last executing test programs: 2.946362422s ago: executing program 2 (id=4287): r0 = socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x1, 0x200, 0x5, 0xf65, 0x8}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x94, &(0x7f0000000080)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e24, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffd}, @in6={0xa, 0x4e20, 0x800, @ipv4={'\x00', '\xff\xff', @local}, 0xf}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, @in6={0xa, 0x4e21, 0x6, @mcast1, 0x3}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000001c0)={r2, 0xcf}, 0x8) (async) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) getsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000200), &(0x7f0000000240)=0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000280), 0x3) (async) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f00000002c0)={0x0, @multicast2, 0x4e21, 0x1, 'sed\x00', 0x5, 0x7ac, 0x1e}, 0x2c) (async) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000300)=0x7ff, 0x8) (async) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000340)={0x80, 0x6, 0xff, 0xe3, 0x8, 0xe, 0x4, 0x4, 0xc, 0x4, 0x6, 0x8, 0x3, 0xf7}, 0xe) (async) sendmmsg$inet_sctp(r1, &(0x7f0000001980)=[{&(0x7f0000000380)=@in={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000016c0)=[{&(0x7f00000003c0)="4aa6078ee7caaeb97b30edc8d9b8ce7f14b4eaa223abc3be37f09d32a05912339d10afded008ad91f36abd5db5e6210f66e4b6f11bb05f52e842b2a43fcaaf8e6464471ceea2ba42161c6627ed86320cd2f7643156f22ead46a4d8c4aa47274863f941e11eb09af307054547e6a68f763742db0bb525471055c6a1b21ea9e9c040d356b8186ad416a840f1a481c1d296e22bae35750bc01041da4d585ce5a8c36eb121154bc453d542c24d6555c4dde0118e8b09d0d471e1b0b43c220d8b2acb2cf4850163855bdc95800e7688", 0xcd}, {&(0x7f00000004c0)="856f90e796f6ed08443b5b10bfea657b69360df7d7a328ae0f6e95fc7f25f0460eca864068e1f653cce9e05806fed8b726cc3d630f51a7b1cc982d6433296e3c2f9525a50281d65de42885c819f3de7c726465a9804e1a632eedecb4dd4d7ff6e9ec549fa494a04877", 0x69}, {&(0x7f0000000540)="a736328a09215a6dd5256cf510b7509c1d406499c3a3ad4f31866de3c054321e6454c05c4819f6140286554788bb51ea2f85e1dccd43af26c89831cf773227805a061fdf86ec66c161cea1a8786ec169358120a3ee133a9127", 0x59}, {&(0x7f00000005c0)="a05a55acdb767612b66c5e2d0728d64e8510d74c", 0x14}, {&(0x7f0000000600)="1ddfd9e9b71c082e209bdf05eccee951e68558a283b899d56dd1e976c5259a43368ff9923c384e3b5523b52c143daf3d97ee9bee598c7fb865508961b2dce23df4b26edba6cb262c78f45f04551fb6769e5276ef292a3e3e0f7bc71b76990c05cf7d035d1607dcd2f17bc6bb2dcec876c069349080677a26c45f28747f7168963e0fd86a13a8f575bf6b1c1bebb77d7df11cac48b29a49410d5ae5665788fa41d42febc47702df13daed99533a", 0xad}, {&(0x7f00000006c0)="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", 0x1000}], 0x6, &(0x7f0000001740)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x8008, 0x2, 0xffffffff}}], 0x20, 0x880}, {&(0x7f0000001780)=@in6={0xa, 0x4e23, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f00000017c0)="5a49eb5173fe1042a482dba68d8edd2dacb1fab14fcd12b74c2beba817ace27cd0ef1396175b7dad135be2b3ff0e079d8bfacd68edebe4dfda6c75f89ba1a49a15c613b2ecf85cda6127a8b86f3f02f827bb75ffdfca650ec555dba77161f1cdee56ea442a224064035c21072e7b2d14e74571df4940c91e9439525a11c45e8364c1ad0a98edcfd6fc2a729fcccffeb9dae8f29c677dfdeca1500008a19b61a9d4d946e4fab0e346f603f65f45ab6af285761e53b9b3819868513314a16e97d1927bccc96039d9df436ddeb09401acb95536d05a8b42bf7374f6", 0xda}, {&(0x7f00000018c0)="5f90fc2004efbf53305fa8d702c0e1c6273aec015375fcd0f5616e2427035a946a56b89361693b581efc4a4d2e44818340688755dc822a97", 0x38}], 0x2, &(0x7f0000001940)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x200, 0x8, 0x8, r2}}], 0x38, 0x800}], 0x2, 0x8000) (async) getsockopt$SO_NETNS_COOKIE(r3, 0x1, 0x47, &(0x7f0000001a00), &(0x7f0000001a40)=0x8) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000001a80)=0x0, &(0x7f0000001ac0)=0x4) (async) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001b00)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000001c00)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000001c40)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x4e20, 0x8001, 0x4e21, 0xc, 0x2, 0x180, 0x20, 0x11, r5, r6}, {0x8, 0x4, 0x6, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x10001}, {0x2a, 0x8, 0xac, 0x10000000000}, 0x824, 0x6e6bb2, 0x1, 0x1, 0x2}, {{@in=@remote, 0x4d3, 0x3c}, 0xa, @in=@local, 0x0, 0x3, 0x3, 0x5, 0x2, 0x4, 0x7fff}}, 0xe8) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000001d40)={'veth0_to_team\x00', {0x2, 0x4e24, @loopback}}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001d80)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10) ioctl$XFS_IOC_SET_RESBLKS(r7, 0xc0105872, &(0x7f0000001dc0)={0x6, 0x1}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001f40)={{r4, &(0x7f0000001e00)=')\x8f\'\x00', 0x10400, &(0x7f0000001e40)={@_ha_fsid={[0x2800000, 0x7]}, {0x0, 0x800, 0x8000, 0x6}}, 0xd, &(0x7f0000001e80), &(0x7f0000001ec0)=0x8000}, {[0xffffffff, 0x101, 0x2, 0x3]}, 0x3, 0x11, &(0x7f0000001f00)=""/17}) sendmsg$NFNL_MSG_ACCT_DEL(r8, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x20, 0x3, 0x7, 0x101, 0x0, 0x0, {0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4814}, 0x2005c000) (async) write$cgroup_subtree(r8, &(0x7f00000020c0)={[{0x2d, 'cpuset'}, {0x0, 'pids'}, {0x2b, 'cpu'}, {0x50, 'memory'}, {0x2d, 'io'}, {0x2b, 'cpu'}, {0x2d, 'hugetlb'}]}, 0x2d) (async) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000002140), r8) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x513fd1be3d2e9d2f}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x2c, r9, 0x200, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) accept4$unix(r8, 0x0, &(0x7f0000002240), 0x0) (async) ioctl$SIOCGETMIFCNT_IN6(r8, 0x89e0, &(0x7f0000002280)={0x1}) (async) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f00000022c0)=0x1, 0x4) 2.765737242s ago: executing program 2 (id=4291): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xfa3b6b2883b6fee3) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01"], 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) sendmmsg$inet(r4, &(0x7f0000008080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x41a4}}], 0x18}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4040) nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) r5 = socket(0x23, 0x80805, 0x0) listen(r5, 0x0) accept4$tipc(r5, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="00b7207000fcdbde2512000000080039004d0b00112300000000000000000000000000002d9b3470288e17e1494c439a4e68cc1d8f884d8fe6"], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) bind(r7, &(0x7f0000000300)=@generic={0x1f, "0000000000000100"}, 0xa) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x20c, 0x41, 0x20, 0x70bd28, 0x25dfdbfe, {0x1e}, [@typed={0x8, 0x130, 0x0, 0x0, @fd}, @nested={0xda, 0x89, 0x0, 0x1, [@nested={0x4, 0xf7}, @typed={0x14, 0x136, 0x0, 0x0, @ipv6=@private2}, @generic="75a266eaf23b5814ecdee34ffb2b3ed0dc256c6d6a6966656b23c92366043adc4705c83fabaa6476f732363616d54190962683cd8ac7670f547b40427996355bbb9f4629c330f6cd63ca2ad3129ef530280d9fb021c6b5dcb81688e4b0c6ee0004e9b12b9df3ba7310945aa02fdb39ac12e63d75224fe6400c670dbdfe57f012e4a7aba599b67d882ea9c730e46d1c26a0a895cc7f6e958bb15a61e3c84e7948b56c34ab7be6a1f9912835b1232f1c98bc293a0f8a7e2e954fac", @nested={0x4, 0xc9}]}, @nested={0x112, 0x86, 0x0, 0x1, [@generic="c08e8121aedb4e821edfeb484497701e184f517b4605384e15790a252603e89afa9d15a279e1f616525b3e9daa148e4d3fb9b5d4309fbc0d7798d79af91226de51655ccfcfeed933c27a543a56fc2b12f0ab25acba7c631f8a24ab5ceaad92d4b73c0f493155a89edb73ba87785c7afaa675327c5c30daa08889dff3a0126ea0720be76b01d6595e980327c78d059924927d90f2", @generic="65aa78dd0a89e8fddf246689e890fb17681c329c201c8830049b9f35ae6580d9d32e363b3a6877080fdc2cc031974aa53dadf626ba7e93b93660c332b1da291bce648ae46ed7673587e2ab2f700171b747cee0b102410c4cfb4975bb02e50091a499e649d4f04ca9f2ee31cbbde87b7237ff", @nested={0x4, 0xa0}, @nested={0x4, 0x67}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x800e}, 0x4) listen(r7, 0x1) 2.44610505s ago: executing program 1 (id=4295): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffc00}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffa, 0x2, 0x10000000, 0x8, 0x3}}]}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x810}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020"], 0x114}], 0x1}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 2.139665409s ago: executing program 1 (id=4299): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x10e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000), 0x4) unshare(0x20000400) unshare(0x24020400) (async) unshare(0x24020400) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000180), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd8a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd8a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0}}, 0x10) 2.005728653s ago: executing program 4 (id=4301): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a0000000060a010400000000000000000100000808000b400000000078000480340001800b000100657874686472000024000280080001400000000c080003400000000208000440000000220500020007000000400001800c0001006269747769736500300002800800034000000002080001400000001408000240000000120c000780080001001f000019080006"], 0x114}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000d0a0000000000000002000006"], 0x0, 0x96, 0x0, 0x8}, 0x28) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000061107e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x158, 0x10, 0x1, 0x70bc2b, 0x4000000, {{@in6=@dev={0xfe, 0x80, '\x00', 0x22}, @in6=@loopback, 0x0, 0x8, 0x3, 0x5, 0xa, 0x60}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4d4, 0x32}, @in=@local, {0xfffffffffffffffe, 0x4, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x89}, {0x3, 0x400804, 0xd, 0x292}, {0x1cb00000, 0x0, 0x3}, 0x70bd26, 0x0, 0x2, 0x4, 0x0, 0x6c}, [@algo_crypt={0x68, 0x2, {{'cbc(twofish)\x00'}, 0x100, "72f01afe02000000366a6a849a73904500240062227c0200000300ec00e8ffff"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x3b, 0x1, 0x20, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r6, 0x8af234ad5f3fd7b5, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044811}, 0x4000800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r6, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f00000001c0)=0x80000002, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'veth1\x00', 0x0}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x6, 0x2, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x2, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x1, 0xc, 0x6, 0x6, 0x40, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x84}], &(0x7f0000000080)='GPL\x00', 0x8, 0x77, &(0x7f0000000200)=""/119, 0x40f00, 0x4, '\x00', r9, 0x0, r0, 0x8, &(0x7f0000000300)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x6, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000400)=[r10], &(0x7f00000005c0)=[{0x1, 0x5, 0xf, 0xa}, {0x0, 0x1, 0x0, 0x5}, {0x0, 0x3, 0x0, 0xb}, {0x4, 0x2, 0x7, 0x4}, {0x2, 0x3, 0x2, 0x6}, {0x4, 0x2, 0x10, 0xc}, {0x5, 0x5, 0x7, 0xc}, {0x4, 0x2, 0xb, 0x3}, {0x0, 0x5, 0x6, 0x6}], 0x10, 0x5}, 0x94) 1.934798715s ago: executing program 1 (id=4303): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x78) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000200)=""/236, &(0x7f0000000300)=0xec) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) r2 = getpid() write$cgroup_pid(r1, &(0x7f0000000040)=r2, 0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=@can_delroute={0x54, 0x19, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@CGW_CS_XOR={0x8, 0x5, {0x7, 0xfffffffffffffff9, 0x7, 0x4}}, @CGW_DST_IF={0x8, 0xa, r8}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x1, 0x1}, 0x8, 0x8cff5605425265a5, 0x0, 0x0, "1fa07befeaf8d94d"}, 0x1}}, @CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x1}, 0x2, 0x2, 0x0, 0x0, "0c03290b9c02bd81"}, 0x7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000c00}, 0x20044894) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@local, 0x15, 0x0, 0x1, 0xfffff766}}, 0x44) ioctl$EXT4_IOC_SWAP_BOOT(r9, 0x6611) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{&(0x7f0000000140)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000340)="98c481fa46c01d057279254575ea8b1d1b8bb2b5bc9f158102f10dc3ca776c3e21dd61d35dff6386f1a8756e64e916af3f3fd7653e388599b0a590a50f1d5d5bbf55d6391f643698418982823c3da6137836833ab4ee4a18fd84e677cf48c4af960f0380a988135bdf5e23c38cc20463ad170c430b74c4164de50d5cd5ee1db436aa430549e43305fe98d9aaf77f9888bd7c4c432c260776891937003bd69745a977492ca7588a9ccc1ba43407ad665b46804c2f8d565e7961c6408573f76ab85f0826931a3e993683fe5dd947d057871cd24d0d6166842fa3f00e58cc272edbab4360867fc34fed687bd536a52bb51a4d9ef92a3e94", 0xf6}, {&(0x7f0000000440)="5bb93b86f27e4e156f5fa587c21d7ac1481d64984bc53caccb53b4db1f375fa9c0eb9e9f2214fb15bfa719c731bfabc006211a4cfd566770c2fc554d2486a13d7684718eaea5bee6c09d1ecc24aa3ff54c69ea086f8a4d902fc393d51f61490d9d6b04735547ea0e2880f57bb0006598c4af70ba5d74274e10c84a96d34bd152c29ff0d602772abfd1c0fc7717", 0x8d}, {&(0x7f0000000500)="069e7bdcb483c92d9501b81771f7229510f70cc673bd41ff798fa65c316f75666eb0873a2040e4c3f2fed39beaf2a56eb1d4123d7fa6ac99d4e8135c39df3c7f451f0b2b1c5b50fbdb586e72f243490f24677563305dea4f0300edfe9d9c8a3367429548c5a26ae0b60910678e73d1902b120ab02b0a09798dfab775da8b59379e2325856182be5ded029850696b97bf6940b81de38bdd6621cf1aff7e52e2007e7e052b9b1adb213a3ea564db1c130de307b0459699f1559e4abc57f697998821c6ef65c6b32d01512a", 0xca}], 0x3, &(0x7f0000000640)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x1b, [@multicast1, @loopback, @local, @remote, @empty, @local, @local]}, @timestamp={0x44, 0xc, 0x27, 0x0, 0x2, [0x2, 0xc]}, @timestamp={0x44, 0xc, 0x59, 0x0, 0x9, [0x4, 0x9]}, @cipso={0x86, 0x54, 0x0, [{0x1, 0x2}, {0x7, 0x8, "6cfa4ce57fcf"}, {0x1, 0x8, "5caf46d10492"}, {0x0, 0xf, "a618f38721502d218ca1f5f948"}, {0x6, 0xe, "a5f841e1e8cf5ff5fcb91b66"}, {0x5, 0x12, "a46a677e6ce00b4be129e3b168f22a40"}, {0x7, 0x2}, {0x6, 0xb, "54ed207824971cf019"}]}]}}}], 0xd0}}, {{&(0x7f0000000740)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000780)="756aa8b0b32e318184aef6d30fd74b2d5976c51f81c1bd68b4c9848fe219addbfbb1e78f4ec88850f60224f4425c4de2e314c89d61f6b23af20bb0871ac83a49627012ee64c604298b52ce94aed1830304f987221cdaa46e543cf10978c0d4773e8e0c580105324ad09b97b3fe39bfb17eac987707b50323de3ca691a944b41d23869f72e297a43f7e", 0x89}, {&(0x7f0000000840)="171c06899157955ef87830f4950de230aabda0dd44261ee8bc10097ba7809893a3824b624c6ca22584a2900b1bbb1a33c0087daa7d12ff27fcf7f9134ac78d52d8f595d2b33eb894f642a35e837b799354f2a19eacc4ce3ee0fd7e9b5a9799f2c0479d995ec3202572d919c2ee10d43240844fb4784014be1ef2f20f1a34af14fd92a6b9e75fb9abb1a12cce1d0fe15d15a41f10d0c3577c2991284bdc8659afa1eccad8e6052a748a063d63dc5039c21867e2ae65a272b59ff9471ba689cb19c8d3e51ed540d734be7fc6837c6d534d13b4fc1e1de0", 0xd6}, {&(0x7f0000000940)="c23f808a6749d51128066b102fe4aba2be5d29e16a24b87aed9e8665acade9a27f8a94111e390b33a7e1e9834698b19beceb9664525a4abaf80c04fcf4cc563b350dc126976488b824a5c779da2bcecce25a04d5e4f960c4a75b391403d6395c", 0x60}, {&(0x7f00000009c0)="bc60fa75e06da1b7b9c03103f61c13481d8373a5e50c3e0259e9b63b493ad74ba8f076c679d4c1a16d84b894b1885a2de22b9b2b67211cdf7cb387c63e65603a121b3260d4367e9885093b53a0c04498075c1598e35d87a37202c655f2ddb532e143b34cc49310001b1ca4815fdafa1b761c728e0ebba5e25f368ff031121512b8c971b2e6af84d2c84768f635", 0x8d}, {&(0x7f0000000a80)="bc951fe85c505c5b887df18a62ef004b32724062245ee25595e3ff9c831e2af4490ef72ceebe04021cf7bf32742b0e532b", 0x31}], 0x5, &(0x7f0000000b40)=[@ip_retopts={{0xe0, 0x0, 0x7, {[@end, @cipso={0x86, 0x12, 0x3, [{0x2, 0x7, "d36ef0435a"}, {0x0, 0x5, "e833e7"}]}, @cipso={0x86, 0x20, 0x3, [{0x76ae1216778f2be2, 0xb, "61fe17a1dc498c9ce3"}, {0x1, 0xb, "2ba06d97f8998358da"}, {0x1, 0x4, "b5c9"}]}, @cipso={0x86, 0x5c, 0xffffffffffffffff, [{0x0, 0x6, "5c92df35"}, {0x5, 0x4, "ee47"}, {0x7, 0x5, "202183"}, {0x2, 0x11, "a5bb0401ae7abf3faeb383684b1fd8"}, {0x3, 0x12, "aa8530384a99d48f5f95afee8d782f3b"}, {0x1, 0x6, "38ad5bd6"}, {0x2, 0x11, "5a847fde7654b20f0e33d6ab5404a6"}, {0x5, 0x5, "228cfc"}, {0x5, 0x8, "0687e828cbeb"}]}, @timestamp_addr={0x44, 0x2c, 0xef, 0x1, 0x6, [{@private=0xa010100, 0x6}, {@multicast1, 0x2}, {@rand_addr=0x64010101, 0x7}, {@multicast2, 0x5}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x53de74ce}]}, @ssrr={0x89, 0x13, 0x8d, [@remote, @multicast2, @local, @empty]}]}}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@lsrr={0x83, 0x1f, 0x52, [@private=0xa010102, @multicast2, @loopback, @remote, @remote, @empty, @broadcast]}, @timestamp={0x44, 0x2c, 0x59, 0x0, 0xb, [0x7, 0x3, 0x0, 0x9, 0x4, 0x8001, 0x2, 0xd29d, 0x2, 0x6]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x158}}, {{&(0x7f0000000cc0)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000d00)="a32f600a0a99bcdb8826545ee1f212d23b94fbcc7b89249766e0f86ee1e428232250dc0007a0417d7e0c0dd90c58804d3b7654f28bd1b72e469a662a85e71e55edd0e7b4cee9054e30a6482dc0d3487b048c7a02a67c4681971a80e1c1a0610d6194ea17438bcebe6ebe0327c7e023ed32cc54be9cf62197379d5c4ec447b31517af2752c93e7d8d0319a6d9592df4275437be8414154375bc2ce37d8a5604259da459a06ef2fdf0b5ca95d664aa3bc074db70095313a4d26ca600fa855313f52b3bd9b6bba4ebd1a2777316f89579795742943bdfd9a340d3846e15fd19f4cb439c517fdfee16da0f75648723396da5", 0xf0}], 0x1, &(0x7f0000000e40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast1, @local}}}], 0x20}}], 0x3, 0x82) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x3, @multicast1}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 1.804595403s ago: executing program 0 (id=4304): socket$inet6(0xa, 0x800000000000002, 0x0) (async) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000440)=@ethtool_eeprom={0xc, 0x7, 0x7f}}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) socket$rds(0x15, 0x5, 0x0) (async) socket$rds(0x15, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x73ba, 0x4) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x73ba, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f00000006c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x20061, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x48000) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESDEC], 0x30}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESDEC], 0x30}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000001c0)={'gre0\x00', {0x2, 0x4e23, @multicast2}}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001600080026bd7000fbdbdf25000000a6"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001600080026bd7000fbdbdf25000000a6"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x800) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, 0x0, &(0x7f00000002c0)=0x37) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000090c00000000fddbdf0d00000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 1.757810824s ago: executing program 4 (id=4305): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/uts\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r2, &(0x7f0000000700)=ANY=[], 0xfe33) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/cgroup\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8025000041000701fefffffffeffffff017c0000040042800c00018006000600800a00005a250280bc1c1480b61318"], 0x2580}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x118, r0, 0x200, 0x70bd2d, 0x3, {}, [{@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@pci={{0x8}, {0xf}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x118}, 0x1, 0x0, 0x0, 0x80}, 0x8055) r6 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f00000000c0)=0x1) 1.662908708s ago: executing program 4 (id=4306): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb"], 0x88}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xa, &(0x7f0000000400)=@raw=[@generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x4}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4, 0x0, 0x0, 0xff}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0x22, 0x0, &(0x7f00000005c0)="001122334455001122334456080045000028000000004006f8ce0a0000010a000002", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x40, r5, 0x852dd6c070cd7e4d, 0xfffffffc, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c000}, 0x20040880) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb"], 0x88}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xa, &(0x7f0000000400)=@raw=[@generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x4}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4, 0x0, 0x0, 0xff}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0x22, 0x0, &(0x7f00000005c0)="001122334455001122334456080045000028000000004006f8ce0a0000010a000002", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600843b00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x40, r5, 0x852dd6c070cd7e4d, 0xfffffffc, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c000}, 0x20040880) (async) 1.642625183s ago: executing program 3 (id=4307): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$MRT_DEL_MFC(r2, 0x0, 0xcd, 0x0, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r3, 0x110, 0x7, 0x0, 0x4) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e24, @rand_addr=0x64010104}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r4}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}]}, 0x3c}}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000f7ff0200e786774e08b1222742d5bef77574afd1cb6ec38fd043a3d37c"], 0x20}}, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f00000002c0)={0x2, [0x0, 0x0]}, &(0x7f0000000300)=0xc) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="0c00028006"], 0x24}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) 1.511541782s ago: executing program 0 (id=4308): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000600)=[{{&(0x7f0000000440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000004c0)='P', 0x1}], 0x1}}], 0x1, 0x8041) (async) shutdown(r1, 