last executing test programs: 8.55996789s ago: executing program 2 (id=5825): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001800010000000000080000000a370000", @ANYRES32=0x0, @ANYBLOB="00007e307f2b9f07bebbabe6ec88c2966ab9000014000500fe8000000000000400e8ff00000000bb14000100fe8000000000000000000000000000bb"], 0x44}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r2, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580), 0xfffffe46}], 0x1}}, {{&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @empty}, 0x1, 0x4, 0x4, 0x3}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001940)="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", 0x1000}, {&(0x7f00000017c0)="164e781eee18a588d7efc32dc31a606ea0c25424bcd3e58f1cd6a7e5f031967b60175aeb3f6daf1855a03d3c3690f5e53a34842bdcf600979119aca2fd", 0x3d}, {&(0x7f0000001800)="479a6d1e382b5d7ae7bd175e2be252ec6042fa207dcec970707a0217a21a73e5f56bb90b3550b8e866c38040ae2d26", 0x2f}], 0x3, &(0x7f0000001880)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x30}}], 0x2, 0x0) socket(0x1d, 0x1, 0xfffffffb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x20040040) ioctl$SIOCSIFHWADDR(r4, 0x8932, &(0x7f0000000900)={'batadv_slave_1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="07ad0000000000000000010000000000000002410000000000137564703a73797c3100000000"], 0x2c}}, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r7, 0x100, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40894}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008b000000000000004300000008110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf0920000000004055090100000000809500000000000000bf91000000000000b702000003000000850000002a000000b7000000000500009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 8.026986304s ago: executing program 2 (id=5831): sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000001c0)={0xfffffffffffffffc, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES16, @ANYBLOB="000227bd7000ffdbdf2511000000140003800800030022d4000008000300090000001000068004000500080001"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20040011) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000019580)=""/102397, &(0x7f0000000040)=0x18ffd) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000006800010000000000fddbdf250a00000000000000060007000300000008000500", @ANYRES32=r2, @ANYBLOB="1800088014"], 0x40}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) 7.659918581s ago: executing program 2 (id=5833): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0xffff, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000002c0), 0x1006, r1, 0x0, 0xd88d02a0}, 0x38) (async, rerun: 64) r2 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000001c0)={r5, 0x2}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x800}, 0x1c) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @multicast1}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) 7.268155464s ago: executing program 2 (id=5838): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) (async) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x108}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x50, 0x2, 0x3, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x7}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x2}}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x8}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x2}}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c080}, 0x20048011) (async) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 7.071888622s ago: executing program 2 (id=5841): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) unshare(0x6020400) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00') unshare(0x2c060000) unshare(0x2a060400) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0xf5, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000002f40)={'syztnl0\x00', &(0x7f0000002ec0)={'gre0\x00', 0x0, 0x20, 0x8, 0x7fff, 0x8000, {{0xd, 0x4, 0x2, 0x3b, 0x34, 0x66, 0x0, 0xf9, 0x2f, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0xf, 0x2b, [@dev={0xac, 0x14, 0x14, 0x13}, @empty, @private=0xa010101]}, @rr={0x7, 0xf, 0xc7, [@multicast1, @local, @multicast1]}]}}}}}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000003180)={0x0, @initdev, @initdev}, &(0x7f00000031c0)=0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)=[{{&(0x7f00000003c0)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000400)="83b6a145b7d9ef618460788caab51bcd67089e374c51ea2158e8aeb30b13a67e005a13c1aa4f97d033a0325423c942281aee45ad84a08534d09bf86df39e3e5aa152f2791b3393e501e4dd8cccc4cbed349a2fcaaca287e5ba91f7bdaba1e06cf59ca417a1674cd6e61f202fe8542fbd89dbc73bf7619c9b655e2eeda4c9062946987072c6bc5c", 0x87}, {&(0x7f00000004c0)="4a16a056d89bcd1bfacf64e7022f331673cac8b91798a6165325762089ac1afc3f34e8b99dfc1c9840e7f2851acb7608ca7e09f4fb4885139372423f33539328e93071613bea7cb86ce4ff69a7c9b499428395112fedc8f6624e06bbca13336da0949e2c27c951ac76cee82bbbd7", 0x6e}, {&(0x7f00000011c0)="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", 0x1bc}, {&(0x7f0000000640)}], 0x4, &(0x7f00000006c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x101}}], 0x18}}, {{&(0x7f0000000700)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000740)="8adca4b64a304b612e9feedad94b7b4c7ff36cee8ef0ff66ffd11836c6920bbc234332aff9e9ed44058614ddfb6ffaf325e513d316f10a5598af55d12bb8bdd7f20fb7276ed580ffeab97d5e57c6e7567cd8dce90a9c0a077ba92b0cb97ebcc16de99fcfeda5bb9174b10c65d7fea1f93f4be0", 0x73}, {&(0x7f00000007c0)="8e448a6e8f3a9639b94d8dff165e7786c2b799e036b0", 0x16}, {0x0}, {&(0x7f00000008c0)="6805995852751f3680781a4b4ee8157555d409abd79af83a9cd374b6610f54375dde12bd2c304e6fb848d0f8545ebb7b74d4d71655f1924e75c7fd46a2ec1b4a41c2bc7c13bb9fc1fbaf9a6af04400463bd3a49ba2b247dc44a99ddcdc64746284c69c4ac51e1b4ba48d8fa0d0944974b467ee1519c939476f", 0x79}], 0x4, &(0x7f0000000980)}}, {{&(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000ac0)="700555df1ac64f9f69b3e2f22a9b1a36576b1e50a7123d91099b2ca5b701274bfe0ce22e1ad581b1c47c79eed7f04ea04f552bcb07e6c98dd2dbb632278bfdefe9cee07062fd69a13514fedb739877e3cfca3c3b04666466d152df5142ed75fa80946f2272", 0x65}, {&(0x7f0000000b40)="2f9954a9c25e9d02bafa177a8e31e7e0b3a5578590811b02835db7aebeeb384949201481a1ae4bb208e85564aacd35957a18230913ad431ac9916fe1d040ab9748be77a96d940023884454087fbc691ff2c9929981f9551cb087b1a30aaa50bd9cec7762e22638fbe06bd485076d6596e1ed6b5ccdd9cb46f45688dea7a70d5a068462", 0x83}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)="caabf20e52d2098e58f33f4b1d7e826a1e1732a7ae929510b52b045c9714b5acbded5f2dc0af8d051e763309429e7fd0fd15", 0x32}], 0x4}}, {{&(0x7f0000000d00)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000d40)="ccf04502380377efa967a5bf2af69be5c36607fcce2d06fb06c0f26675a5cceeaf38e05d6c80c0d6968e2711f9350ecd765a392f7d71fe05803ed42ce551d704adeff2961f15603ce72892e52a0d456c5e9654d1a350b32b0760b43b0090e73c0a6255a049b1633dbe7b3150123f7bc412242dfc17d1275fd71b3d039396cabf600dc97def7602975b7ca01320760b2111cd2384f9f8d39d52d80700441596e33e76fb", 0xa3}, {&(0x7f0000000e00)="06389df9c5f1c104162b3f1e93cfdaf8820825888177b49efb868d970a0de7cf6435f1f6f01b35002464daa504c797", 0x2f}, {&(0x7f0000000e80)="472cca4ff09405ffbfd5d39e1fdf56e2c5d68dab22a0d6a585cdcca419ad5454be881608434f1d2464b827f8810172ee216e2249960f675edfdc020bd552538785ab489b07669bc72218b04537b00ec882f43d0bb0d63a338d02d57e881d643dd2ad8123103beca39b928dc7fe41", 0x6e}, {&(0x7f0000000f00)}], 0x4, &(0x7f0000000f80)=ANY=[@ANYBLOB="2800000000000000000000009af1d95d6459e438070000008913ab0a010100e00000010a030101ffffffff940401000014000000000000000000000002000000fbffffff6bdb596a14000000000000000000000007000000000000000000000011000000000000000000000001000000020000000000000014000000000000000000000002000000"], 0x88}}, {{&(0x7f0000001040)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000002dc0)=[{&(0x7f0000001080)="02428b6a82f7d85a1a080da8ad0b4a25ffc3641c835ca8df0c3fc7fb96c416eb9b9d6ecaa978185a51eac91bbd447f708da8496ef9050f6e2da4106f75ae844592808f9f4179eae35088419131ef38f21fd9a2c29e9458b3141ebb9d61c101dd09355ab435e75ab0d1293b2e620011ace844c8f3dd2343daec313b1f8142eb36f14512f4e94f11ff7135e7f25792dbdb1b4832e4b3aa6bee08f64770b386b82c5ce2cadbccd5185068dd7a564b6a38d86d738a86e1b8924aca6e246bc2d8832a", 0xc0}, {&(0x7f0000001180)="65be4264d9838c66791f3e004af6e66377eb61bf5233633fa0dc1904d2df9a5a15d6fc9a03b1f3", 0x27}, {&(0x7f0000001b80)="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", 0xf60}, {0x0}, {0x0}, {&(0x7f0000002d00)="bf4586e9aa63070b8b33cae9c07fc05c6cb26de55acdd092b98281f24ba90d624f7e2da18d531014dd7bd77daa82d21a77f4caf826c547f1927c8393f5968d6af8399f12390f9e0998b53f392bf82da874b0e590df9934642e71e5631274524ad122713ed2bd8f2a77e35897c597d184145201faacd86ba31766a5efe47d98ba05383bae1681dd37540943547310acd9abbf62ecbe622770eec826f2f3faa34acdca447cea52e0eb70b75ba1ae538928eee8b8f14bb528584d771050", 0xbc}], 0x6}}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002e40)}], 0x1, &(0x7f0000001380)=ANY=[@ANYBLOB="1c0000000000000000070080080000004dba7267b54abbe915fe69c515e276adbd97b2fb65c130ce7434c7e45de531f8", @ANYRES32=r9, @ANYBLOB="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"], 0x110}}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003300)}, {&(0x7f00000033c0)="f131fbfb2be0b26464d154fae9277215fc2491", 0x13}, {&(0x7f0000003400)="17d1bdf017b8eaa6f0a6f41e9b34bd86658063addd3b07e3af1d48bcbc332d1a1c4621dfd338fa9e20ecfd1e81a37ef5f5f48b23d844532a91ed3b9e74c1b9fcea6a2520da911639960304656173bc1a0f5a5b1bc4b41b6460822cc8da672591a47059a43858fc", 0x67}, {&(0x7f0000003480)="99905f9ddfcd762c7cfa156caec27777fc1df04f34533113bb30ad0379cca044ce5344dfed0f16bf198a283df37d8a626c4d698380699e9ae6846134757ebf4282c3ec1811be07fa27158738b7c87b594771de7fa9230875f1ac870bdca080380519c9b77cceb1fb3a09874596f299aea154401a544c93744f7d1868e9c08696b6b3cd0db31df63785db4f3d972ec78b91b6ece73ecc3f3b4d98c744a959df8596bdb3424062c161e12c7d7d3d4401c3", 0xb0}, {&(0x7f0000003540)="6ea3a6ba641dd425f8523776bf49aa164427bfd6b4dbf40b7ff88a7972c1a5675539fb36b1c720bf561072c0fda8c62cf38256d94f229be62f09d2d7f76a22215029564e725bcb9f46a30e7e627d9ddb1e0e0f4b88231e96a236c06542544d76185d0e2f9a3224ec6419f9e66d2c20cb5958846f97ee8d7950b612bc944a33014863d0af1b2280f4f6e7a3505d8ec9503e672340584ede401167e1a8dda61f25ae3b28f1a03f48f6bdd14f9ba6c83118f516e33061ea3d819f7dce9f7fdf7cd796084f3420e6fbd104a08639faae6ada6811b72eae03a3e2931b46dc32f18c6de2318427c649c9faa9b1ea267dde9592eb76b041", 0xf4}, {&(0x7f0000003640)="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", 0x7fe}, {&(0x7f00000005c0)="8df678065d20848f82d9a4405374c914aab8b13a1e04cbd26f67e4b3bac06afacc7156683bdc0160972f615fa2b01a7bae95f79a33202175a81d51574ba158fad988e5a544bc17fb9d2f7e16f05e8bac93fd494531d034020a7257487a90c781bd279b492d60775b05cbfe320bb8cfcb7239649153629a25efa8e15641be100a86fd2a97f40fb346895de5743528e8c219fd35aa40", 0x95}], 0x7}}, {{&(0x7f00000047c0)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000005a40)}}], 0x8, 0x10) listen(r8, 0x9) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000280)=@gcm_128={{0x303}, "46e71678b792b232", "287d64c3ea17f6e2ca32e90c67cdce73", "941cbfb7", "9b664417609aa1d8"}, 0x28) close(0x3) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x4, @any, 0x4, 0x1}, 0xe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 6.739111101s ago: executing program 2 (id=5847): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000061a0000000000000007912b800000000009500000700"/39], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r0 = socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x64, 0x0, 0x2, 0xfffff038}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x64, 0x0, 0x2, 0xfffff038}]}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@socket3={{0x28}, 0xb}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast1, @private0, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xff000000, 0xff000000], 'veth1_to_batadv\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0xd86, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) (async) shutdown(r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c21"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c21"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random='\x00\x00\x00\"\x00'}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random='\x00\x00\x00\"\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e22, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x34, 0x1000, 0x4}, 0x9c) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00000200000000000000240000000e0001006e657464657673696d000000657673696d3000000f00a8007365636f6e646e616d6500"/62], 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x843}, 0x44040) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="b6691c75e657d5aa36b7b20cc058", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="b6691c75e657d5aa36b7b20cc058", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x1128}}, 0x20000000) 5.019542979s ago: executing program 3 (id=5860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r7 = socket(0x29, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r7, 0x89e2, &(0x7f0000001540)) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0xd3f, 0x870bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xc, 0xb}, {0x0, 0x9}, {0xffe0, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000f"], 0x50) ioctl$FICLONERANGE(r9, 0x4020940d, &(0x7f0000000480)={{r10}, 0xd, 0x2, 0x49e1}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000280)) (async) sendto$packet(r3, &(0x7f00000003c0)="80000000", 0x4, 0x801, &(0x7f0000000080)={0x11, 0x8100, r11, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r14, @ANYBLOB="0000000000000000bf030000000000008500000047000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001980)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0xfff3, 0xf}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x30, 0x2, [@TCA_CGROUP_EMATCHES={0x2c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf417}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x2}, {0x5}}}, @TCF_EM_CONTAINER={0xc, 0x4, 0x0, 0x0, {{0x4, 0x0, 0x8}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r15 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYBLOB="e5ba884cec0000f6"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x48880) 4.995863893s ago: executing program 1 (id=5861): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @val=@perf_event={0xa}}, 0x18) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000440)=@ethtool_gstrings={0x1b, 0x4}}) 4.739723252s ago: executing program 1 (id=5864): syz_emit_ethernet(0x7a, &(0x7f00000003c0)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f57a14", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [@hopopts={0x3a}, @routing={0x80}]}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 4.645673631s ago: executing program 3 (id=5866): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000080)={0x401, 0xffff, 0x8, 0x8, 0xf9, 0x28, 0x6, "1e98efa3a5d608b3bf5c05b0d41ed203914f0215", "b84a9be5e873b39c44cd14ffdc0e3f5fe7c8ca59"}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r4, 0x5c2a7000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r5, 0xac9d4000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fbefdf259616080b72b67d9c5095020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 4.551720175s ago: executing program 1 (id=5867): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10000084) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4890) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x390) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffea5}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x24, &(0x7f0000000000)=r9, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "15fe08", 0x48, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x3, 0x3]}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0xfffc}}}}}}}}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="f0000010100004000233bead6c00fffffffffffffffb0000000001010100000000000000000000000000000000000000000000ed50d900001600000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d26c000000ac1414aa0000000000000000000000000000000000000000020000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001000000000000000000"], 0xf0}}, 0x80) writev(r0, &(0x7f0000000240)=[{&(0x7f00000003c0)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaeb", 0x22}, {&(0x7f0000000100)="b700"/12, 0xc}, {&(0x7f0000000400)="17a8a6c41e58e8b6cdb8040d", 0xc}], 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) 3.927757135s ago: executing program 0 (id=5873): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf0300000000000085000000d1000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.747053672s ago: executing program 0 (id=5874): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800"/126], 0x98}}, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, 0x8, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 3.175178616s ago: executing program 3 (id=5876): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (rerun: 32) r1 = socket(0x9, 0x3, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000400)={'gretap0\x00', 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x440, 0x2b8, 0x160, 0x0, 0x160, 0x2b8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@addrtype={{}, {0x8, 0x2, 0x0, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0xff, 0x2}}}, {{@ip={@private=0xa010101, @multicast2, 0x0, 0xffffff00, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x16, 0x0, 0x8}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xff9f, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @broadcast, 0xffffff00, 0x0, 'batadv_slave_0\x00', 'veth0_macvtap\x00', {}, {}, 0x32, 0x1, 0x40}, 0x0, 0xc8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@ttl={{}, {0x1, 0xfa}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3ff, 0x400, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffe61) 2.480529681s ago: executing program 4 (id=5877): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000b40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4008040) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) close(r3) writev(r2, &(0x7f0000000700)=[{0x0}], 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000500)={0x0, 0x3}, 0x8) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) write$nci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="6103090400020206b2572daaee8499814616099555140d9cffd593da8c13117e8ace68ee728851f83cf7b731ca385c0a554840ca32ee5f8024af3092d192426adf53cec332f4689ce5bdd8c7c6d51f94a6f225a8e01ec65ae3d38d349cc99507d254f4e5aed6e4ad1060bf801bf988c5cdf32fffd14f177e36b6c79a2c7a6fd9caa9f2aa678783b447cce8cd76f1c6995e07db8d14633ec02a5d2d9d2f22573b8f2102c4a0e0630a195b79db7c530746a96c59a3ee3ec929ed0c0502fe01675bb69160e4831fad1566c12b7a013d4ba5e2a806054401162637d03e2eb1328127d1b043b0d5708a3c07ab4424b6df434aa2d9504b414688ac114dbfbbbde17bd490b9b88baccde1180b79c7364faac355611b6e37038dd2e9a87f052dad99efa0"], 0xbc) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd41}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 2.459795929s ago: executing program 3 (id=5878): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000003a6209bf", @ANYRES16=r1, @ANYBLOB="ed4d000000000000000031"], 0x14}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x20, r1, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x55}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x3ce45fa5ac6c013d) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4fffe896cc5c000000100019002cbd7010fadb5f", @ANYRES32=0x0, @ANYBLOB="870d0400639e0700280012800e00010069703667726574617000000014000280060010004e21000006000f00010000001400030069703667726574617030000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r6 = socket$nl_crypto(0x10, 0x3, 0x15) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r7) sendmsg$IEEE802154_START_REQ(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff0000000500010001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r6, 0x80186e84, &(0x7f0000000240)={&(0x7f00000001c0)=[{0x101, 0xab01, 0x2}, {0x7ff, 0x0, 0x2}, {0x5, 0x7, 0x2}, {0x2, 0x7ff, 0x2}, {0x9, 0x1ff, 0x2}, {0xff}, {0xa896, 0x7, 0x1}, {0x3, 0x81, 0x1}], 0x8, 0x10, 0x800, 0x6}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32=r5, @ANYBLOB="140004006e696376663000000000000000000000080005000600000014001780040007000400030004000400040006"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.996979884s ago: executing program 4 (id=5879): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x37, r1, 0x1, 0x70bd2d, 0xffffffff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x800000000000000, 0x0, 0x4145}, 0x800) 1.889233987s ago: executing program 3 (id=5880): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'gretap0\x00', 0x400}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x40854) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.887957751s ago: executing program 0 (id=5881): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000036c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003680)={&(0x7f0000000400)=ANY=[], 0x24c4}, 0x1, 0x0, 0x0, 0x4000844}, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0500000006000000430000000100000000ef1d3bb189cce14127000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fcffffff00"/28], 