last executing test programs: 13.387831014s ago: executing program 2 (id=6460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x80, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xc75, 0x3a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="33df302d28bc"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="52fff2466826"}, @NL80211_ATTR_MAC={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x20048044) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r1, 0x325, 0x2, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x180a4}, 0x4000010) 13.252162995s ago: executing program 2 (id=6463): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000680)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff565e1, 0x78bd28, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0x7ffb, 0xb}, {0x7, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{0x4, 0x7, 0x3, 0x6, 0x8}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x3e1898f1d718de54}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_REORDER={0xc, 0x3, {0x8988, 0x66b}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x14, 0x6, {0x9, 0x9, 0x0, 0x401}}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x54070}, 0x400c840) sendmsg$kcm(r5, &(0x7f00000002c0)={&(0x7f00000004c0)=@xdp={0x2c, 0xdd86, r6, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)="27a187afa6778008b6bcee1d068493afb7bcc6032185b3d252582209d76fc446e731005df503d86547950950288368131ea4ebee455a10f9e138f9140f065c1e8f02f9be307d8c061979dd25", 0x4c}], 0x1}, 0x4) 11.944484445s ago: executing program 3 (id=6478): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfeb0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x110}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xfff3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0xe, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2c00}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_val={0x18, 0x4, 0x2, 0x0, r0}]}, &(0x7f0000000600)='GPL\x00', 0x6, 0x76, &(0x7f00000002c0)=""/118, 0x41000, 0xb3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) unshare(0x2c020400) socket(0x2, 0x80805, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0xfffffffffffffd35) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000500)=@qipcrtr, &(0x7f0000000200)=0x80) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000005800010200000000000000000200000408000340000039d3080001000300001f08000440008000f807000100", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) shutdown(r7, 0x1) 9.696087114s ago: executing program 2 (id=6482): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) listen(r1, 0x5) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) listen(r0, 0x5) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd000000100001000c0808004149224e06040800", 0x58}], 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1ff}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) ioctl$XFS_IOC_GETPARENTS(r3, 0xc028583e, &(0x7f00000004c0)={{[0x1, 0x3, 0x4, 0x1]}, 0x0, 0x1, 0x6, 0x0, &(0x7f0000000340)=[{{@align=0x3, {0x7, 0x5, 0x7ff, 0xe16}}, 0x8, 0x0, '\x00'}, {{@align=0x1, {0x2, 0x6, 0x9, 0x4}}, 0x132, 0x0, '-)-$%\x00'}, {{@_ha_fsid={[0x8]}, {0x376, 0x7096, 0x7, 0x9}}, 0xc0, 0x0, '\x00'}, {{@_ha_fsid={[0x10, 0x7fff]}, {0x2, 0x7, 0x514, 0xffffffffffffff01}}, 0x7, 0x0, '\x00'}, {{@align=0xbb2e, {0x5, 0xf, 0x6, 0x45}}, 0xc0000000, 0x0, 'syzkaller\x00'}, {{@_ha_fsid={[0x7f, 0x6c0f8fa1]}, {0xa, 0x938b, 0x4, 0x7}}, 0x10, 0x0, '][\x00'}, {{@align=0x101, {0x4, 0x8000, 0x1, 0x5}}, 0xe6, 0x0, '\x00'}, {{@align=0x6, {0x5, 0x8000, 0x8, 0xff}}, 0x8, 0x0, 'syzkaller\x00'}, {{@_ha_fsid={[0x2, 0x2]}, {0xf400, 0xc, 0x7, 0x8}}, 0x41c7, 0x0, '\x00'}, {{@align=0x7fffffffffffffff, {0x3ff, 0xbd3b, 0x5, 0xf3}}, 0x7, 0x0, '\f\x00'}]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x14, r6, 0x5, 0x0, 0x0, {0x22}}, 0x14}}, 0x4000000) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5c, r6, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000500)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.712051105s ago: executing program 2 (id=6491): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r2 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@local, 0x4e1f, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x200000004, 0x40000000007, 0x6811220d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0x0, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x3506, 0x1, 0x8, 0x0, 0x9}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b05, &(0x7f0000000100)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x42}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 8.559818915s ago: executing program 0 (id=6494): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) r0 = socket(0x1, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000006cc0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000006dc0)={0x0, 0x0, &(0x7f0000006d80)={&(0x7f0000006d00)={0x30, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x64, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x55}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={r6, 0xd}, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061108e0000000000170100000000000095000000000000004daf78c4ef08dc0978bcf94787784b785a279a31cc9fba0fe98042125ff1466a15fcd5d6e3ab177cd4c803000000000000008a7e0243b2"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) (async) socket(0x1, 0x803, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000006cc0), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000006dc0)={0x0, 0x0, &(0x7f0000006d80)={&(0x7f0000006d00)={0x30, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x64, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x55}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={r6, 0xd}, &(0x7f0000000040)=0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061108e0000000000170100000000000095000000000000004daf78c4ef08dc0978bcf94787784b785a279a31cc9fba0fe98042125ff1466a15fcd5d6e3ab177cd4c803000000000000008a7e0243b2"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) 8.558905812s ago: executing program 2 (id=6495): r0 = socket(0x23, 0x5, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)={0x3cc, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x3ba, 0xf2, 0x0, 0x1, [@nested={0x2bd, 0x79, 0x0, 0x1, [@typed={0x21, 0x4b, 0x0, 0x0, @binary="7d0d57db0fa3e3f3f04f463455c130709967992a09c7f8ee82ea014d12"}, @generic="62b3341a816a3ddd1eb2366da6100e7b70cc8bb78c245ff28036d9d13cb60d14bd0b17b93b54c7ce04266094a8ce27ae03e1c183ce7dfed7be83ea1cfa281cac220db197ab9aae9346ac2f432dc3250a00aa25565073a065ab50faa3423dc0481f8e5c7747419e4bbf8d241ddd32183a38d73bddf2a961d092292137cc2d9a6a34ae16916e7d4393cd39cd32ac3c5aab2d149333a6dfde8c8467cc4e4c4611a461360a39ec18eec20c1296e17b52261beab312f40769eb5bf5cfef4110b3db04e188cb8f140185aa3250", @typed={0xcc, 0x1e, 0x0, 0x0, @binary="907c11828a6a8495c3ef6c47966b82ac8a1a367756f3f877575cd5ed1aabb020f56b59a76ddeb72c390fbab8484a5899813c2dc76eb4da033154fe070230fb0e5a2254807d54dc0b504b897d932d486213579695522fa866faac0a05d08b63b38c1b941cd37fa0f161737f62d2d5e03563ed0d2ca07be0893d2a8e47afd55c129cfbb0ffd66ad739e65a75aa80b20bb7a00c8502b0ad957b1499b01f9eb94a21d92d8cc2d5a3513fa7672e48bee8b3b1298bbff55c4b004c0d92bdb8735c020f64335a3284283149"}, @typed={0x4, 0xad}, @typed={0x9, 0x52, 0x0, 0x0, @str='^+-+\x00'}, @generic="51abd3a33f76ab8bd4ea976a8e0802d3537bf3844eedc5debb980bbd8d3c6a8511ea1e51570f56d5ae067a63cf7cf32b8295ac866b45378910692e4f8dcc33123dc5b4d53e5c24f02b8c59643a462065473d8fbf05bafaf06d0b4381180889ff4487365ea43ff238cf5d360a12f0190725c5e40704e615736e56a3dc61c97294b0108ac90ca96b99cecfb84def5b3eb270846553f5f0fbe3f0dd7dd9d9cfb20cd77d49f4d5e5760c6a97dcfffe0639897fd13121ae6e2ab5728576a0fb90e93538fa0dce1631297f6b822f27637e794668fa752a3edfc525f3ada912c6a1deb36b5e0d397c2e4f12345e9d12eac692"]}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @generic="46664b3ccb"]}]}, 0x3cc}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000904000000000000000000000105000000080000000000000000000003000000000200000002000000120000000000000000000009", @ANYRES64=r0], 0x0, 0x5a}, 0x28) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) sendmmsg$unix(r4, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0x20, 0x40044}}], 0x1, 0x4) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r8 = socket$rds(0x15, 0x5, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)={0x20, 0x3f, 0x107, 0x0, 0x25dfdbfd, {0x4, 0x7c}, [@nested={0xc, 0xc5, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @str='GPL\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c880}, 0x0) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x3c, r12, 0x1, 0xffffffff, 0xfffffffd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8003}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}]}, 0x3c}}, 0x20000000) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r14, 0x0) r15 = socket$alg(0x26, 0x5, 0x0) bind$alg(r15, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r15, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r16 = accept4(r15, 0x0, 0x0, 0x800) sendmmsg$alg(r16, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r12, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, 'devlink\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xea7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffd}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, 'devlink\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x60}, 0x1, 0x0, 0x0, 0x95}, 0x44014) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000002000000000000810900000085000000970000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000000b70300000000000085000000170000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4c}, 0x94) 8.430284801s ago: executing program 0 (id=6496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x11c, 0x18, 0xa01, 0x0, 0x0, {}, [@typed={0x4, 0xe5}, @nested={0x104, 0xe5, 0x0, 0x1, [@typed={0xfd, 0x13a, 0x0, 0x0, @binary="8698cae10a74c6affcff4168645965c07fbab3efc2335c536d6f3358d051ed0d86bcd44a3eca0f66d64519dd60132079787fc94cdbb227fb71134cbb8d92fb3887d97706e771a61101b286932490b5ae105ef16cf69a4d8bb8c02edcba7faec5db95f5393a0046ebaeecb1d9ed98f22a96633b4589219ac3a7709bc02462b86d3deaa1478ab58cedbf6a01503f5b9a72d761fdfffd7a1a86a8590d32cff753f44d5f5b0034e2b1cfcef3451f670a10748a42c8407b0f432caf8cde10d39ee015d940bd7cc64a632e63f2c3319aad63d36fd74e59055240a52fcd3bced76babc48696c95ae2192c7d6723807414971e665542ed57763ebba72e"}]}]}, 0x11c}}, 0x80) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xffff}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000c000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x800, 0x7, 0x1}, {{0xfff2, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xe85, 0x1, 0xc}, {0x4, 0x3, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) 8.240118791s ago: executing program 0 (id=6499): r0 = socket(0x2b, 0x1, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket(0x8, 0x0, 0x8000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x2, 0x4) ioctl$sock_netrom_SIOCADDRT(r1, 0x61d1, 0x0) unshare(0x40080) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) r3 = socket(0x22, 0xa, 0x2) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) close(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000f40000000000000020000018010000202070250000000000202020db1af8ff00000000bfa100000000000017010000f0ffffffb702000008000000b70300000080000085000000ca000000"], &(0x7f0000000400)='GPL\x00', 0x1, 0xdd, &(0x7f0000000440)=""/221, 0x0, 0x40}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff"], 0xfc}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc004) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, 0x0, 0x0) 8.067733142s ago: executing program 4 (id=6502): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000540)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbb3c9c321400000000000801461000a80080000000019078ac1e0001ac1414aa01000000030590781206183f20000000006700000089000064010101e00000021414aa000003fce00000020000c47effffffff00000008ac1414bb000000000a010100000000050a010101000002000000010180000000861a0000000101108f921de4c6f40d71d09c793fcf390104834d07130964010101"], 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="a69e393cdbf2625d5e307e448c8bf781497d34b0872f4ae944790f8d15cd217122c860fce7809dda65fe2314aa50d28b6e022dd05a2ccbc8ad9290c6d84338b0d7b74eb880a4ab7719a0fac45052735a1c5ceb70999f09a23df1bb8f8718eeb04d2002bd04827d32b27e7174fad9d9f202d01cb8b43e79b97b43df395e2a719ef7da6b3f289d1b67d025c1451a58c7bada38b3b254f005cff85d1af83d121e6bd3f533d9d02e9e65fb7d43bfa763a8dfba57e0f720d68682a375d772d3da4f96e1fb5c8866", @ANYBLOB="18e0fb4e0526d4b47f706fbc1b2b19e1131820def406a0b7816885d06a04fd40114ac943ac828cadeb3036324567987b9993ad82e64c5609bc35d6ca1a6ef76600de27790d1e55c9fe4500c76f67430d0942f0e837984d29a3c54a0e06a1ac9330999eb247ad3583cdc1f446f669a16a2e3399aabf05e7fbe4787e0e78d895ff0d19b69d1ac95b32e39614dd4b9e89726b2611ca60ca914393868c52b1f29d9d258af4222d979b90a398a99572feca3802d65de7a2b36756b28a13e17e4e4944c8bfe65d2a77623ce5eb02c3289b81a1a1c7b9cc9c51a453037192e58e130f675597", @ANYRES32=r1, @ANYRES8=r0, @ANYRES16=r1, @ANYRESDEC=r1, @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x140400c4}, 0x14004040) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r4 = socket$kcm(0x2, 0x3, 0x2) (async) r5 = socket$inet(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="2400000001031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x2a) (async) r6 = socket$kcm(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) (async) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmmsg$inet(r2, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) (async) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 32) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 32) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/21, 0x15}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000240)=""/56, 0x38}], 0x3}}], 0x2, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000840)="a686713cf44c4382e8e8c1e5f8a9891ac8824637415c34f7f5c4337a966ebeb7e40487411148f49445e7d526a8869fd7bf37604f02e40983fef0323003515745c6bac67fea4e7a352992f5e562c0f92554ad67538b34e6baec298aab024e4a1b34d8152605855cbc75fcbe8cabd4dfa1f7ffb6bf79a98fe49fd8f9eb211369b722109a785b214ebb2b55899e0f", 0x8d, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x6}, 0x1c) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) 8.067226761s ago: executing program 3 (id=6503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0b1600000000000000004a0000000800b800000000000e0001"], 0x3c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x21f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8.047946859s ago: executing program 2 (id=6504): socket(0x1000000010, 0x80002, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) r1 = socket(0x29, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) socket(0xa, 0x3, 0xff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x1170, 0x1398, 0x160, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [0x0, 0x0, 0xffffffff], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x2f}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@socket3={{0x28}}, @common=@inet=@socket3={{0x28}, 0x5}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@srh={{0x30}, {0x73, 0x5, 0x1, 0xe, 0x81, 0x420, 0x1004}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc, 0xf, 0x0, 0x8, 'snmp_trap\x00', 'syz1\x00', {0x71}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xc0041, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000140)=0x8001) write$tun(r6, &(0x7f0000000040)=ANY=[@ANYRES16=r6, @ANYBLOB="e1ed7b240904fabe4afd320000c8e7a7a412232e84e348930eeb"], 0xfdef) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, 0x0, 0x8000) socket(0x2b, 0x1, 0x0) getpeername$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c) 7.751947508s ago: executing program 3 (id=6506): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xc4}}, 0x4000040) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000340)=0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet(0x2, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xc011}, 0x800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x32600) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000000)={0x9c1, 0xc4, 0x7fff, 0x4}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x7fff}, &(0x7f00000001c0)=0x8) write$tun(0xffffffffffffffff, &(0x7f0000000600)={@val={0x6f01, 0x800}, @val={0x3, 0x3, 0x27, 0xc, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x8, 0x0, 0x4, 0x0, 0x1a, {[@timestamp={0x5, 0xa, 0x7fffff8}, @generic={0x0, 0x2}]}}}}}}, 0x42) 7.745012241s ago: executing program 4 (id=6507): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000680)=@newqdisc={0x98, 0x24, 0x4ee4e6a52ff565e1, 0x78bd28, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0x7ffb, 0xb}, {0x7, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x68, 0x2, {{0x4, 0x7, 0x3, 0x6, 0x8}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x3e1898f1d718de54}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_REORDER={0xc, 0x3, {0x8988, 0x66b}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_RATE={0x14, 0x6, {0x9, 0x9, 0x0, 0x401}}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x54070}, 0x400c840) sendmsg$kcm(r5, &(0x7f00000002c0)={&(0x7f00000004c0)=@xdp={0x2c, 0xdd86, r6, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)="27a187afa6778008b6bcee1d068493afb7bcc6032185b3d252582209d76fc446e731005df503d86547950950288368131ea4ebee455a10f9e138f9140f065c1e8f02f9be307d8c061979dd25", 0x4c}], 0x1}, 0x4) 7.644588174s ago: executing program 1 (id=6508): r0 = socket(0x2, 0x80805, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r0, 0xc) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) shutdown(r1, 0x0) socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x3) 6.857980888s ago: executing program 4 (id=6509): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf250200000008000300", @ANYRES32=r4, @ANYBLOB="0c0099004100000060000095090000080026006c09000008009f00050000000000000000"], 0x40}}, 0x0) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) r9 = gettid() r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000010000304f9fffffffe5b350088e69dcb", @ANYRES32=r8, @ANYBLOB="100907000750070008001300", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) r11 = gettid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r12, &(0x7f0000000b80)=""/237, 0xed) accept(r13, &(0x7f00000002c0)=@can, &(0x7f0000000340)=0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r2, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x57}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xf, 0x19}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xa}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x5b}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_PID={0x8, 0x52, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x43}}, @NL80211_ATTR_PID={0x8, 0x52, r11}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffff16f, 0x21}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r12}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000880) 6.352261283s ago: executing program 1 (id=6510): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x101}, 0x50) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000480)={0x0, "546b1cb3561a3a4bec11c4f5e994ff73"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001c40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$SEG6_CMD_SET_TUNSRC(r1, 0x0, 0x10) sendmsg$nl_generic(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x38, 0x39, 0x200, 0x70bd26, 0x25dfdbfe, {0x7}, [@generic="0d40fcd2a6e2360db39833655fe541744bb01f1d16e2c241a56b53ac77", @typed={0x4, 0xc8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000047}, 0x2404c015) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000012c0)='bic', 0x3) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) shutdown(r7, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x10008010) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x34, r6, 0x403, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40800) 3.560483688s ago: executing program 3 (id=6511): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x1, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0x3aa0}, 0x1, 0x0, 0x0, 0x40}, 0x24004015) readv(r3, &(0x7f0000000580)=[{&(0x7f0000000280)=""/198, 0xc6}, {&(0x7f0000002000)=""/21, 0x15}, {&(0x7f0000000480)=""/166, 0xa6}], 0x3) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="e6", 0x1}], 0x1, &(0x7f0000000f80)=ANY=[], 0x18}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x7ff, @remote, 0x3}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000002c0)="f64cb07a25e7676ce7aa24404304fb44e9c1b4ec2a1bd8db959692a15ec448849bf52e4b5ad15dea03ac1e9fff3ad4c45d608504c4026d89755a7e6f591900b0036d1cb3d25a6f292a640f351b6f562b", 0x50}, {&(0x7f0000000380)="d7ac409bdad1c378fd11ed19af54f0ebe81f4f5143f8f8347262175b7729e959c0db55d9fea5f03e02fa3d03382d00e05a4a37fff187c2d257f4cebd4bfe6d4b3d415dbfa98bfdd7ab81c7715af7b28ddcd5d8ec3b2a1401a216189bd693029508c72aaa71b7e47d8b04cf39e33349dd1a434453e5f210f23103f16d40b3bfd98381f54e41dbc02a2acd76907595298f3b7cf1a660780df54f", 