last executing test programs: 4.563721602s ago: executing program 3 (id=2785): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x0, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x9}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)={0x2, 0x3ff, 0x3, 0x0, 0x0, [{{r1}, 0xe6}, {{r2}, 0x3}, {{r3}, 0x2}]}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) (async) recvmmsg(r4, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) (async) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r6, &(0x7f0000000080)='ns/pid_for_children\x00') 4.240843543s ago: executing program 0 (id=2787): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xffffffff}, 0x1c) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="7916d05f5f7fa8cff66394f5d0d14848de2c1db911ad91148452a006c92a7b83b08525126ecc71ef8c39150e2c0feffbad2aa6438cb6c31837b869ca0c702bdb09aa316d04fc361d68fc799eebd485a9eb55d2a678b4a9911555708177c55b91a71c3b9beb31ecac938d6316a6b7a905f9cc54bc4b37523fbc145077d08a4f0a7fa28d0f5a4fc610c2f819fb71dfa259dabff606300d5dccf5608a03fdade434453785fe989e275a129236e2a4a9a38fe1131954832a5d186560f441538c"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendto$packet(0xffffffffffffffff, &(0x7f0000000700)="8e611982bcbaff6855660d6410df164fd1ccebddf63bed3186908815546246c2ae87007aeaa765d47a62014c0f6416d13f0af735d6576bc273b287750256f62574da8a9a8e4a015bd99d4d9f2cd22123913bc6ec45ca1c512e4e0b3fc85234289233d7af12be95e5c34ef61af1c11e9561a9a6243379fc5017c367179abc1086adcb6cd3dad4cdea2735c3e285e9ba4d02403abc89e6774231a1f3beb0df6d276b0d1441443328caa6b998d0f1c808fa920d21241d60d5cff418d4eec4f36816cb3c36be506adbfeedf0e586407d57a64106", 0xd2, 0x80, &(0x7f0000000800)={0x11, 0x1, r1, 0x1, 0x8, 0x6, @broadcast}, 0x14) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@polexpire={0xd4, 0x1b, 0x103, 0x0, 0x0, {{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@policy_type={0xa}, @XFRMA_IF_ID={0x8}]}, 0xd4}}, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100fdfffffffddbdf251d00000008000300", @ANYRES32=r8, @ANYBLOB="44002f80080001000000e6ff0b00020002"], 0x60}, 0x1, 0x0, 0x0, 0xd49920d372514742}, 0x4000040) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(0x3) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r11, @ANYRESHEX=r9, @ANYRES32=r12, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x800) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6f30baeb6242c87a70e82833cb9e68d5"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6bec837bdec5988c088853e1544c689c"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x804) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="480000001000030427bd70000000000000000000c8fbd98435cc939a69eb4e222efeb7e42ed9650c1411d9b70c67e41ccc55b1adeca03465877288e29d0a4ca3770c7f9544ef4bdf385326", @ANYRES32=0x0, @ANYBLOB="46040900000000002000128009000100766c616e000000001000028006000100010000000400038008000500", @ANYRES32=r13, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.716796628s ago: executing program 3 (id=2793): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e24, 0x9, 0x4e23, 0x9, 0x2, 0x80, 0x80, 0x89}, {0x1, 0x98, 0x5, 0x9, 0x1, 0x8, 0x4, 0x5}, {0xffffffffffffff22, 0xe0, 0x823}, 0x68a4, 0x6e6bb9, 0x2, 0x1, 0x3, 0x1}, {{@in=@multicast2, 0x4d3, 0x3c}, 0x2, @in=@loopback, 0x3501, 0x1, 0x2, 0x1, 0xffff7fff, 0x3}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x14, 0x10, 0x0, 0x8, 0x0, 0x0, 0x3, 0x17}, [@FRA_SRC={0x14, 0x2, @empty}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac00000000000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x1) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x5, 0x2, 0x1}, &(0x7f0000000100)=0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x64, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x24, 0x5, 0x0, 0x1, [@IFLA_BRPORT_ISOLATED={0x5}, @IFLA_BRPORT_MODE={0x5}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0xcfc}, @IFLA_BRPORT_LEARNING={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) setsockopt$sock_void(r5, 0x1, 0x2d, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000000400000000000000000000aba7be5f7400311f054c11adc6fec6f6700795cf3c867c219e68430dfdde64ca07b4eb158b2cad3c205070278f57cd99ada0a8e975593a4811628ec4cd703e5c46dca15ce1fe89ca940f00bbb2360d67d3440cd2afb3111a0e1887a218177b95c1bcc900b1754a17c9d8a160bf6daed81faa43a318b69be3ee9f159dec05cabe2eb49b5e9bcf0000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r6, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="09180000000000000000010000000800020002000000080001"], 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="01200009000000ff32877f3c9d1100260000"], 0x18}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) 1.661729536s ago: executing program 2 (id=2794): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x2184, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) clock_gettime(0x0, &(0x7f0000002f40)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/16, 0x10}, {&(0x7f0000000040)=""/226, 0xe2}], 0x2, &(0x7f0000000240)=""/75, 0x4b}, 0x99}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)=""/75, 0x4b}, {&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/139, 0x8b}, {&(0x7f00000004c0)=""/86, 0x56}, {&(0x7f0000000540)=""/2, 0x2}, {&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f00000005c0)=""/83, 0x53}, {&(0x7f0000000640)=""/54, 0x36}], 0x8}, 0x1}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)}, {&(0x7f0000002740)=""/224, 0xe0}, {&(0x7f0000002840)=""/214, 0xd6}, {&(0x7f0000002940)=""/171, 0xab}, {&(0x7f0000002a00)=""/202, 0xca}, {&(0x7f0000002b00)=""/86, 0x56}, {&(0x7f0000002b80)=""/1, 0x1}, {&(0x7f0000002bc0)=""/233, 0xe9}], 0xa, &(0x7f0000002d80)=""/238, 0xee}, 0x1}], 0x3, 0x101, &(0x7f0000002f80)={r2, r3+60000000}) 1.661289148s ago: executing program 1 (id=2795): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0x3, 0x0, &(0x7f0000000040)=0xfdf4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x162) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r4, 0xaa0f4000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10012, r3, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r8, &(0x7f0000001a40)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0x1, @private0, 0x3}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6119aedd5) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000140)={0x1000, 0xb88, 0x2, 0x8, 0x5, 0xbad, 0x9, 0x7f}, 0x20) getsockopt$IP6T_SO_GET_REVISION_MATCH(r8, 0x29, 0x44, &(0x7f0000000200)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x11, r7, 0x3000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r7, 0x0) 1.577659143s ago: executing program 0 (id=2797): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20004080) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd31, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfc, 0x2, 0xff, 0xa, 0x100}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0xfffffffffffffe11, 0x3, @mcast2}}]}, 0x44}}, 0x0) sendto$phonet(r2, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x23, 0x26, 0x88, 0x6}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x9, &(0x7f0000000240)=@raw=[@ldst={0x0, 0x2, 0x2, 0x0, 0xa, 0x1, 0xfffffffffffffff0}, @ringbuf_query, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000340)='syzkaller\x00', 0x7fff, 0x91, &(0x7f00000003c0)=""/145, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x5, 0xff, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000580)=[{0x4, 0x4, 0x0, 0x1}, {0x4, 0x4, 0x1, 0x6}, {0x1, 0x3, 0xd, 0xb}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002180)={r4, 0x0, 0x2d, 0xf0, &(0x7f0000000680)="180c147af846aab7166307c280d8f39452c0ac430d5c762223f29f0dc58358bb17c01e48da076aaa6bdc5f16ec", &(0x7f00000006c0)=""/240, 0xf8c, 0x0, 0x1000, 0x83, &(0x7f00000010c0)="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", &(0x7f00000020c0)="75fded7840448eee635a94898d6b1a0946e14c3dade522d7f8374a71f4909c444babf072b15a8d4c2f3a27501cfcf9b3e2721f299579d15bbd764155878dbf1f61332e055bcbde965f3bd1443b3738c7278b18317ed0ec881db0c5a079f82cdd4f7484f5c85e7faaf450950131b23c10cac9de7edc3598bab4408b789311ba649f9d93"}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$kcm(0xa, 0x922000000003, 0x11) r9 = socket$kcm(0x10, 0x2, 0x4) connect(r8, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x68, @remote, 0x201, 0x1}, 0x80) sendmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, 