last executing test programs: 8.736034365s ago: executing program 0 (id=4858): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)="27031c00160014180200", 0xa}, {0x0}], 0x2}, 0x2400c0c8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x81}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@cgroup=r2, r0, 0x38, 0x0, 0xffffffffffffffff, @void, @value=r0}, 0x20) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x5, @empty, 0x80000000}}]}, 0x70}, 0x1, 0x7}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 6.961272443s ago: executing program 0 (id=4869): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x1, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x1, 0x0, 0x4e24, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in=@private=0xa010102, 0x4d4, 0x6c}, @in=@local, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075b, 0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2003, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x9}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x7, 0x4, 0x4c8, 0x2f8, 0x0, 0x2f8, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x80000001, 'system_u:object_r:tty_device_t:s0\x00'}}}, {{@arp={@empty, @local, 0xff000000, 0x0, 0xa, 0xa, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0x7f]}}, 0x1, 0x1, 0x69b, 0x1, 0x8000, 0x2ec, 'bridge_slave_1\x00', 'wg1\x00', {0xff}, {}, 0x0, 0x54}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x24}, @remote, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7, 0x3, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r4, 0xffffffffffffc000) syz_init_net_socket$x25(0x9, 0x2, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3b, 0x1, 0x70bd27, 0x25dfdbfd, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0xa, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x2}, 0x94) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0xc0, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x90, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_EMATCHES={0x84, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x38, 0x1, 0x0, 0x0, {{0x0, 0x0, 0xb92}, "d14fc1d43a8c109acd769ab674f577d625a8a51696f742fea61e9666aff3533a7d4976fe24c4558c5b"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x90, 0x7, 0x6}, {{0x1, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x3, 0x5}, {0x101, 0x8, 0x8001, 0x800}}}]}]}]}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x884}, 0x2) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000001200000000010000000100000506000004000000000200000000000000005f"], 0x0, 0x58, 0x0, 0xa}, 0x28) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 6.151602237s ago: executing program 0 (id=4872): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x520, 0xffffffff, 0xffffffff, 0x520, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@rateest={{}, {'bridge0\x00', 'veth1_vlan\x00', 0x18, 0x3, 0x2, 0x2, 0x2, 0x7, {0x401}, {0x1}}}, @common=@inet=@length={{}, {0xff, 0x7}}]}, @unspec=@CT1={0x0, 'CT\x00', 0x1, {0x3, 0x5, 0x7fe4, 0x8, '\x00', 'syz0\x00', {0xff}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@inet=@hashlimit2={{}, {'wg1\x00', {0xfffffffffffffe9e, 0x7, 0x6, 0x80, 0x1, 0x2, 0x7, 0x80, 0x40}, {0x9f}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3, 0x18, 0x80}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x9b) r1 = socket$igmp6(0xa, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) ioctl$XFS_IOC_GETBMAPA(r3, 0xc020582c, &(0x7f0000000000)={0x99, 0xe934, 0x101, 0x1, 0x401}) write$cgroup_devices(r3, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) 5.89927477s ago: executing program 0 (id=4873): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x48) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x2, 0x2, 0x0, 0x1}, 0x48) (rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x2458a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000003000128009000100766c616e00000000200002800c000200160000001f00000006000100fc0f00000600050088a8000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x60}}, 0x8000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000004e090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000107baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.164108637s ago: executing program 4 (id=4880): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="e2c6331688", 0x5, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40}, @in6={0xa, 0x4e23, 0x2, @loopback, 0x1}], 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000108010300000000000000000000245bb6d416e50000050003003a0000000400"], 0x24}, 0x1, 0x0, 0x0, 0x4000094}, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r3, &(0x7f0000000580)={&(0x7f00000002c0), 0x6e, &(0x7f0000000500), 0x0, &(0x7f0000000540)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000000600)={0x2, 0x38, '\x00', 0x1, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000640)) socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) recvmsg$unix(r5, &(0x7f0000001a40)={&(0x7f0000000700), 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000780)=""/43, 0x2b}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/192, 0xc0}, {&(0x7f0000002140)=""/176, 0xb0}, {&(0x7f0000001940)=""/90, 0x5a}], 0x5}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000001a80), 0x4) getsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000001ac0), 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write(r9, &(0x7f0000001b00)="78f1f2c44f568c2de1806b7b9a382d37644ba0fb149ab0333d9723e64061bda1e28a531f3ba4dbbe6e9dd890ab547995525cdde36205993893e71494cc7684fa854d17c8322a0f99", 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001b80)={r6, 0xffffffffffffffff}, 0x4) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000001d40)=0x0, &(0x7f0000001d80)=0x4) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000001dc0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0xf, 0x12, &(0x7f0000001bc0)=ANY=[@ANYBLOB="18000000060000000000000005000000b7080000000000007b8af8ff00000000b7080000100000007b8af00000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a5000000183300000200000000000000000000009500000000000000"], &(0x7f0000001c80)='syzkaller\x00', 0xb6, 0x59, &(0x7f0000001cc0)=""/89, 0x41000, 0x16, '\x00', r12, @fallback=0x9, r13, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001e00)={0x3, 0x0, 0x9, 0x240}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000001e40)=[r6, 0xffffffffffffffff, r6, r8], &(0x7f0000001e80)=[{0x2, 0x2, 0x1, 0xc}, {0x5, 0x3, 0x7, 0x9}, {0x4, 0x2, 0x4, 0x9}, {0x4, 0x1, 0x7, 0x7}], 0x10, 0x9}, 0x94) ioctl$OCFS2_IOC_GROUP_ADD64(r4, 0x40186f03, &(0x7f0000001f80)={0x3, 0x865, 0x101, 0x9}) r14 = gettid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001fc0)={0x0, 0x0, 0x0}, &(0x7f0000002000)=0xc) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002040)={r14, r10, r15}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000002100)={'wlan0\x00'}) 3.955291683s ago: executing program 4 (id=4882): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x438, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x368, 0xffffffff, 0xffffffff, 0x368, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x81}}, @common=@ah={{0x30}, {[0x4d2, 0x4d3], 0x8, 0xc, 0x3}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x3, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [], [0xffffffff], 'erspan0\x00', 'gre0\x00', {}, {}, 0x87, 0x0, 0x0, 0x41}, 0x0, 0x208, 0x240, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'ip_vti0\x00', {0xff}, 'pim6reg\x00', {}, 0x2f, 0x15}}, @common=@inet=@recent0={{0xf8}, {0xffff, 0x40, 0x10, 0x1, 'syz0\x00', 0x7}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x0, 0x3}, {0xffffffffffffffff, 0x5, 0x4}, {0x2, 0x1, 0x2}, 0x30c, 0x7f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x498) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000630122000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x24932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r8}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r8}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) ioctl$sock_bt_hci(r7, 0x400448cb, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r3, r2, 0x26, 0x0, @val=@netfilter={0x0, 0x1, 0xea}}, 0x20) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x1}, 0x2f) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x94, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}]}]}]}], {0x14, 0x10}}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r11, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000041401002cbd7000fbdbdf25080001000100000011c960947fbf13f519d5933eade8254efa94b68d93da9e8fdd63bb3da197c724bbff836a1b5907779503c0797e86d31a4d146d40d0f907baa224f6c1c3e80225fc55f4b3babaa1407e7f335ba4217f9da1eb9a290efc22eb5cec3ba89d80820bc6ff"], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) 3.673792516s ago: executing program 3 (id=4885): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x6, 0x9, 0x3, 0x92, 0x1, 0x7f}, {0xd, 0x5, 0x100, 0x500000, 0x8, 0x40}], ['\x00']}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x23, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) epoll_create1(0x80000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0x6}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f00000002c0)={'rose0\x00', {0x2, 0x0, @private}}) r10 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r10, &(0x7f0000000280)={0x2, 0x0, @broadcast, 0x1}, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r11, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x48}}, 0x8040) 3.535268233s ago: executing program 4 (id=4886): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000240)={{r0, &(0x7f00000000c0)='-/\x00', 0x2040, &(0x7f0000000100)={@align=0xa4e3, {0x8000, 0x5, 0x40, 0x6ce}}, 0x81, &(0x7f0000000140), &(0x7f0000000180)=0x200}, {[0x5, 0xffff, 0x0, 0xff]}, 0x6, 0x7d, &(0x7f00000001c0)=""/125}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x20000000, 0xb2, 0xa8}, 0x38}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000004008002500000088125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000300)={'dummy0\x00', @random="75b6b3d9e71c"}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r10 = socket(0xa, 0x80000, 0xd5cd) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x10}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4008890}, 0x4) 3.283515292s ago: executing program 4 (id=4887): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, 0x0, &(0x7f0000000300)) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000090000000000000001000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000cc00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffed0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0xfffffffffffffeac, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x3, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_DEV={0x0, 0x3, 'bridge_slave_1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) 3.132590596s ago: executing program 4 (id=4889): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x4, 0x80}, 0x2) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4000010, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x8000000, 0x4, 0x3a8, 0xffffffff, 0x0, 0x2d8, 0xe8, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'ip6gre0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xff000000, 0x0, 0xffffffff], 0x4e23, 0x4e22, 0x4e22, 0x4e22, 0xf6, 0xc, 0xfffffff0, 0x3, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f57625092d006bb183ddd9b468ffd1ab108839f458a6b7fd70870ecd20a0"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x1) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmsg(r4, &(0x7f0000000540)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f0000000140)=""/127, 0x7f}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000200)=""/86, 0x56}, {&(0x7f0000000300)=""/215, 0xd7}], 0x5, &(0x7f0000000480)=""/129, 0x81}, 0x12003) 3.051384066s ago: executing program 0 (id=4891): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) ioctl$XFS_IOC_GETPARENTS(0xffffffffffffffff, 0xc028583e, &(0x7f0000000440)={{[0x0, 0x4, 0x6000, 0x4]}, 0x0, 0x3, 0x8, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f000000eec0)={0x6, 0x7, 0x2a4, @random="d60fea76ac0e", 'veth1_vlan\x00'}) r6 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_SCRUBV_METADATA(r2, 0xc0285840, &(0x7f0000000500)={0x4, 0x9, 0xb, 0x0, 0x5, 0x6, 0x0, &(0x7f0000000480)=[{0x9, 0xfe, 0x9}, {0x1c, 0x1ff, 0x4}, {0x1a, 0x101, 0x71}, {0xa, 0x1ff, 0x7f}, {0x9, 0x1ff, 0x88cd}, {0x0, 0x1ff, 0x3ff}]}) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x20}}, 0x48000) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r12}, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) 2.659264086s ago: executing program 1 (id=4894): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="240000005e00010004000000000000000c000000010000000000008008000180040005"], 0x24}], 0x1}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4800028044000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003050500000011"], 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000000)) 2.550611461s ago: executing program 1 (id=4895): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000200)='`', 0x1) (async) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=""/173, 0xad}, 0x76fc5092}], 0x1, 0x40000100, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) (async) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={r3, 0x9, 0x80, 0x7}) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x1000, '\x00', 0x0, r5, 0x1, 0x2, 0x1}, 0x50) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000100)='tunl0\x00', 0x10) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x20000000}, 0x1c) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff028}, {0x6, 0x0, 0x0, 0x20003}]}, 0x10) 2.54700516s ago: executing program 2 (id=4896): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, &(0x7f0000000000)='*}-^-\x00', 0x10040, &(0x7f0000000040)={@_ha_fsid={[0x800, 0x8]}, {0x3, 0x9151, 0x3, 0xfc}}, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x3}, {[0x5, 0x1, 0x4, 0x9]}, 0xbd9, 0xf4, &(0x7f0000000100)=""/244}) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x1, @remote}, 0xa}}, 0x26) close(0x3) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x3}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, 0x5, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40080) (async) r5 = socket$kcm(0x10, 0x2, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000003c0)={0x10, 0x9, 0x6, 0x7, 0x19}, 0x14) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000640)="d8000000180081054e81f782db4cb9040220080406037c01e8fe55a10a0015400200142603600e122f0016000600060055000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e490163d93451792954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4000000) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000180000032cbd7000fbdbdf250a00a002fe03fe060024000008000400", @ANYRES32=r2, @ANYBLOB="05001400060000468560f67382c1d34bf3115729b43b43b7cda0c2eadd7b23c636e414bde4d4235834ab3b1fdabacab2c29eeb52aff82fb0cd7417bc20e46c415e61ff9ec94591520d2c1ad2e46415c841a52326647c2f09de666d870bc3ed"], 0x2c}}, 0x0) (async) r6 = socket$kcm(0x21, 0x2, 0x2) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x18, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x12, 0x1, "9c979b32261fbabdae20b34f870e"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x1, 0x2}]}, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async) sendmsg$inet(r6, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000000000000100100000d000000c9da304b"], 0x18}, 0x0) 2.435970787s ago: executing program 3 (id=4897): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0xc0800) mmap(&(0x7f0000186000/0x2000)=nil, 0x2000, 0x9, 0x8c4b815a5465c2b1, r0, 0x1000) socket$inet(0x2, 0x80001, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000101c0012800b00010062726964676500000c00028004001c"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, 0x4e24, 0x5, 0x4e20, 0x80, 0x2, 0x20, 0x1a0, 0x89}, {0x1, 0x33, 0x6736, 0xd9, 0x216c, 0x6, 0x8000000000, 0x1}, {0x9, 0xe71, 0x40, 0x4}, 0xd, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in6=@empty, 0x4d5, 0x6c}, 0xa, @in=@multicast2, 0x3506, 0x4, 0x1, 0x1, 0x5, 0x1, 0x1}}, 0xe8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000f000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r3, r2, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000000580)=ANY=[], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) unshare(0x20040600) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x40005, &(0x7f0000000300)={0xa, 0x4e30, 0x5, @mcast1}, 0x0) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, 0x0, &(0x7f0000000080)) 2.20497209s ago: executing program 4 (id=4898): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001700)=ANY=[@ANYBLOB="780100001000000228bd70000000000000000000000000000000ffffac1e0001ac14140d0000000000000000000000000000ecdf000000060a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x178}}, 0x44050) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x867) unshare(0xc020680) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mreq(r2, 0x29, 0x6, 0x0, 0x0) bind$tipc(r1, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x1000003}}, 0xa) unshare(0x42000000) r3 = socket$rds(0x15, 0x5, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000016c0)=[{&(0x7f0000000180)="ebbdaadbae65b19ac96071d1a10e4febd307653b5a7eb43a4b95e693fa768ae1b141986ffb8f76bd5df1b74457865f47a1d1dd7a35365dcb8bd1004bdb1fd631a409d5ef0d7b410294e0b3f53b981d122281f208edab002e876f601cd82b0846df58a4eac8a787b303c1728c477218bd3d5c984f9c568aa3e2bb9eece267a768bb636e862f4b4f3848a0fa404bd92aa49d667e8d727660195e6dd7800f0d386d6f56e6c37a0de4d04a", 0xa9}, {&(0x7f0000000240)="3402e5f2588d3aad101c024c6ac31cf30f6e837c471c0c60e420f0e57db1b913bc9c0306015bc73039d05bb738eea4f8ba03c964804064044e10bd668b9568659b5bec4784b76b2840392ad1e13ccd16b98462b86d953e97dd", 0x59}, {&(0x7f00000006c0)="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", 0xefe}], 0x3, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(r4, &(0x7f0000000440)='cpuacct.stat\x00', 0x7a05, 0x1700) pwritev(r9, &(0x7f00000003c0), 0x100000000000034b, 0x8001, 0x84) sendfile(r7, r8, 0x0, 0xf03a0008) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'veth1_to_bridge\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x15, 0x1, [{0x4, 0x9}]}}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0x1d, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES64, @ANYRES8=r0], 0x4) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010001ffffcfffffffddbdf1100000000", @ANYRES32=0x0, @ANYBLOB="0000010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newtclass={0x64, 0x28, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x1, 0xfff4}, {0x1, 0x5}, {0xf, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x5}}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x7, 0x7f}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x40008c5}, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) 1.50070986s ago: executing program 1 (id=4899): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="2efed9fb00ff000420000000", @ANYRES32=r0, @ANYBLOB="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", @ANYRES16=r0, @ANYRES32=r0], 0x20) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r0], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r2, 0xffffffffffffffff}, 0x4) r4 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r4, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x20004000, &(0x7f0000001100)={0x3f, 0x0, 0x0, @mcast2, 0x80}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x68}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x18}, 0x18) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd8, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_USERDATA={0xad, 