0x1) (async) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000380)={0x0, @in={{0x2, 0x6e20, @local}}}, 0x84) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x0) close(r3) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008005}, 0x4) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, 0x0, 0x0) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f00000001c0)=0x3a5, 0x4) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0016dc4a000000000000c441cb8df3", @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf252400000008000200", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24000810}, 0x4000) 1.510018487s ago: executing program 2 (id=4309): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000080)={r0}) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) unshare(0xc040480) unshare(0xc040480) getsockopt(r1, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x2f, 0x9, 0x70bd25, 0x25dfdbfb, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) writev(r0, &(0x7f0000019680)=[{&(0x7f0000000000)="e0f021c46e8dca5ff5477ee6880dfeca186f78da57644d", 0x17}, {&(0x7f0000000140)="d383d3e91681abd8027d700f8eb93cace9bd3093025d1e526f5c9b00e4e19e335cc47824227a62065e01c5ca7a0952c7fd2e296a3760f0ba27e07cb93cfa2eaca5f902db4e4e55186787b4063e17968867bdf78f6e382357268ddaa486b8c0e36fb4ce0cdc524caf1e33bd4143bd0762b1c0480d9c1ff43ca21604c4583556146b399236921e00f331778247f65cf1c41c9e38ce09bde94cfa405a9e931b4fcf278a7770f9020ffeed411607b5ca3fb27dee55a0b86ad56aa5a575af124cb5d97566b32cb697edc699d1603cf9c36300393cca4f484cab905402eadb304654d3815566514df8b70039195ace238c0be19ab500f888a774046b6f08c8dd", 0xfd}, {&(0x7f0000019580)="1d2ec76ceefeea586e9d4daea36d8b30a38396508bc6cb8b717f0aad72e759f2eb63cd0b80426fa481b037b918e51c7b8957217606b077c7af10ff4fde4c82706102e88c9bf1d1a5951ce20b12d319089f870090f44f49912eda5ab623016d83193b44ab4180df37d80d407361880a05304e72692cd4c4a023a8e6c0302ddf4553cb336a85309051fcb0a541342428424a9f596d6d2024cca07d832eef1738a86b9b01e5fd61b601fd39cfe07e541bd093c21ad46c536fa1771d8bd741a024da392df818392694f4fc0a6b6893a3ea359779d0c5ee0694a7e78f7461ca14001d4b5fbef5f5eaf57bd6b457d7aa9777b47e6cdb0dd82b51a8", 0xf8}], 0x3) socket(0x40000000015, 0x5, 0x0) (async) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000080)={r0}) (async) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) socket(0x15, 0x5, 0x0) (async) unshare(0xc040480) (async) unshare(0xc040480) (async) getsockopt(r1, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x2f, 0x9, 0x70bd25, 0x25dfdbfb, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) (async) writev(r0, &(0x7f0000019680)=[{&(0x7f0000000000)="e0f021c46e8dca5ff5477ee6880dfeca186f78da57644d", 0x17}, {&(0x7f0000000140)="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", 0xfd}, {&(0x7f0000019580)="1d2ec76ceefeea586e9d4daea36d8b30a38396508bc6cb8b717f0aad72e759f2eb63cd0b80426fa481b037b918e51c7b8957217606b077c7af10ff4fde4c82706102e88c9bf1d1a5951ce20b12d319089f870090f44f49912eda5ab623016d83193b44ab4180df37d80d407361880a05304e72692cd4c4a023a8e6c0302ddf4553cb336a85309051fcb0a541342428424a9f596d6d2024cca07d832eef1738a86b9b01e5fd61b601fd39cfe07e541bd093c21ad46c536fa1771d8bd741a024da392df818392694f4fc0a6b6893a3ea359779d0c5ee0694a7e78f7461ca14001d4b5fbef5f5eaf57bd6b457d7aa9777b47e6cdb0dd82b51a8", 0xf8}], 0x3) (async) 1.45179585s ago: executing program 3 (id=4310): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000240)=0x5, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x24, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0xc4000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, &(0x7f0000000280)={{0x1, 0x2, 0x7, 0xc5, 0xafad}, &(0x7f0000000040)=[{}, {}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 1.348181644s ago: executing program 3 (id=4311): syz_emit_ethernet(0xa6, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaafd88a813008100000086dd60fb35190068030000000000000000000000000000000001fe8000000000000000000000000000bb330b0000000000000738000000000c0502005c660000000000004c000000000000000100000000000000d90000000000000084aa1d6b0000000002000000000000000001000101000401020710000000030200fbff0100f900000000000001003200000000000000"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r0, r1}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x2, [{}, {}]}, 0x48) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xd, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @generic="b2"]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)={0x30, 0x41, 0x107, 0x70bd27, 0xfffffdfe, {0x4, 0x7c}, [@nested={0x1c, 0x126, 0x0, 0x1, [@typed={0x15, 0x9, 0x0, 0x0, @binary="b37b5b1292814a65b080a70798dde80601"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c8d4) 1.18557041s ago: executing program 3 (id=4312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x840c0, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x17, 0x9, 0xfffffff0, 0x8000, 0x842, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xca}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2040040}, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f00000002c0)) ioctl$XFS_IOC_ERROR_INJECTION(r2, 0x40085874, &(0x7f0000000340)={r3, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_GET_VINFO(r2, 0xc0186e86, &(0x7f0000000400)={&(0x7f0000000380)=[{0x7, 0x6, 0x69, 0x10}, {0x0, 0xfffffffffffffff8, 0x2, 0x5}, {0x9a7, 0x7, 0x7, 0x1c13}, {0x7, 0x6, 0x4, 0x4}], 0x4, 0x20, 0xb}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r5) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r6, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x800}]}, 0x24}}, 0x4040005) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000580)) listen(r2, 0xfffffff7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6gre0\x00', 0x0}) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000600)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r8, 0x0, 0x58, 0x9e, &(0x7f00000006c0)="7febd1a542aa7ecbee6253ac6a51e5597cd287f5eda23fd1281417eb6720747bcf3dd9651c60b440b1ad32eb3833e0b7d0cad9d8873b9d58edf30d1aa762883cf7fa6da7826e7bacdc32095440646fd09f8fe4ff0d768641", &(0x7f0000000740)=""/158, 0x6, 0x0, 0x9a, 0xa8, &(0x7f0000000800)="775af639ad03a44bc280a1f59e7cd564b10c6a824c7b90ea9d2120b3169c15a20484fb966ec4da8437a118914fc7e3c87cb97fd5a523c3e0774b6e782d6a737bcee8f8b7785dc08974f244918ddefbba7f356a6a2c8e781e17f36dac3409b7c597a39ef861b4f1ecbbfc4e1f7834230afba232dbe8c971fcfe99b33a1c6cbd2aee2b23c549d51a05bab846c0229006d004b95623555f869ce011", &(0x7f00000008c0)="65ad2eec20a41a8091cbdf1f0fe729b52a84805b665c8a390e87072c71c6c63e4fa5f349b48ca79c0ae90a7ca5664d3e8cbb7845528ecf138c61e89fa7b7ed8b14ac4a4c4c70795962904ad9720f1e69e923bceabca8ef8e6b167faca69cd963a8643e1cc37371ca1ad98be8a1e48c516528bb7e8c55d86a013fd0e7ac551a66bfdbd1c78282d623d0aad5c155a3007361c4adeede994f46b52cb6a790da22dd11bedbeaa593c3d0", 0x9, 0x0, 0xb449}, 0x50) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), 0xffffffffffffffff) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000a40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002140)=0x0) sendmmsg$nfc_llcp(r9, &(0x7f00000023c0)=[{&(0x7f0000000a80)={0x27, r10, 0x0, 0x6, 0xff, 0x8, "bff90b1a012c1b2479a638f1f8ca2bb64f80e907fc2c2469767e433ce9eb857eb58b9b983ab8271b79df833f8a53fde05bdc410d11d9349a88c6cd1f58c925", 0xd}, 0x60, &(0x7f0000000b40)=[{&(0x7f0000000b00)="76e9d5f5622c6726bb7dcd6a2b17f88233e07aec340a66b242f22ef07750c2590820a201219bed0a181baf72bb", 0x2d}], 0x1, 0x0, 0x0, 0x30048014}, {&(0x7f0000000bc0)={0x27, r11, 0x0, 0x1, 0x8, 0x90, "d7a3b2ff5f29311190cf5551c15491b1dc03c1c79aaa3680499c21ec753ff38737bbb6052517d8cbfdf3d25c452ef7fdfc76cc216df47444d5d589b1670942", 0x1c}, 0x60, &(0x7f0000001e80)=[{&(0x7f0000000c40)="dd6078f621adfc07bc296943f1db5cfbf46c5d91374a5b03fbc6d7a392ea0066d816a843ff60b59ef4706ddc9c7089108f0c5404b03bc7aaf1ea641f312c7b4e45eaca2731b3543229edd0e26d57fb69305bbfb7a0354385fadbf2de36d2d8d3c4a1c0b203bc2bfcaa96dd9e01e5c498e754af6a009679044e19730d6a4a7f80d6011ac81782c05a9c29fe872115602745eefd60dc7f13a195dba7c258f156bbbd674e69e634ddb211828ba07b3b283e0a7b0dac30542ef57e751c2605acf5aa41c96ac84aa39ead6408a35f9c93d63dbd33ea119a46dd93ab51a1bc87483f2586c78038", 0xe4}, {&(0x7f0000000d40)="53e96ded561cca435ad15e0130af430443e076710af78adab15d2e38e150fbbdea1c129fea77341089aa9b8365f8a0372289d51023a9c5808ff25eb9c104128915ba9a71382d0aee73b34e96487eedb8e5c85758d3b6b87a060d2e226e976fc058b241bd1a255071382742aac3334cb5804d4d66771b5e50c594e6aa3fa0a7316fa96352702173bbc45842574b4d9cf6e423c60fbd2141701896c8b08cab0ea75338e9a239da89a248a6e4b33d516a8c9d4455e12bfd0aeb55897255241c594d7dcdacd42af5386c43ef", 0xca}, {&(0x7f0000000e40)="ab", 0x1}, {&(0x7f0000000e80)="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", 0x1000}], 0x4, &(0x7f0000001ec0)={0x70, 0x10f, 0x4, "afd1937f32fd469ad48bf106943ab631911a517a1fd7f96dd4497c7969f56af50aea7629fa7a39439ec5dde2b257b96403593eb7b553f1156dec258d58b4d8fe772b0cbfb68da0f6e127c335767fe7e7b9dd1af7edcc542880770c48"}, 0x70, 0x4000000}, {&(0x7f0000001f40)={0x27, 0x0, 0x0, 0x6, 0xc, 0x1, "2510c19a036da89fed5dc94484528c978bf4239f231644929846e54c68055723051d64c24622a7a9d6c4d182375ece7240a9676c93022f97bd3c19123ecfea", 0x24}, 0x60, &(0x7f0000002040)=[{&(0x7f0000001fc0)}, {&(0x7f0000002000)="fa05e600d36257717aaa6928ff6bc8b1c770d98dd79db5e2764a2c408ca5dc74d89af471216c3b15bbedb192c07d53b002b7af90b32011", 0x37}], 0x2, &(0x7f0000002080)={0x90, 0x10f, 0x8, "28a4c3c7a2d4485d69f5f3cab6c732b58dde270da3bab69292b3d4e9f39f42f4915fe31b8f7cf7a6acd86e1dbfabdaac181be528f65562c9be3e66fa8ca78312d02b36f02c1b70da5205bc53e45b6d8e83cf208f0056276ee96a322289c778a55291c398d8484bfc0ecf304ea00e69042d5a75a5a98173bb5c0fd43cbee91696"}, 0x90, 0x40000}, {&(0x7f0000002180)={0x27, r12, 0x0, 0x2, 0x4, 0x9, "a0d0840bd26a0194b9f9eedd2852cc17578820ed5e091033ff78eda25df6e71c83f61886d04bf14045a74fe0428e51fef45443486daf7c51848a22cc1c2dde", 0xf}, 0x60, &(0x7f0000002340)=[{&(0x7f0000002200)="ec2f8f29a0f6f4b2fdb90045dc1c977ff63fb50ba65f5f1076b43e8aeed93c2c1e3ab3edee9fa0cc8ff25a5910c52fbafef3667e01f48d934e81efb87d39df", 0x3f}, {&(0x7f0000002240)="de4105547a9f43b34cb2129a51be99f7d242579ec131ca2be24d02f5a380dc2adec941d800498a846a4b31595f932d9dc30a166a307476f092ad4f554c86e6a19123d7f052e8ce59817feae769ce8ac95ee0f8bede61f387b1e88936921d5677464a8e5eddaa246dc6b75709ed7dc54d15bfe930ceaf0411cae9a36afe42895fecebc45da386d22823b566c9c74fb8873f9d3d674abaf0ccb2af215d423227af827fa7771ab7a9e68f83d98c8d9c4948e5750412b9068f8f562627495ba5047afb510c146f57ab9f2d95e3cb56567dbc19bb3602d3e2c2efd8", 0xd9}], 0x2, &(0x7f0000002380)={0x20, 0x0, 0x1, "7ac2b681f05fa7b3ee4505de"}, 0x20, 0x40d0}], 0x4, 0x4000000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f00000028c0)={{r0, &(0x7f00000026c0)='devlink\x00', 0x200, &(0x7f0000002700)={@_ha_fsid={[0x3]}, {0x7, 0x400, 0x10001, 0x81}}, 0x2, &(0x7f0000002740), &(0x7f0000002780)=0x2}, {[0x8001, 0x1ff, 0xe293, 0x4]}, 0x953, 0xe1, &(0x7f00000027c0)=""/225}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a80)={0x0, 0x19, &(0x7f00000024c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000025c0)='syzkaller\x00', 0x1, 0x8b, &(0x7f0000002600)=""/139, 0x41000, 0x44, '\x00', r7, 0x0, r13, 0x8, &(0x7f0000002940)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000002980)={0x3, 0x0, 0x101, 0x1}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000029c0)=[r1, r1, 0x1], &(0x7f0000002a00)=[{0x1, 0x2, 0xc, 0x7}, {0x5, 0x3, 0x9, 0x2}, {0x3, 0x4, 0x3, 0xd}, {0x4, 0x5, 0x5, 0x1}, {0x3, 0x5, 0xa, 0xc}, {0x3, 0x3, 0xd}], 0x10, 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002b40)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002b80)={'vcan0\x00'}) 1.183985129s ago: executing program 0 (id=4313): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x8000000000000003}, 0x18) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x43}}}}}, 0x20}}, 0x4040090) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x800, 0x0, 0x25dfdbfe, 0x7ffffffc, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008011}, 0x10) 1.132704629s ago: executing program 2 (id=4314): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000440)=0x2, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001500)={'ip6gre0\x00', &(0x7f0000001480)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x5, 0x3, 0x6c, @loopback, @mcast2, 0x1, 0x700, 0xe8c0, 0x6}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000015c0)={0x6, 0x23, &(0x7f0000000140)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa4a, 0x0, 0x0, 0x0, 0xfff}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @call={0x85, 0x0, 0x0, 0xc0}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000480)=""/4096, 0x41100, 0x25, '\x00', r2, 0x25, r1, 0x8, &(0x7f0000001540)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000001580)={0x3, 0xd, 0x3ff, 0x5f}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x659}, 0x94) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) sendfile(r0, r1, &(0x7f00000000c0)=0x1, 0x7ff) 1.085820088s ago: executing program 4 (id=4315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000060a010200000000000000000a0000010900010073797a310000000014000480100001800c0001007061796c6f6109d90800094000144000001100010000000000000000000000000a"], 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x24004854) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x1040, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x1040}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r3, 0x40086e81, &(0x7f0000000000)) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00040000000000001c0012800e000100697036677265746170000000080002800400120008000a00", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 985.811754ms ago: executing program 3 (id=4316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000001400038008000140000000000800024000000000340000001100010000000000000000000000000a"], 0x68}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) (async, rerun: 32) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, 0x9, 0x6, 0x701, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x19}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_LINENO={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x24000800) 984.586897ms ago: executing program 2 (id=4317): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffe6c, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="608859b3b7518d000004", @ANYRES8=r1, @ANYBLOB="010000000000000000e40100000044000480050003000500000005000300010000000500030005000000200003000100000005fe0300020000000500030000ff0000080002000200000008000100030000000000000000"], 0x68}}, 0x0) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38000000141401"], 0x38}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r2) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, r8, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) (async) sendmsg$NFC_CMD_VENDOR(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r5, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x40000) (async) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100), r0) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001600), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001640)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000001980)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001940)={&(0x7f0000001680)={0x2b0, r10, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x284, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e9e96d5068ad630d1f8de4dc93d26c96"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b002e474242eda995636b9a30795db87"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "fb2547fafe7010721b3fff2f3ef69e977187b702962ed500016bce8716fd898f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x48a}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "adf7e0b4c47e8ead4f52068f59b7688202ff7335c447a72653c281c5edc792f0"}, @NL802154_KEY_ATTR_ID={0xac, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x400}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xb9b}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffff41c}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x84}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2a434e4ae4133b871a29c2b82778ed551de1e81bb78aef88bb738e43315d778f"}, @NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_ID={0x80, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_ID={0x6c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x400}]}]}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r9, 0x200, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a30"], 0x118}}, 0x0) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r2) r15 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r15}, 0x8) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r16, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0x5, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0xfffffffffffffd41}]}]}, 0x70}}, 0x0) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000540)={0xffffffffffffffff}) (async) r18 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x13, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4}, [@generic={0x5, 0x2, 0x0, 0x2, 0x200}, @jmp={0x5, 0x0, 0x7, 0x1, 0x9, 0xfffffffffffffff0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @generic={0x5, 0x5, 0x8, 0xd6, 0x9ec}]}, &(0x7f0000000780)='GPL\x00', 0x9, 0x6a, &(0x7f00000007c0)=""/106, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000840)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000880)=[{0x5, 0x3, 0x1, 0xa}, {0x0, 0x2, 0x6, 0x1}, {0x5, 0x4, 0x5, 0xa}, {0x1, 0x1, 0x2, 0x4}], 0x10, 0x4}, 0x94) sendmsg$nl_route_sched(r17, &(0x7f0000000b00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000b40)=@delchain={0xa5c, 0x65, 0xf5932f752ff80f33, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x9}, {0x8, 0x2}, {0xffe0, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x100}, @filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0x3}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffff00}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xff}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x3}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @broadcast}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xff000000, 0xff000000, 0x0, 0xffffffff]}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @private=0xa010100}]}}, @TCA_CHAIN={0x8, 0xb, 0x5992}, @filter_kind_options=@f_route={{0xa}, {0x18, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x4e}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_TO={0x8, 0x2, 0x34}]}}, @filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_DIVISOR={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}, @TCA_FLOW_XOR={0x8, 0x7, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xcfc0}]}}, @filter_kind_options=@f_fw={{0x7}, {0x948, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xfff2}}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_macvtap\x00'}, @TCA_FW_POLICE={0x8c4, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x400, 0xffffffff, 0x1, 0x9, 0x5, 0x4, 0x9, 0x5, 0xfffffff8, 0x6, 0x3f612146, 0x54, 0x101, 0xfffffffb, 0x0, 0x1, 0x400, 0x2a, 0x5, 0x2, 0x7, 0x9eaa, 0xffff, 0xff, 0x73d9, 0x9, 0x8, 0x1, 0x6, 0xd266, 0x3, 0x2, 0x8, 0x8, 0x5c0b, 0x1d7, 0x4a, 0x4, 0x20000000, 0x3, 0x8001, 0x7, 0x1, 0x8001, 0x7fffffff, 0x9, 0x7, 0x9, 0x4597, 0x209c, 0x7fff, 0x10001, 0x80000001, 0x8, 0x6, 0x2, 0x3ff, 0x100, 0x9, 0xe4ed, 0xe, 0x4, 0x7f, 0x8, 0xffffffff, 0x9, 0x9, 0x3, 0x71a, 0x0, 0xdf, 0xb40, 0x5, 0x8001, 0x0, 0x6, 0x4, 0x6, 0x9, 0x6, 0x5, 0xa901, 0x10000, 0x1, 0xfff, 0xbb7c, 0x2, 0x4, 0x9ac2, 0x6, 0x8, 0x7fff, 0x8, 0x800, 0x2, 0x7, 0xd, 0x0, 0x6, 0x4, 0x0, 0x7, 0x10000, 0x1, 0x3, 0x9, 0xc8, 0x9, 0x9, 0x77, 0x6, 0xffffffff, 0x4048, 0x96, 0xa8d2, 0x2, 0x10, 0x1, 0x0, 0x3e, 0x1, 0xffffffff, 0x1, 0xf7b, 0x1, 0x6, 0xffffffff, 0x9, 0xfff, 0x9, 0x2, 0x7, 0x40000000, 0x80000001, 0x1, 0x5f, 0xb, 0x6, 0x768, 0x2, 0x8, 0x0, 0x6, 0x5, 0x9, 0x5, 0x81, 0xfffffffe, 0x6, 0xa0000000, 0x2, 0x401, 0x9be4, 0x1, 0xb, 0xfffffabe, 0x4, 0x5, 0xa, 0x1, 0x400, 0x6, 0x7, 0x4, 0x1, 0x5, 0x0, 0x5, 0x6, 0x22, 0xd9, 0x2, 0x844, 0x100, 0x1, 0x0, 0x3, 0x1, 0xcb8, 0x5, 0x2, 0x4, 0x1, 0x3, 0x2, 0xa930, 0x1, 0xc7, 0x7bc, 0x7d, 0x80000001, 0x0, 0x0, 0x80000001, 0x3, 0xde, 0x6d8a89be, 0xfffff800, 0x0, 0xfffffffc, 0x3, 0xffffffd2, 0xfffffff7, 0xa, 0x9, 0x86f3, 0xb13, 0x0, 0x10001, 0x3, 0x7, 0xa, 0x2, 0x8000, 0x800, 0x6, 0x5, 0xfffffc01, 0x1, 0x3, 0x951, 0x8, 0xd, 0xfff, 0x4, 0x3, 0xc8, 0xfffffffc, 0x4, 0xcc8, 0x7, 0x84, 0xffffff01, 0x4, 0x4, 0x3, 0x40, 0x8, 0x23bd, 0x1, 0x2, 0xc8c4, 0x64, 0x6, 0x0, 0x9, 0x1305bcf9, 0x2, 0x7, 0x5, 0x800, 0xb, 0x7, 0x800, 0x9, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x100, 0x9, 0x80000000, 0x6, 0x1, 0x2, 0x6, 0xc, 0x7f, 0x2, 0xff, 0x7ff, 0x10001, 0x50, 0x2e6, 0x2, 0xfffffffd, 0x10, 0x3, 0xec, 0x73, 0x9, 0xfffffff7, 0x0, 0x1, 0x3, 0x10, 0x2, 0x8, 0x6, 0x6, 0x5e1, 0x0, 0x6, 0x1, 0x2, 0x3, 0x8001, 0x0, 0x95bf447, 0x9, 0x2, 0x66c, 0x80000001, 0x8, 0xc, 0x6, 0x10001, 0x2, 0x3, 0x375, 0xfffffff8, 0x7f, 0x7c5f, 0x23c3041f, 0x9c, 0xd38, 0x5, 0x0, 0x4, 0x0, 0x0, 0x7, 0x7, 0x101, 0x5, 0x2, 0x8, 0x8b8, 0xb74, 0x9, 0x6, 0x0, 0x400, 0x0, 0x4, 0x8, 0x8, 0xffffffff, 0xf00, 0x8, 0xfffff47f, 0x6, 0x2, 0x5, 0x80000000, 0x9, 0x7, 0x10000, 0xdb36, 0x1ff, 0x0, 0x9f, 0x5605, 0x7ff, 0xfffffffd, 0x6, 0x0, 0x7, 0x10000, 0x7f, 0x5, 0xb3, 0x3, 0x3ff, 0x8, 0x5, 0x39, 0x6, 0x8, 0x401, 0x9, 0x8, 0x7f, 0x4, 0x6, 0x5, 0xffff, 0xffff, 0x7f, 0x10000, 0x7, 0xfffff000, 0x2d, 0x9, 0x8000, 0x116, 0x800, 0x6, 0x38f3, 0x5, 0x8, 0x4, 0x8, 0x3, 0xfffffffc, 0x7, 0x101, 0x96, 0x4, 0x23d00000, 0x8, 0x50ae, 0x5, 0x3, 0x6, 0x8, 0xfffffff4, 0x86a0, 0x1, 0x1, 0x3ff, 0x10000, 0xbd0, 0x0, 0x8000, 0x2, 0xffff8000, 0x2, 0x7f, 0x8, 0xfffff000, 0x81, 0x5, 0x0, 0xc, 0x8000, 0x4, 0x0, 0xffff, 0x9, 0xffffff18, 0xff, 0x8, 0x3, 0x1, 0x7, 0xd9, 0xffff, 0x9, 0x8, 0xfff, 0xd, 0xeca, 0xf, 0x9, 0x8, 0x400, 0x0, 0x0, 0x7fffffff, 0x6, 0x8c1, 0x5, 0x4edd, 0x3, 0xffffffff, 0x2, 0x5, 0x7, 0x5, 0x3, 0x10, 0x81, 0x8, 0x2, 0x4, 0x2, 0x8001, 0x9, 0x1ff, 0x5, 0x3, 0xfffff801, 