered allmulticast mode [ 617.286602][T23436] syzkaller0: entered promiscuous mode [ 617.309111][T23436] syzkaller0: entered allmulticast mode [ 617.648744][T23463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4673'. [ 617.678069][T23463] vcan0 (unregistering): left allmulticast mode [ 617.945078][T23471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4675'. [ 618.104817][T23481] sctp: [Deprecated]: syz.4.4678 (pid 23481) Use of int in maxseg socket option. [ 618.104817][T23481] Use struct sctp_assoc_value instead [ 618.142670][T23471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4675'. [ 618.312524][T23480] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 618.392746][T23471] bond4: entered promiscuous mode [ 618.438008][T23471] bridge1: entered promiscuous mode [ 618.484626][T23471] bond4: entered allmulticast mode [ 618.530434][T23471] bridge1: entered allmulticast mode [ 618.565503][T23471] 8021q: adding VLAN 0 to HW filter on device bond4 [ 618.824505][T23506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4683'. [ 618.886810][T23506] erspan0: entered promiscuous mode [ 619.373583][T23544] netlink: 'syz.1.4692': attribute type 1 has an invalid length. [ 619.383111][T23544] netlink: 'syz.1.4692': attribute type 4 has an invalid length. [ 619.392495][T23544] netlink: 9491 bytes leftover after parsing attributes in process `syz.1.4692'. [ 619.818608][T23554] syzkaller0: entered promiscuous mode [ 619.824189][T23554] syzkaller0: entered allmulticast mode [ 620.002253][T23561] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4697'. [ 620.012778][T23557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4696'. [ 620.025427][T23561] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.042376][T23561] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4697'. [ 620.052713][T23561] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.060538][T23561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.079934][T23561] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4697'. [ 620.090801][T23561] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.112488][T23538] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 620.286919][T23564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4698'. [ 620.361517][T23567] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4699'. [ 620.584993][T23578] netlink: 'syz.2.4703': attribute type 21 has an invalid length. [ 620.613174][T23576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4702'. [ 620.629532][T23578] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4703'. [ 620.658823][T23576] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4702'. [ 620.673769][T23578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4703'. [ 621.002050][T23596] netlink: 'syz.2.4709': attribute type 6 has an invalid length. [ 621.344003][T23618] vcan0: entered promiscuous mode [ 621.393428][T23618] vcan0: entered allmulticast mode [ 621.557089][T23624] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 621.955406][T23640] xt_hashlimit: size too large, truncated to 1048576 [ 621.985046][T23641] netlink: 'syz.2.4721': attribute type 1 has an invalid length. [ 622.331519][T23641] netlink: 'syz.2.4721': attribute type 1 has an invalid length. [ 622.372910][T23648] 8021q: adding VLAN 0 to HW filter on device bond8 [ 622.382534][T23648] bond7: (slave bond8): making interface the new active one [ 622.390665][T23648] bond7: (slave bond8): Enslaving as an active interface with an up link [ 622.416419][T23661] team0: Caught tx_queue_len zero misconfig [ 622.484449][T23662] 8021q: adding VLAN 0 to HW filter on device bond7 [ 623.035001][T23699] netlink: 'syz.4.4731': attribute type 10 has an invalid length. [ 623.091079][T23699] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.111856][T23699] bond0: (slave team0): Enslaving as an active interface with an up link [ 623.261984][ T10] IPVS: starting estimator thread 0... [ 623.292517][T23702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 623.380288][T23710] IPVS: using max 29 ests per chain, 69600 per kthread [ 623.634016][T23715] tipc: Resetting bearer [ 623.644207][T23715] tipc: Resetting bearer [ 623.967578][T23740] netlink: 'syz.1.4748': attribute type 12 has an invalid length. [ 623.981836][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.030902][T23739] bridge_slave_1: left promiscuous mode [ 624.051988][T23739] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.085098][T23739] bridge_slave_0: left allmulticast mode [ 624.091428][T23739] bridge_slave_0: left promiscuous mode [ 624.097523][T23739] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.301190][T23747] 8021q: adding VLAN 0 to HW filter on device bond10 [ 624.339661][T23747] bond10 (unregistering): Released all slaves [ 624.922123][T23774] xfrm1: entered allmulticast mode [ 625.004576][T23783] xfrm1: entered promiscuous mode [ 625.031279][T23784] __nla_validate_parse: 16 callbacks suppressed [ 625.031295][T23784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4761'. [ 625.042941][T23783] xfrm1: entered allmulticast mode [ 625.156778][T23788] netlink: 'syz.0.4762': attribute type 21 has an invalid length. [ 625.164770][T23788] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4762'. [ 625.174938][T23788] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4762'. [ 625.213367][T23792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4763'. [ 625.262877][T23792] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4763'. [ 625.791775][T23813] xt_CT: No such helper "snmp" [ 626.209788][T23841] lo: entered allmulticast mode [ 626.257040][T23841] tunl0: entered allmulticast mode [ 626.288583][T23841] gre0: entered allmulticast mode [ 626.334056][T23841] gretap0: entered allmulticast mode [ 626.372723][T23841] erspan0: left promiscuous mode [ 626.392194][T23841] erspan0: entered allmulticast mode [ 626.409387][T23841] ip_vti0: entered allmulticast mode [ 626.428427][T23841] ip6_vti0: entered