0x99}, {&(0x7f0000000440)}], 0x3}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x85b7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa}, 0x1c, &(0x7f0000000c80)=[{&(0x7f0000000680)="620051b07761890d2b703a6537ba52adb5dbb5ce7b9f0f200e90452d7c9990", 0x1f}, {&(0x7f00000006c0)="33321e8e3267c8e7ff2c551d07e224054c4940875ecd1b47e1480b6de76ccb3e025dba9dab49d2f53e64ab203a45967c80cb49d1efdc8dd26635483f30f1968c106333614a81b8f9f881fb83422a82c2bd51f7e696ba1307644b9ad1614217c707834da464c51becaa20be5d210f0f6aba68f70010187f8776", 0x79}, {&(0x7f0000000740)="9dadcef5cabb53477de71bd4cab8d36655cbe16309f298a182cf69886ea52a5ac295824ae6024f0f878f0a5c8887cd8490e407e9c07ba05520454e2ab3c99c907023e050815608ed4bb18c39201e9cfcc4d112e2699f8851d8fa6cd68770f629bb43380b8595f5542f9d3829f8374cfd4e95693f1b95f5ca477b1d1ea13d56a5fa056d8f5e36c3cae0ebe139ba12a30c0e253f95b4af23c4eeaa74be36a0", 0x9e}, {&(0x7f0000000800)="00f6009945ecb0d397ae82290994c96cd61e2aed8cd241d2c920186583d61e112ae9917e4674ff66cdcb5cb41330230ba1dd8af45efe525de48fa53403ceadc1e060f02100ed922f3a83287600ac2bbbd117e03c11f368aa2aa23e45d40e547978a97248a3aeaf4e9f7ab98bcc41f848fea1594c966f415f181b544bb205cf9ebdb7d570eddc35168afae05fe2a5e76ec599990e160b96bb1a202a6ae33cc1e0284301b69627a9a08c4ccbba3238eab4c816ef632dfa1e45a67e331f6ec313ed3cf3e52bb9de60c22cf7afe986bb62c3ac695f05bc1edf6e4c24c5ba7a8f030356fb9aa871c4b3569ed7f2ec75637b18ff4982398dd7e95a43", 0xf9}, {&(0x7f0000000900)="457c7e6c63b20945194df41cc38f", 0xe}, {&(0x7f0000000940)="85a4566f7dc4cb4303d2038004e1ffee74f6e9ced770da64ed5c4efe3a5a7d9d3d29ccc7059e5ffae58420755d108a30acc038111a10bc13ed31b925cb8fd18a20d590e6e5ac3961884c5f4b826471816e94978610193df6af9eb27d20e0a3f0f5499910f4293e91759d8cdc72e0eed30b72eadf8bb2bd7ff7bac2181213d5463548f9207f752667d472ef2a915f2bf9b30729868ca01c5bba705cd707cb4b29415dd1ef92fe69ae9737c21f14c39e75d0d69782bde1abb6747705607b49ebf3d418decea0", 0xc5}, {&(0x7f0000000a40)="5b612f2bb4665514e17df846f64f6154cca66f79a8ad4d87fe1fe70b3fbb1649c7e4f8a5c88abc8806d49ef94fcad8427b229ae67c829bab4240507f451ca9ce6a26ee889a173e92ef40e88f7b0359c19833703ba9fd194bebc28c530ef205cf2e34d86b1cdb97d443382e395664d523c5c66f01af18232d3dbbe677a6cec0e0d7dcdc2ee3022fc7ac1ad587e67ff226115be40eceac6e064bda6ab5b0fda610378167d29585647a0f077383a17370b291dc6b573826f31ef71713c7697f10bcd1559f52", 0xc4}, {&(0x7f0000000b40)="a3f4f7285910a07614f904ac73530860d8246ed94167c9", 0x17}, {&(0x7f0000000b80)="659aff164ca05a7dbad67a61daa1175de5d73dd89f8fe06e19d539db09771bf7d39020b4c6fbf0c273d596a310eab4f971eb2a0b1349fbfb4f4391df05656ceb87c090a413908948de472b0cf6523df36770457082bcf572ba9cb5e9b3f8d360c0c9181a9cf15fbe2f7d436471d5882e2c52e638849df9f5b2ed51ee80bf77a1077f95016377a84fee1887edb764c98385d3af5e0950fb505b3777bc90f2ac0c1f09d17fbd5e9faca91f9881ece80ed4f3a06cfc7fc7b46c038a534bb2c2f5f915dbe9ef", 0xc4}], 0x9, &(0x7f0000000d40)=[@dstopts={{0x20, 0x29, 0x37, {0x89, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x34}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7fffffff}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x8, 0x3, '\x00', [@hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x108, 0x29, 0x4, {0x73, 0x1d, '\x00', [@generic={0x3, 0x4a, "02fe60594f2ed7c58ace6cbcf5e95ba5bf61ad77e2bbdfb93d95a317cbcaa49f6c17b5e9c1491ec7739a5259f860eb99896fd5baeba334890d3139bb94550cca78be26e99c7d8a360dfc"}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0xc9}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private0}, @generic={0xff, 0x69, "6d4a65204462058fc6789cfd1e403d3531e95e57064c8d997e77edf8e3a14fd48b1e108028424feb76c737fa584304012cae7c2a9c3a1a9156cfee55874295d26dcfa60686541b69a0e0fc2964b52bba5234c37c3a833b12b6f554920656a4735b296a5185e6081985"}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x87, 0x0, '\x00', [@pad1]}}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x6c, 0x4, '\x00', [@hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @ra={0x5, 0x2, 0xacba}, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}], 0x1d8}}, {{&(0x7f0000000f40)={0xa, 0x4e20, 0x5, @mcast1, 0x8001}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000f80)="e701b6f7e2154a784044334c9c179a6d3e1452fdf42141f96f12e56ab2662062e0fc555ac4750da9ea4b2d02296115a5f582de72c2d35cef86ea0f326bdb673d9ae40b268577477514fb49ba8cbd942fb5cb8d01ce4cf45f2498ef67a7a04318630eaf6141db86d50b5ef652394e33a12f2bf12fa2d5886319958995cebb7fd7e906bcbf13dfa0253bd3d834540f62064e9541f4931ec19b1ef70f04116ca43e3a3b68322d", 0xa5}, {&(0x7f0000001040)="23457a27d05e408dd68bb3e87f86aab4bf20350769e2a58086151c1562a8ff52", 0x20}, {&(0x7f0000001080)="6974bd11756f99f6de169cf550a6cec038c21249d2b5d0a33052267732bf402b9c3e7b5d28bce5a7db5e7a35b6de35c5c281dda2587750ee6a29362d57eb7527c80a521998304996237d63b7778c64e6d7286b90bc6eac6a88af46eaaabcc6b2c599db94f98973fa43e53fe0ee38bc84a68807701aeff8813fcb120233b410b87bee60c4c2e35945b99d6832262e5290edd2588838cf22e343eb90951226973342c0a0012fb2ec7d851c2d7ebb5f18902f", 0xb1}, {&(0x7f0000001140)="3f6ba7ea18183e53129927928bbaa48cb2d34b27990773a7fc1478a5bf4e22e98c7cf37eb7ab1ba3caaa1785db0e4ec63ad2a4a9b3984ddd2126b30bf3c4ce7c81ca0cbc9d46d78cf642589eadf561c647d05ba13a25e3d041a1d4d479a06e15547970c5a45a40382f6a38259027179a8c67883d73d758adcc4e28e10c9967e013537738db9fdab5b8f1f1ecbb1613e3f9fcebab17d47abb146005facc51920a4ec48b", 0xa3}], 0x4}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001240)="74cac1a93e906fb492df872e6348cc36ad5b0e8a41ab919290ddd40c9e9e4eff8e3bd7f695ccfd13600cdb843330dd797fe561536106acc4995128", 0x3b}, {&(0x7f0000001280)="6b629f2d046cc5c64d211fd7642d8a05240c01e5a8e103e12b074741fa29d669068c1bb991237299c24a1aadeb742ed9fca959fe6721e22697df71ad114ee8bbf75e33317de2519f580af54d039f7ac762997e2d7c526629488105ea8e1f23e8801c054441f76facacbc3b5f73cf3aa68ccbed", 0x73}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001400)="5e6dd85139c89895293372b8aacf1e4fd846ccd7d19bc03dda8c54264a2d81da180e258b33a3c0013e62914389e6bfeea8e2e9b525485f2ce4c580dc990e154475170d884b058a061b21c13b4ee1dd99b1a15f95dc3fcd7d821816c60722180cda8200104c1312e536da5396d4539dc7e2d4cd1f57a811f426", 0x79}, {&(0x7f00000014c0)="586972107466e6876fad554b84c2062979718253b8e8b89f841cbc137fe85bbfc25aa5a68fee40d1cd77d4eeb7630364c5b05326f190156e7a488b0edc9fb781ebad5fc331358d2adf298dd4a56d8078ce7ccb9a8a5b73e430ee6fe3006afbbddeae140a1704fb466f708067d09892ea2ff9189eafcdc6ec214c6d9a82bebbbec2d0ba243f8cbd9be2a312e2072804ddc6523fd933661c0ef327e65cdc6bcf6c1c32fb57cc2029189d616229388cff51c29d1f0d1aefcb2262cf1678a965d8a85ed10569f6f7b7e07aacb550714fcd6842e113b20e679ed5ae617a8520d05eae205e08014bef75e10e1cc9de36847ef924", 0xf1}, {0x0}], 0x3, &(0x7f0000001b40)=[@dstopts_2292={{0x18, 0x29, 0x4, {0xdc}}}, @rthdr={{0x38, 0x29, 0x39, {0x16, 0x4, 0x0, 0x0, 0x0, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x43}]}}}], 0x50}}], 0x6, 0x2400c444) 3.543212403s ago: executing program 1 (id=6512): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000000)={0x2f}, 0x8) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000680)=0x3, 0x4) sendmmsg$inet6(r2, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000000)={0x2f}, 0x8) (async) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000680)=0x3, 0x4) (async) sendmmsg$inet6(r2, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) (async) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) (async) 3.542645536s ago: executing program 4 (id=6513): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8041}, 0x4000052) (async) sendmsg$nl_generic(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 3.442503229s ago: executing program 4 (id=6514): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8911, &(0x7f0000000080)={'syz_tun\x00', @ifru_mtu=0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000bf00000095"], &(0x7f00000001c0)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41000, 0x13}, 0x94) 3.391922546s ago: executing program 3 (id=6515): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1802000083cd000000000000fdfffdff850000002700000018010000646c6c2500000000002020207b1af8ff0000000000000007010000f8ffffffb702000008000000b70300000000000085000000700000009503000000000000dc1d23068172d44cc87ae8e99c3e731edb10b8dba0c1ba766f3a994e78c61c467b6fdc2b2f9e8ab010083ae480b6f0adf49bd1e81c2859dafddc208200e6405094dbd02acb2e65ccda5c690fafdac2acbbfc586108d537a7f309d6f9d7af62af16fd371160ab78ddc8f0c06b4e6ad7b8fc2e5fc22445ab1fb8a3e89222bfabc4"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000340)={0x2, 0xfffffff9, 0xccf, 0xe}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008030}, 0x24040084) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r15, {0x19, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000200)="f058050000007f8f", 0x8}], 0x2}, 0x5) sendmsg$NFT_BATCH(r4, 0x0, 0x24000840) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}, 0x4011) recvmsg(r2, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x20) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xcd83, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.296798594s ago: executing program 4 (id=6516): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0xa4, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x2, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24008081}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000840)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000ffdbdf250300000008000100000000002800078024000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x40085}, 0xc090) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) r6 = socket(0x1, 0x3, 0x200000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000000210", @ANYRESOCT=r6], 0x18}}, 0x0) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e21, 0x0, @private1, 0x6}}, 0x9, 0x2, 0xffff, 0xfff, 0x20, 0xff, 0x3}, &(0x7f0000000740)=0x9c) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000780)={r9, 0x3c}, 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x34, r11, 0x1, 0x170bd2c, 0x8000, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000940)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x8c, r11, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044895}, 0x8004) 3.283916109s ago: executing program 1 (id=6517): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETNOCSUM(r2, 0xc040ff0b, 0x200000000013) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x3) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={0xb0, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0xffb3, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008010) 2.644454054s ago: executing program 0 (id=6518): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000000200"/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ff80850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002600)={&(0x7f0000002340)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="00a4c8553be448f0630106a8eb58c855cfa84aaacb348e24e5d3074b0489e7c5e3f2556584ed4eae040005007b31eae3056c6d975bd388fa69"], 0x298}, 0x1, 0x0, 0x0, 0x10}, 0x5) ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x1, @mcast2, 0x7}, 0x1c) r2 = socket$nl_crypto(0x10, 0x3, 0x15) readv(r2, &(0x7f0000001640)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/163, 0xa3}, {&(0x7f00000012c0)=""/50, 0x32}, {&(0x7f0000001300)=""/40, 0x28}, {0x0}, {&(0x7f0000001380)=""/8, 0x8}, {&(0x7f00000013c0)=""/187, 0xbb}, {&(0x7f0000001580)=""/140, 0x8c}], 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), r3) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000005feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000000000001d44000000000000db0a00fee10000007303000000000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef673d25e5f8ec7861ea0479cf428953a8a16e6cdf55e71ffb8a24f5b43f00d0e2dce96e17a6e0ae933d83edd7034ad0cf1e26c7b01c5cc6789225ac12c313ccd7f091e793fe82a9bd37df07a88a5393fbf1f7a6db09ef62fa25c00af3598020db95d5614e72adf80e0b897647bcf40b1302d1770b8d903402ddd7fe6d10e2c5f39f998fca35290efe5b0325e9b19553a798661b6c53e608e8fb59a19ee0694a694d534c03683fd743a88464f12c671aaaa25b0c0282beef04522a23fcf19f7184edb5679ac8d988d391075efbfe2e4190518e36d4608585b5474f91aa5173ef1752ac1542dc"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) accept4(r9, 0x0, 0x0, 0x800) write$nci(r6, &(0x7f0000000280)=ANY=[], 0x7) 2.353651754s ago: executing program 1 (id=6519): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x24008084) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) ioctl(0xffffffffffffffff, 0x8, &(0x7f0000000200)="a7e3299590fcaa52c15d2f33d988e5dd8e399f4d9996dfe310d8a9fce3c52450de6b720f1a0649d5cb6470d52052cee56f660aa62bd0c26911d0187f887cc044d278e740287282e1ad26ce21e7fcf8b4398a26ff55fbaedb721ce2915f0ea2fc8760c279b66679a060ec2cdc4463b9565330665b62bfefe0cb78075f066718ed093ded736ac8cb4350ec5a7938a39e1857998730d2629bfe9f4bfaea967e63fa137be36e7c5de158ab60f41ce87d6b8e5bd00550f10f915bb390a849") r7 = openat$cgroup_devices(r6, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000100)=ANY=[@ANYBLOB='c 75:', @ANYRESOCT], 0x10) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r8, 0xac9d4000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 1.970361454s ago: executing program 1 (id=6520): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_extract_tcp_res(&(0x7f0000000100)={0x41424344}, 0xb25, 0x72c) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x1b, 0x28, 0x67, 0x0, 0x4, 0x6, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x4e23, 0x4e23, 0x41424344, r3, 0x1, 0x0, 0x5, 0x4, 0x8, 0x0, 0xf}}}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000000100)={0x41424344}, 0xb25, 0x72c) syz_emit_ethernet(0x72, &(0x7f00000002c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @broadcast, @void, {@ipv4={0x800, @dccp={{0x15, 0x4, 0x1, 0x8, 0x64, 0x66, 0x0, 0x0, 0x21, 0x0, @multicast1, @rand_addr=0x64010101, {[@cipso={0x86, 0xf, 0x3, [{0x5, 0x9, "a8a5e3b3863b44"}]}, @ssrr={0x89, 0x17, 0x89, [@broadcast, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @cipso={0x86, 0x8, 0x1, [{0x5, 0x2}]}, @end, @end, @ssrr={0x89, 0xf, 0x9, [@dev={0xac, 0x14, 0x14, 0x18}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {{0x4e21, 0x4e23, 0x4, 0x1, 0xd, 0x0, 0x0, 0x4, 0x0, "7f23c4", 0x5, "ea6a93"}}}}}}, &(0x7f0000000340)={0x0, 0x1, [0x8b8, 0xeb6, 0xa16, 0x7b9]}) write$tun(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="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"], 0x391) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, r4, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x6}, @mptcp=@synack={0x1e, 0x10, 0x3, 0x2, 0x9, 0x6, 0x7a93}]}}}}}}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f0000000080)="7c773d39aeef00") ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000001280)="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") ioctl$sock_bt_hci(r6, 0x400448e7, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x10, 0x40, 0xfffffffd, 0x3, {{0x1f, 0x4, 0x1, 0x4, 0x7c, 0x65, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @multicast1, {[@noop, @end, @noop, @rr={0x7, 0x17, 0x9f, [@loopback, @multicast2, @loopback, @remote, @private=0xa010102]}, @rr={0x7, 0x23, 0x26, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x7f, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010100]}, @timestamp={0x44, 0x28, 0x30, 0x0, 0x8, [0xfff, 0x9, 0x5, 0x9, 0xff, 0x0, 0x0, 0x80000001, 0x1]}]}}}}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0xb, 0x0, 0x0) sendmsg$nl_generic(r8, &(0x7f0000001100)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000010c0)={&(0x7f0000000c00)={0x48c, 0x39, 0x400, 0x70bd2a, 0x25dfdbfc, {0x12}, [@generic="f6c703409906473e2ed19c3ec2c3efa7daeee553d6413ece4ece07407b96326d0d737edda0107f9c4a09fba3a749c4f89337ef608efd6b9cbfd49a2495e9317c8f1ec12e8bea7418335aa20bc33919de69150c7cd767e138f13f9f71bad67b910385e7181e53442dde", @nested={0x8, 0x44, 0x0, 0x1, [@typed={0x4, 0xdc}]}, @typed={0x8, 0xd, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x8b, 0x68, 0x0, 0x1, [@generic="1bdfd0b2218270bb613a3066d4fb1c6811143fd5ab581e21b25d2d69101d8bc5744a84ded7fb56af1756d3bc8789f25c07bf2d01d47efa8d844d4dd291494b7d25cf74dd9e7f991db5fc3d269f000ea15f9369e87c3f9cd6efdf44ae25e845434219905d7f20b1b22426cbf8132e08e9465c84c7d66e7e26c0e665", @typed={0xc, 0x2, 0x0, 0x0, @str='erspan0\x00'}]}, @nested={0xd7, 0x46, 0x0, 0x1, [@generic="0f78be34eaf33bf49605b022da3581c4da458d56e74154594bd92e43d74d3bd442b43557095783c8b94c34ed5ceb0e9c29da5bd091ca2ee7309f877bfe0d33596878843f5e573d5c7a04b8cbc86bd61d04922d360e6fc4ce243a", @nested={0x4, 0x15}, @typed={0x14, 0x79, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="d40958a235778d2e398bee5685ef70a53ba42f91471cc09fcc821325caa5320d6327ef7b24db9dc93fbe082e89dfe405605127f783e0c85c95ee59dac8787cf3ee21dc8e7936763cc936bb0c21ea1ae8e9488e61ec7be50f1bda6f1255d961a121"]}, @generic="b54adcab4dd057b859962bd649492e4975a37a7a1c65fe722f64975536b780488e4fac406ae2fe972583992bba157135315b6ebd6a02d788f665c42c141ad5af841eea82ed5f93185c14738cfd97315b0f45eeab5909f71a82bb642b8a325c48684310a7cff7af3bd185f9b0daa22d711777", @generic="59e5a177a063906c07350ebc55cf9d50b89953486766dbd0ca1fdd09a10d37fa61d143b8050c03c7b4af168da017995bc3b81e7c0e7b03ab444934597aeb3a2e62c2a6c2be02f091791378fabb34966b0271b46ad9194df8e610da2c93b641441c81b9802c29340a1b527ea812a252c955e3574da610a44d4adb70a6a39e31d87533fe59bd95a1ac839ed812792bf8fad7c924e680f8284fd8089c4572d2659ea9d817e65b6ba9d0d7ce7b974835c3c6998bcde70d0217ee536c7c86b4efac4e0b4191010effd8c8910450", @nested={0x15c, 0x50, 0x0, 0x1, [@typed={0x1c, 0x3b, 0x0, 0x0, @binary="8ad7a5f09c24ebe20a235718c1956fd20db239089b6c9882"}, @typed={0xd, 0xc2, 0x0, 0x0, @str='ip6_vti0\x00'}, @generic="0ab2424ed109087bad22286ab1958cf6fea928e92ae7dc2a96a23a1d85ff76e76124d5f04695bfa0a314a82da20f80a857cffec9fa4b341d8a41d46c23c88892b1b748b4331a8d6f2d9520f423a74986698002baa5177e793ae6aa", @typed={0xf, 0x14c, 0x0, 0x0, @str='syzkaller1\x00'}, @generic="698fa56dad294f", @generic="f3452c56ffb3d9c4d809aa3192f5b7c7e5d83afeed27e8c8443da4958c51c2a00ad6870e70734c2a75d2db037a00ee7e8ddd783782622cb19f2b1085a10f8c3f167fbb08ea919125c9a946bc70fccd3926297b4a9c61c44376146b544e93acdc10e512464d0dd62339f44657297ee9e28fff87c7fa352c386dcdbb3b108b380b25696c33c2ce397d6201a9d3f2fc0f7766bf29695a6769318991bcc9c71c442659006d40d93642406019abe08096887c4243f19e239fd14fe00f"]}]}, 0x48c}, 0x1, 0x0, 0x0, 0x80}, 0x48001) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'erspan0\x00', r7, 0x10, 0x1, 0x4, 0x3, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x64, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@end, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0xc2, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) write$tun(r2, &(0x7f0000000380)={@val={0x0, 0xd}, @void, @x25={0x0, 0x0, 0xd1bfa55200c93a7f, "42df89ea4839d834745867513d716ee33ea316a7e2bb07591911bfe630686e25a3d91f3cd460a015286dcc33dde648e31aa55ae5b2852e048fdebc2553d60c739bc6d89817f9b75b5739c1611760fd4910da6d8fbc549316ebed66ba81fde93ba674655c5e136ace1ad8868ec086cf9e47b1646e81f5ef90a6eeacea4f7fb1ed2cd26eb011d021b77dd0cf3b0f0a91bce03c9aaac260ee95089bceac75ee3249e5b66b026f0b6ec675ab23e5918b04640060f0d5c02e2240864c8aabf8ab510e108b04dff1675cc13829b9"}}, 0xd2) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {}, [@typed={0x4, 0xe5}, @typed={0xc, 0xa, 0x0, 0x0, @u64=0x1000000}]}, 0x24}}, 0x80) r12 = accept$inet6(r11, &(0x7f0000000580)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000a40)=0x1c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'ip6tnl0\x00', r9, 0x2f, 0x0, 0x8, 0x9, 0x8, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x40, 0x3}}) ioctl$sock_inet6_SIOCDELRT(r12, 0x890c, &(0x7f0000000b40)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x6, 0x6, 0x1, 0x100, 0x7, 0x80, r13}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000190009002dbd7000fedbdf2502202000ff02ff02001a00000c00090008002810", @ANYRESDEC=r10, @ANYBLOB="08000100ac1414aa8e589711c389c882fb00bf57383c55e50bde0d723be5f86d1eedd2b5901eb7b51badc42fa777542164d54d54aa0443e09b11a7558cf09e9852cc302491c84be9c4622aa48a9e23b0587e63b3b3eaf2b71e0a5608cb6aa1811bac1a024c67b52a0027764435cf69e766c892b2f82c42107a164cd1a4f4bd7bec1992df4d22a2"], 0x30}, 0x1, 0x0, 0x0, 0x448d0}, 0x1000) syz_extract_tcp_res$synack(&(0x7f00000001c0), 0x1, 0x0) 1.295111734s ago: executing program 0 (id=6521): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 56.467546ms ago: executing program 0 (id=6522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x3b}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffeea, &(0x7f0000000340)=[{&(0x7f0000000500)="0f", 0x1}], 0x1}, 0x48840) 0s ago: executing program 3 (id=6523): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000040000000000000e03000000000000000100000000000011048000000a000000000000000000000202000000002e000061"], 0x0, 0x4a}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1100000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000e04a574000000000000000000000000000000000000002027880f54f60000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)=0xe69, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote}, &(0x7f0000000080)=0x14) kernel