0x1ff, 0x4, 0x4, 0x7, 0x0, 0x5, 0xf, 0x5, 0x51, 0x3ff, 0x4, 0x2, 0x9, 0xcf354d2, 0x400, 0xe8b9, 0x8, 0xe6c7, 0xfffffffe, 0x8, 0x7fff, 0xedb2, 0x7, 0x0, 0x2, 0x400, 0xf6, 0x1, 0x4, 0x7, 0x3, 0xc4c, 0x24000, 0x5, 0xf, 0xfffffff9, 0x4, 0x8, 0x2, 0x8, 0xd59, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0x2, 0x7, 0x9, 0x1, {0x7, 0x2, 0x65, 0x1, 0x4, 0xb}, {0x9, 0x0, 0x100, 0x7, 0x3, 0x3}, 0x7fff, 0x9, 0x6}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x8, 0x8, 0x1fb, 0x0, {0x8, 0x2, 0x400, 0x1, 0x8, 0xec7}, {0x2, 0x1, 0x1, 0x7, 0x9, 0x910e}, 0xc4a, 0x2, 0xff}}]}, @TCA_FW_INDEV={0x14, 0x3, 'nicvf0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xa, 0xe}}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x6, 0x1, 0xe2, 0x9, {0x70, 0x2, 0x8, 0x6, 0x6, 0x2}, {0xed, 0x0, 0xa, 0x81, 0x3, 0x36c5eebd}, 0x300c, 0x6145, 0x7}}]}, @TCA_FW_MASK={0x8, 0x5, 0x5}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_FD={0x8, 0x6, r18}, @TCA_BPF_CLASSID={0x8, 0x3, {0x10}}]}}]}, 0xa5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r13, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="200027bd7000fcdbdfa830000000050035005c00000005003400080000000a0001007770616e300000000500350009000000"], 0x38}}, 0x810) 910.988706ms ago: executing program 1 (id=4318): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000ec0)={0x24, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x24}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0xffffe000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000ec0)={0x24, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x24}}, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) (async) openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0xffffe000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) (async) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000040)) (async) 819.109149ms ago: executing program 0 (id=4319): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711206000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 689.841796ms ago: executing program 4 (id=4320): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000480)={0x2}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, &(0x7f0000000400), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(r2, &(0x7f0000000100)='hello', 0x5, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r5, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r7, 0x4}, &(0x7f0000000100)=0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090003", 0x17}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000000440)={0x84, 0x0, '\x00', [@generic={0xbb, 0x4, "4941fdbd"}]}, 0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, &(0x7f00000001c0)=0x8) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) 684.893494ms ago: executing program 1 (id=4321): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000000)=0x1820, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "047caf7cb26e8ec9", "f29f451e936fb266c71769d5c9b407b4", "c1e6d4d8", "d0f78ef12506d4ee"}, 0x28) 629.489443ms ago: executing program 0 (id=4322): r0 = socket$inet(0x2, 0x2, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e20, 0x3, 'lc\x00', 0x13, 0x7, 0x55}, {@loopback, 0x4e2a, 0x2000, 0x80000, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x718}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}], [{}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x5, 0x4c3, 0x0, {}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, "d5bea2784d005b17"}}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x40040090) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006800010000000000000000000a0000000400000008000500", @ANYRES32=r3, @ANYBLOB="a8c9a43ed2cdd3fcf5d0b5c480d557b5072b9f639c81f3cab2b2d9f12acd97c527dbc2b57caacd854e50b2fc932b403a0b732c4ac1166bba923301c4e99c933d3d6c27c74c7ef822bf843b408a95c83a89a5bb67169428808faefa21aab9b1f2eb4414a16d894f0912b5bf089a4a3d15a1ec14858b5971a84b8528b26a8383aaf98cee6a3f6f1f29326463c1416ac312966bcdff360f0ebb4211d1102d1c6bb96827cd812bafaafb19e058f7511a1d"], 0x20}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @empty}, &(0x7f0000000080)=0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8bda7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000200)={'gre0\x00', r7, 0x20, 0x700, 0x10001, 0x80000000, {{0x28, 0x4, 0x0, 0x4, 0xa0, 0x67, 0x0, 0xfa, 0x2f, 0x0, @broadcast, @multicast1, {[@end, @timestamp={0x44, 0x2c, 0xed, 0x0, 0x2, [0xffffff01, 0x9, 0xd9f, 0x9, 0x8, 0xffffffb8, 0x1, 0x1, 0x7, 0x7]}, @timestamp_prespec={0x44, 0xc, 0x18, 0x3, 0xc, [{@empty, 0x20000}]}, @noop, @timestamp_addr={0x44, 0x4c, 0x12, 0x1, 0x6, [{@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x3}, {@loopback, 0x6}, {@local, 0x100}, {@rand_addr=0x64010101, 0x4}, {@loopback, 0x2}, {@rand_addr=0x64010101, 0x100}, {@private=0xa010100, 0x9}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xa7}]}, @ra={0x94, 0x4}]}}}}}) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r9, 0x4) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008000000", @ANYBLOB="15"], 0x40}, 0x0) 489.017733ms ago: executing program 2 (id=4323): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000fe7f032171000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46df12f2137e00000000000000000000000000000001000000004229be437bd795feafd68063c8eb82ee80ba9625", 0x89}], 0x1}, 0x4000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f00000000c0)=[{0x9c}, {0x6}]}, 0x10) 170.490026ms ago: executing program 0 (id=4324): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd1af5ff00000000bfa100000000000007010000f8ff6611cfdd51a5a2260318c5ffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) (async) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000200)={0x2, [0x5, 0x5530]}, 0x8) (async) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=0xffffffc0, 0x4) (async) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x7}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r4, 0xffffffffffffffff, 0x26}, 0x10) (async) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000140), &(0x7f0000000480)=@tcp=r5, 0x2}, 0x20) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) (async) recvmmsg(r6, &(0x7f00000046c0)=[{{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000180)=""/192, 0xc0}, {&(0x7f0000000240)=""/64, 0x40}, {&(0x7f0000000300)=""/198, 0xc6}, {0x0}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f00000006c0)=""/4085, 0xff5}, {&(0x7f00000016c0)=""/220, 0xdc}, {&(0x7f00000018c0)=""/110, 0x6e}], 0x8}, 0x257a}, {{0x0, 0x0, 0x0}, 0xffffffff}], 0x3, 0x20, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e1f, 0x1, @mcast2}, 0x1c) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f00000001c0)) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) (async) sendmsg$can_bcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)={0x5, 0x355, 0x509, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, "35cf52530599b474"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x51) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r1, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 150.758379ms ago: executing program 1 (id=4325): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$alg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r2) writev(r2, &(0x7f00000026c0)=[{&(0x7f00000003c0)="efce26262f9664e339bcfe37d927424bbfc67f97fa792b31ce79d882", 0x1c}, {&(0x7f0000001240)="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", 0xf64}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x18, 0x901, 0x70bd2c, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000080)={0x6, 'bridge_slave_1\x00', {0x1}, 0x27}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x20000000) close(0x3) close(r5) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x0, 'veth1_to_hsr\x00', {0x4}, 0x1}) 1.125104ms ago: executing program 4 (id=4326): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x2, 0x4, 0x1, 0xbf22, 0x110}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x1, 0x4, 0x6, 0x0, r2}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x1001, 0x16}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0), &(0x7f0000000600)=@udp6=r4}, 0x20) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x2c, 0x0, 0xfc}, {0x6e61, 0xd}]}, 0x10) 0s ago: executing program 3 (id=4327): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x9c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r1}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000120065f2000000005c8602fb93ba9c00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): .2689': attribute type 10 has an invalid length. [ 332.695900][T16100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2689'. [ 332.950015][T16106] bond9: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 332.967575][T16106] bond9 (unregistering): Released all slaves [ 333.091658][T16115] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 333.097138][T16111] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 333.140193][T16111] netlink: 'syz.1.2693': attribute type 11 has an invalid length. [ 333.140625][T16115] netlink: 'syz.1.2693': attribute type 11 has an invalid length. [ 333.268090][T16125] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2696'. [ 333.425340][T16136] ip_tables: iptables: counters copy to user failed while replacing table [ 333.455792][T16136] ip_tables: iptables: counters copy to user failed while replacing table [ 333.512604][T16142] sctp: [Deprecated]: syz.3.2701 (pid 16142) Use of struct sctp_assoc_value in delayed_ack socket option. [ 333.512604][T16142] Use struct sctp_sack_info instead [ 334.155216][T16175] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 335.754898][T16260] tipc: Resetting bearer [ 335.754940][T16260] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 335.883685][T16260] tipc: Disabling bearer [ 335.886005][T16260] batman_adv: batadv0: Removing interface: syzkaller0 [ 335.905806][T16270] netlink: 'syz.0.2726': attribute type 10 has an invalid length. [ 335.979480][T16277] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 336.885256][T16325] __nla_validate_parse: 10 callbacks suppressed [ 336.885280][T16325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2739'. [ 336.927246][T16325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2739'. [ 337.175937][T16347] ±ÿÇl¡�­ˆiý: renamed from lo [ 337.404430][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2748'. [ 337.650673][T16366] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2751'. [ 337.665717][T16366] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2751'. [ 337.719341][T16370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2751'. [ 338.260509][T16386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2754'. [ 338.410486][T16391] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2756'. [ 338.410514][T16391] netlink: 21 bytes leftover after parsing attributes in process `syz.3.2756'. [ 338.410534][T16391] netlink: 21 bytes leftover after parsing attributes in process `syz.3.2756'. [ 338.516348][T16388] Cannot find del_set index 4 as target [ 338.695007][T16404] netlink: 'syz.4.2758': attribute type 1 has an invalid length. [ 338.743682][T16404] netlink: 'syz.4.2758': attribute type 1 has an invalid length. [ 338.785337][T16404] netlink: 'syz.4.2758': attribute type 1 has an invalid length. [ 338.819336][T16404] netlink: 'syz.4.2758': attribute type 1 has an invalid length. [ 338.944616][T16404] netlink: 'syz.4.2758': attribute type 1 has an invalid length. [ 339.089303][T16404] netlink: 'syz.4.2758': attribute type 1 has an invalid length. [ 339.256178][T16404] netlink: 'syz.4.2758': attribute type 1 has an invalid length. [ 339.383171][T16404] netlink: 'syz.4.2758': attribute type 1 has an invalid length. [ 339.390448][T16448] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 339.609163][T16459] netlink: 'syz.0.2768': attribute type 2 has an invalid length. [ 339.609814][T16459] netlink: 'syz.0.2768': attribute type 2 has an invalid length. [ 339.658466][ T3331] bond0: (slave bond_slave_0): interface is now down [ 339.658493][ T3331] bond0: (slave bond_slave_1): interface is now down [ 340.587394][T16508] 8021q: adding VLAN 0 to HW filter on device bond11 [ 341.004996][T16548] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 341.278187][T16534] vlan0 (unregistering): left allmulticast mode [ 341.278214][T16534] veth0_vlan (unregistering): left allmulticast mode [ 341.278236][T16534] vlan0 (unregistering): left promiscuous mode [ 341.635863][T16571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.745276][T16583] bridge6: entered allmulticast mode [ 342.049177][T16595] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 342.128209][T16604] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 342.148552][T16604] __nla_validate_parse: 79 callbacks suppressed [ 342.148574][T16604] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2813'. [ 342.149220][T16604] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2813'. [ 342.149530][T16604] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2813'. [ 342.216595][ T3331] bond0: (slave bond_slave_0): interface is now down [ 342.216621][ T3331] bond0: (slave bond_slave_1): interface is now down [ 342.259038][ T3331] bond0: now running without any active interface! [ 342.287749][T16609] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2816'. [ 342.324000][T16608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2816'. [ 342.421673][T16617] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2817'. [ 342.421729][T16617] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2817'. [ 342.538279][T16625] vcan0: tx address claim with dlc 0 [ 342.557692][T16629] vcan0: tx address claim with dlc 115 [ 342.818023][T16635] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 343.029610][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.043810][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.049152][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.071619][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.074592][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.171308][ T9806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.179318][ T9806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.204032][ T9806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.208840][ T9806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.210599][ T9806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.484540][T16675] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2832'. [ 344.008677][T16692] mac80211_hwsim hwsim25 syzkaller0: left promiscuous mode [ 344.008711][T16692] mac80211_hwsim hwsim25 syzkaller0: left allmulticast mode [ 344.491694][T16656] C speed is unknown, defaulting to 1000 [ 344.697444][T16730] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2845'. [ 344.775701][T16736] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2845'. [ 345.252335][ T9806] Bluetooth: hci5: command tx timeout [ 345.458109][T16767] validate_nla: 72 callbacks suppressed [ 345.458136][T16767] netlink: 'syz.3.2851': attribute type 30 has an invalid length. [ 345.606031][T16656] wg1 speed is unknown, defaulting to 1000 [ 345.947642][T16777] netlink: 'syz.3.2856': attribute type 1 has an invalid length. [ 346.007089][ T5720] hid-generic 0005:16C0:4155.0001: unknown main item tag 0x0 [ 346.007128][ T5720] hid-generic 0005:16C0:4155.0001: unknown main item tag 0x0 [ 346.007156][ T5720] hid-generic 0005:16C0:4155.0001: unknown main item tag 0x0 [ 346.007182][ T5720] hid-generic 0005:16C0:4155.0001: unknown main item tag 0x0 [ 346.007209][ T5720] hid-generic 0005:16C0:4155.0001: unknown main item tag 0x0 [ 346.007235][ T5720] hid-generic 0005:16C0:4155.0001: unknown main item tag 0x0 [ 346.007262][ T5720] hid-generic 0005:16C0:4155.0001: unknown main item tag 0x0 [ 346.007289][ T5720] hid-generic 0005:16C0:4155.0001: unknown main item tag 0x0 [ 346.007316][ T5720] hid-generic 0005:16C0:4155.0001: unknown main item tag 0x0 [ 346.007343][ T5720] hid-generic 0005:16C0:4155.0001: unknown main item tag 0x0 [ 346.217818][T16791] netlink: 'syz.3.2860': attribute type 21 has an invalid length. [ 346.305113][T16794] netlink: 'syz.4.2862': attribute type 27 has an invalid length. [ 346.405999][T16805] netlink: 'syz.3.2865': attribute type 11 has an invalid length. [ 347.186796][T16826] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 347.212240][T16826] bond8 (unregistering): Released all slaves [ 347.338474][ T9806] Bluetooth: hci5: command tx timeout [ 347.661515][T16656] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.662575][T16656] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.662768][T16656] bridge_slave_0: entered allmulticast mode [ 347.668834][T16656] bridge_slave_0: entered promiscuous mode [ 347.678728][T16656] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.685059][T16656] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.685555][T16656] bridge_slave_1: entered allmulticast mode [ 347.701345][T16656] bridge_slave_1: entered promiscuous mode [ 347.749667][T16852] netlink: 'syz.4.2872': attribute type 4 has an invalid length. [ 347.752183][T16850] netlink: 'syz.3.2874': attribute type 32 has an invalid length. [ 347.759271][T16847] netlink: 'syz.4.2872': attribute type 4 has an invalid length. [ 347.761969][T16850] netlink: 'syz.3.2874': attribute type 1 has an invalid length. [ 347.762019][T16850] __nla_validate_parse: 11 callbacks suppressed [ 347.762045][T16850] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2874'. [ 347.837349][T16854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2876'. [ 347.837376][T16854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2876'. [ 347.905563][T16845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2872'. [ 347.946924][T16656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.966049][T16656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.014856][T16656] team0: Port device team_slave_0 added [ 348.017889][T16656] team0: Port device team_slave_1 added [ 348.038035][T16859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.069401][T16656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.069420][T16656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.069450][T16656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.082878][T16862] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 348.142612][T16656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.142633][T16656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.142665][T16656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.334554][T16873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2880'. [ 348.334616][T16873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2880'. [ 348.360518][T16656] hsr_slave_0: entered promiscuous mode [ 348.369428][T16656] hsr_slave_1: entered promiscuous mode [ 348.418029][T16878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2881'. [ 348.418054][T16878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2881'. [ 348.509217][T16873] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2880'. [ 348.536998][ T5720] hid-generic 0005:16C0:4155.