last executing test programs: 2.249883272s ago: executing program 4 (id=5775): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'bridge0\x00', &(0x7f0000000240)=@ethtool_dump={0x3e, 0x2, 0x8000005}}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf2505000000080002000570"], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) (async) pipe(&(0x7f0000000140)) (async) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 2.06580994s ago: executing program 4 (id=5776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000003e0007010000000005000000017c00000400fc680c000180062106123b1200000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) close(0x3) 1.942031151s ago: executing program 4 (id=5779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f00000000c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27, 0x38}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x2700, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) (async) socket$unix(0x1, 0x3, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', 0x1}) (async) write$tun(r0, &(0x7f00000000c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27, 0x38}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x2700, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) 1.75439654s ago: executing program 4 (id=5783): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x5ce0}]}]}, {0x0, [0x2e, 0x61]}}, 0x0, 0x30, 0x0, 0x1, 0x8000}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x6c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x41, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x2, 0x895}}, 0x2, @random=0x8, 0x4200, @val, @val, @void, @void, @val={0x6, 0x2, 0x1}, @void, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x0, 0x40, 0x9d, 0x3}}, @void, @void, @void, @val={0x76, 0x6, {0xb, 0x7f, 0x2d}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x101, 0x101, 0x7]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockopt$inet6_mptcp_MPTCP_FULL_INFO(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000001180)={0x0, 0x138, 0x0, 0x108, 0x0, 0x4, &(0x7f0000000540)=[{0x0, {@in6={{0xa, 0x0, 0x0, @empty}}, @in={{0x2, 0x0, @remote}}}}, {0x0, {@in6={{0xa, 0x0, 0x0, @empty}}, @in={{0x2, 0x0, @dev}}}}, {0x0, {@in={{0x2, 0x0, @remote}}, @in={{0x2, 0x0, @multicast1}}}}, {0x0, {@in6, @in6={{0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}}}}], &(0x7f0000000980), {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000001240)=0x88) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000001280)={0x2, 0x4e21, @remote}, 0x10) getsockopt$inet_mptcp_MPTCP_INFO(r7, 0x11c, 0x1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x60) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001380), r9) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r9, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)={0x20, r10, 0x5, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001500)={'gretap0\x00', &(0x7f0000001480)={'ip_vti0\x00', 0x0, 0x8000, 0x7, 0x0, 0x5db, {{0xb, 0x4, 0x0, 0x9, 0x2c, 0x66, 0x0, 0x4, 0x29, 0x0, @multicast2, @broadcast, {[@timestamp={0x44, 0x18, 0x2c, 0x0, 0x4, [0x2, 0x32, 0x5, 0x1, 0x9]}]}}}}}) getsockopt$inet6_mptcp_MPTCP_INFO(r1, 0x11c, 0x1, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000015c0)=0x60) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000001700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001600)={0x94, r5, 0x300, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x30}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r12}]}, 0x94}, 0x1, 0x0, 0x0, 0xd0}, 0x10001) 1.587827206s ago: executing program 2 (id=5786): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000074000000060a01040000000000000000020000000900010073797a30000000000900020073797a300000000048000480440001800a0001006d61746368000000340002800d00010064657667726f757000000000080002400000000018000300000000000000000000000000000000000000000014000000110001"], 0xfc}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000029000100000000000000000012000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004680)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000003b08000440000000220500020007000000340001800c00010062697477697365002400028008000340000000040800014000000014080002400000001208000840000000040900010073797a30"], 0x108}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000180)=""/123, 0x301000, 0x800, 0xf7f, 0x2}, 0x20) r4 = socket(0x6, 0x800, 0xd) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r3) getsockopt$inet6_mptcp_MPTCP_INFO(r3, 0x11c, 0x1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=0x60) getsockopt$inet_mptcp_MPTCP_INFO(r3, 0x11c, 0x1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000600)=0x60) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x7c, r5, 0x400, 0x70bd27, 0x1, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r7}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x82}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000074000000060a01040000000000000000020000000900010073797a30000000000900020073797a300000000048000480440001800a0001006d61746368000000340002800d00010064657667726f757000000000080002400000000018000300000000000000000000000000000000000000000014000000110001"], 0xfc}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000029000100000000000000000012000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004680)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000030900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000003b08000440000000220500020007000000340001800c00010062697477697365002400028008000340000000040800014000000014080002400000001208000840000000040900010073797a30"], 0x108}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) (async) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000180)=""/123, 0x301000, 0x800, 0xf7f, 0x2}, 0x20) (async) socket(0x6, 0x800, 0xd) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r3) (async) getsockopt$inet6_mptcp_MPTCP_INFO(r3, 0x11c, 0x1, &(0x7f00000004c0), &(0x7f0000000540)=0x60) (async) getsockopt$inet_mptcp_MPTCP_INFO(r3, 0x11c, 0x1, &(0x7f0000000580), &(0x7f0000000600)=0x60) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x7c, r5, 0x400, 0x70bd27, 0x1, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, r7}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x82}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) (async) 1.574776654s ago: executing program 0 (id=5787): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x1c, 0x9, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r5, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x9, &(0x7f0000000080)=0x2, 0xfcc0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x29, 0x4}}}]}, 0x24}}, 0x20008000) 1.467263146s ago: executing program 0 (id=5789): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, 0x0, &(0x7f0000000200)=0x90) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000180), 0x4) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f00000001c0), 0x12) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) (async) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x10000003, 0xb, 0x4}}}}]}, 0x40}}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000440)=[{&(0x7f0000000880)="d80000001e0081054e81f78206000000000000000a0014260360cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748420a963aa007a290457f01898102e807ad522a4807f13af8030ab316277ce07bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8716a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1ca9781ed0bffece0b42a9eca0200e6d5d40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x40800) (async) recvfrom(r0, &(0x7f0000000000)=""/33, 0x21, 0x40000040, 0x0, 0x0) 1.333998675s ago: executing program 1 (id=5791): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e) mmap(0x0, 0x0, 0x1000001, 0x50, r2, 0xffffc000) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0xdcc, 0x4) 1.298102195s ago: executing program 3 (id=5792): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='!)\x00', 0x82, &(0x7f0000000040)={@align=0x42, {0x200, 0xdf, 0x1, 0x8}}, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x1c99}) connect$bt_rfcomm(r0, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2}, 0xa) getsockopt$inet_mptcp_MPTCP_TCPINFO(r0, 0x11c, 0x2, &(0x7f0000000180)={{0x10, 0x0, 0x0, 0xb9}}, &(0x7f00000003c0)=0x210) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000400)={0x0, 0xd1, "5f96f4300be81b0a381f5b369e5041d0c500c7892858724987c9b9ef42396b6d744c03b88d79605ffe431ac297792f2940f98d36c6edb9b788748be8b8eaf0c46b4e8bf2de6a7645e0a3aec16601efd264a31cd8a79706b02cff172f42bd9f5801ddc6b833448659ce74b61c008b781c54f414d4302c60ebf7502d10867ae8fb5b8e052741a655b642fdf3e40fdfc4fbff425733d6ae38348ca9a4d770f261f89821011db1a70f77d9ebe3faaafc2994a492ede128fa578214a0a5db027b8d85b16addaa62ba10a890dd091ef9023261ad"}, &(0x7f0000000500)=0xd9) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000540)={r1, 0x73}, &(0x7f0000000580)=0x8) setsockopt$inet6_tcp_TLS_bool(r0, 0x11a, 0x0, &(0x7f00000005c0)=0x1, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000600)={r2, 0xffffffffffffffff, 0x80000}, &(0x7f0000000640)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000680)={r1, 0x20, "0fd52d1bead6711429ef961234c6dc6e58d7f28774cc712be6dc2c014cca1ff1"}, &(0x7f00000006c0)=0x28) sendmsg$nl_crypto(r0, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)=@getstat={0xe0, 0x15, 0x300, 0x70bd2b, 0x25dfdbfc, {{'sha256-generic\x00'}, '\x00', '\x00', 0x400}, ["", "", ""]}, 0xe0}}, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f00000008c0)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x3000000, 0x1, 0x6, 0x5, 0x4}, &(0x7f0000000980)=0x98) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000a40)={0x9, 0x50, '\x00', 0x0, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = accept$inet6_tcp(r0, &(0x7f0000000a80)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000ac0)=0x1c) sendmmsg$inet(r6, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)="9d5c9bec313dac0c0336d816c84bc4fda1027abccf536d9d53c34da78fe76f5916641575ca15ab1beb6039a6d07991ad0fac34f3b5bd9d6a885ea7214e4f04bd4da8df02f97f895069becd3472a7259b7531e9193c00a45632f0274bb0df", 0x5e}], 0x1, &(0x7f0000000bc0)=[@ip_retopts={{0x58, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0xe1, [@multicast1, @dev={0xac, 0x14, 0x14, 0x3b}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @generic={0x44, 0x5, "2a45be"}, @ssrr={0x89, 0xf, 0x13, [@empty, @multicast1, @broadcast]}, @generic={0x89, 0x6, "fdc8e16e"}, @generic={0x86, 0x6, "cdd67316"}, @cipso={0x86, 0xc, 0x3, [{0x1, 0x6, "cacfcb7a"}]}, @rr={0x7, 0x3, 0x43}]}}}], 0x58}}], 0x1, 0x40001) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000c80)=@sack_info={r2, 0x4, 0x4104081a}, 0xc) preadv(r6, &(0x7f0000000d40)=[{&(0x7f0000000cc0)=""/57, 0x39}, {&(0x7f0000000d00)=""/25, 0x19}], 0x2, 0xffff0001, 0x3cb) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, &(0x7f0000000e80)={r4, &(0x7f0000000d80)='\x00', 0x121400, &(0x7f0000000dc0)={@_ha_fsid={[0x5, 0x7]}, {0x8001, 0xfffb, 0x10000, 0xfffffffffffffff7}}, 0xfff, &(0x7f0000000e00), &(0x7f0000000e40)=0x7}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000ec0)={r5, 0xffff, 0x7, 0x4, 0x5, 0x10001}, &(0x7f0000000f00)=0x14) r8 = openat$cgroup(r7, &(0x7f0000000f40)='syz1\x00', 0x200002, 0x0) ioctl$XFS_IOC_GET_RESBLKS(r8, 0x80105873, &(0x7f0000000f80)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000fc0)={'batadv_slave_0\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000012c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001280)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x1e8, 0x6, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8847}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}]}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, '%+$&\x00'}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x7f}, @NFTA_LOG_LEVEL={0x8}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x9}, @NFTA_LOG_PREFIX={0x5, 0x2, 0x1, 0x0, '\x00'}, @NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '!)\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x4f}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_USERDATA={0xba, 0x7, 0x1, 0x0, "95565304aeb52cd053a25408e8bd18ba9b25baddc332b3b441cfb08b62cec3201ebf4bda202cd1e94aa694a5ca060639ad5034b5e4953a407178af45687f0e014b1e3883c70c7d2673942990d65f9f0634a442ace81898850802b147d2746ab927b2317ebd6c257cdd1cc36ec160a4089ce8e911d022ad8ddf82f93972b806773d94b5bccced0774fa4193f3e70e3a8679c5fc92c1df62de3925977f3ce93c4e5944584eebacdf76a2aa05a1e738925ed1714ee660f5"}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x210}, 0x1, 0x0, 0x0, 0x40000}, 0x4e8b7283c07ee06b) socket$packet_raw(0x11, 0x3, 0x300) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000035c0)={r5, 0x8}, &(0x7f0000003600)=0x8) sendmsg$inet_sctp(r7, &(0x7f0000003780)={&(0x7f0000001300)=@in6={0xa, 0x4e21, 0xe, @mcast1, 0x8}, 0x1c, &(0x7f0000003540)=[{&(0x7f0000001340)="3049d13f6d78e9d1d5d32488d4e7b451caaf966719746c7693398037ab0af525e814118822d89c99b65dbf93688f8bc731f8ff8b9188ece0a3381d", 0x3b}, {&(0x7f0000001380)="a4", 0x1}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000023c0)="22177a87fd718cddea6bd36243907a0ccb7337dd5e699b79f1d82463f0a88a57611b9caeaf0a08885f1cadbee2ffb914235c9ea5ff656c37fb6bbed1f0719b83d0cb1516f9850757910f53b5c172f6a8e2ead6935de37a16f81584ad6449b7b5cc946822c60f68e7224673", 0x6b}, {&(0x7f0000002440)="fd7c200705a192095da05fca8e0ddb14f5fed1e645fb6636db509899664f005ea386cf0488ae7d9ba77807c9ea0a6d09d1", 0x31}, {&(0x7f0000002480)="6287a93f3c1053e81b48ff9c37f99ff020af2b6c70f5758d5d48d28ddf64885a1c9497be220d6230914fd0b8d9175895791ac85bf9d1cb1990eb6f3b7fbeb743f0e9a779c2b601c316c5ba26838d85f606c73a98722f34da2ed849a61dbd4e504ebbcbbfa866067846a52585c16293327a92111151660b8d29717668d3fc67d5ea3673ce4ac60cab2c0d723fddf444323c55569865711260d60286a206e0536c602c0d1c92d7", 0xa6}, {&(0x7f0000002540)="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", 0x1000}], 0x7, &(0x7f0000003640)=[@sndrcv={0x30, 0x84, 0x1, {0x4, 0xe7c6, 0x3, 0x4, 0x8, 0x7, 0x9, 0x1, r3}}, @sndinfo={0x20, 0x84, 0x2, {0x81, 0x10, 0x0, 0x8, 0x1}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x6, 0x200, 0x101, 0x4, 0x1, 0xfffffffb, 0x5, r5}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @sndinfo={0x20, 0x84, 0x2, {0x1000, 0x205, 0x4e1f, 0x101, r5}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x8000, 0xb62, 0xfffffffc, r10}}, @sndrcv={0x30, 0x84, 0x1, {0xfff, 0x9, 0x201, 0x0, 0xfffffff7, 0x1, 0x9, 0xfffffc01, r3}}, @init={0x18, 0x84, 0x0, {0x1, 0xfffd, 0x9, 0x400}}], 0x140, 0x24040815}, 0x24008855) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f00000037c0)) setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000003800)=@assoc_value={r1, 0xe}, 0x8) openat$cgroup_type(r7, &(0x7f0000003840), 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000003880)={r2, 0xb3, "9dd9a4230cbe3a00d69ebd2f5a99c065b450dc9bceeb5008365d6349fd74172fc2db71540b32e9b2097c99f426df8e1bc5f24cf67e18014afb942ad127d5251d746f295af2ac16fffd526cd915b31751946b548ef05943ba77cdf2bf8d5f9fd7b5f694a6110b14e42d8737746ed82de5d8b1d1537ca9185643fb078c2b2e1b13e022e157ffe6303edadd7b66002e834fc2fdcc9f4925e48795b9a4934b25ccabe17f11840f2de24f39951f28b0cd44af1b7fd9"}, &(0x7f0000003940)=0xbb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003d40)={{r7}, &(0x7f0000003980), &(0x7f0000003d00)}, 0x20) 1.215201153s ago: executing program 2 (id=5793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x25}, [@jmp={0x6, 0x0, 0x7, 0x0, 0x0, 0x1, 0x25}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x2c, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r4, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "d2c5c7e291"}, @NL80211_KEY_SEQ={0x7, 0x4, "8588cb"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "cc455fc012"}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) 1.157865278s ago: executing program 1 (id=5794): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000000feffffd503feff177400407b0000000000000069163a0000000000bf67000000000000350607000fff072017060000201900001603feff0ee60060bf050000000000007b65b0ff000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f0000000000)='GPL\x00', 0xa00, &(0x7f0000000040)={@align=0xd, {0xedc, 0x6, 0x6, 0x7}}, 0x7, &(0x7f0000000080), &(0x7f0000000180)=0x8}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b6bf8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'dummy0\x00', 0x0}) pipe(&(0x7f0000000d40)={0xffffffffffffffff}) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r4, 0xc040583f, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000001e80)={{r0, &(0x7f0000000d80)='\x00', 0xc040, &(0x7f0000000dc0)={@_ha_fsid={[0x3, 0x7]}, {0x2, 0x4, 0x7, 0x401}}, 0x2, &(0x7f0000000e00)={@_ha_fsid}, &(0x7f0000000e40)=0x7}, {[0x0, 0x6, 0xffffff1a, 0x5]}, 0x1, 0x1000, &(0x7f0000000e80)=""/4096}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002540)=@newlink={0x4c, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r7}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x4c}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001f00)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000023c0)={0xf, 0x4, &(0x7f0000002480)=ANY=[@ANYBLOB="180000000040000000000000000000007110ad000000000095"], &(0x7f00000025c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe38}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001f40)=@base={0x20, 0x6f, 0x0, 0xbd, 0x2916, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=@base={0x17, 0xfffffffa, 0x0, 0x9917, 0x1000, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50) r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000002040)=ANY=[@ANYBLOB="0a00000016000000b400000003"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002080)={0x11, 0xa, &(0x7f0000002140)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r11}, @generic={0x79, 0x0, 0x0, 0x20}, @initr0, @exit]}, &(0x7f00000021c0)='GPL\x00', 0x2}, 0x94) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002300)={0x6, 0x14, &(0x7f0000000400)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x43e}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0xa1, &(0x7f0000000bc0)=""/161, 0x41000, 0xc, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000d00)={0x4, 0xe, 0x3, 0x200}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002280)=[r4, r5, 0xffffffffffffffff, r8, r9, r10, r11, r12], &(0x7f00000022c0)=[{0x2, 0x5, 0x8, 0x6}, {0x4, 0x3, 0x10, 0x2}, {0x3, 0x5, 0x10, 0x5}, {0x4, 0x2, 0x0, 0xb}], 0x10, 0x1}, 0x94) 1.115340882s ago: executing program 3 (id=5795): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000bc0)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000900142603600e12080005007f5cb9ce6d001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b300277ce06bbace801796ec9a4798a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x8041) 1.106150777s ago: executing program 0 (id=5796): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000300007f00000200000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002"], 0x94}}, 0x0) 969.681976ms ago: executing program 0 (id=5797): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x14, 0x30, 0xb, 0x0, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x3400c014}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x28, r3, 0x3, 0x70bd26, 0x2, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x9a3a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xb980e37f7cf2ded7}, 0x4000) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r3, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xfffffff9}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xfffffff9}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x38}}, 0x4008000) 969.467925ms ago: executing program 2 (id=5798): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000240)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000340), &(0x7f0000000380)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="e2", 0x1}], 0x1}}], 0x1, 0x10) sendto$inet6(r0, &(0x7f0000000480)="18f9", 0xc3ff, 0x4, 0x0, 0x0) close(0x3) syz_emit_ethernet(0x99, &(0x7f0000000080)={@link_local, @broadcast, @void, {@ipv4={0x800, @dccp={{0x10, 0x4, 0x0, 0x6, 0x8b, 0x68, 0x0, 0x5, 0x21, 0x0, @multicast1, @empty, {[@end, @lsrr={0x83, 0x2b, 0xcf, [@multicast1, @rand_addr=0x64010100, @remote, @local, @remote, @broadcast, @empty, @broadcast, @local, @remote]}]}}, {{0x4e23, 0x4e24, 0x4, 0x1, 0x4, 0x0, 0x0, 0x2, 0x5, "39185d", 0x1c, "fd6d03"}, "c5f421dacbbb1c80ee39982225ac65c42deb59e8456692d79399e4ae1cc28ff1be0e20df31b0c03ffd1106a87c4faf56cda6aeffbd6208b1e6d99f"}}}}}, 0x0) 943.486926ms ago: executing program 3 (id=5799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x10000000}, 0xc) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044001}, 0x4000804) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000200)={0x2, 0x7}, &(0x7f0000000240)=0x8) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r2) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r7, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x4) sendmsg$nl_route(r8, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv6_getnetconf={0x24, 0x52, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x7}, @NETCONFA_IFINDEX={0x8, 0x1, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000890}, 0x4008040) connect$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$INCFS_IOC_FILL_BLOCKS(r5, 0x80106720, &(0x7f0000001840)={0x4, &(0x7f00000017c0)=[{0x0, 0x91, &(0x7f00000005c0)="9a59fee84bad59b68c00afdbb54a5f0f6541b3769f477742f082d1e6fbf49cad9e911b4f2fe4e78571e336e593701581db1daa89a9500510a91246b9c30abb3af0e03385a535958da1facae968a061ffdd0e73fff63f9680dd9f4f411f1921c0ae0de4761a98f54003f2c91d95c68065269fc4293cda3b9b22ae4475ae456b45b561fb43bf164a8e6b1c89b18303ce7ea9", 0x1, 0x1}, {0x2, 0xb5, &(0x7f0000000680)="346462a0a8554b6ac6edddcfcb9a5a32214cde0a056c1f72b41588b1057aefd6be2c53825431a19c06f81f4ca765b1ed47b9203b0609fe5b63eca807cab744571a5a55f774eb356522b6742f83cc5c40ac1be241d60659899051968042ab6be0005b5c262344c3e9a34b638afd9dffed34297df267fbf6a0c7d186cdb9ee67a81d13a5e3f5c46e91faaa3be445f8709c4db4281acb69ca4755bc3d2a2f2c2705631b87898c85ef115d45a4ade20e15a5e0c41053a9", 0x0, 0x1}, {0x9, 