0x0, &(0x7f00000003c0)) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES32=r5], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x1e8, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DESC={0x190, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x34, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x104, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc380}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff52e0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xda}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2ab7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffb5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf7f3}]}]}, @NFTA_SET_DESC_CONCAT={0x54, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x18}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x210}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.489330707s ago: executing program 2 (id=2798): r0 = socket$inet(0x2, 0x3, 0x81) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x2d, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000400)={{r3}, 0x0, 0x0, @inherit={0x90, &(0x7f00000000c0)={0x1, 0x9, 0x5, 0x4, {0x9, 0xaa, 0x7, 0x6, 0x3}, [0x2, 0x7, 0x7, 0x4, 0x8, 0x0, 0x77cc, 0x8, 0x2]}}, @subvolid=0x25}) close(0x3) 1.413576843s ago: executing program 1 (id=2799): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00'/12, @ANYRES32=0x0, @ANYBLOB="1b8b020000000000200012800b00010067656e657665000010000280060005004e1f000004000600"], 0x40}}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x1000}, @TCA_PIE_LIMIT={0x8, 0x2, 0x7}]}}]}, 0x40}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044080}, 0x40) 1.2062627s ago: executing program 2 (id=2800): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000034dc0000000000000040034000dc"}}}]}, 0x48}}, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@null, 0xf, 'dummy0\x00'}) 1.129564804s ago: executing program 0 (id=2801): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000380)=0x5, 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000003c0)={{r2, &(0x7f0000000080)='!^\x00', 0x8400, &(0x7f00000000c0)={@align=0x1000, {0x200, 0xe7, 0x4, 0x1}}, 0x0, &(0x7f0000000180)={@_ha_fsid}, &(0x7f0000000200)=0x2}, {[0x7, 0x7ff, 0x1, 0xffff5c06]}, 0x6, 0x78, &(0x7f0000000340)=""/120}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r6, &(0x7f0000000500)="2467cd90596a96a0ec3f33fe03c5960ef8829f43df547662440a5ff143b25296ad13aeeaeb25bdd41a0a831dd98364dc9e54ab8be52b8a76f50d2f7569200a25060990d8a9cb4912457781d43ed09fa81a6165b28e8055ca578c492e8c500462d36042f30255f7994428b2c4eb616c2aba4da4b7b9b4d2aa52d4a58cd6cf78733a0134d69cd60fbfc10c8f89962fb0b23f490ef6036bbf4d68ed462c", &(0x7f00000005c0)=""/35}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0xfff4}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x7ffffffe, 0x1}}}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x1a043000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x89}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r8, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000000)) socket$unix(0x1, 0x2, 0x0) 1.075252594s ago: executing program 4 (id=2802): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x7800, 0x1, 0x4, 0x9, {{0x1a, 0x4, 0x2, 0x4, 0x68, 0x64, 0x0, 0x2, 0x29, 0x0, @multicast2, @broadcast, {[@noop, @timestamp={0x44, 0x24, 0xdc, 0x0, 0xf, [0x2, 0x8001, 0x8, 0xaf, 0x5, 0x7fff, 0x6, 0x40]}, @noop, @timestamp_prespec={0x44, 0xc, 0xe9, 0x3, 0x2, [{@remote, 0xa0000000}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x10, 0x0, [{0x7, 0xa, "5880658bfee50057"}]}, @cipso={0x86, 0xb, 0x0, [{0x2, 0x5, "64ebc9"}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x4, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff2, 0xffe0}, {0xd, 0xfff3}, {0xd, 0xfff2}}, [@TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xb8, 0x874, 0x400000, 0x1, 0x80000000, 0x2, 0x1}}, {0x6, 0x2, [0xb2]}}, {{0x1c, 0x1, {0x8, 0x7, 0x71, 0x8, 0x2, 0x1, 0x399, 0x5}}, {0xe, 0x2, [0x8000, 0x2, 0x2, 0x0, 0xe]}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800004e1000010400000002fddb050000080000", @ANYRES32=r2, @ANYBLOB="000000008410000008001f00ff010000"], 0x28}}, 0x24044840) 1.068137467s ago: executing program 1 (id=2803): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0600000004000000001a00000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000000080000000002000200000400000000ffff000000000000"], 0x980) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0600000004000000001a00000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000000080000000002000200000400000000ffff000000000000"], 0x980) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448c9, 0x0) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0x2, 0x3a5c, 0x0, 0x1e3d}, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) accept4$inet6(r5, &(0x7f0000000240), &(0x7f0000000280)=0x1c, 0x80800) (async) accept4$inet6(r5, &(0x7f0000000240), &(0x7f0000000280)=0x1c, 0x80800) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x44}}, 0x800) 1.005799901s ago: executing program 3 (id=2804): sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x40}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="09180000000000000000010000000800020002000000080001"], 0x24}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x114}], 0x1}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x40}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="09180000000000000000010000000800020002000000080001"], 0x24}}, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x114}], 0x1}, 0x0) (async) 983.460659ms ago: executing program 2 (id=2805): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) write$bt_hci(r1, &(0x7f0000000000)=ANY=[], 0x6) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000080)) r2 = socket(0x21, 0xa, 0x6) bind$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711237000000000095", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x24}, 0x94) 979.370706ms ago: executing program 0 (id=2806): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x97}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xa, 0xffea}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0xfffffff7, 0xb47e, 0xb, 0x20000003, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x2, 0xb}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x5, 0x7, 0xa, 0x40000003, 0xfffffffc}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff7, 0x5, 0xffffe056, 0x9}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000030}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x2) 922.951703ms ago: executing program 4 (id=2807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdd669492020008000300", @ANYRES32=r2, @ANYBLOB="0600b100c86800000600b1"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x156, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0xc, 0x6, "9d2218", 0x120, 0x2f, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, {[@hopopts={0x1d, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x2}, @enc_lim={0x4, 0x1, 0x4}]}, @dstopts={0x3b, 0xa, '\x00', [@pad1, @calipso={0x7, 0x50, {0x2, 0x12, 0xce, 0x2, [0x4, 0x45f8, 0x3ff, 0x7, 0x800, 0x3715, 0x3ff, 0x8000, 0x9]}}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x2}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "13a41e8d205f67d2b3732bf180a0683ecd78d84a76c4ed9c78abf2f47db77c1c8b009634639687d8a97f4e77667967c67b4146b8131a5769c6d1d934160d75dfdf6b01946e5c4ae22d78c10b6cee7c5ceeb5c9d0aa6e53ed3575b3390ace9a43f7da254e"}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x1, 0x1, 0x6, 0x3, 0x0, 0x2, 0x0, 0x5}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x3, {{0x5, 0x2, 0x3, 0x3, 0x1, 0x3, 0x0, 0x7}, 0x2, {0x0, 0x3, 0x3, 0xa, 0x1, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 801.208464ms ago: executing program 3 (id=2808): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1400000000000000000000000a00000000000000"], 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000002c0)="adcd1a9a3fc36e961ed00fe41b0cd6959ab77f070f532c9b7038515e5670281cda3304fda0448a35496d0d55032934764954960d0139bba555d1698f8e81abb5bcbfd691fd2233551e91935a91c36251cc0400", 0x8b02464c4ed2db90) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d651833e6e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469de", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close(0x3) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000000000000002d"], 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000408010200000000000000000500000006000240655800002a8f29476bab09b47bf84ff89e77f8004b6619ba80f70bcd850fc22c7247f90b9c913f57a49b89f4c0922335321bd7e32d6996f0e271fe96185e53eb44a7becbfb1af81efee2a855d62bb9e3b0a13cc96c112441ca21f24396fb616b33563f69f19d1793"], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) 