console output (not intermixed with test programs): ter parsing attributes in process `syz.1.5190'. [ 697.649353][T26324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5190'. [ 697.675447][T26324] netlink: 'syz.1.5190': attribute type 18 has an invalid length. [ 697.705197][T26330] netlink: 'syz.1.5190': attribute type 1 has an invalid length. [ 697.737232][T26324] netlink: 'syz.1.5190': attribute type 1 has an invalid length. [ 698.252855][T26348] lo speed is unknown, defaulting to 1000 [ 698.580758][T26358] xt_hashlimit: size too large, truncated to 1048576 [ 698.681389][T26348] lo speed is unknown, defaulting to 1000 [ 698.916293][T26378] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 698.957983][T26378] netlink: 'syz.3.5204': attribute type 1 has an invalid length. [ 699.062385][T26388] __nla_validate_parse: 1 callbacks suppressed [ 699.062404][T26388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5204'. [ 699.172053][T26374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5204'. [ 699.267972][T26382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5207'. [ 699.287833][T26374] veth7: entered promiscuous mode [ 699.359455][T26400] netlink: 'syz.0.5210': attribute type 8 has an invalid length. [ 699.359630][T26389] lo speed is unknown, defaulting to 1000 [ 699.378181][T26400] netlink: 'syz.0.5210': attribute type 1 has an invalid length. [ 699.508046][T26403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5211'. [ 699.550715][T21912] block nbd7: Receive control failed (result -1) [ 700.213784][T26419] lo speed is unknown, defaulting to 1000 [ 700.220516][T26389] lo speed is unknown, defaulting to 1000 [ 700.788439][T26426] lo speed is unknown, defaulting to 1000 [ 701.065560][T26419] lo speed is unknown, defaulting to 1000 [ 701.080993][T26426] lo speed is unknown, defaulting to 1000 [ 701.446714][T26460] syzkaller0: entered promiscuous mode [ 701.452369][T26460] syzkaller0: entered allmulticast mode [ 703.914489][T26488] bond9: option tlb_dynamic_lb: invalid value (5) [ 703.942804][T26488] bond9 (unregistering): Released all slaves [ 704.367518][T26483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5227'. [ 704.529879][T26516] netlink: 'syz.1.5239': attribute type 1 has an invalid length. [ 704.545384][T26516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5239'. [ 704.690183][T26525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5241'. [ 704.723559][T26522] lo speed is unknown, defaulting to 1000 [ 704.755040][T16614] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.770246][T16614] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.795187][T16614] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.846072][T16614] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 704.955143][T26536] netlink: 'syz.0.5243': attribute type 1 has an invalid length. [ 705.066729][T26540] IPv6: Can't replace route, no match found [ 705.112617][T26540] IPv6: Can't replace route, no match found [ 705.141884][T26536] bond16: entered promiscuous mode [ 705.164490][T26536] 8021q: adding VLAN 0 to HW filter on device bond16 [ 705.310185][T26540] bond16: (slave veth7): making interface the new active one [ 705.338462][T26540] veth7: entered promiscuous mode [ 705.356099][T26540] bond16: (slave veth7): Enslaving as an active interface with an up link [ 705.418829][T26522] lo speed is unknown, defaulting to 1000 [ 705.496661][T26555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5249'. [ 705.781646][T26571] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5252'. [ 706.190882][T26592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5257'. [ 706.743808][T26615] SET target dimension over the limit! [ 706.986627][T26620] batadv0: entered allmulticast mode [ 707.000678][T26621] batadv0: left allmulticast mode [ 707.014469][T26620] batadv0: entered allmulticast mode [ 707.020457][T26621] batadv0: left allmulticast mode [ 707.027476][T26620] batadv0: entered allmulticast mode [ 707.033097][T26621] batadv0: left allmulticast mode [ 707.039009][T26620] batadv0: entered allmulticast mode [ 707.044642][T26621] batadv0: left allmulticast mode [ 707.051841][T26620] batadv0: entered allmulticast mode [ 707.058321][T26621] batadv0: left allmulticast mode [ 707.071744][T26620] batadv0: entered allmulticast mode [ 707.085006][T26621] batadv0: left allmulticast mode [ 707.096805][T26620] batadv0: entered allmulticast mode [ 707.111655][T26621] batadv0: left allmulticast mode [ 707.112144][T26617] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5261'. [ 707.126103][T26620] batadv0: entered allmulticast mode [ 707.138340][T26625] netlink: 'syz.3.5263': attribute type 10 has an invalid length. [ 707.145176][T26617] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5261'. [ 707.151887][T26621] batadv0: left allmulticast mode [ 707.165086][T26625] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5263'. [ 707.184962][T26620] batadv0: entered allmulticast mode [ 707.198945][T26625] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 707.224916][T26625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 707.250685][T26625] hsr0: entered promiscuous mode [ 707.271422][T26625] bridge0: port 1(hsr0) entered blocking state [ 707.280284][T26625] bridge0: port 1(hsr0) entered disabled state [ 707.289788][T26625] hsr0: entered allmulticast mode [ 707.295441][T26625] hsr_slave_0: entered allmulticast mode [ 707.301572][T26625] hsr_slave_1: entered allmulticast mode [ 707.320608][T26630] netlink: 'syz.2.5265': attribute type 1 has an invalid length. [ 707.386158][T26630] 8021q: adding VLAN 0 to HW filter on device bond8 [ 707.439858][T26634] 8021q: adding VLAN 0 to HW filter on device bond8 [ 707.457567][T26634] bond8: (slave vcan0): The slave device specified does not support setting the MAC address [ 707.473459][T26634] bond8: (slave vcan0): Error -95 calling set_mac_address [ 707.712346][T26648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5269'. [ 708.603403][T26683] netlink: 'syz.2.5283': attribute type 4 has an invalid length. [ 708.611762][T26688] netlink: 'syz.3.5285': attribute type 1 has an invalid length. [ 708.621382][T26688] netlink: 'syz.3.5285': attribute type 1 has an invalid length. [ 709.458879][T26740] __nla_validate_parse: 9 callbacks suppressed [ 709.458897][T26740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5303'. [ 709.749288][T26757] lo speed is unknown, defaulting to 1000 [ 710.066153][T26769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5312'. [ 710.130940][T26771] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5311'. [ 710.152593][T26771] netlink: 'syz.4.5311': attribute type 1 has an invalid length. [ 710.175942][T26771] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5311'. [ 710.289707][T26757] lo speed is unknown, defaulting to 1000 [ 710.416426][T26781] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 710.429090][T26788] netlink: 'syz.3.5317': attribute type 6 has an invalid length. [ 710.447583][T26785] lo speed is unknown, defaulting to 1000 [ 710.455567][T26788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5317'. [ 710.688969][T26794] netlink: 'syz.0.5320': attribute type 1 has an invalid length. [ 710.728625][T26794] 8021q: adding VLAN 0 to HW filter on device bond17 [ 710.789150][T26785] lo speed is unknown, defaulting to 1000 [ 710.868338][T26794] veth9: entered promiscuous mode [ 710.898046][T26794] bond17: (slave veth9): Enslaving as an active interface with an up link [ 711.076320][T26798] macsec1: entered allmulticast mode [ 711.096958][T26802] netlink: 'syz.2.5323': attribute type 7 has an invalid length. [ 711.105856][T26798] macsec0: entered allmulticast mode [ 711.315405][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 711.692704][T26841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5331'. [ 711.736292][T26841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5331'. [ 712.109320][T26855] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5334'. [ 712.326244][T26864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5337'. [ 712.353926][T26866] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 712.362333][T26866] openvswitch: netlink: Message has 16 unknown bytes. [ 712.372682][T26866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5339'. [ 712.420170][T26866] netlink: 'syz.1.5339': attribute type 7 has an invalid length. [ 712.460286][ T144] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.460516][T26866] netlink: 'syz.1.5339': attribute type 7 has an invalid length. [ 712.481361][ T144] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.510873][ T144] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.532704][ T144] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.941417][T26898] team_slave_1: Caught tx_queue_len zero misconfig [ 713.079024][T26895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 713.215845][T26893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 713.518728][T26926] syzkaller0: entered promiscuous mode [ 713.524987][T26926] syzkaller0: entered allmulticast mode [ 714.181122][T26948] netlink: 'syz.4.5361': attribute type 2 has an invalid length. [ 715.983261][T26928] lo speed is unknown, defaulting to 1000 [ 716.145057][T26968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 716.167875][T26970] veth0_to_team: left promiscuous mode [ 716.203235][T26970] __nla_validate_parse: 8 callbacks suppressed [ 716.203250][T26970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5365'. [ 716.258716][T26975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5365'. [ 716.264540][T26968] syzkaller0: entered promiscuous mode [ 716.298007][T26978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5369'. [ 716.300349][T26968] syzkaller0: entered allmulticast mode [ 716.315069][T26978] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5369'. [ 716.472218][T26928] lo speed is unknown, defaulting to 1000 [ 716.728224][T27000] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5374'. [ 717.102999][T27015] netlink: zone id is out of range [ 717.113022][T27015] netlink: zone id is out of range [ 717.119034][T27015] netlink: zone id is out of range [ 717.124490][T27015] netlink: zone id is out of range [ 717.130478][T27015] netlink: zone id is out of range [ 717.136487][T27015] netlink: zone id is out of range [ 717.141886][T27015] netlink: zone id is out of range [ 717.227852][T27022] netlink: 'syz.3.5380': attribute type 1 has an invalid length. [ 717.485760][T27039] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5383'. [ 717.593859][T27044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5385'. [ 717.878265][T27057] dvmrp0: entered allmulticast mode [ 717.892874][T27061] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5391'. [ 717.969031][T27064] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5392'. [ 718.215784][T27085] delete_channel: no stack [ 718.517618][T27095] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5401'. [ 718.565178][T27100] x_tables: duplicate underflow at hook 1 [ 718.838093][T27113] netlink: 'syz.4.5405': attribute type 13 has an invalid length. [ 718.868059][T27113] netlink: 'syz.4.5405': attribute type 4 has an invalid length. [ 719.521879][T27161] ip6t_srh: unknown srh match flags 4000 [ 719.533857][T27161] netlink: 'syz.2.5419': attribute type 1 has an invalid length. [ 719.542428][T27161] netlink: 'syz.2.5419': attribute type 4 has an invalid length. [ 719.551931][T27161] netlink: 'syz.2.5419': attribute type 1 has an invalid length. [ 719.567036][T27161] netlink: 'syz.2.5419': attribute type 4 has an invalid length. [ 719.596073][T27164] netlink: 'syz.0.5420': attribute type 10 has an invalid length. [ 719.606022][T27164] netlink: 'syz.0.5420': attribute type 10 has an invalid length. [ 720.173667][T27189] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 720.187785][T27189] bond8 (unregistering): Released all slaves [ 720.333617][T27197] syzkaller0: entered promiscuous mode [ 720.339632][T27197] syzkaller0: entered allmulticast mode [ 720.808695][T27208] x_tables: duplicate underflow at hook 1 [ 720.927743][T27220] netlink: 'syz.4.5436': attribute type 1 has an invalid length. [ 721.272810][T27233] __nla_validate_parse: 18 callbacks suppressed [ 721.272829][T27233] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5440'. [ 721.307373][T27234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5440'. [ 721.370113][T27240] netlink: 192 bytes leftover after parsing attributes in process `syz.2.5441'. [ 721.385287][T27236] lo speed is unknown, defaulting to 1000 [ 721.754039][T27249] net_ratelimit: 47 callbacks suppressed [ 721.754057][T27249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 721.798870][T27250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 722.000958][T27236] lo speed is unknown, defaulting to 1000 [ 722.006537][T27247] lo speed is unknown, defaulting to 1000 [ 722.080367][T27263] IPv6: NLM_F_CREATE should be specified when creating new route [ 722.523304][T27247] lo speed is unknown, defaulting to 1000 [ 722.634267][T27282] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5452'. [ 723.086234][T27288] lo speed is unknown, defaulting to 1000 [ 723.216640][T27295] validate_nla: 2 callbacks suppressed [ 723.216658][T27295] netlink: 'syz.2.5455': attribute type 1 has an invalid length. [ 723.330665][T27295] 8021q: adding VLAN 0 to HW filter on device bond9 [ 723.366561][T27301] bond9: (slave veth21): Enslaving as an active interface with a down link [ 723.450557][T27295] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 723.463152][T27295] bond9: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 723.550357][T27301] tipc: Enabled bearer , priority 0 [ 723.680644][T27301] syzkaller0: entered promiscuous mode [ 723.686369][T27301] syzkaller0: entered allmulticast mode [ 723.692442][T27301] tipc: Resetting bearer [ 723.700127][T27288] lo speed is unknown, defaulting to 1000 [ 723.732231][T27294] tipc: Resetting bearer [ 723.821397][T27317] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5460'. [ 723.853193][T27319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5462'. [ 723.862537][T27319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5462'. [ 723.876225][T27319] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5462'. [ 725.713423][T27294] tipc: Disabling bearer [ 725.739911][T27317] ip6gre2: entered promiscuous mode [ 725.745310][T27317] ip6gre2: entered allmulticast mode [ 725.751927][T16614] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 725.759906][T16614] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 725.776433][T12024] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 725.788110][T27319] bond0: entered promiscuous mode [ 725.804021][T27319] bond_slave_0: entered promiscuous mode [ 725.814001][T27319] bond_slave_1: entered promiscuous mode [ 725.823068][T27319] bond0: left promiscuous mode [ 725.828246][T27319] bond_slave_0: left promiscuous mode [ 725.833899][T27319] bond_slave_1: left promiscuous mode [ 725.906269][T27341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5464'. [ 725.929909][T27341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5464'. [ 726.040656][T27348] netlink: 'syz.3.5467': attribute type 21 has an invalid length. [ 726.115466][T27352] netlink: 'syz.1.5468': attribute type 10 has an invalid length. [ 726.186603][T27354] netlink: 'syz.1.5468': attribute type 10 has an invalid length. [ 726.226794][T12024] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 726.240691][T27356] sit0: left allmulticast mode [ 726.246128][T27356] netlink: 'syz.0.5470': attribute type 1 has an invalid length. [ 726.357222][T12024] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 726.492128][T27362] block nbd0: NBD_DISCONNECT [ 726.499940][T27366] syzkaller0: entered promiscuous mode [ 726.518464][T27366] syzkaller0: entered allmulticast mode [ 726.522905][T27362] block nbd0: Send disconnect failed -32 [ 726.544161][T27362] block nbd0: Send disconnect failed -32 [ 726.568873][T27362] block nbd0: shutting down sockets [ 726.737822][T27353] __nla_validate_parse: 3 callbacks suppressed [ 726.737841][T27353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5469'. [ 726.789715][ T48] tipc: Disabling bearer [ 726.797014][T27353] openvswitch: netlink: Invalid VLAN frame [ 727.050926][T27390] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5477'. [ 727.151496][T27394] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5480'. [ 727.165196][T27394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5480'. [ 727.210554][ T48] bond5 (unregistering): (slave geneve3): Releasing active interface [ 727.219428][ T48] geneve3 (unregistering): left allmulticast mode [ 727.470077][ T48] bond9 (unregistering): (slave bridge6): Releasing active interface [ 727.510630][ T48] bond0 (unregistering): Released all slaves [ 727.522086][ T48] bond1 (unregistering): Released all slaves [ 727.537603][ T48] bond2 (unregistering): Released all slaves [ 727.562166][ T48] bond3 (unregistering): Released all slaves [ 727.577341][ T48] bond4 (unregistering): Released all slaves [ 727.596888][ T48] bond5 (unregistering): Released all slaves [ 727.620095][ T48] bond6 (unregistering): Released all slaves [ 727.642034][ T48] bond7 (unregistering): Released all slaves [ 727.663349][ T48] bond8 (unregistering): (slave veth7): Releasing active interface [ 727.674933][ T48] bond8 (unregistering): Released all slaves [ 727.691154][ T48] bond9 (unregistering): Released all slaves [ 727.841061][ T48] : left promiscuous mode [ 727.901152][T27409] netlink: 212320 bytes leftover after parsing attributes in process `syz.3.5483'. [ 727.988438][ T48] tipc: Left network mode [ 728.057211][ T48] IPVS: stopping backup sync thread 15300 ... [ 728.064547][T27414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5485'. [ 728.351587][T27425] lo speed is unknown, defaulting to 1000 [ 728.451941][T27437] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5492'. [ 728.472981][T27437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5492'. [ 728.742950][T27448] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5496'. [ 728.939043][T27425] lo speed is unknown, defaulting to 1000 [ 729.190811][T27466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5501'. [ 729.554885][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 729.844049][ T48] hsr_slave_0: left promiscuous mode [ 729.866860][ T48] hsr_slave_1: left promiscuous mode [ 729.912012][ T48] batman_adv: batadv0: Removing interface: ipvlan2 [ 730.353963][T27513] tunl0: Caught tx_queue_len zero misconfig [ 730.578173][T27521] syzkaller0: entered promiscuous mode [ 730.583717][T27521] syzkaller0: entered allmulticast mode [ 730.644179][T27523] syzkaller1: entered promiscuous mode [ 730.649911][T27523] syzkaller1: entered allmulticast mode [ 730.730771][ T48] IPVS: stop unused estimator thread 0... [ 731.132740][T27549] tun0: tun_chr_ioctl cmd 1074812118 [ 731.147937][T27549] tun0: tun_chr_ioctl cmd 1074033169 [ 731.260655][T27558] netlink: 'syz.0.5528': attribute type 2 has an invalid length. [ 731.976935][T27586] __nla_validate_parse: 5 callbacks suppressed [ 731.976953][T27586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5534'. [ 732.226828][T27599] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5535'. [ 732.423854][T27609] xt_hashlimit: size too large, truncated to 1048576 [ 732.769962][T27618] syzkaller0: entered promiscuous mode [ 732.776704][T27618] syzkaller0: entered allmulticast mode [ 732.809728][T27630] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5545'. [ 732.862310][T27628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5544'. [ 733.508866][T27675] netlink: 'syz.0.5556': attribute type 25 has an invalid length. [ 733.537851][T27677] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5557'. [ 733.565336][T27677] netlink: 'syz.4.5557': attribute type 1 has an invalid length. [ 733.716773][T27684] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5558'. [ 733.726476][T27684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5558'. [ 735.232888][T27684] bond18: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 735.259917][T27684] bond18 (unregistering): Released all slaves [ 735.299262][T27696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5561'. [ 735.310360][T27696] netlink: 'syz.4.5561': attribute type 1 has an invalid length. [ 735.318327][T27696] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5561'. [ 735.513051][T27688] lo speed is unknown, defaulting to 1000 [ 735.701772][T27716] bridge_slave_1: left allmulticast mode [ 735.722957][T27716] bridge_slave_1: left promiscuous mode [ 735.741945][T27716] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.894490][T27727] netlink: 'syz.2.5567': attribute type 1 has an invalid length. [ 735.915497][T27727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5567'. [ 