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r6, @ANYBLOB="050427bd7000fcdbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="a800028038000100240001"], 0xc4}, 0x1, 0x0, 0x0, 0x44090}, 0x2404c080) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000016c0)=ANY=[@ANYBLOB="20000000100037042dbd7000000000000000000027e87dd36ae88b358ed52bbbe7f1806405f77b019739e0b8348a240727b01c966aabb0388215c0f67b1640e79f9f957cbbbd5de0af318549f2c2bb5a07146dfe753a013f9910b2405c25e690169dafd913bf5d0c50282e45b711bea477d378f1b7a3b027266ce602fef834fbe1c0f3e02ad09ee8af9acfc809f756d41fddb259ed0be0875be05a5f297c53a46655500af5", @ANYRES32=r4, @ANYBLOB="c384050000880100"], 0x20}, 0x1, 0x0, 0x0, 0x9005}, 0x400c0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x9, 0x0}, 0x8) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r10, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r11, r9, 0x4, r8}, 0x10) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0x0, 0x0) r13 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7", 0x24}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721", 0x9c}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x44810}], 0x1, 0x40800) recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)}, 0x0) 1.51517802s ago: executing program 1 (id=5882): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000000000007910480000000000a600ffff800000f195007400000000008b26680991cf7be46e92ba4de27a4391c3b6f3fc34b23fb6589be2ac17c158b20730d0e4a5e2"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x69) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x5, 0x5, 0x81e}) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) sendmsg$sock(r1, &(0x7f0000000900)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @rand_addr=0x64010100}, 0x4, 0x4, 0x1, 0x2}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000400)="edf0f010d5e8f34386fb692df2548b00c8c5427b6835231c5a00bab3a4e9031977920d1bc0feaf80038cf97b5f17971ff9bf978ee3d363b481a00b0ca736efbbaf083e0ef9b0773a1cc3349e0f02b5477915908505de745c6df19a4c16802b063192db900967cdee0b180cb4f09c3736e7210fada6afe57fc731e08196aa98a3ae8542a92bd74fca921bf0127f504553a7e027c96db09584e38049738d405bc4df0709e3c9b778e79177a625346eeab493ab60e5cb67ba424b6d6ccacd", 0xbd}, {&(0x7f00000004c0)="afd80f03d6fcd627df83498f4d1e79189de2e92348d012c76c5e0342351d1be43cb57409c1f72829a620fe2fa65170298be7b1e57b72c73a35748f7676776095eb0af4fa44f82a8700c02f1e2445420304b56f9e1cea8ce03cced70a3014af3d3ea0cf1ae883c8d0a3a55de0b83ef991151bb8203811b1e1be1868935e8e880d0c169dab21f4a1bb24f2dfb0c0a1854eb3515cb332e674ecfe6f2e4bf8bf98fffeb1d09f6c856dcaaad3616943e7ee271884472112", 0xb5}, {&(0x7f0000000580)="006f85781045903a2def319b42cc79fd5aa6bbae328bc1404cef72f46ded108e701cb5176c0c5435fd9f61513d65", 0x2e}, {&(0x7f00000005c0)="5862870ab2db037308dd6dc5d77506ec27491c5baea7f7efc690d69379492f14bb31589ce0e6e15f066259766e7fc2a4e20d8d2f887e95ee2134ecbcb41cb156c8e36e57c931ab79e7b57d5bda88fa0d6a893cd254966708398e3216ddde97392a558f7f2bb5f9fefd9c07c951e8be7216249e9a84a8c9fe1869ec631545f2daeec49cc95f07ca61b05fafaead3affd493908f5cf841242f3b8b55d5fe50c55115cc0e64421239056cff1507", 0xac}, {&(0x7f0000000680)="ff10e0fc8d315f733fa362329c262afbe8679c219f83c061c4412c39d48fa2", 0x1f}, {&(0x7f00000006c0)="870652470066b925a0071fc1efabbafaeae48fa76489f9c57d156ea680fb9e65b262e5214670498bfe6ba5e4272d51a4bbc5192253ce4b8e25662fb2c17c6e47a5790736b90c964f98e6d492c5811ff9db39b993e48f18fe73378579f81060f43cc7023484", 0x65}, {&(0x7f0000000740)="b08d31c53812de94f48cde74db267616eba19d5139ff32a03b70aeb38e10b283cb7e34d4c11a72b48fbeaabd082a12681f599ad11f2904a5f4234fdde165d10d0173039f78c742bca671bc139d45ace73cb1bc75ddb250de30fabae5444380d5ba20a7d6d6e11fd2c337e1cc22cc0be12006c79d388639e08c4285c5d8fd43f967430d325686e02e2f0542cf346328ae417e1c290667c9c071cd354fc1fe01935c14", 0xa2}], 0x7, &(0x7f0000000880)=[@timestamping={{0x14, 0x1, 0x25, 0x7fff}}, @timestamping={{0x12, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xef}}], 0x48}, 0x20044801) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000300)={r5, 0xf}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=@base={0x9, 0x4, 0x6, 0x10000, 0x40}, 0x50) recvfrom$inet6(r1, &(0x7f0000000040)=""/144, 0x90, 0x2, &(0x7f0000000100)={0xa, 0x4e22, 0x7ff, @mcast2, 0x7fffffff}, 0x1c) 1.406960127s ago: executing program 3 (id=5883): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={r3, 0x2, 0x7ff}, 0x8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000000400000008000000", @ANYRES8=r0], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400"], 0x48) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'virt_wifi0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r6, @ANYBLOB="0040580400"/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="030000000000008000000000000000008000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x22, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x7}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff9}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}, @ldst={0x2, 0x3, 0x0, 0x5, 0x7, 0x8}, @jmp={0x5, 0x0, 0x6, 0x5, 0x0, 0xfffffffffffffffe, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000600)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x3, 0x9, 0xe}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000740)=[r6, r10, r6], &(0x7f0000000780)=[{0x4, 0x1, 0xc, 0x5}, {0x2, 0x4, 0x1, 0x1}, {0x5, 0x3, 0x5, 0x5}, {0x4, 0x1, 0x1, 0x1}, {0x2, 0x3, 0xc, 0x6}, {0x2, 0x5, 0x7, 0x4}], 0x10, 0x29b7}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r12, 0x0, 0x6, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r12, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x18, 0xc, &(0x7f0000000f80)=@raw=[@tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}], &(0x7f0000001000)='GPL\x00', 0xf, 0x29, &(0x7f0000001040)=""/41, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x14, r9, 0x8, &(0x7f0000001080)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000010c0)={0x0, 0x1, 0x47, 0x7}, 0x10, 0x0, r12, 0x2, 0x0, &(0x7f0000001100)=[{0x3, 0x2, 0xa, 0x7}, {0x3, 0x4, 0x10, 0x2}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000001780)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800083a00fe8000000000000000000000000000bbfe800000000000000000000000000180000090780000e700"], 0x0) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x2, 0x2}, 0x28) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r14, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r13, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r15, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x36, 0x8, 0x0, 0x0}}, 0x10) 1.084921396s ago: executing program 1 (id=5884): r0 = socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000340)="445a09f39a8307405a81a52a5818f9bca52f3061f6642861d05831b0455c88401d2d1a5c46ccd573bfad21434ca96ed7236c556aab0e678d1c36b52ca784b40e1f0afa0badcb913b33a02c8382d4189ecb73658df3190cf24904c4a2018885d60407335699d5a60f21925a5cff71b0147ef4cdb6022a5d0879e77232b5d8fe2f5ff50c1158d9fa200790941dd4a162042f534856eadc9e74076619798cfdfffedb76e1801ce9945569509cd33c74759c1a5d5cd5d4efb6074118306679ce834a4aeb25069d1727a149822d38371b", 0xce}], 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x1) writev(r4, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x4c, r1, 0x1, 0x70bd2b, 0xfffffffd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_b, @device_a, @initial, {0xa, 0xff1}}, 0x20, 0x2, @device_a, {0x0, 0x6, @default_ibss_ssid}, @void, @void}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x1000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) r6 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000840)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x4e22, 0x3fee, 0xa, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x10}, {0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x3, 0x2, 0x0, 0x2, 0x200}}, 0xe8) r7 = socket$key(0xf, 0x3, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYRES8=r6, @ANYRESOCT=r7, @ANYBLOB], 0x30}}, 0x400c830) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r12, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r13, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x10}}], 0x10}, 0x2000) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0xff08, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000200)={0x60, r10, 0x405, 0x70bd27, 0x25dfdc01, {}, [{{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) r14 = syz_genetlink_get_family_id$fou(&(0x7f0000000640), r5) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r14, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x81ce44359541b902}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xf7}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x89}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000841}, 0x40400d1) 1.019378844s ago: executing program 0 (id=5885): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000001dc0)={&(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)}], 0x1, &(0x7f0000000dc0)=""/4096, 0x1000}, 0x40000000) (async) recvmsg(r0, &(0x7f0000001dc0)={&(0x7f0000000340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)}], 0x1, &(0x7f0000000dc0)=""/4096, 0x1000}, 0x40000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65205, 0xc900}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2020d}}}}}}, @IFLA_MTU={0x8, 0x4, 0x7ff}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2c707}, @IFLA_NET_NS_PID={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x84}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback, 0xffffffffffffffff, 0x10, 0x2020}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback, 0xffffffffffffffff, 0x10, 0x2020}, 0x20) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000100)="0000000000008d34d3e2", 0xa}], 0x3) (async) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000100)="0000000000008d34d3e2", 0xa}], 0x3) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) (async) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xffffffffffffffac, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001400), r5) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000001400), r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x9cdc2384056b48b8) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x9cdc2384056b48b8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x7, 0x3, 0x44, @mcast1, @private2, 0x7800, 0x7, 0x36d, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'ip6tnl0\x00', &(0x7f0000000880)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x9b, 0x2, 0xb, @dev={0xfe, 0x80, '\x00', 0x17}, @empty, 0x1, 0x40, 0x7fff, 0x80000000}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x6bb}], 0x1, 0x40000103, 0x0) (async) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x6bb}], 0x1, 0x40000103, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) 1.014856474s ago: executing program 4 (id=5886): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) (async) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004014}, 0x88c0) recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)=""/203, 0xcb}, {&(0x7f00000000c0)=""/80, 0x50}, {&(0x7f0000000f00)=""/230, 0xe6}, {&(0x7f0000000180)=""/137, 0x89}, {&(0x7f0000002c00)=""/4079, 0xfef}, {&(0x7f0000000040)=""/35, 0x23}], 0x6}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffffc}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x76}], 0x4, 0x40002002, 0x0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf251200000018000180140002007665746830000000000000000800000008"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) (async, rerun: 64) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x2) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) (rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (rerun: 64) 661.369466ms ago: executing program 4 (id=5887): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001027329f6843965e3140000000000000800000081114a00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 533.79799ms ago: executing program 4 (id=5888): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000200000000000000800000091115e000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f000000ddc0)={0x75, 0x3, 0xa, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x48, &(0x7f0000000300)=ANY=[@ANYBLOB="00ea"], 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x45, 0x0, "ede10c90e0d6d4b2b1651d4ddc62e17b5f4fa4a45bc87ce8b6cab0b0bf7f4a73a775b18b108887c58ce5057146437a52ff5d0f912a8eff0b48b4c25e7d5ae1e974f8cdaa3dccaccd26482b83f2a4afd0"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x4e23, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5ec800000000000000fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e23, @private=0xa010102}}, 0x0, 0x0, 0x1b, 0x0, "dc6efbc3b54972ba0604b8e20a587d8607043cff9ba01fb10d4df7171eb926b1343726c9a11cc6437caa2dc891b724181fb42d00e3cefe6630aadee9a73a7095657dfccc791536fe9c5268be2bdd7a74"}, 0xd8) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xfffffc01, 0x0, r6, 0xd8, '\x00', 0x0, r7, 0x5, 0x4, 0x3}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x2, 0x4}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000150a03"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x24000040) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000005000061114c0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) 471.975107ms ago: executing program 0 (id=5889): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) poll(&(0x7f0000000100)=[{r0, 0x210}], 0x1, 0x3) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'vlan0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x178f7059, 0x80000000}, {0x206, 0x8}]}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc010000190000000000a9775e75985b0cc700ee890000000000000000000f00000000000000000000000000004c6d00000000000003000000010200002008000005c9b74ec09e3bb19b35a1dd83dcc5bf9c453fd8b50ca37c94dd1ae71163644e349f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000024fd0000000000000000000000000000000000000000000000000000000000001d00000000000000090000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000044010500ac14143b000000000000000000000000000000002b00000000000000ac1414bb000000000000000000000000000000000000ff00000000000000000000000000fc020000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000003c000000020000007f0000010000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000002b0000000200000020010000000000000000000000000000000000000000000000000000030000000000000020010000000000000000000000000001000000006c00000002000000ffffffff000000000000000000000000000000000100"/436], 0x1fc}}, 0x0) 312.751819ms ago: executing program 4 (id=5890): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008b80)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x1800}}], 0x1, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0xe) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000000005000000050003003a00"/28], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x4004010) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001b14010029bd7000ffdbe825080045006d46e539"], 0x18}, 0x1, 0x0, 0x0, 0x4040800}, 0xc0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4001) 80.284393ms ago: executing program 0 (id=5891): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3000004, 0x11, r0, 0x9040d000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000000000000200008409010000040000000400000001000000000000000001000009000000003000002e"], &(0x7f0000000f40)=""/4079, 0x42, 0xfef, 0x1, 0x2}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x840) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@struct={0x5, 0x1, 0x0, 0x4, 0x0, 0xd, [{0x5, 0x2, 0x6}]}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x5f, 0x6f]}}, 0x0, 0x38, 0x0, 0x1, 0x400}, 0x28) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0xd27636450401d73e) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wg0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r8 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="ed4d00000000fddbdf253100000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00R\x00', @ANYRES32=r8, @ANYBLOB], 0x24}}, 0xc0) socket$packet(0x11, 0x2, 0x300) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000026c0)={r3, &(0x7f00000025c0)='\xaa\xaa\xaa\xaa\xaa', 0x800, &(0x7f0000002600)={@align=0x1, {0x9, 0x3ff, 0xfffffff5, 0x7}}, 0x5, &(0x7f0000002640)={@_ha_fsid}, &(0x7f0000002680)=0x2000}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r10 = gettid() r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r9, @ANYBLOB="089805000750050008001300", @ANYRES32=r10, @ANYBLOB="08002c00050000071400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4040010) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000002700)={{{@in=@remote, @in6=@mcast2}}, {{@in=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000002800)=0xe8) getgid() socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 1 (id=5892): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) socket$pppoe(0x18, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x80800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000004000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000001c0085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00010000000000000000a007000000", @ANYRES32=r1, @ANYBLOB="400096040a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) kernel console output (not intermixed with test programs): get a fully working HSR network [ 733.946517][T23317] veth1_vlan: left promiscuous mode [ 733.954197][T23317] veth0_vlan: left promiscuous mode [ 733.960914][T23317] veth0_vlan: entered promiscuous mode [ 733.970866][T23317] veth1_vlan: entered promiscuous mode [ 733.981388][T23317] veth1_macvtap: left promiscuous mode [ 733.989066][T23317] veth0_macvtap: left promiscuous mode [ 733.997475][T23317] veth0_macvtap: entered promiscuous mode [ 734.005358][T23317] veth1_macvtap: entered promiscuous mode [ 734.018616][T23317] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 734.027937][T23317] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 734.037353][T23317] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 734.049285][T23317] 8021q: adding VLAN 0 to HW filter on device bond1 [ 734.071542][T23317] 8021q: adding VLAN 0 to HW filter on device bond2 [ 734.091217][T23317] 8021q: adding VLAN 0 to HW filter on device bond3 [ 734.148595][T23323] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4133'. [ 734.159150][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.166703][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.239310][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.246782][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.447946][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.484775][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.514342][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.549165][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.271021][T23376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.312838][T23376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.356034][T23376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.410110][T23376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.454849][T23376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.691434][T23381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 735.848828][T23390] netlink: 'syz.3.4148': attribute type 6 has an invalid length. [ 736.345414][T23400] tipc: Enabling of bearer rejected, failed to enable media [ 736.541972][T23410] __nla_validate_parse: 2 callbacks suppressed [ 736.541996][T23410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4154'. [ 736.772399][T23421] netlink: 'syz.4.4156': attribute type 1 has an invalid length. [ 736.982036][T23425] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4157'. [ 737.256914][T23440] bond4: entered allmulticast mode [ 737.274325][T23440] 8021q: adding VLAN 0 to HW filter on device bond4 [ 737.657177][T23471] geneve1: entered promiscuous mode [ 737.898088][T23482] netlink: 'syz.3.4172': attribute type 1 has an invalid length. [ 737.926962][T23484] netlink: 'syz.4.4173': attribute type 10 has an invalid length. [ 737.953655][T23484] ipvlan0: entered allmulticast mode [ 737.959284][T23484] veth0_vlan: entered allmulticast mode [ 737.993537][T23484] team0: Device ipvlan0 failed to register rx_handler [ 738.107738][T23487] netlink: 63 bytes leftover after parsing attributes in process `syz.2.4174'. [ 738.437091][T23508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4180'. [ 738.459773][T23479] team0: Port device syz_tun removed [ 738.493538][T23479] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 738.695882][T23521] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4182'. [ 738.838027][T23521] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 739.034739][T23546] netlink: 'syz.4.4187': attribute type 2 has an invalid length. [ 739.262453][T23560] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4190'. [ 739.403322][T23567] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4192'. [ 739.413062][T23564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4194'. [ 739.434349][T23569] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4192'. [ 739.566765][T23573] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 739.864203][T23594] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4202'. [ 740.203293][T23610] netlink: 