778.104761ms ago: executing program 4 (id=2809): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x80) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f00000000c0)=0xfff, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000000003001128009000100766c616e000000002001028006000100000000001c0004800c00010032d10000ffff00000c000100ae0200009e000000700004800c00010009000000010000e29b5d2a0008000000010100000c000100f8ffffff080000000c00010006000000040000000c00010007000000010000800c00010005000000060000000c00010001000000000000000c000100910a00000d0000000c0001000e00000032000000880003800c002100060000000c0000000c00010003000000400000000c00010004000000ffffffff0c00010002000000110000000c00010001000000020000000c0001000b000000270000000c000100ffff00005f0200000c000100ffffffff030000000c00010001000000030000000c00010000000000018000000c000100090000000900000008000500", @ANYRES8=r1], 0x158}, 0x1, 0xba01}, 0x44) 731.17335ms ago: executing program 1 (id=2810): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe(&(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x2, 0x8, 0x0, 0xfd, 0x1}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)}, &(0x7f0000000780)=0x10) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x4, @multicast, 'ip_vti0\x00'}}, 0x1e) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000340), 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) connect$pppoe(r3, &(0x7f0000000740)={0x18, 0x0, {0x103, @empty, 'bond0\x00'}}, 0x1e) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, 0x0) 652.985514ms ago: executing program 3 (id=2811): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x46, &(0x7f0000000380), 0x4) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0xf8, 0xfa, 0x64, 0x8, 0x4, 0x4, 0x2, 0x99, 0x7, 0x8, 0x87, 0x4, 0xf5, 0x8}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @loopback}]}, &(0x7f0000000000)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={r3, 0x7}, &(0x7f0000000240)=0x8) (async, rerun: 64) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) (async) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 652.514466ms ago: executing program 2 (id=2812): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r1, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a") setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00000002c0)=0x5f53, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000340)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x73) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYRES8], 0x3c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r3, &(0x7f0000000800)="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", 0x123, 0x880, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000280)={0xa, 0x5d0, 0x4, 0x9e9}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf2564010101000000000000000000000000ff020000000000000000000000000001000400004e210002000000a021000000", @ANYRES32=r10, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="02000000"], 0x15c}, 0x1, 0x0, 0x0, 0x8040880}, 0x2014) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x164, 0x30, 0x1, 0x0, 0x0, {}, [{0x150, 0x1, [@m_mirred={0x14c, 0x10, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8, 0x2, 0x80, 0xd1}, 0x2, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x24c7, 0x81, 0x8, 0x2, 0xc}, 0x1, r10}}]}, {0xe0, 0x6, "4955eb461a58fb5c454c942c5d9a9f38c10c9027e59eeece0c604b36a04ff1e847ef93faa60d683452e95c3205506a0de1af669ce5c3f46330c37c1329e387914a0b29ec488501ede926f0692d2e1d93ff2c1a3859ed3a6f7c09aae250dac32f90177f2a1857eb5455f5b70824297563b724daf4f4112485c044fd86098ce58f1e0011a99cb5e1839032aeb443296d9898954db4e3ab728b105a0da3ebd0222d1792d8b258ec1f8bb46df7a49340b7ec1f0878839045679844b6c74802ba17b2d246578f67d1bda2738cc370dbb6ca0d04aca1186e9fe66e4fa7b83a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x164}}, 0x0) 555.694961ms ago: executing program 0 (id=2813): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_NEWDST={0x84, 0x13, [{0x8, 0x0, 0x1}, {0x48}, {0x999f}, {}, {0xa67}, {0x9}, {0xa7}, {0x831}, {0x2}, {0x6, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x2}, {0xc}, {0x4, 0x0, 0x1}, {0xffb6b, 0x0, 0x1}, {0x5}, {0x101}, {}, {0x7}, {0x208}, {0x3, 0x0, 0x1}, {0x8}, {0x7}, {0xb, 0x0, 0x1}, {0x2}, {0x7f, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x8f, 0x0, 0x1}, {0xd4}, {0x6, 0x0, 0x1}]}]}, 0xa0}}, 0x4000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0x4, &(0x7f00000003c0)=@framed={{}, [@alu={0x3, 0x1, 0xd, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000400)='syzkaller\x00', 0x2}, 0x90) 549.715278ms ago: executing program 4 (id=2814): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x33}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @dev, @mcast2}}}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000003f00070113a769d500000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000080007"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000020201"], 0x28}, 0x1, 0x0, 0x0, 0x4000008}, 0x40) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[], 0x20}}, 0x0) 416.877715ms ago: executing program 1 (id=2815): r0 = socket(0xa, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={r1, 0x0, 0x0, 0xe}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pS \x00'}, 0x20) ioctl$XFS_IOC_SCRUBV_METADATA(r6, 0xc0285840, &(0x7f0000000f40)={0x400, 0x8, 0x40, 0x0, 0x4, 0x9, 0x0, &(0x7f0000000e80)=[{0x9, 0x101, 0x1}, {0x2, 0x101, 0x4456}, {0x1b, 0x0, 0xb7e}, {0xd, 0x101, 0x4}, {0x1a, 0x0, 0x10000}, {0xe, 0x101, 0x6}, {0xd, 0x101, 0x2}, {0x18, 0x101, 0x4}, {0x1b, 0xfe, 0x7}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}}, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c00), 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x429, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x27, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xac751276f1438fd0}}, @jmp={0x5, 0x0, 0x6, 0x1, 0x8, 0xffffffffffffffe0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_val={0x18, 0x4, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}, @generic={0x5, 0xe, 0x3, 0x401, 0x56a8}, @jmp={0x5, 0x0, 0x9, 0x9, 0xa, 0x50, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000ac0)='GPL\x00', 0x5, 0xe1, &(0x7f0000000b00)=""/225, 0x41000, 0x56, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c40)={0x2, 0xe, 0xc9, 0x7fff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000d00)=[r10], &(0x7f0000000d40)=[{0x5, 0x3, 0x7, 0x2}, {0x0, 0x1, 0xe, 0x9}, {0x5, 0x1, 0x7, 0xc}, {0x5, 0x3, 0x5, 0x9}, {0x1, 0x4, 0x8, 0xb}, {0x5, 0x5, 0xb, 0xc}, {0x2, 0x3, 0x2, 0x3}, {0x1, 0x5, 0x0, 0xb}], 0x10, 0x1}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x44, 0x6, 0x520, 0x138, 0x0, 0x138, 0x208, 0x0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x3a}, 0xff, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x138}}, {{@ip={@loopback, @remote, 0xffffff00, 0x0, 'macvtap0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6, 0x1, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x2, @multicast2}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x24}, 0xffffffff, 0xff, 'veth0_to_bond\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0xff, 0x3, 0x19}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x7fff, 0x7, [0x29, 0x26, 0x35, 0xc, 0x15, 0x33, 0x21, 0xf, 0x38, 0x21, 0xa, 0x3, 0x3, 0x1f, 0x14, 0x37], 0x2, 0x8, 0x85}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'macvlan0\x00', {0xff}, {}, 0x33, 0x3}, 0x0, 0x170, 0x198, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x2, 0x4, 0x5, 0x6, 0x3, 0x2], 0x1, 0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@empty, [0xffffffff, 0xffffffff, 0xffffff00], @ipv4=@broadcast, [0xffffff00, 0xff000000, 0xffffff00], @ipv4=@broadcast, [0xff, 0xffffff00, 0xff, 0xff], @ipv4=@empty, [0x0, 0xff000000, 0xff000000, 0xff], 0x40, 0xf, 0x89, 0x4e22, 0x4e20, 0x4e22, 0x4e22, 0x40}, 0x0, 0x8c}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x6}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'lo\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x4, 0x7}, {0x0, 0x6, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x580) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x80) 338.741615ms ago: executing program 0 (id=2816): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 204.643054ms ago: executing program 4 (id=2817): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x300}, @TCA_FQ_QUANTUM={0xffffffffffffff0f}]}}]}, 