736.225622][T27733] tipc: Enabled bearer , priority 0 [ 736.249902][T27688] lo speed is unknown, defaulting to 1000 [ 736.278535][T27716] syzkaller0: mtu greater than device maximum [ 736.328990][T27736] syzkaller0: entered promiscuous mode [ 736.345068][T27736] syzkaller0: entered allmulticast mode [ 736.548869][T27714] tipc: Resetting bearer [ 736.578195][T27714] tipc: Disabling bearer [ 736.718791][T27726] delete_channel: no stack [ 736.915551][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 737.132518][T27776] netlink: 'syz.4.5577': attribute type 1 has an invalid length. [ 737.165545][T27776] __nla_validate_parse: 3 callbacks suppressed [ 737.165561][T27776] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5577'. [ 737.219643][T27777] netlink: 'syz.4.5577': attribute type 12 has an invalid length. [ 737.477832][T27786] sctp: [Deprecated]: syz.4.5581 (pid 27786) Use of int in max_burst socket option deprecated. [ 737.477832][T27786] Use struct sctp_assoc_value instead [ 737.679854][T27802] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5583'. [ 737.693386][T27796] netlink: 'syz.1.5582': attribute type 29 has an invalid length. [ 737.707003][T27796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5582'. [ 737.735071][T27802] tipc: New replicast peer: 255.255.255.255 [ 737.754036][T27802] tipc: Enabled bearer , priority 26 [ 737.893452][T27806] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5584'. [ 738.024368][T27809] IPVS: length: 200 != 8 [ 738.220836][T27825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5589'. [ 738.539023][T27855] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5596'. [ 738.554159][T27854] batadv_slave_0: Caught tx_queue_len zero misconfig [ 738.643693][T27862] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5598'. [ 738.870336][T27877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5602'. [ 738.892050][T27877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5602'. [ 739.039795][T27887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5604'. [ 739.102473][T27877] tipc: Enabled bearer , priority 14 [ 739.123309][ T144] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.142656][ T144] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.161794][ T144] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.178878][ T144] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 739.493918][T27901] syzkaller0: entered promiscuous mode [ 739.499651][T27901] syzkaller0: entered allmulticast mode [ 739.869998][T27921] netlink: 'syz.3.5616': attribute type 1 has an invalid length. [ 739.886403][T27922] netlink: 'syz.2.5615': attribute type 10 has an invalid length. [ 740.139684][T27940] "syz.3.5619" (27940) uses obsolete ecb(arc4) skcipher [ 740.148569][T27940] netlink: 'syz.3.5619': attribute type 1 has an invalid length. [ 741.800301][ T8751] wlan1: Trigger new scan to find an IBSS to join [ 742.064985][T27940] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 742.252771][T27951] __nla_validate_parse: 11 callbacks suppressed [ 742.252790][T27951] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5622'. [ 742.310588][T27957] batadv_slave_0: entered promiscuous mode [ 742.317015][T27957] batadv_slave_0: entered allmulticast mode [ 742.388266][T27950] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5623'. [ 742.671634][T27950] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5623'. [ 742.943898][T27988] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5632'. [ 742.959120][T27988] .70: renamed from hsr0 [ 742.968332][T27988] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 742.985072][T27988] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 742.996524][T27988] .70: entered allmulticast mode [ 743.001660][T27988] hsr_slave_0: entered allmulticast mode [ 743.010531][T13224] lec:lec_start_xmit: lec0:No lecd attached [ 743.020927][T27988] hsr_slave_1: entered allmulticast mode [ 743.036985][T27988] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check. [ 743.395034][T28015] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5640'. [ 743.606896][T28019] bond0: Device is already in use. [ 743.648439][T28019] netlink: 'syz.3.5642': attribute type 1 has an invalid length. [ 743.670581][T28019] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5642'. [ 743.868581][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 743.886914][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 743.896963][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 743.908912][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 743.920245][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 744.025709][T28042] team0 (unregistering): Port device team_slave_0 removed [ 744.101849][T28042] team0 (unregistering): Port device team_slave_1 removed [ 744.178006][T28042] team0 (unregistering): Port device bond5 removed [ 744.292863][T28037] lo speed is unknown, defaulting to 1000 [ 744.468022][T28058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5651'. [ 744.808134][T28082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5655'. [ 744.820171][T28082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5655'. [ 744.838662][ T8746] wlan1: Trigger new scan to find an IBSS to join [ 744.869331][T28082] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5655'. [ 745.000378][T28037] lo speed is unknown, defaulting to 1000 [ 745.682162][T28037] chnl_net:caif_netlink_parms(): no params data found [ 745.790179][T28134] C: renamed from team_slave_0 [ 745.835617][T28136] netlink: 'syz.3.5669': attribute type 1 has an invalid length. [ 745.957382][ T5839] Bluetooth: hci1: command tx timeout [ 746.018014][T28146] bond14: (slave vxcan1): The slave device specified does not support setting the MAC address [ 746.041380][T28146] bond14: (slave vxcan1): Error -95 calling set_mac_address [ 746.189661][T28136] bond14: (slave gretap2): making interface the new active one [ 746.222356][T28136] bond14: (slave gretap2): Enslaving as an active interface with an up link [ 746.230260][T28161] netlink: 'syz.2.5674': attribute type 13 has an invalid length. [ 746.251022][T28037] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.258372][T28037] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.265931][T28037] bridge_slave_0: entered allmulticast mode [ 746.273772][T28037] bridge_slave_0: entered promiscuous mode [ 746.289720][T28037] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.297635][T28037] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.305307][T28037] bridge_slave_1: entered allmulticast mode [ 746.312820][T28037] bridge_slave_1: entered promiscuous mode [ 746.328854][T28160] macvlan3: entered promiscuous mode [ 746.334335][T28160] macvlan3: entered allmulticast mode [ 746.368010][T28161] batman_adv: batadv0: Interface deactivated: vlan2 [ 746.504986][T28141] lo speed is unknown, defaulting to 1000 [ 746.533966][T28166] 8021q: VLANs not supported on ip_vti0 [ 746.574401][T28037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.589515][T28037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.664978][T28037] team0: Port device team_slave_0 added [ 746.681739][T28037] team0: Port device team_slave_1 added [ 746.770722][T28037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.778002][T28037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.823903][T28037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.850143][T28037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.875014][T28037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.940884][T28037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.963206][T28141] lo speed is unknown, defaulting to 1000 [ 746.969871][T28157] lo speed is unknown, defaulting to 1000 [ 747.111292][T28037] hsr_slave_0: entered promiscuous mode [ 747.126182][T28037] hsr_slave_1: entered promiscuous mode [ 747.159120][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.354471][T28171] __nla_validate_parse: 11 callbacks suppressed [ 747.354486][T28171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5676'. [ 747.402512][T28157] lo speed is unknown, defaulting to 1000 [ 747.409300][T28171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5676'. [ 747.420074][T28171] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5676'. [ 747.721425][T28191] tipc: Enabling of bearer rejected, failed to enable media [ 747.795675][ T8737] wlan1: Trigger new scan to find an IBSS to join [ 748.036271][ T5839] Bluetooth: hci1: command tx timeout [ 748.064534][T28037] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.169688][T28205] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5684'. [ 748.189629][T28202] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.201680][T28202] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 748.233386][T28037] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.303569][T28202] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.316224][T28202] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 748.343572][T28037] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.401563][T28202] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.412308][T28202] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 748.457940][T28037] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.523939][T28202] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.535470][T28202] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 748.546106][T28208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5685'. [ 748.719577][ T8751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.835257][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 748.843335][ C0] lec:lec_tx_timeout: lec0 [ 748.848213][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 748.854758][ T8751] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.873082][ T8751] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 749.067795][T28226] netlink: 'syz.2.5689': attribute type 29 has an invalid length. [ 749.089985][ T8751] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.098384][ T8751] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 749.133922][T28226] netlink: 'syz.2.5689': attribute type 32 has an invalid length. [ 749.153571][T28226] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5689'. [ 749.171137][ T144] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.189165][ T144] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 749.276132][T28229] netlink: 'syz.2.5689': attribute type 29 has an invalid length. [ 749.321244][ T8751] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.331921][ T8751] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 749.378954][T28231] lo speed is unknown, defaulting to 1000 [ 749.432627][T28037] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 749.453457][T28037] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 749.470482][T28037] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 749.510894][T28037] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 749.531046][T28037] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 749.564582][T28037] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 749.590195][T28037] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 749.620912][T28037] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 749.699957][T28258] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5694'. [ 749.943109][T28231] lo speed is unknown, defaulting to 1000 [ 750.103899][T28273] netlink: 'syz.2.5699': attribute type 9 has an invalid length. [ 750.115542][ T5839] Bluetooth: hci1: command tx timeout [ 750.121454][T28273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5699'. [ 750.222859][T28280] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5701'. [ 750.363760][T28037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.450465][T28037] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.487366][ T8751] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.494636][ T8751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.537617][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.544861][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.728616][T28294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5705'. [ 750.823512][T28298] netlink: 'syz.1.5706': attribute type 7 has an invalid length. [ 750.849380][T28298] netlink: 'syz.1.5706': attribute type 7 has an invalid length. [ 750.951062][T28303] gretap0: mtu less than device minimum [ 750.994865][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 751.044332][T28037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.191588][T28037] veth0_vlan: entered promiscuous mode [ 751.224057][T28037] veth1_vlan: entered promiscuous mode [ 751.245534][T28320] netlink: 'syz.4.5710': attribute type 2 has an invalid length. [ 751.305652][T28325] netlink: 'syz.4.5710': attribute type 2 has an invalid length. [ 751.335256][T28320] : entered promiscuous mode [ 751.361060][T28325] : left promiscuous mode [ 751.401176][T28326] IPVS: set_ctl: invalid protocol: 41 172.20.20.45:20000 [ 751.420798][T28323] lo speed is unknown, defaulting to 1000 [ 751.448729][T28037] veth0_macvtap: entered promiscuous mode [ 751.454436][T28328] netlink: 'syz.3.5713': attribute type 3 has an invalid length. [ 751.467446][T28037] veth1_macvtap: entered promiscuous mode [ 751.493957][T28037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.516107][T28037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.550222][ T8737] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.559572][ T8737] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.595424][ T8737] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.626635][ T8737] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.785449][ T8751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.807213][ T8751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.887330][T28308] delete_channel: no stack [ 751.968247][ T8737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.999287][ T8737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.195882][ T5839] Bluetooth: hci1: command tx timeout [ 752.280716][T28323] lo speed is unknown, defaulting to 1000 [ 752.444213][T28359] tipc: Started in network mode [ 752.449889][T28359] tipc: Node identity de544bbf1b63, cluster identity 4711 [ 752.458461][T28359] tipc: Enabled bearer , priority 0 [ 752.532300][T28358] syzkaller0: entered promiscuous mode [ 752.538339][T28358] syzkaller0: entered allmulticast mode [ 752.545836][T28358] tipc: Resetting bearer [ 752.615127][T28358] tipc: Resetting bearer [ 752.991152][T28378] __nla_validate_parse: 12 callbacks suppressed [ 752.991171][T28378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5723'. [ 753.009124][T28378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5723'. [ 753.856759][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 753.864875][ C0] lec:lec_tx_timeout: lec0 [ 754.828512][T28358] tipc: Disabling bearer [ 754.880911][T12024] tipc: Node number set to 3308735423 [ 755.436423][T28415] geneve3: entered promiscuous mode [ 755.490111][ T8746] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.521431][ T8746] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.539211][T28415] sctp: [Deprecated]: syz.4.5732 (pid 28415) Use of int in max_burst socket option. [ 755.539211][T28415] Use struct sctp_assoc_value instead [ 755.563858][ T8746] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.592478][ T8746] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.633162][T28427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5735'. [ 755.668921][T28427] netlink: 'syz.0.5735': attribute type 30 has an invalid length. [ 755.748107][T16614] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.751626][T28427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5735'. [ 755.807644][T28427] netlink: 'syz.0.5735': attribute type 30 has an invalid length. [ 755.817261][T28417] syzkaller0: entered promiscuous mode [ 755.826189][T28417] syzkaller0: entered allmulticast mode [ 755.857907][T16614] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.893490][T16614] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 755.941636][T16614] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.061055][T28443] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5739'. [ 756.089249][T28449] netlink: 'syz.2.5741': attribute type 1 has an invalid length. [ 756.146236][T28454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5742'. [ 756.220461][T28456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5742'. [ 756.281696][T28449] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 756.292967][T28449] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 756.393769][T28458] bond10: (slave gretap5): making interface the new active one [ 756.419579][T28458] bond10: (slave gretap5): Enslaving as an active interface with an up link [ 756.847857][T28482] netlink: 'syz.2.5747': attribute type 15 has an invalid length. [ 756.857172][T28477] lo speed is unknown, defaulting to 1000 [ 756.866425][T28482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5747'. [ 756.990181][T28488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5749'. [ 757.035350][T28488] netlink: 'syz.3.5749': attribute type 10 has an invalid length. [ 757.047381][T28487] netlink: 276 bytes leftover after parsing attributes in process `syz.0.5748'. [ 757.064122][T28488] netlink: 'syz.3.5749': attribute type 10 has an invalid length. [ 757.548618][T28512] bond1: (slave bond_slave_1): Device is not our slave [ 757.561360][T28512] bond1: option active_slave: invalid value (bond_slave_1) [ 757.587858][T28512] bond1 (unregistering): Released all slaves [ 757.868589][T28477] lo speed is unknown, defaulting to 1000 [ 758.226072][T28504] lo speed is unknown, defaulting to 1000 [ 758.279389][T28540] netlink: 'syz.3.5759': attribute type 4 has an invalid length. [ 758.338227][T28541] netlink: 'syz.3.5759': attribute type 4 has an invalid length. [ 758.677467][T28564] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 758.928581][T28504] lo speed is unknown, defaulting to 1000 [ 758.941141][T28583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5769'. [ 759.051568][T28591] netlink: 'syz.4.5769': attribute type 21 has an invalid length. [ 759.276301][T28589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5769'. [ 759.326696][T28591] veth17: entered allmulticast mode [ 759.346014][T28589] bond8 (unregistering): Released all slaves [ 759.476668][T28599] delete_channel: no stack [ 759.623101][T28607] netlink: 'syz.2.5774': attribute type 1 has an invalid length. [ 759.758863][T28607] bond12: entered promiscuous mode [ 759.787137][T28607] 8021q: adding VLAN 0 to HW filter on device bond12 [ 759.862595][T28614] vlan5: entered allmulticast mode [ 759.880192][T28614] bond12: entered allmulticast mode [ 760.293080][T28640] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5782'. [ 760.508043][T28651] lo speed is unknown, defaulting to 1000 [ 760.882791][T28651] lo speed is unknown, defaulting to 1000 [ 761.143344][T28676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.536567][T28683] sctp: [Deprecated]: syz.1.5796 (pid 28683) Use of int in maxseg socket option. [ 761.536567][T28683] Use struct sctp_assoc_value instead [ 761.789840][T28685] validate_nla: 2 callbacks suppressed [ 761.789857][T28685] netlink: 'syz.1.5797': attribute type 4 has an invalid length. [ 762.132148][T28716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5804'. [ 762.180296][T28708] 8021q: adding VLAN 0 to HW filter on device bond15 [ 762.209502][T28699] lo speed is unknown, defaulting to 1000 [ 762.260300][T28708] netlink: 'syz.3.5805': attribute type 11 has an invalid length. [ 762.424590][T28721] netlink: 'syz.4.5807': attribute type 4 has an invalid length. [ 762.457671][T28721] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 762.522336][T28724] netlink: 'syz.4.5807': attribute type 10 has an invalid length. [ 762.546898][T28724] netlink: 16154 bytes leftover after parsing attributes in process `syz.4.5807'. [ 762.816105][T28714] lo speed is unknown, defaulting to 1000 [ 762.822879][T28699] lo speed is unknown, defaulting to 1000 [ 763.352856][T28755] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5814'. [ 763.399357][T28741] bond1: Unable to set up delay as MII monitoring is disabled [ 763.412576][T28741] bond1 (unregistering): Released all slaves [ 763.565851][T28714] lo speed is unknown, defaulting to 1000 [ 763.753835][T28770] netlink: 'syz.3.5817': attribute type 4 has an invalid length. [ 763.791653][T28768] netlink: 'syz.3.5817': attribute type 4 has an invalid length. [ 764.150294][T28798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5822'. [ 764.194961][T28798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5822'. [ 764.241894][T28798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5822'. [ 764.475760][T28810] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5826'. [ 764.510392][T28809] netlink: 