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 348.570991][T16871] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.2882'. [ 348.881888][T16883] fido_id[16883]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory [ 348.955654][T16894] netlink: 'syz.2.2883': attribute type 4 has an invalid length. [ 349.411382][ T9806] Bluetooth: hci5: command tx timeout [ 349.649535][T16656] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.649577][T16656] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.822390][T16656] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.822430][T16656] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.975632][T16656] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.975672][T16656] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.192091][T16656] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 350.192131][T16656] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.779448][ T4946] C speed is unknown, defaulting to 1000 [ 350.780597][ T4946] syz0: Port: 1 Link DOWN [ 350.858655][ T5735] C speed is unknown, defaulting to 1000 [ 351.014097][T16656] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 351.031947][T16656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 351.033097][T16656] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 351.060540][T16656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 351.069529][T16656] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 351.083072][T16656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 351.089782][T16656] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 351.109205][T16656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 351.335110][T16656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.389770][T16656] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.419339][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.419485][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.460373][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.460491][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.491079][ T9806] Bluetooth: hci5: command tx timeout [ 351.959116][T17020] netlink: 'syz.2.2913': attribute type 10 has an invalid length. [ 351.959340][T17020] team0: left promiscuous mode [ 351.994132][T17020] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.027030][T17020] team0: entered promiscuous mode [ 352.086721][T17020] bond0: (slave team0): Enslaving as an active interface with an up link [ 352.208501][T17029] netlink: 'syz.1.2915': attribute type 28 has an invalid length. [ 352.208537][T17029] netlink: 'syz.1.2915': attribute type 3 has an invalid length. [ 352.489110][T17038] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:27645 [ 352.518943][T17038] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 352.547085][T17038] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 352.730443][T17052] netlink: 'syz.2.2919': attribute type 6 has an invalid length. [ 352.939719][T16656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.137371][T17069] bond14: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 353.177811][T17069] bond14: (slave C): Enslaving as an active interface with an up link [ 353.178091][T17069] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 353.217194][ T5742] C speed is unknown, defaulting to 1000 [ 353.221206][ T5742] syz0: Port: 1 Link ACTIVE [ 353.250027][ T5742] C speed is unknown, defaulting to 1000 [ 353.252914][T16656] veth0_vlan: entered promiscuous mode [ 353.305474][T16656] veth1_vlan: entered promiscuous mode [ 353.450604][T16656] veth0_macvtap: entered promiscuous mode [ 353.484823][T16656] veth1_macvtap: entered promiscuous mode [ 353.516952][T16656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.547148][T16656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.632834][T15379] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.643843][T15379] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.664171][T15379] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.664626][T15379] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.763413][ T166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.763434][ T166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.889079][ T3331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.889103][ T3331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.098402][T17096] __nla_validate_parse: 17 callbacks suppressed [ 354.098425][T17096] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2932'. [ 354.195236][T17096] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2932'. [ 354.354193][ T5634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 354.359493][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 354.376033][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 354.388873][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 354.392834][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 354.505005][T17112] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2935'. [ 354.925006][T17135] openvswitch: netlink: VLAN attribute unexpected. [ 355.064598][T17139] xt_hashlimit: size too large, truncated to 1048576 [ 356.027643][T17167] netlink: 'syz.4.2949': attribute type 4 has an invalid length. [ 356.256038][T17183] netlink: 'syz.3.2951': attribute type 9 has an invalid length. [ 356.456533][ T9806] Bluetooth: hci0: command tx timeout [ 357.866969][T17109] C speed is unknown, defaulting to 1000 [ 357.989710][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.989751][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.989781][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 358.105231][T17185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'. [ 358.120904][T17185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2953'. [ 358.183072][T17185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'. [ 358.249443][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.249484][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.249514][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 358.310551][T17193] netlink: 'syz.2.2954': attribute type 4 has an invalid length. [ 358.386842][T17197] x_tables: duplicate underflow at hook 2 [ 358.425361][T17196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2954'. [ 358.425963][T17185] macvlan2: entered promiscuous mode [ 358.425984][T17185] macvlan2: entered allmulticast mode [ 358.426154][T17185] team0: Device macvlan2 is already an upper device of the team interface [ 358.531974][ T9806] Bluetooth: hci0: command tx timeout [ 358.564465][T17109] wg1 speed is unknown, defaulting to 1000 [ 358.751573][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.751613][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.751642][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 358.821479][ T3292] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 359.036939][ T59] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.038778][ T59] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.038811][ T59] netdevsim netdevsim1  (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 359.787281][T17251] syz_tun: entered allmulticast mode [ 359.931752][T17246] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.2966'. [ 359.933266][T17245] syz_tun: left allmulticast mode [ 359.940041][T17257] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 360.007595][T17257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2968'. [ 360.040378][ T59] bond5: left allmulticast mode [ 360.050314][ T59] bond5: left promiscuous mode [ 360.062498][ T59] bridge0: port 1(bond5) entered disabled state [ 360.153009][ T59] pim6reg527: left allmulticast mode [ 360.183595][T17270] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 360.228524][T17271] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2970'. [ 360.228553][T17271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2970'. [ 360.228570][T17271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2970'. [ 360.624302][ T9806] Bluetooth: hci0: command tx timeout [ 360.652375][T17288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2978'. [ 361.002590][ T59] bond0 (unregistering): (slave team0): Releasing backup interface [ 361.005464][ T59] bond0 (unregistering): Released all slaves [ 361.026818][ T59] bond1 (unregistering): Released all slaves [ 361.052741][ T59] bond2 (unregistering): Released all slaves [ 361.072832][ T59] bond3 (unregistering): Released all slaves [ 361.095138][ T59] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 361.097029][ T59] bond4 (unregistering): Released all slaves [ 361.130667][ T59] bond5 (unregistering): Released all slaves [ 361.145970][ T59] bond6 (unregistering): Released all slaves [ 361.166890][ T59] bond7 (unregistering): Released all slaves [ 361.198578][T17257] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 361.227444][T17267] bond12: entered promiscuous mode [ 361.227470][T17267] bond12: entered allmulticast mode [ 361.472691][T17289] geneve5: entered promiscuous mode [ 361.472719][T17289] geneve5: entered allmulticast mode [ 361.502876][ T59] : left promiscuous mode [ 361.550190][T17300] netlink: 'syz.3.2979': attribute type 21 has an invalid length. [ 361.550215][T17300] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2979'. [ 361.709021][T17300] netlink: 'syz.3.2979': attribute type 5 has an invalid length. [ 361.709046][T17300] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2979'. [ 361.738587][T17316] rdma_op ffff8880359a5238 conn xmit_rdma 0000000000000000 [ 361.751068][T15379] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 361.752033][T15379] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 361.752081][T15379] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 361.752122][T15379] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 361.842806][T17315] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2983'. [ 361.919127][T17318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2985'. [ 362.015834][T17326] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 362.290636][T17337] netlink: 'syz.0.2990': attribute type 1 has an invalid length. [ 362.375303][T17109] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.375425][T17109] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.375585][T17109] bridge_slave_0: entered allmulticast mode [ 362.399025][T17109] bridge_slave_0: entered promiscuous mode [ 362.445981][T17109] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.446092][T17109] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.446723][T17109] bridge_slave_1: entered allmulticast mode [ 362.479575][T17109] bridge_slave_1: entered promiscuous mode [ 362.611309][T17109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.653403][T17109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.691726][ T9806] Bluetooth: hci0: command tx timeout [ 362.848803][T17353] syz_tun: entered allmulticast mode [ 362.907367][T17109] team0: Port device team_slave_0 added [ 362.957552][T17109] team0: Port device team_slave_1 added [ 363.023140][T17363] 8021q: adding VLAN 0 to HW filter on device bond13 [ 363.310248][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 363.320861][T17109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.320881][T17109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.320914][T17109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.335831][T17109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.335887][T17109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.335973][T17109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.768677][T17109] hsr_slave_0: entered promiscuous mode [ 363.784615][T17109] hsr_slave_1: entered promiscuous mode [ 363.785423][T17109] debugfs: 'hsr0' already exists in 'hsr' [ 363.785444][T17109] Cannot create hsr debugfs directory [ 364.187520][T17404] netlink: 'syz.4.3002': attribute type 1 has an invalid length. [ 364.187930][T17406] netlink: 'syz.0.3004': attribute type 5 has an invalid length. [ 364.825820][T17443] netlink: 'syz.4.3011': attribute type 1 has an invalid length. [ 364.825845][T17443] netlink: 'syz.4.3011': attribute type 1 has an invalid length. [ 364.825861][T17443] netlink: 'syz.4.3011': attribute type 1 has an invalid length. [ 365.487637][T17464] __nla_validate_parse: 7 callbacks suppressed [ 365.487659][T17464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3012'. [ 365.487691][T17464] netlink: 'syz.2.3012': attribute type 7 has an invalid length. [ 365.487706][T17464] netlink: 'syz.2.3012': attribute type 8 has an invalid length. [ 365.487720][T17464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3012'. [ 365.513213][ T59] veth1_macvtap: left promiscuous mode [ 365.513446][ T59] veth0_macvtap: left promiscuous mode [ 365.514410][ T59] veth1_vlan: left promiscuous mode [ 365.514816][ T59] veth0_vlan: left promiscuous mode [ 366.100407][ T59] smc: removing net device team0 with user defined pnetid SYZ2 [ 366.132544][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 366.496150][T17474] sit0: entered promiscuous mode [ 366.511429][T17474] netlink: 'syz.3.3016': attribute type 1 has an invalid length. [ 366.511453][T17474] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3016'. [ 366.807316][T17488] netlink: 'syz.3.3020': attribute type 1 has an invalid length. [ 367.045177][T17488] 8021q: adding VLAN 0 to HW filter on device bond14 [ 367.076730][T17488] netlink: 'syz.3.3020': attribute type 1 has an invalid length. [ 367.346949][T17488] 8021q: adding VLAN 0 to HW filter on device bond15 [ 367.472586][ T59] IPVS: stop unused estimator thread 0... [ 367.499922][T17519] x_tables: duplicate underflow at hook 1 [ 367.509624][T17520] x_tables: duplicate underflow at hook 1 [ 367.575691][T17488] 8021q: adding VLAN 0 to HW filter on device bond16 [ 367.886719][T17542] xt_policy: too many policy elements [ 367.890035][T17539] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 367.890070][T17539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.934049][T17551] xt_policy: too many policy elements [ 368.011711][T17555] ip6t_rpfilter: unknown options [ 368.201160][T17565] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 368.649901][T17582] ip_tables: iptables: counters copy to user failed while replacing table [ 368.893310][T17109] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 368.925429][T17109] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 368.929552][T17109] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 368.948791][T17599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3032'. [ 368.969836][T17109] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 368.983466][T17109] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 369.014105][T17109] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 369.015491][T17109] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 369.067756][T17109] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 369.235937][T17609] IPVS: set_ctl: invalid protocol: 183 172.20.20.53:20002 [ 369.523619][T17609] C speed is unknown, defaulting to 1000 [ 369.622683][T17109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.625715][T17637] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 369.715937][T17109] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.734665][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.734787][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.743978][T17638] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3038'. [ 369.924076][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.924188][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.973690][T17638] validate_nla: 4 callbacks suppressed [ 369.973705][T17638] netlink: 'syz.0.3038': attribute type 1 has an invalid length. [ 369.973716][T17638] netlink: 'syz.0.3038': attribute type 4 has an invalid length. [ 369.973726][T17638] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3038'. [ 370.586395][T17674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3047'. [ 370.627483][T17678] Bluetooth: MGMT ver 1.23 [ 370.637949][T17678] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 370.764817][T17609] wg1 speed is unknown, defaulting to 1000 [ 370.819739][T17682] openvswitch: netlink: IP tunnel TTL not specified. [ 370.836994][T17682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3048'. [ 370.957579][T17682] bond21: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 370.974366][T17682] bond21 (unregistering): Released all slaves [ 371.555477][T17714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3055'. [ 371.555502][T17714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3055'. [ 371.587147][T17716] ip_tables: iptables: counters copy to user failed while replacing table [ 371.601641][T17716] netlink: 'syz.0.3056': attribute type 4 has an invalid length. [ 372.082925][T17744] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 372.344228][T17109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.580952][T17109] veth0_vlan: entered promiscuous mode [ 372.642558][T17109] veth1_vlan: entered promiscuous mode [ 372.692505][ T5634] Bluetooth: hci0: command 0x0c3a tx timeout [ 372.693786][ T9806] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 372.865178][T17762] openvswitch: netlink: Actions may not be safe on all matching packets [ 373.033556][T17761] bond21: entered promiscuous mode [ 373.034663][T17761] bond21: entered allmulticast mode [ 373.037730][T17761] 8021q: adding VLAN 0 to HW filter on device bond21 [ 373.142664][T17109] veth0_macvtap: entered promiscuous mode [ 373.176636][T17109] veth1_macvtap: entered promiscuous mode [ 373.347845][T17109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.368711][T17109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.410996][T17521] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.411735][T17521] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.411860][T17521] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.411939][T17521] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.550458][T17798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3067'. [ 373.592712][T17792] IPVS: stopping backup sync thread 7975 ... [ 373.842732][T17526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.842756][T17526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.944947][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.944971][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.966033][T17806] smc: net device team0 applied user defined pnetid SYZ2 [ 374.003197][T17812] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3071'. [ 374.015154][T17812] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3071'. [ 374.229810][T17821] netlink: 'syz.0.3073': attribute type 142 has an invalid length. [ 374.229840][T17821] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3073'. [ 374.767907][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 374.785024][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 374.786391][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 374.788549][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 374.798203][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.952600][T17845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3079'. [ 374.952638][T17845] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3079'. [ 375.249031][T17856] C: entered promiscuous mode [ 375.308640][T17856] tunl0: entered promiscuous mode [ 375.705067][T17856] gre0: entered promiscuous mode [ 375.778202][T17856] gretap0: entered promiscuous mode [ 375.909550][T17890] __nla_validate_parse: 2 callbacks suppressed [ 375.909573][T17890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3087'. [ 375.909602][T17890] netlink: 'syz.0.3087': attribute type 7 has an invalid length. [ 375.909615][T17890] netlink: 'syz.0.3087': attribute type 8 has an invalid length. [ 375.909628][T17890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3087'. [ 375.961299][T17856] ip_vti0: entered promiscuous mode [ 375.963139][T17891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3087'. [ 375.999422][T17856] ip6_vti0: entered promiscuous mode [ 376.163615][T17521] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.163670][T17521] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.425225][T17521] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.425272][T17521] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.483587][T17840] C speed is unknown, defaulting to 1000 [ 376.564259][T17911] can: request_module (can-proto-4) failed. [ 376.687269][T17521] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.687315][T17521] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.751202][T17916] netlink: 'syz.1.3094': attribute type 3 has an invalid length. [ 376.835812][T17521] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.835852][T17521] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.933855][ T9806] Bluetooth: hci3: command tx timeout [ 377.169883][T17840] wg1 speed is unknown, defaulting to 1000 [ 377.230093][T17934] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3099'. [ 377.245371][T17934] netlink: 'syz.0.3099': attribute type 24 has an invalid length. [ 377.409892][T17938] xt_hashlimit: size too large, truncated to 1048576 [ 377.549686][T17521] bond7: left allmulticast mode [ 377.549830][T17521] bond7: left promiscuous mode [ 377.551501][T17521] bridge0: port 3(bond7) entered disabled state [ 377.579669][T17948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3102'. [ 377.580573][T17521] bridge_slave_0: left allmulticast mode [ 377.597955][T17958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3104'. [ 377.601986][T17521] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.638756][T17521] pim6reg527: left allmulticast mode [ 377.638947][T17521] pimreg: left allmulticast mode [ 377.639054][T17521] dvmrp8: left allmulticast mode [ 377.639169][T17521] pimreg3: left allmulticast mode [ 378.000453][T17521] bond9 (unregistering): (slave gretap1): Releasing backup interface [ 378.117600][T17521] bond8 (unregistering): (slave bridge2): Releasing backup interface [ 378.170498][T17521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.186977][T17521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.189455][T17521] bond0 (unregistering): (slave team0): Releasing backup interface [ 378.190060][T17521] team0: left promiscuous mode [ 378.214767][T17521] bond0 (unregistering): Released all slaves [ 378.220337][T17521] bond1 (unregistering): Released all slaves [ 378.247378][T17521] bond2 (unregistering): Released all slaves [ 378.267151][T17521] bond3 (unregistering): Released all slaves [ 378.287072][T17521] bond4 (unregistering): Released all slaves [ 378.307570][T17521] bond5 (unregistering): Released all slaves [ 378.325734][T17521] bond6 (unregistering): Released all slaves [ 378.342340][T17521] bond7 (unregistering): Released all slaves [ 378.356740][T17521] bond8 (unregistering): Released all slaves [ 378.378397][T17521] bond9 (unregistering): Released all slaves [ 378.400462][T17521] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 378.407267][T17521] bond10 (unregistering): Released all slaves [ 378.425239][T17521] bond11 (unregistering): Released all slaves [ 378.444208][T17521] bond12 (unregistering): (slave veth5): Releasing active interface [ 378.446581][T17521] bond12 (unregistering): Released all slaves [ 378.469965][T17521] bond13 (unregistering): Released all slaves [ 378.489241][T17521] bond14 (unregistering): (slave C): Releasing backup interface [ 378.489738][T17521] bond14 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 378.489973][T17521] bond14 (unregistering): Released all slaves [ 378.529196][T17521] bond15 (unregistering): Released all slaves [ 378.739391][T17960] xt_TCPMSS: Only works on TCP SYN packets [ 378.751175][T17960] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3106'. [ 379.011502][ T9806] Bluetooth: hci3: command tx timeout [ 379.216169][T17974] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3110'. [ 379.400401][T17984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3113'. [ 379.400425][T17984] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3113'. [ 379.999117][T18011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.408891][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 380.665810][T17840] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.669734][T17840] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.669906][T17840] bridge_slave_0: entered allmulticast mode [ 380.685271][T17840] bridge_slave_0: entered promiscuous mode [ 