0x48}}, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x5, 0x4) 37.734593ms ago: executing program 2 (id=2818): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000200000000000000000000008500000087000000850000000500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f0000005280)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="5767c331e895cd135c5b7feeffd9", 0x0, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 36.186989ms ago: executing program 1 (id=2819): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x2, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x5}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x6}]}}]}, 0x48}}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000000c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x2, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x5}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x6}]}}]}, 0x48}}, 0x4890) (async) socket$packet(0x11, 0x3, 0x300) (async) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000000c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) (async) 20.498576ms ago: executing program 3 (id=2820): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484cb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x7fff}]}}}]}, 0x3c}}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000080)={&(0x7f0000000040)=""/47, 0x2f, 0xff, 0x293}) 0s ago: executing program 4 (id=2821): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x9, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x1, 0x8, 0x0, 0x0, 0x8, 0x8}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) readv(r0, &(0x7f0000000000), 0x0) kernel console output (not intermixed with test programs): ] netlink: 'syz.2.618': attribute type 1 has an invalid length. [ 160.712101][ T8248] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.765505][ T8258] xt_cluster: node mask cannot exceed total number of nodes [ 161.018385][ T8272] bridge_slave_1: left allmulticast mode [ 161.041820][ T8272] bridge_slave_1: left promiscuous mode [ 161.070035][ T8272] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.105055][ T8272] bridge_slave_0: left allmulticast mode [ 161.145306][ T8272] bridge_slave_0: left promiscuous mode [ 161.161938][ T8272] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.169813][ T4943] Bluetooth: hci4: link tx timeout [ 161.177527][ T4943] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.926640][ T8318] xt_hashlimit: size too large, truncated to 1048576 [ 162.090904][ T5627] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 162.090962][ T5637] Bluetooth: hci0: command 0x0c1a tx timeout [ 162.731889][ T5637] Bluetooth: hci4: link tx timeout [ 162.738023][ T5637] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 162.762710][ T8366] Bluetooth: MGMT ver 1.23 [ 162.780994][ T8366] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 162.899835][ T8372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.916718][ T8372] __nla_validate_parse: 12 callbacks suppressed [ 162.916736][ T8372] netlink: 100 bytes leftover after parsing attributes in process `syz.4.652'. [ 162.954468][ T8374] netlink: 9 bytes leftover after parsing attributes in process `syz.3.649'. [ 163.037342][ T8377] netlink: 5 bytes leftover after parsing attributes in process `syz.3.649'. [ 163.213583][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 163.307064][ T8389] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 163.376159][ T8391] netlink: 'syz.4.658': attribute type 1 has an invalid length. [ 163.609792][ T8377] 0ªî{X¹¦: renamed from gretap0 [ 163.670506][ T8377] 0ªî{X¹¦: entered allmulticast mode [ 163.688867][ T8377] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 163.758545][ T8396] bridge1: entered allmulticast mode [ 163.766101][ T8405] netlink: 'syz.0.661': attribute type 1 has an invalid length. [ 163.923427][ T8412] netlink: 'syz.2.663': attribute type 9 has an invalid length. [ 164.448578][ T8441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.671'. [ 164.465052][ T8441] netlink: 80 bytes leftover after parsing attributes in process `syz.2.671'. [ 164.493490][ T8441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.671'. [ 164.560217][ T8441] ip6gre2: entered allmulticast mode [ 164.582213][ T57] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 164.746337][ T8454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.609076][ T8450] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.863861][ T8503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.686'. [ 167.954128][ T8508] netlink: 40 bytes leftover after parsing attributes in process `syz.4.686'. [ 167.989139][ T8503] 8021q: adding VLAN 0 to HW filter on device bond4 [ 167.997499][ T8512] netlink: 'syz.3.688': attribute type 3 has an invalid length. [ 168.150453][ T8516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.690'. [ 168.463907][ T8535] netlink: 'syz.3.695': attribute type 4 has an invalid length. [ 168.491074][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 168.512554][ T8535] netlink: 17 bytes leftover after parsing attributes in process `syz.3.695'. [ 168.548203][ T8535] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.695'. [ 168.651804][ T8544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.698'. [ 168.917632][ T8556] netlink: 32 bytes leftover after parsing attributes in process `syz.3.700'. [ 169.276397][ T8568] sctp: [Deprecated]: syz.4.706 (pid 8568) Use of int in max_burst socket option deprecated. [ 169.276397][ T8568] Use struct sctp_assoc_value instead [ 169.492393][ T8580] IPv6: NLM_F_CREATE should be specified when creating new route [ 169.512214][ T8580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.710'. [ 169.606545][ T8584] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:0 [ 169.714275][ T8591] netlink: 52 bytes leftover after parsing attributes in process `syz.3.713'. [ 169.888469][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 169.898486][ T8601] tipc: New replicast peer: 255.255.255.255 [ 169.926189][ T8601] tipc: Enabled bearer , priority 10 [ 169.983955][ T8600] team_slave_0 (unregistering): left promiscuous mode [ 169.995655][ T8600] team0: Port device team_slave_0 removed [ 170.394948][ T8625] Cannot find add_set index 65532 as target [ 170.681311][ T8636] netlink: 108 bytes leftover after parsing attributes in process `syz.1.723'. [ 170.808400][ T8604] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 171.043019][ T24] tipc: Node number set to 479818193 [ 171.339843][ T24] IPVS: starting estimator thread 0... [ 171.451871][ T8669] IPVS: using max 26 ests per chain, 62400 per kthread [ 171.871445][ T8699] bond5: entered promiscuous mode [ 171.907124][ T8702] macvlan5: entered promiscuous mode [ 171.919222][ T8702] macvlan5: entered allmulticast mode [ 171.935563][ T8702] bond5: (slave macvlan5): Opening slave failed [ 172.009308][ T8708] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 172.010947][ T4943] Bluetooth: hci0: command 0x0c1a tx timeout [ 172.363120][ T8725] syzkaller0: entered promiscuous mode [ 172.375168][ T8725] syzkaller0: entered allmulticast mode [ 172.713269][ T8733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.445736][ T8766] __nla_validate_parse: 6 callbacks suppressed [ 173.445757][ T8766] netlink: 16 bytes leftover after parsing attributes in process `syz.0.747'. [ 173.837290][ T8781] netlink: 'syz.3.753': attribute type 1 has an invalid length. [ 173.936125][ T8782] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 173.957053][ T8782] bond1 (unregistering): Released all slaves [ 174.063952][ T8781] bond4: entered promiscuous mode [ 174.073280][ T8781] 8021q: adding VLAN 0 to HW filter on device bond4 [ 174.127811][ T8793] 8021q: adding VLAN 0 to HW filter on device bond4 [ 174.144596][ T8793] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 174.157693][ T8793] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 174.171773][ T8793] bond4: (slave ip6gre1): making interface the new active one [ 174.179503][ T8793] ip6gre1: entered promiscuous mode [ 174.187840][ T8793] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 174.205093][ T8803] netlink: 108 bytes leftover after parsing attributes in process `syz.1.758'. [ 174.529199][ T8811] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 174.569363][ T8811] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 174.594658][ T8811] gretap2: entered promiscuous mode [ 174.610272][ T8811] gretap2: entered allmulticast mode [ 