0x1000, &(0x7f0000000740)="c5826184557b9fa8ce0a329f060477179a8c860ac08adf673807e03af61235b00e8248d89232e964d5f39d0b3ae2445ae7aa9dad664c1b40ead9e08e98eb258952bc1ed4e6959c21a2f3d1fa9f89eaa664537645744c9cc7327e393f80cd8f3b510d20ea5d91129ff6fd10aff6a1e0ef935169ac7993a78dddd75d29dd404e97adc2a0c110726794682acde41f1fb8363df5615cc7212404ce19c8b459bceaf1b83cbda1ebfed6383b17208181e3b78ed72bbb45ddc2d954390b43a177ae446f616adc0505ee75d92104b83b5be5a84b698e673d9a49b2ed64ff330d86030a58019e0cbda39c99b96ab498a8796ec1d095804deb1648660e3e7d68138e2c716a0a35572d5c9c3fde5f850d36498de65690b505326a50703b556d9c4eee35e85f9c0c6fbdf054fbf4e914248bc39f623ac1b7948e91553da59ec5d4d190e018dae889a46896cfed7d3fc8e7548d8e2abb09305b6d1505aebee15101b670b922dfe76845406309131c2c581dfd69bca8cbd673bb655f0bd67de5ab5f0bf2b5b72a7dfe6df35dfc97750c8666553c601a1c3a18b9c1ffeab17d9fc6df024982c0608c885f284aa5f1f09e294cea0038c7ef5dd7af71b773afdbb32aeddeaed4650bc078c8c23dfd0f80baebf88a5a98e94b785fc53ff2adf54090665bd295b1dd1d369ef389f30e7836bac03fe0296844e05f5a289d0e391cdb64d5959904d694e515596af1377ad264ac3e6b9c3c0b1fd96601d61effe369f9ccc72d2b4aee71dc1aff47ffdca635b533c60ae9021650b4c86753c47a2d7f2a20101988a64a28efc0b0c9f2d435021fb4b36bb495a133c131660a8b5d15200c49c39bd6f46cddef3e6bb4b1e8b4ae7dc913f007bae8d0bd6c6d7206cb43714b240d92140f9e6db64d1f4b4d974970ac7082b699ee36109fd41bacd440783d824eed15fe4062ea6dd959eda0569c0b547071c07e8c342824b403cdd374e66c236ed768cdb78f7418fc7dc20d02ca13a5d9c3dae37f8ec3f85d2a244156e58aec571814d5cba82f960d1920d6b159425e6a5e4b7af24ee71a1298fbbbaa181246508375999c1359fd1d1cfc139be47257f28557167cbb656c10d09f47b410cf0c6fefdfe24a817b80434206db0c74bc8bfd85038811f23ada6a813ce2488f939ab467d490ed0c6f5152d524f66013e7e9dfb9b993f6681bbe700d9cdf3a3b44409d1cc7f9e0070c3ef7889466279df37f9157f9e464dac26ea5439d1f0258f004eb6561df3da3476dc9db2b635bc6375a60499955b372d82e6ee2aedda3d5ef0e72455347790610f829798442a42df57c4a3641a28d6b1ef49d35c602a5055beca672283138ae130f8cfa4331dd8703997b8cd5d1895f5b4a8bb8e22219d947f85138cfcc9837b941f7cb1d813eed5b9773be6d5136e5c56aafc7db20c063d6e224496195fcb2af73a372c045609c08b1709d6d75d26402b6d5cd8db4874bc02682df6306ebe2c725e4d893dd45c39089f7677a397a34ccf4e00981f88902b44df159579839ee1070795e0a2ff0c1c64e5af347fdf831edceac7b7232307def4cbf7552bd6a8b4d3018daffd35a0d9ff07e09b8040500e0723fcda7934a9197c047bf8244d3d5b7dc6ded427ac5380e24caf54f63f68e580fd41ca0a591daf1586b79d140a0dc6298df37d48213a5f4a3c1def9e9e9adc8425f3304e257c4393f40e50d360e6b5a5c5f51e6afb754832400977ae219096b7f7dff000f744ed327a70ea0e470f716a869d7057a6c8986b87b08d1bd03a9d78d5da3a05dfa7b6faa8488bcaeb320529fc39c6732bdccb84753e5c7edc925d763777046342ccdbf7689d86a2405467cff3497da907e9af199e95dc3e395afdb2550091ae9c2cfb0e8a10c3d45e2aacbd90e00e03352cb611fab3dd34ae721092208741ab548030817d1d08de410522f0beaa88e0e17a3d5e1d1178ccf79cff75e01b722b3e4291a0fe05deb0385808024b546a9b408061c95464a4894370db0225da9cf8b0a59d2c28b9e853c7065e0aae5f81301b978c4d112240dc8a8bc9bd3a67c170fbd57e692bf89d8daf0f5ebc0caf39a2b804b44cb9739c97210d1d900a0fd70e908a7586e8a6276b7866176345ba9635cd5aca93371406354574826858b17b4a8505b97f8fdcf504bc414a10007e1e6448af0f8b9e1c62b4a19d115efd4899f0d3718b95eb97b16ff9cdd35645dbba223bc2f663b035eaaf484619008b817baf36ac69342d1b9295c1b4ef0d2f06d8b59d61e6623a60f5e742aa8147ba0e921a19728ad86680dd2d0fd9695ac94c8ba7a5151b578b43e455f48130804d8785c155ad7c958c1351e77b141f5dc379594677675b212775a9766385174602d373f32b6bd540eee9de38282477d298068d9c04cd1a72db6d39b7e6e5e348c26582a447ea8c4834665e27754f6edb3ada54f711d5d48659b788ddddad1682b8d7287e4bd170c8b8b197e9c47c8ad47ede377352116cc2263d9c56d46de714a51fb4ef536c70514ad42800430bae105bc5f9ac84e45fe59d7f7b839f88d5601330cc43e09c42f389feffc39b5742e7441bb395761bb3db9f5335e3008085cb3645eca167190570e49a3431aec9b0afae0be92267cf07e0e4ba3772c05f2dc4d7691cb85d446c9ebab63be12957d47d817081bdf6d4f70016b30fa9bf5d4f90c1cdafde64811c73e511f634ba5c5123d9cb208dbb04b70b3b58418b3268c6645e5527e5737265d541eb59f7911032b83610d6a91fe18dc004bc2e7caa38b69869e9a1d22c454e878fd43b7acd09d6a1f35b56642e75489969bd2345b464b55ef6ad058339a376d29c3877c135e5bf51d7136268febd9ad52d5d3aeb5aaf7ea0bf1bd6e818ff3d857c1e91636d32689564265fc086dfa981739bb0b29c1cb8d8882d46f582034d7bee2afd1a92ee44d21f4ce3844894e90c67268610d0b8f75ce71b1a441ffb929c71b6cebe4917f3db85cc7baa0c31bc4c84eadf79b63122095129467e28113e97cdd9bee3b41a7f3e42f5dd65676cd00aab1d6aed8e4aa6d1b62b71553f826ae297c823097782b3957c7bffeba16af4ccb9dfb14e8ac36cdcb5456a572a1438e426cdfe03402175f57b370ab55769e4904647d29ca21267ecc6c83ae02baac9e450d1d93e4603937fe4f59156f7379cd9db643a2ffbfd9a2429791cbc119b1ad4bcbb949e59d3c288c84ff38cfa84d49e4835aeeb464d2bc2254b169dd4d3fe89cf0b95630fc27216b73cb7dbb5236208f2b5d68859507b3afae6daa7bb0327ede7d1b325f1fae7f3a2dd1458cb5689a7337708cac7a960fdb937cb2f55c96da1be0f005a8d5b8d663b1e9e7c557cbdc8da1e1d932c303c98eb3abbcf167c82f710bcfb128554518ddf5ac5db527806dc07396d4e7c897a827f0f39bdf1aa6069f9aad10644c121faed69b0e760e35dfa45ddbb2399fd5de9db591d5704a6ebd956ee1160083b630ad89e77c22632052d9e6e30ce627df65d6e87ef6809c3f89f568238fbf4869fe96d487621c522bad097508b988b95a4554d94d3f5d803bb81ebd198e48c4d2173ef5a06d7b0c8a6462cfe36c707203810edf03566ff606a2689923d4ffb890561d30bf4267f52940335fd783f9bc65aebf0691ed41103bae1dd2e2093923ff26e86415af92d03ac81ab0b17779ab749de90b8605e0c422925dfab383ea0770b38111b90c9ece09e8afef8ea5afa0c0c3c820206a76b930239d77b718ac584c590cf4b0b32aecffe0692c17f873f3e2cd9ab164057deafe3f4f6f454003cc16b89df52837252eab6d7908fbba1bf3c2e190607bdc0d3037fdfb1149c044b8dc8d3a657031998b0e360c42657c7913a44c4342f0c9fe364c9c3074d51f4d8d1ac39433bed56d4d9dea3acb16fb7369b584604eeada5b4200542a8ba59f31b3f2b10d13d707560ccc06561ad1013b7e929d6b959b130ebf9acdd142b0186f88d25a357f8a58cc0d400b07e5c3edf626375dc2a1dfc1fd13936e4d51f2bce433f464fd191b0060bbddd8656175e2c813c541bd7a30d6c9437d8594d3fa9614b5d30122e94356ae2e0d0715b7e868e8bdc39308327b9759deb6a6d86945bfa1d7c22b36939ddcbdadd9c04efadf3cadb40cfc087a9e2c635d6bde5d855f761821731dfb6cf6f1bae6847176c0fcf2bb9adbf14c19a81d94bb08c74e690ea490d3ca259379474034d90cc59edcea7b8348816b41e522619961bb8042dbf48dd2bf2b8141ef9fa5f17ea30c10c649bde8e53541b388ce9df013543c84e8db7a488688635bfc5d60e99122a5b2053ede3e069190679fe94752c4ca62743730d285f2af40265311bd762f1173b3b44e973f4eeda842b4750af50c9735732a7582355f24ce324a04fb1328c09de4550a7a763e79483d4a5879819c73fc967eefbda79a2a04365ee7abe253a7e05577406b091837e2e02540b24cb5d076a1388be8217913e1c3c775e28d831eea05b0ec3f7c07868131c880deecf95bf7923104195facdaf4611d2930fd9d26858e0efcd8228dbf5c288272d7b5dd78e16c2a43e7f92b4e5d03062546eb9da3b8b6dd0fbe4450979245b3e4bef965fcaa3c56f597d4d0a18e5ff2984d4d984224ad5ad46781b48dc632a6f41d90f0bdf37c56064c89fe9ed336dbc0f3cc9b80cd457fa3f66e0a6719c3d6d86a91208e1db6fbc683961a94ccf5d7d082d361fbd6a5dab4aae5293ef282161c10f3c2cc41e889d49c24591182dc0089e25892f6d2008925e8eceae4851c1c245f3d147deb2989f43c2e68ef865c1552af864ea2ca1667802b3c39379699d171f66b7d2078230590aff3db726c616b7e0dc08cc0d85b6426810e58d6d683a28873f521f26c3bf76dd072706c839b4dc8e199cad2c0580813cc2c25ee986f91f4f2747b22ba5889a5118ef68fe2466cd82005c3e58d9955932ca5bdbe568f7e9d7f25a2437c21fb9cb195067bce25e38fa26bd3254aa51b93a24be0cdaa08fe1ffcaab8779faa0cd0ed89f4d288322998af03156134b37848c2e665f0eaecdff854afd462ce37532334ca392ffa930b170d439de52dfaa17649cb1885d5b117396ae48ee23eb29a68876910aa80e222bc0d8e96cfdc083146bc815a9bc50aab9e79f6adcf7abbdc046d6e754e3f81797d0ef060b92ff068673343c0f95625465da57351b01701473a051deb7a5ee9ab8fe7267cf0d42d719ccffee084b521d775741958c13402d0e75ce133260920879e9c9bb6bed6c14672e30febb8aacef4c74a7d0dc6683f48c6bb67562a24f6573dd7461b5b783298f4af29c5d87008861e25d6d63986c6253db4a5b89e821d05602a03448c492d0d3a18b91b88ad96a6c17c9bc7cbb77ba934f34e26d52ec8322f1c99d13e05aea6e5f37a4951fb0ba4014d8d7bf7ce5ef75f42ed34c2f3f01226e4f2538c19ab4611688462cb75ae77c9117240472284ef394a1a6da7e5c84a64870226b38f988601e93bf6d7dd26d73f4dfd4c8a4b320f7dcfbb1f2dd2a0ca9e6a15767a14fa5ed37377d68f11165ae40e2e7f7e6f2bb6ebfe4dd78dee2ef6c930066f2756f1b6f11f2f5cddfc7406bb82aaf2bed95d010ec1290f6260b5aabace060f2ac2bd27b9d446c5b9432645e7dbb019a1e860b682a04cff7115bf21a34e9820d7ddd0c07402f49eecc3f6684da85467947f7dc248e78b9c3239db8793dfb196ae94ebeca64c0d7c8f2225a678564cf5b0c8409adead88259f23fb5f875b466e8724c08f7561183cbf44c0bc25a398bc8b968f54b873e9092b9767", 0x0, 0x1}, {0x4, 0x52, &(0x7f0000001740)="728d924b8736cfad1448f7a76f0030f1583e1a34e4978bed3d1792842be717afe4e7460f4079c65d9b68738bde0e7f0907be8643625f803dc47bd16434ab091ab1981f4d3e7845b1681e939daca7d1221c2d"}]}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000001880)={0x5, 0x9, 0x8009, 0x7, 0xfff, 0xa, 0x4, 0x34, r6}, &(0x7f00000018c0)=0x20) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000001900), &(0x7f0000001940)=0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r8, 0x8934, &(0x7f0000001980)={'lo\x00', 0x4b2d}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000019c0)={0x2, 0x0}, 0x8) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001a00)=r11, 0x4) r13 = accept4$inet6_tcp(0xffffffffffffffff, &(0x7f0000001a40)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000001a80)=0x1c, 0x80000) setsockopt$SO_BINDTODEVICE_wg(r13, 0x1, 0x19, &(0x7f0000001ac0)='wg1\x00', 0x4) getsockopt$vsock(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000001b00), &(0x7f0000001b40)=0x10) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000001c80)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x5c, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x6, 0x9}}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xa, 0xbe, "af49967538aa"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0x8000, 0x0, 0x3, 0x2, 0x80, 0x9, 0x2, 0x5, 0x7ff]}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x844}, 0x4008010) ioctl$XFS_IOC_FD_TO_HANDLE(r12, 0xc038586a, &(0x7f0000001dc0)={r2, &(0x7f0000001cc0)='/\x00', 0x8901, &(0x7f0000001d00)={@align=0x35d4784a, {0x2, 0x4, 0x3, 0xd662}}, 0x9, &(0x7f0000001d40), &(0x7f0000001d80)}) read$rfkill(r14, &(0x7f0000001e00), 0x8) socket(0x15, 0x3, 0x7) 939.101113ms ago: executing program 0 (id=5800): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000840}, 0x4040004) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000840}, 0x4040004) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f0000000100)=',\x00', 0x82000, &(0x7f0000000140)={@_ha_fsid={[0xfffff083, 0xfffffffb]}, {0x9, 0x100, 0xe9, 0xf}}, 0x768, &(0x7f0000000180), &(0x7f00000001c0)=0x3}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f0000000100)=',\x00', 0x82000, &(0x7f0000000140)={@_ha_fsid={[0xfffff083, 0xfffffffb]}, {0x9, 0x100, 0xe9, 0xf}}, 0x768, &(0x7f0000000180), &(0x7f00000001c0)=0x3}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000c84}, 0x8000) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000540)={&(0x7f0000000380), 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x11c, 0x0, 0x429876a9edb764b6, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1e000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'twos\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8880}, 0x8004) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r3, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe16}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r3, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe16}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x15}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x7, [@restrict={0x3, 0x0, 0x0, 0xb, 0x5}, @enum={0x8, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x81}, {0x1, 0x81}, {0xc, 0x6}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9}, {0xb, 0x5}]}]}, {0x0, [0x30, 0x30, 0x2e, 0x2e, 0x2e]}}, &(0x7f00000008c0)=""/204, 0x6b, 0xcc, 0x0, 0x7ff}, 0x28) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x7, [@restrict={0x3, 0x0, 0x0, 0xb, 0x5}, @enum={0x8, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x81}, {0x1, 0x81}, {0xc, 0x6}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9}, {0xb, 0x5}]}]}, {0x0, [0x30, 0x30, 0x2e, 0x2e, 0x2e]}}, &(0x7f00000008c0)=""/204, 0x6b, 0xcc, 0x0, 0x7ff}, 0x28) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r5, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x8000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000b40)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000b40)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000f40), &(0x7f0000000f80)=0x8) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSSYSFSPATH(r6, 0x80811501, &(0x7f0000000fc0)={0x80}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'batadv0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000010c0)=0xfffffffd, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001200)={@map=r1, 0x36, 0x1, 0x81, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001180)=[0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r10 = openat$cgroup_ro(r1, &(0x7f0000001240)='cgroup.stat\x00', 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r0) sendmsg$NL80211_CMD_SET_WOWLAN(r10, &(0x7f0000001680)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1001101}, 0xc, &(0x7f0000001640)={&(0x7f0000001300)={0x32c, r11, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x34, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x1c, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0xe}}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x2d0, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x168, 0x4, 0x0, 0x1, [{0x164, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x5, 0x2, "d8"}, @NL80211_PKTPAT_PATTERN={0xb2, 0x2, "a336d5655d3ff380dcc1499be4945287e1b39c6ea3780bd58d80eaccf9edb1f372edd970fbfcfeaf988a7db4a8e22ff9f908f459410ef6b4132291d8634bbbec8b0321b611d44dd22404c6683f6fecc88457a04f2e85676f45f322f2db4c4ee29e79d6a864ca092b4a7a30d8639a933f307373e64a3b16457088f625882da39c7a42d029e5d4f7352f765fcc560d9650616496134c019334be062d45f70c2ba70d3e35ccb9735e52ba9f9c256bc3"}, @NL80211_PKTPAT_MASK={0x4}, @NL80211_PKTPAT_MASK={0x97, 0x1, "580f1900fcc52e01bf6e9f37f1428e7e6a9007397ea29f3641be22ae2aaeac4808cea30c4bcbf41b770090186a68390b7c7c5eab637de62745a157197e76c2a9c7a4f87d6afd699e929d562f64420310760232af7b453b7ee751df1d17e3b7f02016f4444dfcec8051055dbd160eb7ec47600b15f21ccf441038e3e9fa85868a94c9731d96f6292c63c6796d7a3efceb00d0c9"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x22}]}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x160, 0x12, 0x0, 0x1, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xffff}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xe}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x144, 0x84, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x3f}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7fffffff}]}, {0x4}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xa7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8516}, @NL80211_BAND_LC={0x8, 0x5, 0xfff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1000}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x4}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="9f10c6a7c038"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xe6}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x81}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1ff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}]}]}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x4040}, 0x84) (async) sendmsg$NL80211_CMD_SET_WOWLAN(r10, &(0x7f0000001680)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1001101}, 0xc, &(0x7f0000001640)={&(0x7f0000001300)={0x32c, r11, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x75}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x34, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x1c, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0xe}}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x2d0, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x168, 0x4, 0x0, 0x1, [{0x164, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x5, 0x2, "d8"}, @NL80211_PKTPAT_PATTERN={0xb2, 0x2, "a336d5655d3ff380dcc1499be4945287e1b39c6ea3780bd58d80eaccf9edb1f372edd970fbfcfeaf988a7db4a8e22ff9f908f459410ef6b4132291d8634bbbec8b0321b611d44dd22404c6683f6fecc88457a04f2e85676f45f322f2db4c4ee29e79d6a864ca092b4a7a30d8639a933f307373e64a3b16457088f625882da39c7a42d029e5d4f7352f765fcc560d9650616496134c019334be062d45f70c2ba70d3e35ccb9735e52ba9f9c256bc3"}, @NL80211_PKTPAT_MASK={0x4}, @NL80211_PKTPAT_MASK={0x97, 0x1, "580f1900fcc52e01bf6e9f37f1428e7e6a9007397ea29f3641be22ae2aaeac4808cea30c4bcbf41b770090186a68390b7c7c5eab637de62745a157197e76c2a9c7a4f87d6afd699e929d562f64420310760232af7b453b7ee751df1d17e3b7f02016f4444dfcec8051055dbd160eb7ec47600b15f21ccf441038e3e9fa85868a94c9731d96f6292c63c6796d7a3efceb00d0c9"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x22}]}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x160, 0x12, 0x0, 0x1, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xffff}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xe}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x144, 0x84, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x3f}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7fffffff}]}, {0x4}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xa7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8516}, @NL80211_BAND_LC={0x8, 0x5, 0xfff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x1000}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x4}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="9f10c6a7c038"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xe6}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x81}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1ff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}]}]}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x4040}, 0x84) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f00000016c0)=0x7, 0x4) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f00000016c0)=0x7, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001900)=@bpf_ext={0x1c, 0xa, &(0x7f0000001700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x1, 0xd, 0x5, 0x1, 0x4, 0xffffffffffffffff}]}, &(0x7f0000001780)='syzkaller\x00', 0x81, 0x1c, &(0x7f00000017c0)=""/28, 0x41100, 0x20, '\x00', r9, 0x0, r10, 0x8, &(0x7f0000001800)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x59dd, r1, 0x9, 0x0, &(0x7f0000001840)=[{0x3, 0x1, 0x8, 0x2}, {0x0, 0x4, 0x0, 0x4}, {0x1, 0x2, 0x1, 0xa}, {0x3, 0x1, 0x4, 0x5}, {0x5, 0x3, 0x0, 0x9}, {0x3, 0x1, 0x2, 0x2}, {0x4, 0x3, 0xd, 0xb}, {0x4, 0x4, 0x9, 0x3}, {0x1, 0x2, 0xd, 0x9}], 0x10, 0x7}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001900)=@bpf_ext={0x1c, 0xa, &(0x7f0000001700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x1, 0xd, 0x5, 0x1, 0x4, 0xffffffffffffffff}]}, &(0x7f0000001780)='syzkaller\x00', 0x81, 0x1c, &(0x7f00000017c0)=""/28, 0x41100, 0x20, '\x00', r9, 0x0, r10, 0x8, &(0x7f0000001800)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x59dd, r1, 0x9, 0x0, &(0x7f0000001840)=[{0x3, 0x1, 0x8, 0x2}, {0x0, 0x4, 0x0, 0x4}, {0x1, 0x2, 0x1, 0xa}, {0x3, 0x1, 0x4, 0x5}, {0x5, 0x3, 0x0, 0x9}, {0x3, 0x1, 0x2, 0x2}, {0x4, 0x3, 0xd, 0xb}, {0x4, 0x4, 0x9, 0x3}, {0x1, 0x2, 0xd, 0x9}], 0x10, 0x7}, 0x94) syz_genetlink_get_family_id$nfc(&(0x7f0000001a00), r4) (async) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000001a00), r4) sendmsg$NFC_CMD_LLC_SDREQ(r8, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x40, r12, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_SDP={0x2c, 0x13, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [{0xd, 0x1, 'nl802154\x00'}, {0x5, 0x1, '\x96'}, {0x4}, {0x8, 0x1, '&{%)'}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048810}, 0x20008854) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_devices(r1, &(0x7f0000001b00)={'a', ' *:* ', 'rwm\x00'}, 0xa) 817.71186ms ago: executing program 1 (id=5801): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) bind(r0, &(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @local}, 0x80) read(r0, &(0x7f0000000300)=""/91, 0x5b) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$packet(0x11, 0x0, 0x300) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000000180)=0x10) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x8) setsockopt$inet6_int(r3, 0x29, 0x1, &(0x7f00000001c0), 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r2], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800010000000000000000000a0000000400000004000b"], 0x1c}}, 0x1) 815.10764ms ago: executing program 4 (id=5802): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0xbc}}, 0x0) (rerun: 32) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, 0x0, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000001f00)='dctcp', 0x5) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000001f40)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000001f80)="a6", 0x1, 0x24000045, &(0x7f0000001fc0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) (async) r5 = socket(0x10, 0x80002, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@can_delroute={0x154, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x2, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "5bf6ad242712a12236ec1625ac06613fc5f12f67"}}, @CGW_MOD_SET={0x15, 0x4, {{{}, 0xfc, 0x0, 0x0, 0x0, "2d2fd7ac2612dea2"}, 0x1}}]}, 0x154}}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001b80), r5) sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000001d40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001bc0)={0xe4, r7, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x792}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2dd}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8002}, 0x0) sendmmsg$alg(r5, &(0x7f00000002c0), 0x492492492492627, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000001940)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000001400)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="2edc971745819ce1496cd4723a71d5619bd663c106652d01c09b07e4d12ec689fd32eee02f4904e8966c7bfdcfd848bc467bacaf671aa5006999fc0734e3eb5693979b27999898cce2cb4fce90f1fc49ad34f2a72719419154c6988b38f9f656c791480e440e7cd2c05fc880", 0x6c}], 0x2, &(0x7f0000001440)=[{0x110, 0x10e, 0xfffffffb, "bd2695b3aa2f904ea605d9f6e2c1d4a47bb04c5ab5ec8935583c9f92fbed523ce1b6381048ed7c85841a74da3d03a6807c550a43b285f8483ef468770186b1c38fae5f055dc27f6859493ab7fd80e95bbd262054fb0461303d1da93bbca7de00e8bed576ffaa88ad2343b722d3bdabb9ccc4f9fb5d90b3d20f01f49b1591b703eeec19b72042f50a64de4f118ecf08bf0e91042413e17350b7404e875309ce0d8e2bcbe3ca218913688a5fb00a56930a04a7557e3aed4faa553b6f5ea826417383d251663a9efdafb94c6e8d84c6d562d8fe66f4f0fe4da90b979ddc4140a474c89716a677e089029958183e07877845ee0f55047661429bee"}, {0x30, 0x84, 0x1, "dcf2fdbe5b4006a525d657d96b04107b10a2d8209b0be687536da8f4814867"}, {0xb0, 0x112, 0x8, "f1f354f32774ab30152e67b68fda16ed3c0caaa5c8bdd2f6b1efb16168a1923b9a2f88a970e56eba1a5b43354c69334258be5f12cfa2776bbcd5d8b34e7b76ee7cef303a9df1e22a7c75fb3cc6ca40dc4bcda98215afb9e20f843dba2e161724dcff48dece2e345d2a7eda8fd9ede0e429d59a7581b4a9c13c99f18e0f0ee9bf05f5f5f5ad49d74a9bcbc22c069c286f6614f563f09a5a714f26892a"}, {0x88, 0x112, 0x1000, "c64860f8d2650d8db4fd704d4abae965601edbe4c150193abe8bac78e60309eb0812b7ecc39fbd453fc823802ac03d1c8d7394317c1ed13eb69ca85cb12ffc679939786a0ba8204a263ff1d57238f36767366fbcc3a47f1f1f4f73434fd85859c1ec367cb53ac9722d46baed7f5f6ea186"}, {0xc0, 0x319, 0xada1, "2846cf059818eaabaaea3b266016042c62dbc31cfc2c57460a31efee0d71dccf2b11f0d5022a17f8fb7f573ba57ddff24d25d820f36c6807cd7cae968e18ab8dc3d88d2d349220aae633d913a5de641330579ba209a5c69dca2eabb94aa567e4f5deb383c0d7f52478e670bdbefc2d11cec128ea95b80202f9992cd2f6c3337be39a4267e88bb4bc52c4d621779b5dbdbc7edf4fdefc47d46f922410d76c438c993aa4b2e6d30d91261f772350c89cd2"}, {0x100, 0xff, 0xc, "7c7a64f70f2c2f0395370596e832b77935a511fba2c9d3d92ce466b4df7a536081c160c3c43bdb667ecf394beecfd5cd78d1f9a68ba8fcd563e403c977ad38fea2edcea1b1cc9746fbfbe9efc7fc7a3ce4501f801b2c574b163bf00b46b5d0c279cdbef8aeaa4220953b2ee2541ee1218bfe6431c352869b0617597fae8b596d29e18a899816e3aa16a45b1968361e40d12847343633bdfbe84eee63e0339d0c56fe9cc42500f9120dc67a9e5119a921a8c694981e93cf96ad3c4df0603fb1b0990ac9d694e471e1cca43d40bc27af43f7d2c37b5ab2c976c413098e4b2bb2b705a171f7323e3388101b9638"}, {0x90, 0x119, 0x19, "fc829ed0be2cbc9f93b7dc9136c3c282f18e9e9307fb431b8e3f5a114d5d5d99745c7f658eba98c507eaa28249ed83bc3e8d034198a1cb6d9a3f4c0c3caa3ee45287e2f137b26f9312b8991c26b5683af1f05797faf3cc0a3c598977fe63fb94ad9434625ad3a49b860b9010558d644bb27e715fc70a5a50e2981c"}], 0x4c8}, 0x40000) (async) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000200)={0x0, 0x24, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @remote, 0x30000002}, 0x1c) 804.456554ms ago: executing program 2 (id=5803): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0xe, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdb01, {0x0, 0x0, 0x0, r4, {0x5, 0xc}, {0x0, 0xfff1}, {0xe, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000000}, 0x4041080) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @mcast2, 0x3}}, 0x0, 0x0, 0x20, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000540)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff3f000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f0000000800)="000000000000000002", 0x0}, 0x50) 797.779579ms ago: executing program 3 (id=5804): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112db000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 677.637608ms ago: executing program 1 (id=5805): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000000c0)={'nat\x00', 0xae, "e03cd36fddca46fbf3ea78b4a8f1ace9cb220cb32b7e9204ae67af9d3ec82711e32b61b42ca4ac795fe1869c5b57e5858a0404cb66aef17a8690c4d5c2494862945996dab1158e2488f2fd72deeb81e8bccf459b65fb139c66a16fbc22befbf95e8f405e29d67829a71350c6aaf89ae2a7ea16a44209911999e28118970c40403d44258850c8246b0e3848af4cace55c61c0f85d5b6395218d5cae551e3accf28ddcbea9a95d205c22b9ed21308e"}, &(0x7f00000001c0)=0xd2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x800) 