380.796563][T17840] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.796674][T17840] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.796840][T17840] bridge_slave_1: entered allmulticast mode [ 380.827391][T17840] bridge_slave_1: entered promiscuous mode [ 381.050436][T17840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.089392][T17840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.091606][ T9806] Bluetooth: hci3: command tx timeout [ 381.169271][T18049] __nla_validate_parse: 4 callbacks suppressed [ 381.169299][T18049] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3128'. [ 381.259793][T18059] netlink: 'syz.1.3131': attribute type 2 has an invalid length. [ 381.259820][T18059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3131'. [ 381.484062][T17840] team0: Port device team_slave_0 added [ 381.518991][T17840] team0: Port device team_slave_1 added [ 381.692744][T18073] netlink: 'syz.4.3134': attribute type 12 has an invalid length. [ 381.692771][T18073] netlink: 'syz.4.3134': attribute type 29 has an invalid length. [ 381.692788][T18073] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3134'. [ 381.692811][T18073] netlink: 'syz.4.3134': attribute type 1 has an invalid length. [ 381.692827][T18073] netlink: 'syz.4.3134': attribute type 2 has an invalid length. [ 381.692842][T18073] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3134'. [ 381.862657][T18079] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 381.863545][T18078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3134'. [ 381.892969][T17840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.892989][T17840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.893020][T17840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.959840][T17840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.959859][T17840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.959891][T17840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.018870][T18084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3136'. [ 382.122739][T18089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3138'. [ 382.358492][T17521] veth1_macvtap: left promiscuous mode [ 382.358532][T17521] veth0_macvtap: left promiscuous mode [ 382.409848][T18106] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3140'. [ 382.635111][T18113] ip_tables: iptables: counters copy to user failed while replacing table [ 382.700523][T18115] atomic_op ffff8880334271e0 conn xmit_atomic 0000000000000000 [ 382.726843][T18117] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3143'. [ 382.727650][T18117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3143'. [ 382.963148][T17521] team0 (unregistering): Port device team_slave_1 removed [ 382.982873][T17521] team0 (unregistering): Port device team_slave_0 removed [ 383.169382][ T35] smc: removing ib device syz0 [ 383.180802][ T9806] Bluetooth: hci3: command tx timeout [ 383.220368][ T35] smbdirect: ib_dev[syz0] removed [ 383.276702][T18104] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 383.276781][T18105] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 383.300491][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 383.538130][T17840] hsr_slave_0: entered promiscuous mode [ 383.547267][T17840] hsr_slave_1: entered promiscuous mode [ 383.561283][T17840] debugfs: 'hsr0' already exists in 'hsr' [ 383.561307][T17840] Cannot create hsr debugfs directory [ 384.516456][T18173] Cannot find add_set index 34 as target [ 384.519398][T18173] Cannot find add_set index 34 as target [ 385.690988][T18208] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 385.737470][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 385.913695][ T5728] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 386.035709][ T31] audit: type=1800 audit(1791043436.599:8): pid=18216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3161" name="memory.events" dev="tmpfs" ino=156 res=0 errno=0 [ 386.087880][ T31] audit: type=1804 audit(1791043436.649:9): pid=18216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3161" name="/newroot/27/memory.events" dev="tmpfs" ino=156 res=1 errno=0 [ 386.371291][ T5735] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 386.846196][T18230] openvswitch: netlink: Flow actions attr not present in new flow. [ 386.948526][T18239] netlink: 'syz.0.3167': attribute type 12 has an invalid length. [ 387.128892][T18254] __nla_validate_parse: 8 callbacks suppressed [ 387.128916][T18254] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3169'. [ 387.267085][T17521] IPVS: stop unused estimator thread 0... [ 387.282754][T17840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 387.319304][T17840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 387.320286][T17840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 387.353172][T17840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 387.355730][T17840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 387.404057][T17840] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 387.407881][T17840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 387.449086][T17840] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 387.513777][T18258] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 387.677236][T18268] tipc: Failed to obtain node identity [ 387.677272][T18268] tipc: Enabling of bearer rejected, failed to enable media [ 387.822079][T17840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.868028][T17840] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.901803][T17521] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.901920][T17521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.942074][T17521] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.942216][T17521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.060147][T18289] netlink: 'syz.0.3178': attribute type 2 has an invalid length. [ 388.060171][T18289] netlink: 'syz.0.3178': attribute type 8 has an invalid length. [ 388.060186][T18289] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3178'. [ 388.462415][T18309] netlink: 'syz.3.3183': attribute type 1 has an invalid length. [ 388.528649][T18309] bond17: entered promiscuous mode [ 388.529139][T18309] 8021q: adding VLAN 0 to HW filter on device bond17 [ 388.653639][T18321] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3185'. [ 388.657125][T18321] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3185'. [ 388.960044][T18337] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3188'. [ 389.069765][T18347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.156841][T18352] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3191'. [ 389.525563][T18370] netlink: 'syz.3.3192': attribute type 21 has an invalid length. [ 389.684510][T18359] syzkaller1: entered promiscuous mode [ 389.684534][T18359] syzkaller1: entered allmulticast mode [ 389.928762][T17840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.943534][T18348] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 389.943560][T18348] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 390.207798][T18402] xt_TPROXY: Can be used only with -p tcp or -p udp [ 390.235634][T18348] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 390.235659][T18348] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 390.301786][T17840] veth0_vlan: entered promiscuous mode [ 390.315080][T18402] netlink: 'syz.0.3197': attribute type 1 has an invalid length. [ 390.380532][T18402] bond1: option mode: invalid value (12) [ 390.396938][T18402] bond1 (unregistering): Released all slaves [ 390.635374][T18348] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 390.635401][T18348] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 390.637393][T17840] veth1_vlan: entered promiscuous mode [ 390.817356][T17840] veth0_macvtap: entered promiscuous mode [ 390.858246][T17840] veth1_macvtap: entered promiscuous mode [ 390.955768][T17840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.000284][T17840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.120254][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.218223][T17523] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.218575][T17523] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.218615][T17523] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.565458][T18432] bond18 (unregistering): Released all slaves [ 391.587884][T18443] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3203'. [ 391.614522][T18434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3201'. [ 391.614559][T18434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3201'. [ 391.642473][T18434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3201'. [ 391.697449][T18446] x_tables: unsorted entry at hook 4 [ 391.697791][T18445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.738614][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.738638][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.741752][T17526] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.742733][T17526] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.821038][T17524] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.821093][T17524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.821110][T17524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.821347][T17524] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.921189][T18448] netlink: 'syz.0.3205': attribute type 1 has an invalid length. [ 392.023024][T18448] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.081385][T18448] bond1: (slave geneve2): making interface the new active one [ 392.082720][T18448] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 392.209328][T18466] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 392.436168][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 392.460247][ T5634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 392.470643][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 392.492082][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 392.492853][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 392.666742][T18486] syz_tun: entered allmulticast mode [ 392.809075][T18480] syz_tun: left allmulticast mode [ 392.900588][ T35] tipc: Subscription rejected, illegal request [ 393.085623][ T5621] syz_tun (unregistering): left allmulticast mode [ 393.233706][T18493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.363180][T18512] __nla_validate_parse: 2 callbacks suppressed [ 393.363203][T18512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3221'. [ 393.585772][T18515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.646574][T18515] syzkaller0: entered promiscuous mode [ 393.646601][T18515] syzkaller0: entered allmulticast mode [ 393.886160][T18534] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3224'. [ 393.948957][T18473] wg1 speed is unknown, defaulting to 1000 [ 394.315637][T18543] bond22: option resend_igmp: invalid value (32767) [ 394.315663][T18543] bond22: option resend_igmp: allowed values 0 - 255 [ 394.337850][T18543] bond22 (unregistering): Released all slaves [ 394.530898][ T9806] Bluetooth: hci4: command tx timeout [ 394.646632][T18553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3228'. [ 395.200321][T18583] ip_tables: iptables: counters copy to user failed while replacing table [ 395.284688][T18585] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3237'. [ 395.422842][T18473] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.423008][T18473] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.423582][T18473] bridge_slave_0: entered allmulticast mode [ 395.428068][T18473] bridge_slave_0: entered promiscuous mode [ 395.444908][T18473] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.445178][T18473] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.445646][T18473] bridge_slave_1: entered allmulticast mode [ 395.465375][T18473] bridge_slave_1: entered promiscuous mode [ 395.497123][T18588] block nbd0: reconnected socket [ 395.519181][T18588] netlink: 'syz.2.3239': attribute type 1 has an invalid length. [ 395.519437][T18588] block nbd296: server does not support multiple connections per device. [ 395.523882][ T9806] block nbd0: Receive control failed (result -32) [ 395.551668][T18588] block nbd296: shutting down sockets [ 395.604887][T18473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.608404][T18473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.720135][T18608] ip6t_ah: unknown flags 5 [ 395.747958][T18602] nbd: must specify at least one socket [ 395.759887][T18473] team0: Port device team_slave_0 added [ 395.768967][T18473] team0: Port device team_slave_1 added [ 395.809195][T18473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.809214][T18473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.809244][T18473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.856447][T18473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.856466][T18473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.856497][T18473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.989502][T18473] hsr_slave_0: entered promiscuous mode [ 395.990600][T18473] hsr_slave_1: entered promiscuous mode [ 395.991984][T18473] debugfs: 'hsr0' already exists in 'hsr' [ 395.992005][T18473] Cannot create hsr debugfs directory [ 396.032488][T18618] tipc: Started in network mode [ 396.032520][T18618] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 396.032742][T18618] tipc: Enabled bearer , priority 0 [ 396.111760][T18618] tipc: Enabling of bearer rejected, already enabled [ 396.143583][T18624] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 396.206559][T18624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.417396][T18473] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.417438][T18473] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.417473][T18473] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 396.417493][T18473] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 48434 - 0 [ 396.611218][ T9806] Bluetooth: hci4: command tx timeout [ 396.669197][T18473] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.669259][T18473] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.669289][T18473] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 396.669319][T18473] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 48434 - 0 [ 396.899919][T18473] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.899959][T18473] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.899989][T18473] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 396.900025][T18473] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 48434 - 0 [ 397.013896][T18661] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3257'. [ 397.055774][ T30] tipc: Node number set to 43690 [ 397.121543][T18473] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.121584][T18473] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.121613][T18473] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 397.121638][T18473] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 48434 - 0 [ 397.310543][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3260'. [ 397.485714][T18678] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3262'. [ 397.572384][T18473] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 397.591580][T18473] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 397.593672][T18473] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 397.620321][T18473] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 397.631449][T18473] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 397.641986][T18473] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 397.658683][T18473] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 397.676142][T18683] netlink: 'syz.4.3264': attribute type 1 has an invalid length. [ 397.677014][T18473] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 397.805052][T18691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3265'. [ 397.854477][T17526] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 397.854668][T17526] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 397.881323][ T4946] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 397.913129][T18473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.944932][T18473] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.966220][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.966319][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.010413][T17524] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.010526][T17524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.053053][T18702] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3270'. [ 398.103137][T18705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3266'. [ 398.125599][T18708] netlink: 'syz.4.3271': attribute type 1 has an invalid length. [ 398.177698][T18712] ip_tables: iptables: counters copy to user failed while replacing table [ 398.210943][T18708] 8021q: adding VLAN 0 to HW filter on device bond22 [ 398.257682][T18708] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 398.274115][T18708] bond22: (slave batadv1): making interface the new active one [ 398.275756][T18708] bond22: (slave batadv1): Enslaving as an active interface with an up link [ 398.321090][ T4946] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 398.373041][T18713] bond22: (slave veth13): Enslaving as an active interface with a down link [ 398.382880][ T4946] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 398.721638][ T9806] Bluetooth: hci4: command tx timeout [ 398.825909][T18731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.859006][T18732] netlink: 'syz.4.3272': attribute type 1 has an invalid length. [ 398.859031][T18732] netlink: 'syz.4.3272': attribute type 268 has an invalid length. [ 398.859048][T18732] __nla_validate_parse: 1 callbacks suppressed [ 398.859062][T18732] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3272'. [ 399.607979][T18747] erspan0: entered promiscuous mode [ 399.608008][T18747] erspan0: entered allmulticast mode [ 399.696807][T18473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.927027][T18762] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 399.928810][T18762] bond2 (unregistering): Released all slaves [ 400.047080][T18473] veth0_vlan: entered promiscuous mode [ 400.090660][T18762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3279'. [ 400.091284][T18762] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3279'. [ 400.119904][T18772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3279'. [ 400.120308][T18772] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3279'. [ 400.155403][T18762] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 400.217267][T18762] bond2 (unregistering): Released all slaves [ 400.394818][T18473] veth1_vlan: entered promiscuous mode [ 400.550134][T18797] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3287'. [ 400.566827][T18797] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3287'. [ 400.599882][T18800] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3288'. [ 400.603291][T18801] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3288'. [ 400.621788][T18473] veth0_macvtap: entered promiscuous mode [ 400.639954][T18473] veth1_macvtap: entered promiscuous mode [ 400.706375][T18473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.732721][T18473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.773444][ T9806] Bluetooth: hci4: command tx timeout [ 400.785528][ T3331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.786818][ T3331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.786859][ T3331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.786913][ T3331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.869953][T18807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3290'. [ 400.996587][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.996612][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.006395][T18809] sctp: [Deprecated]: syz.4.3291 (pid 18809) Use of struct sctp_assoc_value in delayed_ack socket option. [ 401.006395][T18809] Use struct sctp_sack_info instead [ 401.058123][T18814] Bluetooth: hci0: unsupported parameter 5135 [ 401.058149][T18814] Bluetooth: hci0: unsupported parameter 8192 [ 401.058165][T18814] Bluetooth: hci0: unsupported parameter 5135 [ 401.058179][T18814] Bluetooth: hci0: unsupported parameter 8192 [ 401.123868][T18814] netdevsim netdevsim2 : renamed from netdevsim0 [ 401.213135][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.213159][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.435574][T18830] openvswitch: netlink: Key type 193 is out of range max 32 [ 401.731043][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 401.857146][T18850] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 402.355376][ T1037] IPVS: starting estimator thread 0... [ 402.379088][T18875] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 402.407140][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 402.432894][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 402.436906][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 402.448205][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 402.463275][T18876] IPVS: using max 25 ests per chain, 60000 per kthread [ 402.472628][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 402.652806][ T5623] tipc: Resetting bearer [ 402.747692][ T5623] syz_tun (unregistering): left allmulticast mode [ 402.749079][ T5623] tipc: Disabling bearer [ 402.781772][ T5623] syz_tun (unregistering): left promiscuous mode [ 403.242623][T18919] netlink: 'syz.0.3316': attribute type 21 has an invalid length. [ 403.330170][T18874] wg1 speed is unknown, defaulting to 1000 [ 404.462520][T18985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 404.463554][T18874] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.463796][T18874] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.464276][T18874] bridge_slave_0: entered allmulticast mode [ 404.466978][T18874] bridge_slave_0: entered promiscuous mode [ 404.530946][ T5634] Bluetooth: hci1: command tx timeout [ 404.535093][T18874] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.535291][T18874] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.535493][T18874] bridge_slave_1: entered allmulticast mode [ 404.539066][T18874] bridge_slave_1: entered promiscuous mode [ 404.690161][T18874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.704417][T18874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.746557][T18874] team0: Port device team_slave_0 added [ 404.749390][T18874] team0: Port device team_slave_1 added [ 404.797926][T18874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.797947][T18874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.797976][T18874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.799996][T18874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.800012][T18874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.800056][T18874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.951823][T18874] hsr_slave_0: entered promiscuous mode [ 404.953070][T18874] hsr_slave_1: entered promiscuous mode [ 404.954653][T18874] debugfs: 'hsr0' already exists in 'hsr' [ 404.954675][T18874] Cannot create hsr debugfs directory [ 405.151231][T19016] __nla_validate_parse: 7 callbacks suppressed [ 405.151252][T19016] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3337'. [ 405.158729][T19017] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3337'. [ 405.192732][T19014] netlink: 'syz.0.3338': attribute type 29 has an invalid length. [ 405.214017][T19010] bond0: entered promiscuous mode [ 405.214041][T19010] bond_slave_0: entered promiscuous mode [ 405.214273][T19010] bond_slave_1: entered promiscuous mode [ 405.219815][T19010] batadv0: entered promiscuous mode [ 405.230195][T19010] debugfs: 'hsr1' already exists in 'hsr' [ 405.230270][T19010] Cannot create hsr debugfs directory [ 405.251987][T19022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3336'. [ 405.256192][T19010] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 405.314907][T19024] netlink: 'syz.3.3340': attribute type 11 has an invalid length. [ 405.314933][T19024] netlink: 'syz.3.3340': attribute type 4 has an invalid length. [ 405.314948][T19024] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3340'. [ 405.448076][T19025] netlink: 'syz.2.3339': attribute type 21 has an invalid length. [ 405.468807][T19021] syzkaller1: entered promiscuous mode [ 405.468832][T19021] syzkaller1: entered allmulticast mode [ 405.652626][T15378] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.654136][ T166] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.654245][ T166] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.654284][ T166] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.765710][T19039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3346'. [ 405.779176][T19039] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3346'. [ 405.779326][T19039] netlink: 'syz.0.3346': attribute type 8 has an invalid length. [ 405.779365][T19039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3346'. [ 405.835025][T19043] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 405.873350][T18874] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.873390][T18874] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 405.995085][T18874] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.995125][T18874] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 406.143558][T18874] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.143598][T18874] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 406.192326][T19053] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3351'. [ 406.192356][T19053] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3351'. [ 406.263353][T18874] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.263393][T18874] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 406.342626][T19052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3350'. [ 406.342879][T19052] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.345438][T19052] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.622055][ T5634] Bluetooth: hci1: command tx timeout [ 406.723751][T18874] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 406.728564][T18874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 406.730431][T18874] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 406.758568][T18874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 406.760206][T18874] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 406.789464][T18874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 406.802805][T18874] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 406.807615][T18874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 407.004448][T19078] netlink: 'syz.1.3357': attribute type 1 has an invalid length. [ 407.111885][T18874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.144675][T18874] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.268675][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.268792][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.304964][T15379] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.305088][T15379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.529828][T19098] sctp: [Deprecated]: syz.3.3359 (pid 19098) Use of int in maxseg socket option. [ 407.529828][T19098] Use struct sctp_assoc_value instead [ 407.626596][T19106] sctp: [Deprecated]: syz.3.3359 (pid 19106) Use of int in maxseg socket option. [ 407.626596][T19106] Use struct sctp_assoc_value instead [ 408.069072][ T166] IPVS: starting estimator thread 0... [ 408.069200][T19134] IPVS: set_ctl: invalid protocol: 8 172.20.20.43:19997 [ 408.180898][T19135] IPVS: using max 28 ests per chain, 67200 per kthread [ 408.406482][ T1037] IPVS: starting estimator thread 0... [ 408.447069][T19154] netlink: 'syz.2.3370': attribute type 9 has an invalid length. [ 408.484237][T19157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.499929][T19155] IPVS: using max 25 ests per chain, 60000 per kthread [ 408.618534][T19163] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 408.692707][ T5634] Bluetooth: hci1: command tx timeout [ 408.795261][T19176] x_tables: duplicate underflow at hook 2 [ 408.795645][T18874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.328910][T19183] 8021q: VLANs not supported on wg0 [ 409.331915][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 409.332192][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 409.495881][T19197] bond2: entered allmulticast mode [ 409.496382][T19197] 8021q: adding VLAN 0 to HW filter on device bond2 [ 409.567895][T19203] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 409.653242][T18874] veth0_vlan: entered promiscuous mode [ 409.715215][T18874] veth1_vlan: entered promiscuous mode [ 409.847753][T18874] veth0_macvtap: entered promiscuous mode [ 409.894771][T18874] veth1_macvtap: entered promiscuous mode [ 409.939146][T18874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.974641][T18874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.012757][T15379] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.012899][T15379] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.122262][T17532] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.122311][T17532] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.247953][T17532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.247975][T17532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.395586][ T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.395610][ T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.484166][T19244] netlink: 'syz.0.3396': attribute type 2 has an invalid length. [ 410.484188][T19244] netlink: 'syz.0.3396': attribute type 11 has an invalid length. [ 410.484200][T19244] __nla_validate_parse: 11 callbacks suppressed [ 410.484211][T19244] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3396'. [ 410.529613][T19245] netlink: 'syz.0.3396': attribute type 2 has an invalid length. [ 410.529638][T19245] netlink: 'syz.0.3396': attribute type 11 has an invalid length. [ 410.529653][T19245] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3396'. [ 410.697324][T19256] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 410.772204][ T5634] Bluetooth: hci1: command tx timeout [ 410.945494][T19272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3402'. [ 410.949509][T19272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 410.971333][T19272] nbd: must specify a size in bytes for the device [ 411.007010][T19273] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 411.218950][T19284] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20002 [ 411.231471][T19285] netlink: 'syz.0.3408': attribute type 1 has an invalid length. [ 411.285588][T19289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3408'. [ 411.320133][T19292] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3409'. [ 411.419799][T19286] bond2: (slave veth0_to_bond): making interface the new active one [ 411.435124][T19286] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 411.469620][T19289] 8021q: adding VLAN 0 to HW filter on device bond2 [ 411.594325][T19304] tipc: Started in network mode [ 411.594359][T19304] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 411.595158][T19304] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0000 [ 411.595406][T19304] tipc: Enabled bearer , priority 10 [ 411.744436][T19317] netlink: 'syz.0.3416': attribute type 29 has an invalid length. [ 411.745777][T19312] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 411.885612][T19318] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 411.919854][T19318] bond2 (unregistering): Released all slaves [ 411.994048][T19328] netlink: 'syz.3.3421': attribute type 29 has an invalid length. [ 412.014647][T19327] netlink: 'syz.4.3420': attribute type 2 has an invalid length. [ 412.266985][T19342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3422'. [ 412.297067][T19343] openvswitch: netlink: Missing key (keys=40, expected=100) [ 412.320204][T19343] openvswitch: netlink: Missing key (keys=40, expected=100) [ 412.359013][T19342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3422'. [ 412.721850][ T30] tipc: Node number set to 1 [ 412.787756][T19364] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3429'. [ 413.029935][T19379] netlink: 'syz.1.3432': attribute type 64 has an invalid length. [ 413.054989][T19379] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.055643][T19379] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.143152][T19376] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3432'. [ 413.188409][T19387] syz_tun: entered allmulticast mode [ 413.202080][T19387] pimreg: entered allmulticast mode [ 413.204200][T19387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3436'. [ 413.241817][ T3331] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.244008][T17532] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.244117][T17532] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.244212][T17532] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0 [ 413.318026][T19386] syz_tun: left allmulticast mode [ 413.318150][T19386] pimreg: left allmulticast mode [ 413.439759][T19394] Bluetooth: MGMT ver 1.23 [ 413.498731][T19399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 413.510047][T19399] vxcan0: tx address claim with different name [ 413.632941][T19403] veth0_to_bond: entered allmulticast mode [ 413.858091][T19413] validate_nla: 1 callbacks suppressed [ 413.858114][T19413] netlink: 'syz.2.3449': attribute type 5 has an invalid length. [ 413.909181][T19416] netlink: 'syz.1.3448': attribute type 7 has an invalid length. [ 414.515406][T19452] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 414.778953][T19468] Bluetooth: ISO socket layer initialized [ 414.792691][T19471] netlink: 'syz.4.3463': attribute type 1 has an invalid length. [ 414.892632][T19479] netlink: 'syz.2.3466': attribute type 29 has an invalid length. [ 414.897278][T19480] netlink: 'syz.2.3466': attribute type 29 has an invalid length. [ 415.508946][T19494] netlink: 'syz.3.3470': attribute type 32 has an invalid length. [ 415.508971][T19494] __nla_validate_parse: 7 callbacks suppressed [ 415.508985][T19494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3470'. [ 415.592571][T19494] bond3: Setting coupled_control to off (0) [ 415.773330][T19507] tipc: Started in network mode [ 415.773395][T19507] tipc: Node identity ac14140f, cluster identity 4711 [ 415.784619][T19507] tipc: New replicast peer: 255.255.255.255 [ 415.798219][T19507] tipc: Enabled bearer , priority 10 [ 415.936125][T19517] Failed to decode metaid 3 dlen 0 err -22 [ 415.972692][T19520] ip_tables: iptables: counters copy to user failed while replacing table [ 416.199383][T19526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3482'. [ 416.771961][T19566] C: renamed from lo (while UP) [ 416.794526][T19566] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 416.834833][T19557] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3490'. [ 416.834908][T19559] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3490'. [ 416.939346][T19559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.028135][T19559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.058721][T19559] bond0 (unregistering): Released all slaves [ 417.144932][ T5829] tipc: Node number set to 2886997007 [ 417.240615][T19578] netlink: 'syz.1.3493': attribute type 10 has an invalid length. [ 417.280030][T19578] team0: Device wg2 is of different type [ 417.323370][T19578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3493'. [ 417.323407][T19578] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 417.400581][T19584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3497'. [ 417.416597][T19584] nbd: couldn't find device at index 552534016 [ 417.419142][T19584] virt_wifi0: entered allmulticast mode [ 417.878810][T17532] IPVS: starting estimator thread 0... [ 417.899217][T19610] netlink: 'syz.4.3501': attribute type 16 has an invalid length. [ 417.899242][T19610] netlink: 'syz.4.3501': attribute type 17 has an invalid length. [ 417.928338][T19610] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3501'. [ 417.928363][T19610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3501'. [ 417.965825][T19611] IPVS: using max 27 ests per chain, 64800 per kthread [ 418.149738][T19615] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 418.264064][T19625] syzkaller1: entered promiscuous mode [ 418.264091][T19625] syzkaller1: entered allmulticast mode [ 418.352237][T19625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3504'. [ 418.372871][T19629] ip_tables: iptables: counters copy to user failed while replacing table [ 418.403821][T19625] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3504'. [ 418.527322][T19629] syzkaller1: entered promiscuous mode [ 418.527350][T19629] syzkaller1: entered allmulticast mode [ 418.717380][T19650] netlink: 'syz.2.3508': attribute type 6 has an invalid length. [ 418.734569][T19651] ip_tables: iptables: counters copy to user failed while replacing table [ 419.025693][T19661] netlink: 'syz.1.3511': attribute type 8 has an invalid length. [ 419.156324][T19675] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 419.264344][T19678] netlink: 'syz.3.3518': attribute type 10 has an invalid length. [ 419.286322][T19678] team0: Device vxcan1 is of different type [ 419.614775][T19691] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 419.974220][T19716] syzkaller0: entered promiscuous mode [ 419.974245][T19716] syzkaller0: entered allmulticast mode [ 420.082208][T19720] netlink: 'syz.1.3531': attribute type 16 has an invalid length. [ 420.183184][T19729] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 420.216920][ T4946] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 420.281618][T19733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.527899][T19747] netlink: 'syz.4.3541': attribute type 3 has an invalid length. [ 420.527923][T19747] __nla_validate_parse: 19 callbacks suppressed [ 420.527938][T19747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3541'. [ 420.583116][T19756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3541'. [ 420.587470][T19756] netlink: 'syz.4.3541': attribute type 21 has an invalid length. [ 420.587493][T19756] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3541'. [ 420.611806][T19756] netlink: 'syz.4.3541': attribute type 8 has an invalid length. [ 420.611829][T19756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3541'. [ 420.612173][T19756] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.619646][T19756] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.825638][T19763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3547'. [ 420.850383][T19766] sctp: [Deprecated]: syz.1.3549 (pid 19766) Use of struct sctp_assoc_value in delayed_ack socket option. [ 420.850383][T19766] Use struct sctp_sack_info instead [ 420.884709][T19767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3547'. [ 421.122940][T19773] netlink: 'syz.2.3551': attribute type 1 has an invalid length. [ 421.155550][T19773] erspan2: entered allmulticast mode [ 421.406395][T19784] netlink: 'syz.1.3553': attribute type 1 has an invalid length. [ 421.515720][T19790] bond2 (unregistering): Released all slaves [ 421.805932][T19807] xt_TCPMSS: Only works on TCP SYN packets [ 421.853618][T19812] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 421.878829][T19806] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3558'. [ 421.879968][T19814] netlink: 'syz.1.3561': attribute type 83 has an invalid length. [ 422.332791][T19836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3566'. [ 422.415350][T19840] netlink: 'syz.2.3567': attribute type 1 has an invalid length. [ 422.503343][T19840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.964301][T19868] syzkaller0: entered promiscuous mode [ 422.964328][T19868] syzkaller0: entered allmulticast mode [ 423.364860][T19884] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3580'. [ 423.408612][T19891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3583'. [ 423.989999][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.990052][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.990080][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.990108][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.990136][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.990163][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.990190][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.990218][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.990245][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.990273][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.990300][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.990328][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.990356][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.990383][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.990411][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.990437][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.990464][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.990491][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.990518][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.990546][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.990573][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.990600][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.990629][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.990656][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.993889][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.994048][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.994130][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.994198][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.994272][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.994347][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.996388][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.996473][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 423.996534][T19917] IPVS: set_ctl: invalid protocol: 29 172.30.0.2:20003 [ 424.275417][T19928] syzkaller0: entered promiscuous mode [ 424.275442][T19928] syzkaller0: entered allmulticast mode [ 424.692443][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.822848][T19957] xt_REDIRECT: bad rangesize 26624. [ 425.014868][T19965] ip6t_rpfilter: unknown options [ 425.416892][T19991] pimreg: entered allmulticast mode [ 425.479149][T19990] bridge0: port 3(batadv1) entered blocking state [ 425.479343][T19990] bridge0: port 3(batadv1) entered disabled state [ 425.479494][T19990] batadv1: entered allmulticast mode [ 425.495129][T19990] batadv1: entered promiscuous mode [ 425.613395][T19986] pimreg: left allmulticast mode [ 425.735775][T19995] bond4: option mode: invalid value (10) [ 425.739968][T20003] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 425.768986][T19995] bond4 (unregistering): Released all slaves [ 425.981086][T18749] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 425.981106][T18749] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 426.163664][T20029] __nla_validate_parse: 4 callbacks suppressed [ 426.163687][T20029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3625'. [ 426.245596][T20033] xt_nat: multiple ranges no longer supported [ 426.272215][T20032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3623'. [ 426.367871][T20039] validate_nla: 1 callbacks suppressed [ 426.367892][T20039] netlink: 'syz.2.3626': attribute type 1 has an invalid length. [ 426.465728][T20034] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3623'. [ 