0xc, "10a42002bcc354363ef32f51a63b039ee2dff41ee6b0a68c443666d753a513fbffadd620f4ee45a492bff0250f0c9f2330a8f108c8e8ab7ea147dac39060f463ab4af313d938301c1c465d7db2cee82cea38b1625e3ef61c7acf623bd39b5eb2f4b93985c1f3acd827a27d203d3b6bc172a0f332a505819b35da2a9a180bb5a5eebd9a263eb566517334311eb104cd678656d264a130f0b2abc268ba9d73631bff5ce3c7ce48b83f9c"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10}, 0x20004001) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@getaddr={0x14, 0x16, 0x400, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0xc3ffffffffffffff, 0x0, 0x8800}, 0x40041) 1.427885318s ago: executing program 2 (id=4900): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0xb4, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x90, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x8c, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x88, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x84, 0x3, "fde83a6d787c1ce4149d9520453bc3272236bd65f3eb2020701dec1fc8d5a3cea8cc55bb6256f0190c94ba260be06bd64d8a69af13b8e37e29f465dcdd014e5de0575c101431f55189a5c07a6fc064fab76e0291a81fdd9554e7e111c7222e5ae762c7219915fcd6aaedaa869cf74c0034b9baa3d31100"/128}}}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x841}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x27) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 1.363479181s ago: executing program 3 (id=4901): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') mkdirat$cgroup(r2, &(0x7f0000000000)='syz0\x00', 0x1ff) 1.309970804s ago: executing program 2 (id=4902): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffffffff3b00000008000300", @ANYRES32=r2, @ANYBLOB="08003300d00000000802115c95066c0211000000505050505050000004040000008176060405190010000000"], 0x48}}, 0x4000884) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x80003, 0xff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0xc9, 0x0, 0xff9b) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x20000000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r7, 0x0, 0x0, 0x20, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)={0x148, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffc72}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x266}, {0x8, 0x15, 0xfffffffb}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x5}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xffff}, {0x8, 0x15, 0xa3}}, {{@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0xa}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x40}, {0x6}, {0x8, 0x15, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x7, 0x3, 0x1}}, {0x8, 0xb, 0x8000}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x8000}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f0000000140)={&(0x7f00000006c0)={0x2, 0x1, 0x81, {0x0, 0xea60}, {0x0, 0x2710}, {0x1, 0x0, 0x0, 0x1}, 0x1, @can={{0x3}, 0x0, 0x2, 0x0, 0x0, "65c629d987509a49"}}, 0x48}, 0x1, 0x0, 0x0, 0x400}, 0x40) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r7, 0x0, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000093c0)=@delchain={0x84, 0x65, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0xd, 0x7}, {0xfff1, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0x8}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x7}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @remote}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @empty}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4080}, 0xc810) recvmsg$can_raw(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)}, 0x2160) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 1.146413405s ago: executing program 3 (id=4903): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @union={0x0, 0x0, 0x0, 0x5, 0x1}]}}, 0x0, 0x18, 0x0, 0xa}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getpeername(r1, 0x0, &(0x7f0000000700)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@enum={0x3, 0x3, 0x0, 0xf, 0x4000000, [{0x7}, {0x1, 0x7}, {0xc, 0x7}]}, @struct={0x5}]}, {0x0, [0x0, 0x30, 0x2e]}}, 0x0, 0x4d, 0x0, 0x0, 0x100000}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r2, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @union={0x0, 0x0, 0x0, 0x5, 0x1}]}}, 0x0, 0x18, 0x0, 0xa}, 0x28) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) getpeername(r1, 0x0, &(0x7f0000000700)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@enum={0x3, 0x3, 0x0, 0xf, 0x4000000, [{0x7}, {0x1, 0x7}, {0xc, 0x7}]}, @struct={0x5}]}, {0x0, [0x0, 0x30, 0x2e]}}, 0x0, 0x4d, 0x0, 0x0, 0x100000}, 0x28) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r2, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x0) (async) 1.031876263s ago: executing program 2 (id=4904): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0x6e24}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x2, 0x7ff}]}, 0x10) 905.973878ms ago: executing program 2 (id=4905): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x1, 0x2000000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41, 0xffffffffffffffff, 0x404000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="30000000010101030000000000000000020000030c0019800800010028000000100001800c000280040001"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4800) (async) r4 = socket$inet6(0xa, 0xc415656599f785d0, 0x2) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000000c0)={@private2, 0x0}, &(0x7f0000000100)=0x14) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000380)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000500)={{{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22, 0x0, 0x4e24, 0x7, 0xa, 0x90, 0xa0, 0x62, r5, r6}, {0x5, 0x4, 0x1, 0xffffffffffffff7f, 0x9, 0x0, 0xf31, 0x3ff}, {0x44ff, 0xf9, 0x4d9, 0x2}, 0x10000, 0x6e6bbc, 0x0, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010102, 0x4d4, 0x2b}, 0x3aa251966d2a2075, @in=@private=0xa010101, 0x0, 0x3, 0x1, 0x5, 0x9, 0x81, 0x2}}, 0xe8) 827.9681ms ago: executing program 1 (id=4906): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000380)}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x488c4}, 0x0) 783.451871ms ago: executing program 3 (id=4907): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x10, r2}, 0x10) readv(r0, &(0x7f0000002980)=[{&(0x7f0000000040)=""/49, 0x31}], 0x1) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000b00)="1300000001020398", 0x8}], 0x1) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) 713.821124ms ago: executing program 1 (id=4908): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000080), &(0x7f0000000b40)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0xffffffff}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x7fff, @loopback, 0x7ffffffd}}, 0x2, 0x0, 0xe457, 0x0, 0xa, 0x6}, 0x9c) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) listen(r7, 0xb) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 571.854284ms ago: executing program 2 (id=4909): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000140012", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x803, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r3 = socket$netlink(0x10, 0x3, 0x14) preadv(r2, &(0x7f0000001380)=[{&(0x7f0000000340)=""/4, 0x4}, {0x0}], 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0x3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r4) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x8, r2}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 489.221151ms ago: executing program 3 (id=4910): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", 'i}oz', "ffca69dbc7b44302"}, 0x28) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f00000003c0)={&(0x7f0000000200)=@can={{0x0, 0x1}, 0xf, 0x1, 0x0, 0x0, "14c7bf8594af4407"}, 0x10}, 0x2, 0x0, 0x0, 0x24000884}, 0x30048009) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) setsockopt$inet_opts(r5, 0x0, 0x0, &(0x7f0000000080)="de1bc7bfb824874fc336e87d3ab526ff61f174c245d310c00deee958ff9c0b24dbd40d0d62ec09fda0737e7adad2f7fe503a", 0x32) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000002800128009000100697069e779fe21d872f0f7af0770000000001800028008001400000004001300088003000a21010008000a000000", @ANYRES32=r6, @ANYBLOB], 0x50}}, 0x884) 426.126478ms ago: executing program 0 (id=4911): socket$nl_route(0x10, 0x3, 0x0) socket(0x5, 0xa, 0x4) (async) r0 = socket(0x5, 0xa, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000340000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x2, 0xf, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x33, 0x0, 0x0, @in6={0xa, 0xe22, 0xffffffe2, @empty, 0xffffff27}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0xff}}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x90}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r4}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x8040) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) r9 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000e00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b00)={0x240, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8, 0x3}}}}, [@NL80211_ATTR_IE={0x5e, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x7f}, 0x8, 0x9, @device_a, 0xced, 0x4, 0xe3}}, @prep={0x83, 0x1f, {{}, 0x5, 0xfc, @device_a, 0xef, @void, 0x3, 0x3, @broadcast, 0x401}}, @ht={0x2d, 0x1a, {0x0, 0x0, 0x3, 0x0, {0x410, 0x1, 0x0, 0x237, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x6, 0x4, 0x6}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xb9, 0x68, 0x1}}]}, @NL80211_ATTR_IE={0x1b8, 0x2a, [@ht={0x2d, 0x1a, {0x8000, 0x1, 0x4, 0x0, {0x2, 0x7f, 0x0, 0x5, 0x0, 0x1, 0x0, 0x3}, 0x1, 0x1ff, 0xb}}, @erp={0x2a, 0x1}, @perr={0x84, 0xb6, {0x7, 0xc, [{{0x0, 0x1}, @device_b, 0xfffffffb, @value, 0x1d}, {{}, @broadcast, 0x9, @void, 0x8}, {{}, @device_b, 0x4, @void, 0x12}, {{}, @device_b, 0x9, @void, 0xd}, {{}, @broadcast, 0xfffffffa, @void, 0x9}, {{}, @device_a, 0xa932, @void, 0x27}, {{0x0, 0x1}, @device_a, 0x6, @value, 0x5}, {{}, @device_a, 0xc67, @void, 0x33}, {{}, @device_b, 0x9, @void, 0x10}, {{0x0, 0x1}, @broadcast, 0x4a7, @value=@broadcast, 0x38}, {{0x0, 0x1}, @device_b, 0x4, @value, 0x18}, {{}, @device_b, 0x2, @void, 0x11}]}}, @ibss={0x6, 0x2, 0xfffe}, @gcr_ga={0xbd, 0x6, @broadcast}, @perr={0x84, 0xcf, {0x2, 0xd, [{{0x0, 0x1}, @broadcast, 0x80000001, @value, 0x3b}, {{}, @broadcast, 0x7fff, @void, 0x21}, {{0x0, 0x1}, @device_a, 0x7fffffff, @value=@broadcast, 0x3e}, {{}, @broadcast, 0x0, @void, 0x2a}, {{}, @device_a, 0x1, @void, 0x41}, {{}, @device_b, 0x4, @void, 0x24}, {{0x0, 0x1}, @broadcast, 0x9, @value=@broadcast, 0x2c}, {{}, @device_a, 0x9, @void, 0x14}, {{0x0, 0x1}, @broadcast, 0x2, @value=@device_b, 0xf}, {{0x0, 0x1}, @device_a, 0x6, @value=@broadcast, 0x36}, {{}, @device_b, 0xccb, @void, 0x29}, {{0x0, 0x1}, @device_a, 0x4, @value, 0x21}, {{}, @broadcast, 0x8, @void, 0xf}]}}]}]}, 0x240}}, 0x24000014) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000e00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000b00)={0x240, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8, 0x3}}}}, [@NL80211_ATTR_IE={0x5e, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x7f}, 0x8, 0x9, @device_a, 0xced, 0x4, 0xe3}}, @prep={0x83, 0x1f, {{}, 0x5, 0xfc, @device_a, 0xef, @void, 0x3, 0x3, @broadcast, 0x401}}, @ht={0x2d, 0x1a, {0x0, 0x0, 0x3, 0x0, {0x410, 0x1, 0x0, 0x237, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x6, 0x4, 0x6}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xb9, 0x68, 0x1}}]}, @NL80211_ATTR_IE={0x1b8, 0x2a, [@ht={0x2d, 0x1a, {0x8000, 0x1, 0x4, 0x0, {0x2, 0x7f, 0x0, 0x5, 0x0, 0x1, 0x0, 0x3}, 0x1, 0x1ff, 0xb}}, @erp={0x2a, 0x1}, @perr={0x84, 0xb6, {0x7, 0xc, [{{0x0, 0x1}, @device_b, 0xfffffffb, @value, 0x1d}, {{}, @broadcast, 0x9, @void, 0x8}, {{}, @device_b, 0x4, @void, 0x12}, {{}, @device_b, 0x9, @void, 0xd}, {{}, @broadcast, 0xfffffffa, @void, 0x9}, {{}, @device_a, 0xa932, @void, 0x27}, {{0x0, 0x1}, @device_a, 0x6, @value, 0x5}, {{}, @device_a, 0xc67, @void, 0x33}, {{}, @device_b, 0x9, @void, 0x10}, {{0x0, 0x1}, @broadcast, 0x4a7, @value=@broadcast, 0x38}, {{0x0, 0x1}, @device_b, 0x4, @value, 0x18}, {{}, @device_b, 0x2, @void, 0x11}]}}, @ibss={0x6, 0x2, 0xfffe}, @gcr_ga={0xbd, 0x6, @broadcast}, @perr={0x84, 0xcf, {0x2, 0xd, [{{0x0, 0x1}, @broadcast, 0x80000001, @value, 0x3b}, {{}, @broadcast, 0x7fff, @void, 0x21}, {{0x0, 0x1}, @device_a, 0x7fffffff, @value=@broadcast, 0x3e}, {{}, @broadcast, 0x0, @void, 0x2a}, {{}, @device_a, 0x1, @void, 0x41}, {{}, @device_b, 0x4, @void, 0x24}, {{0x0, 0x1}, @broadcast, 0x9, @value=@broadcast, 0x2c}, {{}, @device_a, 0x9, @void, 0x14}, {{0x0, 0x1}, @broadcast, 0x2, @value=@device_b, 0xf}, {{0x0, 0x1}, @device_a, 0x6, @value=@broadcast, 0x36}, {{}, @device_b, 0xccb, @void, 0x29}, {{0x0, 0x1}, @device_a, 0x4, @value, 0x21}, {{}, @broadcast, 0x8, @void, 0xf}]}}]}]}, 0x240}}, 0x24000014) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r5, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d0984e7e6db7f90c5b959a5231eb5d6615538d482", 0x2c}], 0x2) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000200)={0x4bc, 0x0, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [{{0x254, 0x1, {{0x3, 0x5}, 0xb, 0x73, 0x7, 0x2, 0x23, 'syz0\x00', "aca6b73d76c20f44751fc8371ecdb97f2e13e0ce0a2e0ba4a3dc387add700399", "ff00dcf336bf5798c54ccd06b0de35f71d2d19748984bbc3923aea7ec2ad02ae", [{0x7, 0x970, {0x3, 0xdfc1}}, {0x8, 0x9e4, {0x1, 0x2}}, {0xf, 0x0, {0x0, 0x5}}, {0x9, 0xc248, {0x0, 0x5}}, {0x3, 0x0, {0x1, 0x4}}, {0x200, 0x6, {0x0, 0x6164}}, {0x9, 0xc329, {0x1, 0xd}}, {0x3, 0x0, {0x3, 0x9}}, {0xf4, 0x0, {0x0, 0x8}}, {0xfb2b, 0x0, {0x3, 0xfff}}, {0x1, 0x7fff, {0x1, 0xfffffeff}}, {0x4, 0xc2, {0x3, 0x1c7}}, {0x5, 0x4, {0x2, 0x4}}, {0x9, 0x65, {0x1, 0x81}}, {0x86d3, 0x6, {0x2, 0x10001}}, {0x40, 0x72e, {0x1, 0xa}}, {0xe7c0, 0x101, {0x1, 0x7}}, {0x1, 0x5, {0x2, 0x4}}, {0xba, 0x6, {0x3, 0x19}}, {0x100, 0x8, {0x1, 0xfff}}, {0x5, 0xc281, {0x2, 0x3}}, {0x81, 0x1, {0x0, 0xffff}}, {0xff, 0x7, {0x1, 0xffffffa7}}, {0x1ff, 0x1, {0x0, 0x1}}, {0x1, 0x9, {0x1, 0x7ff}}, {0x6, 0x5, {0x0, 0x1}}, {0xfffd, 0xff, {0x2, 0x3}}, {0x7, 0x7110, {0x0, 0x10001}}, {0xc, 0x9, {0x1, 0x1}}, {0x4, 0x9, {0x0, 0xfffffffe}}, {0x3, 0x7b, {0x0, 0x3}}, {0xde, 0x2, {0x1, 0x2}}, {0x800, 0x80, {0x2, 0x2}}, {0xff, 0xfffe, {0x3, 0xfffffff7}}, {0x7f, 0x9, {0x1, 0x8b}}, {0x9, 0x2}, {0x1, 0x26e9, {0x2, 0x1}}, {0x5, 0x2, {0x3, 0x2}}, {0x6eb9, 0x401, {0x3, 0x1}}, {0x0, 0x5, {0x2, 0xfcf}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0xe, 0x8, 0x2, 0x6, 0x16, 'syz0\x00', "8a74c8c7e3f1d0efb9c388053f34914227b51500e12a8678776c0bb5b454b6fe", "d108535bbb25822eb4c8e1164f9fc17c868a5ff8e1a70ef3fea139650ca4ea61", [{0x1, 0x2, {0x2, 0x400}}, {0x2, 0xfff, {0x0, 0x73b2}}, {0x1, 0x7, {0x1, 0xb3d}}, {0xd0ca, 0xef, {0x1, 0x5}}, {0x9, 0x1, {0x1, 0x3}}, {0xc82d, 0x6, {0x1, 0x3}}, {0x0, 0xa, {0x0, 0x2}}, {0x3ff, 0x5, {0x3, 0x7}}, {0x3, 0xac, {0x3, 0x18a}}, {0x1, 0xf, {0x1, 0x8}}, {0x3ff, 0x5, {0x1, 0xf75}}, {0x0, 0x7, {0x0, 0xf2dc}}, {0x4, 0x100, {0x1, 0x8443}}, {0x1, 0x3, {0x1, 0x7}}, {0x400, 0x4, {0x3, 0x6}}, {0x8, 0x0, {0x3, 0x1}}, {0x101, 0x7, {0x3, 0x1}}, {0x2, 0x0, {0x0, 0x4}}, {0x1, 0x9, {0x2, 0x57}}, {0xf15, 0x9d5, {0x1, 0x6}}, {0x8, 0x6, {0x1, 0x5}}, {0x1, 0x4, {0x1, 0x8}}, {0x0, 0x5, {0x2, 0x9}}, {0x7, 0x40, {0x2, 0x6}}, {0x4, 0x81, {0x3, 0xfff}}, {0xb, 0x8000, {0x3, 0x8}}, {0x3ff, 0x6, {0x0, 0x10001}}, {0xbb7a, 0x4, {0x3, 0x9}}, {0x1, 0x0, {0x2, 0x84}}, {0x8, 0x2, {0x3, 0xa}}, {0x3000, 0xa, {0x2, 0xfffffff9}}, {0x1, 0x3, {0x0, 0x3}}, {0x0, 0x1, {0x3, 0x8001}}, {0x1, 0x3, {0x3, 0x101}}, {0x3, 0x760, {0x2}}, {0xff, 0x6c0b, {0x0, 0x5}}, {0x5, 0x7, {0x2}}, {0x3, 0x2, {0x2, 0x4d3}}, {0xffff, 0x8, {0x2}}, {0x8, 0x5, {0x1, 0x9}}]}}}]}, 0x4bc}}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x2, 0x0) bind$unix(r11, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r12, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 0s ago: executing program 1 (id=4912): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2}, 0x28) poll(&(0x7f0000000000), 0x0, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) kernel console output (not intermixed with test programs): 250914][T19703] netlink: 'syz.3.3213': attribute type 4 has an invalid length. [ 467.271578][T19601] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.312360][T19601] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.341684][T19601] bridge_slave_1: entered allmulticast mode [ 467.352648][T19705] netlink: 'syz.3.3213': attribute type 4 has an invalid length. [ 467.397070][T19601] bridge_slave_1: entered promiscuous mode [ 467.454138][T19601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.470779][T19601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.526788][T19601] team0: Port device team_slave_0 added [ 467.548084][T19601] team0: Port device team_slave_1 added [ 467.628437][T19601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.638430][T19601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.680457][T19601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.726088][T19601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.743744][T19601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.788138][T19601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.823912][T19718] raw_sendmsg: syz.3.3218 forgot to set AF_INET. Fix it! [ 467.835357][T19719] tipc: Enabling of bearer rejected, already enabled [ 467.909471][T19713] tipc: Resetting bearer [ 468.111918][T19733] netlink: 'syz.3.3222': attribute type 1 has an invalid length. [ 468.123559][T19722] bond1: option arp_all_targets: invalid value (3) [ 468.133092][T19722] bond1 (unregistering): Released all slaves [ 468.178330][T19729] Bluetooth: MGMT ver 1.23 [ 468.242665][T19732] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3221'. [ 468.249462][T19733] 8021q: adding VLAN 0 to HW filter on device bond2 [ 468.276891][T19735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.293755][T19735] bond2: (slave batadv0): Enslaving as a backup interface with an up link [ 468.355522][ T202] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 468.359523][T19601] hsr_slave_0: entered promiscuous mode [ 468.374096][T19601] hsr_slave_1: entered promiscuous mode [ 468.381846][T19601] debugfs: 'hsr0' already exists in 'hsr' [ 468.389059][T19601] Cannot create hsr debugfs directory [ 468.528467][ T29] audit: type=1800 audit(1782682901.980:12): pid=19743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3223" name="memory.events" dev="tmpfs" ino=64 res=0 errno=0 [ 468.549324][ T202] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 468.610863][T19734] syzkaller1: entered promiscuous mode [ 468.619630][T19734] syzkaller1: entered allmulticast mode [ 468.787283][T19752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3227'. [ 468.823568][T19752] __nla_validate_parse: 1 callbacks suppressed [ 468.823586][T19752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3227'. [ 468.851678][T19752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3227'. [ 468.870343][T19754] sctp: [Deprecated]: syz.3.3228 (pid 19754) Use of int in max_burst socket option. [ 468.870343][T19754] Use struct sctp_assoc_value instead [ 468.897295][ T5635] Bluetooth: hci3: command tx timeout [ 469.151456][T19755] lo speed is unknown, defaulting to 1000 [ 469.549012][T19601] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.560427][T19601] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.820476][T19783] netlink: 'syz.4.3233': attribute type 18 has an invalid length. [ 469.836870][T19601] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.850506][T19601] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.095174][T19601] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.121486][T19601] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.124743][T19791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3234'. [ 470.325741][T19601] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.366924][T19601] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.561233][T19809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3236'. [ 470.596774][T19812] syzkaller0: entered promiscuous mode [ 470.609920][T19817] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3240'. [ 