676.368568ms ago: executing program 0 (id=5806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3e8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000340)={0x2c, 0x8, 0x6, 0xb01, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x4000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRESHEX], 0x50) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f0000000000)={'wlan0\x00'}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001400)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x474c}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x50}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000015c0)={0x6, 0x0}, 0x8) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001600), 0x4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001640)={0x1b, 0x0, 0x0, 0x7, 0x0, r1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000016c0)={0x1b, 0x0, 0x0, 0x40, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x17, 0x8, &(0x7f0000000380)=@raw=[@jmp={0x5, 0x0, 0xa, 0x7, 0x9, 0x100, 0xffffffffffffffff}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000400)=""/4096, 0x41100, 0x8, '\x00', r6, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001580)={0x0, 0xe, 0x8001, 0x7fff}, 0x10, r7, r8, 0x6, &(0x7f0000001740)=[r9, r10], &(0x7f0000001780)=[{0x2, 0x1, 0x4, 0x2}, {0x4, 0x2, 0x1, 0x4}, {0x3, 0x2, 0xa}, {0x4, 0x5, 0x5, 0x9}, {0x0, 0x5, 0x0, 0x7}, {0x0, 0x2, 0xd, 0xb}], 0x10, 0x2}, 0x94) 659.247827ms ago: executing program 3 (id=5807): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x350db}]}, &(0x7f0000000540)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xffffffd0}, 0x94) 530.378688ms ago: executing program 1 (id=5808): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={&(0x7f00000000c0)="97", 0x0, 0x0, 0x0, 0x8, r0}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4048044}, 0x20004014) 445.550148ms ago: executing program 3 (id=5810): socket$netlink(0x10, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "399421fe8a4c9563", "04b5000000e2ff00", '\x00', "ca7f25a27a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000003c0)=0x80008, 0x4) pselect6(0x40, &(0x7f0000000400)={0x3f, 0x0, 0x3, 0xfffffffffffffffb, 0x4, 0x7}, 0x0, 0x0, 0x0, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000040)={&(0x7f0000000080)=@id, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x4000000) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r2 = socket$netlink(0x10, 0x3, 0x12) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000240)="b6", 0xfdef}], 0x1) 317.130606ms ago: executing program 4 (id=5811): socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB="01002dbd7000fcdbdf2530000000080002000300000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x0, 0x3c, 0x0, 0x5, 0x5f, 0xf5756f5ee28b04a4}, 0x28) unshare(0x20000400) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000440), &(0x7f0000000480)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f00000001c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000280)=0x2, 0x4) sendto$inet6(r3, 0x0, 0x0, 0xfffffeffffff3fbf, &(0x7f0000000400)={0xa, 0x4e20, 0x3fc, @loopback}, 0x1c) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_REUSE_PORT(r4, 0x84, 0x24, &(0x7f0000000100)=0x100, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000340)={0x41, 0x3, 0x2}, 0x10) 299.300483ms ago: executing program 2 (id=5812): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000380)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, 0x0, &(0x7f0000000480)=""/231}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x23, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 209.526799ms ago: executing program 1 (id=5813): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x800, 0xfffffff8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000780)={'dummy0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="68952b6db748222946ab0e9d5b6c379c879652effbb2b957e4551603fc555d9dc2f956ae88aaf9dd939d37353da05e5145f5fc1ad05dc1dc9ec0a0f5ff058d94f083910c8489b357c3c894a1dd6daf2792b34f23749b17e2b2a38e66caadbe6e48c35924e5abd043c4763821cd10c28c58400c30066a09b57a70dceabfc31ac8a78cac7ad29da43c9142511ddf6291c2061eea3bbbb0c5a6738281a7ba0738ed926902ffca852f6886dfd7704d6d5b85075bb2ec53cf789bb3c17e8eef24637c6336fd5116a78a95c92f33b989b2ba3a65502202b9ac4d5c30b81918e3c3f03f05436ffdc500000000000000"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000540)={{r1}, 0x1, &(0x7f0000000500)=[0x9], 0xb3, 0x4}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200"], 0x48) socket(0x11, 0x3, 0xa23b) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000005c0)={'syz_tun\x00', 0x800}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r9, 0x0, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000600)={0xa, 0x5000, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'xfrm0\x00'}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x4010, r11, 0x5f7bd000) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000180)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@o_path={0x0, r11, 0x4000, r4}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800c0001006d6163766c616e00100002800a0009000180c2000003000008000500", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4040816) 0s ago: executing program 2 (id=5814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) (async) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x3, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x38, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@end]}}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x6, 0x4, 0x3, 0x2, 0xf6c, 0x68, 0x2f, 0x5, 0x33, 0x1, @remote, @rand_addr=0x64010101, {[@ra={0x94, 0x4}]}}}}}, 0x46) syz_emit_ethernet(0xa6, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0) kernel console output (not intermixed with test programs): p link [ 533.418646][T20156] x_tables: duplicate entry at hook 4 [ 533.492014][T20158] netlink: 'syz.2.3832': attribute type 4 has an invalid length. [ 533.492042][T20158] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3832'. [ 533.530857][T20157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3834'. [ 533.585585][T20162] ip6t_rt: address list match requested but addrnr is 0 [ 533.641024][T20167] xt_policy: neither incoming nor outgoing policy selected [ 534.090216][T20185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3842'. [ 534.090618][T20186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3842'. [ 534.090653][T20186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3842'. [ 534.090916][T20185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3842'. [ 534.094214][T20186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3842'. [ 534.094249][T20186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3842'. [ 534.096350][T20185] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3842'. [ 534.181999][T20186] geneve2: entered promiscuous mode [ 534.238237][T20194] tipc: Started in network mode [ 534.238276][T20194] tipc: Node identity 1e39cab1548c, cluster identity 4711 [ 534.238464][T20194] tipc: Enabled bearer , priority 0 [ 534.264623][T20194] syzkaller0: MTU not usable for tipc bearer [ 534.264649][T20194] tipc: Disabling bearer [ 534.331430][T20194] geneve2: entered promiscuous mode [ 534.331457][T20194] geneve2: entered allmulticast mode [ 534.390731][T18751] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 534.391402][T18751] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 534.392014][T18751] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 534.399335][T18751] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 534.548973][T20209] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 535.881546][T20272] netlink: 'syz.0.3868': attribute type 3 has an invalid length. [ 535.941248][T20276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.977665][T20276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 536.066888][T20278] ip_tables: iptables: counters copy to user failed while replacing table [ 536.590013][T20316] veth2: entered promiscuous mode [ 536.590052][T20316] veth2: entered allmulticast mode [ 536.614676][T20320] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 536.725874][T20314] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 537.006884][T20329] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 537.705578][T20381] __nla_validate_parse: 13 callbacks suppressed [ 537.705605][T20381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3897'. [ 537.764354][T20385] netlink: 'syz.3.3896': attribute type 10 has an invalid length. [ 537.764380][T20385] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3896'. [ 537.822781][T20385] dummy0: entered promiscuous mode [ 537.828177][T20391] netlink: 'syz.3.3896': attribute type 10 has an invalid length. [ 537.828203][T20391] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3896'. [ 537.870757][T20390] dummy0: left promiscuous mode [ 537.893576][T20388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3899'. [ 537.893617][T20388] netlink: 'syz.2.3899': attribute type 30 has an invalid length. [ 537.893633][T20388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3899'. [ 537.894272][T20391] dummy0: entered promiscuous mode [ 538.112677][T20388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3899'. [ 538.112717][T20388] netlink: 'syz.2.3899': attribute type 30 has an invalid length. [ 538.112733][T20388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3899'. [ 539.225972][T20455] netlink: 'syz.1.3910': attribute type 2 has an invalid length. [ 539.357049][T20461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3912'. [ 539.474426][T20467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.536747][T20469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.603139][T20469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.721821][T20484] FAULT_INJECTION: forcing a failure. [ 539.721821][T20484] name failslab, interval 1, probability 0, space 0, times 0 [ 539.721856][T20484] CPU: 0 UID: 0 PID: 20484 Comm: syz.2.3919 Not tainted syzkaller #0 PREEMPT(full) [ 539.721882][T20484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 539.721895][T20484] Call Trace: [ 539.721903][T20484] [ 539.721913][T20484] dump_stack_lvl+0xe8/0x150 [ 539.721955][T20484] should_fail_ex+0x3eb/0x540 [ 539.721992][T20484] ? __alloc_skb+0x1db/0x7a0 [ 539.722105][T20484] should_failslab+0xa8/0x100 [ 539.722142][T20484] ? __alloc_skb+0x1db/0x7a0 [ 539.722161][T20484] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 539.722189][T20484] ? __alloc_skb+0x18d/0x7a0 [ 539.722212][T20484] ? __alloc_skb+0x1db/0x7a0 [ 539.722242][T20484] __alloc_skb+0x1db/0x7a0 [ 539.722269][T20484] netlink_sendmsg+0x5cd/0xb20 [ 539.722323][T20484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.722360][T20484] ? aa_sock_msg_perm+0x144/0x210 [ 539.722399][T20484] ? apparmor_socket_sendmsg+0x98/0x360 [ 539.722432][T20484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.722466][T20484] sock_sendmsg_nosec+0x14e/0x190 [ 539.722500][T20484] ____sys_sendmsg+0x54e/0x850 [ 539.722532][T20484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 539.722568][T20484] ? import_iovec+0x73/0xa0 [ 539.722601][T20484] ___sys_sendmsg+0x2a5/0x360 [ 539.722625][T20484] ? __lock_acquire+0x747/0x2de0 [ 539.722659][T20484] ? __pfx____sys_sendmsg+0x10/0x10 [ 539.722727][T20484] ? __fget_files+0x3a2/0x420 [ 539.722754][T20484] ? __fget_files+0x2a/0x420 [ 539.722797][T20484] __x64_sys_sendmsg+0x1b1/0x290 [ 539.722827][T20484] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 539.722876][T20484] do_syscall_64+0x166/0x520 [ 539.722906][T20484] ? trace_irq_disable+0x3b/0x140 [ 539.722937][T20484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.722960][T20484] ? clear_bhb_loop+0x70/0xc0 [ 539.722988][T20484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.723012][T20484] RIP: 0033:0x7f5382fa8f19 [ 539.723033][T20484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.723053][T20484] RSP: 002b:00007f5383e5d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.723077][T20484] RAX: ffffffffffffffda RBX: 00007f5383226090 RCX: 00007f5382fa8f19 [ 539.723094][T20484] RDX: 0000000000004000 RSI: 0000200000000580 RDI: 0000000000000003 [ 539.723108][T20484] RBP: 00007f5383e5d090 R08: 0000000000000000 R09: 0000000000000000 [ 539.723122][T20484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.723136][T20484] R13: 00007f5383226128 R14: 00007f5383226090 R15: 00007ffef1ff06a8 [ 539.723173][T20484] [ 539.763853][ T5644] Bluetooth: hci5: command 0x0406 tx timeout [ 540.037010][T20485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3920'. [ 540.341874][T20496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3924'. [ 540.513412][T20501] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 540.552278][T20506] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 541.438106][T20574] syzkaller0: entered promiscuous mode [ 541.438136][T20574] syzkaller0: entered allmulticast mode [ 542.015440][T20604] ip_tables: iptables: counters copy to user failed while replacing table [ 542.333120][T20621] FAULT_INJECTION: forcing a failure. [ 542.333120][T20621] name failslab, interval 1, probability 0, space 0, times 0 [ 542.333183][T20621] CPU: 1 UID: 0 PID: 20621 Comm: syz.4.3954 Not tainted syzkaller #0 PREEMPT(full) [ 542.333223][T20621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 542.333237][T20621] Call Trace: [ 542.333246][T20621] [ 542.333256][T20621] dump_stack_lvl+0xe8/0x150 [ 542.333303][T20621] should_fail_ex+0x3eb/0x540 [ 542.333337][T20621] should_failslab+0xa8/0x100 [ 542.333372][T20621] ? skb_clone+0x212/0x3a0 [ 542.333399][T20621] kmem_cache_alloc_noprof+0x9c/0x600 [ 542.333433][T20621] ? skb_clone+0x212/0x3a0 [ 542.333466][T20621] skb_clone+0x212/0x3a0 [ 542.333497][T20621] __netlink_deliver_tap+0x355/0x6e0 [ 542.333543][T20621] ? netlink_deliver_tap+0x2e/0x1b0 [ 542.333587][T20621] netlink_deliver_tap+0x19c/0x1b0 [ 542.333628][T20621] netlink_unicast+0x8c1/0xa80 [ 542.333679][T20621] netlink_sendmsg+0x7f0/0xb20 [ 542.333720][T20621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.333757][T20621] ? aa_sock_msg_perm+0x144/0x210 [ 542.333798][T20621] ? apparmor_socket_sendmsg+0x98/0x360 [ 542.333831][T20621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.333865][T20621] sock_sendmsg_nosec+0x14e/0x190 [ 542.333898][T20621] ____sys_sendmsg+0x54e/0x850 [ 542.333929][T20621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 542.333960][T20621] ? import_iovec+0x73/0xa0 [ 542.333986][T20621] ___sys_sendmsg+0x2a5/0x360 [ 542.334004][T20621] ? __lock_acquire+0x747/0x2de0 [ 542.334031][T20621] ? __pfx____sys_sendmsg+0x10/0x10 [ 542.334084][T20621] ? __fget_files+0x3a2/0x420 [ 542.334105][T20621] ? __fget_files+0x2a/0x420 [ 542.334136][T20621] __x64_sys_sendmsg+0x1b1/0x290 [ 542.334158][T20621] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 542.334197][T20621] do_syscall_64+0x166/0x520 [ 542.334221][T20621] ? trace_irq_disable+0x3b/0x140 [ 542.334246][T20621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.334264][T20621] ? clear_bhb_loop+0x70/0xc0 [ 542.334285][T20621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.334303][T20621] RIP: 0033:0x7f3b31da8f19 [ 542.334327][T20621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.334342][T20621] RSP: 002b:00007f3b32c7c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 542.334362][T20621] RAX: ffffffffffffffda RBX: 00007f3b32025fa0 RCX: 00007f3b31da8f19 [ 542.334374][T20621] RDX: 0000000000004000 RSI: 0000200000000580 RDI: 0000000000000003 [ 542.334386][T20621] RBP: 00007f3b32c7c090 R08: 0000000000000000 R09: 0000000000000000 [ 542.334397][T20621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.334408][T20621] R13: 00007f3b32026038 R14: 00007f3b32025fa0 R15: 00007fff5d8b95d8 [ 542.334435][T20621] [ 542.767966][T20631] __nla_validate_parse: 8 callbacks suppressed [ 542.767990][T20631] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3961'. [ 542.787894][T20631] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3961'. [ 542.847052][T20631] team0: Port device team_slave_1 removed [ 542.897968][T20634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3959'. [ 542.898003][T20634] block nbd3: Unsupported socket: should be TCP or UNIX. [ 542.952275][T20631] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3961'. [ 543.036653][T20631] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 543.128606][T20631] bond2 (unregistering): Released all slaves [ 543.406680][T20650] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3964'. [ 543.583428][T20666] netlink: 'syz.1.3968': attribute type 83 has an invalid length. [ 543.583989][T20666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3968'. [ 543.584025][T20666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3968'. [ 543.587693][T20666] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3968'. [ 543.773937][T20674] FAULT_INJECTION: forcing a failure. [ 543.773937][T20674] name failslab, interval 1, probability 0, space 0, times 0 [ 543.778079][T20674] CPU: 1 UID: 0 PID: 20674 Comm: syz.0.3969 Not tainted syzkaller #0 PREEMPT(full) [ 543.778173][T20674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 543.778220][T20674] Call Trace: [ 543.778249][T20674] [ 543.778278][T20674] dump_stack_lvl+0xe8/0x150 [ 543.778397][T20674] should_fail_ex+0x3eb/0x540 [ 543.778490][T20674] should_failslab+0xa8/0x100 [ 543.778575][T20674] ? skb_clone+0x212/0x3a0 [ 543.778651][T20674] kmem_cache_alloc_noprof+0x9c/0x600 [ 543.778735][T20674] ? skb_clone+0x212/0x3a0 [ 543.778815][T20674] skb_clone+0x212/0x3a0 [ 543.778891][T20674] __netlink_deliver_tap+0x355/0x6e0 [ 543.779018][T20674] ? netlink_deliver_tap+0x2e/0x1b0 [ 543.779108][T20674] netlink_deliver_tap+0x19c/0x1b0 [ 543.779212][T20674] netlink_unicast+0x8c1/0xa80 [ 543.779353][T20674] netlink_sendmsg+0x7f0/0xb20 [ 543.779461][T20674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.779562][T20674] ? aa_sock_msg_perm+0x144/0x210 [ 543.779683][T20674] ? apparmor_socket_sendmsg+0x98/0x360 [ 543.779785][T20674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.779857][T20674] sock_sendmsg_nosec+0x14e/0x190 [ 543.779953][T20674] ____sys_sendmsg+0x54e/0x850 [ 543.780037][T20674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 543.780134][T20674] ? import_iovec+0x73/0xa0 [ 543.780217][T20674] ___sys_sendmsg+0x2a5/0x360 [ 543.780287][T20674] ? __lock_acquire+0x747/0x2de0 [ 543.780384][T20674] ? __pfx____sys_sendmsg+0x10/0x10 [ 543.780558][T20674] ? __fget_files+0x3a2/0x420 [ 543.780623][T20674] ? __fget_files+0x2a/0x420 [ 543.780719][T20674] __x64_sys_sendmsg+0x1b1/0x290 [ 543.780793][T20674] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 543.780916][T20674] do_syscall_64+0x166/0x520 [ 543.781011][T20674] ? trace_irq_disable+0x3b/0x140 [ 543.781108][T20674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.781170][T20674] ? clear_bhb_loop+0x70/0xc0 [ 543.781246][T20674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.781301][T20674] RIP: 0033:0x7f39c49a8f19 [ 543.781372][T20674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.781424][T20674] RSP: 002b:00007f39c5799028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.781489][T20674] RAX: ffffffffffffffda RBX: 00007f39c4c26090 RCX: 00007f39c49a8f19 [ 543.781532][T20674] RDX: 0000000000004000 RSI: 0000200000000580 RDI: 0000000000000003 [ 543.781565][T20674] RBP: 00007f39c5799090 R08: 0000000000000000 R09: 0000000000000000 [ 543.781593][T20674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.781632][T20674] R13: 00007f39c4c26128 R14: 00007f39c4c26090 R15: 00007ffd80288178 [ 543.781733][T20674] [ 544.111367][T20681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3973'. [ 544.166421][T20675] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3971'. [ 544.673081][T20676] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 544.673111][T20676] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 544.706514][T20676] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 544.706656][T20676] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 544.839790][T20676] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 544.839820][T20676] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 544.914837][T20676] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 544.914864][T20676] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 544.962182][T20676] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 544.962207][T20676] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 545.314273][T20727] tc_dump_action: action bad kind [ 545.487072][T20737] xt_hashlimit: size too large, truncated to 1048576 [ 545.570047][T20739] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 545.598106][T20739] 0ªX¹¦Dö»: entered allmulticast mode [ 545.605890][T20739] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 545.636373][T20739] 0ªX¹¦Dö»: renamed from 01ªX¹¦Dö» (while UP) [ 545.675819][T20739] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 545.723591][T20739] 0ªX¹¦Dö»: renamed from 01ªX¹¦Dö» (while UP) [ 545.755988][T20739] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 545.778247][T20739] 0ªX¹¦Dö»: renamed from 01ªX¹¦Dö» (while UP) [ 545.820558][T20739] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 545.864493][T20739] 0ªX¹¦Dö»: renamed from 01ªX¹¦Dö» (while UP) [ 545.865182][T20752] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 545.865197][T20752] IPv6: NLM_F_CREATE should be set when creating new route [ 545.865279][T20752] IPv6: NLM_F_CREATE should be set when creating new route [ 545.865308][T20752] IPv6: NLM_F_CREATE should be set when creating new route [ 545.913962][T20739] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 545.939919][T20739] 0ªX¹¦Dö»: renamed from 01ªX¹¦Dö» (while UP) [ 545.973416][T20739] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 546.005648][T20739] 0ªX¹¦Dö»: renamed from 01ªX¹¦Dö» (while UP) [ 546.034750][T20739] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 546.050412][T20758] netlink: 'syz.4.3991': attribute type 49 has an invalid length. [ 546.052586][T20739] 0ªX¹¦Dö»: renamed from 01ªX¹¦Dö» (while UP) [ 546.080430][T20739] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 546.317800][T20758] ip6gretap0: entered promiscuous mode [ 546.317830][T20758] ip6gretap0: entered allmulticast mode [ 546.343863][T20739] 0ªX¹¦Dö»: renamed from 01ªX¹¦Dö» (while UP) [ 547.208261][T20804] netlink: 'syz.3.4003': attribute type 4 has an invalid length. [ 547.218487][T20804] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 547.298944][T20804] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 547.310793][T20811] netlink: 'syz.3.4003': attribute type 4 has an invalid length. [ 547.334168][T20804] bond2 (unregistering): Released all slaves [ 547.392500][T20820] xt_socket: unknown flags 0xc [ 547.478244][T20826] netlink: 'syz.0.4009': attribute type 83 has an invalid length. [ 547.674382][T20817] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 547.691428][T20817] bond2 (unregistering): Released all slaves [ 547.796047][T20811] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 548.511818][T20877] __nla_validate_parse: 34 callbacks suppressed [ 548.511842][T20877] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4016'. [ 549.011554][T20892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4020'. [ 549.144837][T20913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4022'. [ 549.254633][T20917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4022'. [ 549.511966][T20923] openvswitch: netlink: IP tunnel dst address not specified [ 549.578865][T20929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.723911][T20934] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4028'. [ 549.723951][T20934] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4028'. [ 549.983183][T20945] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4032'. [ 550.340187][T20968] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 