'syz.0.5825': attribute type 9 has an invalid length. [ 764.677265][T28827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5826'. [ 764.941127][T28810] sctp: [Deprecated]: syz.2.5826 (pid 28810) Use of struct sctp_assoc_value in delayed_ack socket option. [ 764.941127][T28810] Use struct sctp_sack_info instead [ 764.968825][T28832] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5830'. [ 765.047910][T28815] netlink: 'syz.2.5826': attribute type 1 has an invalid length. [ 765.063141][T28815] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5826'. [ 765.217985][T28849] netlink: 'syz.4.5835': attribute type 10 has an invalid length. [ 765.628840][T28874] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5840'. [ 765.656868][T28874] netlink: 'syz.2.5840': attribute type 1 has an invalid length. [ 766.062789][T28892] syzkaller1: entered promiscuous mode [ 766.070135][T28897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5850'. [ 766.079769][T28892] syzkaller1: entered allmulticast mode [ 766.099429][T28897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5850'. [ 766.170225][T28900] netlink: 'syz.2.5851': attribute type 1 has an invalid length. [ 766.330229][T28900] 8021q: adding VLAN 0 to HW filter on device bond13 [ 766.369346][T28905] vlan6: entered promiscuous mode [ 766.374494][T28905] bond13: entered promiscuous mode [ 766.379917][T28905] vlan6: entered allmulticast mode [ 766.387191][T28905] bond13: entered allmulticast mode [ 766.393817][T28913] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 766.419523][T28914] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 766.450192][T28914] bond13: (slave batadv1): making interface the new active one [ 766.471223][T28914] batadv1: entered promiscuous mode [ 766.484953][T28914] batadv1: entered allmulticast mode [ 766.497351][T28914] bond13: (slave batadv1): Enslaving as an active interface with an up link [ 766.541733][T28916] bridge0: entered promiscuous mode [ 766.557060][T28916] ip6gretap0: entered promiscuous mode [ 766.573775][T28916] debugfs: 'hsr1' already exists in 'hsr' [ 766.590229][T28916] Cannot create hsr debugfs directory [ 766.668238][T28937] bridge_slave_1: left allmulticast mode [ 766.686223][T28937] bridge_slave_1: left promiscuous mode [ 766.701949][T28937] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.719133][T28937] x9: left allmulticast mode [ 766.727697][T28937] x9: left promiscuous mode [ 766.739054][T28937] bridge0: port 1(1x9) entered disabled state [ 767.065950][T28955] lo speed is unknown, defaulting to 1000 [ 767.412047][ T8748] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.426721][ T8748] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 767.481942][T28955] lo speed is unknown, defaulting to 1000 [ 767.482493][ T8748] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.527289][ T8748] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 767.547380][ T8748] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.560031][ T8748] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 767.594862][ T8748] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.606858][ T8748] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 767.725867][T28978] netlink: 'syz.0.5871': attribute type 1 has an invalid length. [ 767.767058][T28979] netlink: 'syz.0.5871': attribute type 1 has an invalid length. [ 767.990052][T28986] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 768.001494][T28986] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 768.408758][T29022] netlink: 'syz.2.5881': attribute type 21 has an invalid length. [ 768.513466][T29025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 768.661347][T29033] sctp: [Deprecated]: syz.2.5885 (pid 29033) Use of struct sctp_assoc_value in delayed_ack socket option. [ 768.661347][T29033] Use struct sctp_sack_info instead [ 769.189591][T29060] __nla_validate_parse: 15 callbacks suppressed [ 769.189614][T29060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5892'. [ 769.236992][T29060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.414534][T29076] syzkaller0: entered promiscuous mode [ 769.700299][T29084] netlink: 'syz.2.5896': attribute type 1 has an invalid length. [ 769.734631][T29084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5896'. [ 769.934454][T29088] veth0_macvtap: left promiscuous mode [ 770.007174][T29091] syzkaller1: entered promiscuous mode [ 770.020607][T29091] syzkaller1: entered allmulticast mode [ 770.199383][T29103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 770.378249][T29116] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5906'. [ 770.390704][T29116] netlink: 'syz.4.5906': attribute type 9 has an invalid length. [ 770.485190][T29119] netlink: 'syz.1.5905': attribute type 1 has an invalid length. [ 770.532244][T29119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 770.898621][T29151] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 771.323808][T29173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5916'. [ 771.428699][T29173] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 771.443589][T29180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5918'. [ 771.788867][T29195] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5922'. [ 771.808623][T29201] netlink: 'syz.3.5924': attribute type 1 has an invalid length. [ 772.166539][T29227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5932'. [ 772.302354][T29230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5933'. [ 772.529657][T29243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5937'. [ 772.797618][T29249] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 773.106197][T29260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5944'. [ 773.180708][T29260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.653696][T29290] netlink: 'syz.3.5952': attribute type 11 has an invalid length. [ 773.689107][T29290] netlink: 'syz.3.5952': attribute type 23 has an invalid length. [ 774.195807][T29332] lo speed is unknown, defaulting to 1000 [ 774.236295][T29338] __nla_validate_parse: 4 callbacks suppressed [ 774.236315][T29338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5964'. [ 774.283221][T29338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5964'. [ 774.305430][T29338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5964'. [ 774.331280][T29338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5964'. [ 774.516876][T29355] netlink: 'syz.4.5969': attribute type 15 has an invalid length. [ 774.530479][T29356] batadv_slave_0: left promiscuous mode [ 774.537735][T29355] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5969'. [ 774.548224][T29356] batadv_slave_0: left allmulticast mode [ 774.559299][T29356] geneve2: left promiscuous mode [ 774.566045][T29356] macsec1: left promiscuous mode [ 774.571124][T29356] macsec1: left allmulticast mode [ 774.578667][T29356] geneve3: left promiscuous mode [ 774.583924][T29356] bond4: left allmulticast mode [ 774.593032][T29358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5970'. [ 774.606373][T29356] vlan4: left allmulticast mode [ 774.611285][T29356] bond0: left allmulticast mode [ 774.616707][T29358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5970'. [ 774.634893][T29356] bond12: left promiscuous mode [ 774.645887][T29356] vlan5: left allmulticast mode [ 774.650933][T29356] bond12: left allmulticast mode [ 774.671287][T29356] vlan6: left promiscuous mode [ 774.678938][T29356] bond13: left promiscuous mode [ 774.686739][T29360] netlink: 'syz.0.5970': attribute type 1 has an invalid length. [ 774.694609][T29356] batadv1: left promiscuous mode [ 774.700553][T29356] vlan6: left allmulticast mode [ 774.706746][T29356] bond13: left allmulticast mode [ 774.711738][T29356] batadv1: left allmulticast mode [ 774.787318][T29332] lo speed is unknown, defaulting to 1000 [ 774.850986][T29360] 8021q: adding VLAN 0 to HW filter on device bond2 [ 774.884008][T29361] bond2: (slave veth5): Enslaving as an active interface with an up link [ 774.945494][T29360] netlink: 'syz.0.5970': attribute type 1 has an invalid length. [ 774.970621][T29377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5974'. [ 775.035823][T29360] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 775.046700][T29360] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 775.254012][T29389] syzkaller1: left promiscuous mode [ 775.273539][T29389] syzkaller1: left allmulticast mode [ 775.325736][T29394] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5978'. [ 775.359704][T29398] netlink: 'syz.0.5979': attribute type 1 has an invalid length. [ 775.941183][T29431] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 775.987190][T28602] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 776.134011][T29451] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5989'. [ 776.171950][T29451] sch_tbf: burst 88 is lower than device veth19 mtu (1514) ! [ 776.293850][T29455] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 776.386000][T29463] bridge0: entered promiscuous mode [ 776.547885][T29469] lo speed is unknown, defaulting to 1000 [ 776.793812][T29469] lo speed is unknown, defaulting to 1000 [ 776.793833][T29461] lo speed is unknown, defaulting to 1000 [ 776.809347][T29481] netlink: 'syz.1.6000': attribute type 1 has an invalid length. [ 777.092238][T29461] lo speed is unknown, defaulting to 1000 [ 777.585169][T29499] lo speed is unknown, defaulting to 1000 [ 777.876109][T29499] lo speed is unknown, defaulting to 1000 [ 778.864503][T29430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 778.878389][T29492] netlink: 'syz.0.6003': attribute type 4 has an invalid length. [ 778.901811][T29508] netlink: 'syz.3.6007': attribute type 1 has an invalid length. [ 779.140386][T29524] netlink: 'syz.4.6010': attribute type 3 has an invalid length. [ 779.205770][T29522] vlan0: entered promiscuous mode [ 779.352583][T29521] lo speed is unknown, defaulting to 1000 [ 779.433957][T29535] : entered promiscuous mode [ 779.456681][T29533] FAULT_INJECTION: forcing a failure. [ 779.456681][T29533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.493532][T29533] CPU: 1 UID: 0 PID: 29533 Comm: syz.1.6013 Not tainted syzkaller #0 PREEMPT(full) [ 779.493558][T29533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 779.493571][T29533] Call Trace: [ 779.493587][T29533] [ 779.493595][T29533] dump_stack_lvl+0xe8/0x150 [ 779.493628][T29533] should_fail_ex+0x412/0x560 [ 779.493661][T29533] _copy_from_user+0x2d/0xb0 [ 779.493683][T29533] ___sys_sendmsg+0x1c6/0x360 [ 779.493712][T29533] ? __lock_acquire+0x6b5/0x2cf0 [ 779.493743][T29533] ? __pfx____sys_sendmsg+0x10/0x10 [ 779.493809][T29533] ? __fget_files+0x2a/0x420 [ 779.493833][T29533] ? __fget_files+0x3a0/0x420 [ 779.493868][T29533] __x64_sys_sendmsg+0x1bd/0x2a0 [ 779.493900][T29533] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 779.493939][T29533] ? __pfx_ksys_write+0x10/0x10 [ 779.493976][T29533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.493996][T29533] do_syscall_64+0x15f/0xf80 [ 779.494021][T29533] ? clear_bhb_loop+0x40/0x90 [ 779.494045][T29533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.494064][T29533] RIP: 0033:0x7fcab1f9c819 [ 779.494082][T29533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.494098][T29533] RSP: 002b:00007fcab2ed1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 779.494120][T29533] RAX: ffffffffffffffda RBX: 00007fcab2215fa0 RCX: 00007fcab1f9c819 [ 779.494134][T29533] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000015 [ 779.494147][T29533] RBP: 00007fcab2ed1090 R08: 0000000000000000 R09: 0000000000000000 [ 779.494158][T29533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 779.494170][T29533] R13: 00007fcab2216038 R14: 00007fcab2215fa0 R15: 00007fff87de2e98 [ 779.494200][T29533] [ 780.038600][T29555] netlink: 'syz.1.6019': attribute type 1 has an invalid length. [ 780.072126][T29553] dvmrp6: entered allmulticast mode [ 780.203734][T29556] bond9: entered promiscuous mode [ 780.221141][T29556] bond9: entered allmulticast mode [ 780.244953][T29556] 8021q: adding VLAN 0 to HW filter on device bond9 [ 780.297304][T29559] bridge5: entered promiscuous mode [ 780.303510][T29559] bridge5: entered allmulticast mode [ 780.305753][ T8746] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 780.320724][T29559] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 780.330927][T29524] lo speed is unknown, defaulting to 1000 [ 780.331417][T29521] lo speed is unknown, defaulting to 1000 [ 780.457135][ T8737] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 780.546506][T29571] __nla_validate_parse: 6 callbacks suppressed [ 780.546526][T29571] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6023'. [ 780.836191][T29573] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6024'. [ 781.038851][T29583] FAULT_INJECTION: forcing a failure. [ 781.038851][T29583] name failslab, interval 1, probability 0, space 0, times 0 [ 781.052302][T29583] CPU: 0 UID: 0 PID: 29583 Comm: syz.3.6028 Not tainted syzkaller #0 PREEMPT(full) [ 781.052332][T29583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 781.052347][T29583] Call Trace: [ 781.052357][T29583] [ 781.052367][T29583] dump_stack_lvl+0xe8/0x150 [ 781.052407][T29583] should_fail_ex+0x412/0x560 [ 781.052445][T29583] should_failslab+0xa8/0x100 [ 781.052490][T29583] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 781.052518][T29583] ? __alloc_skb+0x186/0x7d0 [ 781.052544][T29583] ? __alloc_skb+0x1d0/0x7d0 [ 781.052567][T29583] ? __local_bh_enable_ip+0xd0/0x130 [ 781.052597][T29583] __alloc_skb+0x1d0/0x7d0 [ 781.052628][T29583] netlink_sendmsg+0x5d4/0xb40 [ 781.052664][T29583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 781.052695][T29583] ? aa_sock_msg_perm+0xf1/0x1b0 [ 781.052723][T29583] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 781.052755][T29583] ____sys_sendmsg+0x972/0x9f0 [ 781.052783][T29583] ? __might_fault+0xaf/0x130 [ 781.052814][T29583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 781.052851][T29583] ? import_iovec+0x73/0xa0 [ 781.052874][T29583] ___sys_sendmsg+0x2a5/0x360 [ 781.052901][T29583] ? __lock_acquire+0x6b5/0x2cf0 [ 781.052930][T29583] ? __pfx____sys_sendmsg+0x10/0x10 [ 781.052995][T29583] ? __fget_files+0x2a/0x420 [ 781.053018][T29583] ? __fget_files+0x3a0/0x420 [ 781.053051][T29583] __x64_sys_sendmsg+0x1bd/0x2a0 [ 781.053082][T29583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 781.053124][T29583] ? __pfx_ksys_write+0x10/0x10 [ 781.053179][T29583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.053203][T29583] do_syscall_64+0x15f/0xf80 [ 781.053232][T29583] ? clear_bhb_loop+0x40/0x90 [ 781.053260][T29583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.053282][T29583] RIP: 0033:0x7f9c2159c819 [ 781.053303][T29583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.053322][T29583] RSP: 002b:00007f9c224e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 781.053347][T29583] RAX: ffffffffffffffda RBX: 00007f9c21815fa0 RCX: 00007f9c2159c819 [ 781.053364][T29583] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000015 [ 781.053378][T29583] RBP: 00007f9c224e2090 R08: 0000000000000000 R09: 0000000000000000 [ 781.053393][T29583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.053406][T29583] R13: 00007f9c21816038 R14: 00007f9c21815fa0 R15: 00007ffce545dd38 [ 781.053443][T29583] [ 781.295027][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 781.312201][T29524] lo speed is unknown, defaulting to 1000 [ 781.355899][T29585] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6029'. [ 781.617293][T29597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6033'. [ 781.819044][T29608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 781.851443][T29608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 781.886335][T29597] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6033'. [ 781.912979][T29600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6033'. [ 781.946118][T29600] netlink: 'syz.3.6033': attribute type 30 has an invalid length. [ 782.098171][T28601] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.106684][T28601] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.115419][T29600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6033'. [ 782.149819][T28601] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.171435][T29600] netlink: 'syz.3.6033': attribute type 30 has an invalid length. [ 782.182095][T28601] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.446810][T29622] FAULT_INJECTION: forcing a failure. [ 782.446810][T29622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.492760][T29622] CPU: 1 UID: 0 PID: 29622 Comm: syz.1.6041 Not tainted syzkaller #0 PREEMPT(full) [ 782.492788][T29622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 782.492801][T29622] Call Trace: [ 782.492809][T29622] [ 782.492819][T29622] dump_stack_lvl+0xe8/0x150 [ 782.492854][T29622] should_fail_ex+0x412/0x560 [ 782.492887][T29622] _copy_from_iter+0x1d3/0x1670 [ 782.492921][T29622] ? rcu_is_watching+0x15/0xb0 [ 782.492955][T29622] ? __pfx__copy_from_iter+0x10/0x10 [ 782.492993][T29622] ? netlink_sendmsg+0x650/0xb40 [ 782.493021][T29622] ? skb_put+0x11b/0x210 [ 782.493051][T29622] netlink_sendmsg+0x6c0/0xb40 [ 782.493088][T29622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 782.493121][T29622] ? aa_sock_msg_perm+0xf1/0x1b0 [ 782.493150][T29622] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 782.493184][T29622] ____sys_sendmsg+0x972/0x9f0 [ 782.493213][T29622] ? __might_fault+0xaf/0x130 [ 782.493246][T29622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 782.493286][T29622] ? import_iovec+0x73/0xa0 [ 782.493310][T29622] ___sys_sendmsg+0x2a5/0x360 [ 782.493339][T29622] ? __lock_acquire+0x6b5/0x2cf0 [ 782.493370][T29622] ? __pfx____sys_sendmsg+0x10/0x10 [ 782.493436][T29622] ? __fget_files+0x2a/0x420 [ 782.493461][T29622] ? __fget_files+0x3a0/0x420 [ 782.493497][T29622] __x64_sys_sendmsg+0x1bd/0x2a0 [ 782.493531][T29622] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 782.493573][T29622] ? __pfx_ksys_write+0x10/0x10 [ 782.493618][T29622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.493641][T29622] do_syscall_64+0x15f/0xf80 [ 782.493665][T29622] ? trace_irq_disable+0x3b/0x140 [ 782.493687][T29622] ? clear_bhb_loop+0x40/0x90 [ 782.493712][T29622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.493732][T29622] RIP: 0033:0x7fcab1f9c819 [ 782.493752][T29622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.493769][T29622] RSP: 002b:00007fcab2ed1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 782.493791][T29622] RAX: ffffffffffffffda RBX: 00007fcab2215fa0 RCX: 00007fcab1f9c819 [ 782.493806][T29622] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000015 [ 782.493819][T29622] RBP: 00007fcab2ed1090 R08: 0000000000000000 R09: 0000000000000000 [ 782.493832][T29622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.493845][T29622] R13: 00007fcab2216038 R14: 00007fcab2215fa0 R15: 00007fff87de2e98 [ 782.493878][T29622] [ 782.816181][T21912] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 782.829653][T21912] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 782.838899][T21912] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 782.848969][T21912] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 782.859217][T21912] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 783.155803][T29637] bond10: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 783.168769][T29637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6044'. [ 783.263089][T29647] netlink: 'syz.1.6048': attribute type 8 has an invalid length. [ 783.325944][T29626] lo speed is unknown, defaulting to 1000 [ 783.362526][T29647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6048'. [ 783.388252][T29645] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6047'. [ 783.423482][T29659] netlink: 'syz.4.6050': attribute type 1 has an invalid length. [ 783.685596][T29668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 783.856400][T29626] lo speed is unknown, defaulting to 1000 [ 783.890330][T29670] xt_hashlimit: size too large, truncated to 1048576 [ 783.933570][T29674] FAULT_INJECTION: forcing a failure. [ 783.933570][T29674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.958915][T29674] CPU: 0 UID: 0 PID: 29674 Comm: syz.1.6053 Not tainted syzkaller #0 PREEMPT(full) [ 783.958946][T29674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 783.958962][T29674] Call Trace: [ 783.958973][T29674] [ 783.958985][T29674] dump_stack_lvl+0xe8/0x150 [ 783.959026][T29674] should_fail_ex+0x412/0x560 [ 783.959066][T29674] _copy_from_iter+0x1d3/0x1670 [ 783.959106][T29674] ? rcu_is_watching+0x15/0xb0 [ 783.959147][T29674] ? __pfx__copy_from_iter+0x10/0x10 [ 783.959205][T29674] ? netlink_sendmsg+0x650/0xb40 [ 783.959270][T29674] ? skb_put+0x11b/0x210 [ 783.959302][T29674] netlink_sendmsg+0x6c0/0xb40 [ 783.959338][T29674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 783.959370][T29674] ? aa_sock_msg_perm+0xf1/0x1b0 [ 783.959398][T29674] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 783.959430][T29674] ____sys_sendmsg+0x972/0x9f0 [ 783.959458][T29674] ? __might_fault+0xaf/0x130 [ 783.959576][T29674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 783.959619][T29674] ? import_iovec+0x73/0xa0 [ 783.959644][T29674] ___sys_sendmsg+0x2a5/0x360 [ 783.959674][T29674] ? __lock_acquire+0x6b5/0x2cf0 [ 783.959705][T29674] ? __pfx____sys_sendmsg+0x10/0x10 [ 783.959770][T29674] ? __fget_files+0x2a/0x420 [ 783.959794][T29674] ? __fget_files+0x3a0/0x420 [ 783.959829][T29674] __x64_sys_sendmsg+0x1bd/0x2a0 [ 783.959861][T29674] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 783.959899][T29674] ? __pfx_ksys_write+0x10/0x10 [ 783.959935][T29674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.959957][T29674] do_syscall_64+0x15f/0xf80 [ 783.959981][T29674] ? trace_irq_disable+0x3b/0x140 [ 783.960003][T29674] ? clear_bhb_loop+0x40/0x90 [ 783.960027][T29674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.960047][T29674] RIP: 0033:0x7fcab1f9c819 [ 783.960064][T29674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.960081][T29674] RSP: 002b:00007fcab2ed1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 783.960103][T29674] RAX: ffffffffffffffda RBX: 00007fcab2215fa0 RCX: 00007fcab1f9c819 [ 783.960118][T29674] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000015 [ 783.960130][T29674] RBP: 00007fcab2ed1090 R08: 0000000000000000 R09: 0000000000000000 [ 783.960143][T29674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.960156][T29674] R13: 00007fcab2216038 R14: 00007fcab2215fa0 R15: 00007fff87de2e98 [ 783.960188][T29674] [ 784.670092][T29702] lo speed is unknown, defaulting to 1000 [ 784.819770][T29723] ksmbd: Unknown IPC event: 1, ignore. [ 784.914910][T21912] Bluetooth: hci5: command tx timeout [ 785.480070][ T8746] dvmrp6: left allmulticast mode [ 785.693440][ T8746] batman_adv: batadv0: Removing interface: vlan2 [ 785.738616][ T8746] bond3 (unregistering): (slave gretap1): Releasing active interface [ 785.764397][T29739] __nla_validate_parse: 3 callbacks suppressed [ 785.764416][T29739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6064'. [ 785.916706][ T8746] bond10 (unregistering): (slave gretap5): Releasing active interface [ 786.001599][ T8746] bond2 (unregistering): (slave bridge1): Releasing active interface [ 786.059576][ T8746] bond6 (unregistering): (slave bridge3): Releasing active interface [ 786.361012][ T8746] bond1 (unregistering): Released all slaves [ 786.375472][ T8746] bond2 (unregistering): Released all slaves [ 786.392440][ T8746] bond3 (unregistering): Released all slaves [ 786.409175][ T8746] bond4 (unregistering): (slave veth3): Releasing active interface [ 786.420035][ T8746] bond4 (unregistering): (slave veth5): Releasing active interface [ 786.429431][ T8746] bond4 (unregistering): Released all slaves [ 786.446340][ T8746] bond5 (unregistering): Released all slaves [ 786.462698][ T8746] bond6 (unregistering): Released all slaves [ 786.481180][ T8746] bond0 (unregistering): Released all slaves [ 786.505156][ T8746] bond7 (unregistering): Released all slaves [ 786.520537][ T8746] bond8 (unregistering): Released all slaves [ 786.536822][ T8746] bond9 (unregistering): (slave veth21): Releasing active interface [ 786.546106][ T8746] bond9 (unregistering): Released all slaves [ 786.562831][ T8746] bond10 (unregistering): Released all slaves [ 786.580241][ T8746] bond11 (unregistering): Released all slaves [ 786.599752][ T8746] bond12 (unregistering): Released all slaves [ 786.619389][ T8746] bond13 (unregistering): (slave batadv1): Releasing active interface [ 786.629316][ T8746] bond13 (unregistering): Released all slaves [ 786.661404][T29702] lo speed is unknown, defaulting to 1000 [ 786.888695][T29626] chnl_net:caif_netlink_parms(): no params data found [ 786.998112][T21912] Bluetooth: hci5: command tx timeout [ 787.040647][ T8746] tipc: Disabling bearer [ 787.052312][ T8746] tipc: Disabling bearer [ 787.067457][ T8746] tipc: Left network mode [ 787.305013][T29776] sch_tbf: peakrate 11 is lower than or equals to rate 996173156578218475 ! [ 787.528727][T29792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6072'. [ 787.607527][T29784] syzkaller0: entered promiscuous mode [ 787.613135][T29784] syzkaller0: entered allmulticast mode [ 787.653400][T29794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6072'. [ 787.668836][T29626] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.687850][T29626] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.702743][T29626] bridge_slave_0: entered allmulticast mode [ 787.713177][T29626] bridge_slave_0: entered promiscuous mode [ 787.723091][T29626] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.732165][T29626] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.740250][T29626] bridge_slave_1: entered allmulticast mode [ 787.749154][T29626] bridge_slave_1: entered promiscuous mode [ 787.843519][T29794] veth9: entered promiscuous mode [ 787.947586][T29626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.009620][T29626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.254208][T29833] Cannot find add_set index 0 as target [ 788.407381][T29847] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6082'. [ 788.809162][T29862] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6085'. [ 789.079491][T21912] Bluetooth: hci5: command tx timeout [ 790.515199][ T5487] 8021q: adding VLAN 0 to HW filter on device eth1 [ 790.602324][T29626] team0: Port device team_slave_0 added [ 790.644235][T29626] team0: Port device team_slave_1 added [ 790.723378][T29871] netlink: 'syz.1.6090': attribute type 1 has an invalid length. [ 790.749011][T29871] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6090'. [ 790.770098][T29871] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6090'. [ 790.786613][T29878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6089'. [ 790.790018][T29871] netlink: 'syz.1.6090': attribute type 1 has an invalid length. [ 790.803637][T29871] netlink: 634 bytes leftover after parsing attributes in process `syz.1.6090'. [ 790.816139][T29626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.834811][T29626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.862823][T29881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6090'. [ 790.869383][T29882] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6092'. [ 790.873024][T29626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.897379][T29880] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6092'. [ 790.912663][T29626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.921149][T29626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.949798][T29626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.028407][T29887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 791.115267][T29891] x_tables: duplicate underflow at hook 1 [ 791.155323][T21912] Bluetooth: hci5: command tx timeout [ 791.242463][T29894] bridge_slave_1: left allmulticast mode [ 791.249428][T29894] bridge_slave_1: left promiscuous mode [ 791.256637][T29894] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.269364][T29894] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 791.300226][T29626] hsr_slave_0: entered promiscuous mode [ 791.307755][T29626] hsr_slave_1: entered promiscuous mode [ 791.314083][T29626] debugfs: 'hsr0' already exists in 'hsr' [ 791.321075][T29626] Cannot create hsr debugfs directory [ 791.362334][T29901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6096'. [ 791.453434][T29897] bond8: (slave bond_slave_1): Device is not our slave [ 791.461388][T29897] bond8: option active_slave: invalid value (bond_slave_1) [ 791.471210][T29897] bond8 (unregistering): Released all slaves [ 791.677034][ T8746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.692204][ T8746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 792.002803][T29928] netlink: 'syz.0.6097': attribute type 1 has an invalid length. [ 792.056930][T29928] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6097'. [ 792.477701][ T8746] team0 (unregistering): Port device team_slave_1 removed [ 792.525792][ T8746] team0 (unregistering): Port device C removed [ 792.711516][T29943] tipc: Enabling of bearer rejected, already enabled [ 792.720800][ T5487] 8021q: adding VLAN 0 to HW filter on device eth2 [ 792.978374][T29952] openvswitch: netlink: Flow key attribute not present in set flow. [ 793.003332][T29956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6102'. [ 793.052837][T29956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6102'. [ 793.393907][T29970] tipc: Enabling of bearer rejected, failed to enable media [ 793.497787][T29981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.505983][T29982] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 793.530603][T29980] syzkaller0: entered promiscuous mode [ 793.598637][T29987] netlink: 'syz.3.6109': attribute type 1 has an invalid length. [ 793.652095][T29980] syzkaller0: entered allmulticast mode [ 793.985521][T30022] netlink: 'syz.1.6113': attribute type 30 has an invalid length. [ 794.230391][T29987] 8021q: adding VLAN 0 to HW filter on device bond18 [ 794.273481][T29990] bond18: (slave veth9): Enslaving as an active interface with a down link [ 794.355796][T29980] bond18: (slave veth11): Enslaving as an active interface with a down link [ 794.377986][T30018] bond18: entered allmulticast mode [ 794.707100][T30047] pimreg9: entered allmulticast mode [ 794.932177][T30057] : renamed from bond_slave_0 [ 794.946971][T30057] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 794.961080][T30057] pim6reg0: persist disabled [ 795.172892][T29626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 795.212551][T29626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 795.241973][T29626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 795.292598][T29626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 795.330212][T29626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 795.369447][T29626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 795.388043][T29626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 795.399673][T29626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 795.842754][T30125] sctp: [Deprecated]: syz.1.6133 (pid 30125) Use of struct sctp_assoc_value in delayed_ack socket option. [ 795.842754][T30125] Use struct sctp_sack_info instead [ 795.884600][T29626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.907060][T30117] lo speed is unknown, defaulting to 1000 [ 795.932979][T29626] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.960400][T30016] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.967602][T30016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.039076][T16614] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.046336][T16614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.327545][T30137] __nla_validate_parse: 8 callbacks suppressed [ 796.327566][T30137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6136'. [ 796.397567][T30137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6136'. [ 796.523331][T30133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6135'. [ 796.537185][T30139] lo speed is unknown, defaulting to 1000 [ 796.543149][T30117] lo speed is unknown, defaulting to 1000 [ 796.902514][T29626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.060716][T29626] veth0_vlan: entered promiscuous mode [ 797.107724][T29626] veth1_vlan: entered promiscuous mode [ 797.239855][T29626] veth0_macvtap: entered promiscuous mode [ 797.274417][T29626] veth1_macvtap: entered promiscuous mode [ 797.354329][T29626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.442689][T29626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 797.572338][T30139] lo speed is unknown, defaulting to 1000 [ 797.611349][T30193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.663568][T30193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.803263][T30193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.840472][T30193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.866423][T30197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6142'. [ 798.385623][ T8748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.408531][ T8748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.523048][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.557477][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.641636][T30219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 798.732981][T30225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6145'. [ 799.256462][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 799.282735][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 799.291492][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 799.304865][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 799.312623][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 799.357987][T30237] lo speed is unknown, defaulting to 1000 [ 799.533100][T30242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6149'. [ 799.589815][T30242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6149'. [ 799.931322][T30237] lo speed is unknown, defaulting to 1000 [ 800.047859][T30255] No such timeout policy "syz1" [ 800.096493][T30257] netlink: 200 bytes leftover after parsing attributes in process `syz.1.6156'. [ 800.393750][T30279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6160'. [ 800.442214][T30279] team1: entered promiscuous mode [ 800.448287][T30279] team1: entered allmulticast mode [ 800.453833][T30279] 8021q: adding VLAN 0 to HW filter on device team1 [ 800.564605][T30237] chnl_net:caif_netlink_parms(): no params data found [ 800.698040][T30296] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6165'. [ 800.825834][T30303] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 800.869200][T30237] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.869239][T30305] sock: sock_timestamping_bind_phc: sock not bind to device [ 800.878223][T30237] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.892845][T30237] bridge_slave_0: entered allmulticast mode [ 800.903318][T30237] bridge_slave_0: entered promiscuous mode [ 800.912620][T30237] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.927562][T30237] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.935126][T30237] bridge_slave_1: entered allmulticast mode [ 800.942878][T30237] bridge_slave_1: entered promiscuous mode [ 800.983483][T30237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.996553][T30237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.096713][T30237] team0: Port device team_slave_0 added [ 801.114909][T30237] team0: Port device team_slave_1 added [ 801.194868][T30237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.201997][T30237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.229741][T30237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.249454][T30237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.266463][T30237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.306795][T30237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.397962][ T5839] Bluetooth: hci3: command tx timeout [ 801.486244][T30237] hsr_slave_0: entered promiscuous mode [ 801.502669][T30325] __nla_validate_parse: 1 callbacks suppressed [ 801.502686][T30325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6177'. [ 801.519001][T30237] hsr_slave_1: entered promiscuous mode [ 801.550705][T30237] debugfs: 'hsr0' already exists in 'hsr' [ 801.567612][T30237] Cannot create hsr debugfs directory [ 801.773137][T30342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6181'. [ 801.782683][T30344] netlink: 'syz.1.6182': attribute type 1 has an invalid length. [ 801.791558][T30344] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6182'. [ 801.950159][T30237] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.131788][T30237] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.207240][T30358] syzkaller0: entered promiscuous mode [ 802.212902][T30358] syzkaller0: entered allmulticast mode [ 802.313964][T30237] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.429535][T30237] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.473856][T30378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6189'. [ 802.492031][T30378] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6189'. [ 802.503702][T30378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6189'. [ 802.630788][T30380] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6192'. [ 802.680847][T30380] netlink: 'syz.1.6192': attribute type 1 has an invalid length. [ 802.700608][T30380] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6192'. [ 802.710891][T30387] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6193'. [ 802.721067][T30387] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6193'. [ 802.975766][T30398] netlink: 'syz.2.6195': attribute type 30 has an invalid length. [ 802.991530][T30237] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 803.008286][T30398] netlink: 'syz.2.6195': attribute type 29 has an invalid length. [ 803.022085][T30237] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 803.057550][T30406] netlink: 'syz.3.6198': attribute type 10 has an invalid length. [ 803.093613][T30237] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 803.121774][T30411] netlink: 'syz.3.6198': attribute type 10 has an invalid length. [ 803.128953][T30237] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 803.478660][ T5839] Bluetooth: hci3: command tx timeout [ 805.236391][T30237] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 805.246406][T30237] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 805.254123][T30237] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 805.265468][T30237] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 805.278036][T30422] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 3, id = 0 [ 805.555023][T21912] Bluetooth: hci3: command tx timeout [ 805.662501][T30237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.801039][T30237] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.823697][T16614] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.831033][T16614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.864155][T16614] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.871376][T16614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.001106][T30455] netlink: 'syz.0.6209': attribute type 1 has an invalid length. [ 806.028330][T30455] netlink: 'syz.0.6209': attribute type 1 has an invalid length. [ 806.048464][T30456] netlink: 'syz.0.6209': attribute type 1 has an invalid length. [ 806.058038][T30456] netlink: 'syz.0.6209': attribute type 1 has an invalid length. [ 806.243227][T30237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.350869][T30478] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20003 [ 806.378053][T30478] IPVS: Error connecting to the multicast addr [ 806.753572][T30495] __nla_validate_parse: 6 callbacks suppressed [ 806.775913][T30495] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6215'. [ 806.789716][T30497] lo speed is unknown, defaulting to 1000 [ 806.790059][T30237] veth0_vlan: entered promiscuous mode [ 806.837855][T30237] veth1_vlan: entered promiscuous mode [ 806.871975][T30504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6219'. [ 806.911788][T30237] veth0_macvtap: entered promiscuous mode [ 806.934486][T30237] veth1_macvtap: entered promiscuous mode [ 807.010155][T30237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.039075][T30237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.069931][ T8748] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.102448][ T8748] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.136519][ T8748] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.176450][ T8744] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.495756][T30497] lo speed is unknown, defaulting to 1000 [ 807.527810][T30193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.553303][T30193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.635218][T21912] Bluetooth: hci3: command tx timeout [ 807.760546][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.773159][T13224] lec:lec_start_xmit: lec0:No lecd attached [ 807.779352][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.791957][T30531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6227'. [ 807.936387][T30538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6148'. [ 808.176654][T30540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 808.219599][T30540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 808.432641][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 808.448076][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 808.456221][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 808.470259][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 808.478937][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 