426.486954][T20048] netlink: 'syz.4.3627': attribute type 2 has an invalid length. [ 426.524523][T20052] netlink: 'syz.4.3627': attribute type 2 has an invalid length. [ 426.544680][T20039] 8021q: adding VLAN 0 to HW filter on device bond2 [ 426.561704][T20053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3628'. [ 426.561742][T20053] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3628'. [ 426.608614][T20053] geneve2: entered promiscuous mode [ 426.608640][T20053] geneve2: entered allmulticast mode [ 426.634313][T20053] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3628'. [ 426.772845][T20057] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3629'. [ 426.819389][T20063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3632'. [ 426.828844][T20057] netlink: 'syz.4.3629': attribute type 8 has an invalid length. [ 427.169779][T20077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3634'. [ 427.170461][T20077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3634'. [ 427.255315][ T5720] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 427.488116][T20086] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 428.148633][T20117] ip6t_REJECT: ECHOREPLY is not supported [ 428.552462][T20142] Bluetooth: hci0: unsupported parameter 5135 [ 428.552487][T20142] Bluetooth: hci0: unsupported parameter 8192 [ 428.552500][T20142] Bluetooth: hci0: unsupported parameter 5135 [ 428.552514][T20142] Bluetooth: hci0: unsupported parameter 8192 [ 428.560373][T20143] ip6t_REJECT: ECHOREPLY is not supported [ 428.665017][T20117] 8021q: adding VLAN 0 to HW filter on device  [ 428.763408][T20117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.975411][T20145] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 428.978585][T20145] bond1 (unregistering): Released all slaves [ 430.475835][T20246] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 430.716848][T20264] netlink: 'syz.0.3682': attribute type 1 has an invalid length. [ 431.569124][T20310] netlink: 'syz.2.3693': attribute type 4 has an invalid length. [ 431.591972][T20314] sctp: [Deprecated]: syz.3.3695 (pid 20314) Use of int in max_burst socket option. [ 431.591972][T20314] Use struct sctp_assoc_value instead [ 431.593283][T20313] sctp: [Deprecated]: syz.3.3695 (pid 20313) Use of int in max_burst socket option. [ 431.593283][T20313] Use struct sctp_assoc_value instead [ 431.895279][T20333] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 431.918262][T20334] __nla_validate_parse: 16 callbacks suppressed [ 431.918284][T20334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3703'. [ 432.015135][T20340] syzkaller0: left promiscuous mode [ 432.015157][T20340] syzkaller0: left allmulticast mode [ 432.040523][T20337] xt_IDLETIMER: timeout value is too big [ 432.220488][T20355] netlink: 'syz.0.3709': attribute type 1 has an invalid length. [ 432.250574][T20354] netlink: 'syz.3.3707': attribute type 83 has an invalid length. [ 432.428607][T20366] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3709'. [ 432.472356][T20355] bond5: entered promiscuous mode [ 432.472819][T20355] 8021q: adding VLAN 0 to HW filter on device bond5 [ 432.645266][T20364] bond5: (slave bridge2): making interface the new active one [ 432.645295][T20364] bridge2: entered promiscuous mode [ 432.682868][T20364] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 432.829468][T20389] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3713'. [ 432.857442][ T12] wlan1: Trigger new scan to find an IBSS to join [ 433.365731][T20407] batadv_slave_0: entered promiscuous mode [ 433.367822][T20406] batadv_slave_0: left promiscuous mode [ 433.524627][T20416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3721'. [ 433.649157][T20423] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3723'. [ 433.649186][T20423] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3723'. [ 433.722977][T20428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3725'. [ 433.725647][T20428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3725'. [ 433.927528][T20438] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3730'. [ 434.244871][T20457] netlink: 'syz.0.3733': attribute type 64 has an invalid length. [ 434.244896][T20457] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3733'. [ 434.291788][ T30] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 434.569268][T20467] bond4: Unable to set up delay as MII monitoring is disabled [ 434.640397][T20467] bond4 (unregistering): Released all slaves [ 435.166492][T20486] netlink: 'syz.1.3740': attribute type 1 has an invalid length. [ 435.665197][T20510] netlink: 'syz.0.3748': attribute type 23 has an invalid length. [ 435.738559][T20510] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 435.833680][T20514] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20003 [ 435.892386][T20227] wlan1: Trigger new scan to find an IBSS to join [ 436.663238][T20553] 0: reclassify loop, rule prio 0, protocol 03 [ 436.708528][T20566] netlink: 'syz.3.3767': attribute type 1 has an invalid length. [ 437.322601][T20589] syzkaller0: entered promiscuous mode [ 437.322630][T20589] syzkaller0: entered allmulticast mode [ 438.931780][T20221] wlan1: Trigger new scan to find an IBSS to join [ 439.850415][ T12] wlan1: Creating new IBSS network, BSSID 52:ca:20:31:0a:57 [ 440.536422][T20627] __nla_validate_parse: 13 callbacks suppressed [ 440.536444][T20627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3783'. [ 440.549939][T20627] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.617037][T20627] bridge_slave_1 (unregistering): left allmulticast mode [ 440.617066][T20627] bridge_slave_1 (unregistering): left promiscuous mode [ 440.617144][T20627] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.678449][T20635] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3786'. [ 441.029204][T20651] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 441.083767][T20651] ip6t_srh: unknown srh invflags 4000 [ 441.308649][T20673] ip_tables: iptables: counters copy to user failed while replacing table [ 441.334285][ T5728] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 441.466594][T20680] netlink: 'syz.0.3799': attribute type 1 has an invalid length. [ 441.466619][T20680] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3799'. [ 441.466635][T20680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3799'. [ 441.857846][T20702] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3806'. [ 441.875084][T20697] xt_hl: Unknown Hop Limit match mode: 206 [ 441.915578][T20697] bond0: (slave dummy0): Error: Slave does not support XDP [ 441.966334][T20705] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3807'. [ 442.095810][T20711] ip6gre2: entered allmulticast mode [ 442.155631][T20716] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3811'. [ 442.156012][T20716] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3811'. [ 442.277991][T20720] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3812'. [ 442.386659][T20724] netlink: 'syz.4.3816': attribute type 11 has an invalid length. [ 442.386682][T20724] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3816'. [ 442.394561][T20726] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 442.399772][T20724] netlink: 'syz.4.3816': attribute type 11 has an invalid length. [ 442.496402][T20736] Cannot find set identified by id 0 to match [ 442.703683][T20750] bond3: entered promiscuous mode [ 442.703753][T20750] bond3: entered allmulticast mode [ 442.704551][T20750] 8021q: adding VLAN 0 to HW filter on device bond3 [ 442.877627][T20763] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 442.906435][T20763] tipc: Failed to remove unknown binding: 66,0,0/0:1653159914/1653159915 [ 442.906927][T20763] tipc: Failed to remove unknown binding: 66,0,0/0:1653159914/1653159915 [ 443.452622][T20790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.339605][T20824] lo speed is unknown, defaulting to 1000 [ 444.339699][T20824] lo speed is unknown, defaulting to 1000 [ 444.428353][T20824] lo speed is unknown, defaulting to 1000 [ 444.429550][T20824] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 444.429591][T20824] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 444.429639][T20824] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 444.580357][T20824] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 444.694892][T20824] lo speed is unknown, defaulting to 1000 [ 444.697127][T20824] lo speed is unknown, defaulting to 1000 [ 444.699397][T20824] lo speed is unknown, defaulting to 1000 [ 444.708695][T20824] lo speed is unknown, defaulting to 1000 [ 444.730783][T20824] lo speed is unknown, defaulting to 1000 [ 444.732706][T20824] lo speed is unknown, defaulting to 1000 [ 444.735312][T20824] lo speed is unknown, defaulting to 1000 [ 444.737305][T20824] lo speed is unknown, defaulting to 1000 [ 445.543103][T20871] syzkaller1: entered promiscuous mode [ 445.543133][T20871] syzkaller1: entered allmulticast mode [ 445.655347][T20885] __nla_validate_parse: 11 callbacks suppressed [ 445.655369][T20885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3852'. [ 445.858928][T20892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3854'. [ 445.871123][T20896] ip_tables: iptables: counters copy to user failed while replacing table [ 445.901068][T20893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3856'. [ 446.122385][T20905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3862'. [ 446.154007][T20909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3862'. [ 446.276429][T20913] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 446.359671][T20919] openvswitch: netlink: Duplicate or invalid key (type 0). [ 446.380213][T20921] tunl0: entered promiscuous mode [ 446.398208][T20921] netlink: 'syz.3.3866': attribute type 4 has an invalid length. [ 446.398234][T20921] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3866'. [ 446.445700][T20927] IPv4: Oversized IP packet from 127.202.26.0 [ 446.762949][T20942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3869'. [ 446.762994][T20942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.846190][T20947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3871'. [ 446.870392][T20947] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3871'. [ 447.387788][T20953] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 447.688981][T20977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3880'. [ 447.927117][T20981] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 448.940425][T21039] pimreg3: entered allmulticast mode [ 449.014872][ T5720] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 449.119717][T21050] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 449.121988][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.122008][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.626695][T21083] openvswitch: netlink: Duplicate key (type 6). [ 450.167387][T21106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.538300][T21141] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 450.819050][T21174] __nla_validate_parse: 16 callbacks suppressed [ 450.819071][T21174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3927'. [ 450.957076][T21174] bond5: Invalid ad_actor_system MAC address. [ 450.957101][T21174] bond5: option ad_actor_system: invalid value (1) [ 450.985871][T21174] bond5 (unregistering): Released all slaves [ 451.593068][T21231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.924516][T21239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.925968][T21239] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 452.350518][T21258] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3942'. [ 452.507355][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801db7ec00: rx timeout, send abort [ 452.910205][T21231] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 452.961971][T21282] Bluetooth: MGMT ver 1.23 [ 453.009627][T21282] syzkaller1: entered promiscuous mode [ 453.009652][T21282] syzkaller1: entered allmulticast mode [ 453.216127][T21295] netlink: 'syz.2.3953': attribute type 28 has an invalid length. [ 453.216151][T21295] netlink: 'syz.2.3953': attribute type 3 has an invalid length. [ 453.216165][T21295] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3953'. [ 453.228840][T21295] syzkaller0: entered promiscuous mode [ 453.228896][T21295] syzkaller0: entered allmulticast mode [ 453.269706][T21295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3953'. [ 453.576160][T21309] netlink: 'syz.4.3960': attribute type 142 has an invalid length. [ 453.587286][T21309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3960'. [ 453.597509][T21310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3960'. [ 453.650916][ T5634] Bluetooth: hci1: command 0x0401 tx timeout [ 453.794038][T21309] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3960'. [ 453.888319][T21327] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 454.102333][T21329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3966'. [ 454.410596][T21347] netlink: 'syz.0.3971': attribute type 21 has an invalid length. [ 454.410623][T21347] IPv6: NLM_F_CREATE should be specified when creating new route [ 454.479347][T21349] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3972'. [ 454.856989][T21379] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 455.067679][T21391] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3985'. [ 455.422383][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 455.578904][T21413] netlink: 'syz.0.3991': attribute type 2 has an invalid length. [ 455.621448][T21414] IPVS: set_ctl: invalid protocol: 22 172.20.20.64:20003 [ 456.081813][ T5728] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 456.253913][T21426] x_tables: unsorted entry at hook 2 [ 456.256719][T21426] __nla_validate_parse: 4 callbacks suppressed [ 456.256739][T21426] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3995'. [ 456.258862][T21426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3995'. [ 456.258895][T21426] netlink: 'syz.3.3995': attribute type 10 has an invalid length. [ 456.258912][T21426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3995'. [ 456.419579][T21430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3996'. [ 456.584084][T20221] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 456.584106][T20221] ip6gre1 (unregistering): left promiscuous mode [ 456.615606][T20221] bond6 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 456.616050][T20221] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 456.616071][T20221] bond6 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 36:76:9a:b5:47:10 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 456.826929][T20221] bond8 (unregistering): (slave gretap3): Releasing active interface [ 457.053711][T20221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.057229][T20221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.065562][T20221] bond0 (unregistering): (slave team0): Releasing backup interface [ 457.093988][T20221] bond0 (unregistering): Released all slaves [ 457.114726][T20221] bond1 (unregistering): Released all slaves [ 457.155615][T20221] bond2 (unregistering): Released all slaves [ 457.175930][T20221] bond3 (unregistering): Released all slaves [ 457.213408][T20221] bond4 (unregistering): (slave wireguard1): Releasing backup interface [ 457.213447][T20221] wireguard1: left promiscuous mode [ 457.215480][T20221] bond4 (unregistering): Released all slaves [ 457.249267][T20221] bond5 (unregistering): (slave veth3): Releasing active interface [ 457.268850][T20221] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 457.279972][T20221] bond5 (unregistering): Released all slaves [ 457.308107][T20221] bond6 (unregistering): (slave veth5): Releasing backup interface [ 457.322673][T20221] bond6 (unregistering): (slave veth7): Releasing backup interface [ 457.325850][T20221] bond6 (unregistering): Released all slaves [ 457.359449][T20221] bond7 (unregistering): Released all slaves [ 457.388229][T20221] bond8 (unregistering): Released all slaves [ 457.432309][T21430] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 457.432357][T21430] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 457.432387][T21430] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 457.792293][T20221] tipc: Disabling bearer [ 457.826130][T20221] tipc: Disabling bearer [ 457.833397][T20221] tipc: Left network mode [ 458.164591][T21478] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4006'. [ 458.923053][T20221] IPVS: stopping master sync thread 11307 ... [ 459.048731][ T31] audit: type=1800 audit(1791043509.609:10): pid=21501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4010" name="memory.events" dev="tmpfs" ino=790 res=0 errno=0 [ 459.078866][ T31] audit: type=1800 audit(1791043509.639:11): pid=21504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4010" name="memory.events" dev="tmpfs" ino=790 res=0 errno=0 [ 459.082372][ T31] audit: type=1107 audit(1791043509.639:12): pid=21497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹�5ž÷Œ•%èÍUýAÊ�ÃËÙ ë0ä�™l…t¿Ý•/Öÿ Ž6òЍŠç›' [ 459.617244][T21530] xt_limit: Overflow, try lower: 536871034/0 [ 459.617412][T21533] xt_limit: Overflow, try lower: 536871034/0 [ 459.815521][T21536] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4022'. [ 459.959096][T21542] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 460.012909][T21546] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 460.042010][T21547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4024'. [ 460.197011][T20221] hsr_slave_0: left promiscuous mode [ 460.209715][T20221] hsr_slave_1: left promiscuous mode [ 460.218231][T20221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.218306][T20221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.286886][T20221] veth0_macvtap: left promiscuous mode [ 460.287189][T20221] veth1_vlan: left promiscuous mode [ 460.288041][T21553] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4027'. [ 460.579980][T21565] netlink: 'syz.2.4030': attribute type 15 has an invalid length. [ 461.124446][T21592] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4037'. [ 461.204657][T20221] team0 (unregistering): Port device team_slave_1 removed [ 461.233374][T20221] team0 (unregistering): Port device team_slave_0 removed [ 461.597340][T21590] batman_adv: batadv0: Adding interface: syzkaller0 [ 461.597360][T21590] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.597395][T21590] batman_adv: batadv0: Interface activated: syzkaller0 [ 461.668603][T21586] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 461.767222][T21586] batman_adv: batadv0: Removing interface: syzkaller0 [ 461.858241][T21604] netlink: 'syz.0.4038': attribute type 1 has an invalid length. [ 461.858268][T21604] netlink: 'syz.0.4038': attribute type 1 has an invalid length. [ 462.003488][T21622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4043'. [ 462.089339][T21616] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 462.089851][T21616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 462.528316][ T5634] Bluetooth: hci1: ISO packet too small [ 462.785817][T20221] IPVS: stop unused estimator thread 0... [ 462.785817][T21659] netlink: 'syz.0.4049': attribute type 1 has an invalid length. [ 463.258535][T21685] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4054'. [ 463.453582][T21692] tipc: Enabled bearer , priority 10 [ 463.513724][T21689] tipc: Resetting bearer [ 463.576993][T21689] tipc: Disabling bearer [ 463.616862][T21704] netlink: 284 bytes leftover after parsing attributes in process `syz.1.4058'. [ 463.824769][T21718] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4061'. [ 463.938262][T21717] tap0: tun_chr_ioctl cmd 1074025676 [ 463.938285][T21717] tap0: owner set to 0 [ 463.952551][T21723] tap0: tun_chr_ioctl cmd 1074025673 [ 463.954584][T21721] tap0: tun_chr_ioctl cmd 1074025676 [ 463.954604][T21721] tap0: owner set to 0 [ 464.097970][T21730] sctp: [Deprecated]: syz.1.4064 (pid 21730) Use of int in maxseg socket option. [ 464.097970][T21730] Use struct sctp_assoc_value instead [ 464.896668][T21777] netlink: 'syz.2.4076': attribute type 1 has an invalid length. [ 464.896693][T21777] netlink: 'syz.2.4076': attribute type 2 has an invalid length. [ 465.004736][T21782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4078'. [ 465.103331][T21777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.503922][T21812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.751774][T21818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4088'. [ 465.857273][T21829] SET target dimension over the limit! [ 465.909858][T21833] SET target dimension over the limit! [ 465.973194][T21837] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4090'. [ 466.052544][T21842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4090'. [ 466.143172][T21845] netlink: 'syz.0.4092': attribute type 1 has an invalid length. [ 466.240276][T21845] bond6: (slave gretap1): making interface the new active one [ 466.248467][T21845] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 466.582540][T21869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4100'. [ 466.588354][T21867] netlink: 'syz.2.4098': attribute type 6 has an invalid length. [ 466.626055][T21872] netlink: 'syz.3.4099': attribute type 2 has an invalid length. [ 467.009322][T21892] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 467.279980][T21905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4111'. [ 467.280038][T21905] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4111'. [ 467.317820][T21907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4108'. [ 467.401968][T21916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4108'. [ 467.519836][T21905] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4111'. [ 467.988907][T21935] ip_tables: iptables: counters