550.340974][T20968] team0: Device ipvlan2 is already an upper device of the team interface [ 550.577409][T20958] geneve1: entered allmulticast mode [ 550.645679][T20986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4043'. [ 550.645989][T20986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4043'. [ 550.670345][T20986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4043'. [ 550.903894][T20989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 552.326170][T21081] ipt_REJECT: ECHOREPLY no longer supported. [ 552.767722][T21110] ip_tables: iptables: counters copy to user failed while replacing table [ 553.384751][T21142] bridge: RTM_NEWNEIGH with unconfigured vlan 255 on bridge0 [ 553.504835][T21147] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 553.536631][T21148] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 553.580296][T21154] bond0: entered promiscuous mode [ 553.580331][T21154] bond_slave_0: entered promiscuous mode [ 553.582542][T21154] bond_slave_1: entered promiscuous mode [ 553.845668][T21171] __nla_validate_parse: 39 callbacks suppressed [ 553.845698][T21171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4094'. [ 553.896710][T21174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4094'. [ 554.044677][T21177] ip_tables: iptables: counters copy to user failed while replacing table [ 554.132304][T21184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4098'. [ 554.237926][T21182] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 554.254675][T21182] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 554.432235][T21191] bridge5: entered promiscuous mode [ 554.433889][T21191] bridge5: entered allmulticast mode [ 554.537176][T21202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4103'. [ 554.537202][T21202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4103'. [ 554.556732][T21207] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4105'. [ 555.066668][T21231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4112'. [ 555.068281][T21231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4112'. [ 555.068901][T21231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4112'. [ 555.069509][T21231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4112'. [ 555.589543][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 556.128323][T21276] netlink: 'syz.3.4120': attribute type 12 has an invalid length. [ 556.128349][T21276] netlink: 'syz.3.4120': attribute type 29 has an invalid length. [ 556.513175][T21287] netlink: 'syz.4.4124': attribute type 2 has an invalid length. [ 556.868222][T21294] netlink: 'syz.0.4126': attribute type 1 has an invalid length. [ 557.123316][T21304] netlink: 'syz.2.4130': attribute type 15 has an invalid length. [ 557.167272][T21304] netlink: 'syz.2.4130': attribute type 15 has an invalid length. [ 557.190143][ T62] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 557.190205][ T62] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 557.190244][ T62] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 557.190282][ T62] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 558.062217][T21335] IPVS: set_ctl: invalid protocol: 149 224.0.0.1:20002 [ 558.451646][T21356] netlink: 'syz.1.4147': attribute type 1 has an invalid length. [ 558.503394][T21356] bond2: entered promiscuous mode [ 558.503858][T21356] 8021q: adding VLAN 0 to HW filter on device bond2 [ 558.522294][T21361] bond2: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 558.522376][T21361] bond2: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 558.522419][T21361] bond2: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 558.631850][T21369] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 558.983467][T21380] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 559.073073][T21385] netlink: 'syz.1.4153': attribute type 25 has an invalid length. [ 559.184523][T21392] syzkaller0: entered promiscuous mode [ 559.184551][T21392] syzkaller0: entered allmulticast mode [ 559.495244][T21402] netlink: 'syz.0.4158': attribute type 32 has an invalid length. [ 559.656513][T21412] __nla_validate_parse: 14 callbacks suppressed [ 559.656541][T21412] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4161'. [ 559.855970][T21422] netlink: 'syz.3.4162': attribute type 1 has an invalid length. [ 559.954727][T21425] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 560.134313][T21431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4166'. [ 560.134369][T21431] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4166'. [ 560.257588][T21441] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 560.273764][T21438] syzkaller0: entered promiscuous mode [ 560.273791][T21438] syzkaller0: entered allmulticast mode [ 560.575885][T21462] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4172'. [ 560.768244][T21470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 560.789006][T21470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 560.817867][T21475] ip_tables: iptables: counters copy to user failed while replacing table [ 561.119699][T21497] xt_TCPMSS: Only works on TCP SYN packets [ 561.283642][T21506] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 561.491198][T21512] syzkaller0: entered promiscuous mode [ 561.491224][T21512] syzkaller0: entered allmulticast mode [ 561.517748][T21517] v: renamed from vlan1 (while UP) [ 561.539932][T21517] veth0_vlan: left promiscuous mode [ 561.763361][T21517] ip_tables: iptables: counters copy to user failed while replacing table [ 562.032649][T21531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4192'. [ 562.082739][T21533] ip_tables: iptables: counters copy to user failed while replacing table [ 562.893187][T21566] xt_policy: too many policy elements [ 562.920107][T21566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4204'. [ 562.920133][T21566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4204'. [ 562.978767][T21564] syzkaller0: entered promiscuous mode [ 562.978793][T21564] syzkaller0: entered allmulticast mode [ 563.108516][T21571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4207'. [ 563.165124][T21576] netlink: 'syz.3.4208': attribute type 1 has an invalid length. [ 563.251966][T21576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4208'. [ 563.251993][T21576] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4208'. [ 563.280702][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.592728][T21598] netlink: 'syz.1.4215': attribute type 1 has an invalid length. [ 563.897122][T21611] IPVS: dh: TCP 127.0.0.1:21 - no destination available [ 564.085337][T21629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.627613][T21660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.638646][T21660] sctp: [Deprecated]: syz.0.4232 (pid 21660) Use of struct sctp_assoc_value in delayed_ack socket option. [ 564.638646][T21660] Use struct sctp_sack_info instead [ 564.755046][T21664] netlink: 'syz.4.4233': attribute type 29 has an invalid length. [ 564.772256][T21667] netlink: 'syz.4.4233': attribute type 29 has an invalid length. [ 565.173138][T21687] __nla_validate_parse: 4 callbacks suppressed [ 565.173164][T21687] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4240'. [ 565.274544][T21692] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4241'. [ 565.388909][T21693] 8021q: adding VLAN 0 to HW filter on device bond3 [ 565.398514][T21693] bond3: entered promiscuous mode [ 565.421051][T21693] bond0: (slave bond3): Enslaving as an active interface with an up link [ 565.497170][T21697] syzkaller1: entered promiscuous mode [ 565.497196][T21697] syzkaller1: entered allmulticast mode [ 565.825373][T21711] netlink: 'syz.2.4249': attribute type 1 has an invalid length. [ 565.882535][T21711] 8021q: adding VLAN 0 to HW filter on device bond4 [ 565.933098][T21711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4249'. [ 566.248767][T21717] bond4: (slave bridge3): making interface the new active one [ 566.263617][T21717] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 566.278325][T21728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4252'. [ 566.465487][T21733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4252'. [ 566.748321][T21728] bond2: entered promiscuous mode [ 566.754644][T21728] 8021q: adding VLAN 0 to HW filter on device bond2 [ 566.802980][T21736] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4254'. [ 566.806179][T21749] Cannot find add_set index 4 as target [ 567.068940][T21766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4260'. [ 567.069235][T21763] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4260'. [ 567.164336][T21765] sch_fq: defrate 0 ignored. [ 567.216806][T21772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4259'. [ 567.411146][T21784] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4264'. [ 567.532750][T21791] openvswitch: netlink: Actions may not be safe on all matching packets [ 567.537069][ T62] IPVS: starting estimator thread 0... [ 567.623533][T21794] IPVS: using max 24 ests per chain, 57600 per kthread [ 567.722952][T21804] bond0: option miimon: invalid value (18446744071829782528) [ 567.722983][T21804] bond0: option miimon: allowed values 0 - 2147483647 [ 567.725819][T21803] openvswitch: netlink: IP tunnel dst address not specified [ 568.043579][T21824] 8021q: adding VLAN 0 to HW filter on device bond4 [ 568.174159][T21833] syzkaller1: entered promiscuous mode [ 568.174186][T21833] syzkaller1: entered allmulticast mode [ 568.178153][T21831] syzkaller1: entered promiscuous mode [ 568.178179][T21831] syzkaller1: entered allmulticast mode [ 568.687372][T21854] ip_tables: iptables: counters copy to user failed while replacing table [ 569.092121][T21868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 569.255846][T21844] ip_tables: iptables: counters copy to user failed while replacing table [ 569.513602][T21880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.562122][ C0] TC_ACT_REPEAT abuse ? [ 569.573305][T21880] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 569.628090][T18758] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.628214][T18758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.860005][ C0] TC_ACT_REPEAT abuse ? [ 570.048632][T21913] lo: entered promiscuous mode [ 570.048824][T21913] netlink: 'syz.2.4298': attribute type 2 has an invalid length. [ 570.048842][T21913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 570.241171][T21920] netlink: 'syz.2.4298': attribute type 2 has an invalid length. [ 570.241198][T21920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 570.652397][T21940] netlink: 'syz.3.4306': attribute type 1 has an invalid length. [ 570.652421][T21940] __nla_validate_parse: 8 callbacks suppressed [ 570.652434][T21940] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4306'. [ 570.652463][T21940] block nbd0: NBD_DISCONNECT [ 570.652503][T21940] block nbd0: Send disconnect failed -32 [ 570.652534][T21940] block nbd0: Send disconnect failed -32 [ 570.652560][T21940] block nbd0: shutting down sockets [ 570.716719][T21941] netlink: 'syz.3.4306': attribute type 1 has an invalid length. [ 570.799557][T21946] sock: sock_timestamping_bind_phc: sock not bind to device [ 571.001200][T18757] pim6reg: left allmulticast mode [ 571.001343][T18757] pim6reg527: left allmulticast mode [ 571.001470][T18757] dvmrp0: left allmulticast mode [ 571.001574][T18757] dvmrp1: left allmulticast mode [ 571.146923][T21961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4310'. [ 571.501535][T21976] netlink: 'syz.0.4315': attribute type 1 has an invalid length. [ 571.525057][T21987] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4315'. [ 571.629751][T18757] bond8 (unregistering): (slave geneve3): Releasing active interface [ 571.668941][T18757] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 571.668973][T18757] bridge1 (unregistering): left promiscuous mode [ 571.668994][T18757] bridge1 (unregistering): left allmulticast mode [ 571.763197][T18757] bond9 (unregistering): (slave bridge0): Releasing backup interface [ 571.812406][T18757] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.815038][T18757] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.816872][T18757] bond0 (unregistering): Released all slaves [ 571.850168][T18757] bond1 (unregistering): Released all slaves [ 571.876348][T18757] bond2 (unregistering): Released all slaves [ 571.906197][T18757] bond3 (unregistering): Released all slaves [ 571.923675][T18757] bond4 (unregistering): Released all slaves [ 571.945065][T18757] bond5 (unregistering): (slave veth5): Releasing active interface [ 571.948524][T18757] bond5 (unregistering): (slave dummy0): Releasing active interface [ 571.971077][T18757] bond5 (unregistering): Released all slaves [ 571.987990][T18757] bond6 (unregistering): Released all slaves [ 572.006599][T18757] bond7 (unregistering): Released all slaves [ 572.026896][T18757] bond8 (unregistering): Released all slaves [ 572.045800][T18757] bond9 (unregistering): Released all slaves [ 572.065726][T18757] bond10 (unregistering): Released all slaves [ 572.088366][T18757] bond11 (unregistering): Released all slaves [ 572.107912][T18757] bond12 (unregistering): Released all slaves [ 572.234043][T21970] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 572.281315][T21970] bond5 (unregistering): Released all slaves [ 572.344934][T21977] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 572.346408][T21976] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 572.878034][T21991] syzkaller0: entered promiscuous mode [ 572.878063][T21991] syzkaller0: entered allmulticast mode [ 573.526735][ C0] TC_ACT_REPEAT abuse ? [ 575.671300][T22047] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4330'. [ 575.753165][T22053] Cannot find del_set index 3 as target [ 575.855945][T22058] netlink: 'syz.0.4333': attribute type 4 has an invalid length. [ 575.855972][T22058] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4333'. [ 575.917042][T22063] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 575.917640][T22063] netlink: 'syz.1.4335': attribute type 21 has an invalid length. [ 575.917662][T22063] IPv6: NLM_F_CREATE should be specified when creating new route [ 575.917768][T22063] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 575.917780][T22063] IPv6: NLM_F_CREATE should be set when creating new route [ 575.917823][T22063] IPv6: NLM_F_CREATE should be set when creating new route [ 575.917847][T22063] IPv6: NLM_F_CREATE should be set when creating new route [ 576.110353][ T62] smbdirect: ib_dev[syz2] removed [ 576.272925][T22079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4339'. [ 576.273281][T22079] netlink: 'syz.1.4339': attribute type 1 has an invalid length. [ 576.370880][T22079] bond3: entered promiscuous mode [ 576.371314][T22079] 8021q: adding VLAN 0 to HW filter on device bond3 [ 576.436588][T22079] vcan0: tx address claim with different name [ 576.489782][T22087] netlink: 'syz.1.4339': attribute type 1 has an invalid length. [ 576.491560][T22079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4339'. [ 576.496340][T22092] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4340'. [ 576.498959][T22094] vcan0: tx address claim with different name [ 576.956998][T22109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4345'. [ 577.196526][T22118] x_tables: unsorted underflow at hook 2 [ 577.290092][T18757] hsr_slave_0: left promiscuous mode [ 577.300320][T18757] hsr_slave_1: left promiscuous mode [ 577.310143][T18757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.310217][T18757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.335060][T18757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.335089][T18757] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.384593][T18757] veth0_macvtap: left promiscuous mode [ 577.384980][T18757] veth1_vlan: left promiscuous mode [ 577.385058][T18757] veth0_vlan: left promiscuous mode [ 577.570823][T22143] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.4354'. [ 577.570925][T22143] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.4354'. [ 577.779357][T22154] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4358'. [ 578.555622][T22133] bond0: left promiscuous mode [ 578.555649][T22133] bond_slave_0: left promiscuous mode [ 578.555850][T22133] bond_slave_1: left promiscuous mode [ 578.555973][T22133] bond3: left promiscuous mode [ 578.558987][T22133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.587894][T22152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4356'. [ 578.587920][T22152] tipc: Invalid UDP bearer configuration [ 578.587971][T22152] tipc: Enabling of bearer rejected, failed to enable media [ 578.600973][T22165] mac80211_hwsim hwsim26 wlan1: entered promiscuous mode [ 579.084027][T22191] rds_bind: 23 callbacks suppressed [ 579.084051][T22191] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 579.368589][T18757] IPVS: stop unused estimator thread 0... [ 579.842212][T22222] mac80211_hwsim hwsim31 syzkaller1: entered promiscuous mode [ 579.842244][T22222] mac80211_hwsim hwsim31 syzkaller1: entered allmulticast mode [ 579.970384][T22225] bond6: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 580.004670][T22225] bond6 (unregistering): Released all slaves [ 580.052281][T22228] block nbd0: not configured, cannot reconfigure [ 580.280487][T22238] netlink: 'syz.0.4372': attribute type 2 has an invalid length. [ 580.388420][T22241] netlink: 'syz.1.4373': attribute type 1 has an invalid length. [ 580.491013][T22241] 8021q: adding VLAN 0 to HW filter on device bond4 [ 580.548713][T22245] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 580.816910][T22268] __nla_validate_parse: 6 callbacks suppressed [ 580.816935][T22268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4377'. [ 580.816958][T22268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4377'. [ 580.816981][T22268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4377'. [ 581.141833][T22281] netlink: 'syz.2.4382': attribute type 5 has an invalid length. [ 581.151818][T22281] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 581.274309][T22291] netlink: 'syz.1.4385': attribute type 29 has an invalid length. [ 581.293366][T22291] netlink: 'syz.1.4385': attribute type 29 has an invalid length. [ 581.356103][T22298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4387'. [ 581.391140][T22298] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 582.852467][T22374] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 583.032307][T22384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4407'. [ 583.083598][T22385] bond0: (slave bond_slave_1): Releasing backup interface [ 583.106632][T22385] bond_slave_1: left promiscuous mode [ 583.793291][T22406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4413'. [ 584.017447][T22422] netlink: 'syz.0.4418': attribute type 23 has an invalid length. [ 584.094604][T22429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4418'. [ 584.094646][T22429] netlink: 'syz.0.4418': attribute type 7 has an invalid length. [ 584.094662][T22429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4418'. [ 584.209017][T22419] netlink: 'syz.1.4417': attribute type 1 has an invalid length. [ 584.209044][T22419] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4417'. [ 584.209064][T22419] nbd: illegal input index 1310721 [ 584.437409][T22446] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 584.659699][T22459] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4426'. [ 584.918711][T22467] netlink: 'syz.0.4427': attribute type 1 has an invalid length. [ 585.125325][T22474] Cannot find add_set index 2 as target [ 585.127941][T22467] bond3: (slave bridge4): making interface the new active one [ 585.153401][T22467] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 585.172339][T22486] batman_adv: batadv0: Adding interface: veth0 [ 585.172361][T22486] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.172396][T22486] batman_adv: batadv0: Interface activated: veth0 [ 585.204757][T22486] netlink: 'syz.3.4432': attribute type 29 has an invalid length. [ 585.235358][T22486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.235390][T22486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.267584][T22486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.267615][T22486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.285813][T22486] batman_adv: batadv0: Interface deactivated: veth0 [ 585.285841][T22486] batman_adv: batadv0: Removing interface: veth0 [ 585.441600][T22495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.547591][T22495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.757947][T22517] netlink: 'syz.0.4440': attribute type 1 has an invalid length. [ 585.837865][T22521] __nla_validate_parse: 2 callbacks suppressed [ 585.837889][T22521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4441'. [ 585.880663][T22521] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4441'. [ 586.093897][T22533] netlink: 'syz.0.4444': attribute type 1 has an invalid length. [ 586.421589][T22549] validate_nla: 1 callbacks suppressed [ 586.421614][T22549] netlink: 'syz.0.4449': attribute type 2 has an invalid length. [ 586.538801][T22559] netlink: 'syz.0.4452': attribute type 12 has an invalid length. [ 586.727624][T22555] only policy match revision 0 supported [ 586.727641][T22555] unable to load match [ 587.344712][T22601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4464'. [ 587.387412][T22600] 8021q: VLANs not supported on ip_vti0 [ 587.476405][T22604] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4466'. [ 587.614000][T22616] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4469'. [ 588.053213][T22624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 588.095104][T22641] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4475'. [ 588.157843][T22624] 8021q: adding VLAN 0 to HW filter on device bond2 [ 588.188777][T22624] 8021q: adding VLAN 0 to HW filter on device bond5 [ 588.308513][T22640] tipc: Cannot configure node identity twice [ 588.498630][T22648] xt_hashlimit: size too large, truncated to 1048576 [ 588.540669][T22650] netlink: 'syz.0.4475': attribute type 1 has an invalid length. [ 588.540695][T22650] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4475'. [ 588.767589][T22679] netlink: 'syz.4.4480': attribute type 5 has an invalid length. [ 588.767614][T22679] netlink: 'syz.4.4480': attribute type 9 has an invalid length. [ 588.767629][T22679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4480'. [ 589.370695][T22707] vlan1: entered allmulticast mode [ 589.370722][T22707] veth0_vlan: entered allmulticast mode [ 589.448868][T22714] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4488'. [ 589.534949][T22714] team0: Port device dummy0 removed [ 589.629014][T22725] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4488'. [ 590.358356][T22766] tipc: Can't bind to reserved service type 2 [ 590.387728][T22766] sctp: [Deprecated]: syz.3.4498 (pid 22766) Use of int in max_burst socket option. [ 590.387728][T22766] Use struct sctp_assoc_value instead [ 590.407666][T22766] netlink: ct family unspecified [ 590.425387][T22767] block nbd0: Unsupported socket: should be TCP or UNIX. [ 590.666069][T22789] netlink: 'syz.4.4504': attribute type 1 has an invalid length. [ 590.698262][T22789] 8021q: adding VLAN 0 to HW filter on device bond4 [ 590.714401][T22792] openvswitch: netlink: Missing key (keys=40, expected=100) [ 590.822032][T22789] bond4: (slave geneve3): making interface the new active one [ 590.825578][T22789] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 590.883324][T22799] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 590.885230][T22800] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 590.926138][T22798] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 590.926962][T22798] batman_adv: batadv0: Adding interface: gretap2 [ 590.926977][T22798] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.927010][T22798] batman_adv: batadv0: Interface activated: gretap2 [ 591.045663][T22803] syzkaller1: entered promiscuous mode [ 591.045691][T22803] syzkaller1: entered allmulticast mode [ 591.421834][T22821] __nla_validate_parse: 6 callbacks suppressed [ 591.421856][T22821] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4519'. [ 591.724052][T22837] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4525'. [ 591.748723][T22841] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4525'. [ 591.781123][T22848] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4526'. [ 591.784658][T22848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4526'. [ 591.811135][T22838] x_tables: duplicate underflow at hook 3 [ 591.982031][T22856] ksmbd: Unknown IPC event: 4, ignore. [ 592.050847][T22861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4532'. [ 592.050887][T22861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4532'. [ 592.071095][T22862] ip6tnl0: Caught tx_queue_len zero misconfig [ 592.243796][T22872] Bluetooth: MGMT ver 1.23 [ 592.345524][T22876] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4537'. [ 592.458429][T22888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4538'. [ 592.506337][T22888] bridge5: entered allmulticast mode [ 592.518872][T22895] x_tables: unsorted underflow at hook 2 [ 592.802808][T10503] bond0: (slave bond3): link status definitely down, disabling slave [ 593.827604][T22922] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4548'. [ 595.388959][T22896] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 595.388986][T22896] nci: nci_start_poll: failed to set local general bytes [ 595.419896][T22878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 595.609466][T22946] geneve2: entered promiscuous mode [ 595.764511][T22957] netlink: 'syz.4.4558': attribute type 10 has an invalid length. [ 595.765276][T22957] bridge0: port 3(dummy0) entered blocking state [ 595.765389][T22957] bridge0: port 3(dummy0) entered disabled state [ 595.765526][T22957] dummy0: entered allmulticast mode [ 595.815306][T22957] dummy0: entered promiscuous mode [ 595.815987][T22957] bridge0: port 3(dummy0) entered blocking state [ 595.816082][T22957] bridge0: port 3(dummy0) entered forwarding state [ 595.843925][T22957] netlink: 'syz.4.4558': attribute type 10 has an invalid length. [ 595.858526][T22957] netlink: 'syz.4.4558': attribute type 10 has an invalid length. [ 595.869013][T22957] netlink: 'syz.4.4558': attribute type 10 has an invalid length. [ 595.881354][T22957] netlink: 'syz.4.4558': attribute type 10 has an invalid length. [ 595.883996][T22957] netlink: 'syz.4.4558': attribute type 10 has an invalid length. [ 595.901694][T22957] netlink: 'syz.4.4558': attribute type 10 has an invalid length. [ 595.926115][T22957] netlink: 'syz.4.4558': attribute type 10 has an invalid length. [ 595.946295][T22957] netlink: 'syz.4.4558': attribute type 10 has an invalid length. [ 595.947051][T22957] netlink: 'syz.4.4558': attribute type 10 has an invalid length. [ 596.042387][T22952] tipc: Enabling of bearer rejected, failed to enable media [ 596.458018][T22984] 8021q: VLANs not supported on wg0 [ 596.600638][T22992] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 596.705545][T22995] __nla_validate_parse: 70 callbacks suppressed [ 596.705572][T22995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4567'. [ 597.139809][T23022] x_tables: duplicate underflow at hook 1 [ 597.142957][T23019] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4574'. [ 597.142994][T23019] block nbd0: not configured, cannot reconfigure [ 597.156416][T23019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4574'. [ 597.195404][T23019] xfrm2: entered promiscuous mode [ 597.195429][T23019] xfrm2: entered allmulticast mode [ 597.406616][T23029] bond6: option primary_reselect: invalid value (255) [ 597.421489][T23029] bond6 (unregistering): Released all slaves [ 597.599538][T23049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4578'. [ 597.642494][T23049] bond5: entered promiscuous mode [ 597.643006][T23049] 8021q: adding VLAN 0 to HW filter on device bond5 [ 597.676119][T23054] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4579'. [ 597.726959][T23052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4580'. [ 597.727227][T23055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4580'. [ 597.911539][T23062] xt_MASQUERADE: bad MAP_IPS. [ 597.928396][T23063] xt_MASQUERADE: bad MAP_IPS. [ 598.007300][T23067] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 598.007387][T23067] gretap0: entered promiscuous mode [ 598.007403][T23067] gretap0: entered allmulticast mode [ 598.080266][T23073] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 598.080714][T23073] gretap1: entered promiscuous mode [ 598.080734][T23073] gretap1: entered allmulticast mode [ 598.174214][T23079] netlink: 41 bytes leftover after parsing attributes in process `syz.3.4587'. [ 598.174240][T23079] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4587'. [ 598.174262][T23079] netlink: 41 bytes leftover after parsing attributes in process `syz.3.4587'. [ 598.523128][T23093] ip_tables: iptables: counters copy to user failed while replacing table [ 598.758416][T23110] ip6erspan0: entered promiscuous mode [ 599.212996][T23135] openvswitch: netlink: Message has -1 unknown bytes. [ 599.692631][T23159] 8021q: adding VLAN 0 to HW filter on device bond6 [ 599.728890][T23160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.740069][T23160] bond6: (slave bond0): making interface the new active one [ 599.742451][T23160] bond6: (slave bond0): Enslaving as an active interface with an up link [ 599.777034][T23166] .`: renamed from bond0 (while UP) [ 599.805402][T23167] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 599.885824][ T275] bond6: (slave .`): link status definitely down, disabling slave [ 599.978753][ T275] bond6: now running without any active interface! [ 600.220473][T23184] mac80211_hwsim hwsim31 syzkaller1: left promiscuous mode [ 600.220509][T23184] mac80211_hwsim hwsim31 syzkaller1: left allmulticast mode [ 600.417176][T23197] veth1_macvtap: entered allmulticast mode [ 600.722727][T23212] dvmrp1: entered allmulticast mode [ 601.057853][T23199] No such timeout policy "syz1" [ 601.147114][T23231] bond0: Caught tx_queue_len zero misconfig [ 601.485012][T23243] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 601.635685][T23246] x_tables: unsorted entry at hook 1 [ 601.899439][T18756] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.354340][T23270] 8021q: adding VLAN 0 to HW filter on device bond4 [ 602.646998][T23300] __nla_validate_parse: 233 callbacks suppressed [ 602.647026][T23300] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4654'. [ 602.831949][T23308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4656'. [ 602.877785][T23310] validate_nla: 93 callbacks suppressed [ 602.877809][T23310] netlink: 'syz.0.4656': attribute type 3 has an invalid length. [ 602.877825][T23310] netlink: 666 bytes leftover after parsing attributes in process `syz.0.4656'. [ 602.884914][T23311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4656'. [ 603.033421][T23316] can: request_module (can-proto-0) failed. [ 603.278987][T23337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4666'. [ 603.497179][T23349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4670'. [ 603.525094][T23349] veth1_to_team: entered promiscuous mode [ 603.534732][T23349] veth1_to_team: left promiscuous mode [ 603.668192][T23354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4672'. [ 603.708901][T23355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4673'. [ 603.708937][T23355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4673'. [ 604.347536][T23385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4681'. [ 604.492927][T23410] netlink: 'syz.4.4683': attribute type 2 has an invalid length. [ 604.980183][T23427] syzkaller0: entered promiscuous mode [ 604.980208][T23427] syzkaller0: entered allmulticast mode [ 605.458921][T23446] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 605.458955][T23446] syzkaller1: group set to 0 [ 605.867572][T23462] ip_tables: iptables: counters copy to user failed while replacing table [ 606.107078][T23476] netlink: 'syz.0.4706': attribute type 1 has an invalid length. [ 606.244562][T23476] 8021q: adding VLAN 0 to HW filter on device bond5 [ 606.776244][T23509] netlink: 'syz.1.4718': attribute type 1 has an invalid length. [ 606.958847][T23519] netlink: 'syz.1.4722': attribute type 1 has an invalid length. [ 606.984039][T23519] netlink: 'syz.1.4722': attribute type 1 has an invalid length. [ 607.046257][T23526] netlink: 'syz.4.4724': attribute type 1 has an invalid length. [ 607.093495][T23526] 8021q: adding VLAN 0 to HW filter on device bond5 [ 607.195454][T23538] netlink: 'syz.4.4724': attribute type 1 has an invalid length. [ 607.223628][T23530] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 607.223659][T23530] bond6: option packets_per_slave: allowed values 0 - 65535 [ 607.251744][T23530] bond6 (unregistering): Released all slaves [ 607.499874][T23549] macvlan1: Device is already in use. [ 607.775680][T23565] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 607.798263][T23569] __nla_validate_parse: 22 callbacks suppressed [ 607.798287][T23569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4734'. [ 607.798318][T23569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4734'. [ 608.172638][T23548] workqueue: Failed to create a rescuer kthread for wq "nfc15_nci_rx_wq": -EINTR [ 608.908900][T23652] ip6t_srh: unknown srh invflags 4000 [ 608.973277][T23652] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4742'. [ 608.973308][T23652] openvswitch: netlink: IP tunnel dst address not specified [ 609.197066][T23665] ip_tables: iptables: counters copy to user failed while replacing table [ 609.220423][T23665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4745'. [ 609.370939][T23676] netlink: 'syz.0.4749': attribute type 10 has an invalid length. [ 609.371569][T23676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4749'. [ 609.662551][T23690] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4753'. [ 612.002950][T23656] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 612.376150][T23733] xt_TCPMSS: Only works on TCP SYN packets [ 612.376729][T23733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4763'. [ 612.522293][T23738] netlink: 'syz.2.4764': attribute type 12 has an invalid length. [ 612.522320][T23738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4764'. [ 612.571023][T23738] netlink: 'syz.2.4764': attribute type 12 has an invalid length. [ 612.571046][T23738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4764'. [ 612.580011][T18752] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 612.580939][ T275] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 612.581057][ T275] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 612.581176][ T275] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 612.821482][T23759] wg2: Caught tx_queue_len zero misconfig [ 612.834978][T23759] veth1_macvtap: left promiscuous mode [ 612.982686][T18757] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xa [ 613.252133][T23783] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4775'. [ 613.486882][T23793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4777'. [ 613.576948][T23800] netlink: 'syz.0.4780': attribute type 1 has an invalid length. [ 613.576975][T23800] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4780'. [ 613.697000][T23800] syzkaller0: entered promiscuous mode [ 613.697024][T23800] syzkaller0: entered allmulticast mode [ 613.861908][T23818] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4786'. [ 613.861949][T23818] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4786'. [ 613.925556][T23820] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4786'. [ 613.925597][T23820] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4786'. [ 613.982865][T23825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4787'. [ 614.037708][T23829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4787'. [ 614.098153][T23812] syzkaller0: entered promiscuous mode [ 614.098178][T23812] syzkaller0: entered allmulticast mode [ 614.345144][T23837] lo: Caught tx_queue_len zero misconfig [ 614.377170][T23837] netlink: 'syz.0.4790': attribute type 8 has an invalid length. [ 614.454564][T23848] netlink: 'syz.2.4792': attribute type 12 has an invalid length. [ 614.469647][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 614.829277][T23858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4796'. [ 614.842342][T23861] ip_tables: iptables: counters copy to user failed while replacing table [ 615.090405][T23864] syzkaller1: entered promiscuous mode [ 615.090431][T23864] syzkaller1: entered allmulticast mode [ 616.068607][T23929] netlink: 'syz.1.4816': attribute type 4 has an invalid length. [ 616.988091][T23947] netlink: 'syz.1.4821': attribute type 1 has an invalid length. [ 617.064395][T23951] nbd: must specify a size in bytes for the device [ 617.303762][T23959] netlink: 'syz.3.4825': attribute type 3 has an invalid length. [ 617.303792][T23959] netlink: 'syz.3.4825': attribute type 3 has an invalid length. [ 617.334454][T23961] netlink: 'syz.3.4825': attribute type 3 has an invalid length. [ 617.334483][T23961] netlink: 'syz.3.4825': attribute type 3 has an invalid length. [ 617.593850][T23973] IPVS: lblc: UDP [fe80::aa]:8080 - no destination available [ 617.853655][T23982] syzkaller1: entered promiscuous mode [ 617.853682][T23982] syzkaller1: entered allmulticast mode [ 617.878665][T23990] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 618.064839][T23999] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 618.310112][T24010] netlink: 'syz.0.4844': attribute type 1 has an invalid length. [ 618.472441][T24015] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 618.472606][T24015] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 618.472756][T24015] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 618.472932][T24015] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 618.473079][T24015] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 618.473229][T24015] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 618.473368][T24015] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 618.478304][T24015] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 618.478472][T24015] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 618.478725][T24015] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 618.567933][T24024] netlink: 'syz.3.4848': attribute type 9 has an invalid length. [ 618.885589][T24046] __nla_validate_parse: 14 callbacks suppressed [ 618.885614][T24046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4846'. [ 619.523875][T24079] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 619.546545][T24088] C: renamed from lo [ 619.582110][T24088] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 620.307571][T24129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4876'. [ 620.536001][T24149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4882'. [ 620.587028][T24146] openvswitch: netlink: Multiple metadata blocks provided [ 620.601415][T24147] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4882'. [ 620.793217][T24161] netlink: 'syz.1.4884': attribute type 1 has an invalid length. [ 620.978291][T24161] bond6: entered promiscuous mode [ 620.986099][T24161] 8021q: adding VLAN 0 to HW filter on device bond6 [ 621.023413][T24177] 8021q: adding VLAN 0 to HW filter on device bond6 [ 621.025083][T24177] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 621.025109][T24177] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 621.061928][T24177] bond6: (slave ip6gre1): making interface the new active one [ 621.061962][T24177] ip6gre1: entered promiscuous mode [ 621.096571][T24177] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 621.156816][T24179] vlan1: entered allmulticast mode [ 621.156840][T24179] gretap0: entered allmulticast mode [ 621.192361][T24186] bond5: entered allmulticast mode [ 621.215454][T24187] vlan1: entered allmulticast mode [ 621.264701][T24172] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 621.414332][T24197] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4893'. [ 621.414362][T24197] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4893'. [ 621.414590][T24198] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4893'. [ 621.414608][T24198] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4893'. [ 621.430297][T24198] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 621.474762][T24197] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 621.843259][T24221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4895'. [ 621.869057][T18752] IPVS: starting estimator thread 0... [ 621.901802][T24225] ip_tables: iptables: counters copy to user failed while replacing table [ 621.949782][T24224] IPVS: using max 28 ests per chain, 67200 per kthread [ 622.173147][T24240] netlink: 'syz.4.4900': attribute type 11 has an invalid length. [ 622.173185][T24240] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4900'. [ 622.240209][T18738] wlan0: Trigger new scan to find an IBSS to join [ 622.289669][T24240] netlink: 'syz.4.4900': attribute type 1 has an invalid length. [ 622.488116][T24262] dummy0: left allmulticast mode [ 622.488365][T24262] dummy0: left promiscuous mode [ 622.488817][T24262] bridge0: port 3(dummy0) entered disabled state [ 622.498828][T13024] nci: nci_stop_poll: unable to stop poll, since poll is not active [ 622.551500][T24262] bridge_slave_1: left allmulticast mode [ 622.569249][T24262] bridge_slave_1: left promiscuous mode [ 622.569534][T24262] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.052657][T24262] bridge_slave_0: left allmulticast mode [ 623.052690][T24262] bridge_slave_0: left promiscuous mode [ 623.052922][T24262] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.175634][T24272] mac80211_hwsim hwsim31 syzkaller1: entered promiscuous mode [ 623.175665][T24272] mac80211_hwsim hwsim31 syzkaller1: entered allmulticast mode [ 623.408002][T24288] xt_LOG: prefix is not null-terminated [ 623.788401][T24311] netlink: 'syz.4.4921': attribute type 1 has an invalid length. [ 623.898450][T24318] tipc: Enabling of bearer rejected, media not registered [ 623.953898][T24323] __nla_validate_parse: 6 callbacks suppressed [ 623.953922][T24323] netlink: 31 bytes leftover after parsing attributes in process `syz.2.4923'. [ 624.712191][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.182217][T24241] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 625.270863][T18755] wlan0: Trigger new scan to find an IBSS to join [ 625.371603][T24346] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4929'. [ 625.372712][T24346] SET target dimension over the limit! [ 625.566743][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057217c00: rx timeout, send abort [ 626.066752][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057215000: rx timeout, send abort [ 626.066981][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057217c00: abort rx timeout. Force session deactivation [ 626.231968][T24352] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 626.287499][T24357] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4932'. [ 626.566860][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057215000: abort rx timeout. Force session deactivation [ 626.874703][T24318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 627.563720][T24393] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4944'. [ 627.563748][T24393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4944'. [ 627.563764][T24393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4944'. [ 628.231774][ T50] wlan0: Trigger new scan to find an IBSS to join [ 628.916668][T24458] bond7 (unregistering): Released all slaves [ 629.124419][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.366523][T24496] netlink: Unknown conntrack attr (type=28, max=9) [ 629.374513][T24495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4972'. [ 629.541425][T24503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4975'. [ 629.593903][T24503] bridge_slave_0: left allmulticast mode [ 629.593933][T24503] bridge_slave_0: left promiscuous mode [ 629.594177][T24503] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.627345][T24511] netlink: 288 bytes leftover after parsing attributes in process `syz.2.4978'. [ 629.672465][T24503] bridge_slave_1: left allmulticast mode [ 629.672495][T24503] bridge_slave_1: left promiscuous mode [ 629.672751][T24503] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.733086][T24503] bond0: (slave bond_slave_0): Releasing backup interface [ 629.756553][T24503] bond_slave_0: left promiscuous mode [ 629.760377][T24516] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4975'. [ 629.803016][T24518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4979'. [ 629.804509][T24503] team0: Port device team_slave_0 removed [ 629.853222][T24503] team0: Port device team_slave_1 removed [ 629.855673][T24503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.855702][T24503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.884207][T24503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.884237][T24503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.889133][T24503] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 630.033536][T24527] openvswitch: netlink: Missing key (keys=40, expected=100) [ 630.167939][T24536] mac80211_hwsim hwsim31 syzkaller1: left promiscuous mode [ 630.167987][T24536] mac80211_hwsim hwsim31 syzkaller1: left allmulticast mode [ 630.441144][T24553] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4985'. [ 630.568616][T24564] netlink: 'syz.0.4990': attribute type 4 has an invalid length. [ 630.568643][T24564] netlink: 5620 bytes leftover after parsing attributes in process `syz.0.4990'. [ 630.774985][T24558] netlink: 'syz.4.4989': attribute type 1 has an invalid length. [ 631.438680][T24616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5006'. [ 631.449026][T24616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5006'. [ 631.508237][T24616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5006'. [ 631.720289][T24631] : entered promiscuous mode [ 631.979434][T24230] nci: nci_rsp_packet: unsupported rsp opcode 0xf2a [ 632.302871][T24668] bond7: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 632.305099][T24668] bond7 (unregistering): Released all slaves [ 632.525809][T24681] FAULT_INJECTION: forcing a failure. [ 632.525809][T24681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.525846][T24681] CPU: 1 UID: 0 PID: 24681 Comm: syz.0.5027 Not tainted syzkaller #0 PREEMPT(full) [ 632.525871][T24681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 632.525884][T24681] Call Trace: [ 632.525894][T24681] [ 632.525904][T24681] dump_stack_lvl+0xe8/0x150 [ 632.525948][T24681] should_fail_ex+0x3eb/0x540 [ 632.525984][T24681] _copy_from_user+0x2d/0xb0 [ 632.526017][T24681] ___sys_sendmsg+0x1c6/0x360 [ 632.526043][T24681] ? __lock_acquire+0x747/0x2de0 [ 632.526079][T24681] ? __pfx____sys_sendmsg+0x10/0x10 [ 632.526153][T24681] ? __fget_files+0x3a2/0x420 [ 632.526183][T24681] ? __fget_files+0x2a/0x420 [ 632.526229][T24681] __x64_sys_sendmsg+0x1b1/0x290 [ 632.526262][T24681] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 632.526312][T24681] do_syscall_64+0x166/0x520 [ 632.526344][T24681] ? trace_irq_disable+0x3b/0x140 [ 632.526375][T24681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.526398][T24681] ? clear_bhb_loop+0x70/0xc0 [ 632.526426][T24681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.526448][T24681] RIP: 0033:0x7f39c49a8f19 [ 632.526469][T24681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.526489][T24681] RSP: 