allmulticast mode [ 626.448928][T23841] sit0: entered allmulticast mode [ 626.483694][T23841] ip6tnl0: entered allmulticast mode [ 626.497840][T23841] ip6gre0: entered allmulticast mode [ 626.527385][T23841] syz_tun: entered allmulticast mode [ 626.560567][T23840] syzkaller1: entered promiscuous mode [ 626.589283][T23840] syzkaller1: entered allmulticast mode [ 626.729333][T23862] netlink: 'syz.3.4780': attribute type 1 has an invalid length. [ 626.799504][T23865] xt_hashlimit: size too large, truncated to 1048576 [ 627.022155][T23862] 8021q: adding VLAN 0 to HW filter on device bond5 [ 627.060836][T23862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4780'. [ 627.119162][T23868] 8021q: adding VLAN 0 to HW filter on device bond5 [ 627.153393][T23868] bond5: (slave gre2): The slave device specified does not support setting the MAC address [ 627.170858][T23868] bond5: (slave gre2): Error -95 calling set_mac_address [ 627.267470][T23872] gretap1: entered promiscuous mode [ 627.293438][T23872] bond5: (slave gretap1): making interface the new active one [ 627.302832][T23872] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 627.315344][T23862] 8021q: adding VLAN 0 to HW filter on device bond5 [ 627.359910][T23862] macvlan2: entered promiscuous mode [ 627.367482][T23862] macvlan2: entered allmulticast mode [ 627.376602][T23862] bond5: entered promiscuous mode [ 627.386063][T23862] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 627.443282][T23862] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 627.472144][T23862] bond5: left promiscuous mode [ 627.813069][T23911] netlink: 'syz.4.4794': attribute type 1 has an invalid length. [ 627.853507][T23915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4795'. [ 627.878327][T23915] syzkaller0: entered promiscuous mode [ 627.885269][T23915] syzkaller0: entered allmulticast mode [ 628.150678][T23931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4799'. [ 628.213724][T23931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4799'. [ 628.577997][T23952] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4803'. [ 629.013832][T23978] x_tables: duplicate underflow at hook 1 [ 630.801385][T23915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 630.811551][T23979] netlink: 'syz.4.4811': attribute type 4 has an invalid length. [ 631.036314][T23995] __nla_validate_parse: 1 callbacks suppressed [ 631.036364][T23995] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4815'. [ 631.446912][T24019] atomic_op ffff88803aee3198 conn xmit_atomic 0000000000000000 [ 631.791732][T24036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4824'. [ 631.814931][T24036] netlink: 'syz.0.4824': attribute type 5 has an invalid length. [ 631.854259][T24036] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4824'. [ 631.913784][T24039] netlink: 'syz.4.4825': attribute type 1 has an invalid length. [ 631.967536][T24036] geneve2: entered promiscuous mode [ 631.988396][T24036] geneve2: entered allmulticast mode [ 632.012079][T22182] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 632.031312][T22182] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 632.062112][T22182] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 632.091095][T22182] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 632.350625][T24053] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4828'. [ 632.672788][T24077] xt_socket: unknown flags 0x8 [ 632.680544][T24077] veth1_to_bond: entered allmulticast mode [ 632.694014][T24078] veth1_to_bond: entered promiscuous mode [ 632.712560][T24078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4838'. [ 633.140163][T24078] veth1_to_bond (unregistering): left allmulticast mode [ 633.159271][T24078] veth1_to_bond (unregistering): left promiscuous mode [ 633.277460][T24078] bond0: (slave bond_slave_1): Releasing backup interface [ 633.349129][T24091] netlink: 'syz.1.4840': attribute type 18 has an invalid length. [ 633.377475][ T3309] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.417076][ T3309] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.454699][ T3309] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.502631][ T3309] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.672123][T24100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4843'. [ 633.725145][T24098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4842'. [ 633.988821][T24113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4848'. [ 634.121372][T24118] block nbd1: NBD_DISCONNECT [ 634.139497][T24118] block nbd1: Send disconnect failed -32 [ 634.173363][T24118] block nbd1: Send disconnect failed -32 [ 634.371981][T24127] netlink: 'syz.2.4852': attribute type 15 has an invalid length. [ 634.402044][T24127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4852'. [ 634.428273][T24127] netlink: 'syz.2.4852': attribute type 15 has an invalid length. [ 634.459735][T24127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4852'. [ 634.626909][T24138] tipc: Trying to set illegal importance in message [ 634.753932][T24131] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.797630][T24131] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.920912][T24149] netlink: 'syz.4.4859': attribute type 4 has an invalid length. [ 635.118261][T24137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.131925][T24137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.493065][T24131] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.540299][T24157] netlink: 'syz.2.4860': attribute type 1 has an invalid length. [ 635.549004][T24131] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.603699][ T82] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.624156][ T82] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.718855][T24164] netlink: 'syz.4.4864': attribute type 83 has an invalid length. [ 635.747434][T24165] netlink: 'syz.4.4864': attribute type 5 has an invalid length. [ 635.755295][T24164] netlink: 'syz.4.4864': attribute