175.128512][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.770'. [ 175.130305][ T8838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.770'. [ 175.196133][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.770'. [ 175.228809][ T8838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.770'. [ 175.259877][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.772'. [ 175.739567][ T8856] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 175.753127][ T8854] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 175.932322][ T8886] netlink: 'syz.1.780': attribute type 8 has an invalid length. [ 176.088990][ T8878] syzkaller0: entered promiscuous mode [ 176.106618][ T8878] syzkaller0: entered allmulticast mode [ 176.287475][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.784'. [ 176.318314][ T8903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.784'. [ 176.411596][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 176.423455][ T8903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.784'. [ 176.434483][ T8903] netlink: 'syz.2.784': attribute type 1 has an invalid length. [ 176.452328][ T8903] netlink: 'syz.2.784': attribute type 1 has an invalid length. [ 176.463810][ T8903] netlink: 'syz.2.784': attribute type 2 has an invalid length. [ 177.929385][ T8893] : renamed from bond0 (while UP) [ 178.232906][ T8915] tipc: Started in network mode [ 178.259587][ T8915] tipc: Node identity ac14140f, cluster identity 4711 [ 178.290043][ T8915] tipc: New replicast peer: 255.255.255.255 [ 178.323976][ T8915] tipc: Enabled bearer , priority 10 [ 178.335349][ T1650] block nbd1: Possible stuck request ffff888027bc5080: control (read@0,4096B). Runtime 30 seconds [ 178.902985][ T8954] __nla_validate_parse: 2 callbacks suppressed [ 178.903006][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'. [ 179.878235][ T8987] netlink: 24 bytes leftover after parsing attributes in process `syz.4.807'. [ 180.075917][ T8989] sctp: [Deprecated]: syz.4.808 (pid 8989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.075917][ T8989] Use struct sctp_sack_info instead [ 180.258526][ T8991] netlink: 'syz.4.809': attribute type 3 has an invalid length. [ 180.266826][ T8991] netlink: 224 bytes leftover after parsing attributes in process `syz.4.809'. [ 180.579804][ T8970] geneve2: entered promiscuous mode [ 180.590064][ T8978] tun0: tun_chr_ioctl cmd 1074025675 [ 180.601922][ T8978] tun0: persist disabled [ 180.627836][ T5764] tipc: Node number set to 2886997007 [ 180.915843][ T8996] bond3: option lp_interval: invalid value (0) [ 180.945676][ T8996] bond3: option lp_interval: allowed values 1 - 2147483647 [ 180.958476][ T8996] bond3 (unregistering): Released all slaves [ 181.050257][ T9009] netlink: 'syz.1.814': attribute type 12 has an invalid length. [ 181.098247][ T9000] tipc: Enabling of bearer rejected, already enabled [ 181.106472][ T4943] block nbd3: Receive control failed (result -32) [ 181.435738][ T9016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.816'. [ 181.567920][ T9027] netlink: 152 bytes leftover after parsing attributes in process `syz.1.819'. [ 181.642731][ T9031] syzkaller0: entered promiscuous mode [ 181.661312][ T9031] syzkaller0: entered allmulticast mode [ 181.676240][ T9031] netlink: ct family unspecified [ 181.685865][ T9031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.836642][ T9035] netlink: 'syz.4.822': attribute type 21 has an invalid length. [ 181.917337][ T9039] netlink: 170676 bytes leftover after parsing attributes in process `syz.1.821'. [ 181.946270][ T9039] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 181.956084][ T9039] openvswitch: netlink: Message has 512 unknown bytes. [ 182.005439][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'. [ 182.136087][ T9013] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 182.209388][ T9046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.825'. [ 182.219094][ T9046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.227929][ T9046] IPv6: NLM_F_CREATE should be set when creating new route [ 182.235322][ T9046] IPv6: NLM_F_CREATE should be set when creating new route [ 182.282871][ T9049] TCP: TCP_TX_DELAY enabled [ 182.519131][ T9065] Cannot find del_set index 4 as target [ 182.676878][ T9076] IPv6: Can't replace route, no match found [ 182.706397][ T9076] IPv6: Can't replace route, no match found [ 182.712570][ T9075] IPv6: Can't replace route, no match found [ 182.742990][ T9075] IPv6: Can't replace route, no match found [ 182.769610][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.834'. [ 182.788162][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.834'. [ 183.625201][ T9130] netlink: 'syz.2.848': attribute type 1 has an invalid length. [ 183.814198][ T9130] bond3: (slave gretap1): making interface the new active one [ 183.835267][ T9130] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 183.857322][ T9137] netlink: 'syz.0.851': attribute type 2 has an invalid length. [ 183.966340][ T9130] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.209230][ T9152] __nla_validate_parse: 6 callbacks suppressed [ 184.209250][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.854'. [ 184.266036][ T9152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.854'. [ 184.448231][ T9165] netlink: 'syz.3.857': attribute type 1 has an invalid length. [ 184.550644][ T9175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.860'. [ 184.873108][ T9194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 184.931321][ T9201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 185.202705][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.869'. [ 185.305200][ T9225] netlink: 'syz.0.870': attribute type 1 has an invalid length. [ 185.397407][ T9225] syzkaller1: entered promiscuous mode [ 185.410243][ T9225] syzkaller1: entered allmulticast mode [ 185.436282][ T9219] syzkaller0: entered promiscuous mode [ 185.447451][ T9219] syzkaller0: entered allmulticast mode [ 185.559346][ T9235] netlink: 36 bytes leftover after parsing attributes in process `syz.4.875'. [ 185.627472][ T9235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.875'. [ 185.896630][ T9249] netlink: 28 bytes leftover after parsing attributes in process `syz.4.881'. [ 185.954941][ T9250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.880'. [ 185.986107][ T9250] netlink: 'syz.2.880': attribute type 1 has an invalid length. [ 185.994344][ T9250] netlink: 'syz.2.880': attribute type 2 has an invalid length. [ 186.130705][ T9262] netlink: 'syz.4.884': attribute type 1 has an invalid length. [ 186.564604][ T9292] tipc: Enabling of bearer rejected, failed to enable media [ 186.608652][ T9292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.622716][ T9292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.979147][ T9314] netlink: 'syz.1.897': attribute type 10 has an invalid length. [ 187.018187][ T9314] macsec0: left promiscuous mode [ 187.294084][ T9334] netlink: 'syz.2.901': attribute type 3 has an invalid length. [ 187.365339][ T9338] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 187.365339][ T9338] Please contact the netfilter-devel mailing list or update your nftables rules. [ 187.410709][ T9334] syzkaller0: entered promiscuous mode [ 187.440429][ T9334] syzkaller0: entered allmulticast mode [ 187.847561][ T9346] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 187.864927][ T9361] netlink: 'syz.4.907': attribute type 2 has an invalid length. [ 188.375134][ T9390] netlink: 'syz.0.918': attribute type 83 has an invalid length. [ 188.577880][ T9395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.743593][ T9405] bond0: Unable to set down delay as MII monitoring is disabled [ 188.763036][ T9405] bond0 (unregistering): Released all slaves [ 188.847349][ T809] hid-generic 0005:10CF:0000.0001: hidraw0: BLUETOOTH HID v0.07 Device [syz0] on aa:aa:aa:aa:aa:aa [ 188.875613][ T9417] xt_socket: unknown flags 0x50 [ 189.257643][ T9435] __nla_validate_parse: 18 callbacks suppressed [ 189.257664][ T9435] netlink: 256 bytes leftover after parsing attributes in process `syz.4.928'. [ 189.285673][ T9435] netlink: 'syz.4.928': attribute type 9 has an invalid length. [ 189.416373][ T9445] netlink: 'syz.2.932': attribute type 4 has an invalid length. [ 189.445013][ T9445] netlink: 20 bytes leftover after parsing attributes in process `syz.2.932'. [ 189.463816][ T9447] netlink: 32 bytes leftover after parsing attributes in process `syz.3.931'. [ 189.512933][ T9445] netlink: 7 bytes leftover