'syz.3.4206': attribute type 1 has an invalid length. [ 740.249176][T23616] No such timeout policy "syz1" [ 740.259416][T23610] 8021q: adding VLAN 0 to HW filter on device bond4 [ 740.283428][T23617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.302807][T23617] bond4: (slave bond0): Enslaving as a backup interface with a down link [ 740.333073][T23610] netlink: 'syz.3.4206': attribute type 10 has an invalid length. [ 740.470507][T23620] 0·: renamed from hsr0 [ 740.478002][T23620] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 740.488957][T23620] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 740.500777][T23620] 0·: entered allmulticast mode [ 740.505759][T23620] hsr_slave_0: entered allmulticast mode [ 740.515213][T23620] hsr_slave_1: entered allmulticast mode [ 740.526231][T23620] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 740.637683][T23626] netlink: 'syz.1.4210': attribute type 1 has an invalid length. [ 740.704331][T23626] 8021q: adding VLAN 0 to HW filter on device bond4 [ 740.733488][T23630] bond4: (slave gretap1): making interface the new active one [ 740.752845][T23630] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 740.804496][T23639] xt_l2tp: invalid flags combination: 0 [ 740.804639][T23633] xt_l2tp: invalid flags combination: 0 [ 740.999179][T23633] : entered promiscuous mode [ 741.551659][T23672] __nla_validate_parse: 9 callbacks suppressed [ 741.551680][T23672] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4220'. [ 741.596342][T23676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4222'. [ 741.841983][T23686] smc: net device wg2 erased user defined pnetid S [ 742.022863][T23696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4225'. [ 742.061993][T23695] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4227'. [ 742.092085][T23695] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4227'. [ 742.132326][T23695] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 742.169222][T23701] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 742.205027][T23695] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4227'. [ 742.286099][T23697] bond0: option ad_user_port_key: invalid value (65535) [ 742.308958][T23697] bond0: option ad_user_port_key: allowed values 0 - 1023 [ 742.321283][T23697] bond0 (unregistering): Released all slaves [ 742.376491][T23697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4225'. [ 742.655416][T23719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4232'. [ 742.968304][T23734] pimreg9: entered allmulticast mode [ 743.074747][T23740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4239'. [ 743.093283][T23740] netlink: 'syz.3.4239': attribute type 1 has an invalid length. [ 743.107749][T23740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4239'. [ 743.255996][T23749] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 743.877549][T23785] bond0: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 743.915519][T23785] bond0 (unregistering): Released all slaves [ 744.150509][T23795] team0: Port device team_slave_0 removed [ 744.162375][T23800] netlink: 'syz.0.4254': attribute type 3 has an invalid length. [ 744.505253][T23812] gretap0: entered promiscuous mode [ 744.582451][T23812] 0ªî{X¹¦: renamed from gretap0 [ 744.736806][T23812] 0ªî{X¹¦: left promiscuous mode [ 744.757527][T23812] 0ªî{X¹¦: entered allmulticast mode [ 744.804231][T23812] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 745.616013][T23859] netlink: 'syz.4.4268': attribute type 3 has an invalid length. [ 745.821131][T23862] netlink: 'syz.4.4269': attribute type 1 has an invalid length. [ 746.806783][T23888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.824331][T23888] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.840745][T23888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.946766][T23888] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 747.213917][T23902] __nla_validate_parse: 14 callbacks suppressed [ 747.213939][T23902] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4278'. [ 747.403237][T23909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4280'. [ 747.542197][T23911] netlink: 'syz.4.4281': attribute type 1 has an invalid length. [ 747.584380][T23918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4281'. [ 747.716106][T23922] netlink: 'syz.2.4284': attribute type 1 has an invalid length. [ 747.743584][T23924] netlink: 'syz.0.4285': attribute type 1 has an invalid length. [ 747.822794][T23922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.834303][T23929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4285'. [ 747.859505][T23929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4285'. [ 747.906838][T23924] 8021q: adding VLAN 0 to HW filter on device bond3 [ 747.943549][T23927] vlan4: entered allmulticast mode [ 747.949041][T23927] bond0: entered allmulticast mode [ 748.011352][T23922] bond0: (slave geneve2): making interface the new active one [ 748.019155][T23922] geneve2: entered allmulticast mode [ 748.034428][T23922] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 748.061508][T23935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4287'. [ 748.081352][T23935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4287'. [ 748.098031][T23935] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4287'. [ 748.194938][T23937] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4288'. [ 748.253574][T23937] netlink: 'syz.3.4288': attribute type 21 has an invalid length. [ 748.274929][T23937] IPv6: NLM_F_CREATE should be specified when creating new route [ 748.300198][T23937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 748.307722][T23937] IPv6: NLM_F_CREATE should be set when creating new route [ 748.315127][T23937] IPv6: NLM_F_CREATE should be set when creating new route [ 748.322526][T23937] IPv6: NLM_F_CREATE should be set when creating new route [ 748.355007][T23937] netlink: 'syz.3.4288': attribute type 21 has an invalid length. [ 748.364195][T23937] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 748.436508][T23950] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4293'. [ 748.624909][T23966] netlink: 'syz.4.4297': attribute type 1 has an invalid length. [ 748.931885][T23966] 8021q: adding VLAN 0 to HW filter on device bond5 [ 749.273825][T23971] bond5: (slave veth3): Enslaving as an active interface with a down link [ 749.407009][T23976] bond5: (slave dummy0): making interface the new active one [ 749.459482][T23976] dummy0: entered promiscuous mode [ 749.472112][T23976] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 749.527150][T23982] bond5: (slave dummy0): Releasing active interface [ 749.534717][T23982] dummy0 (unregistering): left promiscuous mode [ 749.618712][T23989] blkio.reset_stats is deprecated [ 749.831351][T24002] netlink: 'syz.2.4305': attribute type 5 has an invalid length. [ 750.198515][T24010] veth1_vlan: left promiscuous mode [ 750.227068][T24010] veth0_vlan: left promiscuous mode [ 750.234539][T24010] veth0_vlan: entered promiscuous mode [ 750.258093][T24010] veth1_vlan: entered promiscuous mode [ 750.303241][T24010] bridge0: port 3(vlan2) entered blocking state [ 750.309878][T24010] bridge0: port 3(vlan2) entered listening state [ 750.323740][T24013] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 750.408755][T24010] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 750.442902][T24010] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 750.464049][T24010] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 750.489434][T24010] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 750.580864][T24010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 750.661704][T24010] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 751.266803][T24044] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.274486][T24044] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.526147][T24044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.553648][T24044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.139482][ T48] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 34133 - 0 [ 752.148775][ T48] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 34133 - 0 [ 752.172319][ T48] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 34133 - 0 [ 752.200364][ T48] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 34133 - 0 [ 752.242411][T22279] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 752.273608][ T48] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.319172][ T48] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.351872][ T48] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.376061][ T48] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.391446][T24090] netlink: 'syz.4.4318': attribute type 2 has an invalid length. [ 752.405173][ T48] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.435365][ T48] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.478595][ T48] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.516144][ T48] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.576354][ T29] audit: type=1804 audit(1779667969.753:11): pid=24100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4322" name="/newroot/271/memory.events" dev="tmpfs" ino=1414 res=1 errno=0 [ 752.643613][T24104] __nla_validate_parse: 7 callbacks suppressed [ 752.643639][T24104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4323'. [ 752.672135][ T29] audit: type=1800 audit(1779667969.753:12): pid=24100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4322" name="memory.events" dev="tmpfs" ino=1414 res=0 errno=0 [ 752.752039][T24106] netlink: 'syz.4.4324': attribute type 11 has an invalid length. [ 752.774329][T24106] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4324'. [ 752.914696][T24113] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 753.027344][T24118] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4327'. [ 753.072695][T24120] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4328'. [ 753.515054][T24136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4331'. [ 754.163836][T24171] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4341'. [ 754.487313][T24184] xt_hashlimit: size too large, truncated to 1048576 [ 754.556264][T24190] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4345'. [ 755.038246][T24211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4350'. [ 755.061683][T24212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4352'. [ 755.092515][T24211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4350'. [ 755.179428][T24213] debugfs: '1ùà^!‚Y‡°”õËí [ 755.179428][T24213] 3ìUH†5rºBnœæ\' already exists in 'ieee80211' [ 755.353416][T24227] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 755.385657][T24227] pim6reg0: tun_chr_ioctl cmd 3223385353 [ 755.428307][T24227] netlink: 'syz.1.4354': attribute type 3 has an invalid length. [ 755.916856][T24252] syzkaller1: entered promiscuous mode [ 755.957721][T24252] syzkaller1: entered allmulticast mode [ 756.095924][T24255] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20001 [ 756.163064][T24255] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20002 [ 756.308668][T24260] netlink: 'syz.3.4360': attribute type 10 has an invalid length. [ 756.497921][T24268] syzkaller0: entered promiscuous mode [ 756.510129][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 756.538763][T24268] syzkaller0: entered allmulticast mode [ 757.530502][T24285] geneve3: entered promiscuous mode [ 757.610938][T24291] netlink: 'syz.3.4369': attribute type 3 has an invalid length. [ 757.629284][T24291] netlink: 'syz.3.4369': attribute type 3 has an invalid length. [ 757.662830][T24291] __nla_validate_parse: 2 callbacks suppressed [ 757.662851][T24291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4369'. [ 758.061296][T24312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4375'. [ 758.080596][T24313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4374'. [ 758.456574][T24332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4379'. [ 759.067945][T24355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 759.623360][T24341] team0: Port device netdevsim1 removed [ 761.377208][T24416] 0ªî{X¹¦: left allmulticast mode [ 761.398002][T24416] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4401'. [ 761.410572][T24416] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 761.559100][T24426] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4402'. [ 761.578854][T24381] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4390'. [ 761.592023][T24429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4403'. [ 761.613165][T24429] ip6gre2: entered promiscuous mode [ 761.619222][T24429] ip6gre2: entered allmulticast mode [ 761.653039][T24381] dvmrp0: entered allmulticast mode [ 761.687912][T24413] openvswitch: netlink: IP tunnel dst address not specified [ 761.786985][T24434] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4404'. [ 761.923470][T24443] netlink: 'syz.1.4407': attribute type 10 has an invalid length. [ 761.951026][T24443] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4407'. [ 762.339141][T24461] pimreg9: entered allmulticast mode [ 762.992698][T24483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4416'. [ 763.110030][T24485] pim6reg: entered allmulticast mode [ 763.441185][T24495] netlink: 'syz.3.4421': attribute type 1 has an invalid length. [ 763.569508][T24495] 8021q: adding VLAN 0 to HW filter on device bond5 [ 763.752555][T24497] bond5: (slave veth7): Enslaving as an active interface with a down link [ 763.931255][T24504] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 763.958537][T24504] bond5: (slave batadv1): making interface the new active one [ 763.983447][T24504] batadv1: entered promiscuous mode [ 763.999344][T24504] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 764.374876][T24541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4433'. [ 764.439159][T24544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4434'. [ 764.471936][T24547] netlink: 'syz.1.4435': attribute type 1 has an invalid length. [ 764.494423][T24547] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4435'. [ 764.643567][T24551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4435'. [ 764.732040][T24553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4438'. [ 764.808053][T24558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4438'. [ 765.267447][T24578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4443'. [ 765.296200][T24578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4443'. [ 765.390820][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 766.964788][T24643] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4459'. [ 767.092099][T24650] xt_bpf: check failed: parse error [ 767.117963][T24649] sctp: [Deprecated]: syz.4.4460 (pid 24649) Use of struct sctp_assoc_value in delayed_ack socket option. [ 767.117963][T24649] Use struct sctp_sack_info instead [ 767.166623][T24648] ip6tnl0: entered promiscuous mode [ 767.178729][T24653] sctp: [Deprecated]: syz.4.4460 (pid 24653) Use of struct sctp_assoc_value in delayed_ack socket option. [ 767.178729][T24653] Use struct sctp_sack_info instead [ 767.262000][T24656] batadv0: entered promiscuous mode [ 767.277430][T24657] netlink: 'syz.0.4462': attribute type 1 has an invalid length. [ 767.291025][T24656] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 767.838629][T24679] syz_tun: entered allmulticast mode [ 767.862631][T24678] syz_tun: left allmulticast mode [ 767.895368][T24681] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 767.906301][T24681] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 767.915547][T24681] veth0_virt_wifi: entered allmulticast mode [ 767.932054][T24681] veth0_virt_wifi: entered promiscuous mode [ 768.081808][T24683] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 768.227581][T24691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 768.289938][T24688] __nla_validate_parse: 3 callbacks suppressed [ 768.289958][T24688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4473'. [ 768.339158][T24688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4473'. [ 768.600365][T24703] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 768.916043][T24713] xt_HMARK: spi-set and port-set can't be combined [ 768.967309][T24714] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4482'. [ 769.019768][T24714] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4482'. [ 769.056671][T24714] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4482'. [ 769.104785][T24714] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4482'. [ 769.284271][T24723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4486'. [ 769.309110][T24726] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4487'. [ 769.453659][T24730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4487'. [ 769.492724][T24730] nbd: device at index 64 is going down [ 769.764823][T24739] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4491'. [ 769.969090][T24743] netlink: 'syz.2.4493': attribute type 2 has an invalid length. [ 772.091128][T24818] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 772.484275][T24812] x_tables: unsorted entry at hook 3 [ 772.742206][T24847] netlink: 'syz.1.4522': attribute type 1 has an invalid length. [ 772.779606][T24847] netlink: 'syz.1.4522': attribute type 1 has an invalid length. [ 773.403915][T24884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.447046][T24886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.592115][ T57] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.604598][ T57] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.625996][ T57] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.639209][ T57] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.677634][T24895] netlink: 'syz.2.4534': attribute type 1 has an invalid length. [ 773.901228][T24910] __nla_validate_parse: 7 callbacks suppressed [ 773.901248][T24910] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4538'. [ 773.957314][T24912] tipc: Enabling of bearer rejected, failed to enable media [ 774.197187][T24922] IPVS: ip_vs_add_dest(): server weight less than zero [ 774.516672][T24936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4545'. [ 774.548226][T24936] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4545'. [ 774.704135][T18715] Bluetooth: hci3: link tx timeout [ 774.710719][T18715] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 775.150542][ T12] batadv1: left promiscuous mode [ 775.432273][T24997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4558'. [ 775.483909][T24997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4558'. [ 775.521750][T25001] FAULT_INJECTION: forcing a failure. [ 775.521750][T25001] name failslab, interval 1, probability 0, space 0, times 0 [ 775.534920][T25001] CPU: 0 UID: 0 PID: 25001 Comm: syz.0.4559 Not tainted syzkaller #0 PREEMPT(full) [ 775.534951][T25001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 775.534966][T25001] Call Trace: [ 775.534976][T25001] [ 775.534986][T25001] dump_stack_lvl+0xe8/0x150 [ 775.535018][T25001] should_fail_ex+0x412/0x560 [ 775.535054][T25001] should_failslab+0xa8/0x100 [ 775.535099][T25001] __kvmalloc_node_noprof+0x178/0x8a0 [ 775.535133][T25001] ? bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 775.535169][T25001] bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 775.535201][T25001] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 775.535266][T25001] ? __pfx_autoremove_wake_function+0x10/0x10 [ 775.535341][T25001] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 775.535391][T25001] ? 