002b:00007f39c57ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.526514][T24681] RAX: ffffffffffffffda RBX: 00007f39c4c25fa0 RCX: 00007f39c49a8f19 [ 632.526530][T24681] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 632.526544][T24681] RBP: 00007f39c57ba090 R08: 0000000000000000 R09: 0000000000000000 [ 632.526558][T24681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.526571][T24681] R13: 00007f39c4c26038 R14: 00007f39c4c25fa0 R15: 00007ffd80288178 [ 632.526608][T24681] [ 634.257023][T24722] FAULT_INJECTION: forcing a failure. [ 634.257023][T24722] name failslab, interval 1, probability 0, space 0, times 0 [ 634.257056][T24722] CPU: 0 UID: 0 PID: 24722 Comm: syz.3.5038 Not tainted syzkaller #0 PREEMPT(full) [ 634.257081][T24722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 634.257095][T24722] Call Trace: [ 634.257103][T24722] [ 634.257112][T24722] dump_stack_lvl+0xe8/0x150 [ 634.257166][T24722] should_fail_ex+0x3eb/0x540 [ 634.257198][T24722] ? __alloc_skb+0x1db/0x7a0 [ 634.257221][T24722] should_failslab+0xa8/0x100 [ 634.257257][T24722] ? __alloc_skb+0x1db/0x7a0 [ 634.257277][T24722] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 634.257306][T24722] ? __alloc_skb+0x18d/0x7a0 [ 634.257328][T24722] ? __alloc_skb+0x1db/0x7a0 [ 634.257356][T24722] __alloc_skb+0x1db/0x7a0 [ 634.257383][T24722] netlink_sendmsg+0x5cd/0xb20 [ 634.257434][T24722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.257471][T24722] ? aa_sock_msg_perm+0x144/0x210 [ 634.257513][T24722] ? apparmor_socket_sendmsg+0x98/0x360 [ 634.257548][T24722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.257579][T24722] sock_sendmsg_nosec+0x14e/0x190 [ 634.257614][T24722] ____sys_sendmsg+0x54e/0x850 [ 634.257645][T24722] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.257682][T24722] ? import_iovec+0x73/0xa0 [ 634.257715][T24722] ___sys_sendmsg+0x2a5/0x360 [ 634.257737][T24722] ? __lock_acquire+0x747/0x2de0 [ 634.257772][T24722] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.257839][T24722] ? __fget_files+0x3a2/0x420 [ 634.257866][T24722] ? __fget_files+0x2a/0x420 [ 634.257905][T24722] __x64_sys_sendmsg+0x1b1/0x290 [ 634.257934][T24722] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 634.257985][T24722] do_syscall_64+0x166/0x520 [ 634.258014][T24722] ? trace_irq_disable+0x3b/0x140 [ 634.258045][T24722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.258068][T24722] ? clear_bhb_loop+0x70/0xc0 [ 634.258096][T24722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.258118][T24722] RIP: 0033:0x7f54839a8f19 [ 634.258139][T24722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.258165][T24722] RSP: 002b:00007f5481bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.258190][T24722] RAX: ffffffffffffffda RBX: 00007f5483c25fa0 RCX: 00007f54839a8f19 [ 634.258206][T24722] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 634.258221][T24722] RBP: 00007f5481bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 634.258235][T24722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.258249][T24722] R13: 00007f5483c26038 R14: 00007f5483c25fa0 R15: 00007fffb192e728 [ 634.258285][T24722] [ 634.493427][T24724] __nla_validate_parse: 13 callbacks suppressed [ 634.493491][T24724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5039'. [ 634.786291][T24634] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 635.080219][T24745] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5046'. [ 635.082749][T24746] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5046'. [ 635.084860][T24745] 0ªX¹¦Dö»: entered promiscuous mode [ 635.125517][T24746] 0ªî{X¹¦: renamed from 00ªX¹¦Dö» [ 635.145750][T24746] 0ªî{X¹¦: left promiscuous mode [ 635.171486][T24746] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 635.330935][T24764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5054'. [ 635.330960][T24764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5054'. [ 635.357778][T24764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5054'. [ 635.442076][T24770] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5053'. [ 635.815262][T24788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5060'. [ 636.153303][T24804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.175718][T24804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 636.723810][T24832] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5071'. [ 637.324941][T24858] hsr0: entered allmulticast mode [ 637.324967][T24858] hsr_slave_0: entered allmulticast mode [ 637.324986][T24858] hsr_slave_1: entered allmulticast mode [ 637.377897][T24859] syzkaller0: entered promiscuous mode [ 637.377924][T24859] syzkaller0: entered allmulticast mode [ 637.406219][T24852] hsr0: entered promiscuous mode [ 637.586287][T24851] hsr0: left promiscuous mode [ 637.601977][T24851] hsr0: left allmulticast mode [ 637.602001][T24851] hsr_slave_0: left allmulticast mode [ 637.602017][T24851] hsr_slave_1: left allmulticast mode [ 637.748457][T24872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5081'. [ 637.834805][T24882] FAULT_INJECTION: forcing a failure. [ 637.834805][T24882] name failslab, interval 1, probability 0, space 0, times 0 [ 637.834847][T24882] CPU: 0 UID: 0 PID: 24882 Comm: syz.2.5084 Not tainted syzkaller #0 PREEMPT(full) [ 637.834872][T24882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 637.834887][T24882] Call Trace: [ 637.834895][T24882] [ 637.834905][T24882] dump_stack_lvl+0xe8/0x150 [ 637.834948][T24882] should_fail_ex+0x3eb/0x540 [ 637.834982][T24882] should_failslab+0xa8/0x100 [ 637.835021][T24882] ? skb_clone+0x212/0x3a0 [ 637.835048][T24882] kmem_cache_alloc_noprof+0x9c/0x600 [ 637.835079][T24882] ? skb_clone+0x212/0x3a0 [ 637.835113][T24882] skb_clone+0x212/0x3a0 [ 637.835144][T24882] __netlink_deliver_tap+0x355/0x6e0 [ 637.835191][T24882] ? netlink_deliver_tap+0x2e/0x1b0 [ 637.835227][T24882] netlink_deliver_tap+0x19c/0x1b0 [ 637.835262][T24882] netlink_unicast+0x8c1/0xa80 [ 637.835312][T24882] netlink_sendmsg+0x7f0/0xb20 [ 637.835354][T24882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.835392][T24882] ? aa_sock_msg_perm+0x144/0x210 [ 637.835433][T24882] ? apparmor_socket_sendmsg+0x98/0x360 [ 637.835467][T24882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.835500][T24882] sock_sendmsg_nosec+0x14e/0x190 [ 637.835534][T24882] ____sys_sendmsg+0x54e/0x850 [ 637.835565][T24882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 637.835602][T24882] ? import_iovec+0x73/0xa0 [ 637.835634][T24882] ___sys_sendmsg+0x2a5/0x360 [ 637.835656][T24882] ? __lock_acquire+0x747/0x2de0 [ 637.835689][T24882] ? __pfx____sys_sendmsg+0x10/0x10 [ 637.835755][T24882] ? __fget_files+0x3a2/0x420 [ 637.835781][T24882] ? __fget_files+0x2a/0x420 [ 637.835818][T24882] __x64_sys_sendmsg+0x1b1/0x290 [ 637.835853][T24882] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 637.835904][T24882] do_syscall_64+0x166/0x520 [ 637.835933][T24882] ? trace_irq_disable+0x3b/0x140 [ 637.835964][T24882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.835986][T24882] ? clear_bhb_loop+0x70/0xc0 [ 637.836014][T24882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.836036][T24882] RIP: 0033:0x7f5382fa8f19 [ 637.836056][T24882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.836076][T24882] RSP: 002b:00007f5383e7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 637.836100][T24882] RAX: ffffffffffffffda RBX: 00007f5383225fa0 RCX: 00007f5382fa8f19 [ 637.836117][T24882] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 637.836132][T24882] RBP: 00007f5383e7e090 R08: 0000000000000000 R09: 0000000000000000 [ 637.836145][T24882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.836158][T24882] R13: 00007f5383226038 R14: 00007f5383225fa0 R15: 00007ffef1ff06a8 [ 637.836195][T24882] [ 638.521787][T24893] syzkaller0: entered promiscuous mode [ 638.521814][T24893] syzkaller0: entered allmulticast mode [ 638.644490][T24916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 639.005452][T24934] netlink: 'syz.2.5097': attribute type 1 has an invalid length. [ 639.005501][T24934] NCSI netlink: No device for ifindex 0 [ 640.017937][T24975] netlink: 'syz.0.5104': attribute type 7 has an invalid length. [ 640.017961][T24975] __nla_validate_parse: 4 callbacks suppressed [ 640.017973][T24975] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5104'. [ 640.021260][T24980] netlink: 'syz.0.5104': attribute type 7 has an invalid length. [ 640.021296][T24980] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5104'. [ 642.736322][T25002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5108'. [ 642.764921][T25004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5108'. [ 642.993530][T24998] syzkaller0: entered promiscuous mode [ 642.993548][T24998] syzkaller0: entered allmulticast mode [ 661.189633][T10504] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 667.188402][T25020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5110'. [ 667.278713][T25020] 8021q: adding VLAN 0 to HW filter on device bond7 [ 667.672894][T25047] bridge0: port 3(netdevsim0) entered disabled state [ 667.676387][T25040] syzkaller0: entered promiscuous mode [ 667.676414][T25040] syzkaller0: entered allmulticast mode [ 668.666488][ T5296] veth0_vlan: left promiscuous mode [ 668.742813][T13041] veth0_vlan: entered promiscuous mode [ 668.844366][T25116] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5135'. [ 668.844679][T25116] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5135'. [ 668.844929][T25116] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5135'. [ 668.845177][T25116] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5135'. [ 668.847918][T25116] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5135'. [ 668.858148][T25116] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5135'. [ 668.858778][T25116] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5135'. [ 668.896268][T25116] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5135'. [ 668.916988][T25116] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5135'. [ 668.965505][T25120] syzkaller0: entered promiscuous mode [ 668.965533][T25120] syzkaller0: entered allmulticast mode [ 669.356999][T25130] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 669.388308][T25134] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 669.482371][T25135] dvmrp1: entered allmulticast mode [ 669.894266][T25140] netlink: 'syz.3.5143': attribute type 1 has an invalid length. [ 670.216180][T25176] ip_tables: iptables: counters copy to user failed while replacing table [ 670.304885][T25179] syzkaller0: entered promiscuous mode [ 670.304914][T25179] syzkaller0: entered allmulticast mode [ 670.687696][T25200] netlink: 'syz.1.5161': attribute type 2 has an invalid length. [ 670.853903][T25217] tunl0: entered promiscuous mode [ 670.882127][T25217] netlink: 'syz.0.5164': attribute type 4 has an invalid length. [ 671.283033][T25232] netlink: 'syz.0.5167': attribute type 4 has an invalid length. [ 671.818154][T25254] syzkaller0: entered promiscuous mode [ 671.818189][T25254] syzkaller0: entered allmulticast mode [ 672.210494][T25270] x_tables: unsorted underflow at hook 4 [ 672.214668][T25270] x_tables: unsorted underflow at hook 4 [ 673.410920][T25331] __nla_validate_parse: 30 callbacks suppressed [ 673.410944][T25331] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5192'. [ 673.441217][T25337] netlink: 'syz.0.5194': attribute type 1 has an invalid length. [ 673.441242][T25337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5194'. [ 673.612949][T25344] bridge0: port 4(veth0) entered blocking state [ 673.613066][T25344] bridge0: port 4(veth0) entered disabled state [ 673.613237][T25344] veth0: entered allmulticast mode [ 673.643223][T25344] veth0: entered promiscuous mode [ 673.651393][T25344] bridge0: port 4(veth0) entered blocking state [ 673.651680][T25344] bridge0: port 4(veth0) entered forwarding state [ 673.923467][T25372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5202'. [ 673.923498][T25372] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5202'. [ 673.977172][T25371] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.011716][T25371] bridge_slave_0 (unregistering): left allmulticast mode [ 674.011752][T25371] bridge_slave_0 (unregistering): left promiscuous mode [ 674.011873][T25371] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.055521][T25376] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5203'. [ 674.055789][T25366] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5202'. [ 674.079111][T25374] veth1_to_bond: entered allmulticast mode [ 674.087064][T25375] bond0: Error: Cannot enslave bond to itself. [ 674.196373][T25370] veth1_to_bond: left allmulticast mode [ 674.218507][T25382] netlink: 'syz.2.5204': attribute type 1 has an invalid length. [ 674.218532][T25382] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5204'. [ 674.249744][T25381] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5204'. [ 674.252165][T25382] openvswitch: netlink: Flow key attribute not present in set flow. [ 674.430282][T25392] netlink: 'syz.2.5208': attribute type 12 has an invalid length. [ 674.462954][T25392] bond6: option primary_reselect: invalid value (255) [ 674.464572][T25392] bond6 (unregistering): Released all slaves [ 676.688448][T25350] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 676.838278][T25412] netlink: 'syz.0.5212': attribute type 1 has an invalid length. [ 676.838306][T25412] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5212'. [ 676.838865][T25412] nbd: couldn't find device at index 767 [ 676.941395][T25412] bond8: entered promiscuous mode [ 676.944525][T25412] bond8: entered allmulticast mode [ 676.946664][T25412] 8021q: adding VLAN 0 to HW filter on device bond8 [ 677.022843][T25427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5214'. [ 677.195042][T25417] netlink: zone id is out of range [ 677.195060][T25417] netlink: zone id is out of range [ 677.195068][T25417] netlink: zone id is out of range [ 677.195078][T25417] netlink: zone id is out of range [ 677.195085][T25417] netlink: zone id is out of range [ 677.195093][T25417] netlink: zone id is out of range [ 677.195101][T25417] netlink: zone id is out of range [ 677.195109][T25417] netlink: zone id is out of range [ 677.195117][T25417] netlink: zone id is out of range [ 677.195126][T25417] netlink: zone id is out of range [ 678.030576][T25477] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 678.105309][T25481] netlink: 'syz.1.5227': attribute type 9 has an invalid length. [ 678.365333][T25492] team0: Device ipvlan0 failed to register rx_handler [ 678.518645][T25503] __nla_validate_parse: 3 callbacks suppressed [ 678.518668][T25503] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5233'. [ 678.529399][T25504] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5233'. [ 678.638937][T25510] netlink: 'syz.3.5237': attribute type 1 has an invalid length. [ 678.638961][T25510] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5237'. [ 678.657567][T25510] netlink: 'syz.3.5237': attribute type 1 has an invalid length. [ 678.657591][T25510] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5237'. [ 679.017390][T25528] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 679.248646][T25535] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5245'. [ 679.248867][T25535] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5245'. [ 679.249059][T25535] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5245'. [ 679.282797][T25535] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5245'. [ 679.283055][T25535] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5245'. [ 679.283247][T25535] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5245'. [ 679.470155][T25551] sctp: [Deprecated]: syz.2.5250 (pid 25551) Use of struct sctp_assoc_value in delayed_ack socket option. [ 679.470155][T25551] Use struct sctp_sack_info instead [ 680.063522][T25570] lo: Caught tx_queue_len zero misconfig [ 680.164231][T25570] veth2: entered allmulticast mode [ 680.718890][T25602] x_tables: unsorted underflow at hook 4 [ 680.761818][T25597] nbd0: detected capacity change from 0 to 274877906944 [ 680.764046][T20037] block nbd0: Receive control failed (result -32) [ 680.794725][ T1698] block nbd0: Dead connection, failed to find a fallback [ 680.794753][ T1698] block nbd0: shutting down sockets [ 680.794848][ T1698] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.794961][ T1698] Buffer I/O error on dev nbd0, logical block 0, async page read [ 680.798357][ T1698] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.798395][ T1698] Buffer I/O error on dev nbd0, logical block 0, async page read [ 680.801115][ T1698] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.801201][ T1698] Buffer I/O error on dev nbd0, logical block 0, async page read [ 680.801568][ T1698] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.801640][ T1698] Buffer I/O error on dev nbd0, logical block 0, async page read [ 680.804992][ T1698] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.805076][ T1698] Buffer I/O error on dev nbd0, logical block 0, async page read [ 680.806827][ T1698] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.806910][ T1698] Buffer I/O error on dev nbd0, logical block 0, async page read [ 680.809445][ T1698] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.809522][ T1698] Buffer I/O error on dev nbd0, logical block 0, async page read [ 680.812719][ T1698] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.812812][ T1698] Buffer I/O error on dev nbd0, logical block 0, async page read [ 680.814875][T25605] ldm_validate_partition_table(): Disk read failed. [ 680.815266][ T1698] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.815353][ T1698] Buffer I/O error on dev nbd0, logical block 0, async page read [ 680.823099][ T1698] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.823193][ T1698] Buffer I/O error on dev nbd0, logical block 0, async page read [ 680.831982][T25605] Dev nbd0: unable to read RDB block 0 [ 680.836752][T25605] nbd0: unable to read partition table [ 681.015556][T25605] ldm_validate_partition_table(): Disk read failed. [ 681.015970][T25605] Dev nbd0: unable to read RDB block 0 [ 681.016511][T25605] nbd0: unable to read partition table [ 681.090420][T25605] ldm_validate_partition_table(): Disk read failed. [ 681.092487][T25605] Dev nbd0: unable to read RDB block 0 [ 681.096584][T25605] nbd0: unable to read partition table [ 681.131946][T25605] ldm_validate_partition_table(): Disk read failed. [ 681.132449][T25605] Dev nbd0: unable to read RDB block 0 [ 681.133031][T25605] nbd0: unable to read partition table [ 682.043473][T25656] x_tables: duplicate underflow at hook 2 [ 682.203795][T25655] bridge0: entered promiscuous mode [ 682.321844][T25676] net_ratelimit: 23 callbacks suppressed [ 682.321870][T25676] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 683.259979][T25720] syzkaller1: entered promiscuous mode [ 683.260005][T25720] syzkaller1: entered allmulticast mode [ 683.666016][T25753] ip_tables: iptables: counters copy to user failed while replacing table [ 683.753339][T25746] bond8: Removing last arp target with arp_interval on [ 683.791263][T25759] __nla_validate_parse: 67 callbacks suppressed [ 683.791285][T25759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5296'. [ 683.938873][T25759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5296'. [ 684.507391][T25802] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 684.524778][T25802] bond6 (unregistering): Released all slaves [ 684.618076][T25808] netlink: 'syz.1.5308': attribute type 1 has an invalid length. [ 684.618322][T25806] bond0: (slave bond_slave_0): Releasing backup interface [ 684.661397][T25806] bond0: (slave bond_slave_1): Releasing backup interface [ 684.690895][T25810] x_tables: duplicate underflow at hook 1 [ 684.718219][T25806] team0: Port device team_slave_0 removed [ 684.747564][T25806] team0: Port device team_slave_1 removed [ 684.789114][T25806] bond1: (slave geneve2): Releasing active interface [ 684.828940][T25806] bond4: (slave geneve3): Releasing active interface [ 684.841232][T13041] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 685.347980][T18752] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xa [ 685.452186][T25842] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5314'. [ 685.528545][T25842] xt_CT: No such helper "snmp_trap" [ 685.546394][T25860] netlink: 'syz.4.5317': attribute type 1 has an invalid length. [ 685.548625][T25850] bond9: entered promiscuous mode [ 685.548650][T25850] bond9: entered allmulticast mode [ 685.575428][T25859] bond9: left allmulticast mode [ 685.598776][T25859] 8021q: adding VLAN 0 to HW filter on device bond9 [ 685.678034][T25872] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5317'. [ 685.830618][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 685.864974][T25850] syzkaller1: left promiscuous mode [ 685.865003][T25850] syzkaller1: left allmulticast mode [ 686.046700][T25889] syzkaller0: entered promiscuous mode [ 686.046729][T25889] syzkaller0: entered allmulticast mode [ 686.152641][ C0] TC_ACT_REPEAT abuse ? [ 686.153555][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.200464][T25893] syzkaller0: entered promiscuous mode [ 686.200495][T25893] syzkaller0: entered allmulticast mode [ 686.565102][T25906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5328'. [ 686.583679][T25908] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.5329'. [ 686.621085][T25909] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5328'. [ 688.589085][T25906] ip6gre2: entered promiscuous mode [ 688.589111][T25906] ip6gre2: entered allmulticast mode [ 688.608027][T25908] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 688.637302][T25910] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 688.944373][T25933] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5335'. [ 688.973319][T25933] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 689.138946][T25946] netlink: 'syz.1.5341': attribute type 1 has an invalid length. [ 689.138971][T25946] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5341'. [ 689.595191][T25966] netlink: 'syz.2.5349': attribute type 1 has an invalid length. [ 689.595915][T25965] netlink: 'syz.2.5349': attribute type 1 has an invalid length. [ 689.674547][T25965] bond6: (slave veth0_to_bond): making interface the new active one [ 689.703919][T25965] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 689.720098][T25966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5349'. [ 689.789890][T25968] syzkaller1: entered promiscuous mode [ 689.789918][T25968] syzkaller1: entered allmulticast mode [ 690.045432][T25991] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5358'. [ 690.088061][T25991] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5358'. [ 690.105692][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.111010][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.111796][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.115117][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.138242][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.138577][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.142099][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.164806][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.166050][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.181251][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.181656][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.181934][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.182218][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.183663][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.183959][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.184216][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.184525][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.184787][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.185035][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.185471][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.186434][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.186694][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.186976][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.188573][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.188851][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.197834][T25997] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5357'. [ 