after parsing attributes in process `syz.2.932'. [ 190.018088][ T9431] infiniband syz0: set active [ 190.033205][ T9431] infiniband syz0: added ipvlan1 [ 190.055910][ T9431] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 190.066078][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.937'. [ 190.099073][ T9431] infiniband syz0: Couldn't open port 1 [ 190.116591][ T9431] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 190.169687][ T9431] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 190.219265][ T9431] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 190.275203][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.939'. [ 190.400906][ T9477] geneve2: entered promiscuous mode [ 190.461672][ T9431] RDS/IB: syz0: added [ 190.484561][ T9431] smc: adding ib device syz0 with port count 1 [ 190.519081][ T9431] smc: ib device syz0 port 1 has no pnetid [ 191.375618][ T9528] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 191.614074][ T9536] netlink: 'syz.1.953': attribute type 11 has an invalid length. [ 192.159071][ T9554] netlink: 'syz.2.957': attribute type 2 has an invalid length. [ 192.187054][ T9554] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.957'. [ 192.416351][ T9566] syzkaller0: entered promiscuous mode [ 192.446110][ T9566] syzkaller0: entered allmulticast mode [ 192.820482][ T9591] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 192.990041][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.973'. [ 193.011534][ T9599] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.051218][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 193.142115][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'. [ 193.255856][ T9603] bridge3: entered promiscuous mode [ 193.293761][ T9603] bridge3: entered allmulticast mode [ 193.398968][ T9616] netlink: 80 bytes leftover after parsing attributes in process `syz.4.977'. [ 193.511416][ T9620] netlink: 'syz.3.979': attribute type 1 has an invalid length. [ 193.599269][ T9620] bond5: entered promiscuous mode [ 193.605133][ T9620] 8021q: adding VLAN 0 to HW filter on device bond5 [ 193.835456][ T9625] bond5: (slave bridge3): making interface the new active one [ 193.856770][ T9625] bridge3: entered promiscuous mode [ 193.881478][ T9625] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 193.930599][ T9632] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 193.944718][ T9629] Cannot find del_set index 4 as target [ 194.342045][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.395103][ T9645] netlink: 'syz.4.987': attribute type 1 has an invalid length. [ 194.409036][ T9645] netlink: 'syz.4.987': attribute type 2 has an invalid length. [ 194.427770][ T9648] netlink: 'syz.4.987': attribute type 1 has an invalid length. [ 194.440917][ T9648] netlink: 'syz.4.987': attribute type 2 has an invalid length. [ 194.557423][ T9655] tipc: Enabling not permitted [ 194.571269][ T9656] __nla_validate_parse: 3 callbacks suppressed [ 194.571288][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.990'. [ 194.589520][ T9655] tipc: Enabling of bearer rejected, failed to enable media [ 194.602117][ T9656] netlink: 'syz.3.990': attribute type 5 has an invalid length. [ 194.620150][ T9656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.990'. [ 194.833512][ T9665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.918662][ T9667] geneve3: entered promiscuous mode [ 194.931822][ T9673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.950973][ T9667] geneve3: entered allmulticast mode [ 194.959381][ T153] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 194.972112][ T153] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 194.984469][ T153] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 195.005521][ T153] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 195.476218][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1001'. [ 195.672654][ T9706] netlink: 'syz.2.1004': attribute type 1 has an invalid length. [ 195.737047][ T9706] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.791724][ T9703] bond5: (slave veth0_to_bond): making interface the new active one [ 195.823961][ T9703] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 195.874037][ T9703] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1004'. [ 195.907103][ T9713] vxcan1: entered promiscuous mode [ 195.916686][ T9706] bond5: entered promiscuous mode [ 195.925278][ T9706] veth0_to_bond: entered promiscuous mode [ 195.938077][ T9706] bond5: entered allmulticast mode [ 195.956986][ T9706] veth0_to_bond: entered allmulticast mode [ 196.140259][ T9722] nftables ruleset with unbound set [ 196.170500][ T9725] netlink: 'syz.2.1009': attribute type 1 has an invalid length. [ 196.417634][ T9730] bond6: (slave geneve2): making interface the new active one [ 196.429002][ T9730] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 196.509234][ T9731] bond6: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 196.555215][ T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 196.582742][ T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 196.601150][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1012'. [ 196.610668][ T9728] syzkaller0: entered promiscuous mode [ 196.616636][ T9728] syzkaller0: entered allmulticast mode [ 196.687831][ T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 196.707197][ T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 197.063695][ T9773] syzkaller0: entered promiscuous mode [ 197.079423][ T9773] syzkaller0: entered allmulticast mode [ 197.191277][ T9777] bond7: entered promiscuous mode [ 197.207261][ T9777] bond7: entered allmulticast mode [ 197.213650][ T9777] 8021q: adding VLAN 0 to HW filter on device bond7 [ 197.264072][ T9775] gre2: entered promiscuous mode [ 197.312607][ T9789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1028'. [ 197.323540][ T9792] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1026'. [ 197.347787][ T9789] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1028'. [ 197.363069][ T9791] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1027'. [ 197.383848][ T9791] openvswitch: netlink: Message has 512 unknown bytes. [ 197.388278][ T9787] validate_nla: 1 callbacks suppressed [ 197.388328][ T9787] netlink: 'syz.2.1026': attribute type 21 has an invalid length. [ 197.394620][ T9791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1027'. [ 197.686559][ T9809] netlink: 'syz.4.1032': attribute type 1 has an invalid length. [ 197.718441][ T9809] syzkaller0: entered promiscuous mode [ 197.744206][ T9809] syzkaller0: entered allmulticast mode [ 197.763922][ T9789] syzkaller1: entered promiscuous mode [ 197.781225][ T9789] syzkaller1: entered allmulticast mode [ 198.237483][ T9835] tipc: Enabled bearer , priority 10 [ 198.467002][ T9842] tap0: tun_chr_ioctl cmd 1074025676 [ 198.489006][ T9842] tap0: owner set to 0 [ 198.511616][ T9842] netlink: 'syz.0.1040': attribute type 83 has an invalid length. [ 198.534206][ T9849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.939771][ T9878] xt_hashlimit: size too large, truncated to 1048576 [ 199.036547][ T9883] netlink: 'syz.1.1052': attribute type 13 has an invalid length. [ 199.061339][ T9881] netlink: 'syz.1.1052': attribute type 13 has an invalid length. [ 199.386939][ T9896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.633954][ T9912] __nla_validate_parse: 16 callbacks suppressed [ 199.633976][ T9912] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1061'. [ 199.964266][ T9933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1068'. [ 200.043503][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1067'. [ 200.153637][ T153] tipc: Resetting bearer [ 200.176917][ T9941] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1070'. [ 200.503385][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'. [ 200.996566][ T9981] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.300260][T10001] veth1_macvtap: left promiscuous mode [ 201.383045][T10009] netlink: 'syz.3.1088': attribute type 1 has an invalid length. [ 201.402855][T10010] netlink: 'syz.1.1090': attribute type 1 has an invalid length. [ 201.524787][T10009] bond8: entered promiscuous mode [ 201.530460][T10009] 8021q: adding VLAN 0 to HW filter on device bond8 [ 201.581737][T10017] netlink: 'syz.4.1091': attribute type 83 has an invalid length. [ 201.939660][ T5288] veth0_vlan: left promiscuous mode [ 202.029321][ T7997] veth0_vlan: entered promiscuous mode [ 