copy to user failed while replacing table [ 468.086974][T21584] udevd[21584]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 468.396289][T21957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4123'. [ 468.455281][T21970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4123'. [ 468.483228][T21959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4121'. [ 469.038463][T22003] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4131'. [ 469.213917][T22020] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4132'. [ 469.649322][T22042] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 470.567986][T22090] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 470.964438][T22113] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 471.568104][T22156] netlink: 'syz.3.4166': attribute type 10 has an invalid length. [ 471.570203][T22156] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.574786][T22156] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.660462][T22156] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.662472][T22156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.665316][T22156] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.665687][T22156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.772592][T22165] netlink: 'syz.3.4166': attribute type 6 has an invalid length. [ 471.773610][T22156] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.773847][T22156] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.817070][T22160] bridge_slave_1: left allmulticast mode [ 471.817104][T22160] bridge_slave_1: left promiscuous mode [ 471.817384][T22160] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.861102][T22160] bridge_slave_0: left allmulticast mode [ 471.861134][T22160] bridge_slave_0: left promiscuous mode [ 471.863864][T22160] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.008808][T22171] netlink: 'syz.2.4169': attribute type 1 has an invalid length. [ 472.562615][T22199] openvswitch: netlink: Message has 8 unknown bytes. [ 472.691910][T22204] __nla_validate_parse: 52 callbacks suppressed [ 472.691935][T22204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4180'. [ 472.743621][T22205] syzkaller0: entered promiscuous mode [ 472.743644][T22205] syzkaller0: entered allmulticast mode [ 472.826343][T22209] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4181'. [ 472.868358][T22213] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4182'. [ 473.013115][T22222] netlink: 'syz.1.4185': attribute type 10 has an invalid length. [ 473.013390][T22222] veth0_vlan: entered allmulticast mode [ 473.078846][T22222] team0: Device veth0_vlan failed to register rx_handler [ 473.464761][T22243] gretap0: entered promiscuous mode [ 473.465008][T22243] vlan2: entered promiscuous mode [ 473.624410][T22247] IPv4: Oversized IP packet from 127.202.26.0 [ 473.846292][T22264] netlink: 165 bytes leftover after parsing attributes in process `syz.0.4196'. [ 474.260095][T22281] syzkaller0: entered promiscuous mode [ 474.260121][T22281] syzkaller0: entered allmulticast mode [ 474.310465][T22245] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 474.310491][T22245] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 474.328348][T22289] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 474.562189][T22291] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 474.702584][T22245] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 474.702608][T22245] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 474.902504][T20227] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 475.097633][T22314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4210'. [ 475.228337][T22317] netlink: 'syz.4.4211': attribute type 16 has an invalid length. [ 475.228362][T22317] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4211'. [ 475.228392][T22317] veth0_macvtap: entered allmulticast mode [ 475.314861][T22329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4216'. [ 475.505668][T22334] ip_tables: iptables: counters copy to user failed while replacing table [ 475.540148][T22334] syzkaller1: entered promiscuous mode [ 475.540175][T22334] syzkaller1: entered allmulticast mode [ 475.757963][T22341] SET target dimension over the limit! [ 475.774689][T22309] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4210'. [ 476.098391][T22354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4225'. [ 476.098418][T22354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4225'. [ 476.098446][T22354] netlink: 'syz.0.4225': attribute type 6 has an invalid length. [ 476.100271][T22354] netlink: 'syz.0.4225': attribute type 6 has an invalid length. [ 476.305461][T22369] syzkaller1: entered promiscuous mode [ 476.305486][T22369] syzkaller1: entered allmulticast mode [ 476.777590][T22394] netlink: 'syz.3.4236': attribute type 4 has an invalid length. [ 476.894574][T22402] netlink: 'syz.3.4236': attribute type 4 has an invalid length. [ 476.917924][ T5728] lo speed is unknown, defaulting to 1000 [ 476.952121][ T5829] lo speed is unknown, defaulting to 1000 [ 476.957091][T22405] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 477.049211][T22407] netlink: 'syz.1.4241': attribute type 10 has an invalid length. [ 477.190388][ T30] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 477.359454][T22407] veth3: entered promiscuous mode [ 477.551778][T22431] ip_tables: iptables: counters copy to user failed while replacing table [ 477.932662][T22461] __nla_validate_parse: 12 callbacks suppressed [ 477.932686][T22461] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4260'. [ 478.206221][T22468] ip_tables: iptables: counters copy to user failed while replacing table [ 478.387697][T22486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4268'. [ 478.405928][T22483] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4267'. [ 478.645701][T22494] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 478.739655][T22500] IPVS: set_ctl: invalid protocol: 51342 172.20.20.170:20003 [ 478.903365][T22508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4275'. [ 478.999508][T22508] bond4: option xmit_hash_policy: invalid value (64) [ 479.009862][T22508] bond4 (unregistering): Released all slaves [ 479.194223][T22524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4278'. [ 479.359914][T22531] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4280'. [ 479.480205][T22538] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4281'. [ 479.713929][T22558] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 479.844360][T22565] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4288'. [ 479.902527][T22571] IPv6: NLM_F_CREATE should be specified when creating new route [ 480.108355][T22580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4293'. [ 480.282504][T22591] netlink: 'syz.1.4295': attribute type 8 has an invalid length. [ 480.282530][T22591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4295'. [ 480.497862][T22604] bond0: entered allmulticast mode [ 480.497888][T22604] bond_slave_0: entered allmulticast mode [ 480.497906][T22604] bond_slave_1: entered allmulticast mode [ 480.631489][T22612] netlink: 'syz.0.4300': attribute type 8 has an invalid length. [ 480.856689][T22625] tipc: Enabling of bearer rejected, already enabled [ 480.882881][T22627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.068624][T22632] sctp: [Deprecated]: syz.3.4307 (pid 22632) Use of struct sctp_assoc_value in delayed_ack socket option. [ 481.068624][T22632] Use struct sctp_sack_info instead [ 481.103621][T22632] netlink: 'syz.3.4307': attribute type 12 has an invalid length. [ 481.240356][T22643] netlink: 'syz.2.4309': attribute type 12 has an invalid length. [ 481.294733][T22654] openvswitch: netlink: Message has 1 unknown bytes. [ 481.309622][T22654] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 481.309647][T22654] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 482.080404][T22704] nbd4: detected capacity change from 0 to 63 [ 482.113935][T22704] block nbd4: NBD_DISCONNECT [ 482.132744][T22704] block nbd4: Disconnected due to user request. [ 482.132768][T22704] block nbd4: shutting down sockets [ 482.173430][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 482.173735][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 482.173858][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 482.173962][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 482.174062][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 482.233750][ T1714] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 482.233796][ T1714] Buffer I/O error on dev nbd4, logical block 0, async page read [ 482.233996][ T1714] Buffer I/O error on dev nbd4, logical block 1, async page read [ 482.234019][ T1714] Buffer I/O error on dev nbd4, logical block 2, async page read [ 482.234039][ T1714] Buffer I/O error on dev nbd4, logical block 3, async page read [ 482.237351][ T1714] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 482.237385][ T1714] Buffer I/O error on dev nbd4, logical block 0, async page read [ 482.237404][ T1714] Buffer I/O error on dev nbd4, logical block 1, async page read [ 482.237710][ T1714] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 482.238001][ T1714] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 482.238426][ T1714] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 482.238697][ T1714] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 482.238911][ T1714] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 482.239053][T22536] ldm_validate_partition_table(): Disk read failed. [ 482.239258][ T1714] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 482.239528][ T1714] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 482.239998][T22536] Dev nbd4: unable to read RDB block 0 [ 482.306186][T22536] nbd4: unable to read partition table [ 482.439885][T22536] ldm_validate_partition_table(): Disk read failed. [ 482.457197][T22536] Dev nbd4: unable to read RDB block 0 [ 482.469765][T22536] nbd4: unable to read partition table [ 482.603100][T22536] [ 482.605495][T22536] ====================================================== [ 482.612538][T22536] WARNING: possible circular locking dependency detected [ 482.619602][T22536] syzkaller #0 Not tainted [ 482.624039][T22536] ------------------------------------------------------ [ 482.631084][T22536] udevd/22536 is trying to acquire lock: [ 482.632184][T22719] trusted_key: syz.1.4325 sent an empty control message without MSG_MORE. [ 482.645265][T22536] ffffffff8ee90400 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x5f/0x610 [ 482.655133][T22536] [ 482.655133][T22536] but task is already holding lock: [ 482.662527][T22536] ffffffff905ff1c0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 482.673184][T22536] [ 482.673184][T22536] which lock already depends on the new lock. [ 482.673184][T22536] [ 482.683604][T22536] [ 482.683604][T22536] the existing dependency chain (in reverse order) is: [ 482.692638][T22536] [ 482.692638][T22536] -> #8 (uevent_sock_mutex){+.+.}-{4:4}: [ 482.700491][T22536] __mutex_lock+0x19d/0x1550 [ 482.705707][T22536] kobject_uevent_net_broadcast+0x27e/0x560 [ 482.712152][T22536] kobject_uevent_env+0x566/0x9e0 [ 482.717722][T22536] device_add+0x544/0xb80 [ 482.722663][T22536] device_create+0x269/0x300 [ 482.727795][T22536] msr_device_create+0x33/0x50 [ 482.733112][T22536] cpuhp_invoke_callback+0x434/0x810 [ 482.738951][T22536] cpuhp_thread_fun+0x362/0x780 [ 482.744356][T22536] smpboot_thread_fn+0x565/0xa70 [ 482.749883][T22536] kthread+0x38b/0x480 [ 482.754494][T22536] ret_from_fork+0x514/0xb70 [ 482.759630][T22536] ret_from_fork_asm+0x1a/0x30 [ 482.764956][T22536] [ 482.764956][T22536] -> #7 (cpuhp_state-up){+.+.}-{0:0}: [ 482.772536][T22536] cpuhp_thread_fun+0x127/0x780 [ 482.777939][T22536] smpboot_thread_fn+0x565/0xa70 [ 482.783436][T22536] kthread+0x38b/0x480 [ 482.788069][T22536] ret_from_fork+0x514/0xb70 [ 482.793207][T22536] ret_from_fork_asm+0x1a/0x30 [ 482.798542][T22536] [ 482.798542][T22536] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 482.806299][T22536] cpus_read_lock+0x42/0x160 [ 482.811439][T22536] static_key_slow_inc+0x12/0x30 [ 482.816930][T22536] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 482.823265][T22536] nbd_genl_foreach_sock+0x265/0x450 [ 482.829091][T22536] nbd_genl_reconfigure+0xbbb/0x1040 [ 482.834946][T22536] genl_family_rcv_msg_doit+0x233/0x340 [ 482.841104][T22536] genl_rcv_msg+0x614/0x7a0 [ 482.846167][T22536] netlink_rcv_skb+0x226/0x4a0 [ 482.851473][T22536] genl_rcv+0x28/0x40 [ 482.856004][T22536] netlink_unicast+0x7bd/0x940 [ 482.861402][T22536] netlink_sendmsg+0x813/0xb40 [ 482.866712][T22536] sock_sendmsg_nosec+0x13a/0x180 [ 482.872343][T22536] ____sys_sendmsg+0x54e/0x850 [ 482.877718][T22536] ___sys_sendmsg+0x2a5/0x360 [ 482.882944][T22536] __x64_sys_sendmsg+0x1b1/0x290 [ 482.888431][T22536] do_syscall_64+0x166/0x520 [ 482.893637][T22536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.900071][T22536] [ 482.900071][T22536] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 482.907768][T22536] __mutex_lock+0x19d/0x1550 [ 482.912923][T22536] nbd_queue_rq+0x373/0xff0 [ 482.917976][T22536] blk_mq_dispatch_rq_list+0x499/0x1990 [ 482.924140][T22536] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 482.931075][T22536] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 482.937614][T22536] blk_mq_run_work_fn+0x16c/0x300 [ 482.943214][T22536] process_scheduled_works+0xc3d/0x1630 [ 482.949314][T22536] worker_thread+0xa47/0xfb0 [ 482.954447][T22536] kthread+0x38b/0x480 [ 482.959066][T22536] ret_from_fork+0x514/0xb70 [ 482.964215][T22536] ret_from_fork_asm+0x1a/0x30 [ 482.969532][T22536] [ 482.969532][T22536] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 482.977113][T22536] __mutex_lock+0x19d/0x1550 [ 482.982284][T22536] nbd_queue_rq+0xc1/0xff0 [ 482.987240][T22536] blk_mq_dispatch_rq_list+0x499/0x1990 [ 482.993327][T22536] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 483.000203][T22536] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 483.006727][T22536] blk_mq_run_work_fn+0x16c/0x300 [ 483.012303][T22536] process_scheduled_works+0xc3d/0x1630 [ 483.018394][T22536] worker_thread+0xa47/0xfb0 [ 483.023554][T22536] kthread+0x38b/0x480 [ 483.028165][T22536] ret_from_fork+0x514/0xb70 [ 483.033291][T22536] ret_from_fork_asm+0x1a/0x30 [ 483.038605][T22536] [ 483.038605][T22536] -> #3 (set->srcu){.+.+}-{0:0}: [ 483.045752][T22536] __synchronize_srcu+0xc9/0x2f0 [ 483.051242][T22536] elevator_switch+0x1e8/0x7b0 [ 483.056637][T22536] elevator_change+0x2fa/0x480 [ 483.061949][T22536] elevator_set_default+0x375/0x440 [ 483.067698][T22536] blk_register_queue+0x3f3/0x4e0 [ 483.073388][T22536] __add_disk+0x6b8/0xdb0 [ 483.078301][T22536] add_disk_fwnode+0x100/0x3a0 [ 483.083626][T22536] nbd_dev_add+0x733/0xb60 [ 483.088588][T22536] nbd_init+0x168/0x1f0 [ 483.093296][T22536] do_one_initcall+0x250/0x870 [ 483.098603][T22536] do_initcall_level+0x10a/0x1a0 [ 483.104121][T22536] do_initcalls+0x59/0xa0 [ 483.108997][T22536] kernel_init_freeable+0x29d/0x3e0 [ 483.114744][T22536] kernel_init+0x22/0x1d0 [ 483.119617][T22536] ret_from_fork+0x514/0xb70 [ 483.124756][T22536] ret_from_fork_asm+0x1a/0x30 [ 483.130068][T22536] [ 483.130068][T22536] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 483.137909][T22536] __mutex_lock+0x19d/0x1550 [ 483.143052][T22536] elevator_change+0x1af/0x480 [ 483.148373][T22536] elevator_set_none+0xb5/0x140 [ 483.153767][T22536] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 483.160122][T22536] nbd_start_device+0x189/0xb30 [ 483.165517][T22536] nbd_genl_connect+0x167d/0x1cd0 [ 483.171084][T22536] genl_family_rcv_msg_doit+0x233/0x340 [ 483.177185][T22536] genl_rcv_msg+0x614/0x7a0 [ 483.182230][T22536] netlink_rcv_skb+0x226/0x4a0 [ 483.187530][T22536] genl_rcv+0x28/0x40 [ 483.192060][T22536] netlink_unicast+0x7bd/0x940 [ 483.197371][T22536] netlink_sendmsg+0x813/0xb40 [ 483.202673][T22536] sock_sendmsg_nosec+0x13a/0x180 [ 483.208242][T22536] ____sys_sendmsg+0x54e/0x850 [ 483.213571][T22536] ___sys_sendmsg+0x2a5/0x360 [ 483.218793][T22536] __x64_sys_sendmsg+0x1b1/0x290 [ 483.224275][T22536] do_syscall_64+0x166/0x520 [ 483.229414][T22536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.235848][T22536] [ 483.235848][T22536] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 483.244480][T22536] blk_alloc_queue+0x544/0x690 [ 483.249791][T22536] __blk_mq_alloc_disk+0x194/0x390 [ 483.255445][T22536] nbd_dev_add+0x494/0xb60 [ 483.260398][T22536] nbd_init+0x168/0x1f0 [ 483.265102][T22536] do_one_initcall+0x250/0x870 [ 483.270412][T22536] do_initcall_level+0x10a/0x1a0 [ 483.275892][T22536] do_initcalls+0x59/0xa0 [ 483.280762][T22536] kernel_init_freeable+0x29d/0x3e0 [ 483.286505][T22536] kernel_init+0x22/0x1d0 [ 483.291397][T22536] ret_from_fork+0x514/0xb70 [ 483.296532][T22536] ret_from_fork_asm+0x1a/0x30 [ 483.301848][T22536] [ 483.301848][T22536] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 483.309078][T22536] __lock_acquire+0x164c/0x2de0 [ 483.314467][T22536] lock_acquire+0x115/0x350 [ 483.319511][T22536] fs_reclaim_acquire+0x71/0x100 [ 483.324985][T22536] kmem_cache_alloc_node_noprof+0x5f/0x610 [ 483.331360][T22536] __alloc_skb+0x1db/0x7a0 [ 483.336394][T22536] alloc_uevent_skb+0x7d/0x230 [ 483.341701][T22536] kobject_uevent_net_broadcast+0x2fa/0x560 [ 483.348138][T22536] kobject_uevent_env+0x566/0x9e0 [ 483.353724][T22536] nbd_config_put+0x2c8/0x7e0 [ 483.358946][T22536] nbd_release+0xfe/0x140 [ 483.363812][T22536] bdev_release+0x571/0x690 [ 483.369015][T22536] blkdev_release+0x15/0x20 [ 483.374067][T22536] __fput+0x418/0xa50 [ 483.378592][T22536] fput_close_sync+0x11f/0x240 [ 483.383991][T22536] __x64_sys_close+0x7e/0x110 [ 483.389216][T22536] do_syscall_64+0x166/0x520 [ 483.394354][T22536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.400785][T22536] [ 483.400785][T22536] other info that might help us debug this: [ 483.400785][T22536] [ 483.411028][T22536] Chain exists of: [ 483.411028][T22536] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 483.411028][T22536] [ 483.423759][T22536] Possible unsafe locking scenario: [ 483.423759][T22536] [ 483.431231][T22536] CPU0 CPU1 [ 483.436609][T22536] ---- ---- [ 483.441986][T22536] lock(uevent_sock_mutex); [ 483.446596][T22536] lock(cpuhp_state-up); [ 483.453459][T22536] lock(uevent_sock_mutex); [ 483.460613][T22536] lock(fs_reclaim); [ 483.464621][T22536] [ 483.464621][T22536] *** DEADLOCK *** [ 483.464621][T22536] [ 483.472780][T22536] locks held by udevd/22536: 3, last CPU#1: [ 483.478694][T22536] #0: ffff888025a48350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1b8/0x690 [ 483.488291][T22536] #1: ffff888025aaba60 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0 [ 483.499127][T22536] #2: ffffffff905ff1c0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 483.510127][T22536] [ 483.510127][T22536] stack backtrace: [ 483.516065][T22536] CPU: 1 UID: 0 PID: 22536 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 483.525059][T22536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 483.535157][T22536] Call Trace: [ 483.538465][T22536] [ 483.541415][T22536] dump_stack_lvl+0xe8/0x150 [ 483.546034][T22536] print_circular_bug+0x2e2/0x300 [ 483.551094][T22536] check_noncircular+0x12f/0x150 [ 483.556065][T22536] __lock_acquire+0x164c/0x2de0 [ 483.560944][T22536] ? irqentry_exit+0x218/0x910 [ 483.565756][T22536] lock_acquire+0x115/0x350 [ 483.570281][T22536] ? kmem_cache_alloc_node_noprof+0x5f/0x610 [ 483.576294][T22536] ? __alloc_skb+0x1db/0x7a0 [ 483.580927][T22536] fs_reclaim_acquire+0x71/0x100 [ 483.585897][T22536] ? kmem_cache_alloc_node_noprof+0x5f/0x610 [ 483.591905][T22536] kmem_cache_alloc_node_noprof+0x5f/0x610 [ 483.597741][T22536] ? __alloc_skb+0x18d/0x7a0 [ 483.602391][T22536] ? preempt_schedule_thunk+0x16/0x40 [ 483.607795][T22536] ? __alloc_skb+0x1db/0x7a0 [ 483.612421][T22536] __alloc_skb+0x1db/0x7a0 [ 483.616874][T22536] alloc_uevent_skb+0x7d/0x230 [ 483.621668][T22536] kobject_uevent_net_broadcast+0x2fa/0x560 [ 483.627603][T22536] kobject_uevent_env+0x566/0x9e0 [ 483.632682][T22536] nbd_config_put+0x2c8/0x7e0 [ 483.637405][T22536] ? __pfx_nbd_config_put+0x10/0x10 [ 483.642645][T22536] ? do_raw_spin_unlock+0xf5/0x200 [ 483.647805][T22536] nbd_release+0xfe/0x140 [ 483.652183][T22536] ? __pfx_nbd_release+0x10/0x10 [ 483.657158][T22536] bdev_release+0x571/0x690 [ 483.661702][T22536] ? __pfx_blkdev_release+0x10/0x10 [ 483.666939][T22536] blkdev_release+0x15/0x20 [ 483.671482][T22536] __fput+0x418/0xa50 [ 483.675505][T22536] fput_close_sync+0x11f/0x240 [ 483.680309][T22536] ? __pfx_fput_close_sync+0x10/0x10 [ 483.685632][T22536] __x64_sys_close+0x7e/0x110 [ 483.690354][T22536] do_syscall_64+0x166/0x520 [ 483.694995][T22536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.701093][T22536] ? clear_bhb_loop+0x70/0xc0 [ 483.705802][T22536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.711732][T22536] RIP: 0033:0x7fd51c6a7407 [ 483.716181][T22536] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 483.735814][T22536] RSP: 002b:00007ffec3c4a230 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 483.744255][T22536] RAX: ffffffffffffffda RBX: 00007fd51ce1f880 RCX: 00007fd51c6a7407 [ 483.752248][T22536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 483.760240][T22536] RBP: 00007fd51ce1f6e8 R08: 0000000000000000 R09: 0000000000000000 [ 483.768228][T22536] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 483.776220][T22536] R13: 000055674adee190 R14: 0000000000000008 R15: 000055674adf8e00 [ 483.784224][T22536] [ 483.894844][T22728] __nla_validate_parse: 11 callbacks suppressed [ 483.894864][T22728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4324'. [ 484.212096][ T5728] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 491.253327][ T5728] IPVS: twos: UDP 127.0.0.1:20001 - no destination available