808.516724][T30554] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6234'. [ 808.539948][T30555] lo speed is unknown, defaulting to 1000 [ 808.599961][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.829273][T30555] lo speed is unknown, defaulting to 1000 [ 808.906991][ T48] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.037442][ T48] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.102663][T30573] 8021q: VLANs not supported on nlmon0 [ 809.221947][ T48] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.411264][ T48] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.585786][T30555] chnl_net:caif_netlink_parms(): no params data found [ 809.940028][T30614] netlink: 'syz.2.6249': attribute type 2 has an invalid length. [ 810.150335][T30555] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.166849][T30555] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.199822][T30555] bridge_slave_0: entered allmulticast mode [ 810.222585][T30555] bridge_slave_0: entered promiscuous mode [ 810.312102][T30555] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.329802][T30555] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.349323][T30555] bridge_slave_1: entered allmulticast mode [ 810.366851][T30555] bridge_slave_1: entered promiscuous mode [ 810.522369][ T5839] Bluetooth: hci4: command tx timeout [ 810.539407][T30555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.570789][T30555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.627523][T30555] team0: Port device team_slave_0 added [ 810.643852][T30555] team0: Port device team_slave_1 added [ 810.750887][ T48] hsr0: left allmulticast mode [ 810.766665][ T48] hsr_slave_0: left allmulticast mode [ 810.779315][ T48] hsr_slave_1: left allmulticast mode [ 810.794952][ T48] bridge0: port 1(hsr0) entered disabled state [ 810.868319][ T48] dvmrp1: left allmulticast mode [ 810.890605][ T48] dvmrp6: left allmulticast mode [ 811.127118][ T48] ip6gretap0 (unregistering): left promiscuous mode [ 811.203275][ T48] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 811.233369][T30617] lec:lec_atm_close: lec0: Shut down! [ 811.584235][T30659] netlink: 'syz.2.6257': attribute type 1 has an invalid length. [ 811.708361][T30663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6257'. [ 811.861246][ T48] bond14 (unregistering): (slave gretap2): Releasing active interface [ 811.954151][ T48] bond10 (unregistering): (slave geneve3): Releasing active interface [ 811.999571][ T48] bridge0 (unregistering): left promiscuous mode [ 812.050710][ T48] bond12 (unregistering): (slave bridge1): Releasing active interface [ 812.137004][ T48] bond0 (unregistering): (slave 45): Releasing backup interface [ 812.148370][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 812.158129][ T48] bond0 (unregistering): Released all slaves [ 812.171419][ T48] bond1 (unregistering): Released all slaves [ 812.188934][ T48] bond2 (unregistering): Released all slaves [ 812.205929][ T48] bond3 (unregistering): (slave veth3): Releasing active interface [ 812.217380][ T48] bond3 (unregistering): Released all slaves [ 812.237385][ T48] bond4 (unregistering): Released all slaves [ 812.253174][ T48] bond5 (unregistering): Released all slaves [ 812.269084][ T48] bond6 (unregistering): (slave lo): Releasing backup interface [ 812.287797][ T48] bond6 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 812.299802][ T48] bond6 (unregistering): Released all slaves [ 812.320423][ T48] team0: Port device bond7 removed [ 812.328806][ T48] bond7 (unregistering): Released all slaves [ 812.347973][ T48] bond8 (unregistering): Released all slaves [ 812.366822][ T48] bond9 (unregistering): Released all slaves [ 812.393567][ T48] bond10 (unregistering): Released all slaves [ 812.409861][ T48] bond11 (unregistering): Released all slaves [ 812.424702][ T48] bond12 (unregistering): Released all slaves [ 812.442578][ T48] bond13 (unregistering): Released all slaves [ 812.475602][ T48] bond14 (unregistering): Released all slaves [ 812.491194][ T48] bond15 (unregistering): Released all slaves [ 812.507824][ T48] bond16 (unregistering): Released all slaves [ 812.531494][ T48] bond17 (unregistering): Released all slaves [ 812.547478][ T48] bond18 (unregistering): (slave veth9): Releasing active interface [ 812.560696][ T48] bond18 (unregistering): (slave veth11): Releasing active interface [ 812.572744][ T48] bond18 (unregistering): Released all slaves [ 812.592648][ T48] bond19 (unregistering): Released all slaves [ 812.596360][ T5839] Bluetooth: hci4: command tx timeout [ 812.623765][T30555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.631175][T30555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.659608][T30555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.721911][T30659] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 812.776382][T30661] erspan1: entered allmulticast mode [ 812.856542][T30555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.878162][T30555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.924338][T30555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.025906][ T48] tipc: Left network mode [ 813.168121][T30555] hsr_slave_0: entered promiscuous mode [ 813.175034][T30555] hsr_slave_1: entered promiscuous mode [ 813.182145][T30555] debugfs: 'hsr0' already exists in 'hsr' [ 813.193928][T30555] Cannot create hsr debugfs directory [ 813.678584][T30712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6267'. [ 813.867308][T11694] IPVS: starting estimator thread 0... [ 813.975727][T30719] IPVS: using max 29 ests per chain, 69600 per kthread [ 814.090370][T30730] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6269'. [ 814.145462][T30730] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6269'. [ 814.414248][T30725] lo speed is unknown, defaulting to 1000 [ 814.679163][ T5839] Bluetooth: hci4: command tx timeout [ 815.086245][T30756] syzkaller1: entered promiscuous mode [ 815.104837][T30756] syzkaller1: entered allmulticast mode [ 815.237707][T30725] lo speed is unknown, defaulting to 1000 [ 815.592513][T30782] netlink: 'syz.2.6281': attribute type 9 has an invalid length. [ 815.660782][ T48] hsr_slave_0: left promiscuous mode [ 815.674284][ T48] hsr_slave_1: left promiscuous mode [ 815.681366][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.897659][ T48] team0 (unregistering): Port device team_slave_1 removed [ 815.927254][ T48] team0 (unregistering): Port device team_slave_0 removed [ 816.364177][T30555] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 816.413548][T30555] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 816.548477][T30555] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 816.669513][T30555] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 816.755806][ T5839] Bluetooth: hci4: command tx timeout [ 816.801559][T30555] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 816.834825][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5610 ms [ 816.842908][ C0] lec:lec_tx_timeout: lec0 [ 816.847952][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 816.854036][T30811] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6283'. [ 816.906604][T30555] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 816.997638][T30833] batadv0: entered promiscuous mode [ 817.032727][T30833] vlan0: entered promiscuous mode [ 817.065557][T30555] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 817.081466][T30555] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 817.360587][T30850] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6288'. [ 817.380623][T30851] netlink: 'syz.1.6287': attribute type 1 has an invalid length. [ 817.439259][T30851] bond12: entered promiscuous mode [ 817.445133][T30851] 8021q: adding VLAN 0 to HW filter on device bond12 [ 817.465978][T30555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.479732][T30851] ipvlan2: entered allmulticast mode [ 817.485311][T30851] bond12: entered allmulticast mode [ 817.508062][T30851] bond12: (slave bridge6): making interface the new active one [ 817.515940][T30851] bridge6: entered promiscuous mode [ 817.521354][T30851] bridge6: entered allmulticast mode [ 817.528696][T30851] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 817.548553][T30555] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.609956][T30193] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.617171][T30193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.658190][ T8748] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.665364][ T8748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.706383][T30856] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6289'. [ 817.741736][T30850] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6288'. [ 818.362696][T30895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6295'. [ 818.390117][T30895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 820.733841][T30892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6295'. [ 820.852552][T30555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.974150][T30928] netlink: 292 bytes leftover after parsing attributes in process `syz.1.6299'. [ 820.994344][T30919] vlan0: entered promiscuous mode [ 821.156912][T30555] veth0_vlan: entered promiscuous mode [ 821.206186][T30555] veth1_vlan: entered promiscuous mode [ 821.369525][T30948] geneve2: entered promiscuous mode [ 821.386566][T30948] geneve2: entered allmulticast mode [ 821.499787][T30955] syzkaller0: entered promiscuous mode [ 821.517089][T30955] syzkaller0: entered allmulticast mode [ 821.556036][T30958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6305'. [ 821.568566][T30555] veth0_macvtap: entered promiscuous mode [ 821.854670][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 821.862766][ C0] lec:lec_tx_timeout: lec0 [ 821.878609][T30971] No such timeout policy "syz0" [ 821.899362][T30971] netlink: 'syz.0.6308': attribute type 1 has an invalid length. [ 823.961260][T30971] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 824.009366][T30555] veth1_macvtap: entered promiscuous mode [ 824.062906][T30980] lo speed is unknown, defaulting to 1000 [ 824.112161][T30555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 824.157197][T30555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 824.189582][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.210373][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.228970][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.249859][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.491641][T31004] netlink: 'syz.2.6316': attribute type 1 has an invalid length. [ 824.527214][T31007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6317'. [ 824.601671][T31004] bond1: entered promiscuous mode [ 824.615888][T31004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 824.675222][T31013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 824.687662][T31013] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 824.698893][T31013] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 824.721985][T31004] xt_hashlimit: size too large, truncated to 1048576 [ 824.745493][T31013] bond1: (slave wireguard0): making interface the new active one [ 824.771813][T31013] wireguard0: entered promiscuous mode [ 824.789735][T31013] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 824.838953][T30980] lo speed is unknown, defaulting to 1000 [ 824.839436][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.897970][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.909105][T31011] : renamed from dummy0 (while UP) [ 825.001765][T31028] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6321'. [ 825.002841][T31026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6320'. [ 825.032695][T31029] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6321'. [ 825.093765][T30193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.111188][T30193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.537542][T31055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6328'. [ 825.566401][T31054] batadv0: entered promiscuous mode [ 825.578881][T31054] vlan2: entered promiscuous mode [ 825.591530][T31055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6328'. [ 826.039888][T31074] openvswitch: netlink: Duplicate or invalid key (type 0). [ 826.070155][T31074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 826.165667][T31084] tipc: Started in network mode [ 826.182692][T31084] tipc: Node identity ac14140f, cluster identity 4711 [ 826.198333][T31084] tipc: New replicast peer: 255.255.255.255 [ 826.200027][T31086] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6340'. [ 826.214622][T31084] tipc: Enabled bearer , priority 26 [ 826.238384][T21912] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 826.252972][T21912] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 826.262268][T21912] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 826.277298][T21912] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 826.295567][T21912] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 826.336536][T31086] dvmrp1: entered allmulticast mode [ 826.366868][T31092] dvmrp1: left allmulticast mode [ 826.427328][T31093] netlink: 'syz.2.6341': attribute type 25 has an invalid length. [ 826.435541][T31093] netlink: 'syz.2.6341': attribute type 28 has an invalid length. [ 826.481416][T31086] x_tables: duplicate underflow at hook 2 [ 826.508594][T31087] lo speed is unknown, defaulting to 1000 [ 826.789258][T31110] netlink: 'syz.3.6348': attribute type 8 has an invalid length. [ 826.816087][T31110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6348'. [ 826.850441][T31110] veth1_to_team: entered promiscuous mode [ 826.868861][T31110] gretap0: entered promiscuous mode [ 826.869671][T31109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6347'. [ 826.884552][T31110] hsr1: entered promiscuous mode [ 827.025452][T31087] lo speed is unknown, defaulting to 1000 [ 827.184466][T31116] lo speed is unknown, defaulting to 1000 [ 827.275544][T31129] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6355'. [ 827.291483][T31129] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6355'. [ 827.305232][T31129] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.6355'. [ 827.365797][T30239] tipc: Node number set to 2886997007 [ 827.614599][T31137] : option downdelay: invalid value (18446744073709547007) [ 827.658187][T31137] : option downdelay: allowed values 0 - 2147483647 [ 827.687018][T31137]  (unregistering): Released all slaves [ 827.808296][T31087] chnl_net:caif_netlink_parms(): no params data found [ 827.972345][T31116] lo speed is unknown, defaulting to 1000 [ 828.081031][T31087] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.092775][T31087] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.100450][T31087] bridge_slave_0: entered allmulticast mode [ 828.109729][T31087] bridge_slave_0: entered promiscuous mode [ 828.206200][T31156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6360'. [ 828.295595][T31087] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.307634][T31087] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.322890][T31087] bridge_slave_1: entered allmulticast mode [ 828.343338][T31087] bridge_slave_1: entered promiscuous mode [ 828.361426][T21912] Bluetooth: hci2: command tx timeout [ 828.370789][T31156] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 828.447582][T31162] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6361'. [ 828.479205][T31158] veth5: entered allmulticast mode [ 828.593529][T31087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.614268][T31087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.694343][T31087] team0: Port device team_slave_0 added [ 828.708396][T31087] team0: Port device team_slave_1 added [ 828.767813][T31169] 8021q: adding VLAN 0 to HW filter on device bond2 [ 828.802229][T31173] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6365'. [ 828.814744][T31087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.835664][T31087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.838439][T31177] Cannot find del_set index 0 as target [ 828.921277][T31087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.959118][T31087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.966871][T31087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.009793][T31087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.023054][T11697] IPVS: starting estimator thread 0... [ 829.083894][T31182] l2tp_ppp: sess 2/0: no socket in recv [ 829.125685][T31183] IPVS: using max 31 ests per chain, 74400 per kthread [ 829.149229][T31087] hsr_slave_0: entered promiscuous mode [ 829.160834][T31087] hsr_slave_1: entered promiscuous mode [ 829.175656][T31087] debugfs: 'hsr0' already exists in 'hsr' [ 829.181934][T31087] Cannot create hsr debugfs directory [ 829.299608][T31200] bridge0: entered promiscuous mode [ 829.308668][T31200] bridge0: port 3(vlan2) entered blocking state [ 829.317047][T31200] bridge0: port 3(vlan2) entered disabled state [ 829.323880][T31200] vlan2: entered allmulticast mode [ 829.344305][T31200] bridge0: entered allmulticast mode [ 829.355643][T31200] vlan2: left allmulticast mode [ 829.360789][T31200] bridge0: left allmulticast mode [ 829.377598][T31200] bridge0: left promiscuous mode [ 829.445858][T31205] ip6t_srh: unknown srh match flags 4000 [ 829.624354][T31087] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.639380][T31087] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.651063][T31087] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 829.719949][T31215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 829.744790][T31215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.753521][T31215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 829.761878][T31215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.857931][T31087] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.873747][T31087] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.889030][T31087] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 829.992602][T31230] lo speed is unknown, defaulting to 1000 [ 830.060687][T31087] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 830.078143][T31087] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.098196][T31087] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 830.243218][T31238] bond1 (unregistering): Released all slaves [ 830.253317][T31242] netlink: 'syz.0.6388': attribute type 1 has an invalid length. [ 830.265311][T31242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 830.446103][T21912] Bluetooth: hci2: command tx timeout [ 830.464487][T31087] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 830.475315][T31087] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 830.485945][T31087] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 830.504557][T31231] lo speed is unknown, defaulting to 1000 [ 830.519917][T31230] lo speed is unknown, defaulting to 1000 [ 830.608364][T31253] netlink: ct family unspecified [ 830.631418][T31253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 830.918939][T31259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6392'. [ 830.970102][T31231] lo speed is unknown, defaulting to 1000 [ 831.553371][T31087] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 831.593757][T31087] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 831.630688][T31087] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 831.693046][T31087] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 831.732885][T31087] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 831.761474][T31087] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 831.783450][T31282] lo speed is unknown, defaulting to 1000 [ 831.789905][T31087] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 831.812394][T31087] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 832.155523][T31087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.224798][T31087] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.250383][T28602] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.257586][T28602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.309127][T28602] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.316331][T28602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.367911][T31297] tipc: Enabled bearer , priority 10 [ 832.483930][T31282] lo speed is unknown, defaulting to 1000 [ 832.490935][T31304] __nla_validate_parse: 2 callbacks suppressed [ 832.490953][T31304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6404'. [ 832.520800][T21912] Bluetooth: hci2: command tx timeout [ 832.664006][T31304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 832.840044][T31328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6408'. [ 833.032398][T31087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.147754][T31340] lo speed is unknown, defaulting to 1000 [ 833.228088][T31087] veth0_vlan: entered promiscuous mode [ 833.281834][T31087] veth1_vlan: entered promiscuous