202.315071][T10060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1104'. [ 202.343348][T10062] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1103'. [ 202.360566][ T3358] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 205.188222][T10053] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 205.397921][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1117'. [ 205.420021][T10115] netlink: 'syz.2.1117': attribute type 30 has an invalid length. [ 205.455539][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1117'. [ 205.570116][T10127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.604047][T10129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1120'. [ 206.463225][T10175] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1127'. [ 206.511438][T10178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1128'. [ 206.538449][T10178] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 206.849739][T10193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1133'. [ 206.868213][T10195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1132'. [ 207.072605][T10203] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1135'. [ 207.124292][T10207] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1136'. [ 207.152531][T10207] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1136'. [ 207.732054][T10242] netlink: 'syz.0.1146': attribute type 3 has an invalid length. [ 207.887311][T10253] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 207.965003][T10255] openvswitch: netlink: Duplicate or invalid key (type 0). [ 207.972512][T10255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.172946][T10268] Cannot find add_set index 2 as target [ 208.205253][T10270] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 208.290072][T10276] sctp: [Deprecated]: syz.3.1157 (pid 10276) Use of int in max_burst socket option. [ 208.290072][T10276] Use struct sctp_assoc_value instead [ 208.412560][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.440947][ T1650] block nbd1: Possible stuck request ffff888027bc5080: control (read@0,4096B). Runtime 60 seconds [ 208.579276][T10283] netlink: 'syz.2.1160': attribute type 1 has an invalid length. [ 208.699009][T10292] netlink: 'syz.4.1163': attribute type 1 has an invalid length. [ 208.729469][T10293] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 208.736989][T10283] 8021q: adding VLAN 0 to HW filter on device bond7 [ 208.843609][T10292] bond6: entered promiscuous mode [ 208.849680][T10292] 8021q: adding VLAN 0 to HW filter on device bond6 [ 208.862166][T10302] bond6: entered allmulticast mode [ 208.895556][T10292] bond6: (slave bridge0): making interface the new active one [ 208.903385][T10292] bridge0: entered promiscuous mode [ 208.908930][T10292] bridge0: entered allmulticast mode [ 208.917877][T10292] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 209.023872][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.041847][T10307] macvlan0: entered promiscuous mode [ 209.201468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 209.646828][T10344] netlink: 'syz.1.1178': attribute type 4 has an invalid length. [ 209.697858][T10349] netlink: 'syz.1.1178': attribute type 4 has an invalid length. [ 210.225654][T10383] netlink: 'syz.4.1185': attribute type 1 has an invalid length. [ 210.319165][T10386] netlink: 'syz.2.1188': attribute type 7 has an invalid length. [ 210.330354][T10386] netlink: 'syz.2.1188': attribute type 8 has an invalid length. [ 210.803817][T10396] veth3: entered allmulticast mode [ 210.973409][ T13] wlan1: Trigger new scan to find an IBSS to join [ 211.111605][T10420] __nla_validate_parse: 12 callbacks suppressed [ 211.111625][T10420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1196'. [ 211.182155][T10424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1197'. [ 211.208414][T10424] netlink: 'syz.4.1197': attribute type 8 has an invalid length. [ 211.437670][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1189'. [ 211.447332][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1189'. [ 211.470681][T10397] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 211.507564][T10397] gretap2: entered promiscuous mode [ 211.515809][T10397] gretap2: entered allmulticast mode [ 211.771916][T10350] Bluetooth: hci3: command 0x0406 tx timeout [ 211.792305][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.798523][ T5639] Bluetooth: hci1: command 0x0406 tx timeout [ 211.805854][T10350] Bluetooth: hci2: command 0x0401 tx timeout [ 211.935335][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'. [ 212.115681][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.141112][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.617219][T10503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1219'. [ 212.662180][T10495] syzkaller0: entered promiscuous mode [ 212.676099][T10495] syzkaller0: entered allmulticast mode [ 212.935445][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1223'. [ 212.945520][T10522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1223'. [ 213.945352][ T3337] wlan1: Trigger new scan to find an IBSS to join [ 215.031606][T10553] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1229'. [ 215.188816][T10568] x_tables: duplicate underflow at hook 1 [ 215.237847][T10568] x_tables: duplicate underflow at hook 1 [ 216.071693][T10610] vcan1: entered promiscuous mode [ 216.084278][T10610] vcan1: entered allmulticast mode [ 216.148229][T10612] netlink: 'syz.2.1243': attribute type 2 has an invalid length. [ 216.192341][T10616] netlink: 'syz.4.1244': attribute type 3 has an invalid length. [ 216.548641][T10626] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1247'. [ 216.589292][T10626] netlink: 'syz.4.1247': attribute type 1 has an invalid length. [ 216.622938][T10626] netlink: 'syz.4.1247': attribute type 1 has an invalid length. [ 216.679942][T10626] x_tables: duplicate underflow at hook 2 [ 216.980890][ T13] wlan1: Trigger new scan to find an IBSS to join [ 217.093623][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1259'. [ 217.610132][T10692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1265'. [ 217.654508][T10694] netlink: 83 bytes leftover after parsing attributes in process `syz.3.1266'. [ 217.705834][T10694] syzkaller0: entered promiscuous mode [ 217.720913][T10694] syzkaller0: entered allmulticast mode [ 217.928347][ T153] wlan1: Creating new IBSS network, BSSID 6a:8b:e2:ff:14:68 [ 217.961915][T10710] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20002 [ 218.192375][T10722] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.618979][T10753] tipc: Started in network mode [ 218.643594][T10756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1281'. [ 218.654364][T10753] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 218.677050][T10753] tipc: Enabled bearer , priority 10 [ 218.863113][T10770] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 218.873328][T10768] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1284'. [ 218.894108][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1285'. [ 219.135421][T10790] x_tables: duplicate underflow at hook 2 [ 219.243828][T10795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1293'. [ 219.266660][T10795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1293'. [ 219.322774][T10803] syzkaller0: entered promiscuous mode [ 219.335648][T10803] syzkaller0: entered allmulticast mode [ 219.389690][T10803] tipc: Enabled bearer , priority 0 [ 219.428463][T10801] tipc: Resetting bearer [ 219.435373][T10808] nbd: illegal input index -1 [ 219.440477][T10808] nbd: illegal input index -1 [ 219.460173][T10808] nbd: illegal input index -1 [ 219.465280][T10808] nbd: illegal input index -1 [ 219.470659][T10808] nbd: illegal input index -1 [ 219.476378][T10808] nbd: illegal input index -1 [ 219.488680][T10801] tipc: Disabling bearer [ 219.496264][T10808] nbd: illegal input index -1 [ 219.503160][T10808] nbd: illegal input index -1 [ 219.518321][T10808] nbd: illegal input index -1 [ 219.532385][T10808] nbd: illegal input index -1 [ 219.545637][T10808] nbd: illegal input index -1 [ 219.571156][T10808] nbd: illegal input index -1 [ 219.601848][T10808] nbd: illegal input index -1 [ 219.656309][T10808] nbd: illegal input index -1 [ 219.682010][T10808] nbd: illegal input index -1 [ 219.715811][T10808] nbd: illegal input index -1 [ 219.734344][T10808] nbd: illegal input index -1 [ 219.764193][T10808] nbd: illegal input index -1 [ 219.820376][T10808] nbd: illegal input index -1 [ 