type 5 has an invalid length. [ 635.763697][T24157] 8021q: adding VLAN 0 to HW filter on device bond10 [ 635.837366][T24131] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.849851][T24131] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.868241][ T82] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.877353][ T82] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.888180][ T82] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.908050][ T82] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.927533][ T82] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.939167][ T82] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.049282][T24131] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.088500][T24131] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.329642][T24179] __nla_validate_parse: 2 callbacks suppressed [ 636.329660][T24179] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4869'. [ 636.555046][T22197] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.568747][T22197] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.608025][T22197] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.629002][T22197] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.692453][ T82] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.703080][ T82] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.788082][T21451] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.801449][T21451] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.255102][T24202] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4875'. [ 637.620576][T24211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 637.686718][T24229] sch_tbf: peakrate 3 is lower than or equals to rate 7 ! [ 637.824391][T24233] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4885'. [ 637.838000][T24234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.849122][T24233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.867857][T24233] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4885'. [ 638.050027][T24241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4887'. [ 638.063599][T24241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4887'. [ 638.267302][T24249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 638.582991][T24262] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.599327][T24262] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 638.610745][T24262] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 638.623712][T24265] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4895'. [ 638.750443][T24262] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.771348][T24269] validate_nla: 64 callbacks suppressed [ 638.771363][T24269] netlink: 'syz.2.4897': attribute type 2 has an invalid length. [ 638.785409][T24262] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 638.797436][T24269] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4897'. [ 638.807692][T24262] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 638.881938][T24262] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 638.892224][T24262] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 638.923542][T24262] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 638.960037][T24276] netlink: 'syz.2.4899': attribute type 3 has an invalid length. [ 639.005169][T24262] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.026395][T24262] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 639.062531][T24262] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 639.367160][T24295] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4905'. [ 639.391406][T22197] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.413564][T22197] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 639.441302][T22197] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 639.505517][ T82] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.518116][ T82] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 639.537558][ T82] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 639.614253][T21451] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.628512][T21451] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 639.651964][T21451] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 639.679043][T24309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4907'. [ 639.747400][T21451] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.793207][T21451] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 639.809028][T24315] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 639.852186][T21451] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 640.049331][T24321] netlink: 'syz.2.4910': attribute type 11 has an invalid length. [ 640.311373][T24338] netlink: 'syz.2.4917': attribute type 1 has an invalid length. [ 640.397521][T24349] sctp: [Deprecated]: syz.1.4921 (pid 24349) Use of struct sctp_assoc_value in delayed_ack socket option. [ 640.397521][T24349] Use struct sctp_sack_info instead [ 640.453664][T24338] bond11: entered promiscuous mode [ 640.467189][T24338] 8021q: adding VLAN 0 to HW filter on device bond11 [ 640.555280][T24338] bond11: (slave bridge4): making interface the new active one [ 640.597355][T24338] bridge4: entered promiscuous mode [ 640.619850][T24338] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 640.706499][T24364] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 641.217061][T24396] netlink: 'syz.0.4933': attribute type 2 has an invalid length. [ 641.639262][T24425] __nla_validate_parse: 6 callbacks suppressed [ 641.639280][T24425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4943'. [ 641.712246][T24432] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4945'. [ 641.877377][T24437] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.894502][T24439] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4946'. [ 641.914601][T24437] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 641.927560][T24437] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 641.959492][T24435] mac80211_hwsim