690.202811][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.209475][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.251198][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.255545][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.261116][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.262901][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.273526][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.274396][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.284625][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.311114][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.318621][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.321704][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.332766][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.364979][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.365681][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.366478][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.370248][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.388709][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.416642][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.437819][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.446152][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.448074][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.458390][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.466008][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.488187][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.491774][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.496840][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.513865][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.514197][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.514460][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.514739][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.521863][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.557172][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.557512][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.560739][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.574639][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.593715][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.594099][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.594396][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.600050][T25996] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 690.653226][T26006] IPVS: length: 152 != 24 [ 691.279847][T26050] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5371'. [ 691.304541][T26050] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5371'. [ 691.384890][T26052] openvswitch: netlink: nsh attr 0 has unexpected len 94 expected 0 [ 691.471413][T26057] netlink: 'syz.2.5374': attribute type 1 has an invalid length. [ 691.555472][T26057] 8021q: adding VLAN 0 to HW filter on device bond7 [ 691.614648][T26057] bond7: (slave geneve4): making interface the new active one [ 691.618700][T26057] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 691.954774][T26078] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5381'. [ 692.052789][T26092] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.328740][T26108] vlan1: left allmulticast mode [ 692.328774][T26108] veth0_vlan: left allmulticast mode [ 692.552039][T25776] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 692.589570][T26123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5392'. [ 692.589615][T26123] netlink: 'syz.0.5392': attribute type 1 has an invalid length. [ 692.678426][T26125] netlink: 'syz.3.5395': attribute type 1 has an invalid length. [ 692.722672][T26129] netlink: 'syz.0.5393': attribute type 21 has an invalid length. [ 692.722907][T26128] netlink: 'syz.0.5393': attribute type 21 has an invalid length. [ 692.748680][T26130] netlink: 'syz.1.5394': attribute type 1 has an invalid length. [ 692.787594][T26130] 8021q: adding VLAN 0 to HW filter on device bond8 [ 692.821830][T26130] bond4: (slave veth0_to_bond): Releasing backup interface [ 692.854229][T26130] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 692.979828][T26138] ip_tables: iptables: counters copy to user failed while replacing table [ 693.049744][T26142] netlink: 'syz.1.5400': attribute type 1 has an invalid length. [ 693.172215][T26157] Cannot find del_set index 65532 as target [ 693.197684][T26142] 8021q: adding VLAN 0 to HW filter on device bond9 [ 693.414272][T26168] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 693.452601][T26168] bond10: (slave lo): Enslaving as an active interface with an up link [ 693.482761][T26168] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 693.651242][T26180] netlink: 'syz.1.5409': attribute type 1 has an invalid length. [ 693.704918][T26182] pimreg: entered allmulticast mode [ 693.848522][T26184] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 693.848922][T26184] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 693.868978][T26184] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 693.879203][T26184] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 693.879613][T26184] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 693.880124][T26184] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 693.963843][T26186] __nla_validate_parse: 2 callbacks suppressed [ 693.963867][T26186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5412'. [ 693.986637][T26184] net_ratelimit: 57 callbacks suppressed [ 693.986660][T26184] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 693.987106][T26184] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 694.154713][ C0] TC_ACT_REPEAT abuse ? [ 694.272171][T26191] macvlan1: left promiscuous mode [ 694.284592][T26191] veth1_macvtap: entered promiscuous mode [ 694.284950][T26191] macsec0: left promiscuous mode [ 694.306301][T26191] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 694.344229][T26191] 8021q: adding VLAN 0 to HW filter on device bond1 [ 694.421169][T26191] bond2: left promiscuous mode [ 694.427475][T26191] bond3: left promiscuous mode [ 694.442980][T26191] geneve2: left promiscuous mode [ 694.462889][T26191] gretap1: left promiscuous mode [ 694.482463][T26191] 8021q: adding VLAN 0 to HW filter on device bond5 [ 694.515751][T26191] bond6: left promiscuous mode [ 694.515777][T26191] ip6gre1: left promiscuous mode [ 694.535234][T26191] 8021q: adding VLAN 0 to HW filter on device bond7 [ 694.542957][T26191] ip6gre2: left promiscuous mode [ 694.562578][T26191] 8021q: adding VLAN 0 to HW filter on device bond10 [ 694.589749][T26210] netlink: 'syz.4.5415': attribute type 1 has an invalid length. [ 694.645221][T24233] bond8: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 694.682211][T24233] bond8: (slave veth0_to_bond): making interface the new active one [ 694.702802][T24233] bond8: active interface up! [ 694.775857][T18755] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 694.878121][T26206] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5415'. [ 694.913611][T26225] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5418'. [ 694.940095][T26211] bond10: (slave geneve4): making interface the new active one [ 694.941313][T26211] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 694.945822][T26219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5417'. [ 694.959384][T25777] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 694.962369][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 695.041801][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 695.111318][ C0] TC_ACT_REPEAT abuse ? [ 695.383676][T26244] openvswitch: netlink: Message has 70 unknown bytes. [ 695.383712][T26244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 695.388022][T26244] tipc: Started in network mode [ 695.388055][T26244] tipc: Node identity ac14140f, cluster identity 4711 [ 695.388311][T26244] tipc: New replicast peer: 255.255.255.255 [ 695.389039][T26244] tipc: Enabled bearer , priority 10 [ 695.635920][T26248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5424'. [ 695.664160][T26254] gre0: Caught tx_queue_len zero misconfig [ 695.946316][T26274] netlink: 'syz.0.5430': attribute type 4 has an invalid length. [ 695.973315][T26272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5430'. [ 695.973339][T26272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5430'. [ 696.108060][T26277] syzkaller1: entered promiscuous mode [ 696.108086][T26277] syzkaller1: entered allmulticast mode [ 696.259400][T26293] ipt_REJECT: ECHOREPLY no longer supported. [ 696.499610][T13041] tipc: Node number set to 2886997007 [ 696.507099][T26307] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 696.514035][T26307] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 697.067579][T26327] netlink: zone id is out of range [ 697.067600][T26327] netlink: zone id is out of range [ 697.067629][T26327] netlink: zone id is out of range [ 697.067640][T26327] netlink: zone id is out of range [ 697.117198][T26326] validate_nla: 4 callbacks suppressed [ 697.117223][T26326] netlink: 'syz.4.5446': attribute type 1 has an invalid length. [ 697.186071][T26341] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 697.220415][T26326] bond11: entered promiscuous mode [ 697.222447][T26326] 8021q: adding VLAN 0 to HW filter on device bond11 [ 697.654786][T26354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5453'. [ 698.064793][T26375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5460'. [ 698.485499][T26399] Cannot find del_set index 4 as target [ 698.534073][T26402] sctp: [Deprecated]: syz.4.5471 (pid 26402) Use of int in max_burst socket option. [ 698.534073][T26402] Use struct sctp_assoc_value instead [ 698.573652][T26403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5470'. [ 698.806114][T26421] netlink: 'syz.2.5477': attribute type 2 has an invalid length. [ 698.880065][T26426] tls_set_device_offload: netdev not found [ 698.949484][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 698.992496][T26431] netlink: 'syz.1.5481': attribute type 4 has an invalid length. [ 699.218955][T26442] __nla_validate_parse: 6 callbacks suppressed [ 699.218978][T26442] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5488'. [ 699.219067][T26442] veth0: Caught tx_queue_len zero misconfig [ 699.364241][T26446] xt_CT: No such helper "snmp_trap" [ 699.498851][T26450] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5490'. [ 699.587337][T26458] net_ratelimit: 4 callbacks suppressed [ 699.587361][T26458] ip_tables: iptables: counters copy to user failed while replacing table [ 699.777546][T26471] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 700.023154][T26480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5498'. [ 700.023195][T26480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5498'. [ 700.360226][T26495] netlink: 'syz.3.5501': attribute type 16 has an invalid length. [ 700.360257][T26495] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5501'. [ 700.521136][T26498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5503'. [ 700.634021][T26501] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 700.822361][T26512] netlink: 1744 bytes leftover after parsing attributes in process `syz.3.5506'. [ 700.905395][T26517] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5507'. [ 700.922011][T26518] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5507'. [ 700.995660][T26520] sch_fq: defrate 0 ignored. [ 701.256107][T26537] netlink: 'syz.4.5516': attribute type 4 has an invalid length. [ 701.268234][T26541] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5515'. [ 701.871986][T26566] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 702.165651][T26577] bond10: entered allmulticast mode [ 702.166147][T26577] 8021q: adding VLAN 0 to HW filter on device bond10 [ 702.614510][T26600] h: entered promiscuous mode [ 704.137780][T26690] ieee802154 phy0 wpan0: encryption failed: -90 [ 704.237380][T26695] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 704.537589][T26705] __nla_validate_parse: 11 callbacks suppressed [ 704.537623][T26705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5566'. [ 704.537644][T26705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5566'. [ 704.664914][T26709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5568'. [ 704.665604][T26709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5568'. [ 705.524713][T26761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 705.525549][T26760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 706.282519][T26801] netlink: 'syz.1.5586': attribute type 12 has an invalid length. [ 706.437319][T26811] netlink: 'syz.1.5591': attribute type 10 has an invalid length. [ 706.437345][T26811] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5591'. [ 706.572427][T26811] veth1_vlan (unregistering): left allmulticast mode [ 706.650561][T26811] bond0: (slave macvlan1): Releasing backup interface [ 707.514775][T26859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5598'. [ 707.551893][T26859] netlink: 'syz.3.5598': attribute type 25 has an invalid length. [ 707.571537][T26864] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 707.677446][T26867] xt_hashlimit: size too large, truncated to 1048576 [ 707.909354][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 708.028954][T26889] netlink: 'syz.0.5606': attribute type 64 has an invalid length. [ 708.078385][T26889] netlink: 'syz.0.5606': attribute type 29 has an invalid length. [ 708.107961][T25776] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.108038][T25776] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.319258][T25777] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 708.598558][T26916] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5613'. [ 708.910215][T26930] tipc: Enabled bearer , priority 10 [ 709.112583][T26932] ip_tables: iptables: counters copy to user failed while replacing table [ 709.201019][T26953] netlink: 'syz.4.5622': attribute type 1 has an invalid length. [ 709.208437][T26953] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5622'. [ 709.460753][T26961] syzkaller0: entered promiscuous mode [ 709.460835][T26961] syzkaller0: entered allmulticast mode [ 709.565497][T26970] netlink: 'syz.0.5627': attribute type 1 has an invalid length. [ 709.937258][T26991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5632'. [ 710.111715][T13025] tipc: Node number set to 1253427889 [ 710.205369][T27005] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 710.235331][T27005] xt_hashlimit: size too large, truncated to 1048576 [ 710.308956][T27012] syzkaller0: entered promiscuous mode [ 710.308994][T27012] syzkaller0: entered allmulticast mode [ 710.457028][T27014] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5637'. [ 710.492125][T27014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5637'. [ 710.875241][T27032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5642'. [ 711.091108][T27036] bridge0: Caught tx_queue_len zero misconfig [ 711.302663][T27061] ip6tnl0: Caught tx_queue_len zero misconfig [ 711.488525][T27069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5649'. [ 711.723565][T27083] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5653'. [ 711.723600][T27083] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5653'. [ 711.786612][T27087] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5654'. [ 711.981655][T27083] batman_adv: batadv0: Adding interface: syz_tun [ 711.981682][T27083] batman_adv: batadv0: Interface activated: syz_tun [ 712.257056][T27108] xt_TCPMSS: Only works on TCP SYN packets [ 712.510054][T27120] netlink: 'syz.4.5660': attribute type 11 has an invalid length. [ 712.510082][T27120] netlink: 'syz.4.5660': attribute type 4 has an invalid length. [ 712.510098][T27120] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5660'. [ 713.433566][T27154] syzkaller1: left promiscuous mode [ 713.433589][T27154] syzkaller1: left allmulticast mode [ 713.454936][T27153] tipc: Enabling of bearer rejected, failed to enable media [ 713.981838][T27177] syzkaller0: entered promiscuous mode [ 713.981863][T27177] syzkaller0: entered allmulticast mode [ 714.226050][T27198] block nbd0: reconnected socket [ 714.332474][T27202] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5679'. [ 714.527980][T27206] syzkaller1: entered promiscuous mode [ 714.528007][T27206] syzkaller1: entered allmulticast mode [ 714.784552][T27226] FAULT_INJECTION: forcing a failure. [ 714.784552][T27226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 714.784590][T27226] CPU: 1 UID: 0 PID: 27226 Comm: syz.4.5686 Not tainted syzkaller #0 PREEMPT(full) [ 714.784626][T27226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 714.784640][T27226] Call Trace: [ 714.784649][T27226] [ 714.784659][T27226] dump_stack_lvl+0xe8/0x150 [ 714.784704][T27226] should_fail_ex+0x3eb/0x540 [ 714.784745][T27226] _copy_to_iter+0x5a1/0x17e0 [ 714.784789][T27226] ? __pfx__copy_to_iter+0x10/0x10 [ 714.784820][T27226] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 714.784944][T27226] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 714.784974][T27226] __skb_datagram_iter+0xf8/0x980 [ 714.785045][T27226] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 714.785084][T27226] skb_copy_datagram_iter+0xb5/0x240 [ 714.785117][T27226] netlink_recvmsg+0x2c8/0xa70 [ 714.785151][T27226] ? __pfx_netlink_recvmsg+0x10/0x10 [ 714.785195][T27226] ? __lock_acquire+0x747/0x2de0 [ 714.785240][T27226] ? __pfx_netlink_recvmsg+0x10/0x10 [ 714.785276][T27226] sock_recvmsg_nosec+0x130/0x170 [ 714.785336][T27226] ____sys_recvmsg+0x466/0x530 [ 714.785373][T27226] ? __pfx_____sys_recvmsg+0x10/0x10 [ 714.785416][T27226] ? import_iovec+0x73/0xa0 [ 714.785447][T27226] ___sys_recvmsg+0x213/0x5a0 [ 714.785480][T27226] ? __pfx____sys_recvmsg+0x10/0x10 [ 714.785512][T27226] ? lock_acquire+0x115/0x350 [ 714.785586][T27226] do_recvmmsg+0x31a/0x800 [ 714.785627][T27226] ? __pfx_do_recvmmsg+0x10/0x10 [ 714.785667][T27226] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 714.785704][T27226] ? fdget+0x1ac/0x250 [ 714.785744][T27226] __x64_sys_recvmmsg+0x198/0x250 [ 714.785775][T27226] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 714.785816][T27226] do_syscall_64+0x166/0x520 [ 714.785844][T27226] ? trace_irq_disable+0x3b/0x140 [ 714.785876][T27226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.785900][T27226] ? clear_bhb_loop+0x70/0xc0 [ 714.785928][T27226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.785951][T27226] RIP: 0033:0x7f3b31da8f19 [ 714.785973][T27226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.785991][T27226] RSP: 002b:00007f3b32c7c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 714.786016][T27226] RAX: ffffffffffffffda RBX: 00007f3b32025fa0 RCX: 00007f3b31da8f19 [ 714.786032][T27226] RDX: 0000000000000003 RSI: 0000200000000340 RDI: 0000000000000003 [ 714.786047][T27226] RBP: 00007f3b32c7c090 R08: 0000000000000000 R09: 0000000000000000 [ 714.786061][T27226] R10: 0000000000010020 R11: 0000000000000246 R12: 0000000000000001 [ 714.786075][T27226] R13: 00007f3b32026038 R14: 00007f3b32025fa0 R15: 00007fff5d8b95d8 [ 714.786112][T27226] [ 715.067711][T20037] block nbd0: Receive control failed (result -32) [ 715.383037][T27241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 715.414791][T27236] syzkaller0: entered promiscuous mode [ 715.414816][T27236] syzkaller0: entered allmulticast mode [ 715.449966][T27243] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5692'. [ 715.503596][T27249] netlink: 'syz.2.5691': attribute type 1 has an invalid length. [ 715.664034][T27247] syzkaller1: entered promiscuous mode [ 715.664060][T27247] syzkaller1: entered allmulticast mode [ 715.665684][T27249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5691'. [ 715.900061][T27262] bond0: Removing last arp target with arp_interval on [ 715.924914][T27274] openvswitch: netlink: Key type 31 is not supported [ 716.073447][T27268] netlink: 'syz.3.5694': attribute type 5 has an invalid length. [ 716.096734][T27268] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.468050][T27304] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 716.473271][T27305] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 716.610359][T27309] netlink: 'syz.2.5708': attribute type 1 has an invalid length. [ 716.616148][T27308] netlink: 'syz.2.5708': attribute type 1 has an invalid length. [ 716.764205][T27309] bond8: entered promiscuous mode [ 716.766288][T27309] 8021q: adding VLAN 0 to HW filter on device bond8 [ 716.848213][T27308] bond8: (slave bridge6): making interface the new active one [ 716.848241][T27308] bridge6: entered promiscuous mode [ 716.864033][T27308] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 716.907096][T27332] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 716.919017][T18755] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 717.102819][T27338] netlink: 'syz.0.5715': attribute type 12 has an invalid length. [ 717.295323][T27360] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5713'. [ 717.553193][T27368] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 717.553428][T27368] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 717.768608][T27379] netlink: 'syz.3.5721': attribute type 1 has an invalid length. [ 717.864703][T27389] netlink: 'syz.0.5724': attribute type 1 has an invalid length. [ 717.933232][T27379] 8021q: adding VLAN 0 to HW filter on device bond7 [ 717.934583][T27392] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5724'. [ 718.111651][T27389] 8021q: adding VLAN 0 to HW filter on device bond11 [ 718.182052][T27388] bond7: (slave geneve2): making interface the new active one [ 718.187705][T27388] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 718.220189][T27392] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.238264][T27392] bond11: (slave team0): Enslaving as an active interface with a down link [ 718.251350][T27401] netlink: 'syz.2.5725': attribute type 4 has an invalid length. [ 718.483524][T27407] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5729'. [ 718.794044][T27418] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5731'. [ 718.862731][T27420] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 718.911186][T27423] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5733'. [ 718.937489][T27420] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 718.957953][T27424] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 718.997639][T27420] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 719.203518][T27437] bridge_slave_1: entered promiscuous mode [ 719.273689][T27446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5736'. [ 719.307488][T27447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5737'. [ 719.406313][T27452] pim6reg: entered allmulticast mode [ 719.831490][T27471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5744'. [ 720.172871][T27488] syzkaller0: entered promiscuous mode [ 720.172897][T27488] syzkaller0: entered allmulticast mode [ 720.745333][T27527] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 720.745576][T27517] 8021q: VLANs not supported on syzkaller0 [ 720.776505][T27517] syzkaller0: left promiscuous mode [ 720.776531][T27517] syzkaller0: left allmulticast mode [ 720.933473][T27530] syzkaller0: entered promiscuous mode [ 720.933624][T27530] syzkaller0: entered allmulticast mode [ 721.025745][T27538] __nla_validate_parse: 1 callbacks suppressed [ 