470.623459][T19812] syzkaller0: entered allmulticast mode [ 470.651737][T19812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3239'. [ 470.743942][T19812] netlink: 'syz.3.3239': attribute type 1 has an invalid length. [ 470.776967][T19812] netlink: 'syz.3.3239': attribute type 2 has an invalid length. [ 470.972762][ T5635] Bluetooth: hci3: command tx timeout [ 471.066178][T19601] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 471.085774][T19601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 471.096727][T19601] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 471.119061][T19601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 471.138595][T19601] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 471.174611][T19601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 471.189649][T19601] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 471.207193][T19601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 471.554600][T19601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.650219][T19601] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.667687][T19856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3247'. [ 471.681205][ T202] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.688515][ T202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.736575][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.744619][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.953819][T19864] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3250'. [ 471.989359][T19864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3250'. [ 472.004629][T19864] netlink: 'syz.2.3250': attribute type 13 has an invalid length. [ 472.013843][T19864] netlink: 'syz.2.3250': attribute type 17 has an invalid length. [ 472.449561][T19878] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3253'. [ 472.460010][T19878] nbd: must specify a size in bytes for the device [ 473.058528][ T5635] Bluetooth: hci3: command tx timeout [ 473.437884][T19906] syzkaller0: left promiscuous mode [ 473.443476][T19906] syzkaller0: left allmulticast mode [ 473.630811][T19601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.708666][T19601] veth0_vlan: entered promiscuous mode [ 473.722108][T19601] veth1_vlan: entered promiscuous mode [ 473.769801][T19601] veth0_macvtap: entered promiscuous mode [ 473.797800][T19601] veth1_macvtap: entered promiscuous mode [ 473.826089][T19601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.848247][T19601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.879863][ T1020] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.883305][T19926] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20003 [ 473.898701][ T1020] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.934377][ T1020] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.955319][ T1020] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.091555][T19929] netlink: 'syz.3.3262': attribute type 1 has an invalid length. [ 474.126273][ T202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.129497][T19929] netlink: 'syz.3.3262': attribute type 8 has an invalid length. [ 474.147846][ T202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.210172][T19928] __nla_validate_parse: 2 callbacks suppressed [ 474.210535][T19928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3262'. [ 474.228721][T19928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3262'. [ 474.240017][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.240035][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.780341][T19953] netlink: 'syz.3.3270': attribute type 1 has an invalid length. [ 474.925629][ T5642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 474.948411][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 474.961877][ T5642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 474.989008][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 475.001008][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 475.055458][ T1689] block nbd1: Possible stuck request ffff888042b60000: control (read@0,1024B). Runtime 60 seconds [ 475.067555][ T1689] block nbd1: Possible stuck request ffff888042b601c0: control (read@1024,1024B). Runtime 60 seconds [ 475.079362][ T1689] block nbd1: Possible stuck request ffff888042b60380: control (read@2048,1024B). Runtime 60 seconds [ 475.090498][ T1689] block nbd1: Possible stuck request ffff888042b60540: control (read@3072,1024B). Runtime 60 seconds [ 475.210382][T19967] netlink: 'syz.3.3273': attribute type 15 has an invalid length. [ 475.246873][T19961] bond1: option xmit_hash_policy: invalid value (10) [ 475.293387][T19961] bond1 (unregistering): Released all slaves [ 475.396300][T19980] netlink: 'syz.2.3274': attribute type 9 has an invalid length. [ 475.444875][T19980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3274'. [ 475.978624][T19996] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20004 [ 476.162646][T20007] netlink: 'syz.2.3280': attribute type 12 has an invalid length. [ 476.186735][T20005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3279'. [ 476.211821][T20012] sctp: [Deprecated]: syz.0.3278 (pid 20012) Use of int in max_burst socket option. [ 476.211821][T20012] Use struct sctp_assoc_value instead [ 476.364035][T19956] lo speed is unknown, defaulting to 1000 [ 476.885648][T19956] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.895076][T19956] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.902836][T19956] bridge_slave_0: entered allmulticast mode [ 476.912961][T19956] bridge_slave_0: entered promiscuous mode [ 476.921825][T19956] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.929265][T19956] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.936789][T19956] bridge_slave_1: entered allmulticast mode [ 476.946037][T19956] bridge_slave_1: entered promiscuous mode [ 477.023361][T19956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.044487][T19956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.054738][ T5635] Bluetooth: hci2: command tx timeout [ 477.153783][T19956] team0: Port device team_slave_0 added [ 477.160282][T20044] tipc: Enabled bearer , priority 0 [ 477.184208][T19956] team0: Port device team_slave_1 added [ 477.335240][T20044] syzkaller0: entered promiscuous mode [ 477.348717][T20044] syzkaller0: entered allmulticast mode [ 477.404532][T20044] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 477.574268][T19956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.602279][T19956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.659247][T19956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.681416][T20068] tipc: Resetting bearer [ 477.702826][T19956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.709919][T19956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.741225][T19956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.786385][T20070] bridge_slave_1: left allmulticast mode [ 477.793131][T20070] bridge_slave_1: left promiscuous mode [ 477.799211][T20070] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.814757][T20070] bridge_slave_0: left allmulticast mode [ 477.821270][T20070] bridge_slave_0: left promiscuous mode [ 477.829577][T20070] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.941383][T19956] hsr_slave_0: entered promiscuous mode [ 477.948362][T19956] hsr_slave_1: entered promiscuous mode [ 477.960454][T19956] debugfs: 'hsr0' already exists in 'hsr' [ 477.994108][T19956] Cannot create hsr debugfs directory [ 477.998217][T20080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3294'. [ 478.019888][T20043] tipc: Resetting bearer [ 478.089880][T20043] tipc: Disabling bearer [ 478.192425][T20082] netlink: 420 bytes leftover after parsing attributes in process `syz.2.3296'. [ 478.295684][T20082] tipc: Enabling of bearer rejected, failed to enable media [ 478.451397][T20090] netlink: 'syz.3.3298': attribute type 4 has an invalid length. [ 478.490981][T20090] netlink: 'syz.3.3298': attribute type 4 has an invalid length. [ 478.527684][T20090] netlink: 'syz.3.3298': attribute type 4 has an invalid length. [ 478.617239][T19956] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.647927][T19956] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.796882][T19956] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.830399][T19956] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.934892][T20109] tipc: Started in network mode [ 478.939905][T20109] tipc: Node identity 2ea57f112b, cluster identity 4711 [ 478.954279][T20109] tipc: Enabled bearer , priority 0 [ 478.976623][T20109] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3305'. [ 479.001395][T20109] syzkaller0: entered promiscuous mode [ 479.028912][T20109] syzkaller0: entered allmulticast mode [ 479.093437][T19956] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.104541][T19956] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.142290][ T5635] Bluetooth: hci2: command tx timeout [ 479.154026][T20105] tipc: Resetting bearer [ 479.180497][T20105] tipc: Disabling bearer [ 479.257276][T19956] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.270388][T19956] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.711889][T20144] netlink: 'syz.3.3311': attribute type 83 has an invalid length. [ 479.878255][T20151] netlink: 'syz.2.3312': attribute type 1 has an invalid length. [ 479.902922][T20151] netlink: 'syz.2.3312': attribute type 4 has an invalid length. [ 479.940967][T20151] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3312'. [ 479.941502][T20153] netlink: 'syz.2.3312': attribute type 1 has an invalid length. [ 479.996290][T19956] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 480.040874][T19956] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 480.062643][T20151] netlink: 'syz.2.3312': attribute type 29 has an invalid length. [ 480.067795][T19956] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 480.100785][T20153] netlink: 'syz.2.3312': attribute type 4 has an invalid length. [ 480.138103][T19956] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 480.142208][T20153] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3312'. [ 480.168057][T19956] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 480.262380][T19956] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 480.287254][T19956] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 480.356557][T19956] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 480.366104][T20167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3316'. [ 480.517943][T20167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3316'. [ 480.624662][T20182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3319'. [ 480.634833][T20182] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3319'. [ 480.848780][T20188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.900479][T19956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.941954][T19956] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.959839][ T6924] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.967039][ T6924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.996759][ T6924] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.003923][ T6924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.173318][T20195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.192849][T20195] batadv_slave_1: entered allmulticast mode [ 481.213001][ T5635] Bluetooth: hci2: command tx timeout [ 481.503818][T20207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.843365][T19956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.904036][T20231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3331'. [ 481.917171][T20231] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3331'. [ 481.931032][T20231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3331'. [ 482.291392][T19956] veth0_vlan: entered promiscuous mode [ 482.309871][T19956] veth1_vlan: entered promiscuous mode [ 482.363198][T19956] veth0_macvtap: entered promiscuous mode [ 482.374852][T19956] veth1_macvtap: entered promiscuous mode [ 482.400012][T19956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.441965][T19956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.487364][ T6924] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.491634][T20248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3335'. [ 482.500725][ T6924] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.525497][ T6924] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.539025][ T6924] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.765792][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.795369][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.919797][ T202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.951987][ T202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.293267][ T5635] Bluetooth: hci2: command tx timeout [ 483.333391][T20275] syzkaller0: entered promiscuous mode [ 483.345500][T20275] syzkaller0: entered allmulticast mode [ 483.358771][T20274] tipc: Started in network mode [ 483.387614][T20274] tipc: Node identity fa1c0c2476ec, cluster identity 4711 [ 483.409630][T20274] tipc: Enabled bearer , priority 0 [ 483.726152][T20274] tipc: Resetting bearer [ 483.798053][T20274] tipc: Disabling bearer [ 483.897320][T20292] lo speed is unknown, defaulting to 1000 [ 484.087290][T20306] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 484.102923][T20282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 484.115063][T20306] batman_adv: batadv0: Adding interface: gretap1 [ 484.121417][T20306] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.148657][T20306] batman_adv: batadv0: Interface activated: gretap1 [ 484.753898][T20325] netlink: 'syz.1.3354': attribute type 4 has an invalid length. [ 484.803432][T20329] netlink: 'syz.1.3354': attribute type 4 has an invalid length. [ 488.198864][T20358] __nla_validate_parse: 3 callbacks suppressed [ 488.198881][T20358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3361'. [ 488.250118][T20361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3361'. [ 488.270342][T20356] syzkaller0: entered promiscuous mode [ 488.278099][T20356] syzkaller0: entered allmulticast mode [ 488.361713][T20361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3361'. [ 488.578979][T20409] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3366'. [ 488.653430][T20409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3366'. [ 488.677192][T20409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3366'. [ 488.697983][T20409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3366'. [ 488.751539][T20417] syzkaller0: entered promiscuous mode [ 488.759432][T20417] syzkaller0: entered allmulticast mode [ 488.790464][T20417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3367'. [ 489.141977][T20424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3370'. [ 489.445689][T20430] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3371'. [ 491.407667][T20432] netlink: 'syz.3.3372': attribute type 1 has an invalid length. [ 491.723185][T20432] 8021q: adding VLAN 0 to HW filter on device bond3 [ 491.771727][T20433] 8021q: adding VLAN 0 to HW filter on device bond3 [ 491.780132][T20433] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 491.799331][T20433] bond3: (slave gre1): Error -95 calling set_mac_address [ 491.826981][T20434] gretap2: entered promiscuous mode [ 491.838972][T20434] bond3: (slave gretap2): making interface the new active one [ 491.848559][T20434] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 492.145120][T20453] xfrm0: entered allmulticast mode [ 492.210462][T20458] pim6reg: entered allmulticast mode [ 492.219362][T20454] netlink: 'syz.2.3375': attribute type 1 has an invalid length. [ 492.434692][T20475] netlink: 'syz.1.3382': attribute type 1 has an invalid length. [ 492.631605][T20479] xt_hashlimit: size too large, truncated to 1048576 [ 492.796713][T20489] bond1: option packets_per_slave: invalid value (1048582) [ 492.805296][T20489] bond1: option packets_per_slave: allowed values 0 - 65535 [ 492.950757][T20489] bond1 (unregistering): Released all slaves [ 493.432681][T20505] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 493.471249][T20506] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 493.508024][T20501] lo speed is unknown, defaulting to 1000 [ 494.120880][T20532] __nla_validate_parse: 4 callbacks suppressed [ 494.120901][T20532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3400'. [ 494.416596][T20539] IPv6: NLM_F_CREATE should be specified when creating new route [ 494.440825][T20539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 494.448123][T20539] IPv6: NLM_F_CREATE should be set when creating new route [ 494.455414][T20539] IPv6: NLM_F_CREATE should be set when creating new route [ 494.462673][T20539] IPv6: NLM_F_CREATE should be set when creating new route [ 494.468448][T20541] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3403'. [ 494.488290][T20540] netlink: 292 bytes leftover after parsing attributes in process `syz.4.3402'. [ 494.903006][T20550] netlink: 'syz.4.3405': attribute type 12 has an invalid length. [ 494.935414][T20550] netlink: 'syz.4.3405': attribute type 12 has an invalid length. [ 494.963691][T20550] netlink: 'syz.4.3405': attribute type 12 has an invalid length. [ 494.975181][T20550] netlink: 'syz.4.3405': attribute type 12 has an invalid length. [ 494.984524][T20550] netlink: 'syz.4.3405': attribute type 12 has an invalid length. [ 494.994414][T20550] netlink: 'syz.4.3405': attribute type 12 has an invalid length. [ 495.004916][T20550] netlink: 'syz.4.3405': attribute type 12 has an invalid length. [ 495.409438][T20402] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.422670][T20402] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.445910][T20402] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.465327][T20402] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.708826][T20576] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 495.730342][T20576] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode [ 495.758794][T20576] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 495.766258][T20583] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3413'. [ 495.969019][T20593] netlink: 'syz.2.3414': attribute type 11 has an invalid length. [ 495.993385][T20593] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3414'. [ 496.036220][T20589] lo speed is unknown, defaulting to 1000 [ 496.039657][T20592] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 496.056859][T20592] syzkaller1: linktype set to 823 [ 496.397950][T20603] bond1: entered promiscuous mode [ 496.404386][T20603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 496.427382][T20603] ipvlan0: entered allmulticast mode [ 496.447838][T20603] bond1: entered allmulticast mode [ 496.576767][T20603] ipvlan1: entered allmulticast mode [ 496.627994][T20608] bond1: (slave bridge1): making interface the new active one [ 496.642996][T20608] bridge1: entered promiscuous mode [ 496.650166][T20608] bridge1: entered allmulticast mode [ 496.667807][T20608] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 497.139512][T20627] xt_connbytes: Forcing CT accounting to be enabled [ 497.145715][T20635] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.178252][T20627] xt_CT: You must specify a L4 protocol and not use inversions on it [ 497.297840][T20635] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.471143][T20650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3431'. [ 497.525638][T20635] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.588963][T20655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3431'. [ 497.614729][T20655] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3431'. [ 497.812233][T20635] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.878358][T20665] vlan3: entered promiscuous mode [ 497.888286][T20665] bridge0: entered promiscuous mode [ 498.120418][T20675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3436'. [ 498.405460][T20402] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.435884][T20402] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.475828][T20399] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.506409][T20399] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.935570][T20699] syzkaller0: entered promiscuous mode [ 498.960862][T20699] syzkaller0: entered allmulticast mode [ 498.973633][T20702] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3444'. [ 499.138216][T20706] syzkaller1: entered promiscuous mode [ 499.147996][T20706] syzkaller1: entered allmulticast mode [ 499.409852][T20718] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3446'. [ 499.704647][T20735] xt_hashlimit: size too large, truncated to 1048576 [ 499.766552][T20744] veth1_macvtap: left promiscuous mode [ 499.775124][T20739] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 499.800923][T20739] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 499.823184][T20746] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.827092][T20739] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 501.293808][ T1317] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.306025][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.445197][T20782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3459'. [ 501.455591][T20782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3459'. [ 501.478113][ T5290] veth1_macvtap: entered promiscuous mode [ 501.501493][T20787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3462'. [ 501.527270][T20787] validate_nla: 61 callbacks suppressed [ 501.527359][T20787] netlink: 'syz.2.3462': attribute type 11 has an invalid length. [ 501.606647][T20787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3462'. [ 501.633519][T20787] netlink: 'syz.2.3462': attribute type 11 has an invalid length. [ 501.634275][T20792] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 501.913394][T20800] macsec1: entered promiscuous mode [ 501.946741][T20800] bridge0: entered promiscuous mode [ 502.213531][T20814] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 502.239948][T20808] netlink: 'syz.1.3466': attribute type 1 has an invalid length. [ 502.241148][ T9] IPVS: starting estimator thread 0... [ 502.266283][T20808] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3466'. [ 502.352318][T20815] IPVS: using max 32 ests per chain, 76800 per kthread [ 502.629762][T20825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.131812][T20848] IPVS: set_ctl: invalid protocol: 47 172.30.1.5:20003 [ 503.653859][T20859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3477'. [ 503.767424][T20865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3476'. [ 503.823546][T20866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.063968][T20881] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3483'. [ 504.117919][T20873] bond4: entered allmulticast mode [ 504.383915][T20884] macvlan2: entered promiscuous mode [ 504.390016][T20884] macvlan2: entered allmulticast mode [ 504.404917][T20884] bond4: entered promiscuous mode [ 504.416432][T20884] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 504.426746][T20884] bond4: left promiscuous mode [ 504.612609][T20907] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3492'. [ 504.639036][T20907] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3492'. [ 504.677081][T20906] netlink: 'syz.3.3492': attribute type 1 has an invalid length. [ 504.690574][T20907] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3492'. [ 504.703758][T20915] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3489'. [ 504.750529][T20905] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.836202][T20905] ip6tnl1: entered promiscuous mode [ 505.121590][T20937] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3497'. [ 505.139432][ T1689] block nbd1: Possible stuck request ffff888042b60000: control (read@0,1024B). Runtime 90 seconds [ 505.150670][ T1689] block nbd1: Possible stuck request ffff888042b601c0: control (read@1024,1024B). Runtime 90 seconds [ 505.158831][T20934] netlink: 'syz.1.3496': attribute type 26 has an invalid length. [ 505.173738][ T1689] block nbd1: Possible stuck request ffff888042b60380: control (read@2048,1024B). Runtime 90 seconds [ 505.186563][ T1689] block nbd1: Possible stuck request ffff888042b60540: control (read@3072,1024B). Runtime 90 seconds [ 505.716784][T20964] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 506.058677][T20977] syzkaller0: entered promiscuous mode [ 506.065899][T20977] syzkaller0: entered allmulticast mode [ 506.075947][T20981] syz_tun: entered allmulticast mode [ 506.099213][T20981] dvmrp8: entered allmulticast mode [ 506.130022][T20978] syz_tun: left allmulticast mode [ 506.799573][T21045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3516'. [ 506.989034][T21074] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 507.362398][T21110] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3518'. [ 507.390591][T21110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3518'. [ 507.434367][T21110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3518'. [ 507.471732][T21110] bond0: option resend_igmp: invalid value (18446744071564623876) [ 507.497497][T21110] bond0: option resend_igmp: allowed values 0 - 255 [ 507.539205][T21114] xt_cgroup: path and classid specified [ 507.876718][T21121] netlink: 'syz.2.3523': attribute type 2 has an invalid length. [ 508.502396][ T5635] Bluetooth: hci5: command 0x0406 tx timeout [ 508.544160][T21132] xt_hashlimit: size too large, truncated to 1048576 [ 508.727961][T21147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.970360][T21165] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3535'. [ 508.983783][T21163] xt_l2tp: v2 doesn't support IP mode [ 509.500712][T21185] xt_socket: unknown flags 0x4 [ 509.636927][T21190] __nla_validate_parse: 3 callbacks suppressed [ 509.636975][T21190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3540'. [ 509.887339][T21196] syzkaller0: entered promiscuous mode [ 509.905512][T21196] syzkaller0: entered allmulticast mode [ 510.421020][T21220] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3549'. [ 510.421896][T21219] xt_hashlimit: size too large, truncated to 1048576 [ 510.558684][T21225] netlink: zone id is out of range [ 510.566461][T21225] netlink: zone id is out of range [ 510.571665][T21225] netlink: zone id is out of range [ 510.588682][T21225] netlink: get zone limit has 8 unknown bytes [ 510.915836][T21216] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 510.922217][T21216] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 511.176824][T21245] netlink: 'syz.3.3558': attribute type 3 has an invalid length. [ 511.323271][T21216] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 511.330512][T21216] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 511.430846][T21254] syzkaller0: entered promiscuous mode [ 511.437661][T21254] syzkaller0: entered allmulticast mode [ 511.531881][T21216] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 511.690624][T21260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3563'. [ 511.785640][T21263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3564'. [ 511.942237][T21216] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 512.118779][T21267] netlink: 'syz.4.3565': attribute type 16 has an invalid length. [ 512.150145][T21267] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3565'. [ 512.285472][T21272] pim6reg1: entered promiscuous mode [ 512.295814][T21272] pim6reg1: entered allmulticast mode [ 512.533513][T21293] syzkaller1: entered promiscuous mode [ 512.553261][T21293] syzkaller1: entered allmulticast mode [ 512.631637][T21295] tunl0: entered allmulticast mode [ 512.664448][T21291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3571'. [ 512.825599][T21300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3573'. [ 512.860461][T21300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3573'. [ 517.284181][T21216] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 517.510702][T21216] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 517.686936][T21370] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3588'. [ 517.799487][T21373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3589'. [ 517.830405][T21372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3589'. [ 518.036293][T21385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3593'. [ 518.056614][T21385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.077096][T21385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.097234][T21391] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3593'. [ 518.127177][T21385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.154801][T21385] batman_adv: batadv0: Interface deactivated: gretap1 [ 518.171637][T21385] batman_adv: batadv0: Removing interface: gretap1 [ 518.218881][T21385] bond2: (slave batadv0): Removing an active aggregator [ 518.260439][T21385] bond2: (slave batadv0): Releasing backup interface [ 518.938304][T21416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 519.009402][T21422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3600'. [ 519.160507][T21216] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 519.169191][T21216] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 519.196159][T21433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3603'. [ 519.229210][T21420] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 519.243404][T21420] bond1 (unregistering): Released all slaves [ 519.271517][T21412] lo speed is unknown, defaulting to 1000 [ 519.366577][T21433] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 519.374651][ T7293] IPVS: starting estimator thread 0... [ 519.493829][T21437] IPVS: using max 27 ests per chain, 64800 per kthread [ 519.558153][T21439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3604'. [ 519.910097][T21455] x_tables: ip_tables: esp match: only valid for protocol 50 [ 521.476610][T21492] netlink: 'syz.2.3621': attribute type 4 has an invalid length. [ 521.545093][T21498] netlink: 'syz.2.3621': attribute type 4 has an invalid length. [ 521.614141][T21500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3622'. [ 521.644181][T21496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3622'. [ 522.030011][T21519] netlink: 'syz.3.3626': attribute type 1 has an invalid length. [ 522.327912][T21519] 8021q: adding VLAN 0 to HW filter on device bond5 [ 522.430478][T21525] bond5: entered promiscuous mode [ 522.450536][T21532] bond5: (slave dummy0): making interface the new active one [ 522.459945][T21532] dummy0: entered promiscuous mode [ 522.468516][T21532] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 522.754571][T21546] __nla_validate_parse: 3 callbacks suppressed [ 522.754589][T21546] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3633'. [ 523.871333][T21584] syzkaller1: entered promiscuous mode [ 523.877862][T21584] syzkaller1: entered allmulticast mode [ 524.290289][T21602] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3648'. [ 524.325675][T21602] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3648'. [ 524.479925][T21616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3652'. [ 524.568107][T21616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.655498][T21622] netlink: 'syz.1.3654': attribute type 3 has an invalid length. [ 524.685120][T21623] netlink: 'syz.1.3654': attribute type 3 has an invalid length. [ 524.710319][T21622] syzkaller0: entered promiscuous mode [ 524.717437][T21622] syzkaller0: entered allmulticast mode [ 524.808239][T21627] sctp: [Deprecated]: syz.3.3656 (pid 21627) Use of int in max_burst socket option deprecated. [ 524.808239][T21627] Use struct sctp_assoc_value instead [ 525.243005][T21638] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 525.395874][T21642] syzkaller0: entered promiscuous mode [ 525.456563][T21647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3660'. [ 525.497364][T21644] hsr0: entered allmulticast mode [ 525.503887][T21644] hsr_slave_0: entered allmulticast mode [ 525.510708][T21644] hsr_slave_1: entered allmulticast mode [ 525.525173][T21647] hsr_slave_0: left promiscuous mode [ 525.653793][T21647] hsr_slave_1: left promiscuous mode [ 525.700538][T21647] hsr0 (unregistering): left allmulticast mode [ 526.300972][T21682] x_tables: duplicate underflow at hook 1 [ 526.309389][T21687] tipc: Enabled bearer , priority 0 [ 526.357849][T21675] +: renamed from syzkaller0 (while UP) [ 526.377572][T21675] tipc: Disabling bearer [ 526.483571][T21687] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3667'. [ 526.517136][T21694] syzkaller0: entered promiscuous mode [ 526.523489][T21694] syzkaller0: entered allmulticast mode [ 526.651962][T21699] sctp: [Deprecated]: syz.4.3674 (pid 21699) Use of int in maxseg socket option. [ 526.651962][T21699] Use struct sctp_assoc_value instead [ 526.821198][T21704] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.826383][T21706] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3676'. [ 528.500213][T21734] xt_CT: You must specify a L4 protocol and not use inversions on it [ 529.796190][T21749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3687'. [ 529.814622][T21753] netlink: 'syz.2.3688': attribute type 1 has an invalid length. [ 529.853198][T21749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3687'. [ 529.876691][T20404] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.888408][T20404] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 529.917398][T21755] team0 (unregistering): Port device team_slave_0 removed [ 529.930819][T21755] team0 (unregistering): Port device team_slave_1 removed [ 529.969222][T20404] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.000552][T20404] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.099887][T21761] sctp: [Deprecated]: syz.1.3690 (pid 21761) Use of int in maxseg socket option. [ 530.099887][T21761] Use struct sctp_assoc_value instead [ 530.215226][T21769] netlink: 'syz.3.3693': attribute type 1 has an invalid length. [ 530.277167][T21769] bond6: entered promiscuous mode [ 530.282780][T21769] 8021q: adding VLAN 0 to HW filter on device bond6 [ 530.295648][T21769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3693'. [ 530.419368][T21777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3696'. [ 530.640176][T21789] bond1: option fail_over_mac: invalid value (127) [ 530.650110][T21789] bond1 (unregistering): Released all slaves [ 530.774324][T21800] bond7 (unregistering): Released all slaves [ 530.908979][T21792] lo speed is unknown, defaulting to 1000 [ 530.951894][T21800] xt_CT: You must specify a L4 protocol and not use inversions on it [ 531.160847][T21819] netlink: 'syz.4.3704': attribute type 1 has an invalid length. [ 531.227745][T21817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.239491][T21817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3702'. [ 531.725634][T21834] netlink: 'syz.1.3707': attribute type 1 has an invalid length. [ 531.796699][T21840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3707'. [ 531.914911][T21834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 531.948037][T21843] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3709'. [ 531.961470][T21845] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 532.115071][T21851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3711'. [ 532.317245][T21861] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3714'. [ 532.380269][T21865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3715'. [ 532.436009][T21867] xt_hashlimit: size too large, truncated to 1048576 [ 532.711986][T21868] netlink: 'syz.4.3716': attribute type 1 has an invalid length. [ 533.145882][T21889] tipc: Enabled bearer , priority 0 [ 533.171672][T21889] tipc: Resetting bearer [ 533.224019][T21888] tipc: Disabling bearer [ 533.688004][T21919] netlink: 'syz.2.3732': attribute type 2 has an invalid length. [ 533.944219][T21919] : entered promiscuous mode [ 534.590387][T21952] netlink: 'syz.4.3742': attribute type 1 has an invalid length. [ 534.828426][T21962] __nla_validate_parse: 8 callbacks suppressed [ 534.828444][T21962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3745'. [ 534.849563][T21957] netlink: 'syz.4.3742': attribute type 12 has an invalid length. [ 534.871835][T21952] lo speed is unknown, defaulting to 1000 [ 534.916018][T21965] veth1_macvtap: left promiscuous mode [ 534.921631][T21965] macsec0: entered allmulticast mode [ 535.235660][ T1689] block nbd1: Possible stuck request ffff888042b60000: control (read@0,1024B). Runtime 120 seconds [ 535.248696][ T1689] block nbd1: Possible stuck request ffff888042b601c0: control (read@1024,1024B). Runtime 120 seconds [ 535.260076][ T1689] block nbd1: Possible stuck request ffff888042b60380: control (read@2048,1024B). Runtime 120 seconds [ 535.271251][ T1689] block nbd1: Possible stuck request ffff888042b60540: control (read@3072,1024B). Runtime 120 seconds [ 535.582780][T21995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3750'. [ 535.755059][T22001] netlink: 'syz.4.3754': attribute type 1 has an invalid length. [ 535.780915][T22001] netlink: 'syz.4.3754': attribute type 8 has an invalid length. [ 535.810614][T22005] team0: Device xfrm0 is of different type [ 535.851499][T22002] tipc: Enabled bearer , priority 0 [ 535.940970][T22011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3757'. [ 536.347511][T22030] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3761'. [ 536.386177][T22030] netlink: 'syz.3.3761': attribute type 11 has an invalid length. [ 536.570357][T22036] xt_CT: You must specify a L4 protocol and not use inversions on it [ 536.603295][T22036] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3762'. [ 536.718983][T22032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3762'. [ 536.746381][T22038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3763'. [ 536.781683][T22038] 8021q: VLANs not supported on vxcan0 [ 536.962793][ T7294] tipc: Node number set to 94732049 [ 537.198257][T22062] veth1_to_hsr: entered promiscuous mode [ 537.239044][T22062] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3766'. [ 537.272011][T22062] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 537.460444][T22072] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3769'. [ 537.719049][T22086] tipc: Enabling of bearer rejected, failed to enable media [ 537.817331][T22090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3777'. [ 537.889576][T22089] Cannot find add_set index 0 as target [ 537.959163][T22090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 538.654776][T22107] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.664461][T22107] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.767722][T22107] batman_adv: batadv0: Interface deactivated: dummy0 [ 538.961953][T22107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.009253][T22107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.419891][T22117] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 539.432218][T22117] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 539.458454][T22117] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 539.548552][T20405] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.561055][T20405] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.571426][T20405] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.594906][T20405] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.864938][T22158] bond2: entered promiscuous mode [ 539.871180][T22158] 8021q: adding VLAN 0 to HW filter on device bond2 [ 539.916215][T22158] netlink: 'syz.2.3795': attribute type 3 has an invalid length. [ 539.924279][T22158] netlink: 'syz.2.3795': attribute type 3 has an invalid length. [ 539.932770][T22158] __nla_validate_parse: 