mode [ 833.407456][T31087] veth0_macvtap: entered promiscuous mode [ 833.455981][T31087] veth1_macvtap: entered promiscuous mode [ 833.505934][T31350] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6415'. [ 833.523729][T31087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 833.562390][T31087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 833.589367][T30193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.599307][T30193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.682938][T31352] syzkaller0: entered promiscuous mode [ 833.691193][T31352] syzkaller0: entered allmulticast mode [ 833.711351][T30193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.720521][T30193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.737094][T31357] syzkaller0: entered promiscuous mode [ 833.743390][T31357] syzkaller0: entered allmulticast mode [ 833.752688][T31340] lo speed is unknown, defaulting to 1000 [ 833.785284][T31356] bond3 (unregistering): Released all slaves [ 834.605414][T21912] Bluetooth: hci2: command tx timeout [ 836.009955][T31365] lo speed is unknown, defaulting to 1000 [ 836.100904][T31373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6421'. [ 836.172964][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.197315][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.274358][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.289669][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.499171][T31365] lo speed is unknown, defaulting to 1000 [ 836.670439][T31384] 8021q: VLANs not supported on ip6_vti0 [ 837.032951][T31390] bond1: Unable to set down delay as MII monitoring is disabled [ 837.048067][T31390] bond1 (unregistering): Released all slaves [ 837.140233][T31395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 837.159194][T31395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 837.816205][T31426] netlink: 'syz.3.6434': attribute type 2 has an invalid length. [ 837.851308][T31426] netlink: 'syz.3.6434': attribute type 1 has an invalid length. [ 837.871678][T31426] netlink: 'syz.3.6434': attribute type 1 has an invalid length. [ 838.453847][T31463] lo speed is unknown, defaulting to 1000 [ 838.491301][T31469] netlink: 'syz.0.6448': attribute type 1 has an invalid length. [ 838.701010][T31481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6451'. [ 838.742369][T31481] geneve3: entered promiscuous mode [ 838.749008][T31481] geneve3: entered allmulticast mode [ 838.759213][T31483] netlink: 'syz.4.6452': attribute type 10 has an invalid length. [ 838.768269][T28601] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 838.780797][T28601] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 838.822390][T31483] team0: Device wg1 is of different type [ 838.868364][T28601] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 838.897534][T28601] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 838.920482][T31463] lo speed is unknown, defaulting to 1000 [ 838.948474][T31488] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6454'. [ 838.975021][T31488] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6454'. [ 839.454175][T31513] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 839.467829][T31518] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 839.549246][T31528] Cannot find add_set index 4 as target [ 840.054247][T31552] Cannot find del_set index 4 as target [ 840.110359][T31538] syzkaller0: entered promiscuous mode [ 840.117837][T31538] syzkaller0: entered allmulticast mode [ 840.387427][T31565] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6474'. [ 840.800610][T31582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6479'. [ 841.399578][T21912] Bluetooth: hci2: command 0x0401 tx timeout [ 842.867664][T31578] lo speed is unknown, defaulting to 1000 [ 843.045555][T31595] delete_channel: no stack [ 843.085933][T31603] netlink: 'syz.1.6483': attribute type 10 has an invalid length. [ 843.129343][T31603] team0: Port device dummy0 added [ 843.143391][T31604] netlink: 'syz.1.6483': attribute type 10 has an invalid length. [ 843.259728][T31604] team0: Port device dummy0 removed [ 843.285622][T31604] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 843.304548][T31578] lo speed is unknown, defaulting to 1000 [ 843.847144][T31621] vlan2: entered promiscuous mode [ 844.098460][T31629] nbd: socks must be embedded in a SOCK_ITEM attr [ 844.358163][T31632] nbd0: detected capacity change from 0 to 64 [ 844.377629][T21912] block nbd0: Receive control failed (result -32) [ 844.434169][T31003] block nbd0: Dead connection, failed to find a fallback [ 844.437935][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 844.512780][T31003] block nbd0: shutting down sockets [ 844.520992][T31003] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 844.537459][T31003] Buffer I/O error on dev nbd0, logical block 0, async page read [ 844.574567][T31003] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 844.605282][T31003] Buffer I/O error on dev nbd0, logical block 0, async page read [ 844.631791][T31003] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 844.659918][T31661] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6503'. [ 844.663054][T31003] Buffer I/O error on dev nbd0, logical block 0, async page read [ 844.726453][T31003] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 844.752882][T31003] Buffer I/O error on dev nbd0, logical block 0, async page read [ 844.784158][T31003] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 844.801843][T31659] lo speed is unknown, defaulting to 1000 [ 844.806238][T31003] Buffer I/O error on dev nbd0, logical block 0, async page read [ 844.842679][T31003] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 844.875277][T31003] Buffer I/O error on dev nbd0, logical block 0, async page read [ 844.894184][T31003] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 844.920430][T31003] Buffer I/O error on dev nbd0, logical block 0, async page read [ 844.939422][T31003] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 844.977764][T31003] Buffer I/O error on dev nbd0, logical block 0, async page read [ 845.008170][T31003] ldm_validate_partition_table(): Disk read failed. [ 845.036687][T31003] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 845.067543][T31003] Buffer I/O error on dev nbd0, logical block 0, async page read [ 845.083786][T31668] xt_CT: No such helper "syz1" [ 845.111792][T31003] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 845.128483][T31673] syzkaller0: entered promiscuous mode [ 845.151479][T31003] Buffer I/O error on dev nbd0, logical block 0, async page read [ 845.167602][T31673] syzkaller0: entered allmulticast mode [ 845.182572][T31003] Dev nbd0: unable to read RDB block 0 [ 845.222596][T31003] nbd0: unable to read partition table [ 845.313150][T31003] ldm_validate_partition_table(): Disk read failed. [ 845.342373][T31003] Dev nbd0: unable to read RDB block 0 [ 845.362695][T31003] nbd0: unable to read partition table [ 845.890862][T31694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6509'. [ 848.329393][T31662] Set syz1 is full, maxelem 65536 reached [ 848.921366][T31659] lo speed is unknown, defaulting to 1000 [ 848.921407][T31665] lo speed is unknown, defaulting to 1000 [ 848.934076][T31693] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 848.959859][T31695] veth1_macvtap: left promiscuous mode [ 849.212513][T31713] batman_adv: batadv0: Adding interface: gretap1 [ 849.226350][T31713] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.263367][T31713] batman_adv: batadv0: Interface activated: gretap1 [ 849.390685][T31724] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6516'. [ 849.413805][T31665] lo speed is unknown, defaulting to 1000 [ 849.453638][T31729] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6517'. [ 849.490432][T31720] syzkaller0: entered promiscuous mode [ 849.512719][T31720] syzkaller0: entered allmulticast mode [ 849.550631][T31720] netlink: 'syz.3.6515': attribute type 33 has an invalid length. [ 849.576187][T31720] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6515'. [ 849.637668][T31720] `: renamed from team0 (while UP) [ 849.746602][T31724] lo speed is unknown, defaulting to 1000 [ 849.936061][T31724] lo speed is unknown, defaulting to 1000 [ 850.960383][T31753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6520'. [ 852.626785][T28601] [ 852.629170][T28601] ====================================================== [ 852.636199][T28601] WARNING: possible circular locking dependency detected [ 852.643251][T28601] syzkaller #0 Not tainted [ 852.647681][T28601] ------------------------------------------------------ [ 852.654722][T28601] kworker/u8:0/28601 is trying to acquire lock: [ 852.660969][T28601] ffffffff8ea84780 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 852.670812][T28601] [ 852.670812][T28601] but task is already holding lock: [ 852.678175][T28601] ffff888054239d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 852.687059][T28601] [ 852.687059][T28601] which lock already depends on the new lock. [ 852.687059][T28601] [ 852.697458][T28601] [ 852.697458][T28601] the existing dependency chain (in reverse order) is: [ 852.706471][T28601] [ 852.706471][T28601] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 852.714382][T28601] lock_sock_nested+0x41/0x100 [ 852.719671][T28601] mptcp_connect+0x4c3/0x830 [ 852.724790][T28601] __inet_stream_connect+0x25a/0xdd0 [ 852.730594][T28601] inet_stream_connect+0x66/0xa0 [ 852.736053][T28601] __sys_connect+0x312/0x450 [ 852.741175][T28601] __x64_sys_connect+0x7a/0x90 [ 852.746469][T28601] do_syscall_64+0x15f/0xf80 [ 852.751589][T28601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.758007][T28601] [ 852.758007][T28601] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 852.765746][T28601] lock_sock_nested+0x41/0x100 [ 852.771039][T28601] inet_shutdown+0x6a/0x390 [ 852.776060][T28601] nbd_mark_nsock_dead+0x2e9/0x560 [ 852.781699][T28601] sock_shutdown+0x15e/0x260 [ 852.786811][T28601] nbd_clear_sock+0x24/0x170 [ 852.791920][T28601] nbd_config_put+0x2dd/0x580 [ 852.797119][T28601] nbd_genl_connect+0x19d5/0x1cf0 [ 852.802668][T28601] genl_family_rcv_msg_doit+0x22a/0x330 [ 852.808739][T28601] genl_rcv_msg+0x61c/0x7a0 [ 852.813766][T28601] netlink_rcv_skb+0x232/0x4b0 [ 852.819055][T28601] genl_rcv+0x28/0x40 [ 852.823555][T28601] netlink_unicast+0x75c/0x8e0 [ 852.828854][T28601] netlink_sendmsg+0x813/0xb40 [ 852.834156][T28601] ____sys_sendmsg+0x972/0x9f0 [ 852.839450][T28601] ___sys_sendmsg+0x2a5/0x360 [ 852.844657][T28601] __x64_sys_sendmsg+0x1bd/0x2a0 [ 852.850137][T28601] do_syscall_64+0x15f/0xf80 [ 852.855251][T28601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.861666][T28601] [ 852.861666][T28601] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 852.869319][T28601] __mutex_lock+0x1a3/0x1550 [ 852.874439][T28601] nbd_queue_rq+0x37b/0x1100 [ 852.879553][T28601] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 852.885624][T28601] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 852.892481][T28601] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 852.898989][T28601] blk_mq_run_hw_queue+0x348/0x4f0 [ 852.904637][T28601] blk_mq_dispatch_list+0xd16/0xe10 [ 852.910376][T28601] blk_mq_flush_plug_list+0x48d/0x570 [ 852.916271][T28601] __blk_flush_plug+0x3ed/0x4d0 [ 852.921646][T28601] __submit_bio+0x28d/0x580 [ 852.926684][T28601] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 852.932846][T28601] block_read_full_folio+0x7b7/0x830 [ 852.938667][T28601] filemap_read_folio+0x137/0x3b0 [ 852.944217][T28601] do_read_cache_folio+0x358/0x590 [ 852.949852][T28601] read_part_sector+0xb6/0x2b0 [ 852.955147][T28601] adfspart_check_ICS+0xb1/0x960 [ 852.960612][T28601] bdev_disk_changed+0x817/0x1770 [ 852.966160][T28601] blkdev_get_whole+0x380/0x510 [ 852.971538][T28601] bdev_open+0x31e/0xd30 [ 852.976309][T28601] blkdev_open+0x470/0x610 [ 852.981254][T28601] do_dentry_open+0x785/0x14e0 [ 852.986551][T28601] vfs_open+0x3b/0x340 [ 852.991152][T28601] path_openat+0x2e08/0x3860 [ 852.996291][T28601] do_file_open+0x23e/0x4a0 [ 853.001325][T28601] do_sys_openat2+0x113/0x200 [ 853.006528][T28601] __x64_sys_openat+0x138/0x170 [ 853.011910][T28601] do_syscall_64+0x15f/0xf80 [ 853.017030][T28601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.023481][T28601] [ 853.023481][T28601] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 853.030828][T28601] __mutex_lock+0x1a3/0x1550 [ 853.036066][T28601] nbd_queue_rq+0xc6/0x1100 [ 853.041101][T28601] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 853.047173][T28601] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 853.054036][T28601] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 853.060541][T28601] blk_mq_run_hw_queue+0x348/0x4f0 [ 853.066187][T28601] blk_mq_dispatch_list+0xd16/0xe10 [ 853.071912][T28601] blk_mq_flush_plug_list+0x48d/0x570 [ 853.077817][T28601] __blk_flush_plug+0x3ed/0x4d0 [ 853.083194][T28601] __submit_bio+0x28d/0x580 [ 853.088224][T28601] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 853.094388][T28601] block_read_full_folio+0x7b7/0x830 [ 853.100211][T28601] filemap_read_folio+0x137/0x3b0 [ 853.105767][T28601] do_read_cache_folio+0x358/0x590 [ 853.111407][T28601] read_part_sector+0xb6/0x2b0 [ 853.116704][T28601] adfspart_check_ICS+0xb1/0x960 [ 853.122178][T28601] bdev_disk_changed+0x817/0x1770 [ 853.127728][T28601] blkdev_get_whole+0x380/0x510 [ 853.133124][T28601] bdev_open+0x31e/0xd30 [ 853.137902][T28601] blkdev_open+0x470/0x610 [ 853.142844][T28601] do_dentry_open+0x785/0x14e0 [ 853.148136][T28601] vfs_open+0x3b/0x340 [ 853.152743][T28601] path_openat+0x2e08/0x3860 [ 853.157865][T28601] do_file_open+0x23e/0x4a0 [ 853.162900][T28601] do_sys_openat2+0x113/0x200 [ 853.168108][T28601] __x64_sys_openat+0x138/0x170 [ 853.173488][T28601] do_syscall_64+0x15f/0xf80 [ 853.178605][T28601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.185060][T28601] [ 853.185060][T28601] -> #3 (set->srcu){.+.+}-{0:0}: [ 853.192187][T28601] __synchronize_srcu+0xca/0x300 [ 853.197655][T28601] elevator_switch+0x1e8/0x7a0 [ 853.202944][T28601] elevator_change+0x2cc/0x450 [ 853.208230][T28601] elevator_set_default+0x36c/0x430 [ 853.213948][T28601] blk_register_queue+0x3e9/0x4e0 [ 853.219495][T28601] __add_disk+0x677/0xd50 [ 853.224353][T28601] add_disk_fwnode+0xfb/0x480 [ 853.229563][T28601] nbd_dev_add+0x72c/0xb50 [ 853.234504][T28601] nbd_init+0x168/0x1f0 [ 853.239189][T28601] do_one_initcall+0x250/0x870 [ 853.244499][T28601] do_initcall_level+0x104/0x190 [ 853.249982][T28601] do_initcalls+0x59/0xa0 [ 853.254844][T28601] kernel_init_freeable+0x2a6/0x3e0 [ 853.260568][T28601] kernel_init+0x1d/0x1d0 [ 853.265428][T28601] ret_from_fork+0x514/0xb70 [ 853.270547][T28601] ret_from_fork_asm+0x1a/0x30 [ 853.275840][T28601] [ 853.275840][T28601] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 853.283683][T28601] __mutex_lock+0x1a3/0x1550 [ 853.288800][T28601] elevator_change+0x1b3/0x450 [ 853.294084][T28601] elevator_set_none+0xb5/0x140 [ 853.299461][T28601] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 853.305798][T28601] nbd_start_device+0x17f/0xb10 [ 853.311172][T28601] nbd_genl_connect+0x165b/0x1cf0 [ 853.316720][T28601] genl_family_rcv_msg_doit+0x22a/0x330 [ 853.322793][T28601] genl_rcv_msg+0x61c/0x7a0 [ 853.327822][T28601] netlink_rcv_skb+0x232/0x4b0 [ 853.333119][T28601] genl_rcv+0x28/0x40 [ 853.337632][T28601] netlink_unicast+0x75c/0x8e0 [ 853.342929][T28601] netlink_sendmsg+0x813/0xb40 [ 853.348231][T28601] ____sys_sendmsg+0x972/0x9f0 [ 853.353527][T28601] ___sys_sendmsg+0x2a5/0x360 [ 853.358739][T28601] __x64_sys_sendmsg+0x1bd/0x2a0 [ 853.364225][T28601] do_syscall_64+0x15f/0xf80 [ 853.369344][T28601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.375757][T28601] [ 853.375757][T28601] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 853.384365][T28601] blk_alloc_queue+0x546/0x680 [ 853.389684][T28601] __blk_mq_alloc_disk+0x197/0x390 [ 853.395319][T28601] nbd_dev_add+0x499/0xb50 [ 853.400266][T28601] nbd_init+0x168/0x1f0 [ 853.404968][T28601] do_one_initcall+0x250/0x870 [ 853.410280][T28601] do_initcall_level+0x104/0x190 [ 853.415751][T28601] do_initcalls+0x59/0xa0 [ 853.420608][T28601] kernel_init_freeable+0x2a6/0x3e0 [ 853.426334][T28601] kernel_init+0x1d/0x1d0 [ 853.431190][T28601] ret_from_fork+0x514/0xb70 [ 853.436315][T28601] ret_from_fork_asm+0x1a/0x30 [ 853.441610][T28601] [ 853.441610][T28601] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 853.448831][T28601] __lock_acquire+0x15a5/0x2cf0 [ 853.454216][T28601] lock_acquire+0x106/0x350 [ 853.459257][T28601] fs_reclaim_acquire+0x71/0x100 [ 853.464718][T28601] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 853.471055][T28601] __alloc_skb+0x27d/0x7d0 [ 853.475996][T28601] tcp_send_active_reset+0x8a/0x5a0 [ 853.481722][T28601] __tcp_close+0x4c5/0xfe0 [ 853.486681][T28601] tcp_close+0x28/0x110 [ 853.491362][T28601] inet_release+0x143/0x190 [ 853.496398][T28601] sock_release+0x85/0x150 [ 853.501340][T28601] rds_tcp_accept_one+0x641/0xd70 [ 853.506884][T28601] rds_tcp_accept_worker+0x1d/0x70 [ 853.512540][T28601] process_scheduled_works+0xb5d/0x1860 [ 853.518611][T28601] worker_thread+0xa53/0xfc0 [ 853.523730][T28601] kthread+0x388/0x470 [ 853.528317][T28601] ret_from_fork+0x514/0xb70 [ 853.533437][T28601] ret_from_fork_asm+0x1a/0x30 [ 853.538729][T28601] [ 853.538729][T28601] other info that might help us debug this: [ 853.538729][T28601] [ 853.548950][T28601] Chain exists of: [ 853.548950][T28601] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 853.548950][T28601] [ 853.561950][T28601] Possible unsafe locking scenario: [ 853.561950][T28601] [ 853.569436][T28601] CPU0 CPU1 [ 853.574803][T28601] ---- ---- [ 853.580168][T28601] lock(k-sk_lock-AF_INET6); [ 853.584851][T28601] lock(sk_lock-AF_INET6); [ 853.591875][T28601] lock(k-sk_lock-AF_INET6); [ 853.599099][T28601] lock(fs_reclaim); [ 853.603082][T28601] [ 853.603082][T28601] *** DEADLOCK *** [ 853.603082][T28601] [ 853.611233][T28601] 4 locks held by kworker/u8:0/28601: [ 853.616635][T28601] #0: ffff888033969140 ((wq_completion)krdsd){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 853.627540][T28601] #1: ffffc90005207c40 ((work_completion)(&rtn->rds_tcp_accept_w)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 853.640264][T28601] #2: ffff88807ad80a60 (&rtn->rds_tcp_accept_lock){+.+.}-{4:4}, at: rds_tcp_accept_one+0xa9/0xd70 [ 853.650966][T28601] #3: ffff888054239d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 853.660286][T28601] [ 853.660286][T28601] stack backtrace: [ 853.666178][T28601] CPU: 1 UID: 0 PID: 28601 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 853.666197][T28601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 853.666208][T28601] Workqueue: krdsd rds_tcp_accept_worker [ 853.666236][T28601] Call Trace: [ 853.666243][T28601] [ 853.666251][T28601] dump_stack_lvl+0xe8/0x150 [ 853.666274][T28601] print_circular_bug+0x2e1/0x300 [ 853.666300][T28601] check_noncircular+0x12e/0x150 [ 853.666326][T28601] __lock_acquire+0x15a5/0x2cf0 [ 853.666347][T28601] ? kthread+0x388/0x470 [ 853.666361][T28601] ? ret_from_fork+0x514/0xb70 [ 853.666381][T28601] ? ret_from_fork_asm+0x1a/0x30 [ 853.666410][T28601] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 853.666432][T28601] lock_acquire+0x106/0x350 [ 853.666451][T28601] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 853.666478][T28601] fs_reclaim_acquire+0x71/0x100 [ 853.666492][T28601] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 853.666514][T28601] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 853.666536][T28601] ? __alloc_skb+0x27d/0x7d0 [ 853.666557][T28601] ? __alloc_skb+0x186/0x7d0 [ 853.666581][T28601] __alloc_skb+0x27d/0x7d0 [ 853.666604][T28601] tcp_send_active_reset+0x8a/0x5a0 [ 853.666651][T28601] ? __sk_mem_reduce_allocated+0x270/0x3f0 [ 853.666670][T28601] __tcp_close+0x4c5/0xfe0 [ 853.666694][T28601] tcp_close+0x28/0x110 [ 853.666713][T28601] inet_release+0x143/0x190 [ 853.666738][T28601] sock_release+0x85/0x150 [ 853.666757][T28601] rds_tcp_accept_one+0x641/0xd70 [ 853.666773][T28601] ? process_scheduled_works+0xa70/0x1860 [ 853.666795][T28601] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 853.666815][T28601] rds_tcp_accept_worker+0x1d/0x70 [ 853.666839][T28601] ? process_scheduled_works+0xa70/0x1860 [ 853.666861][T28601] process_scheduled_works+0xb5d/0x1860 [ 853.666895][T28601] ? __pfx_process_scheduled_works+0x10/0x10 [ 853.666919][T28601] ? assign_work+0x3d5/0x5e0 [ 853.666942][T28601] worker_thread+0xa53/0xfc0 [ 853.666974][T28601] kthread+0x388/0x470 [ 853.666989][T28601] ? __pfx_worker_thread+0x10/0x10 [ 853.667010][T28601] ? __pfx_kthread+0x10/0x10 [ 853.667026][T28601] ret_from_fork+0x514/0xb70 [ 853.667049][T28601] ? __pfx_ret_from_fork+0x10/0x10 [ 853.667071][T28601] ? __switch_to+0xc79/0x1410 [ 853.667089][T28601] ? __pfx_kthread+0x10/0x10 [ 853.667105][T28601] ret_from_fork_asm+0x1a/0x30 [ 853.667135][T28601]