721.025762][T27538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5764'. [ 721.304274][T27556] netlink: 'syz.3.5770': attribute type 11 has an invalid length. [ 721.349952][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 721.688647][T27575] bond12 (unregistering): Released all slaves [ 721.858622][T27578] netlink: 'syz.4.5776': attribute type 2 has an invalid length. [ 721.892386][T27578] !;: entered promiscuous mode [ 721.932517][T27582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5778'. [ 721.990960][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 722.032449][T27586] addrtype_mt_checkentry_v1: 31 callbacks suppressed [ 722.032473][T27586] xt_addrtype: ipv6 does not support BROADCAST matching [ 722.035568][T27587] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5780'. [ 722.255853][T27604] openvswitch: netlink: Flow actions attr not present in new flow. [ 722.353703][T27609] netlink: 'syz.0.5787': attribute type 1 has an invalid length. [ 722.353730][T27609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5787'. [ 722.803476][T27637] tipc: Enabling of bearer rejected, no device for the media [ 723.735557][T27677] scsi_nl_rcv_msg: discarding partial skb [ 723.788048][T27685] netlink: 'syz.1.5813': attribute type 1 has an invalid length. [ 723.788075][T27685] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5813'. [ 723.885644][ T5644] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 723.901024][ T5644] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 723.902899][ T5644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 723.925939][ T5644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 723.929899][ T5644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 723.948288][T20037] [ 723.950706][T20037] ====================================================== [ 723.957800][T20037] WARNING: possible circular locking dependency detected [ 723.964987][T20037] syzkaller #0 Not tainted [ 723.969445][T20037] ------------------------------------------------------ [ 723.976497][T20037] kworker/u9:0/20037 is trying to acquire lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 723.982863][T20037] ffff88801d28d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x539/0x6b0 [ 723.993533][T20037] [ 723.993533][T20037] but task is already holding lock: [ 724.000932][T20037] ffff88801d28d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x510 [ 724.010400][T20037] [ 724.010400][T20037] which lock already depends on the new lock. [ 724.010400][T20037] [ 724.020843][T20037] [ 724.020843][T20037] the existing dependency chain (in reverse order) is: [ 724.029889][T20037] [ 724.029889][T20037] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 724.038034][T20037] down_write+0x91/0x200 [ 724.042865][T20037] kernfs_add_one+0x41/0x510 [ 724.048032][T20037] kernfs_create_dir_ns+0x18c/0x220 [ 724.053796][T20037] internal_create_group+0x440/0x1180 [ 724.059821][T20037] cpuhp_invoke_callback+0x434/0x810 [ 724.065691][T20037] cpuhp_issue_call+0x3f0/0x750 [ 724.071123][T20037] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 724.077760][T20037] __cpuhp_setup_state+0x3f/0x60 [ 724.083273][T20037] do_one_initcall+0x250/0x870 [ 724.088587][T20037] do_initcall_level+0x10a/0x1a0 [ 724.094220][T20037] do_initcalls+0x59/0xa0 [ 724.099100][T20037] kernel_init_freeable+0x29d/0x3e0 [ 724.104866][T20037] kernel_init+0x22/0x1d0 [ 724.109745][T20037] ret_from_fork+0x514/0xb70 [ 724.114919][T20037] ret_from_fork_asm+0x1a/0x30 [ 724.120239][T20037] [ 724.120239][T20037] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 724.128096][T20037] [ 724.128096][T20037] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 724.135857][T20037] cpus_read_lock+0x3d/0x160 [ 724.141008][T20037] static_key_slow_inc+0x12/0x30 [ 724.146622][T20037] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 724.152977][T20037] nbd_genl_foreach_sock+0x265/0x450 [ 724.158812][T20037] nbd_genl_reconfigure+0xbbb/0x1040 [ 724.164642][T20037] genl_family_rcv_msg_doit+0x233/0x340 [ 724.170736][T20037] genl_rcv_msg+0x614/0x7a0 [ 724.175783][T20037] netlink_rcv_skb+0x226/0x4a0 [ 724.181091][T20037] genl_rcv+0x28/0x40 [ 724.185618][T20037] netlink_unicast+0x8ef/0xa80 [ 724.190929][T20037] netlink_sendmsg+0x7f0/0xb20 [ 724.196247][T20037] sock_sendmsg_nosec+0x14e/0x190 [ 724.201852][T20037] ____sys_sendmsg+0x54e/0x850 [ 724.207195][T20037] ___sys_sendmsg+0x2a5/0x360 [ 724.212419][T20037] __x64_sys_sendmsg+0x1b1/0x290 [ 724.217906][T20037] do_syscall_64+0x166/0x520 [ 724.223047][T20037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.229501][T20037] [ 724.229501][T20037] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 724.237171][T20037] __mutex_lock+0x197/0x15a0 [ 724.242320][T20037] nbd_queue_rq+0x373/0xff0 [ 724.247382][T20037] blk_mq_dispatch_rq_list+0x499/0x1990 [ 724.253602][T20037] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 724.260571][T20037] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 724.267105][T20037] blk_mq_run_work_fn+0x167/0x2f0 [ 724.272686][T20037] process_scheduled_works+0xc3d/0x1630 [ 724.278787][T20037] worker_thread+0xa47/0xfb0 [ 724.283932][T20037] kthread+0x38b/0x480 [ 724.288549][T20037] ret_from_fork+0x514/0xb70 [ 724.293682][T20037] ret_from_fork_asm+0x1a/0x30 [ 724.299560][T20037] [ 724.299560][T20037] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 724.306813][T20037] __mutex_lock+0x197/0x15a0 [ 724.311968][T20037] nbd_queue_rq+0xc1/0xff0 [ 724.317043][T20037] blk_mq_dispatch_rq_list+0x499/0x1990 [ 724.323160][T20037] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 724.330058][T20037] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 724.336628][T20037] blk_mq_run_work_fn+0x167/0x2f0 [ 724.342224][T20037] process_scheduled_works+0xc3d/0x1630 [ 724.348332][T20037] worker_thread+0xa47/0xfb0 [ 724.353488][T20037] kthread+0x38b/0x480 [ 724.358109][T20037] ret_from_fork+0x514/0xb70 [ 724.363253][T20037] ret_from_fork_asm+0x1a/0x30 [ 724.368563][T20037] [ 724.368563][T20037] -> #4 (set->srcu){.+.+}-{0:0}: [ 724.375717][T20037] __synchronize_srcu+0xca/0x2f0 [ 724.381211][T20037] elevator_switch+0x1e8/0x7b0 [ 724.386695][T20037] elevator_change+0x2fa/0x480 [ 724.392010][T20037] elevator_set_default+0x375/0x440 [ 724.397804][T20037] blk_register_queue+0x404/0x4f0 [ 724.403494][T20037] __add_disk+0x6b8/0xdb0 [ 724.408446][T20037] add_disk_fwnode+0x100/0x3a0 [ 724.413762][T20037] nbd_dev_add+0x733/0xb60 [ 724.418761][T20037] nbd_init+0x168/0x1f0 [ 724.423584][T20037] do_one_initcall+0x250/0x870 [ 724.428901][T20037] do_initcall_level+0x10a/0x1a0 [ 724.434389][T20037] do_initcalls+0x59/0xa0 [ 724.439270][T20037] kernel_init_freeable+0x29d/0x3e0 [ 724.445039][T20037] kernel_init+0x22/0x1d0 [ 724.449917][T20037] ret_from_fork+0x514/0xb70 [ 724.455059][T20037] ret_from_fork_asm+0x1a/0x30 [ 724.460369][T20037] [ 724.460369][T20037] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 724.468222][T20037] __mutex_lock+0x197/0x15a0 [ 724.473375][T20037] elevator_change+0x1af/0x480 [ 724.478711][T20037] elevator_set_none+0xb5/0x140 [ 724.484154][T20037] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 724.490519][T20037] nbd_start_device+0x189/0xb30 [ 724.495926][T20037] nbd_genl_connect+0x167d/0x1cd0 [ 724.501517][T20037] genl_family_rcv_msg_doit+0x233/0x340 [ 724.507737][T20037] genl_rcv_msg+0x614/0x7a0 [ 724.512789][T20037] netlink_rcv_skb+0x226/0x4a0 [ 724.518198][T20037] genl_rcv+0x28/0x40 [ 724.522731][T20037] netlink_unicast+0x8ef/0xa80 [ 724.528049][T20037] netlink_sendmsg+0x7f0/0xb20 [ 724.533372][T20037] sock_sendmsg_nosec+0x14e/0x190 [ 724.538957][T20037] ____sys_sendmsg+0x54e/0x850 [ 724.544269][T20037] ___sys_sendmsg+0x2a5/0x360 [ 724.549535][T20037] __x64_sys_sendmsg+0x1b1/0x290 [ 724.555027][T20037] do_syscall_64+0x166/0x520 [ 724.560177][T20037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.566629][T20037] [ 724.566629][T20037] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 724.575286][T20037] blk_alloc_queue+0x544/0x690 [ 724.580620][T20037] __blk_mq_alloc_disk+0x194/0x390 [ 724.586286][T20037] nbd_dev_add+0x494/0xb60 [ 724.591254][T20037] nbd_init+0x168/0x1f0 [ 724.595970][T20037] do_one_initcall+0x250/0x870 [ 724.601308][T20037] do_initcall_level+0x10a/0x1a0 [ 724.606801][T20037] do_initcalls+0x59/0xa0 [ 724.611680][T20037] kernel_init_freeable+0x29d/0x3e0 [ 724.617452][T20037] kernel_init+0x22/0x1d0 [ 724.622332][T20037] ret_from_fork+0x514/0xb70 [ 724.627470][T20037] ret_from_fork_asm+0x1a/0x30 [ 724.632786][T20037] [ 724.632786][T20037] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 724.640038][T20037] fs_reclaim_acquire+0x71/0x100 [ 724.645540][T20037] kmem_cache_alloc_noprof+0x5f/0x600 [ 724.651460][T20037] __kernfs_iattrs+0xdd/0x380 [ 724.656681][T20037] kernfs_iop_setattr+0xe6/0x3f0 [ 724.662189][T20037] notify_change+0xbba/0xea0 [ 724.667325][T20037] do_truncate+0x1c2/0x250 [ 724.672298][T20037] path_openat+0x18a6/0x20f0 [ 724.677519][T20037] do_file_open+0x23e/0x4a0 [ 724.682573][T20037] do_sys_openat2+0x115/0x200 [ 724.687801][T20037] __x64_sys_openat+0x138/0x170 [ 724.693198][T20037] do_syscall_64+0x166/0x520 [ 724.698339][T20037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.704785][T20037] [ 724.704785][T20037] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 724.713349][T20037] __lock_acquire+0x164c/0x2de0 [ 724.718763][T20037] lock_acquire+0x115/0x350 [ 724.723829][T20037] down_write+0x91/0x200 [ 724.728630][T20037] kernfs_link_sibling+0x539/0x6b0 [ 724.734311][T20037] kernfs_add_one+0x30a/0x510 [ 724.739566][T20037] kernfs_create_dir_ns+0x18c/0x220 [ 724.745325][T20037] sysfs_create_dir_ns+0x12f/0x2a0 [ 724.751016][T20037] kobject_add_internal+0x622/0xcd0 [ 724.756921][T20037] kobject_add+0x163/0x240 [ 724.761879][T20037] device_add+0x3fa/0xb80 [ 724.766836][T20037] hci_conn_add_sysfs+0xd5/0x210 [ 724.772384][T20037] hci_conn_complete_evt+0x8a8/0x1350 [ 724.778325][T20037] hci_event_packet+0x6cd/0xf10 [ 724.783748][T20037] hci_rx_work+0x2b4/0x1110 [ 724.788864][T20037] process_scheduled_works+0xc3d/0x1630 [ 724.794986][T20037] worker_thread+0xa47/0xfb0 [ 724.800137][T20037] kthread+0x38b/0x480 [ 724.804756][T20037] ret_from_fork+0x514/0xb70 [ 724.809897][T20037] ret_from_fork_asm+0x1a/0x30 [ 724.815207][T20037] [ 724.815207][T20037] other info that might help us debug this: [ 724.815207][T20037] [ 724.825453][T20037] Chain exists of: [ 724.825453][T20037] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 724.825453][T20037] [ 724.840179][T20037] Possible unsafe locking scenario: [ 724.840179][T20037] [ 724.847742][T20037] CPU0 CPU1 [ 724.853126][T20037] ---- ---- [ 724.858563][T20037] lock(&root->kernfs_rwsem); [ 724.863348][T20037] lock(cpuhp_state_mutex); [ 724.870506][T20037] lock(&root->kernfs_rwsem); [ 724.877813][T20037] lock(&root->kernfs_iattr_rwsem); [ 724.883116][T20037] [ 724.883116][T20037] *** DEADLOCK *** [ 724.883116][T20037] [ 724.891312][T20037] locks held by kworker/u9:0/20037: 4, last CPU#0: [ 724.897953][T20037] #0: ffff88807c59c948 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 724.908970][T20037] #1: ffffc9000a4f7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 724.921062][T20037] #2: ffff88807e9740b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 724.930950][T20037] #3: ffff88801d28d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x510 [ 724.940820][T20037] [ 724.940820][T20037] stack backtrace: [ 724.946736][T20037] CPU: 0 UID: 0 PID: 20037 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 724.956302][T20037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 724.966394][T20037] Workqueue: hci0 hci_rx_work [ 724.971114][T20037] Call Trace: [ 724.974417][T20037] [ 724.977399][T20037] dump_stack_lvl+0xe8/0x150 [ 724.982033][T20037] print_circular_bug+0x2e2/0x300 [ 724.987111][T20037] check_noncircular+0x12f/0x150 [ 724.992092][T20037] __lock_acquire+0x164c/0x2de0 [ 724.996983][T20037] ? __lock_acquire+0x747/0x2de0 [ 725.001961][T20037] lock_acquire+0x115/0x350 [ 725.006492][T20037] ? kernfs_link_sibling+0x539/0x6b0 [ 725.011809][T20037] down_write+0x91/0x200 [ 725.016092][T20037] ? kernfs_link_sibling+0x539/0x6b0 [ 725.021413][T20037] ? __pfx_down_write+0x10/0x10 [ 725.026300][T20037] ? kernfs_root+0x1c/0x230 [ 725.030847][T20037] ? kernfs_root+0x1c/0x230 [ 725.035478][T20037] ? kernfs_root+0x1c/0x230 [ 725.040018][T20037] ? kernfs_root+0x1ea/0x230 [ 725.044663][T20037] kernfs_link_sibling+0x539/0x6b0 [ 725.049829][T20037] kernfs_add_one+0x30a/0x510 [ 725.054561][T20037] kernfs_create_dir_ns+0x18c/0x220 [ 725.059794][T20037] sysfs_create_dir_ns+0x12f/0x2a0 [ 725.064962][T20037] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 725.070626][T20037] ? do_raw_spin_unlock+0xf5/0x200 [ 725.075766][T20037] kobject_add_internal+0x622/0xcd0 [ 725.080999][T20037] kobject_add+0x163/0x240 [ 725.085450][T20037] ? __pfx_kobject_add+0x10/0x10 [ 725.090420][T20037] ? get_device_parent+0x366/0x3a0 [ 725.095563][T20037] device_add+0x3fa/0xb80 [ 725.099918][T20037] hci_conn_add_sysfs+0xd5/0x210 [ 725.104932][T20037] hci_conn_complete_evt+0x8a8/0x1350 [ 725.110373][T20037] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 725.116394][T20037] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 725.122234][T20037] ? skb_pull_data+0xf0/0x200 [ 725.126942][T20037] hci_event_packet+0x6cd/0xf10 [ 725.131853][T20037] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 725.137715][T20037] ? __pfx_hci_event_packet+0x10/0x10 [ 725.143154][T20037] ? kcov_remote_start+0x523/0x7e0 [ 725.148338][T20037] ? hci_send_to_monitor+0xdf/0x600 [ 725.153561][T20037] hci_rx_work+0x2b4/0x1110 [ 725.158102][T20037] ? process_scheduled_works+0x97a/0x1630 [ 725.163869][T20037] process_scheduled_works+0xc3d/0x1630 [ 725.169463][T20037] ? __pfx_process_scheduled_works+0x10/0x10 [ 725.175485][T20037] ? assign_work+0x3cf/0x5d0 [ 725.180114][T20037] worker_thread+0xa47/0xfb0 [ 725.184750][T20037] ? __kthread_parkme+0x71/0x1f0 [ 725.189734][T20037] kthread+0x38b/0x480 [ 725.193859][T20037] ? __pfx_worker_thread+0x10/0x10 [ 725.199025][T20037] ? __pfx_kthread+0x10/0x10 [ 725.203689][T20037] ret_from_fork+0x514/0xb70 [ 725.208332][T20037] ? save_fpregs_to_fpstate+0x176/0x200 [ 725.213942][T20037] ? __pfx_ret_from_fork+0x10/0x10 [ 725.219103][T20037] ? __switch_to+0xc78/0x1410 [ 725.223845][T20037] ? __pfx_kthread+0x10/0x10 [ 725.228484][T20037] ret_from_fork_asm+0x1a/0x30 [ 725.233304][T20037] [ 725.239322][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 726.057495][T16942] batman_adv: batadv0: Interface deactivated: syz_tun [ 726.084763][T16942] batman_adv: batadv0: Removing interface: syz_tun [ 726.118329][T24233] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.118369][T24233] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 726.118398][T24233] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.118426][T24233] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 726.225015][T24233] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.225044][T24233] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 726.225063][T24233] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.225083][T24233] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 726.293508][T24233] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.293537][T24233] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 726.293557][T24233] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.293576][T24233] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 726.466929][T24233] pim6reg: left allmulticast mode [ 726.617568][T24233] bond10 (unregistering): (slave geneve4): Releasing active interface [ 726.682895][T24233] bond0 (unregistering): Released all slaves [ 726.685419][T24233] bond1 (unregistering): Released all slaves [ 726.692727][T24233] bond2 (unregistering): Released all slaves [ 726.705428][T24233] bond3 (unregistering): Released all slaves [ 726.727963][T24233] bond4 (unregistering): Released all slaves [ 726.740044][T24233] bond5 (unregistering): Released all slaves [ 726.744435][T24233] bond6 (unregistering): Released all slaves [ 726.748429][T24233] bond7 (unregistering): Released all slaves [ 726.761167][T24233] bond8 (unregistering): Released all slaves [ 726.776975][T24233] bond9 (unregistering): Released all slaves [ 726.788887][T24233] bond10 (unregistering): Released all slaves [ 726.804784][T24233] bond11 (unregistering): Released all slaves [ 727.021496][T24233] !;: left promiscuous mode [ 727.073050][T24233] tipc: Disabling bearer [ 727.073258][T24233] tipc: Left network mode [ 727.188129][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 727.352457][T24233] veth1_macvtap: left promiscuous mode [ 727.352505][T24233] veth0_macvtap: left promiscuous mode [ 727.352583][T24233] veth1_vlan: left promiscuous mode [ 727.352648][T24233] veth0_vlan: left promiscuous mode [ 727.717505][ T5296] 8021q: adding VLAN 0 to HW filter on device eth4 [ 727.866033][T24233] IPVS: stop unused estimator thread 0... [ 727.965666][T24233] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.021016][T24233] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.079027][T24233] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.134580][T24233] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 728.134664][T24233] bridge0: port 3(netdevsim0) entered disabled state [ 728.136794][T24233] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.238905][T24233] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 728.238968][T24233] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 728.238998][T24233] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.239026][T24233] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 728.297794][T24233] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 728.297834][T24233] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 728.297863][T24233] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.297892][T24233] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 728.357110][T24233] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 728.357150][T24233] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 728.357179][T24233] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.357207][T24233] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 728.425207][T24233] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 728.425248][T24233] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 728.425277][T24233] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.425305][T24233] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 728.535639][T24233] veth0: left allmulticast mode [ 728.535667][T24233] veth0: left promiscuous mode [ 728.535827][T24233] bridge0: port 4(veth0) entered disabled state [ 728.537516][T24233] bridge_slave_1: left promiscuous mode [ 728.537665][T24233] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.557797][T24233] bridge_slave_0: left allmulticast mode [ 728.557952][T24233] bridge_slave_0: left promiscuous mode [ 728.558371][T24233] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.595534][T24233] pimreg: left allmulticast mode [ 728.598360][T24233] bridge_slave_1: left allmulticast mode [ 728.598386][T24233] bridge_slave_1: left promiscuous mode [ 728.598542][T24233] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.611607][T24233] bridge_slave_0: left allmulticast mode [ 728.611724][T24233] bridge_slave_0: left promiscuous mode [ 728.613856][T24233] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.656101][T24233] dvmrp1: left allmulticast mode [ 728.656181][T24233] bond5: left allmulticast mode [ 728.967078][T24233] bond7 (unregistering): (slave geneve2): Releasing active interface [ 728.998060][T24233] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 728.998088][T24233] bridge2 (unregistering): left promiscuous mode [ 729.058665][T24233] bond6 (unregistering): (slave .`): Releasing active interface [ 729.071635][T24233] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.073374][T24233] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 729.074800][T24233] .` (unregistering): (slave bond3): Releasing backup interface [ 729.075245][T24233] .` (unregistering): Released all slaves [ 729.078577][T24233] bond1 (unregistering): Released all slaves [ 729.123073][T24233] bond2 (unregistering): Released all slaves [ 729.129032][T24233] bond3 (unregistering): Released all slaves [ 729.147662][T24233] bond4 (unregistering): Released all slaves [ 729.162429][T24233] bond5 (unregistering): Released all slaves [ 729.166703][T24233] bond6 (unregistering): Released all slaves [ 729.175479][T24233] bond0 (unregistering): Released all slaves [ 729.195998][T24233] bond7 (unregistering): Released all slaves [ 729.277731][T24233] bond7 (unregistering): (slave geneve4): Releasing active interface [ 729.305469][T24233] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 729.328703][T24233] bond4 (unregistering): (slave bridge3): Releasing active interface [ 729.363184][T24233] bond8 (unregistering): (slave bridge6): Releasing backup interface [ 729.363212][T24233] bridge6 (unregistering): left promiscuous mode [ 729.391281][T24233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.393195][T24233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 729.394147][T24233] bond0 (unregistering): Released all slaves [ 729.396469][T24233] bond1 (unregistering): Released all slaves [ 729.409063][T24233] bond2 (unregistering): Released all slaves [ 729.431060][T24233] bond3 (unregistering): Released all slaves [ 729.453973][T24233] bond4 (unregistering): Released all slaves [ 729.458161][T24233] bond5 (unregistering): Released all slaves [ 729.473389][T24233] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 729.474374][T24233] bond6 (unregistering): Released all slaves [ 729.496894][T24233] bond7 (unregistering): Released all slaves [ 729.509937][T24233] bond8 (unregistering): Released all slaves [ 729.636083][T24233] : left promiscuous mode [ 729.686781][T24233] tipc: Disabling bearer [ 729.701416][T24233] tipc: Left network mode [ 729.806764][T24233] IPVS: stopping master sync thread 27527 ... [ 729.917411][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3 [ 730.309294][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 730.375781][T24233] hsr_slave_0: left promiscuous mode [ 730.376262][T24233] hsr_slave_1: left promiscuous mode [ 730.391021][T24233] hsr_slave_0: left promiscuous mode [ 730.392261][T24233] hsr_slave_1: left promiscuous mode [ 730.393202][T24233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.393221][T24233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.394719][T24233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.394743][T24233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.442330][T24233] veth1_macvtap: left promiscuous mode [ 730.442364][T24233] veth0_macvtap: left promiscuous mode [ 730.442987][T24233] veth1_macvtap: left promiscuous mode [ 730.443014][T24233] veth0_macvtap: left promiscuous mode [ 730.443098][T24233] veth1_vlan: left promiscuous mode [ 730.443146][T24233] veth0_vlan: left promiscuous mode [ 730.691767][T24233] team0 (unregistering): Port device team_slave_0 removed [ 731.027401][T24233] team0 (unregistering): Port device team_slave_1 removed [ 731.055407][T24233] team0 (unregistering): Port device team_slave_0 removed [ 731.505237][ T5296] 8021q: adding VLAN 0 to HW filter on device eth5 [ 731.541678][T24233] IPVS: stop unused estimator thread 0... [ 731.543130][T24233] IPVS: stop unused estimator thread 0... [ 732.313039][ T5296] 8021q: adding VLAN 0 to HW filter on device eth6 [ 732.590211][ T5296] 8021q: adding VLAN 0 to HW filter on device eth7 [ 732.865339][ T5296] 8021q: adding VLAN 0 to HW filter on device eth8 [ 733.138364][ T5296] 8021q: adding VLAN 0 to HW filter on device eth9 [ 733.413172][ T5296] 8021q: adding VLAN 0 to HW filter on device eth10 [ 733.692539][ T5296] 8021q: adding VLAN 0 to HW filter on device eth12