hwsim39 syzkaller0: Caught tx_queue_len zero misconfig [ 642.073930][T24437] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.094066][T24437] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 642.113081][T24437] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 642.162474][T24447] team_slave_0: Caught tx_queue_len zero misconfig [ 642.211459][T24437] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.242966][T24437] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 642.263289][T24454] nbd: couldn't find device at index 0 [ 642.271825][T24437] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 642.350001][T24456] tipc: Enabling of bearer rejected, failed to enable media [ 642.360097][T24458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4955'. [ 642.408420][T24437] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.424085][T24437] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 642.436669][T24437] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 642.838244][T24483] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4962'. [ 642.962998][T24494] netlink: 'syz.4.4968': attribute type 2 has an invalid length. [ 642.973145][T24494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4968'. [ 642.982734][T24492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4967'. [ 643.225472][T24515] netlink: 'syz.1.4974': attribute type 1 has an invalid length. [ 643.431108][ T29] audit: type=1107 audit(1783236468.018:15): pid=24531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 643.547271][T24535] tipc: Resetting bearer [ 643.662998][T24544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4978'. [ 643.679650][T24544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4978'. [ 643.699288][ T55] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.710436][ T55] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.722096][ T55] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.738177][T24550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4981'. [ 643.833744][ T55] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.941445][ T82] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.953476][ T82] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 643.971681][ T82] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 644.029432][ T82] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.049725][ T82] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 644.066182][ T82] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 644.155304][ T82] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.174881][ T82] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 644.185041][ T82] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 644.224944][T22197] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.251000][T24575] netlink: 'syz.0.4988': attribute type 1 has an invalid length. [ 644.256561][T22197] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 644.277478][T22197] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 644.344250][T24586] netlink: 'syz.2.4991': attribute type 1 has an invalid length. [ 644.408006][T24575] bond3: entered promiscuous mode [ 644.413595][T24575] 8021q: adding VLAN 0 to HW filter on device bond3 [ 644.460696][T24584] ipvlan2: entered allmulticast mode [ 644.466668][T24584] bond3: entered allmulticast mode [ 644.496241][T24590] bond3: (slave bridge0): making interface the new active one [ 644.503983][T24590] bridge0: entered promiscuous mode [ 644.509552][T24590] bridge0: entered allmulticast mode [ 644.518429][T24590] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 644.648896][T24602] netlink: 'syz.4.4994': attribute type 3 has an invalid length. [ 644.665202][T24602] netlink: 'syz.4.4994': attribute type 12 has an invalid length. [ 644.673871][T24602] netlink: 'syz.4.4994': attribute type 11 has an invalid length. [ 644.689737][T24605] netlink: 'syz.2.4996': attribute type 75 has an invalid length. [ 645.126921][T24645] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 645.135107][T24629] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.147965][T24646] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 645.302019][T24656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.367741][T24629] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.412396][T24660] netlink: 'syz.1.5011': attribute type 9 has an invalid length. [ 645.523286][T24663] macsec1: entered promiscuous mode [ 645.551802][T24629] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.670475][T24629] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.939245][T21451] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.032243][T24687] netlink: 'syz.1.5018': attribute type 1 has an invalid length. [ 646.053472][ T55] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.079325][T24687] netlink: 'syz.1.5018': attribute type 3 has an invalid length. [ 646.140396][T22197] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.231776][ T55] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.543377][T24715] bridge5: port 1(veth5) entered blocking state [ 646.553609][T24715] bridge5: port 1(veth5) entered disabled state [ 646.563704][T24715] veth5: entered allmulticast mode [ 646.579515][T24715] veth5: entered promiscuous mode [ 646.599562][T24718] bridge5: port 2(veth0_to_bond) entered blocking state [ 646.626342][T24718] bridge5: port 2(veth0_to_bond) entered disabled state [ 646.639373][T24718] veth0_to_bond: entered allmulticast mode [ 646.674320][T24718] veth0_to_bond: entered promiscuous mode [ 646.706913][T21451] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 646.797890][T24732] __nla_validate_parse: 10 callbacks suppressed [ 646.797906][T24732] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5032'. [ 647.049902][T24746] netlink: 'syz.3.5036': attribute type 9 has an invalid length. [ 647.318218][T24753] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5038'. [ 649.524785][T24717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 