0xffffffffa02036e0 [ 775.535440][T25001] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 775.535543][T25001] ? _copy_from_user+0x94/0xb0 [ 775.535576][T25001] ? bpf_test_init+0x113/0x150 [ 775.535597][T25001] ? xdp_convert_md_to_buff+0x5b/0x330 [ 775.535625][T25001] bpf_prog_test_run_xdp+0x81c/0x1160 [ 775.535669][T25001] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 775.535699][T25001] ? __fget_files+0x2a/0x420 [ 775.535731][T25001] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 775.535758][T25001] bpf_prog_test_run+0x2c7/0x340 [ 775.535784][T25001] __sys_bpf+0x643/0x950 [ 775.535819][T25001] ? __pfx___sys_bpf+0x10/0x10 [ 775.535872][T25001] ? ksys_write+0x242/0x270 [ 775.535906][T25001] ? __pfx_ksys_write+0x10/0x10 [ 775.535941][T25001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.535965][T25001] __x64_sys_bpf+0x7c/0x90 [ 775.535996][T25001] do_syscall_64+0x15f/0xf80 [ 775.536017][T25001] ? trace_irq_disable+0x3b/0x140 [ 775.536049][T25001] ? clear_bhb_loop+0x40/0x90 [ 775.536085][T25001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.536106][T25001] RIP: 0033:0x7f6029d9ce59 [ 775.536125][T25001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.536144][T25001] RSP: 002b:00007f602acf2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 775.536167][T25001] RAX: ffffffffffffffda RBX: 00007f602a015fa0 RCX: 00007f6029d9ce59 [ 775.536182][T25001] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 775.536196][T25001] RBP: 00007f602acf2090 R08: 0000000000000000 R09: 0000000000000000 [ 775.536209][T25001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.536221][T25001] R13: 00007f602a016038 R14: 00007f602a015fa0 R15: 00007fff2ba0fde8 [ 775.536257][T25001] [ 775.946740][T25011] netlink: 'syz.1.4562': attribute type 1 has an invalid length. [ 776.004557][T25019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4562'. [ 776.098034][T25019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4562'. [ 776.136513][T25011] 8021q: adding VLAN 0 to HW filter on device bond5 [ 776.186433][T25025] bond5: option mode: unable to set because the bond device is up [ 776.491409][T25041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4570'. [ 776.715874][T25051] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4572'. [ 776.750924][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 776.773675][T25059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4573'. [ 777.261428][T25057] syzkaller0: entered promiscuous mode [ 777.267429][T25057] syzkaller0: entered allmulticast mode [ 777.370974][T25053] bond6: option ad_user_port_key: invalid value (65535) [ 777.390648][T25053] bond6: option ad_user_port_key: allowed values 0 - 1023 [ 777.417554][T25053] bond6 (unregistering): Released all slaves [ 780.761211][ C0] bridge0: port 3(vlan2) entered learning state [ 782.497587][T25115] __nla_validate_parse: 3 callbacks suppressed [ 782.497607][T25115] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4582'. [ 783.311136][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 783.324392][T25176] netlink: 'syz.2.4590': attribute type 1 has an invalid length. [ 783.352532][T25176] netlink: 'syz.2.4590': attribute type 3 has an invalid length. [ 783.384104][T25176] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4590'. [ 784.076334][T25209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4598'. [ 784.134907][T25212] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 784.617764][T25235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4603'. [ 784.764668][ T48] nci: nci_ntf_packet: unsupported ntf opcode 0xf25 [ 784.928775][T25258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4606'. [ 785.618995][T25291] Cannot find del_set index 4 as target [ 786.568703][T25332] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002 [ 787.564954][T25235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 788.416493][T25394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4625'. [ 788.467881][T25399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4627'. [ 789.175236][T25422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4635'. [ 789.196565][T25426] netlink: 'syz.0.4636': attribute type 1 has an invalid length. [ 789.205168][T25424] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4633'. [ 789.232836][T25424] nbd: must specify at least one socket [ 789.233500][T25426] netlink: 'syz.0.4636': attribute type 2 has an invalid length. [ 789.260254][T25426] netlink: 'syz.0.4636': attribute type 1 has an invalid length. [ 789.290809][T25422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4635'. [ 789.304654][T25426] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4636'. [ 789.376062][T25422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4635'. [ 789.397324][T25435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4638'. [ 789.453158][T25433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4636'. [ 789.462482][T25422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4635'. [ 789.513831][T25435] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 789.921133][T25451] netlink: 'syz.1.4642': attribute type 1 has an invalid length. [ 790.113836][T25458] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 790.125947][T25458] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 790.166499][T25459] bond6: (slave gretap0): making interface the new active one [ 790.178363][T25459] bond6: (slave gretap0): Enslaving as an active interface with an up link [ 790.188906][T25451] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 790.198068][T25451] syzkaller1: Refused to change device type [ 790.371562][T25468] netlink: 'syz.2.4644': attribute type 1 has an invalid length. [ 790.432691][T25468] bond6: entered promiscuous mode [ 790.438522][T25468] 8021q: adding VLAN 0 to HW filter on device bond6 [ 790.467216][T25472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 790.572587][T25468] bond6: (slave bridge5): making interface the new active one [ 790.580717][T25468] bridge5: entered promiscuous mode [ 790.587670][T25468] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 790.743198][T25490] sctp: [Deprecated]: syz.2.4652 (pid 25490) Use of struct sctp_assoc_value in delayed_ack socket option. [ 790.743198][T25490] Use struct sctp_sack_info instead [ 790.897368][T25484] batman_adv: batadv0: Adding interface: vlan2 [ 790.929313][T25484] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.955888][T25484] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 791.049407][T25504] syzkaller0: entered promiscuous mode [ 791.066005][T25504] syzkaller0: entered allmulticast mode [ 791.128104][T25481] syzkaller1: entered promiscuous mode [ 791.148192][T25481] syzkaller1: entered allmulticast mode [ 791.575880][T25524] syzkaller0: entered promiscuous mode [ 791.585517][T25524] syzkaller0: entered allmulticast mode [ 791.619604][T25528] lo speed is unknown, defaulting to 1000 [ 791.686277][T25528] lo speed is unknown, defaulting to 1000 [ 791.703794][T25528] lo speed is unknown, defaulting to 1000 [ 791.837541][T25539] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 792.266629][T25553] ip6gre1: entered promiscuous mode [ 792.287759][T25528] infiniband syz0: set down [ 792.292537][T25553] ip6gre1: entered allmulticast mode [ 792.298026][T25528] infiniband syz0: added lo [ 792.315035][T24081] lo speed is unknown, defaulting to 1000 [ 792.394983][T25528] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 792.465293][T25528] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 792.555129][T25528] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 792.617041][T25566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.695241][T25566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.752674][T25528] RDS/IB: syz0: added [ 792.767408][T25528] smc: adding ib device syz0 with port count 1 [ 792.784674][T25528] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 792.887705][ T5751] lo speed is unknown, defaulting to 1000 [ 792.897691][T25528] lo speed is unknown, defaulting to 1000 [ 793.093148][T25578] netlink: 'syz.4.4676': attribute type 1 has an invalid length. [ 793.188178][T25578] bond6: entered promiscuous mode [ 793.194654][T25578] 8021q: adding VLAN 0 to HW filter on device bond6 [ 793.346286][T25580] bond6: (slave veth7): making interface the new active one [ 793.361018][T25580] veth7: entered promiscuous mode [ 793.374335][T25580] bond6: (slave veth7): Enslaving as an active interface with an up link [ 793.574043][T25590] __nla_validate_parse: 17 callbacks suppressed [ 793.574066][T25590] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4678'. [ 793.591589][T25528] lo speed is unknown, defaulting to 1000 [ 793.632637][T25594] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4680'. [ 793.656632][T25593] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4680'. [ 793.801722][T25591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4679'. [ 794.180819][T25528] lo speed is unknown, defaulting to 1000 [ 794.771910][T25528] lo speed is unknown, defaulting to 1000 [ 794.793737][T25641] netlink: 'syz.2.4692': attribute type 4 has an invalid length. [ 794.952510][T25648] netlink: 'syz.0.4695': attribute type 1 has an invalid length. [ 795.016242][T25648] 8021q: adding VLAN 0 to HW filter on device bond4 [ 795.028056][T25653] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 795.195681][T25528] lo speed is unknown, defaulting to 1000 [ 795.714616][T25678] netlink: 'syz.2.4704': attribute type 4 has an invalid length. [ 795.752219][T25678] netlink: 'syz.2.4704': attribute type 4 has an invalid length. [ 795.788967][T25681] netlink: 'syz.2.4704': attribute type 4 has an invalid length. [ 795.802274][T25528] lo speed is unknown, defaulting to 1000 [ 795.888294][T25685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4705'. [ 796.413310][T25528] lo speed is unknown, defaulting to 1000 [ 796.426276][T25702] netlink: 216 bytes leftover after parsing attributes in process `syz.3.4709'. [ 796.734109][T22279] tipc: Subscription rejected, illegal request [ 796.858073][T25709] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 796.933893][T25705] bridge6: entered promiscuous mode [ 796.981893][T25705] bridge6: entered allmulticast mode [ 797.157719][T25721] netlink: 'syz.3.4714': attribute type 1 has an invalid length. [ 797.242800][T25723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4714'. [ 797.382574][T25728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 797.389984][T25728] IPv6: NLM_F_CREATE should be set when creating new route [ 797.397395][T25728] IPv6: NLM_F_CREATE should be set when creating new route [ 797.451210][T25721] 8021q: adding VLAN 0 to HW filter on device bond6 [ 797.597335][T25734] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4719'. [ 797.637282][T25734] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 797.685377][T25741] netlink: 'syz.1.4721': attribute type 1 has an invalid length. [ 797.694059][T25734] gretap1: entered allmulticast mode [ 797.704885][T25741] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4721'. [ 797.758834][T25744] syzkaller0: entered promiscuous mode [ 797.783101][T25744] syzkaller0: entered allmulticast mode [ 797.821578][T25744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4722'. [ 798.116885][T25760] lo speed is unknown, defaulting to 1000 [ 798.183216][T25767] netlink: 'syz.0.4726': attribute type 21 has an invalid length. [ 798.204854][T25767] netlink: 'syz.0.4726': attribute type 21 has an invalid length. [ 798.553844][T25778] netlink: 'syz.0.4729': attribute type 7 has an invalid length. [ 799.263636][T25779] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 799.286094][T25779] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 799.321909][T25779] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 799.571496][T25778] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.603427][T25778] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.615318][T25778] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 34133 - 0 [ 799.800145][T25778] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.819781][T25778] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.841792][T25778] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 34133 - 0 [ 799.866584][T25806] tipc: Enabling of bearer rejected, failed to enable media [ 800.010163][T25810] __nla_validate_parse: 7 callbacks suppressed [ 800.010188][T25810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4734'. [ 800.046658][T25810] netlink: 312 bytes leftover after parsing attributes in process `syz.1.4734'. [ 800.077912][T25810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4734'. [ 800.135917][T25778] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.169937][T25778] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.189375][T25778] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 34133 - 0 [ 800.491184][T25778] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.502487][T25778] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.513911][T25778] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 34133 - 0 [ 800.571768][T25815] dvmrp0: entered allmulticast mode [ 800.752919][T25819] bridge0: port 1(syz_tun) entered disabled state [ 801.027556][T25819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.072897][T25829] netlink: 916 bytes leftover after parsing attributes in process `syz.3.4739'. [ 801.094696][T25829] netlink: 392 bytes leftover after parsing attributes in process `syz.3.4739'. [ 801.106104][T25819] veth0_macvtap: left allmulticast mode [ 801.114956][T25829] openvswitch: netlink: Flow key attr not present in new flow. [ 801.256234][ T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 801.278572][ T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.300432][ T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 801.319711][ T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.347080][ T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 801.376353][ T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.397276][ T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 801.424308][ T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.472122][T25834] bond7: entered allmulticast mode [ 801.540795][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.557457][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 34133 - 0 [ 801.566795][ T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 801.594431][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.610456][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 34133 - 0 [ 801.618886][ T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 801.698872][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.715249][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 34133 - 0 [ 801.740004][ T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 801.815374][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.837221][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 34133 - 0 [ 801.857155][ T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 801.974809][T25865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4747'. [ 802.002492][T25865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4747'. [ 802.043873][T25865] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4747'. [ 802.060542][T25872] netlink: 'syz.2.4751': attribute type 7 has an invalid length. [ 802.103777][T25872] netlink: 'syz.2.4751': attribute type 7 has an invalid length. [ 802.103788][T22260] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.103858][T22260] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.153821][T22260] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.167006][T22260] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.210664][T25878] gre1: entered promiscuous mode [ 802.485350][T25890] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4756'. [ 802.904480][T25918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4763'. [ 803.207363][T25934] batadv_slave_1: entered promiscuous mode [ 803.243661][T25930] batadv_slave_1: left promiscuous mode [ 803.606881][T25957] netlink: 'syz.1.4772': attribute type 3 has an invalid length. [ 803.631923][T25955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 805.261683][T26032] __nla_validate_parse: 5 callbacks suppressed [ 805.261707][T26032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4792'. [ 805.469302][T26035] netlink: 'syz.4.4793': attribute type 1 has an invalid length. [ 805.583494][T26045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4796'. [ 805.649379][T26046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4796'. [ 805.731897][T26045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4796'. [ 805.741960][T26045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.775553][T26045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.908340][T26048] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4798'. [ 806.122276][T26056] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 806.251954][T26060] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4800'. [ 806.397691][T26073] netlink: 'syz.2.4803': attribute type 5 has an invalid length. [ 807.060030][T26090] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.101828][T26090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.238447][T26090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.516343][T26102] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4814'. [ 807.905705][T26132] netlink: 'syz.1.4821': attribute type 13 has an invalid length. [ 807.966927][T26132] sch_tbf: burst 6 is lower than device gretap0 mtu (1514) ! [ 810.034303][T26103] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 810.334851][T26158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4827'. [ 810.488307][T26152] batadv0: entered promiscuous mode [ 810.551663][T26152] batadv0: entered allmulticast mode [ 810.620439][T26156] lo speed is unknown, defaulting to 1000 [ 810.797710][T26152] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4826'. [ 810.817149][T26179] netlink: 'syz.3.4831': attribute type 39 has an invalid length. [ 810.832041][ C0] bridge0: port 3(vlan2) entered forwarding state [ 810.840672][ C0] bridge0: topology change detected, propagating [ 811.180603][T26189] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4832'. [ 811.588124][T26207] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4835'. [ 811.648190][T26209] bridge0: port 3(vlan2) entered blocking state [ 811.655973][T26209] bridge0: port 3(vlan2) entered disabled state [ 811.665120][T26209] vlan2: entered allmulticast mode [ 811.673398][T26209] vlan2: entered promiscuous mode [ 811.874246][T26225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4841'. [ 811.897081][T26218] macvtap1: entered promiscuous mode [ 811.902693][T26225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4841'. [ 811.953420][T26218] macvtap1: entered allmulticast mode [ 811.964774][T26218] veth1_vlan: entered allmulticast mode [ 811.984274][T26222] macvtap2: entered promiscuous mode [ 811.990195][T26222] macvtap2: entered allmulticast mode [ 812.036040][T26234] netlink: 'syz.0.4843': attribute type 1 has an invalid length. [ 812.070248][T26227] netlink: 'syz.2.4841': attribute type 6 has an invalid length. [ 812.208675][T26241] netlink: 'syz.4.4842': attribute type 1 has an invalid length. [ 812.538364][T26253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4848'. [ 812.572579][T26253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4848'. [ 812.608794][T26254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4848'. [ 812.641473][T26254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4848'. [ 812.985503][T26277] netlink: 'syz.3.4851': attribute type 4 has an invalid length. [ 813.022426][T26279] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 813.234154][T26286] netlink: 'syz.1.4857': attribute type 3 has an invalid length. [ 813.317302][T26288] gretap0: entered promiscuous mode [ 813.360798][T26288] vlan0: entered promiscuous mode [ 813.892903][T26317] netlink: zone id is out of range [ 814.777734][T26333] netlink: 'syz.0.4872': attribute type 1 has an invalid length. [ 814.874116][T26333] bond5: (slave dummy0): making interface the new active one [ 814.884098][T26333] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 814.894073][T26333] netlink: 'syz.0.4872': attribute type 10 has an invalid length. [ 814.912664][T26333] dummy0: entered promiscuous mode [ 814.933883][T26333] bond5: (slave dummy0): Releasing active interface [ 815.145623][T26343] macvlan2: entered promiscuous mode [ 815.153174][T26343] erspan0: entered promiscuous mode [ 815.160170][T26343] erspan0: left promiscuous mode [ 815.344832][T26350] __nla_validate_parse: 15 callbacks suppressed [ 815.344858][T26350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4876'. [ 815.604036][T26344] bridge0: port 3(vlan2) entered disabled state [ 815.950943][ T5631] Bluetooth: hci3: command 0x0406 tx timeout [ 816.972211][T26374] netlink: 632 bytes leftover after parsing attributes in process `syz.0.4879'. [ 816.986512][ T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 816.996063][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 34133 - 0 [ 817.005321][ T12] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 817.015237][ T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 817.024625][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 34133 - 0 [ 817.035136][ T12] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 817.046826][ T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 817.056138][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 34133 - 0 [ 817.065470][ T12] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 817.082909][ T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 817.092366][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 34133 - 0 [ 817.101141][ T12] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 817.676544][T26402] netlink: 'syz.4.4889': attribute type 21 has an invalid length. [ 817.730626][T26402] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4889'. [ 817.758519][T26402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4889'. [ 817.794279][T26417] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4895'. [ 817.804552][T26414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4894'. [ 817.857970][T26418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4894'. [ 818.105639][T26431] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4897'. [ 818.754156][T26450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4904'. [ 821.097344][T26434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 821.107380][T26442] netlink: 'syz.3.4900': attribute type 1 has an invalid length. [ 821.118732][T26442] nbd: error processing sock list [ 821.167498][T26446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4902'. [ 