6 callbacks suppressed [ 539.932785][T22158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3795'. [ 540.048823][T22169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3798'. [ 540.122505][T22169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3798'. [ 540.324937][T22188] x_tables: duplicate underflow at hook 2 [ 540.501674][T22194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3806'. [ 540.526329][T22194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3806'. [ 540.637073][T22201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3807'. [ 540.927265][T22208] bridge0: port 3(batadv1) entered blocking state [ 540.944898][T22208] bridge0: port 3(batadv1) entered disabled state [ 540.956226][T22208] batadv1: entered allmulticast mode [ 540.970038][T22208] batadv1: entered promiscuous mode [ 540.974879][T22212] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 541.139936][T22210] lo speed is unknown, defaulting to 1000 [ 541.365598][T22231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.403964][T20405] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 541.416481][T20405] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 541.675070][T22235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3817'. [ 542.252387][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 542.501842][T22256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3822'. [ 542.941615][T22271] syzkaller0: entered promiscuous mode [ 542.963725][T22271] syzkaller0: entered allmulticast mode [ 543.007452][T22266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3825'. [ 543.043331][T22266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3825'. [ 543.222480][T22282] syzkaller1: entered promiscuous mode [ 543.234760][T22282] syzkaller1: entered allmulticast mode [ 543.684156][T22289] netlink: 'syz.3.3830': attribute type 29 has an invalid length. [ 544.514649][T22317] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 3, id = 0 [ 545.356849][T22331] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma? [ 545.751722][T22336] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 545.817922][T22336] __nla_validate_parse: 2 callbacks suppressed [ 545.817964][T22336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3841'. [ 546.212798][T22331] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.128828][T22331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.183882][T22331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.372873][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 548.180219][T22358] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 548.281134][T20402] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.317086][T20402] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.338243][T20402] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.361719][T20402] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.758826][T22381] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3853'. [ 548.807119][T22381] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3853'. [ 548.840197][T22379] sctp: [Deprecated]: syz.3.3851 (pid 22379) Use of int in maxseg socket option. [ 548.840197][T22379] Use struct sctp_assoc_value instead [ 549.359215][T22399] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 549.648229][T22410] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3857'. [ 549.763315][T22408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3858'. [ 549.861442][T22412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3858'. [ 549.977978][T22423] netlink: 268 bytes leftover after parsing attributes in process `syz.1.3861'. [ 550.135157][T22434] netlink: 'syz.3.3862': attribute type 6 has an invalid length. [ 550.344122][T22440] bridge4: entered allmulticast mode [ 550.583040][T22468] geneve1: entered promiscuous mode [ 550.633265][T22474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.750027][T22474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.013861][T22486] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3876'. [ 551.039811][T22486] netlink: 'syz.1.3876': attribute type 9 has an invalid length. [ 551.060691][T22488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3877'. [ 551.079791][T22491] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3878'. [ 551.091608][T22491] netlink: 'syz.3.3878': attribute type 1 has an invalid length. [ 551.205181][T22492] netlink: 'syz.3.3878': attribute type 1 has an invalid length. [ 551.223715][T22494] netlink: 'syz.2.3879': attribute type 1 has an invalid length. [ 551.284199][T22494] 8021q: adding VLAN 0 to HW filter on device bond4 [ 551.309431][T22497] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3879'. [ 551.340014][T22498] bridge0: port 3(ipvlan2) entered blocking state [ 551.351271][T22498] bridge0: port 3(ipvlan2) entered disabled state [ 551.360061][T22498] ipvlan2: entered allmulticast mode [ 551.367449][T22498] bridge0: entered allmulticast mode [ 551.394257][T22498] ipvlan2: left allmulticast mode [ 551.404934][T22498] bridge0: left allmulticast mode [ 551.420673][T22499] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3880'. [ 551.495533][T22494] veth3: entered allmulticast mode [ 551.521694][T22494] bond4: (slave veth3): Enslaving as an active interface with an up link [ 551.665765][T22497] bond4 (unregistering): (slave veth3): Releasing backup interface [ 551.684804][T22497] bond4 (unregistering): Released all slaves [ 551.795467][T22502] bond7: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 551.838042][T22502] bond7 (unregistering): Released all slaves [ 551.927287][T22510] netlink: 'syz.2.3884': attribute type 1 has an invalid length. [ 551.946047][T22511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3883'. [ 552.053192][T22510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3884'. [ 552.117830][T22516] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3884'. [ 552.134087][T22507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3881'. [ 552.446775][T22544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3890'. [ 552.492429][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 553.289400][T22586] x_tables: duplicate underflow at hook 1 [ 553.294834][T22583] xt_hashlimit: size too large, truncated to 1048576 [ 553.832298][T22601] xt_TCPMSS: Only works on TCP SYN packets [ 554.083684][ T5738] IPVS: starting estimator thread 0... [ 554.192675][T22610] IPVS: using max 27 ests per chain, 64800 per kthread [ 554.237280][T22619] xt_hashlimit: size too large, truncated to 1048576 [ 554.838249][T22645] can: request_module (can-proto-0) failed. [ 555.161787][T22652] syzkaller1: entered promiscuous mode [ 555.184507][T22652] syzkaller1: entered allmulticast mode [ 555.226023][T22660] 8021q: adding VLAN 0 to HW filter on device bond2 [ 555.259794][T22660] bond2: entered promiscuous mode [ 555.264993][T22660] bond2: entered allmulticast mode [ 555.277904][T22660] 8021q: adding VLAN 0 to HW filter on device bond2 [ 555.290159][T22660] team0: Port device bond2 added [ 555.302742][T22661] bridge_slave_0: default FDB implementation only supports local addresses [ 555.518491][T22671] geneve2: entered promiscuous mode [ 556.190637][T22709] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 556.267748][T22712] __nla_validate_parse: 13 callbacks suppressed [ 556.267796][T22712] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3937'. [ 556.952376][T22735] syzkaller0: entered promiscuous mode [ 556.974374][T22735] syzkaller0: entered allmulticast mode [ 556.983643][T22742] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3942'. [ 557.478875][T22765] netlink: 'syz.3.3948': attribute type 1 has an invalid length. [ 557.613370][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 557.804040][T22775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3953'. [ 558.121844][T22781] netlink: 'syz.1.3954': attribute type 1 has an invalid length. [ 560.684346][T22765] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 560.690302][T22781] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 560.759654][ T4995] udevd[4995]: worker [18226] /devices/virtual/block/nbd1 is taking a long time [ 561.312692][T22811] netlink: 'syz.1.3962': attribute type 1 has an invalid length. [ 561.478490][T22811] bond4: entered promiscuous mode [ 561.516398][T22811] 8021q: adding VLAN 0 to HW filter on device bond4 [ 561.976072][T22840] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3965'. [ 562.234410][T22847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3967'. [ 562.259905][T22847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3967'. [ 562.295575][T22847] netlink: 'syz.1.3967': attribute type 1 has an invalid length. [ 562.298472][T22844] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.489551][T22847] bond5: (slave gretap1): making interface the new active one [ 562.506632][T22847] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 562.539502][T22854] lo speed is unknown, defaulting to 1000 [ 562.592513][T22847] macvlan2: entered promiscuous mode [ 562.598511][T22847] macvlan2: entered allmulticast mode [ 562.742721][ T1317] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 562.753539][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.428924][T22886] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3972'. [ 565.293551][ T1689] block nbd1: Possible stuck request ffff888042b60000: control (read@0,1024B). Runtime 150 seconds [ 565.304566][ T1689] block nbd1: Possible stuck request ffff888042b601c0: control (read@1024,1024B). Runtime 150 seconds [ 565.315859][ T1689] block nbd1: Possible stuck request ffff888042b60380: control (read@2048,1024B). Runtime 150 seconds [ 565.327240][ T1689] block nbd1: Possible stuck request ffff888042b60540: control (read@3072,1024B). Runtime 150 seconds [ 565.447441][T22892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3974'. [ 565.732774][T22901] netlink: 'syz.2.3975': attribute type 58 has an invalid length. [ 565.757733][T22901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3975'. [ 565.855882][T22895] syzkaller0: entered promiscuous mode [ 565.861470][T22895] syzkaller0: entered allmulticast mode [ 566.295465][T22915] netlink: 'syz.1.3977': attribute type 1 has an invalid length. [ 567.105163][T22937] Bluetooth: MGMT ver 1.23 [ 567.863871][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 569.117065][T22915] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 569.155610][T22933] tipc: Enabling of bearer rejected, failed to enable media [ 569.179834][T22939] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3978'. [ 569.381907][T22947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3980'. [ 569.402335][T22947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3980'. [ 569.534720][T22950] netlink: 'syz.4.3982': attribute type 1 has an invalid length. [ 569.556855][T22952] netlink: 'syz.4.3982': attribute type 1 has an invalid length. [ 569.560767][T22947] pim6reg1: entered promiscuous mode [ 569.572597][T22947] pim6reg1: entered allmulticast mode [ 569.583963][T22956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3981'. [ 569.597592][T22956] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3981'. [ 569.846839][T22960] lo speed is unknown, defaulting to 1000 [ 569.956833][T22968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3988'. [ 570.026721][T22974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3988'. [ 570.080892][T22968] 8021q: adding VLAN 0 to HW filter on device bond7 [ 570.119550][T22977] macvlan2: entered promiscuous mode [ 570.126104][T22977] macvlan2: entered allmulticast mode [ 570.135337][T22977] bond7: entered promiscuous mode [ 570.141804][T22977] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 570.178532][T22977] bond7: left promiscuous mode [ 570.417937][T22984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3986'. [ 570.775248][T22979] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3986'. [ 570.943858][T23005] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3999'. [ 571.181035][T23022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.239449][T23029] netlink: 'syz.4.4004': attribute type 1 has an invalid length. [ 571.733221][T23050] lo speed is unknown, defaulting to 1000 [ 572.428593][T23080] netlink: 'syz.4.4016': attribute type 21 has an invalid length. [ 572.988015][T23097] netlink: 'syz.4.4022': attribute type 1 has an invalid length. [ 573.079927][T23103] bridge_slave_0: left allmulticast mode [ 573.086408][T23103] bridge_slave_0: left promiscuous mode [ 573.094429][T23103] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.154807][T23103] bridge_slave_1: left allmulticast mode [ 573.160668][T23103] bridge_slave_1: left promiscuous mode [ 573.166960][T23103] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.188400][T23108] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 573.238831][T23103] bond0: (slave bond_slave_0): Releasing backup interface [ 573.341372][T23103] bond0: (slave bond_slave_1): Releasing backup interface [ 573.395056][T23116] netlink: 'syz.3.4026': attribute type 1 has an invalid length. [ 573.427760][T23103] team0: Port device team_slave_0 removed [ 573.457831][T23118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.470122][T23103] team0: Port device team_slave_1 removed [ 573.500114][T23103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.509243][T23103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.565479][T23103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.573258][T23103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.619463][T23103] team0: Port device bond2 removed [ 573.639277][T23103] bond5: (slave gretap1): Releasing active interface [ 573.782386][T23104] bond2: (slave veth3): Enslaving as an active interface with a down link [ 573.821251][T23097] bond2: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 573.865698][T23116] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 574.193986][T23145] tipc: New replicast peer: 255.255.255.255 [ 574.216022][T23145] tipc: Enabled bearer , priority 10 [ 574.230479][T23145] __nla_validate_parse: 17 callbacks suppressed [ 574.230493][T23145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4031'. [ 574.271539][T23145] tipc: Enabling of bearer rejected, already enabled [ 574.293167][T23148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4031'. [ 574.325459][T23151] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4032'. [ 574.370382][T23151] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4032'. [ 574.781101][T23158] netlink: 'syz.4.4034': attribute type 11 has an invalid length. [ 575.090538][T23172] lo speed is unknown, defaulting to 1000 [ 575.333593][ T5865] tipc: Node number set to 2364541988 [ 575.416517][T23190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4041'. [ 575.471102][T23182] pimreg: tun_chr_ioctl cmd 1074025677 [ 575.479422][T23182] pimreg: linktype set to 6 [ 575.606178][T23194] netlink: 'syz.3.4042': attribute type 10 has an invalid length. [ 575.629260][T23194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4042'. [ 575.768696][T23200] bond8: entered promiscuous mode [ 575.779042][T23200] bond8: entered allmulticast mode [ 575.909809][T23204] netlink: 'syz.4.4044': attribute type 4 has an invalid length. [ 576.109519][T23211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4046'. [ 576.297569][T23216] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4047'. [ 576.555713][T23227] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 576.575559][T23227] bond2 (unregistering): Released all slaves [ 576.604541][T23229] syzkaller1: entered promiscuous mode [ 576.610183][T23229] syzkaller1: entered allmulticast mode [ 576.851071][T23246] netlink: 'syz.3.4055': attribute type 13 has an invalid length. [ 576.905553][T23247] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4055'. [ 577.158465][T23247] bond0: (slave bond_slave_0): Releasing backup interface [ 577.168495][T23260] TCP: TCP_TX_DELAY enabled [ 577.236940][T23247] bond_slave_0: entered promiscuous mode [ 577.252479][T23247] bond_slave_0: entered allmulticast mode [ 577.394332][T23267] lo speed is unknown, defaulting to 1000 [ 578.048198][T23292] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 578.095061][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 578.129566][T23292] bond9 (unregistering): Released all slaves [ 578.607475][T23311] tipc: Enabled bearer , priority 0 [ 578.967395][T23302] tipc: Disabling bearer [ 579.220624][T23338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4071'. [ 579.317154][T23338] bond6: entered promiscuous mode [ 579.333763][T23338] 8021q: adding VLAN 0 to HW filter on device bond6 [ 579.614991][T23357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4075'. [ 579.748126][T23358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4075'. [ 579.777396][T23360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4076'. [ 580.001943][T23370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.042659][T23370] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4078'. [ 580.201383][T23373] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4079'. [ 580.658556][T23394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4090'. [ 581.072522][T23419] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4095'. [ 581.106197][T23419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4095'. [ 581.825658][T23456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4104'. [ 581.881649][T23460] netlink: zone id is out of range [ 581.896876][T23460] netlink: zone id is out of range [ 581.902475][T23460] netlink: del zone limit has 4 unknown bytes [ 581.993336][T23461] bond7: entered promiscuous mode [ 582.548017][T23497] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4113'. [ 582.705533][T23503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.716570][T23503] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.736308][T23503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.877261][T23503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.905558][T23503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.917810][T23503] veth1_to_hsr: left promiscuous mode [ 582.926365][T23503] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 582.939559][T23503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 582.956584][T23503] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 583.020512][T20405] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.028609][T20405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.071318][T20405] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.079302][T20405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.215702][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 583.237338][T23516] syzkaller0: entered promiscuous mode [ 583.244442][T23516] syzkaller0: entered allmulticast mode [ 586.375291][T23553] dvmrp0: entered allmulticast mode [ 586.436866][T23544] lo speed is unknown, defaulting to 1000 [ 586.675488][T23568] No such timeout policy "syz1" [ 586.883506][T23576] netlink: 'syz.0.4131': attribute type 1 has an invalid length. [ 586.894619][T23578] __nla_validate_parse: 3 callbacks suppressed [ 586.894634][T23578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4132'. [ 586.895925][T23576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 586.903569][T23578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4132'. [ 586.997143][T23584] netlink: 'syz.3.4134': attribute type 1 has an invalid length. [ 587.015721][T23584] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 587.047431][T23578] tipc: Enabled bearer , priority 0 [ 587.098633][T23578] syzkaller0: entered promiscuous mode [ 587.106326][T23589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4135'. [ 587.112560][T23578] syzkaller0: entered allmulticast mode [ 587.164318][T23578] tipc: Resetting bearer [ 587.251085][T23578] tipc: Disabling bearer [ 587.359864][T23596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4138'. [ 587.458405][T23600] geneve3: entered promiscuous mode [ 587.498783][T23591] syzkaller0: entered promiscuous mode [ 587.526059][T23591] syzkaller0: entered allmulticast mode [ 587.635249][T23609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4141'. [ 587.644631][T23609] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 587.660198][T23607] macsec0: entered promiscuous mode [ 587.677200][T23607] bridge0: entered promiscuous mode [ 587.709524][T23614] IPv6: NLM_F_CREATE should be specified when creating new route [ 587.730378][T23607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4140'. [ 587.829679][T23607] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4140'. [ 588.315324][T23646] netlink: 'syz.1.4151': attribute type 1 has an invalid length. [ 588.385261][T23646] bond9: entered promiscuous mode [ 588.390760][T23646] 8021q: adding VLAN 0 to HW filter on device bond9 [ 588.394719][T23652] Unsupported ieee802154 address type: 0 [ 588.549827][T23651] 8021q: adding VLAN 0 to HW filter on device bond10 [ 588.559825][T23651] bond9: (slave bond10): making interface the new active one [ 588.567554][T23651] bond10: entered promiscuous mode [ 588.575375][T23651] bond9: (slave bond10): Enslaving as an active interface with an up link [ 588.585676][T23659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4155'. [ 588.766715][T23666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4156'. [ 588.799843][T23666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4156'. [ 589.271006][T23683] lo speed is unknown, defaulting to 1000 [ 591.270125][T23749] lo speed is unknown, defaulting to 1000 [ 591.712051][T23741] syzkaller0: entered promiscuous mode [ 591.738991][T23741] syzkaller0: entered allmulticast mode [ 595.376524][ T1689] block nbd1: Possible stuck request ffff888042b60000: control (read@0,1024B). Runtime 180 seconds [ 595.388620][ T1689] block nbd1: Possible stuck request ffff888042b601c0: control (read@1024,1024B). Runtime 180 seconds [ 595.401093][ T1689] block nbd1: Possible stuck request ffff888042b60380: control (read@2048,1024B). Runtime 180 seconds [ 595.415387][ T1689] block nbd1: Possible stuck request ffff888042b60540: control (read@3072,1024B). Runtime 180 seconds [ 595.416331][T23761] bond5: (slave dummy0): Releasing active interface [ 595.440928][T23761] dummy0: left promiscuous mode [ 595.466738][T23761] bridge_slave_0: left allmulticast mode [ 595.473205][T23761] bridge_slave_0: left promiscuous mode [ 595.479786][T23761] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.498029][T23761] bridge_slave_1: left promiscuous mode [ 595.506302][T23761] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.526665][T23761] bond0: (slave bond_slave_1): Releasing backup interface [ 595.553553][T23761] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 595.648008][T23774] __nla_validate_parse: 2 callbacks suppressed [ 595.648057][T23774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4159'. [ 595.935824][T23789] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 596.411561][T23802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4182'. [ 596.433771][T23802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4182'. [ 596.811926][T23815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4185'. [ 597.341260][T23821] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 597.921385][T23847] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4194'. [ 598.024660][T23849] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4197'. [ 598.038857][T23847] x_tables: duplicate underflow at hook 2 [ 598.055537][T23846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4196'. [ 598.491004][T23865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4202'. [ 598.559420][T23856] netlink: 'syz.0.4195': attribute type 1 has an invalid length. [ 598.576163][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 598.677166][T23856] 8021q: adding VLAN 0 to HW filter on device bond2 [ 598.809738][T23878] xt_hashlimit: size too large, truncated to 1048576 [ 599.367857][T23870] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 599.743009][T23899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4208'. [ 599.991810][T23904] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4210'. [ 600.817587][T23924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4214'. [ 600.853372][T23924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4214'. [ 601.497518][T23934] netlink: 'syz.2.4216': attribute type 4 has an invalid length. [ 601.572745][T23934] netlink: 'syz.2.4216': attribute type 4 has an invalid length. [ 602.072384][T23946] netlink: 212 bytes leftover after parsing attributes in process `syz.4.4219'. [ 603.488856][T23975] tipc: Enabled bearer , priority 0 [ 603.984577][T23991] netlink: 'syz.2.4228': attribute type 11 has an invalid length. [ 604.202633][T23993] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4231'. [ 604.359290][T23998] geneve4: entered promiscuous mode [ 604.461604][T24001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4233'. [ 604.629345][T24006] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4233'. [ 604.685187][T24006] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4233'. [ 605.844409][T24031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4240'. [ 605.883485][T20392] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.894035][T24032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4240'. [ 605.917345][T20410] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.919620][T24031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4240'. [ 605.937959][T20392] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.991366][T20392] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.081119][T24039] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4241'. [ 606.122337][T24040] tipc: MTU too low for tipc bearer [ 606.551957][T24049] syzkaller1: entered promiscuous mode [ 606.582612][T24049] syzkaller1: entered allmulticast mode [ 606.663319][T24049] Bluetooth: MGMT ver 1.23 [ 606.771397][T24052] tipc: Enabled bearer , priority 0 [ 606.805712][T24051] syzkaller0: entered promiscuous mode [ 606.832580][T24051] syzkaller0: entered allmulticast mode [ 606.849987][T24052] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 606.994038][T24050] tipc: Resetting bearer [ 607.080797][T24050] tipc: Disabling bearer [ 607.129358][T24066] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4250'. [ 607.346413][T24073] netlink: 'syz.2.4252': attribute type 2 has an invalid length. [ 607.369740][T24073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4252'. [ 607.610312][T24079] dvmrp8: entered allmulticast mode [ 607.635282][T24081] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4254'. [ 607.891758][T24084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4256'. [ 608.216793][T24094] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4260'. [ 608.234075][T24089] lo speed is unknown, defaulting to 1000 [ 608.258844][T24092] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4259'. [ 608.885712][T24118] netlink: 'syz.3.4266': attribute type 2 has an invalid length. [ 609.104474][T24117] lo speed is unknown, defaulting to 1000 [ 609.247110][T24122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 609.819696][T24132] sctp: [Deprecated]: syz.2.4270 (pid 24132) Use of int in max_burst socket option. [ 609.819696][T24132] Use struct sctp_assoc_value instead [ 610.911940][ T5865] IPVS: starting estimator thread 0... [ 611.007702][T24177] __nla_validate_parse: 5 callbacks suppressed [ 611.007736][T24177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4281'. [ 611.034349][T24172] IPVS: using max 28 ests per chain, 67200 per kthread [ 611.058318][T24178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4281'. [ 611.346911][T24183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4283'. [ 611.367594][T24183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4283'. [ 611.388868][T24183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4283'. [ 611.478402][ T1020] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.513989][ T1020] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.696222][ T1020] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.709822][ T1020] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.734522][T24186] syzkaller0: entered promiscuous mode [ 611.771426][T24186] syzkaller0: entered allmulticast mode [ 611.857175][T24194] netlink: 440 bytes leftover after parsing attributes in process `syz.2.4286'. [ 612.349681][T24193] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.394874][T24193] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.876929][T24193] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.914919][T24193] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.221956][T24193] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.239687][T24193] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.305856][T24227] netlink: 'syz.3.4296': attribute type 1 has an invalid length. [ 613.319377][T24227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 613.829304][T24193] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.865710][T24193] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.234627][T20401] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.255424][T20401] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.347196][T20404] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.368687][T20404] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.445142][ T1020] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.459418][ T1020] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.544544][T24248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4302'. [ 614.583213][T20401] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.615040][T20401] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.841837][T24255] Cannot find del_set index 0 as target [ 615.178642][T24264] batadv_slave_1: entered promiscuous mode [ 615.243623][T24233] lo speed is unknown, defaulting to 1000 [ 615.403639][T24273] netlink: 'syz.3.4308': attribute type 4 has an invalid length. [ 615.417890][T24273] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4308'. [ 615.601554][T24263] batadv_slave_1: left promiscuous mode [ 615.696413][T24277] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 615.878453][T24288] ipt_ECN: cannot use operation on non-tcp rule [ 616.099730][T24291] netlink: 'syz.1.4313': attribute type 2 has an invalid length. [ 616.726262][T24292] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.734901][T24292] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.023495][T24292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.044208][T24292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.120331][T24292] mac80211_hwsim hwsim25 wlan0: left promiscuous mode [ 617.133545][T24292] mac80211_hwsim hwsim25 wlan0: left allmulticast mode [ 617.141791][T24292] bond1: left promiscuous mode [ 617.149142][T24292] bridge1: left promiscuous mode [ 617.155766][T24292] ipvlan0: left allmulticast mode [ 617.161855][T24292] ipvlan1: left allmulticast mode [ 617.171648][T24292] bond1: left allmulticast mode [ 617.185847][T24292] bridge1: left allmulticast mode [ 617.204912][T24292] bridge4: left allmulticast mode [ 617.211100][T24292] geneve2: left promiscuous mode [ 618.057576][T20405] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.087341][T20405] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.144560][T20405] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.196935][T20405] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.376268][T24343] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20001 [ 618.467502][T24342] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4323'. [ 618.711625][T24350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4327'. [ 618.753031][T24351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4327'. [ 619.568632][T24372] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4335'. [ 619.677259][T24377] netlink: 200 bytes leftover after parsing attributes in process `syz.4.4337'. [ 620.233637][T24391] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4341'. [ 620.348815][T24394] nbd: nbd0 already in use [ 620.363152][T24394] block nbd1: NBD_DISCONNECT [ 620.379443][T24394] block nbd1: Send disconnect failed -32 [ 620.387863][T24394] block nbd1: shutting down sockets [ 620.398220][ C1] blk_print_req_error: 126 callbacks suppressed [ 620.398249][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.415495][ C1] buffer_io_error: 138 callbacks suppressed [ 620.415524][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 620.443304][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.453570][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 620.466741][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.476977][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 620.488722][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.498925][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 620.499861][T24398] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4344'. [ 620.541950][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.553351][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 620.562147][ T25] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.572914][ T25] Buffer I/O error on dev nbd1, logical block 1, async page read [ 620.582859][ T1689] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 620.593855][ T1689] Buffer I/O error on dev nbd1, logical block 2, async page read [ 620.603173][ T1689] Buffer I/O error on dev nbd1, logical block 3, async page read [ 620.617248][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 620.630588][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 620.639917][ T25] Buffer I/O error on dev nbd1, logical block 1, async page read [ 620.649358][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 620.660507][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 620.674162][T18226] ldm_validate_partition_table(): Disk read failed. [ 620.689408][T18226] Dev nbd1: unable to read RDB block 0 [ 620.700157][T18226] nbd1: unable to read partition table [ 620.727908][T18226] ldm_validate_partition_table(): Disk read failed. [ 620.740754][T18226] Dev nbd1: unable to read RDB block 0 [ 620.753756][T18226] nbd1: unable to read partition table [ 620.777438][T24403] netlink: 'syz.2.4345': attribute type 1 has an invalid length. [ 620.992911][T24412] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4345'. [ 621.001196][T24406] bond5 (unregistering): Released all slaves [ 621.099528][T24398] tipc: Started in network mode [ 621.107422][T24398] tipc: Node identity 9277578b7648, cluster identity 4711 [ 621.125322][T24398] tipc: Enabled bearer , priority 0 [ 621.191195][T24420] sock: sock_set_timeout: `syz.1.4349' (pid 24420) tries to set negative timeout [ 621.202453][T24405] syzkaller0: entered promiscuous mode [ 621.208736][T24405] syzkaller0: entered allmulticast mode [ 621.241620][T20405] bridge_slave_1: left allmulticast mode [ 621.255849][T20405] bridge_slave_1: left promiscuous mode [ 621.262336][T20405] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.351527][T20405] pimreg: left allmulticast mode [ 621.404034][T20405] batman_adv: batadv0: Interface deactivated: gretap2 [ 622.158231][T20405] bond4 (unregistering): (slave erspan0): Releasing active interface [ 622.329542][T20405] batman_adv: batadv0: Removing interface: gretap2 [ 622.512663][T20405] bond6 (unregistering): (slave vlan2): Releasing active interface [ 622.562618][T20405] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 622.663458][T20405] bond18 (unregistering): (slave bridge7): Releasing active interface [ 622.674059][T20405] bridge7 (unregistering): left promiscuous mode [ 622.681194][T20405] bridge7 (unregistering): left allmulticast mode [ 622.718027][T20405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.730806][T20405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.742242][T20405] bond0 (unregistering): Released all slaves [ 622.764474][T20405] bond1 (unregistering): Released all slaves [ 622.798574][T20405] bond2 (unregistering): (slave veth3): Removing an active aggregator [ 622.817375][T20405] bond2 (unregistering): (slave veth3): Releasing backup interface [ 622.828880][T20405] bond2 (unregistering): Released all slaves [ 622.861083][T20405] bond3 (unregistering): Released all slaves [ 622.901932][T20405] bond4 (unregistering): Released all slaves [ 622.943290][T20405] bond5 (unregistering): Released all slaves [ 622.976935][T20405] bond6 (unregistering): Released all slaves [ 623.018688][T20405] bond7 (unregistering): Released all slaves [ 623.055772][T20405] bond8 (unregistering): Released all slaves [ 623.091428][T20405] bond9 (unregistering): Released all slaves [ 623.129057][T20405] bond10 (unregistering): (slave veth11): Releasing active interface [ 623.140721][T20405] bond10 (unregistering): Released all slaves [ 623.181056][T20405] bond11 (unregistering): Released all slaves [ 623.223247][T20405] bond12 (unregistering): Released all slaves [ 623.268286][T20405] bond13 (unregistering): Released all slaves [ 623.304334][T20405] bond14 (unregistering): Released all slaves [ 623.340212][T20405] bond15 (unregistering): Released all slaves [ 623.380480][T20405] bond16 (unregistering): Released all slaves [ 623.417602][T20405] bond17 (unregistering): (slave veth0_to_bond): Releasing active interface [ 623.439176][T20405] bond17 (unregistering): Released all slaves [ 623.475609][T20405] bond18 (unregistering): Released all slaves [ 623.553086][T24397] tipc: Resetting bearer [ 623.601971][T24397] tipc: Disabling bearer [ 623.753207][T24435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4351'. [ 623.861493][ T7296] tipc: Node number set to 3829356427 [ 623.956658][T20405] : left promiscuous mode [ 624.177952][ T1317] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 624.202118][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.638589][T20405] tipc: Disabling bearer [ 624.717838][T20405] tipc: Left network mode [ 624.944529][T24471] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4360'. [ 625.061806][T24473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4361'. [ 625.078161][T24473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4361'. [ 625.274289][T24478] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4363'. [ 625.276465][T24479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4363'. [ 625.803104][T24486] netlink: 'syz.1.4365': attribute type 6 has an invalid length. [ 625.824847][T24483] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4364'. [ 625.852990][T24483] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 625.916137][T24483] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4364'. [ 626.182593][T24494] netlink: zone id is out of range [ 626.213245][T24494] netlink: zone id is out of range [ 626.396615][T24503] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4370'. [ 627.484310][T20405] hsr_slave_0: left promiscuous mode [ 627.520854][T20405] hsr_slave_1: left promiscuous mode [ 627.543697][T20405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.573507][T24523] netlink: 'syz.2.4376': attribute type 8 has an invalid length. [ 627.584393][T20405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.601527][T20405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.613791][T20405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.649382][T20405] veth1_macvtap: left promiscuous mode [ 627.658666][T20405] veth0_macvtap: left promiscuous mode [ 628.498558][T20401] smbdirect: ib_dev[syz2] removed [ 628.525151][ T7301] lo speed is unknown, defaulting to 1000 [ 628.549086][ T7301] syz2: Port: 1 Link DOWN [ 