649.725250][T24766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5043'. [ 649.780052][T24774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5043'. [ 649.938284][T24783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5047'. [ 649.973889][T24783] netlink: 'syz.2.5047': attribute type 10 has an invalid length. [ 650.005222][T24783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5047'. [ 650.023116][T24788] Unsupported ieee802154 address type: 0 [ 650.036174][T24783] geneve2: entered promiscuous mode [ 650.045114][T24783] geneve2: entered allmulticast mode [ 650.051255][T24791] Unsupported ieee802154 address type: 0 [ 650.057063][T24790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5049'. [ 650.072809][ T55] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.086253][ T55] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.198913][ T55] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.448808][ T55] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.506824][T24817] netlink: 'syz.0.5056': attribute type 21 has an invalid length. [ 650.538624][T24817] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5056'. [ 650.605100][T24821] netlink: 'syz.1.5058': attribute type 24 has an invalid length. [ 650.629297][T24822] netlink: 'syz.3.5057': attribute type 58 has an invalid length. [ 650.645870][T24822] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5057'. [ 650.667936][T24825] ip6t_REJECT: ECHOREPLY is not supported [ 650.790827][T24834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5059'. [ 650.982787][T24846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.103306][T24846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.371238][T24869] xt_TCPMSS: Only works on TCP SYN packets [ 651.475767][T24869] tipc: Enabling of bearer rejected, failed to enable media [ 652.739575][T24925] __nla_validate_parse: 4 callbacks suppressed [ 652.739591][T24925] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5081'. [ 653.539113][T24930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5083'. [ 654.536277][T24881] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 654.731228][T24944] netlink: 'syz.4.5087': attribute type 1 has an invalid length. [ 654.746414][T24945] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5086'. [ 654.768333][T24948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5089'. [ 654.825839][T24944] 8021q: adding VLAN 0 to HW filter on device bond6 [ 654.839304][T24955] veth0_to_bond: left allmulticast mode [ 654.875516][T24955] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 654.917471][T24944] macvlan2: entered promiscuous mode [ 654.924194][T24944] macvlan2: entered allmulticast mode [ 654.933352][T24944] bond6: entered promiscuous mode [ 654.940550][T24944] veth0_to_bond: entered promiscuous mode [ 654.949100][T24944] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 654.969896][T24944] bond6: left promiscuous mode [ 654.976852][T24944] veth0_to_bond: left promiscuous mode [ 655.117962][T24971] netlink: 'syz.0.5093': attribute type 1 has an invalid length. [ 655.132867][T24971] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5093'. [ 655.158247][T24969] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5092'. [ 655.173612][T24971] netlink: 'syz.0.5093': attribute type 1 has an invalid length. [ 655.260795][T24979] netlink: 'syz.4.5096': attribute type 12 has an invalid length. [ 655.581193][T25000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5102'. [ 655.596592][T25000] netlink: 'syz.0.5102': attribute type 3 has an invalid length. [ 655.607265][T25001] netlink: 'syz.4.5101': attribute type 1 has an invalid length. [ 655.624376][T25001] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 655.761947][T25009] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5103'. [ 655.848608][T25017] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5104'. [ 655.896018][T25017] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5104'. [ 656.187688][T25036] netlink: 'syz.0.5110': attribute type 6 has an invalid length. [ 656.549729][T25066] netlink: 'syz.0.5118': attribute type 21 has an invalid length. [ 656.575756][T25063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.810008][T25073] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 656.834761][T25073] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 656.860372][T25073] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 656.860517][T25075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 656.928802][T25081] xt_hashlimit: size too large, truncated to 1048576 [ 656.983126][T25073] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.004195][T25073] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 657.011127][T25083] xt_CT: You must specify a L4 protocol and not use inversions on it [ 657.034671][T25073] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 657.130895][T25073] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.156151][T25073] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 657.174704][T25073] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 657.264912][T25089] ip6tnl0: Caught tx_queue_len zero misconfig [ 657.300138][T25073] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.313075][T25073] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 657.334298][T25073] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 657.412294][T25096] netlink: 'syz.0.5126': attribute type 1 has an invalid length. [ 657.477690][T25096] 8021q: adding VLAN 0 to HW filter on device bond5 [ 657.540523][T25099] bridge5: entered promiscuous mode [ 657.552930][T25099] bridge5: entered allmulticast mode [ 657.571828][T25099] team0: Port device bridge5 added [ 657.688399][ T47] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.708408][ T47] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 657.722950][ T47] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 657.811382][ T82] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.844494][ T82] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 657.883725][ T82] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 657.941599][ T82] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.962062][ T82] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 657.975864][ T82] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 658.038328][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.052315][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 658.063876][ T13] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 658.145464][T25127] xfrm0 speed is unknown, defaulting to 1000 [ 658.176853][T25127] wlan1 speed is unknown, defaulting to 1000 [ 658.456033][T25154] __nla_validate_parse: 4 callbacks suppressed [ 658.456049][T25154] netlink: 71 bytes leftover after parsing attributes in process `syz.2.5140'. [ 658.527240][T25154] netlink: 71 bytes leftover after parsing attributes in process `syz.2.5140'. [ 658.629508][T25162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5142'. [ 658.709871][T25164] veth0: entered promiscuous mode [ 658.715271][T25154] netlink: 71 bytes leftover after parsing attributes in process `syz.2.5140'. [ 658.725477][T25154] netlink: 71 bytes leftover after parsing attributes in process `syz.2.5140'. [ 658.739396][T25154] netlink: 71 bytes leftover after parsing attributes in process `syz.2.5140'. [ 658.749685][T25154] netlink: 71 bytes leftover after parsing attributes in process `syz.2.5140'. [ 658.759233][T25154] netlink: 71 bytes leftover after parsing attributes in process `syz.2.5140'. [ 658.768803][T25154] netlink: 71 bytes leftover after parsing attributes in process `syz.2.5140'. [ 658.799173][T25154] netlink: 71 bytes leftover after parsing attributes in process `syz.2.5140'. [ 658.799644][T25163] veth0: left promiscuous mode [ 659.111348][T25185] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 659.172561][T25178] dvmrp8: entered allmulticast mode [ 659.329437][T25200] netlink: 'syz.1.5154': attribute type 21 has an invalid length. [ 659.354751][T25200] IPv6: NLM_F_CREATE should be specified when creating new route [ 659.984977][T25229] syzkaller0: entered promiscuous mode [ 659.992506][T25229] syzkaller0: entered allmulticast mode [ 660.544802][T25269] netlink: 'syz.4.5173': attribute type 11 has an invalid length. [ 660.565056][T25266] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 660.593168][T25266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 660.639156][T25273] team_slave_1: entered allmulticast mode [ 660.695357][T25279] netlink: 'syz.2.5174': attribute type 21 has an invalid length. [ 661.102847][T25300] hsr_slave_0: left promiscuous mode [ 661.119114][T25300] hsr_slave_1: left promiscuous mode [ 661.802747][T25353] netlink: 'syz.2.5195': attribute type 1 has an invalid length. [ 662.331056][T25380] xfrm0 speed is unknown, defaulting to 1000 [ 662.338777][T25380] wlan1 speed is unknown, defaulting to 1000 [ 662.532552][T25342] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 663.132979][T25404] syzkaller1: entered promiscuous mode [ 663.144332][T25404] syzkaller1: entered allmulticast mode [ 663.759052][T25451] __nla_validate_parse: 37 callbacks suppressed [ 663.759069][T25451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5224'. [ 663.788812][T25451] veth0_macvtap: left promiscuous mode [ 663.904169][T25452] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5223'. [ 663.930360][T25456] syzkaller1: entered promiscuous mode [ 663.943771][T25456] syzkaller1: entered allmulticast mode [ 664.033523][T25465] syzkaller1: entered promiscuous mode [ 664.039384][T25465] syzkaller1: entered allmulticast mode [ 664.066675][T25474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.684691][T25494] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5232'. [ 664.702744][T25495] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5232'. [ 664.815780][T25467] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 664.994339][T25506] netlink: 'syz.2.5236': attribute type 12 has an invalid length. [ 665.263237][T25523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5241'. [ 665.377069][T25535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5244'. [ 665.549783][T25538] tipc: New replicast peer: 255.255.255.255 [ 665.557468][T25538] tipc: Enabled bearer , priority 10 [ 665.673071][T25548] netlink: 'syz.1.5248': attribute type 1 has an invalid length. [ 665.689777][T25550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5249'. [ 665.734083][T25550] xfrm0 speed is unknown, defaulting to 1000 [ 665.747757][T25548] bond10: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 665.949070][T25570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5251'. [ 666.000649][T25570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5251'. [ 666.183188][T25563] 8021q: adding VLAN 0 to HW filter on device bond8 [ 666.207835][T25563] bond8 (unregistering): Released all slaves [ 666.247874][T25583] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.259651][T25583] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.294636][T25591] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 666.382502][T25583] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.401959][T25583] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.489718][T25601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5264'. [ 666.663983][T25601] 8021q: adding VLAN 0 to HW filter on device bond12 [ 666.723289][T25583] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.756869][T25583] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.800335][ T10] tipc: Node number set to 1 [ 666.851311][T25583] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 