821.554637][T26483] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4913'. [ 821.577533][T26483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4913'. [ 821.602144][T26482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4912'. [ 821.623587][T26482] netlink: 'syz.1.4912': attribute type 2 has an invalid length. [ 821.642393][T26482] tipc: Can't bind to reserved service type 0 [ 821.660169][T26482] sctp: [Deprecated]: syz.1.4912 (pid 26482) Use of int in maxseg socket option. [ 821.660169][T26482] Use struct sctp_assoc_value instead [ 821.681570][T26485] tipc: Started in network mode [ 821.692075][T26485] tipc: Node identity 6a6930b3523, cluster identity 4711 [ 821.718913][T26485] tipc: Enabled bearer , priority 0 [ 821.961043][T26494] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4916'. [ 821.984109][T26497] Unknown options in mask 6 [ 822.020495][T26499] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.174433][T26499] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.327005][T26513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4920'. [ 822.355933][T26513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4920'. [ 822.382622][T26513] netlink: 'syz.4.4920': attribute type 18 has an invalid length. [ 826.801405][T26510] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 826.808671][T26510] bridge0: port 1(veth0_virt_wifi) entered listening state [ 826.837416][T26520] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 826.866134][T26523] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 826.882248][T24083] tipc: Node number set to 945369267 [ 826.912703][T26499] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 826.988045][T26499] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.062052][T26540] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 827.116032][T26533] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 827.294696][T22261] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.338320][T26556] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4930'. [ 827.359882][T26549] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4928'. [ 827.380521][ T57] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.462366][T22261] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.506808][T26565] netlink: 'syz.0.4932': attribute type 1 has an invalid length. [ 827.565848][T26562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4932'. [ 827.665827][T26565] 8021q: adding VLAN 0 to HW filter on device bond6 [ 827.677357][T22261] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 827.795910][T26565] netlink: 'syz.0.4932': attribute type 1 has an invalid length. [ 827.968608][T26582] bond6: (slave batadv2): Opening slave failed [ 828.014628][T26581] nbd: nbd2 already in use [ 828.022298][T26581] block nbd2: NBD_DISCONNECT [ 828.028069][T26581] block nbd2: Send disconnect failed -32 [ 828.045245][T26581] block nbd2: shutting down sockets [ 828.101206][T26592] tipc: Enabling of bearer rejected, failed to enable media [ 829.104418][ T12] bond1 (unregistering): Released all slaves [ 829.127735][ T12] bond2 (unregistering): Released all slaves [ 829.149445][ T12] bond3 (unregistering): Released all slaves [ 829.175143][ T12] bond4 (unregistering): Released all slaves [ 829.230669][ T12] bond5 (unregistering): Released all slaves [ 829.251225][ T12] bond6 (unregistering): Released all slaves [ 829.278739][ T12] bond7 (unregistering): Released all slaves [ 829.303751][ T12] bond8 (unregistering): Released all slaves [ 829.338994][ T12] bond9 (unregistering): Released all slaves [ 829.614383][ T12] tipc: Disabling bearer [ 829.620833][ T12] tipc: Left network mode [ 829.687386][T26639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4945'. [ 829.729971][T26640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4944'. [ 830.088361][T26646] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 830.143780][T26646] bond7 (unregistering): Released all slaves [ 830.377372][T26671] netlink: 'syz.4.4952': attribute type 1 has an invalid length. [ 830.385501][T26671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 830.486654][T26674] netlink: 'syz.3.4953': attribute type 4 has an invalid length. [ 830.504520][T26674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4953'. [ 830.523409][T26663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4949'. [ 830.536899][T26674] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4953'. [ 830.762077][T26682] lo speed is unknown, defaulting to 1000 [ 830.793550][T26695] netlink: 5744 bytes leftover after parsing attributes in process `syz.2.4958'. [ 830.804376][T26696] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4957'. [ 831.486409][T26715] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 831.486409][T26715] Please contact the netfilter-devel mailing list or update your nftables rules. [ 831.882344][T26730] batadv_slave_1: entered promiscuous mode [ 832.106225][T26740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 832.163664][ T12] team0 (unregistering): Port device veth1_to_hsr removed [ 832.792785][T26763] netlink: 'syz.1.4973': attribute type 1 has an invalid length. [ 832.827195][T26763] nbd: error processing sock list [ 833.172262][ T12] IPVS: stop unused estimator thread 0... [ 833.235280][T26768] lo speed is unknown, defaulting to 1000 [ 833.454532][T26773] netlink: 'syz.4.4978': attribute type 1 has an invalid length. [ 833.495092][T26775] __nla_validate_parse: 1 callbacks suppressed [ 833.495113][T26775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4979'. [ 833.596784][T26780] netlink: 51 bytes leftover after parsing attributes in process `syz.0.4980'. [ 833.809851][T26789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4983'. [ 833.840200][ T48] nci: nci_rx_work: unknown MT 0x7 [ 833.895885][T26796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4983'. [ 833.907187][T26789] bond7 (unregistering): Released all slaves [ 833.993053][T26800] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4981'. [ 834.026244][T26800] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4981'. [ 834.517866][T26783] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 834.542709][T26819] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4989'. [ 834.820389][T26818] lo speed is unknown, defaulting to 1000 [ 835.033779][T26843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 835.065237][T26843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 835.145045][T26849] netlink: 'syz.1.4996': attribute type 1 has an invalid length. [ 835.165178][T26849] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4996'. [ 835.257486][T26849] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4996'. [ 835.376409][T26860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5000'. [ 835.646487][T26819] lo speed is unknown, defaulting to 1000 [ 836.382696][T26909] x_tables: duplicate underflow at hook 2 [ 836.543243][T26878] lo speed is unknown, defaulting to 1000 [ 837.188091][T22279] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.210964][T22279] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.454437][T22279] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.470030][T22279] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.837701][T26982] __nla_validate_parse: 3 callbacks suppressed [ 838.837723][T26982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5029'. [ 838.854237][T26982] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5029'. [ 838.864139][T26982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5029'. [ 838.933753][T26983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5030'. [ 839.097713][T26996] geneve0: Caught tx_queue_len zero misconfig [ 839.113714][ T29] audit: type=1107 audit(1779668056.293:13): pid=26995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 839.162507][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.179381][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.272882][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.293728][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.482523][T27006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5038'. [ 839.574096][T27023] netlink: 'syz.3.5042': attribute type 8 has an invalid length. [ 839.794557][T27034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5045'. [ 839.825178][T27034] netlink: 'syz.3.5045': attribute type 32 has an invalid length. [ 839.834760][T27034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5045'. [ 839.890304][T27034] bond7: option coupled_control: invalid value (36) [ 839.902575][T27034] bond7 (unregistering): Released all slaves [ 840.125770][T27055] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5051'. [ 840.150860][T27054] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5051'. [ 840.216146][T27055] 8021q: adding VLAN 0 to HW filter on device bond7 [ 840.563167][T27077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5058'. [ 841.302743][T27114] lo speed is unknown, defaulting to 1000 [ 841.320934][T27109] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 841.443882][T27120] netlink: 'syz.0.5067': attribute type 13 has an invalid length. [ 841.486934][T27120] netlink: 'syz.0.5067': attribute type 17 has an invalid length. [ 841.577068][T27120] ip6_vti0: left promiscuous mode [ 841.635448][T27120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.661286][T27120] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.679343][T27120] dummy0: left promiscuous mode [ 841.701781][T27120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.831178][T27120] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 841.841729][T27120] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 841.853149][T27120] 0·: left allmulticast mode [ 841.857939][T27120] hsr_slave_0: left allmulticast mode [ 841.863562][T27120] hsr_slave_1: left allmulticast mode [ 841.892966][T27120] bridge0: port 3(vlan2) entered blocking state [ 841.899456][T27120] bridge0: port 3(vlan2) entered listening state [ 841.914166][T27120] gtp0: left promiscuous mode [ 841.919248][T27120] gtp0: left allmulticast mode [ 841.937619][T27120] geneve2: left promiscuous mode [ 841.946639][T27120] bond1: left allmulticast mode [ 841.952313][T27120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 841.962111][T27120] geneve3: left promiscuous mode [ 841.970788][T27120] bond2: left promiscuous mode [ 841.976207][T27120] 8021q: adding VLAN 0 to HW filter on device bond2 [ 841.993746][T27120] 8021q: adding VLAN 0 to HW filter on device bond3 [ 842.006235][T27120] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 842.086168][T22279] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.109177][T22279] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.139856][ T57] wlan1: Trigger new scan to find an IBSS to join [ 842.150218][T22279] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 51883 - 0 [ 842.162192][T22279] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.173433][T22279] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.182694][T22279] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 51883 - 0 [ 842.219138][T27138] bond4: (slave bond0): Releasing backup interface [ 842.254630][T27138] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 842.289742][T22279] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.302456][T22279] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.315613][T22279] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 51883 - 0 [ 842.333683][T22279] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.356650][T22279] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.386821][T22279] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 51883 - 0 [ 842.437041][T22260] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 843.823208][T27224] syzkaller1: entered promiscuous mode [ 843.837372][T27224] syzkaller1: entered allmulticast mode [ 843.857136][T27224] netlink: 'syz.2.5095': attribute type 1 has an invalid length. [ 843.865428][T27224] netlink: 'syz.2.5095': attribute type 2 has an invalid length. [ 844.222328][T27254] x_tables: duplicate underflow at hook 1 [ 844.329136][T27262] __nla_validate_parse: 3 callbacks suppressed [ 844.329157][T27262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5105'. [ 844.445788][T27271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5105'. [ 844.756020][T27288] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5110'. [ 844.905913][T27299] dummy0: Caught tx_queue_len zero misconfig [ 845.073895][ T12] wlan1: Trigger new scan to find an IBSS to join [ 845.241252][T27311] bond8 (unregistering): Released all slaves [ 845.329483][T27315] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5117'. [ 845.385580][T27315] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 845.538031][T27334] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5121'. [ 845.555994][T27329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5120'. [ 845.582651][T27329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5120'. [ 845.788175][T27344] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5123'. [ 846.119880][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 846.198979][T27362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5128'. [ 846.209090][T27362] bond0: Unable to set up delay as MII monitoring is disabled [ 846.281084][T27365] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5131'. [ 847.066152][T27415] netlink: 'syz.4.5142': attribute type 1 has an invalid length. [ 847.131817][T27415] bond8: entered promiscuous mode [ 847.137514][T27415] 8021q: adding VLAN 0 to HW filter on device bond8 [ 847.191179][T27415] bond8: (slave bridge19): making interface the new active one [ 847.199085][T27415] bridge19: entered promiscuous mode [ 847.211196][T27415] bond8: (slave bridge19): Enslaving as an active interface with an up link [ 847.236574][T27415] bond8: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 847.250673][T27415] bond8: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 848.114157][T22278] wlan1: Trigger new scan to find an IBSS to join [ 849.042430][T27525] netlink: 'syz.3.5175': attribute type 1 has an invalid length. [ 849.059561][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.777210][T27573] __nla_validate_parse: 16 callbacks suppressed [ 849.777232][T27573] netlink: 840 bytes leftover after parsing attributes in process `syz.2.5193'. [ 849.829162][T27574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5192'. [ 849.938794][T27570] ip6tnl0: left promiscuous mode [ 849.968407][T27578] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5191'. [ 849.995510][T27570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.029448][T27570] batadv_slave_1: left promiscuous mode [ 850.054191][T27570] geneve1: left promiscuous mode [ 850.334943][T27570] bridge2: left promiscuous mode [ 850.344942][T27591] netlink: 'syz.2.5197': attribute type 83 has an invalid length. [ 850.397521][T27570] bond2: left promiscuous mode [ 850.464470][T27570] bond3: left promiscuous mode [ 850.490398][T27598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5199'. [ 850.502631][T27570] bridge3: left promiscuous mode [ 850.559248][T27570] macvtap1: left promiscuous mode [ 850.677691][T22278] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.695880][T22278] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 850.776562][T22278] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.810537][T22278] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 850.852790][T22278] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.864476][T22278] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 850.874232][T27613] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5204'. [ 850.895432][T27613] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5204'. [ 850.910450][T22278] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 850.920430][T22278] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 850.981491][T27616] batadv0: left promiscuous mode [ 851.032906][T27616] veth1_macvtap: left promiscuous mode [ 851.053518][T27616] veth0_macvtap: left promiscuous mode [ 851.063440][T27616] veth0_macvtap: entered promiscuous mode [ 851.083524][T27616] veth0_macvtap: entered allmulticast mode [ 851.105713][T27616] veth1_macvtap: entered promiscuous mode [ 851.130663][T27630] netlink: 'syz.4.5208': attribute type 10 has an invalid length. [ 851.156781][T27616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 851.163663][T27630] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5208'. [ 851.174565][T27616] vlan2: left promiscuous mode [ 851.182437][T27616] bond_slave_1: left promiscuous mode [ 851.207613][T27616] ipip0: left promiscuous mode [ 851.238173][T27632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5209'. [ 851.252614][T27616] 8021q: adding VLAN 0 to HW filter on device bond2 [ 851.272092][T27616] 8021q: adding VLAN 0 to HW filter on device bond3 [ 851.305369][T27616] 8021q: adding VLAN 0 to HW filter on device bond4 [ 851.314855][T27616] bridge0: port 1(syz_tun) entered blocking state [ 851.321609][T27616] bridge0: port 1(syz_tun) entered forwarding state [ 851.336660][T27616] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 851.348443][T27635] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5209'. [ 851.375427][T27615] lo speed is unknown, defaulting to 1000 [ 851.396585][T22277] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.411699][T22277] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.423596][T27607] lo speed is unknown, defaulting to 1000 [ 851.434325][T27632] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5209'. [ 851.466924][ T57] bond5: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 851.491008][T22277] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.515138][T22277] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.956098][T27654] bond7: Unable to set up delay as MII monitoring is disabled [ 851.990333][T27654] bond7 (unregistering): Released all slaves [ 852.036544][T27615] lo speed is unknown, defaulting to 1000 [ 852.088134][T27615] lo speed is unknown, defaulting to 1000 [ 852.775448][T27615] infiniband sqz0: set active [ 852.784830][T27615] infiniband sqz0: added lo [ 852.798818][T27615] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 852.804054][T27615] infiniband sqz0: Couldn't open port 1 [ 852.835014][T27615] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 852.865034][T27615] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 852.896643][T27615] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 853.068050][T27615] RDS/IB: sqz0: added [ 853.077113][T27615] smc: adding ib device sqz0 with port count 1 [ 853.132814][T27615] smc: ib device sqz0 port 1 has no pnetid [ 853.215538][T27680] vlan3: entered allmulticast mode [ 853.230293][T27680] bond0: entered allmulticast mode [ 853.245825][T27680] bond_slave_0: entered allmulticast mode [ 853.259798][T27680] bond_slave_1: entered allmulticast mode [ 853.276194][T24057] lo speed is unknown, defaulting to 1000 [ 853.369987][T24083] lo speed is unknown, defaulting to 1000 [ 853.377792][T27615] lo speed is unknown, defaulting to 1000 [ 853.711918][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 854.000529][T27615] lo speed is unknown, defaulting to 1000 [ 854.062059][T27708] bond7 (unregistering): Released all slaves [ 854.357519][T27615] lo speed is unknown, defaulting to 1000 [ 854.779508][T27615] lo speed is unknown, defaulting to 1000 [ 855.006817][T27734] __nla_validate_parse: 4 callbacks suppressed [ 855.006842][T27734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5236'. [ 855.104435][T27615] lo speed is unknown, defaulting to 1000 [ 855.480688][T27615] lo speed is unknown, defaulting to 1000 [ 855.736341][T27760] netlink: 'syz.3.5244': attribute type 3 has an invalid length. [ 855.780147][T27615] lo speed is unknown, defaulting to 1000 [ 855.798678][T27760] syzkaller1: entered promiscuous mode [ 855.809789][T27760] syzkaller1: entered allmulticast mode [ 856.177094][T27615] lo speed is unknown, defaulting to 1000 [ 856.439114][T27670] lo speed is unknown, defaulting to 1000 [ 856.910119][ C0] bridge0: port 1(veth0_virt_wifi) entered learning state [ 857.148028][T27794] IPv6: NLM_F_CREATE should be specified when creating new route [ 857.154829][T27781] bond7: entered promiscuous mode [ 857.182485][T27781] 8021q: adding VLAN 0 to HW filter on device bond7 [ 857.646321][T27808] veth0: entered promiscuous mode [ 857.736787][T27808] veth0: left promiscuous mode [ 858.317578][T27842] netlink: 'syz.1.5269': attribute type 8 has an invalid length. [ 858.396248][T27848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5269'. [ 859.046871][T27885] lo speed is unknown, defaulting to 1000 [ 859.066246][T27889] netlink: 211856 bytes leftover after parsing attributes in process `syz.3.5281'. [ 859.091285][T27887] syzkaller0: entered promiscuous mode [ 859.098378][T27887] syzkaller0: entered allmulticast mode [ 859.118748][T27891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5282'. [ 859.149463][T27889] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 859.354574][T27898] netlink: 'syz.3.5284': attribute type 10 has an invalid length. [ 859.380265][T27898] ipvlan0: entered allmulticast mode [ 859.397215][T27898] veth0_vlan: entered allmulticast mode [ 859.422408][T27898] team0: Device ipvlan0 failed to register rx_handler [ 859.506462][T27904] netlink: 212320 bytes leftover after parsing attributes in process `syz.2.5285'. [ 859.739180][T27911] vlan0: entered allmulticast mode [ 859.751308][T27885] lo speed is unknown, defaulting to 1000 [ 859.852888][T27921] netlink: 'syz.2.5291': attribute type 1 has an invalid length. [ 859.889798][T27921] netlink: 936 bytes leftover after parsing attributes in process `syz.2.5291'. [ 859.921966][T27921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5291'. [ 860.035214][T27925] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 860.062825][T27925] bond7 (unregistering): Released all slaves [ 860.633676][T27943] sysfs: cannot create duplicate filename '/class/ieee80211/1ùà^!