628.978779][T24557] xt_SECMARK: invalid mode: 4 [ 628.995738][T20405] IPVS: stop unused estimator thread 0... [ 629.326698][T24559] netlink: 'syz.0.4359': attribute type 1 has an invalid length. [ 629.510072][T24573] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4385'. [ 629.637087][T24559] bond3: entered promiscuous mode [ 629.663412][T24559] 8021q: adding VLAN 0 to HW filter on device bond3 [ 629.687889][T24580] tipc: Enabling of bearer rejected, failed to enable media [ 629.765026][T24583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4388'. [ 629.803922][T24583] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4388'. [ 629.918300][T24595] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 630.335626][T24615] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4395'. [ 630.373940][T24615] openvswitch: netlink: Message has 512 unknown bytes. [ 630.476343][T24623] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4397'. [ 630.529617][T24630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4398'. [ 630.628331][T24623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4397'. [ 630.667620][T24627] syzkaller0: entered allmulticast mode [ 630.703826][ T5635] block nbd1: Receive control failed (result -32) [ 630.703847][ T5642] block nbd1: Receive control failed (result -32) [ 630.853774][T24643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4402'. [ 630.864232][T24643] netlink: 'syz.3.4402': attribute type 10 has an invalid length. [ 630.873670][T24643] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4402'. [ 630.967535][T24643] geneve2: entered promiscuous mode [ 630.975569][T24643] geneve2: entered allmulticast mode [ 631.395488][T24653] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 631.432543][T24653] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 631.494267][T24653] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 631.739324][T24682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4406'. [ 632.521059][T24720] syzkaller0: entered promiscuous mode [ 632.527712][T24720] syzkaller0: entered allmulticast mode [ 632.847747][T24732] dummy0: entered allmulticast mode [ 633.251764][T24763] syzkaller0: entered promiscuous mode [ 633.266068][T24763] syzkaller0: entered allmulticast mode [ 633.667956][T24781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 634.285707][T24781] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 634.883355][T24822] __nla_validate_parse: 7 callbacks suppressed [ 634.883398][T24822] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4443'. [ 637.041221][T24901] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4460'. [ 638.418097][T24910] netlink: 'syz.2.4462': attribute type 11 has an invalid length. [ 638.455236][T24915] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4463'. [ 638.468438][T24916] netlink: 'syz.1.4465': attribute type 1 has an invalid length. [ 638.546283][T24921] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4463'. [ 638.558777][T24916] 8021q: adding VLAN 0 to HW filter on device bond11 [ 638.565970][T24921] netlink: 35 bytes leftover after parsing attributes in process `syz.4.4463'. [ 638.565991][T24921] netlink: 'syz.4.4463': attribute type 5 has an invalid length. [ 638.566017][T24921] netlink: 'syz.4.4463': attribute type 6 has an invalid length. [ 638.566030][T24921] netlink: 35 bytes leftover after parsing attributes in process `syz.4.4463'. [ 638.704229][T24917] veth1_macvtap: entered promiscuous mode [ 638.710721][T24917] veth1_macvtap: entered allmulticast mode [ 638.731773][T24917] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 638.808070][T24924] bond11: option lp_interval: invalid value (18446744073709551607) [ 638.831533][T24924] bond11: option lp_interval: allowed values 1 - 2147483647 [ 638.899219][T24929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4467'. [ 639.051018][T24935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4469'. [ 639.178571][T24937] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 639.188531][T24937] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 639.198824][T24937] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 639.232166][T24942] veth0: Caught tx_queue_len zero misconfig [ 639.309911][T24947] netlink: 'syz.2.4472': attribute type 1 has an invalid length. [ 639.350922][T24950] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4474'. [ 639.623880][T24963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4474'. [ 640.126210][T24947] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 640.134336][T24954] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4470'. [ 640.217731][T24969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4477'. [ 640.280067][T24970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4477'. [ 640.384076][T24973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4478'. [ 640.513278][T24983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4478'. [ 640.605956][T24986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4481'. [ 640.637196][T24986] xt_TCPMSS: Only works on TCP SYN packets [ 640.665731][T24988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4482'. [ 640.680673][T24990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4483'. [ 640.703472][T24990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4483'. [ 640.737508][T24994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4483'. [ 640.789625][T24988] veth7: entered allmulticast mode [ 640.805489][T24988] bond3: (slave veth7): Enslaving as an active interface with an up link [ 640.891744][T24993] bond3 (unregistering): (slave veth7): Releasing backup interface [ 640.906747][T24993] bond3 (unregistering): Released all slaves [ 641.023623][T24996] netlink: 'syz.0.4484': attribute type 1 has an invalid length. [ 641.069075][T25000] netlink: 'syz.3.4486': attribute type 21 has an invalid length. [ 641.084213][T25000] netlink: 'syz.3.4486': attribute type 6 has an invalid length. [ 641.115965][T25000] batadv_slave_1: entered promiscuous mode [ 641.125538][T24999] batadv_slave_1: left promiscuous mode [ 641.379419][T25013] erspan0: entered promiscuous mode [ 641.443292][T25008] netlink: 'syz.0.4484': attribute type 3 has an invalid length. [ 642.549296][T25059] nbd: must specify an index to disconnect [ 643.174513][T25088] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 643.306710][T25102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 643.629589][T24997] 8021q: adding VLAN 0 to HW filter on device bond5 [ 643.648063][T24997] bond4: (slave bond5): making interface the new active one [ 643.657990][T24997] bond4: (slave bond5): Enslaving as an active interface with an up link [ 643.914216][T25114] netlink: 'syz.3.4517': attribute type 62 has an invalid length. [ 644.417658][T25138] openvswitch: netlink: Missing key (keys=40, expected=100) [ 644.565825][T25141] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 645.192778][T25175] __nla_validate_parse: 9 callbacks suppressed [ 645.192796][T25175] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4540'. [ 645.252889][T25176] tipc: Enabled bearer , priority 10 [ 645.447420][T25191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4544'. [ 645.536885][T25195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4546'. [ 645.586853][T25195] bond9: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 645.596113][T25195] bond9: peer notification delay (49189) is not a multiple of miimon (100), value rounded to 49100 ms [ 645.641920][T25204] tun0: tun_chr_ioctl cmd 1074812118 [ 645.783150][T25211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.875402][T25214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4551'. [ 646.184256][T25222] SET target dimension over the limit! [ 646.539178][T25249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4561'. [ 646.549721][T25249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4561'. [ 646.811772][T25262] tipc: Enabling of bearer rejected, already enabled [ 646.830169][T25262] tipc: Resetting bearer [ 646.950560][T25270] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 647.079866][T25280] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4569'. [ 647.080916][T25273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4566'. [ 647.143294][T25280] sctp: [Deprecated]: syz.3.4569 (pid 25280) Use of int in max_burst socket option. [ 647.143294][T25280] Use struct sctp_assoc_value instead [ 647.176186][T25280] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4569'. [ 647.289104][T25285] team0: entered allmulticast mode [ 647.304610][T25285] team_slave_0: entered allmulticast mode [ 647.329762][T25285] team_slave_1: entered allmulticast mode [ 647.597221][T25289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4573'. [ 647.641589][T25289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.650478][T25289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.706565][ T29] audit: type=1800 audit(1782683081.160:13): pid=25300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4576" name=CB dev="tmpfs" ino=1610 res=0 errno=0 [ 647.848299][T25299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 648.364589][T25325] lo: MTU too low for tipc bearer [ 648.370034][T25325] tipc: Enabling of bearer rejected, failed to enable media [ 648.655087][T25334] vxlan1: entered promiscuous mode [ 648.672906][T25334] vxlan1: entered allmulticast mode [ 648.683668][T24856] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.704379][T24856] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.725036][T24856] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.736171][T24856] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.499856][T25367] netlink: 'syz.1.4594': attribute type 5 has an invalid length. [ 649.546471][T25370] SET target dimension over the limit! [ 649.647861][T25379] netlink: 'syz.1.4594': attribute type 16 has an invalid length. [ 649.808772][T25389] xt_hashlimit: size too large, truncated to 1048576 [ 650.095334][T25360] team0: Port device team_slave_0 removed [ 650.316259][T25372] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 650.343731][T25383] tipc: Enabling of bearer rejected, failed to enable media [ 650.365023][T25371] syzkaller1: entered promiscuous mode [ 650.481082][T25371] syzkaller1: entered allmulticast mode [ 650.629123][T25413] __nla_validate_parse: 8 callbacks suppressed [ 650.629141][T25413] netlink: 208 bytes leftover after parsing attributes in process `syz.3.4602'. [ 650.706004][T25416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4601'. [ 650.850584][T25406] tipc: Enabled bearer , priority 0 [ 650.883158][T25408] lo: Caught tx_queue_len zero misconfig [ 651.044454][T25417] dummy0 speed is unknown, defaulting to 1000 [ 651.087900][T25417] dummy0 speed is unknown, defaulting to 1000 [ 651.097700][T25417] dummy0 speed is unknown, defaulting to 1000 [ 651.627254][T25448] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4610'. [ 651.658304][T25448] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4610'. [ 651.667095][ T5361] dummy0 speed is unknown, defaulting to 1000 [ 651.682081][T25417] infiniband syz1: set active [ 651.692880][T25417] infiniband syz1: added dummy0 [ 651.750499][T25417] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 651.765779][T25417] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 651.783241][T25417] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 651.826950][T25417] RDS/IB: syz1: added [ 651.842105][T25417] smc: adding ib device syz1 with port count 1 [ 651.848316][T25417] smc: ib device syz1 port 1 has no pnetid [ 651.855033][ T5361] dummy0 speed is unknown, defaulting to 1000 [ 651.862873][T25417] dummy0 speed is unknown, defaulting to 1000 [ 651.888742][T25458] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 652.245704][T25417] dummy0 speed is unknown, defaulting to 1000 [ 652.462520][T25470] netlink: 'syz.4.4617': attribute type 1 has an invalid length. [ 652.558019][T25473] bond3: (slave geneve3): Opening slave failed [ 652.593877][T25470] bond3 (unregistering): Released all slaves [ 652.824593][T25417] dummy0 speed is unknown, defaulting to 1000 [ 652.934827][T25471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4615'. [ 653.330226][T25468] dummy0 speed is unknown, defaulting to 1000 [ 653.491722][T25487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4621'. [ 653.500991][T25489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4621'. [ 653.518178][T25487] gretap1: entered allmulticast mode [ 653.551066][T25491] xt_hashlimit: size too large, truncated to 1048576 [ 653.715210][T25496] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4622'. [ 653.750769][T25496] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4622'. [ 653.759426][T25417] dummy0 speed is unknown, defaulting to 1000 [ 653.785198][T25497] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4622'. [ 654.445673][T25417] dummy0 speed is unknown, defaulting to 1000 [ 654.869060][T25417] dummy0 speed is unknown, defaulting to 1000 [ 655.422285][ T5642] block nbd3: Receive control failed (result -1) [ 655.603758][T25519] Cannot find add_set index 1 as target [ 655.620178][T25486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.647830][T25486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.728211][T25486] batman_adv: batadv0: Removing interface: dummy0 [ 656.568356][T25527] __nla_validate_parse: 3 callbacks suppressed [ 656.568375][T25527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4629'. [ 656.670727][T25529] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4628'. [ 656.975055][T25540] nbd: must specify an index to disconnect [ 657.284771][T25553] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4637'. [ 657.346577][T25555] netlink: 'syz.4.4638': attribute type 1 has an invalid length. [ 657.461889][T25555] bond3: entered promiscuous mode [ 657.482838][T25555] 8021q: adding VLAN 0 to HW filter on device bond3 [ 657.491112][T25569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4643'. [ 657.541700][T25562] bond3: (slave bridge6): making interface the new active one [ 657.582940][T25562] bridge6: entered promiscuous mode [ 657.593833][T25562] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 657.669927][T25556] bond3: (slave bridge7): Enslaving as a backup interface with an up link [ 657.699099][T25570] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 657.700716][T25574] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 657.941162][T25593] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4646'. [ 658.328843][T25605] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 658.587680][T25614] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 658.696673][T24853] tipc: Subscription rejected, illegal request [ 658.735235][T25610] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4652'. [ 659.309324][T25634] tipc: Enabling of bearer rejected, already enabled [ 659.676754][T25650] dummy0 speed is unknown, defaulting to 1000 [ 659.724721][T25658] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4663'. [ 659.816241][T25658] gretap0: entered promiscuous mode [ 660.833500][T25698] openvswitch: netlink: Message has 8 unknown bytes. [ 660.850870][T25698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.904643][T25698] netlink: 'syz.3.4672': attribute type 10 has an invalid length. [ 661.180520][T25704] tipc: Enabling of bearer rejected, already enabled [ 661.587206][T25720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4678'. [ 661.873879][ T5642] block nbd4: Receive control failed (result -1) [ 661.967132][T25720] netlink: 'syz.0.4678': attribute type 4 has an invalid length. [ 662.223549][T25745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4683'. [ 662.365477][T25752] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4684'. [ 662.490749][T25756] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4686'. [ 662.789380][T25774] netlink: 'syz.3.4688': attribute type 30 has an invalid length. [ 662.926413][T25779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.991000][T25779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.238660][T25787] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4693'. [ 663.338079][T25802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4692'. [ 663.355368][T25793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.125645][T25824] bond5: option tlb_dynamic_lb: invalid value (128) [ 664.136905][T25824] bond5 (unregistering): Released all slaves [ 664.230854][T25832] netlink: 480 bytes leftover after parsing attributes in process `syz.4.4698'. [ 664.256074][T25832] netlink: 480 bytes leftover after parsing attributes in process `syz.4.4698'. [ 664.491470][T25840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4702'. [ 664.588544][T25831] bond3: left promiscuous mode [ 664.618808][T25849] tipc: Enabled bearer , priority 30 [ 665.057649][T25865] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4709'. [ 665.364611][T25868] tipc: Enabled bearer , priority 0 [ 665.374891][T25868] syzkaller0: entered promiscuous mode [ 665.381231][T25868] syzkaller0: entered allmulticast mode [ 665.392749][T25868] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 665.673831][T25873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 665.770511][T25871] tipc: Resetting bearer [ 665.795824][ T7301] tipc: Node number set to 1191366148 [ 665.853584][T25867] tipc: Resetting bearer [ 665.975453][T25867] tipc: Disabling bearer [ 666.369426][T25894] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 666.391631][T25894] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 666.616663][T25906] __nla_validate_parse: 6 callbacks suppressed [ 666.616683][T25906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4719'. [ 666.699555][T25913] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4722'. [ 666.716891][T25912] x_tables: duplicate underflow at hook 1 [ 666.819353][T25919] syzkaller1: entered promiscuous mode [ 666.841462][T25919] syzkaller1: entered allmulticast mode [ 666.937474][T25925] netlink: 'syz.1.4725': attribute type 4 has an invalid length. [ 667.102401][T25930] netlink: 'syz.3.4727': attribute type 1 has an invalid length. [ 667.245009][T25930] 8021q: adding VLAN 0 to HW filter on device bond10 [ 667.355952][T25939] bond10: (slave veth5): Enslaving as an active interface with a down link [ 667.378440][T25941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.385560][T25941] bond10: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 667.933723][T25965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4735'. [ 668.208139][T25977] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4739'. [ 671.617028][T26016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4750'. [ 671.926808][T26024] block nbd4: NBD_DISCONNECT [ 671.948490][T26034] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 671.955885][T26024] block nbd4: Send disconnect failed -32 [ 671.968604][T26024] block nbd4: shutting down sockets [ 672.521007][T26059] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4759'. [ 672.586242][T26062] sctp: [Deprecated]: syz.2.4761 (pid 26062) Use of int in max_burst socket option deprecated. [ 672.586242][T26062] Use struct sctp_assoc_value instead [ 672.613717][T26036] rdma_rxe: rxe_newlink: failed to add lo [ 672.724387][T26065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4762'. [ 672.873381][T26065] veth0_macvtap: left promiscuous mode [ 673.381196][T26036] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 673.403055][T26036] bond6 (unregistering): Released all slaves [ 673.440409][T26102] tipc: New replicast peer: 255.255.255.255 [ 673.454008][T26102] tipc: Enabled bearer , priority 10 [ 674.374784][T26151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4782'. [ 674.695521][T26172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4786'. [ 674.774985][T26176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4786'. [ 