666.876787][T25583] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.118267][T22194] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.131151][T22194] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.173183][T22192] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.192928][T22192] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.228631][T22192] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.237515][T22192] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.260836][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 667.269968][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.960395][T25682] netlink: 'syz.0.5286': attribute type 10 has an invalid length. [ 668.048553][T25684] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.078224][T25684] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.260878][T25684] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.288861][T25684] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.317959][T25686] syzkaller0: entered promiscuous mode [ 668.328059][T25686] syzkaller0: entered allmulticast mode [ 668.358867][T25684] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.398675][T25684] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.548439][T25684] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.577350][T25684] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.729427][T25720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 668.834398][T25728] __nla_validate_parse: 4 callbacks suppressed [ 668.834414][T25728] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5302'. [ 668.868880][T25731] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5302'. [ 668.892672][T25732] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5301'. [ 669.029356][T25737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5303'. [ 669.247651][T25750] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5306'. [ 669.313187][ T5631] block nbd1: Receive control failed (result -1) [ 669.320813][ T5631] [ 669.323160][ T5631] ====================================================== [ 669.330182][ T5631] WARNING: possible circular locking dependency detected [ 669.337262][ T5631] syzkaller #0 Not tainted [ 669.341674][ T5631] ------------------------------------------------------ [ 669.348687][ T5631] kworker/u9:2/5631 is trying to acquire lock: [ 669.354947][ T5631] ffff888053418260 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 669.364350][ T5631] [ 669.364350][ T5631] but task is already holding lock: [ 669.371715][ T5631] ffff88804cd9ec68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 669.380607][ T5631] [ 669.380607][ T5631] which lock already depends on the new lock. [ 669.380607][ T5631] [ 669.391010][ T5631] [ 669.391010][ T5631] the existing dependency chain (in reverse order) is: [ 669.400026][ T5631] [ 669.400026][ T5631] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 669.407678][ T5631] __mutex_lock+0x19d/0x1550 [ 669.412801][ T5631] nbd_queue_rq+0x373/0x1150 [ 669.417930][ T5631] blk_mq_dispatch_rq_list+0x499/0x1990 [ 669.424002][ T5631] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 669.430852][ T5631] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 669.437370][ T5631] blk_mq_run_work_fn+0x16c/0x300 [ 669.443008][ T5631] process_scheduled_works+0xa8e/0x14e0 [ 669.449080][ T5631] worker_thread+0xa47/0xfb0 [ 669.454194][ T5631] kthread+0x388/0x470 [ 669.458793][ T5631] ret_from_fork+0x514/0xb70 [ 669.463918][ T5631] ret_from_fork_asm+0x1a/0x30 [ 669.469201][ T5631] [ 669.469201][ T5631] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 669.476413][ T5631] __mutex_lock+0x19d/0x1550 [ 669.481529][ T5631] nbd_queue_rq+0xc1/0x1150 [ 669.486563][ T5631] blk_mq_dispatch_rq_list+0x499/0x1990 [ 669.492643][ T5631] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 669.499512][ T5631] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 669.506018][ T5631] blk_mq_run_work_fn+0x16c/0x300 [ 669.511562][ T5631] process_scheduled_works+0xa8e/0x14e0 [ 669.517633][ T5631] worker_thread+0xa47/0xfb0 [ 669.522741][ T5631] kthread+0x388/0x470 [ 669.527422][ T5631] ret_from_fork+0x514/0xb70 [ 669.532535][ T5631] ret_from_fork_asm+0x1a/0x30 [ 669.537816][ T5631] [ 669.537816][ T5631] -> #4 (set->srcu){.+.+}-{0:0}: [ 669.544945][ T5631] __synchronize_srcu+0xc9/0x2f0 [ 669.550420][ T5631] elevator_switch+0x1e8/0x7b0 [ 669.555710][ T5631] elevator_change+0x2fa/0x480 [ 669.560995][ T5631] elevator_set_default+0x375/0x440 [ 669.566714][ T5631] blk_register_queue+0x3f3/0x4e0 [ 669.572264][ T5631] __add_disk+0x6cb/0xe30 [ 669.577111][ T5631] add_disk_fwnode+0xfb/0x4b0 [ 669.582306][ T5631] nbd_dev_add+0x733/0xb60 [ 669.587249][ T5631] nbd_init+0x15f/0x1e0 [ 669.591930][ T5631] do_one_initcall+0x250/0x870 [ 669.597229][ T5631] do_initcall_level+0x10a/0x1a0 [ 669.602695][ T5631] do_initcalls+0x59/0xa0 [ 669.607549][ T5631] kernel_init_freeable+0x29d/0x3e0 [ 669.613271][ T5631] kernel_init+0x1d/0x1d0 [ 669.618116][ T5631] ret_from_fork+0x514/0xb70 [ 669.623255][ T5631] ret_from_fork_asm+0x1a/0x30 [ 669.628548][ T5631] [ 669.628548][ T5631] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 669.636365][ T5631] __mutex_lock+0x19d/0x1550 [ 669.641483][ T5631] elevator_change+0x1af/0x480 [ 669.646771][ T5631] elevator_set_none+0xb5/0x140 [ 669.652143][ T5631] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 669.658477][ T5631] nbd_start_device+0x189/0xb30 [ 669.663868][ T5631] nbd_genl_connect+0x1597/0x1c10 [ 669.669417][ T5631] genl_family_rcv_msg_doit+0x233/0x340 [ 669.675488][ T5631] genl_rcv_msg+0x614/0x7a0 [ 669.680524][ T5631] netlink_rcv_skb+0x226/0x4a0 [ 669.685828][ T5631] genl_rcv+0x28/0x40 [ 669.690331][ T5631] netlink_unicast+0x7bb/0x940 [ 669.695621][ T5631] netlink_sendmsg+0x813/0xb40 [ 669.700920][ T5631] sock_sendmsg_nosec+0x13a/0x180 [ 669.706464][ T5631] ____sys_sendmsg+0x54e/0x850 [ 669.711794][ T5631] ___sys_sendmsg+0x2a5/0x360 [ 669.717007][ T5631] __x64_sys_sendmsg+0x1b1/0x290 [ 669.722471][ T5631] do_syscall_64+0x174/0x580 [ 669.727592][ T5631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.734014][ T5631] [ 669.734014][ T5631] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 669.742641][ T5631] blk_alloc_queue+0x544/0x690 [ 669.747933][ T5631] __blk_mq_alloc_disk+0x194/0x390 [ 669.753575][ T5631] nbd_dev_add+0x494/0xb60 [ 669.758517][ T5631] nbd_init+0x15f/0x1e0 [ 669.763210][ T5631] do_one_initcall+0x250/0x870 [ 669.768512][ T5631] do_initcall_level+0x10a/0x1a0 [ 669.773986][ T5631] do_initcalls+0x59/0xa0 [ 669.778834][ T5631] kernel_init_freeable+0x29d/0x3e0 [ 669.784556][ T5631] kernel_init+0x1d/0x1d0 [ 669.789403][ T5631] ret_from_fork+0x514/0xb70 [ 669.794521][ T5631] ret_from_fork_asm+0x1a/0x30 [ 669.799807][ T5631] [ 669.799807][ T5631] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 669.807015][ T5631] fs_reclaim_acquire+0x71/0x100 [ 669.812479][ T5631] __kmalloc_noprof+0xbc/0x720 [ 669.817768][ T5631] tls_sw_sendmsg+0x599/0x2860 [ 669.823058][ T5631] sock_sendmsg_nosec+0x90/0x180 [ 669.828516][ T5631] sock_sendmsg+0x1ca/0x2d0 [ 669.833542][ T5631] splice_to_socket+0xb5e/0x12a0 [ 669.839006][ T5631] direct_splice_actor+0x101/0x160 [ 669.844639][ T5631] splice_direct_to_actor+0x57b/0xcb0 [ 669.850532][ T5631] do_splice_direct+0x195/0x290 [ 669.855911][ T5631] do_sendfile+0x52e/0x7c0 [ 669.860855][ T5631] __se_sys_sendfile64+0x144/0x1a0 [ 669.866485][ T5631] do_syscall_64+0x174/0x580 [ 669.871597][ T5631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.878012][ T5631] [ 669.878012][ T5631] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 669.886095][ T5631] __lock_acquire+0x1520/0x2cf0 [ 669.891468][ T5631] lock_acquire+0x106/0x350 [ 669.896492][ T5631] lock_sock_nested+0x41/0x100 [ 669.901782][ T5631] inet_shutdown+0x6a/0x390 [ 669.906812][ T5631] nbd_mark_nsock_dead+0x2cb/0x550 [ 669.912452][ T5631] recv_work+0x1cee/0x1e10 [ 669.917386][ T5631] process_scheduled_works+0xa8e/0x14e0 [ 669.923454][ T5631] worker_thread+0xa47/0xfb0 [ 669.928566][ T5631] kthread+0x388/0x470 [ 669.933157][ T5631] ret_from_fork+0x514/0xb70 [ 669.938270][ T5631] ret_from_fork_asm+0x1a/0x30 [ 669.943549][ T5631] [ 669.943549][ T5631] other info that might help us debug this: [ 669.943549][ T5631] [ 669.953769][ T5631] Chain exists of: [ 669.953769][ T5631] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 669.953769][ T5631] [ 669.966798][ T5631] Possible unsafe locking scenario: [ 669.966798][ T5631] [ 669.974246][ T5631] CPU0 CPU1 [ 669.979612][ T5631] ---- ---- [ 669.984974][ T5631] lock(&nsock->tx_lock); [ 669.989391][ T5631] lock(&cmd->lock); [ 669.995894][ T5631] lock(&nsock->tx_lock); [ 670.002939][ T5631] lock(sk_lock-AF_INET6-NBD); [ 670.007789][ T5631] [ 670.007789][ T5631] *** DEADLOCK *** [ 670.007789][ T5631] [ 670.015931][ T5631] 3 locks held by kworker/u9:2/5631: [ 670.021212][ T5631] #0: ffff888025af4140 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.032448][ T5631] #1: ffffc90003f0fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 670.044190][ T5631] #2: ffff88804cd9ec68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 670.053501][ T5631] [ 670.053501][ T5631] stack backtrace: [ 670.059389][ T5631] CPU: 1 UID: 0 PID: 5631 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 670.059407][ T5631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 670.059417][ T5631] Workqueue: nbd1-recv recv_work [ 670.059433][ T5631] Call Trace: [ 670.059439][ T5631] [ 670.059444][ T5631] dump_stack_lvl+0xe8/0x150 [ 670.059467][ T5631] print_circular_bug+0x2e1/0x300 [ 670.059483][ T5631] check_noncircular+0x12e/0x150 [ 670.059508][ T5631] __lock_acquire+0x1520/0x2cf0 [ 670.059530][ T5631] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 670.059547][ T5631] ? try_to_wake_up+0x8c5/0x14d0 [ 670.059573][ T5631] ? inet_shutdown+0x6a/0x390 [ 670.059591][ T5631] lock_acquire+0x106/0x350 [ 670.059609][ T5631] ? inet_shutdown+0x6a/0x390 [ 670.059628][ T5631] ? __queue_work+0x1ea/0x10a0 [ 670.059647][ T5631] lock_sock_nested+0x41/0x100 [ 670.059663][ T5631] ? inet_shutdown+0x6a/0x390 [ 670.059681][ T5631] inet_shutdown+0x6a/0x390 [ 670.059700][ T5631] nbd_mark_nsock_dead+0x2cb/0x550 [ 670.059729][ T5631] recv_work+0x1cee/0x1e10 [ 670.059744][ T5631] ? __lock_acquire+0x683/0x2cf0 [ 670.059763][ T5631] ? register_lock_class+0x31/0x2e0 [ 670.059784][ T5631] ? __lock_acquire+0x683/0x2cf0 [ 670.059805][ T5631] ? __pfx_recv_work+0x10/0x10 [ 670.059819][ T5631] ? do_raw_spin_lock+0x12b/0x2f0 [ 670.059835][ T5631] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 670.059851][ T5631] ? process_scheduled_works+0xa20/0x14e0 [ 670.059871][ T5631] ? rcu_is_watching+0x15/0xb0 [ 670.059893][ T5631] ? process_scheduled_works+0xa20/0x14e0 [ 670.059908][ T5631] process_scheduled_works+0xa8e/0x14e0 [ 670.059934][ T5631] ? __pfx_process_scheduled_works+0x10/0x10 [ 670.059952][ T5631] ? assign_work+0x3cf/0x5d0 [ 670.059968][ T5631] worker_thread+0xa47/0xfb0 [ 670.059994][ T5631] kthread+0x388/0x470 [ 670.060013][ T5631] ? __pfx_worker_thread+0x10/0x10 [ 670.060028][ T5631] ? __pfx_kthread+0x10/0x10 [ 670.060048][ T5631] ret_from_fork+0x514/0xb70 [ 670.060069][ T5631] ? __pfx_ret_from_fork+0x10/0x10 [ 670.060089][ T5631] ? __switch_to+0xc89/0x1420 [ 670.060107][ T5631] ? __pfx_kthread+0x10/0x10 [ 670.060127][ T5631] ret_from_fork_asm+0x1a/0x30 [ 670.060146][ T5631] [ 670.331236][T25752] netlink: 'syz.3.5307': attribute type 11 has an invalid length. [ 670.339589][T25752] netlink: 'syz.3.5307': attribute type 11 has an invalid length. [ 670.347639][T25752] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5307'. [ 672.068850][T22194] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.077238][T22194] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.089804][T25034] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.098052][T25034] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.110130][T25034] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.118738][T25034] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.130645][T25034] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.138894][T25034] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0