‚Y‡°”õËí [ 860.633676][T27943] 3ìUH†5rºBnœæ\' [ 860.674699][T27943] CPU: 0 UID: 0 PID: 27943 Comm: syz.2.5297 Not tainted syzkaller #0 PREEMPT(full) [ 860.674736][T27943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 860.674752][T27943] Call Trace: [ 860.674763][T27943] [ 860.674775][T27943] dump_stack_lvl+0xe8/0x150 [ 860.674818][T27943] sysfs_warn_dup+0x8e/0xa0 [ 860.674889][T27943] sysfs_do_create_link_sd+0xc0/0x110 [ 860.674926][T27943] device_add_class_symlinks+0x1cf/0x240 [ 860.675095][T27943] device_add+0x475/0xbb0 [ 860.675132][T27943] wiphy_register+0x1fb1/0x2fe0 [ 860.675274][T27943] ? __pfx_wiphy_register+0x10/0x10 [ 860.675312][T27943] ? __pfx_netdev_run_todo+0x10/0x10 [ 860.675414][T27943] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 860.675496][T27943] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 860.675639][T27943] ieee80211_register_hw+0x3c53/0x4910 [ 860.675710][T27943] ? ieee80211_register_hw+0x1961/0x4910 [ 860.675777][T27943] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 860.675809][T27943] ? __asan_memset+0x22/0x50 [ 860.675842][T27943] ? __hrtimer_setup+0x1b7/0x260 [ 860.675890][T27943] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 860.676006][T27943] mac80211_hwsim_new_radio+0x3306/0x57b0 [ 860.676087][T27943] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 860.676131][T27943] ? __asan_memcpy+0x40/0x70 [ 860.676170][T27943] hwsim_new_radio_nl+0xd96/0xfa0 [ 860.676229][T27943] genl_family_rcv_msg_doit+0x22a/0x330 [ 860.676359][T27943] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 860.676414][T27943] ? bpf_lsm_capable+0x9/0x20 [ 860.676440][T27943] ? security_capable+0x7e/0x2c0 [ 860.676534][T27943] genl_rcv_msg+0x61c/0x7a0 [ 860.676579][T27943] ? __pfx_genl_rcv_msg+0x10/0x10 [ 860.676614][T27943] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 860.676660][T27943] ? __pfx_ref_tracker_free+0x10/0x10 [ 860.676745][T27943] netlink_rcv_skb+0x232/0x4b0 [ 860.676775][T27943] ? __pfx_genl_rcv_msg+0x10/0x10 [ 860.676813][T27943] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 860.676864][T27943] ? down_read+0x270/0x2e0 [ 860.676938][T27943] ? genl_rcv+0xd/0x40 [ 860.676975][T27943] genl_rcv+0x28/0x40 [ 860.677008][T27943] netlink_unicast+0x75c/0x8e0 [ 860.677050][T27943] netlink_sendmsg+0x813/0xb40 [ 860.677093][T27943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 860.677128][T27943] ? aa_sock_msg_perm+0xf1/0x1b0 [ 860.677184][T27943] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 860.677223][T27943] ____sys_sendmsg+0x972/0x9f0 [ 860.677257][T27943] ? __might_fault+0xaf/0x130 [ 860.677307][T27943] ? __pfx_____sys_sendmsg+0x10/0x10 [ 860.677349][T27943] ? import_iovec+0x73/0xa0 [ 860.677422][T27943] ___sys_sendmsg+0x2a5/0x360 [ 860.677449][T27943] ? __lock_acquire+0x6b5/0x2cf0 [ 860.677484][T27943] ? __pfx____sys_sendmsg+0x10/0x10 [ 860.677522][T27943] ? futex_wake+0x4ac/0x580 [ 860.677604][T27943] ? __fget_files+0x2a/0x420 [ 860.677642][T27943] ? __fget_files+0x3a0/0x420 [ 860.677689][T27943] __x64_sys_sendmsg+0x1bd/0x2a0 [ 860.677722][T27943] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 860.677764][T27943] ? rcu_is_watching+0x15/0xb0 [ 860.677809][T27943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.677838][T27943] do_syscall_64+0x15f/0xf80 [ 860.677861][T27943] ? trace_irq_disable+0x3b/0x140 [ 860.677900][T27943] ? clear_bhb_loop+0x40/0x90 [ 860.677933][T27943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.677958][T27943] RIP: 0033:0x7f5ec8d9ce59 [ 860.677984][T27943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.678005][T27943] RSP: 002b:00007f5ec6ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 860.678032][T27943] RAX: ffffffffffffffda RBX: 00007f5ec9015fa0 RCX: 00007f5ec8d9ce59 [ 860.678051][T27943] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 860.678067][T27943] RBP: 00007f5ec8e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 860.678083][T27943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 860.678097][T27943] R13: 00007f5ec9016038 R14: 00007f5ec9015fa0 R15: 00007ffe26c7c6b8 [ 860.678140][T27943] [ 861.757126][T27973] netlink: 'syz.0.5305': attribute type 13 has an invalid length. [ 861.930088][T27981] xt_hashlimit: size too large, truncated to 1048576 [ 862.097346][T27973] bridge0: port 3(vlan2) entered disabled state [ 862.141744][T27989] netlink: 'syz.2.5308': attribute type 1 has an invalid length. [ 863.083724][T27989] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 863.123358][T22260] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 863.161494][T22260] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.173128][T22260] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 51883 - 0 [ 863.185221][T22260] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 863.194471][T22260] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.203220][T22260] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 51883 - 0 [ 863.212866][T22260] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 863.222506][T22260] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.255439][T22260] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 51883 - 0 [ 863.276299][T22260] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 863.295483][T22260] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.313585][T22260] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 51883 - 0 [ 863.492112][T28020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5315'. [ 863.522995][T28022] netlink: 'syz.2.5314': attribute type 11 has an invalid length. [ 863.562716][T28026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5316'. [ 863.762659][T28026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.781537][T28026] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.798511][T28026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.816985][T28044] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 863.903488][T28026] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 864.024684][T22277] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 864.097255][T28052] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.5321'. [ 864.163345][T28054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5323'. [ 865.066122][T28076] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5326'. [ 865.096138][T28080] lo speed is unknown, defaulting to 1000 [ 865.237708][T28084] bond8: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 865.290209][T28084] bond8: entered promiscuous mode [ 865.296181][T28084] 8021q: adding VLAN 0 to HW filter on device bond8 [ 865.411928][T28094] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 865.500290][T28094] bond7 (unregistering): Released all slaves [ 865.639422][T28106] netlink: 'syz.2.5335': attribute type 10 has an invalid length. [ 865.696089][T28107] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 865.738358][T28080] lo speed is unknown, defaulting to 1000 [ 865.866145][T28111] xt_hashlimit: invalid rate [ 865.891417][T28109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 866.010308][T28109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5336'. [ 866.202994][T28124] netlink: 'syz.2.5340': attribute type 1 has an invalid length. [ 866.211165][T28124] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5340'. [ 866.739389][T28124] xfrm1: entered allmulticast mode [ 867.505456][T28151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5348'. [ 867.544632][T28157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5349'. [ 867.572133][T28151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5348'. [ 867.989523][T28141] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 868.016176][T28141] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 868.231755][T28178] netlink: 'syz.3.5354': attribute type 11 has an invalid length. [ 868.256430][T28178] netlink: 'syz.3.5354': attribute type 1 has an invalid length. [ 868.262636][T28179] netlink: 'syz.0.5353': attribute type 1 has an invalid length. [ 868.360299][T28179] netlink: 'syz.0.5353': attribute type 1 has an invalid length. [ 868.403700][T28179] netlink: 'syz.0.5353': attribute type 1 has an invalid length. [ 868.582685][T28181] bond7: (slave veth9): Enslaving as an active interface with a down link [ 868.658824][T28181] __nla_validate_parse: 2 callbacks suppressed [ 868.658846][T28181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5354'. [ 868.684752][T28196] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5356'. [ 868.713777][T28181] netlink: 'syz.3.5354': attribute type 5 has an invalid length. [ 868.730868][T28181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5354'. [ 868.751449][T28182] bond7: (slave dummy0): making interface the new active one [ 868.785797][T28182] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 868.861976][T28202] netlink: 'syz.2.5357': attribute type 2 has an invalid length. [ 868.882786][T28202] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5357'. [ 869.148448][T28216] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5359'. [ 869.336332][T22279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.353092][T22279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.405289][T28226] netlink: 480 bytes leftover after parsing attributes in process `syz.1.5364'. [ 869.602681][T28237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5367'. [ 869.705181][T28237] bond7: entered promiscuous mode [ 869.720923][T28237] 8021q: adding VLAN 0 to HW filter on device bond7 [ 869.799900][T28240] block nbd0: NBD_DISCONNECT [ 869.804903][T28240] block nbd0: Send disconnect failed -32 [ 869.811146][T28240] block nbd0: shutting down sockets [ 869.890769][T28245] bond9: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 869.915242][T28245] bond9 (unregistering): Released all slaves [ 870.292453][T28272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5378'. [ 870.596126][T28275] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 870.661524][T28274] bridge20: port 1(gretap1) entered blocking state [ 870.668387][T28274] bridge20: port 1(gretap1) entered disabled state [ 870.676979][T28274] gretap1: entered allmulticast mode [ 870.685197][T28274] gretap1: entered promiscuous mode [ 871.221669][T28300] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5385'. [ 871.754007][T28322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5391'. [ 871.931408][T28335] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20000 [ 872.522696][T28375] geneve3: entered promiscuous mode [ 872.540934][T28375] geneve3: entered allmulticast mode [ 872.704028][T28391] gtp3: entered promiscuous mode [ 872.713919][T28391] gtp3: entered allmulticast mode [ 872.733164][T28391] team0: Device gtp3 is of different type [ 872.879461][T28399] bond9: option min_links: invalid value (18446744073709551612) [ 872.888967][T28399] bond9: option min_links: allowed values 0 - 2147483647 [ 872.908940][T28399] bond9 (unregistering): Released all slaves [ 872.948666][T28406] tipc: Enabling of bearer rejected, failed to enable media [ 873.237472][T28423] lo speed is unknown, defaulting to 1000 [ 873.272372][T28423] lo speed is unknown, defaulting to 1000 [ 873.308752][T28423] lo speed is unknown, defaulting to 1000 [ 873.320685][T28431] netlink: 'syz.1.5423': attribute type 29 has an invalid length. [ 873.329965][T28423] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 873.374793][T28423] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 873.421754][T28437] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 873.430950][T28423] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 873.557855][T28423] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 873.694239][T28423] lo speed is unknown, defaulting to 1000 [ 873.754820][T28423] lo speed is unknown, defaulting to 1000 [ 874.006729][T28464] tipc: Failed to remove unknown binding: 66,0,0/1109728635:4183571280/4183571282 [ 874.051818][T28464] tipc: Failed to remove unknown binding: 66,0,0/1109728635:4183571280/4183571281 [ 874.068850][T28466] tipc: Failed to remove unknown binding: 66,0,0/1109728635:4183571280/4183571282 [ 874.079236][T28466] tipc: Failed to remove unknown binding: 66,0,0/1109728635:4183571280/4183571281 [ 874.539844][T28423] lo speed is unknown, defaulting to 1000 [ 874.551742][T28423] lo speed is unknown, defaulting to 1000 [ 874.633814][T28468] syzkaller0: entered promiscuous mode [ 874.639553][T28468] syzkaller0: entered allmulticast mode [ 874.668913][T28423] lo speed is unknown, defaulting to 1000 [ 874.688057][T28423] lo speed is unknown, defaulting to 1000 [ 874.954062][T28479] __nla_validate_parse: 16 callbacks suppressed [ 874.954087][T28479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5432'. [ 875.082564][T28487] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5430'. [ 875.134199][T28487] netlink: 254 bytes leftover after parsing attributes in process `syz.0.5430'. [ 875.161343][T28487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5430'. [ 875.258045][T28487] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5430'. [ 879.796484][T28512] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5438'. [ 879.819155][T28516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5436'. [ 879.852552][T28512] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 879.935484][T28512] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 880.021044][T28524] lo speed is unknown, defaulting to 1000 [ 880.033548][T28512] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 880.093403][T28512] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 880.152192][T28536] SET target dimension over the limit! [ 880.159535][T28536] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5444'. [ 880.174424][T28536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5444'. [ 880.228636][T28536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5444'. [ 880.432731][T28548] netlink: 'syz.0.5446': attribute type 1 has an invalid length. [ 880.458272][T28547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5447'. [ 880.477738][T28547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5447'. [ 880.571860][T28554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5446'. [ 880.704529][T28552] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 880.739967][T28552] bond9: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 880.776984][T28552] bond9: (slave vxcan1): making interface the new active one [ 880.818109][T28552] bond9: (slave vxcan1): Enslaving as an active interface with an up link [ 880.839694][T28567] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5451'. [ 880.858116][T28554] bond9 (unregistering): (slave vxcan1): Releasing backup interface [ 880.870544][T28554] bond9 (unregistering): Released all slaves [ 881.325176][T28524] lo speed is unknown, defaulting to 1000 [ 881.334128][T28568] bridge0: port 1(syz_tun) entered disabled state [ 881.349999][T28568] bridge0: entered allmulticast mode [ 881.369494][T28570] syz_tun: left allmulticast mode [ 881.393977][T28570] syz_tun: left promiscuous mode [ 881.440295][T28570] bridge0: port 1(syz_tun) entered disabled state [ 881.462543][T28574] netlink: 'syz.1.5452': attribute type 58 has an invalid length. [ 881.492364][T28574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5452'. [ 881.601048][T28570] bond4: (slave bridge0): Releasing active interface [ 881.701262][T28579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5453'. [ 881.877075][T28524] lo speed is unknown, defaulting to 1000 [ 882.456549][T28601] lo: Caught tx_queue_len zero misconfig [ 882.724834][T28614] IPVS: nq: FWM 3 0x00000003 - no destination available [ 882.794255][T28614] netlink: 'syz.0.5463': attribute type 11 has an invalid length. [ 882.850701][T28614] netlink: 'syz.0.5463': attribute type 5 has an invalid length. [ 882.895481][T28614] netlink: 6548 bytes leftover after parsing attributes in process `syz.0.5463'. [ 884.027473][T28640] syzkaller0: left promiscuous mode [ 884.043160][T28640] syzkaller0: left allmulticast mode [ 884.074382][T28640] tc action pedit offset must be on 32 bit boundaries [ 884.083587][T28640] tc action pedit offset must be on 32 bit boundaries [ 884.090609][T28640] tc action pedit offset must be on 32 bit boundaries [ 884.097428][T28640] tc action pedit offset must be on 32 bit boundaries [ 884.104330][T28640] tc action pedit offset must be on 32 bit boundaries [ 884.111188][T28640] tc action pedit offset must be on 32 bit boundaries [ 884.117994][T28640] tc action pedit offset must be on 32 bit boundaries [ 884.124894][T28640] tc action pedit offset must be on 32 bit boundaries [ 884.131840][T28640] tc action pedit offset must be on 32 bit boundaries [ 884.138650][T28640] tc action pedit offset must be on 32 bit boundaries [ 884.145560][T28640] 0: reclassify loop, rule prio 0, protocol 800 [ 884.234637][T28643] netlink: 'syz.1.5468': attribute type 11 has an invalid length. [ 885.035145][T28678] lo speed is unknown, defaulting to 1000 [ 885.134757][T28682] tipc: Enabled bearer , priority 0 [ 885.162041][T28680] __nla_validate_parse: 1 callbacks suppressed [ 885.162075][T28680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5475'. [ 885.278180][T28682] syzkaller0: entered promiscuous mode [ 885.290963][T28682] syzkaller0: entered allmulticast mode [ 885.304257][T28682] tipc: Resetting bearer [ 885.340090][T28681] tipc: Resetting bearer [ 885.562964][T28690] netlink: 'syz.2.5478': attribute type 30 has an invalid length. [ 885.674686][ T29] audit: type=1804 audit(1779668102.853:14): pid=28696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5479" name="/newroot/492/cgroup.controllers" dev="tmpfs" ino=2547 res=1 errno=0 [ 885.724639][ T29] audit: type=1800 audit(1779668102.853:15): pid=28696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5479" name="cgroup.controllers" dev="tmpfs" ino=2547 res=0 errno=0 [ 885.951798][T28704] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5481'. [ 886.944543][T28729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5485'. [ 886.957114][T28729] nbd: must specify a size in bytes for the device [ 886.992614][ C0] bridge0: port 1(veth0_virt_wifi) entered forwarding state [ 887.000086][ C0] bridge0: topology change detected, propagating [ 890.681777][T28681] tipc: Disabling bearer [ 890.692864][T28678] lo speed is unknown, defaulting to 1000 [ 890.715652][T28719] syzkaller1: entered allmulticast mode [ 890.861037][T28737] tipc: Enabled bearer , priority 0 [ 890.898829][T28746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5488'. [ 890.978214][T28747] netlink: 312 bytes leftover after parsing attributes in process `syz.1.5488'. [ 891.068903][T28750] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5489'. [ 891.085077][T28678] lo speed is unknown, defaulting to 1000 [ 891.102479][T28750] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5489'. [ 891.188608][T28737] tipc: Disabling bearer [ 891.347360][T28760] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5490'. [ 891.465819][T28760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5490'. [ 891.503663][T28761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5490'. [ 891.504306][T28760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5490'. [ 891.851116][T28767] sctp: [Deprecated]: syz.0.5493 (pid 28767) Use of struct sctp_assoc_value in delayed_ack socket option. [ 891.851116][T28767] Use struct sctp_sack_info instead [ 891.917945][T28767] sctp: [Deprecated]: syz.0.5493 (pid 28767) Use of struct sctp_assoc_value in delayed_ack socket option. [ 891.917945][T28767] Use struct sctp_sack_info instead [ 892.073299][T28782] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5496'. [ 892.150511][T28786] netlink: 165 bytes leftover after parsing attributes in process `syz.3.5497'. [ 892.683357][T28812] syzkaller0: entered promiscuous mode [ 892.792029][T28812] syzkaller0: entered allmulticast mode [ 893.151484][T28840] netlink: 'syz.2.5506': attribute type 1 has an invalid length. [ 893.454105][T28855] netlink: 'syz.2.5511': attribute type 3 has an invalid length. [ 893.500917][T28855] netlink: 'syz.2.5511': attribute type 2 has an invalid length. [ 893.530324][T28855] netlink: 'syz.2.5511': attribute type 2 has an invalid length. [ 894.695467][T28919] pimreg: entered allmulticast mode [ 894.746221][T28918] pimreg: left allmulticast mode [ 894.908328][T28933] tipc: New replicast peer: 255.255.255.255 [ 894.917222][T28933] tipc: Enabled bearer , priority 10 [ 894.936021][T28933] netlink: 'syz.1.5530': attribute type 11 has an invalid length. [ 895.165476][T28953] netlink: 'syz.1.5533': attribute type 1 has an invalid length. [ 895.556475][T28967] bond8: entered promiscuous mode [ 895.562257][T28967] bond8: entered allmulticast mode [ 895.966841][T28988] syzkaller1: entered promiscuous mode [ 895.988234][T28988] syzkaller1: entered allmulticast mode [ 896.122046][T28994] __nla_validate_parse: 12 callbacks suppressed [ 896.122070][T28994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5543'. [ 896.231938][T28996] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5544'. [ 896.359144][T29003] netlink: 'syz.2.5548': attribute type 13 has an invalid length. [ 896.387155][T29005] netlink: 'syz.1.5547': attribute type 1 has an invalid length. [ 896.654674][T29003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 896.724177][T29003] veth0_macvtap: left allmulticast mode [ 896.805612][T24071] lo speed is unknown, defaulting to 1000 [ 896.815441][T24071] sqz0: Port: 1 Link DOWN [ 896.849076][T29005] bond8: entered promiscuous mode [ 896.854921][T29005] 8021q: adding VLAN 0 to HW filter on device bond8 [ 896.894434][T29007] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 896.925553][T29007] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 896.970900][T29007] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 897.088920][T29032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5550'. [ 897.119685][T29032] netlink: 'syz.0.5550': attribute type 2 has an invalid length. [ 897.148163][T29032] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5550'. [ 897.201846][T22270] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 897.221683][T22270] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.251146][T22270] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 897.280290][T22270] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.320220][T24071] lo speed is unknown, defaulting to 1000 [ 897.327786][T22270] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 897.355668][T22270] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.392699][T22270] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 897.419656][T22270] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.703384][T29059] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5555'. [ 897.938446][T29076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5558'. [ 898.413651][T29095] xt_hashlimit: size too large, truncated to 1048576 [ 898.468551][T29094] lo speed is unknown, defaulting to 1000 [ 898.492922][T29105] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5566'. [ 898.523160][T29106] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5565'. [ 898.553080][T29105] xt_TCPMSS: Only works on TCP SYN packets [ 898.599962][T29104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5567'. [ 898.838196][T29114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5567'. [ 899.599275][T29094] lo speed is unknown, defaulting to 1000 [ 900.418929][T29094] lo speed is unknown, defaulting to 1000 [ 900.453218][T29189] netlink: 'syz.0.5580': attribute type 1 has an invalid length. [ 900.577108][T29192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 900.753961][T29197] netlink: 'syz.4.5581': attribute type 11 has an invalid length. [ 901.162838][T29209] __nla_validate_parse: 5 callbacks suppressed [ 901.162860][T29209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5585'. [ 901.192385][T29212] syzkaller0: entered promiscuous mode [ 901.208595][T29212] syzkaller0: entered allmulticast mode [ 901.446813][T29220] tipc: Resetting bearer [ 901.598144][T29224] Cannot find del_set index 4 as target [ 901.688261][T29229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5589'. [ 901.779089][T29234] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5588'. [ 902.006613][T29236] syzkaller0: entered promiscuous mode [ 902.012801][T29236] syzkaller0: entered allmulticast mode [ 902.224618][T29243] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5592'. [ 902.844209][T29256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5595'. [ 906.836487][T29243] veth1_to_team: entered promiscuous mode [ 906.845616][T29243] veth1_to_team: left promiscuous mode [ 906.936611][T29256] bond9: option broadcast_neighbor: invalid value (30) [ 906.986830][T29256] bond9 (unregistering): Released all slaves [ 907.892636][T29309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5606'. [ 907.902771][T29309] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5606'. [ 907.913187][T29309] tipc: Invalid UDP bearer configuration [ 907.913248][T29309] tipc: Enabling of bearer rejected, failed to enable media [ 908.015759][T29311] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 908.149412][T29318] lo speed is unknown, defaulting to 1000 [ 908.252775][T29322] sctp: [Deprecated]: syz.1.5610 (pid 29322) Use of int in max_burst socket option deprecated. [ 908.252775][T29322] Use struct sctp_assoc_value instead [ 908.447373][T29330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5611'. [ 908.658133][T29335] netlink: 212352 bytes leftover after parsing attributes in process `syz.3.5614'. [ 908.725203][T29318] lo speed is unknown, defaulting to 1000 [ 908.781077][T29346] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5617'. [ 908.819078][T29346] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5617'. [ 909.216118][T29367] netlink: 'syz.4.5623': attribute type 1 has an invalid length. [ 909.235226][T29367] netlink: 'syz.4.5623': attribute type 2 has an invalid length. [ 909.244807][T29368] netlink: 'syz.4.5623': attribute type 1 has an invalid length. [ 909.253934][T29368] netlink: 'syz.4.5623': attribute type 2 has an invalid length. [ 909.369892][T29318] lo speed is unknown, defaulting to 1000 [ 909.389300][T29379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5625'. [ 909.399248][T29379] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5625'. [ 909.690685][T29396] netlink: 'syz.3.5630': attribute type 1 has an invalid length. [ 910.487565][T29396] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 910.565418][T29400] gretap2: entered allmulticast mode [ 910.943063][T29418] ip6gre2: entered promiscuous mode [ 910.963470][T29418] ip6gre2: entered allmulticast mode [ 911.031353][T29426] 8021q: adding VLAN 0 to HW filter on device bond9 [ 911.395181][T29441] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5640'. [ 911.434491][T29447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5639'. [ 911.473974][T29443] pim6reg: entered allmulticast mode [ 911.509984][T29448] pim6reg: left allmulticast mode [ 912.346404][T29453] vlan2: entered promiscuous mode [ 912.352469][T29453] dummy0: entered promiscuous mode [ 912.384380][T29456] bridge21: the hash_elasticity option has been deprecated and is always 16 [ 912.393494][T29456] bridge21: entered allmulticast mode [ 912.528490][T29483] netlink: 'syz.1.5649': attribute type 1 has an invalid length. [ 912.560392][T29483] 8021q: adding VLAN 0 to HW filter on device bond9 [ 912.602540][T29484] bond9: entered promiscuous mode [ 912.609747][T29481] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 912.619048][T29484] bond9: entered allmulticast mode [ 912.685984][T29483] bond9: (slave dummy0): making interface the new active one [ 912.698756][T29483] dummy0: entered promiscuous mode [ 912.705233][T29483] dummy0: entered allmulticast mode [ 912.728431][T29483] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 912.986702][T29507] IPVS: set_ctl: invalid protocol: 20 254.128.0.0:0 [ 913.156533][T29512] netlink: 'syz.0.5656': attribute type 1 has an invalid length. [ 913.331973][T29517] __nla_validate_parse: 2 callbacks suppressed [ 913.331992][T29517] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5656'. [ 914.589822][T18715] Bluetooth: hci2: command 0x0406 tx timeout [ 917.726195][T29512] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 917.773698][T29539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5661'. [ 917.822871][T29539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5661'. [ 917.841016][T29535] lo speed is unknown, defaulting to 1000 [ 918.226171][T29551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5663'. [ 918.268663][T29551] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 918.335579][T29551] veth0_virt_wifi (unregistering): left allmulticast mode [ 918.362760][T29551] veth0_virt_wifi (unregistering): left promiscuous mode [ 918.386278][T29551] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 918.574334][T29535] lo speed is unknown, defaulting to 1000 [ 918.963705][T29535] lo speed is unknown, defaulting to 1000 [ 919.253439][T29585] bond10: Unable to set up delay as MII monitoring is disabled [ 919.271461][T29585] bond10 (unregistering): Released all slaves [ 919.335899][T29593] v: renamed from ip_vti0 [ 919.921428][T29616] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.5679'. [ 919.954200][T29616] netlink: Conntrack attr has 4 unknown bytes [ 920.009924][T29620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5681'. [ 920.420346][T29640] netlink: 'syz.4.5686': attribute type 1 has an invalid length. [ 920.449883][T29640] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5686'. [ 920.461216][T29640] netlink: 'syz.4.5686': attribute type 1 has an invalid length. [ 920.479536][T29640] netlink: 634 bytes leftover after parsing attributes in process `syz.4.5686'. [ 920.708330][T29647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5687'. [ 920.811675][T29660] netlink: 'syz.4.5688': attribute type 1 has an invalid length. [ 921.021306][T29649] bond9: Unable to set down delay as MII monitoring is disabled [ 921.053939][T29668] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 921.111951][T29649] bond9 (unregistering): Released all slaves [ 921.178267][T29647] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 921.254422][T29660] 8021q: adding VLAN 0 to HW filter on device bond10 [ 921.353853][T29665] veth11: entered allmulticast mode [ 921.396597][T29666] bond10 (unregistering): Released all slaves [ 921.491912][T29688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5694'. [ 921.658063][T29694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5696'. [ 921.694679][T29693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5696'. [ 922.130516][T29720] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5701'. [ 922.458663][T29733] netlink: 'syz.4.5703': attribute type 9 has an invalid length. [ 922.485585][T29733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5703'. [ 923.628076][T29809] syzkaller0: entered promiscuous mode [ 923.669720][T29809] syzkaller0: entered allmulticast mode [ 924.202144][T29833] syzkaller1: entered promiscuous mode [ 924.215965][T29833] syzkaller1: entered allmulticast mode [ 924.346313][T29833] syzkaller1: left promiscuous mode [ 924.365649][T29833] syzkaller1: left allmulticast mode [ 924.951164][T29866] __nla_validate_parse: 7 callbacks suppressed [ 924.951187][T29866] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5732'. [ 925.104066][T29880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5736'. [ 925.243966][T29880] bond8: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 925.286793][T29880] bond8 (unregistering): Released all slaves [ 925.327891][T29893] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20002 [ 925.385410][T29886] openvswitch: netlink: IP tunnel dst address not specified [ 925.402268][T29886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 925.420352][ T29] audit: type=1804 audit(1779668142.593:16): pid=29891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5739" name="/newroot/544/memory.events" dev="tmpfs" ino=2818 res=1 errno=0 [ 925.478798][T29891] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component [ 925.491886][T29886] syzkaller0: entered promiscuous mode [ 925.510112][ T29] audit: type=1800 audit(1779668142.593:17): pid=29891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5739" name="memory.events" dev="tmpfs" ino=2818 res=0 errno=0 [ 925.512389][T29886] syzkaller0: entered allmulticast mode [ 925.910466][T29908] lo speed is unknown, defaulting to 1000 [ 926.002330][T29914] tipc: Enabling of bearer rejected, failed to enable media [ 926.178735][T29914] syzkaller0: entered promiscuous mode [ 926.188565][T29914] syzkaller0: entered allmulticast mode [ 927.062116][T29947] netlink: 'syz.4.5751': attribute type 1 has an invalid length. [ 927.070652][T29947] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5751'. [ 930.934822][T29908] lo speed is unknown, defaulting to 1000 [ 931.136843][T29957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5756'. [ 931.146843][T29961] netlink: 5220 bytes leftover after parsing attributes in process `syz.0.5754'. [ 931.160532][T29961] netlink: 964 bytes leftover after parsing attributes in process `syz.0.5754'. [ 931.177193][T29961] netlink: 5220 bytes leftover after parsing attributes in process `syz.0.5754'. [ 931.206092][T29962] syzkaller0: entered promiscuous mode [ 931.217507][T29962] syzkaller0: entered allmulticast mode [ 931.285962][T29962] tipc: Enabled bearer , priority 0 [ 931.719155][T29959] tipc: Resetting bearer [ 931.867794][T29959] tipc: Disabling bearer [ 931.879537][T29971] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5759'. [ 931.901403][T29971] 0ªX¹¦À: renamed from batadv0 [ 931.906314][T29908] lo speed is unknown, defaulting to 1000 [ 931.917698][T29971] 0ªX¹¦À: entered allmulticast mode [ 931.924351][T29971] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 931.932048][T29971] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 932.028068][T29974] netlink: 'syz.4.5760': attribute type 2 has an invalid length. [ 932.062754][T29974] netlink: 'syz.4.5760': attribute type 2 has an invalid length. [ 932.325078][T29989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5764'. [ 932.478196][T29998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5766'. [ 932.498675][T29998] tipc: Invalid UDP bearer configuration [ 932.498967][T29998] tipc: Enabling of bearer rejected, failed to enable media [ 932.532982][T29999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5766'. [ 932.564763][T29999] tipc: Invalid UDP bearer configuration [ 932.564819][T29999] tipc: Enabling of bearer rejected, failed to enable media [ 932.860917][T30010] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 933.130245][T30017] syzkaller0: entered promiscuous mode [ 933.148776][T30017] syzkaller0: entered allmulticast mode [ 933.742567][T30047] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5780'. [ 933.860667][T30054] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5781'. [ 933.894499][T30054] netlink: 'syz.1.5781': attribute type 11 has an invalid length. [ 934.589226][T30072] batadv_slave_1: entered promiscuous mode [ 934.640037][T30072] batadv_slave_1: left promiscuous mode [ 934.964893][T30099] netlink: 'syz.1.5796': attribute type 1 has an invalid length. [ 935.959094][T30146] lo speed is unknown, defaulting to 1000 [ 935.960328][T30153] netlink: 'syz.1.5809': attribute type 2 has an invalid length. [ 936.209215][T30159] ±ÿšL…õŸÕó>: renamed from lo (while UP) [ 936.292130][T30159] –: renamed from dummy0 (while UP) [ 936.355544][T30166] 8021q: VLANs not supported on wg2 [ 936.464512][T30146] lo speed is unknown, defaulting to 1000 [ 936.695763][T30178] netlink: 'syz.3.5816': attribute type 3 has an invalid length. [ 936.850129][T30183] __nla_validate_parse: 5 callbacks suppressed [ 936.850151][T30183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5817'. [ 936.903176][T30185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5817'. [ 937.063465][T30146] lo speed is unknown, defaulting to 1000 [ 937.079472][T30189] netlink: 'syz.4.5819': attribute type 1 has an invalid length. [ 937.513958][T30200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5823'. [ 937.650429][T30204] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5825'. [ 937.697055][T30205] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5824'. [ 937.726690][T30205] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 937.791232][T30208] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5826'. [ 937.926379][T30217] netlink: 'syz.4.5828': attribute type 21 has an invalid length. [ 937.941290][T30217] netlink: 'syz.4.5828': attribute type 22 has an invalid length. [ 937.949880][T30217] netlink: 'syz.4.5828': attribute type 23 has an invalid length. [ 937.957911][T30217] netlink: 'syz.4.5828': attribute type 25 has an invalid length. [ 937.968376][T30217] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5828'. [ 938.163689][T30225] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5830'. [ 938.192721][T30208] bond9: Unable to set down delay as MII monitoring is disabled [ 938.218201][T30208] bond9 (unregistering): Released all slaves [ 938.439298][T30239] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20002 [ 938.485607][T30233] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 938.513030][T30242] netlink: 'syz.3.5834': attribute type 7 has an invalid length. [ 938.534481][T30238] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 938.622449][T30242] : entered promiscuous mode [ 938.928933][T30265] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5838'. [ 939.046404][T30268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5840'. [ 939.456086][T30293] xt_socket: unknown flags 0x8 [ 939.514976][T30293] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 939.764518][T30305] bridge3: entered promiscuous mode [ 939.786350][T30305] bridge3: entered allmulticast mode [ 939.822965][T30305] team0: Port device bridge3 added [ 940.144541][T30315] gre2: entered allmulticast mode [ 940.281964][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 940.294018][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 940.305912][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 940.319068][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 940.329932][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 940.801025][T30338] netlink: 'syz.4.5855': attribute type 21 has an invalid length. [ 940.817906][T30338] netlink: 'syz.4.5855': attribute type 6 has an invalid length. [ 941.288875][T30362] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 941.292819][T30361] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 941.340475][T30362] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 941.348858][T30361] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 941.617937][T30319] lo speed is unknown, defaulting to 1000 [ 942.205602][T30319] lo speed is unknown, defaulting to 1000 [ 942.205629][ T6381] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 942.253818][T22263] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 942.330642][ T6381] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 942.333337][T30376] nbd3: detected capacity change from 0 to 63 [ 942.365736][T18715] block nbd3: Receive control failed (result -32) [ 942.440451][T18715] Bluetooth: hci0: command tx timeout [ 942.477653][T30408] __nla_validate_parse: 7 callbacks suppressed [ 942.477676][T30408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5874'. [ 942.517688][T29954] block nbd3: Dead connection, failed to find a fallback [ 942.544867][T29954] block nbd3: shutting down sockets [ 942.553753][T30408] netlink: 'syz.0.5874': attribute type 7 has an invalid length. [ 942.576001][T29954] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 942.592356][T22263] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 20004 - 0 [ 942.592846][T30408] netlink: 'syz.0.5874': attribute type 8 has an invalid length. [ 942.625227][T29954] Buffer I/O error on dev nbd3, logical block 0, async page read [ 942.643081][T29954] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 942.678082][T30408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5874'. [ 942.687803][T29954] Buffer I/O error on dev nbd3, logical block 1, async page read [ 942.705877][T29954] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 942.718540][T29954] Buffer I/O error on dev nbd3, logical block 2, async page read [ 942.734736][T29954] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 942.747758][T29954] Buffer I/O error on dev nbd3, logical block 3, async page read [ 942.798332][T29954] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 942.808173][T29954] Buffer I/O error on dev nbd3, logical block 0, async page read [ 942.853482][T29954] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 942.863699][T29954] Buffer I/O error on dev nbd3, logical block 1, async page read [ 942.874195][T29954] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 942.884515][T29954] Buffer I/O error on dev nbd3, logical block 2, async page read [ 942.893380][T29954] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 942.940459][T29954] Buffer I/O error on dev nbd3, logical block 3, async page read [ 942.965723][T29954] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 943.000388][T29954] Buffer I/O error on dev nbd3, logical block 0, async page read [ 943.021559][T29954] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 943.031943][T29954] Buffer I/O error on dev nbd3, logical block 