676.735158][T26148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.763083][T26148] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.440299][T26148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.514718][T26148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.529031][T26148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.568380][T26148] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 677.585812][T26148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 677.603115][T26148] veth1_macvtap: left promiscuous mode [ 677.610454][T26148] veth0_macvtap: left promiscuous mode [ 677.619152][T26148] veth0_macvtap: entered promiscuous mode [ 677.628017][T26148] veth1_macvtap: entered promiscuous mode [ 677.641078][T26148] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 677.663600][T20414] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.670757][T20414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.685664][T20414] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.693736][T20414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.789270][T26195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4790'. [ 677.826914][T26195] tc_dump_action: action bad kind [ 677.843387][T20384] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.867592][T20384] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.997377][T20384] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.022142][T20384] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.608080][T26232] tipc: Resetting bearer [ 678.636416][T26232] tipc: Resetting bearer [ 678.836754][T26232] tipc: Resetting bearer [ 678.961254][T26255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4802'. [ 679.386864][T26269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4808'. [ 680.039193][T26304] netlink: 'syz.1.4819': attribute type 1 has an invalid length. [ 680.076454][T26304] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 680.170303][T26318] xt_hashlimit: size too large, truncated to 1048576 [ 680.306994][T26319] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.320963][T26319] bridge_slave_0 (unregistering): left allmulticast mode [ 680.373370][T26319] bridge_slave_0 (unregistering): left promiscuous mode [ 680.395470][T26319] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.434023][T26327] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4822'. [ 680.614197][T26330] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4823'. [ 680.936261][T26350] syzkaller0: entered promiscuous mode [ 680.947565][T26350] syzkaller0: entered allmulticast mode [ 680.979450][T26351] tipc: Enabled bearer , priority 0 [ 680.993628][T26348] tipc: Resetting bearer [ 681.045693][T26348] tipc: Disabling bearer [ 681.087976][T26359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4831'. [ 681.236842][T26365] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.4834'. [ 681.260717][T26367] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.4834'. [ 681.900474][T26391] netlink: 'syz.1.4840': attribute type 3 has an invalid length. [ 681.932630][T26391] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4840'. [ 682.004980][T26391] syzkaller1: entered allmulticast mode [ 682.037841][T26402] netlink: 'syz.2.4843': attribute type 1 has an invalid length. [ 682.051027][T26402] netlink: 'syz.2.4843': attribute type 2 has an invalid length. [ 682.076420][T26402] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4843'. [ 682.293751][T26416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.365461][T26413] syzkaller0: entered promiscuous mode [ 682.371048][T26413] syzkaller0: entered allmulticast mode [ 682.452995][T26418] netlink: 'syz.1.4848': attribute type 8 has an invalid length. [ 682.512105][T26418] veth1_to_team: entered promiscuous mode [ 682.519978][T26418] gretap0: entered promiscuous mode [ 682.528470][T26418] ip6gretap0: entered promiscuous mode [ 682.536156][T26418] debugfs: 'hsr0' already exists in 'hsr' [ 682.543466][T26418] Cannot create hsr debugfs directory [ 682.549724][T26418] hsr0: entered promiscuous mode [ 682.597510][T26411] dummy0 speed is unknown, defaulting to 1000 [ 683.269528][T26416] __nla_validate_parse: 1 callbacks suppressed [ 683.269548][T26416] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4845'. [ 685.619101][ T1317] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 685.628304][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.443009][T26484] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4857'. [ 686.461392][T26489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4860'. [ 687.212535][T26511] syzkaller0: entered promiscuous mode [ 687.231091][T26511] syzkaller0: entered allmulticast mode [ 687.377385][T26525] Unsupported ieee802154 address type: 0 [ 689.199485][T26548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4873'. [ 689.209298][T26548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4873'. [ 690.813918][T26562] sctp: [Deprecated]: syz.4.4877 (pid 26562) Use of struct sctp_assoc_value in delayed_ack socket option. [ 690.813918][T26562] Use struct sctp_sack_info instead [ 690.863425][T26567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4879'. [ 690.986035][T26575] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4880'. [ 691.006257][T26547] bond6: entered promiscuous mode [ 691.044881][T26567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4879'. [ 691.287282][T26584] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 691.415760][T26590] netlink: 'syz.2.4884': attribute type 102 has an invalid length. [ 691.441204][T26590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4884'. [ 691.464511][T26590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4884'. [ 691.835206][T26605] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4887'. [ 692.065641][T26611] dummy0 speed is unknown, defaulting to 1000 [ 692.125735][T26614] xt_HMARK: spi-set and port-set can't be combined [ 692.708307][T26629] netlink: 'syz.2.4896': attribute type 21 has an invalid length. [ 692.741429][T26629] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4896'. [ 692.818599][T26641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4897'. [ 693.516146][T26629] netlink: 'syz.2.4896': attribute type 5 has an invalid length. [ 693.611594][T26644] dummy0 speed is unknown, defaulting to 1000 [ 694.381750][T26686] netlink: 'syz.2.4905': attribute type 1 has an invalid length. [ 694.609784][T26695] netlink: 'syz.2.4909': attribute type 13 has an invalid length. [ 694.647348][T26695] netlink: 'syz.2.4909': attribute type 17 has an invalid length. [ 694.685509][T26698] __nla_validate_parse: 5 callbacks suppressed [ 694.685527][T26698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4909'. [ 694.786199][T26701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4910'. [ 694.812248][T26701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4910'. [ 694.918845][T26695] macsec0: left allmulticast mode [ 694.946067][T26695] veth1_macvtap: left allmulticast mode [ 694.975857][T26695] geneve1: left promiscuous mode [ 694.996574][T26695] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 695.029139][ T7289] dummy0 speed is unknown, defaulting to 1000 [ 695.066746][T26697] [ 695.069105][T26697] ====================================================== [ 695.076147][T26697] WARNING: possible circular locking dependency detected [ 695.083248][T26697] syzkaller #0 Not tainted [ 695.087694][T26697] ------------------------------------------------------ [ 695.094706][T26697] syz.3.4910/26697 is trying to acquire lock: [ 695.100752][T26697] ffffffff8f0c1348 (crypto_alg_sem){++++}-{4:4}, at: crypto_alg_mod_lookup+0x20e/0x5d0 [ 695.110549][T26697] [ 695.110549][T26697] but task is already holding lock: [ 695.117893][T26697] ffff88807a323860 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x393/0x1710 [ 695.127295][T26697] [ 695.127295][T26697] which lock already depends on the new lock. [ 695.127295][T26697] [ 695.137680][T26697] [ 695.137680][T26697] the existing dependency chain (in reverse order) is: [ 695.146676][T26697] [ 695.146676][T26697] -> #9 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 695.154473][T26697] lock_sock_nested+0x41/0x100 [ 695.159825][T26697] tls_sw_sendmsg+0x161/0x2860 [ 695.165104][T26697] sock_sendmsg_nosec+0x90/0x180 [ 695.170584][T26697] ____sys_sendmsg+0x54e/0x850 [ 695.175854][T26697] ___sys_sendmsg+0x2a5/0x360 [ 695.181041][T26697] __x64_sys_sendmsg+0x1b1/0x290 [ 695.186484][T26697] do_syscall_64+0x174/0x580 [ 695.191703][T26697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.198135][T26697] [ 695.198135][T26697] -> #8 (&ctx->tx_lock){+.+.}-{4:4}: [ 695.205593][T26697] __mutex_lock+0x19d/0x1550 [ 695.210723][T26697] tls_sw_sendmsg+0x13c/0x2860 [ 695.215999][T26697] sock_sendmsg_nosec+0x90/0x180 [ 695.221447][T26697] sock_sendmsg+0x1ca/0x2d0 [ 695.226460][T26697] __sock_xmit+0x245/0x4f0 [ 695.231455][T26697] nbd_disconnect+0x3ad/0x560 [ 695.236668][T26697] nbd_disconnect_and_put+0x32/0x280 [ 695.242463][T26697] nbd_genl_disconnect+0x4af/0x590 [ 695.248081][T26697] genl_family_rcv_msg_doit+0x233/0x340 [ 695.254204][T26697] genl_rcv_msg+0x614/0x7a0 [ 695.259216][T26697] netlink_rcv_skb+0x226/0x4a0 [ 695.264486][T26697] genl_rcv+0x28/0x40 [ 695.268976][T26697] netlink_unicast+0x7bb/0x940 [ 695.274246][T26697] netlink_sendmsg+0x813/0xb40 [ 695.279516][T26697] sock_sendmsg_nosec+0x13a/0x180 [ 695.285051][T26697] ____sys_sendmsg+0x54e/0x850 [ 695.290319][T26697] ___sys_sendmsg+0x2a5/0x360 [ 695.295506][T26697] __x64_sys_sendmsg+0x1b1/0x290 [ 695.300949][T26697] do_syscall_64+0x174/0x580 [ 695.306044][T26697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.312442][T26697] [ 695.312442][T26697] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 695.320076][T26697] __mutex_lock+0x19d/0x1550 [ 695.325172][T26697] nbd_queue_rq+0x373/0x1150 [ 695.330270][T26697] blk_mq_dispatch_rq_list+0x499/0x1990 [ 695.336424][T26697] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 695.343289][T26697] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 695.349774][T26697] blk_mq_run_work_fn+0x16c/0x300 [ 695.355312][T26697] process_scheduled_works+0xa8e/0x14e0 [ 695.361399][T26697] worker_thread+0xa47/0xfb0 [ 695.366500][T26697] kthread+0x388/0x470 [ 695.371073][T26697] ret_from_fork+0x514/0xb70 [ 695.376274][T26697] ret_from_fork_asm+0x1a/0x30 [ 695.381556][T26697] [ 695.381556][T26697] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 695.388755][T26697] __mutex_lock+0x19d/0x1550 [ 695.393852][T26697] nbd_queue_rq+0xc1/0x1150 [ 695.398872][T26697] blk_mq_dispatch_rq_list+0x499/0x1990 [ 695.404929][T26697] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 695.411761][T26697] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 695.418244][T26697] blk_mq_run_work_fn+0x16c/0x300 [ 695.423777][T26697] process_scheduled_works+0xa8e/0x14e0 [ 695.429838][T26697] worker_thread+0xa47/0xfb0 [ 695.434939][T26697] kthread+0x388/0x470 [ 695.439512][T26697] ret_from_fork+0x514/0xb70 [ 695.444608][T26697] ret_from_fork_asm+0x1a/0x30 [ 695.449877][T26697] [ 695.449877][T26697] -> #5 (set->srcu){.+.+}-{0:0}: [ 695.456986][T26697] __synchronize_srcu+0xc9/0x2f0 [ 695.462453][T26697] elevator_switch+0x1e8/0x7b0 [ 695.467798][T26697] elevator_change+0x2fa/0x480 [ 695.473071][T26697] elevator_set_default+0x375/0x440 [ 695.478782][T26697] blk_register_queue+0x3f3/0x4e0 [ 695.484348][T26697] __add_disk+0x6cb/0xe30 [ 695.489212][T26697] add_disk_fwnode+0xfb/0x4b0 [ 695.494394][T26697] nbd_dev_add+0x733/0xb60 [ 695.499318][T26697] nbd_init+0x15f/0x1e0 [ 695.504071][T26697] do_one_initcall+0x250/0x870 [ 695.509341][T26697] do_initcall_level+0x10a/0x1a0 [ 695.514849][T26697] do_initcalls+0x59/0xa0 [ 695.519686][T26697] kernel_init_freeable+0x29d/0x3e0 [ 695.525392][T26697] kernel_init+0x1d/0x1d0 [ 695.530265][T26697] ret_from_fork+0x514/0xb70 [ 695.535363][T26697] ret_from_fork_asm+0x1a/0x30 [ 695.540634][T26697] [ 695.540634][T26697] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 695.548439][T26697] __mutex_lock+0x19d/0x1550 [ 695.553534][T26697] elevator_change+0x1af/0x480 [ 695.558809][T26697] elevator_set_none+0xb5/0x140 [ 695.564170][T26697] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 695.570483][T26697] nbd_start_device+0x189/0xb30 [ 695.575838][T26697] nbd_genl_connect+0x1597/0x1c10 [ 695.581369][T26697] genl_family_rcv_msg_doit+0x233/0x340 [ 695.587429][T26697] genl_rcv_msg+0x614/0x7a0 [ 695.592441][T26697] netlink_rcv_skb+0x226/0x4a0 [ 695.597712][T26697] genl_rcv+0x28/0x40 [ 695.602201][T26697] netlink_unicast+0x7bb/0x940 [ 695.607466][T26697] netlink_sendmsg+0x813/0xb40 [ 695.612737][T26697] sock_sendmsg_nosec+0x13a/0x180 [ 695.618272][T26697] ____sys_sendmsg+0x54e/0x850 [ 695.623544][T26697] ___sys_sendmsg+0x2a5/0x360 [ 695.628725][T26697] __x64_sys_sendmsg+0x1b1/0x290 [ 695.634172][T26697] do_syscall_64+0x174/0x580 [ 695.639267][T26697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.645664][T26697] [ 695.645664][T26697] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 695.654274][T26697] blk_alloc_queue+0x544/0x690 [ 695.659549][T26697] __blk_mq_alloc_disk+0x194/0x390 [ 695.665166][T26697] nbd_dev_add+0x494/0xb60 [ 695.670086][T26697] nbd_init+0x15f/0x1e0 [ 695.674755][T26697] do_one_initcall+0x250/0x870 [ 695.680028][T26697] do_initcall_level+0x10a/0x1a0 [ 695.685472][T26697] do_initcalls+0x59/0xa0 [ 695.690309][T26697] kernel_init_freeable+0x29d/0x3e0 [ 695.696028][T26697] kernel_init+0x1d/0x1d0 [ 695.700865][T26697] ret_from_fork+0x514/0xb70 [ 695.705960][T26697] ret_from_fork_asm+0x1a/0x30 [ 695.711231][T26697] [ 695.711231][T26697] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 695.718429][T26697] fs_reclaim_acquire+0x71/0x100 [ 695.723910][T26697] __kmalloc_cache_noprof+0x61/0x660 [ 695.729709][T26697] cryptomgr_notify+0x85/0x920 [ 695.735055][T26697] notifier_call_chain+0x1a5/0x3d0 [ 695.740671][T26697] blocking_notifier_call_chain+0x6a/0x90 [ 695.746894][T26697] crypto_alg_mod_lookup+0x390/0x5d0 [ 695.752682][T26697] crypto_alloc_tfm_node+0x135/0x3e0 [ 695.758474][T26697] public_key_verify_signature+0x242/0x9e0 [ 695.764843][T26697] x509_check_for_self_signed+0x326/0x430 [ 695.771065][T26697] x509_cert_parse+0x622/0x7a0 [ 695.776338][T26697] x509_key_preparse+0x64/0x6d0 [ 695.781695][T26697] asymmetric_key_preparse+0xb9/0x1b0 [ 695.787577][T26697] __key_create_or_update+0x3a9/0xa80 [ 695.793534][T26697] key_create_or_update+0x42/0x60 [ 695.799084][T26697] x509_load_certificate_list+0x13d/0x280 [ 695.805332][T26697] load_builtin_regdb_keys+0xae/0xe0 [ 695.811203][T26697] regulatory_init_db+0x30/0x290 [ 695.816654][T26697] do_one_initcall+0x250/0x870 [ 695.821930][T26697] do_initcall_level+0x10a/0x1a0 [ 695.827380][T26697] do_initcalls+0x59/0xa0 [ 695.832220][T26697] kernel_init_freeable+0x29d/0x3e0 [ 695.837931][T26697] kernel_init+0x1d/0x1d0 [ 695.842768][T26697] ret_from_fork+0x514/0xb70 [ 695.847866][T26697] ret_from_fork_asm+0x1a/0x30 [ 695.853138][T26697] [ 695.853138][T26697] -> #1 ((crypto_chain).rwsem){++++}-{4:4}: [ 695.861204][T26697] down_read+0x4a/0x330 [ 695.865875][T26697] blocking_notifier_call_chain+0x54/0x90 [ 695.872105][T26697] __crypto_register_alg+0x31f/0x3b0 [ 695.877965][T26697] crypto_register_alg+0x44a/0x820 [ 695.883591][T26697] do_one_initcall+0x250/0x870 [ 695.888867][T26697] do_initcall_level+0x10a/0x1a0 [ 695.894316][T26697] do_initcalls+0x59/0xa0 [ 695.899154][T26697] kernel_init_freeable+0x29d/0x3e0 [ 695.904857][T26697] kernel_init+0x1d/0x1d0 [ 695.909694][T26697] ret_from_fork+0x514/0xb70 [ 695.914789][T26697] ret_from_fork_asm+0x1a/0x30 [ 695.920062][T26697] [ 695.920062][T26697] -> #0 (crypto_alg_sem){++++}-{4:4}: [ 695.927606][T26697] __lock_acquire+0x1520/0x2cf0 [ 695.932984][T26697] lock_acquire+0x106/0x350 [ 695.937993][T26697] down_write+0x96/0x200 [ 695.942742][T26697] crypto_alg_mod_lookup+0x20e/0x5d0 [ 695.948533][T26697] crypto_alloc_tfm_node+0x135/0x3e0 [ 695.954323][T26697] tls_set_sw_offload+0xa2b/0x1770 [ 695.959949][T26697] tls_setsockopt+0x10c5/0x1710 [ 695.965309][T26697] do_sock_setsockopt+0x17c/0x1b0 [ 695.970839][T26697] __x64_sys_setsockopt+0x13d/0x1b0 [ 695.976546][T26697] do_syscall_64+0x174/0x580 [ 695.981644][T26697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.988041][T26697] [ 695.988041][T26697] other info that might help us debug this: [ 695.988041][T26697] [ 695.998249][T26697] Chain exists of: [ 695.998249][T26697] crypto_alg_sem --> &ctx->tx_lock --> sk_lock-AF_INET6 [ 695.998249][T26697] [ 696.011154][T26697] Possible unsafe locking scenario: [ 696.011154][T26697] [ 696.018600][T26697] CPU0 CPU1 [ 696.023982][T26697] ---- ---- [ 696.029339][T26697] lock(sk_lock-AF_INET6); [ 696.033828][T26697] lock(&ctx->tx_lock); [ 696.040574][T26697] lock(sk_lock-AF_INET6); [ 696.047579][T26697] lock(crypto_alg_sem); [ 696.051895][T26697] [ 696.051895][T26697] *** DEADLOCK *** [ 696.051895][T26697] [ 696.060059][T26697] 1 lock held by syz.3.4910/26697: [ 696.065209][T26697] #0: ffff88807a323860 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_setsockopt+0x393/0x1710 [ 696.074979][T26697] [ 696.074979][T26697] stack backtrace: [ 696.080852][T26697] CPU: 0 UID: 0 PID: 26697 Comm: syz.3.4910 Not tainted syzkaller #0 PREEMPT(full) [ 696.080884][T26697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 696.080908][T26697] Call Trace: [ 696.080952][T26697] [ 696.080984][T26697] dump_stack_lvl+0xe8/0x150 [ 696.081027][T26697] print_circular_bug+0x2e1/0x300 [ 696.081049][T26697] check_noncircular+0x12e/0x150 [ 696.081069][T26697] __lock_acquire+0x1520/0x2cf0 [ 696.081092][T26697] ? crypto_alg_mod_lookup+0x20e/0x5d0 [ 696.081136][T26697] lock_acquire+0x106/0x350 [ 696.081151][T26697] ? crypto_alg_mod_lookup+0x20e/0x5d0 [ 696.081172][T26697] down_write+0x96/0x200 [ 696.081187][T26697] ? crypto_alg_mod_lookup+0x20e/0x5d0 [ 696.081202][T26697] ? __pfx_down_write+0x10/0x10 [ 696.081217][T26697] ? __init_swait_queue_head+0xa8/0x150 [ 696.081244][T26697] ? crypto_larval_alloc+0x1bf/0x290 [ 696.081260][T26697] crypto_alg_mod_lookup+0x20e/0x5d0 [ 696.081278][T26697] crypto_alloc_tfm_node+0x135/0x3e0 [ 696.081297][T26697] tls_set_sw_offload+0xa2b/0x1770 [ 696.081326][T26697] tls_setsockopt+0x10c5/0x1710 [ 696.081347][T26697] ? __pfx_tls_setsockopt+0x10/0x10 [ 696.081368][T26697] ? __fget_files+0x2a/0x420 [ 696.081391][T26697] ? aa_sock_opt_perm+0xff/0x1a0 [ 696.081439][T26697] ? sock_common_setsockopt+0x36/0xc0 [ 696.081460][T26697] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 696.081486][T26697] do_sock_setsockopt+0x17c/0x1b0 [ 696.081504][T26697] __x64_sys_setsockopt+0x13d/0x1b0 [ 696.081520][T26697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.081535][T26697] do_syscall_64+0x174/0x580 [ 696.081548][T26697] ? trace_irq_disable+0x3b/0x140 [ 696.081574][T26697] ? clear_bhb_loop+0x40/0x90 [ 696.081590][T26697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.081605][T26697] RIP: 0033:0x7f1f6bb9ce59 [ 696.081620][T26697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.081659][T26697] RSP: 002b:00007f1f6c988028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 696.081703][T26697] RAX: ffffffffffffffda RBX: 00007f1f6be15fa0 RCX: 00007f1f6bb9ce59 [ 696.081714][T26697] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000004 [ 696.081723][T26697] RBP: 00007f1f6bc32e6f R08: 0000000000000028 R09: 0000000000000000 [ 696.081733][T26697] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 696.081743][T26697] R13: 00007f1f6be16038 R14: 00007f1f6be15fa0 R15: 00007ffe9188b498 [ 696.081760][T26697] [ 696.707410][T26708] tipc: Enabled bearer , priority 0 [ 696.755242][T26708] syzkaller0: entered promiscuous mode [ 696.760795][T26708] syzkaller0: entered allmulticast mode [ 696.769901][T26708] tipc: Resetting bearer [ 696.777402][T26707] tipc: Resetting bearer [ 696.813295][T26707] tipc: Disabling bearer