1, async page read [ 943.085027][T29954] ldm_validate_partition_table(): Disk read failed. [ 943.114877][T29954] Dev nbd3: unable to read RDB block 0 [ 943.132935][T29954] nbd3: unable to read partition table [ 943.194371][T29954] ldm_validate_partition_table(): Disk read failed. [ 943.227708][T29954] Dev nbd3: unable to read RDB block 0 [ 943.236515][T29954] nbd3: unable to read partition table [ 943.594136][T22262] bond0 (unregistering): (slave geneve2): Releasing active interface [ 943.610128][T22262] geneve2 (unregistering): left allmulticast mode [ 943.827664][T22262] bond6 (unregistering): (slave bridge5): Releasing backup interface [ 943.836506][T22262] bridge5 (unregistering): left promiscuous mode [ 943.873021][T22262] bond1 (unregistering): Released all slaves [ 943.892477][T22262] bond2 (unregistering): Released all slaves [ 943.916398][T22262] bond3 (unregistering): Released all slaves [ 943.936998][T22262] bond4 (unregistering): Released all slaves [ 943.955021][T22262] bond5 (unregistering): Released all slaves [ 943.988095][T22262] bond0 (unregistering): Released all slaves [ 944.006696][T22262] bond6 (unregistering): Released all slaves [ 944.024044][T22262] bond7 (unregistering): Released all slaves [ 944.064868][T30319] lo speed is unknown, defaulting to 1000 [ 944.120064][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 944.307052][T22262] tipc: Disabling bearer [ 944.342044][T22262] tipc: Left network mode [ 944.370771][T30446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5881'. [ 944.401743][T22262] IPVS: stopping backup sync thread 28275 ... [ 944.430054][T30446] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5881'. [ 944.529863][T18715] Bluetooth: hci0: command tx timeout [ 944.668365][T30446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5881'. [ 945.279044][T30486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5884'. [ 945.405738][T30478] team0: No ports can be present during mode change [ 945.820604][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 945.888244][T30319] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.901899][T30319] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.909261][T30319] bridge_slave_0: entered allmulticast mode [ 945.917746][T30319] bridge_slave_0: entered promiscuous mode [ 945.935075][T30319] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.947968][T30319] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.962817][T30319] bridge_slave_1: entered allmulticast mode [ 945.982110][T30319] bridge_slave_1: entered promiscuous mode [ 946.115039][T22262] [ 946.117435][T22262] ====================================================== [ 946.124775][T22262] WARNING: possible circular locking dependency detected [ 946.131914][T22262] syzkaller #0 Not tainted [ 946.136452][T22262] ------------------------------------------------------ [ 946.143575][T22262] kworker/u8:19/22262 is trying to acquire lock: [ 946.149927][T22262] ffff88801be8d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 946.160770][T22262] [ 946.160770][T22262] but task is already holding lock: [ 946.168247][T22262] ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830 [ 946.177859][T22262] [ 946.177859][T22262] which lock already depends on the new lock. [ 946.177859][T22262] [ 946.188395][T22262] [ 946.188395][T22262] the existing dependency chain (in reverse order) is: [ 946.197448][T22262] [ 946.197448][T22262] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 946.205616][T22262] down_write+0x96/0x200 [ 946.210417][T22262] kernfs_add_one+0x41/0x5c0 [ 946.215568][T22262] kernfs_create_dir_ns+0xde/0x130 [ 946.221238][T22262] internal_create_group+0x425/0x1180 [ 946.227170][T22262] cpuhp_invoke_callback+0x445/0x860 [ 946.233047][T22262] cpuhp_issue_call+0x430/0x7a0 [ 946.238449][T22262] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 946.245080][T22262] __cpuhp_setup_state+0x3f/0x60 [ 946.250935][T22262] do_one_initcall+0x250/0x870 [ 946.256369][T22262] do_initcall_level+0x104/0x190 [ 946.261989][T22262] do_initcalls+0x59/0xa0 [ 946.267313][T22262] kernel_init_freeable+0x2a6/0x3e0 [ 946.273072][T22262] kernel_init+0x1d/0x1d0 [ 946.277956][T22262] ret_from_fork+0x514/0xb70 [ 946.283656][T22262] ret_from_fork_asm+0x1a/0x30 [ 946.288973][T22262] [ 946.288973][T22262] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 946.296831][T22262] [ 946.296831][T22262] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 946.304598][T22262] cpus_read_lock+0x42/0x160 [ 946.309740][T22262] static_key_slow_inc+0x12/0x30 [ 946.315261][T22262] nbd_genl_reconfigure+0x132f/0x1ea0 [ 946.321273][T22262] genl_family_rcv_msg_doit+0x22a/0x330 [ 946.327382][T22262] genl_rcv_msg+0x61c/0x7a0 [ 946.332445][T22262] netlink_rcv_skb+0x232/0x4b0 [ 946.337768][T22262] genl_rcv+0x28/0x40 [ 946.342304][T22262] netlink_unicast+0x75c/0x8e0 [ 946.347618][T22262] netlink_sendmsg+0x813/0xb40 [ 946.352939][T22262] ____sys_sendmsg+0x972/0x9f0 [ 946.358252][T22262] ___sys_sendmsg+0x2a5/0x360 [ 946.363502][T22262] __x64_sys_sendmsg+0x1bd/0x2a0 [ 946.369007][T22262] do_syscall_64+0x15f/0xf80 [ 946.374155][T22262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.380605][T22262] [ 946.380605][T22262] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 946.388292][T22262] __mutex_lock+0x1a3/0x1550 [ 946.393448][T22262] nbd_queue_rq+0x37b/0x1100 [ 946.398599][T22262] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 946.404811][T22262] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 946.411755][T22262] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 946.418294][T22262] blk_mq_run_hw_queue+0x348/0x4f0 [ 946.423974][T22262] blk_mq_dispatch_list+0xd16/0xe10 [ 946.429736][T22262] blk_mq_flush_plug_list+0x48d/0x570 [ 946.435686][T22262] __blk_flush_plug+0x3ed/0x4d0 [ 946.441228][T22262] __submit_bio+0x28d/0x580 [ 946.446333][T22262] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 946.452570][T22262] block_read_full_folio+0x599/0x830 [ 946.458454][T22262] filemap_read_folio+0x137/0x3b0 [ 946.464039][T22262] do_read_cache_folio+0x358/0x590 [ 946.469753][T22262] read_part_sector+0xb6/0x2b0 [ 946.475149][T22262] adfspart_check_ICS+0xb1/0x960 [ 946.480674][T22262] bdev_disk_changed+0x817/0x1770 [ 946.486262][T22262] blkdev_get_whole+0x380/0x510 [ 946.491740][T22262] bdev_open+0x31e/0xd30 [ 946.496581][T22262] blkdev_open+0x470/0x610 [ 946.501549][T22262] do_dentry_open+0x785/0x14e0 [ 946.506871][T22262] vfs_open+0x3b/0x340 [ 946.511499][T22262] path_openat+0x2e08/0x3860 [ 946.516731][T22262] do_file_open+0x23e/0x4a0 [ 946.521787][T22262] do_sys_openat2+0x113/0x200 [ 946.527013][T22262] __x64_sys_openat+0x138/0x170 [ 946.532419][T22262] do_syscall_64+0x15f/0xf80 [ 946.537917][T22262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.544362][T22262] [ 946.544362][T22262] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 946.551730][T22262] __mutex_lock+0x1a3/0x1550 [ 946.556871][T22262] nbd_queue_rq+0xc6/0x1100 [ 946.562106][T22262] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 946.568922][T22262] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 946.575825][T22262] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 946.582586][T22262] blk_mq_run_hw_queue+0x348/0x4f0 [ 946.588267][T22262] blk_mq_dispatch_list+0xd16/0xe10 [ 946.594025][T22262] blk_mq_flush_plug_list+0x48d/0x570 [ 946.599960][T22262] __blk_flush_plug+0x3ed/0x4d0 [ 946.605390][T22262] __submit_bio+0x28d/0x580 [ 946.610497][T22262] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 946.616689][T22262] block_read_full_folio+0x599/0x830 [ 946.622525][T22262] filemap_read_folio+0x137/0x3b0 [ 946.628382][T22262] do_read_cache_folio+0x358/0x590 [ 946.634230][T22262] read_part_sector+0xb6/0x2b0 [ 946.639587][T22262] adfspart_check_ICS+0xb1/0x960 [ 946.645265][T22262] bdev_disk_changed+0x817/0x1770 [ 946.650864][T22262] blkdev_get_whole+0x380/0x510 [ 946.656271][T22262] bdev_open+0x31e/0xd30 [ 946.661076][T22262] blkdev_open+0x470/0x610 [ 946.666040][T22262] do_dentry_open+0x785/0x14e0 [ 946.671445][T22262] vfs_open+0x3b/0x340 [ 946.676075][T22262] path_openat+0x2e08/0x3860 [ 946.681924][T22262] do_file_open+0x23e/0x4a0 [ 946.687009][T22262] do_sys_openat2+0x113/0x200 [ 946.692295][T22262] __x64_sys_openat+0x138/0x170 [ 946.697717][T22262] do_syscall_64+0x15f/0xf80 [ 946.703061][T22262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.709529][T22262] [ 946.709529][T22262] -> #4 (set->srcu){.+.+}-{0:0}: [ 946.716766][T22262] __synchronize_srcu+0xca/0x300 [ 946.722299][T22262] elevator_switch+0x1e8/0x7a0 [ 946.727653][T22262] elevator_change+0x2cc/0x450 [ 946.733020][T22262] elevator_set_default+0x36c/0x430 [ 946.738796][T22262] blk_register_queue+0x3e9/0x4e0 [ 946.744381][T22262] __add_disk+0x677/0xd50 [ 946.749277][T22262] add_disk_fwnode+0xfb/0x480 [ 946.754542][T22262] nbd_dev_add+0x72c/0xb50 [ 946.759522][T22262] nbd_init+0x168/0x1f0 [ 946.764755][T22262] do_one_initcall+0x250/0x870 [ 946.770073][T22262] do_initcall_level+0x104/0x190 [ 946.775579][T22262] do_initcalls+0x59/0xa0 [ 946.780468][T22262] kernel_init_freeable+0x2a6/0x3e0 [ 946.786224][T22262] kernel_init+0x1d/0x1d0 [ 946.791128][T22262] ret_from_fork+0x514/0xb70 [ 946.796276][T22262] ret_from_fork_asm+0x1a/0x30 [ 946.801590][T22262] [ 946.801590][T22262] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 946.809440][T22262] __mutex_lock+0x1a3/0x1550 [ 946.814584][T22262] elevator_change+0x1b3/0x450 [ 946.819993][T22262] elevator_set_none+0xb5/0x140 [ 946.825410][T22262] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 946.831784][T22262] nbd_start_device+0x17f/0xb10 [ 946.837279][T22262] nbd_genl_connect+0x165b/0x1cf0 [ 946.842966][T22262] genl_family_rcv_msg_doit+0x22a/0x330 [ 946.849796][T22262] genl_rcv_msg+0x61c/0x7a0 [ 946.854940][T22262] netlink_rcv_skb+0x232/0x4b0 [ 946.860282][T22262] genl_rcv+0x28/0x40 [ 946.864827][T22262] netlink_unicast+0x75c/0x8e0 [ 946.870155][T22262] netlink_sendmsg+0x813/0xb40 [ 946.875487][T22262] ____sys_sendmsg+0x972/0x9f0 [ 946.880813][T22262] ___sys_sendmsg+0x2a5/0x360 [ 946.886043][T22262] __x64_sys_sendmsg+0x1bd/0x2a0 [ 946.891536][T22262] do_syscall_64+0x15f/0xf80 [ 946.896682][T22262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.903348][T22262] [ 946.903348][T22262] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 946.912082][T22262] blk_alloc_queue+0x546/0x680 [ 946.917438][T22262] __blk_mq_alloc_disk+0x197/0x390 [ 946.923117][T22262] nbd_dev_add+0x499/0xb50 [ 946.928270][T22262] nbd_init+0x168/0x1f0 [ 946.933006][T22262] do_one_initcall+0x250/0x870 [ 946.938548][T22262] do_initcall_level+0x104/0x190 [ 946.944148][T22262] do_initcalls+0x59/0xa0 [ 946.949130][T22262] kernel_init_freeable+0x2a6/0x3e0 [ 946.954922][T22262] kernel_init+0x1d/0x1d0 [ 946.959813][T22262] ret_from_fork+0x514/0xb70 [ 946.964955][T22262] ret_from_fork_asm+0x1a/0x30 [ 946.970272][T22262] [ 946.970272][T22262] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 946.977515][T22262] fs_reclaim_acquire+0x71/0x100 [ 946.983029][T22262] kmem_cache_alloc_noprof+0x40/0x650 [ 946.988981][T22262] __kernfs_iattrs+0xdf/0x320 [ 946.994328][T22262] kernfs_iop_setattr+0xea/0x3f0 [ 946.999840][T22262] notify_change+0xc1a/0xf40 [ 947.004987][T22262] do_truncate+0x1c2/0x250 [ 947.010138][T22262] path_openat+0x2f89/0x3860 [ 947.015307][T22262] do_file_open+0x23e/0x4a0 [ 947.020368][T22262] do_sys_openat2+0x113/0x200 [ 947.025639][T22262] __x64_sys_openat+0x138/0x170 [ 947.031057][T22262] do_syscall_64+0x15f/0xf80 [ 947.036219][T22262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.042673][T22262] [ 947.042673][T22262] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 947.051225][T22262] __lock_acquire+0x15a5/0x2cf0 [ 947.056639][T22262] lock_acquire+0x106/0x350 [ 947.061699][T22262] down_write+0x96/0x200 [ 947.066495][T22262] kernfs_unlink_sibling+0x71/0x180 [ 947.072261][T22262] kernfs_rename_ns+0x4a6/0x830 [ 947.077674][T22262] sysfs_rename_link_ns+0x16e/0x1b0 [ 947.083430][T22262] device_rename+0x110/0x210 [ 947.088590][T22262] __dev_change_net_namespace+0x15d3/0x20a0 [ 947.095301][T22262] cfg80211_switch_netns+0x106/0x5a0 [ 947.101142][T22262] cfg80211_pernet_exit+0x92/0x120 [ 947.106873][T22262] ops_undo_list+0x49f/0x940 [ 947.112088][T22262] cleanup_net+0x56b/0x800 [ 947.117062][T22262] process_scheduled_works+0xb5d/0x1860 [ 947.123449][T22262] worker_thread+0xa53/0xfc0 [ 947.128596][T22262] kthread+0x389/0x470 [ 947.133233][T22262] ret_from_fork+0x514/0xb70 [ 947.138378][T22262] ret_from_fork_asm+0x1a/0x30 [ 947.143696][T22262] [ 947.143696][T22262] other info that might help us debug this: [ 947.143696][T22262] [ 947.153957][T22262] Chain exists of: [ 947.153957][T22262] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 947.153957][T22262] [ 947.168517][T22262] Possible unsafe locking scenario: [ 947.168517][T22262] [ 947.176243][T22262] CPU0 CPU1 [ 947.181678][T22262] ---- ---- [ 947.187132][T22262] lock(&root->kernfs_rwsem); [ 947.191925][T22262] lock(cpuhp_state_mutex); [ 947.199066][T22262] lock(&root->kernfs_rwsem); [ 947.206395][T22262] lock(&root->kernfs_iattr_rwsem); [ 947.211817][T22262] [ 947.211817][T22262] *** DEADLOCK *** [ 947.211817][T22262] [ 947.220063][T22262] 5 locks held by kworker/u8:19/22262: [ 947.225646][T22262] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 947.236732][T22262] #1: ffffc90003597c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 947.247346][T22262] #2: ffffffff8fdc36e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 947.256696][T22262] #3: ffffffff8fdd2400 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x19/0x120 [ 947.266309][T22262] #4: ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830 [ 947.276363][T22262] [ 947.276363][T22262] stack backtrace: [ 947.282279][T22262] CPU: 1 UID: 0 PID: 22262 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 947.282301][T22262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 947.282315][T22262] Workqueue: netns cleanup_net [ 947.282337][T22262] Call Trace: [ 947.282346][T22262] [ 947.282357][T22262] dump_stack_lvl+0xe8/0x150 [ 947.282379][T22262] print_circular_bug+0x2e1/0x300 [ 947.282405][T22262] check_noncircular+0x12e/0x150 [ 947.282432][T22262] __lock_acquire+0x15a5/0x2cf0 [ 947.282454][T22262] ? __lock_acquire+0x6b5/0x2cf0 [ 947.282474][T22262] ? __lock_acquire+0x6b5/0x2cf0 [ 947.282497][T22262] ? kernfs_unlink_sibling+0x71/0x180 [ 947.282523][T22262] lock_acquire+0x106/0x350 [ 947.282541][T22262] ? kernfs_unlink_sibling+0x71/0x180 [ 947.282574][T22262] down_write+0x96/0x200 [ 947.282595][T22262] ? kernfs_unlink_sibling+0x71/0x180 [ 947.282621][T22262] ? __pfx_down_write+0x10/0x10 [ 947.282640][T22262] ? kernfs_root+0x1c/0x230 [ 947.282661][T22262] ? kernfs_root+0x1c/0x230 [ 947.282681][T22262] ? kernfs_root+0x1c/0x230 [ 947.282703][T22262] ? kernfs_root+0x1ea/0x230 [ 947.282725][T22262] kernfs_unlink_sibling+0x71/0x180 [ 947.282753][T22262] kernfs_rename_ns+0x4a6/0x830 [ 947.282783][T22262] sysfs_rename_link_ns+0x16e/0x1b0 [ 947.282808][T22262] device_rename+0x110/0x210 [ 947.282833][T22262] __dev_change_net_namespace+0x15d3/0x20a0 [ 947.282866][T22262] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 947.282894][T22262] ? __pfx_stack_trace_save+0x10/0x10 [ 947.282923][T22262] ? do_raw_spin_lock+0x12b/0x2f0 [ 947.282956][T22262] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 947.282989][T22262] ? lockdep_hardirqs_on+0x7a/0x110 [ 947.283006][T22262] ? __mutex_lock+0xef8/0x1550 [ 947.283026][T22262] ? __mutex_lock+0x608/0x1550 [ 947.283047][T22262] ? __pfx___mutex_lock+0x10/0x10 [ 947.283063][T22262] ? net_generic+0x1e/0x240 [ 947.283180][T22262] cfg80211_switch_netns+0x106/0x5a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 947.283209][T22262] cfg80211_pernet_exit+0x92/0x120 [ 947.283228][T22262] ops_undo_list+0x49f/0x940 [ 947.283247][T22262] ? __pfx_ops_undo_list+0x10/0x10 [ 947.283263][T22262] ? idr_destroy+0x218/0x290 [ 947.283322][T22262] ? do_raw_spin_unlock+0xf5/0x210 [ 947.283349][T22262] cleanup_net+0x56b/0x800 [ 947.283366][T22262] ? __pfx_cleanup_net+0x10/0x10 [ 947.283384][T22262] ? process_scheduled_works+0xa70/0x1860 [ 947.283402][T22262] ? process_scheduled_works+0xa70/0x1860 [ 947.283420][T22262] process_scheduled_works+0xb5d/0x1860 [ 947.283452][T22262] ? __pfx_process_scheduled_works+0x10/0x10 [ 947.283473][T22262] ? assign_work+0x3d5/0x5e0 [ 947.283493][T22262] worker_thread+0xa53/0xfc0 [ 947.283524][T22262] kthread+0x389/0x470 [ 947.283546][T22262] ? __pfx_worker_thread+0x10/0x10 [ 947.283564][T22262] ? __pfx_kthread+0x10/0x10 [ 947.283586][T22262] ret_from_fork+0x514/0xb70 [ 947.283607][T22262] ? __pfx_ret_from_fork+0x10/0x10 [ 947.283624][T22262] ? __switch_to+0xc79/0x1410 [ 947.283651][T22262] ? __pfx_kthread+0x10/0x10 [ 947.283673][T22262] ret_from_fork_asm+0x1a/0x30 [ 947.283702][T22262] [ 947.622603][T30515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 947.770407][T18715] Bluetooth: hci0: command tx timeout [ 947.903881][T30513] tipc: Enabling of bearer rejected, already enabled [ 948.235546][T22262] hsr_slave_0: left promiscuous mode [ 948.252875][T22262] hsr_slave_1: left promiscuous mode [ 948.269142][T22262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 948.942941][T22262] team0 (unregistering): Port device team_slave_1 removed [ 948.954864][T22262] team0 (unregistering): Port device team_slave_0 removed [ 949.011064][T22260] smc: removing ib device sqz0 [ 949.024670][T22260] smbdirect: ib_dev[sqz0] removed [ 949.157163][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 949.755097][ T5290] 8021q: adding VLAN 0 to HW filter on device eth4 [ 949.945944][T22262] IPVS: stop unused estimator thread 0... [ 950.301341][ T6381] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 20004 - 0 [ 950.324480][ T6381] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 20004 - 0 [ 950.348659][ T6381] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 20004 - 0 [ 950.359422][T22262] bridge_slave_1: left allmulticast mode [ 950.367134][T22262] bridge_slave_1: left promiscuous mode [ 950.373293][T22262] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.382509][T22262] bridge_slave_0: left allmulticast mode [ 950.388333][T22262] bridge_slave_0: left promiscuous mode [ 950.394462][T22262] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.404510][T22262] bridge_slave_1: left allmulticast mode [ 950.411085][T22262] bridge_slave_1: left promiscuous mode [ 950.416864][T22262] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.425531][T22262] bridge_slave_0: left allmulticast mode [ 950.431385][T22262] bridge_slave_0: left promiscuous mode [ 950.437661][T22262] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.452102][T22262] dvmrp0: left allmulticast mode [ 950.457270][T22262] pimreg9: left allmulticast mode [ 950.504372][T22262] bond0 (unregistering): Released all slaves [ 950.674245][T22262] bond4 (unregistering): (slave gretap1): Releasing active interface [ 950.702334][T22262] bond6 (unregistering): (slave gretap0): Releasing active interface [ 950.712538][T22262] batman_adv: 60ªX¹¦À: Removing interface: vlan2 [ 950.753039][T22262] bond2 (unregistering): (slave geneve2): Releasing backup interface [ 950.804890][T22262] team0: Port device bridge3 removed [ 950.817742][T22262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 950.819518][T22263] smbdirect: ib_dev[syz1] removed [ 950.834762][T22262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 950.844255][T22262] bond0 (unregistering): Released all slaves [ 950.854067][T22262] bond1 (unregistering): Released all slaves [ 950.864745][T22262] bond2 (unregistering): Released all slaves [ 950.879976][T22262] bond3 (unregistering): Released all slaves [ 950.891011][T22262] bond4 (unregistering): Released all slaves [ 950.905782][T22262] bond5 (unregistering): Released all slaves [ 950.917883][T22262] bond6 (unregistering): Released all slaves [ 950.928880][T22262] bond7 (unregistering): Released all slaves [ 950.940850][T22262] bond8 (unregistering): Released all slaves [ 950.952798][T22262] bond9 (unregistering): (slave dummy0): Releasing active interface [ 950.961684][T22262] dummy0: left promiscuous mode [ 950.966732][T22262] dummy0: left allmulticast mode [ 950.973266][T22262] bond9 (unregistering): Released all slaves [ 950.983624][ T6381] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 20004 - 0 [ 951.136462][T22262] tipc: Disabling bearer [ 951.145209][T22262] tipc: Left network mode [ 951.465975][ T5290] 8021q: adding VLAN 0 to HW filter on device eth5 [ 951.873892][ T5290] 8021q: adding VLAN 0 to HW filter on device eth6 [ 951.931443][T22262] hsr_slave_0: left promiscuous mode [ 951.937733][T22262] hsr_slave_1: left promiscuous mode [ 951.946284][T22262] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_0 [ 952.201901][T22262] team0 (unregistering): Port device team_slave_1 removed [ 952.215879][T22262] team0 (unregistering): Port device team_slave_0 removed [ 952.335708][ T48] smc: removing ib device syz0 [ 952.346977][ T5290] 8021q: adding VLAN 0 to HW filter on device eth7 [ 952.354630][ T48] smbdirect: ib_dev[syz0] removed [ 952.960550][T22262] IPVS: stop unused estimator thread 0... [ 953.009420][ T5290] 8021q: adding VLAN 0 to HW filter on device eth8