219.838062][T10828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1303'. [ 219.841287][T10808] nbd: illegal input index -1 [ 219.858210][ T7997] tipc: Node number set to 4269801492 [ 219.865471][T10808] nbd: illegal input index -1 [ 219.879642][T10808] nbd: illegal input index -1 [ 219.894922][T10808] nbd: illegal input index -1 [ 219.912051][T10808] nbd: illegal input index -1 [ 219.928958][T10808] nbd: illegal input index -1 [ 219.954336][T10808] nbd: illegal input index -1 [ 219.964464][T10808] nbd: illegal input index -1 [ 219.978406][T10808] nbd: illegal input index -1 [ 219.993844][T10808] nbd: illegal input index -1 [ 220.008889][T10808] nbd: illegal input index -1 [ 220.054401][T10808] nbd: illegal input index -1 [ 220.073917][T10808] nbd: illegal input index -1 [ 220.114214][T10808] nbd: illegal input index -1 [ 220.153369][T10842] netlink: 'syz.3.1307': attribute type 21 has an invalid length. [ 220.433038][T10849] unsupported nlmsg_type 40 [ 220.730717][T10876] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.852148][T10880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.032420][T10891] syzkaller0: entered promiscuous mode [ 221.047998][T10891] syzkaller0: entered allmulticast mode [ 221.824116][T10928] netlink: 'syz.2.1332': attribute type 1 has an invalid length. [ 221.849114][T10928] __nla_validate_parse: 5 callbacks suppressed [ 221.850051][T10928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1332'. [ 221.922005][T10930] netlink: 'syz.0.1335': attribute type 1 has an invalid length. [ 221.958900][T10934] sctp: [Deprecated]: syz.3.1337 (pid 10934) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.958900][T10934] Use struct sctp_sack_info instead [ 222.306443][T10944] team0: Device ipvlan3 failed to register rx_handler [ 222.481500][T10958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1341'. [ 222.492239][T10958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1341'. [ 222.540509][T10961] netlink: 'syz.3.1345': attribute type 83 has an invalid length. [ 222.713765][T10968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.730947][T10971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.798350][T10970] vcan0: entered promiscuous mode [ 222.819575][T10970] vcan0: entered allmulticast mode [ 222.830066][T10978] netlink: 'syz.4.1350': attribute type 28 has an invalid length. [ 222.841531][T10978] netlink: 'syz.4.1350': attribute type 3 has an invalid length. [ 222.849455][T10978] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1350'. [ 223.256675][T11000] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 223.299136][T11002] netlink: 772 bytes leftover after parsing attributes in process `syz.1.1357'. [ 223.911844][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1365'. [ 223.924761][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1365'. [ 223.992855][T11043] netlink: 'syz.2.1368': attribute type 2 has an invalid length. [ 224.029956][T11043] netlink: 'syz.2.1368': attribute type 2 has an invalid length. [ 224.060549][T11043] netlink: 67 bytes leftover after parsing attributes in process `syz.2.1368'. [ 224.166195][T11049] netlink: 'syz.3.1373': attribute type 9 has an invalid length. [ 224.667024][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1377'. [ 224.706070][T11066] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1377'. [ 224.752945][T11066] netlink: 'syz.1.1377': attribute type 9 has an invalid length. [ 224.837445][T11069] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 224.857009][T11070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.872797][T11070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.895138][T11070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.910660][T11070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.966854][T11077] nbd: must specify at least one socket [ 225.305899][T11099] vlan2: entered allmulticast mode [ 225.319790][T11099] bridge0: entered allmulticast mode [ 225.719694][T11121] netlink: 'syz.1.1392': attribute type 1 has an invalid length. [ 225.839083][T11121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.954835][T11126] bond1: (slave gretap1): making interface the new active one [ 225.986895][T11126] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 226.635517][T11166] syzkaller1: entered promiscuous mode [ 226.650883][T11166] syzkaller1: entered allmulticast mode [ 226.785961][T11166] 8021q: adding VLAN 0 to HW filter on device bond7 [ 226.911039][T11176] __nla_validate_parse: 8 callbacks suppressed [ 226.911059][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1407'. [ 227.139131][T11181] Bluetooth: MGMT ver 1.23 [ 227.167526][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'. [ 227.200880][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'. [ 227.520089][T11216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1419'. [ 227.559787][T11216] validate_nla: 2 callbacks suppressed [ 227.559806][T11216] netlink: 'syz.1.1419': attribute type 1 has an invalid length. [ 227.574180][T11216] netlink: 'syz.1.1419': attribute type 2 has an invalid length. [ 227.610995][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 227.624599][T11220] netlink: 'syz.2.1420': attribute type 8 has an invalid length. [ 227.818725][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1424'. [ 227.875972][T11234] netlink: 'syz.3.1426': attribute type 1 has an invalid length. [ 227.886407][T11234] netlink: 16102 bytes leftover after parsing attributes in process `syz.3.1426'. [ 227.910471][T11232] syzkaller0: entered promiscuous mode [ 227.925830][T11232] syzkaller0: entered allmulticast mode [ 228.026940][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1428'. [ 228.365706][T11251] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1429'. [ 228.403825][T11254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1430'. [ 228.460566][T11258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1432'. [ 228.760712][T11270] syzkaller1: entered promiscuous mode [ 228.764675][T11274] netlink: 'syz.2.1437': attribute type 8 has an invalid length. [ 228.773581][T11270] syzkaller1: entered allmulticast mode [ 229.313418][T11297] tipc: Started in network mode [ 229.318535][T11297] tipc: Node identity ac14142f, cluster identity 4711 [ 229.331455][T11297] tipc: New replicast peer: 0.0.0.0 [ 229.343817][T11297] tipc: Enabled bearer , priority 10 [ 229.556899][T11304] bond0: Device is already in use. [ 229.700178][T11308] bond8 (unregistering): Released all slaves [ 229.738364][T11303] ip6tnl0: Caught tx_queue_len zero misconfig [ 229.755613][T11304] netlink: 'syz.2.1447': attribute type 39 has an invalid length. [ 230.299764][T11341] lo: Caught tx_queue_len zero misconfig [ 230.448456][T11351] 8021q: VLANs not supported on gre0 [ 230.466555][T11354] netlink: 'syz.2.1461': attribute type 5 has an invalid length. [ 230.481037][ T7997] tipc: Node number set to 2886997039 [ 230.640457][T11359] netlink: 'syz.1.1463': attribute type 1 has an invalid length. [ 230.663924][T11365] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.682741][T11359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.875540][T11361] syzkaller1: entered promiscuous mode [ 230.887113][T11361] syzkaller1: entered allmulticast mode [ 231.210068][T11388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.702286][T11406] netlink: 'syz.4.1479': attribute type 21 has an invalid length. [ 231.716062][T11410] tipc: Enabling of bearer rejected, failed to enable media [ 231.729371][T11406] IPv6: NLM_F_CREATE should be specified when creating new route [ 232.167412][T11438] __nla_validate_parse: 12 callbacks suppressed [ 232.167430][T11438] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1488'. [ 232.236312][T11439] syzkaller0: entered promiscuous mode [ 232.251583][T11439] syzkaller0: entered allmulticast mode [ 232.468236][T11451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1493'. [ 232.504261][T11451] block nbd4: Unsupported socket: should be TCP or UNIX. [ 232.841372][T11468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1498'. [ 233.097279][T11485] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1502'. [ 234.124273][T11522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1511'. [ 234.191273][T11522] ipvlan2: entered allmulticast mode [ 234.209293][T11522] syz_tun: entered allmulticast mode [ 234.227783][T11525] IPVS: set_ctl: invalid protocol: 145 255.255.255.255:20004 [ 234.461091][T11540] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 235.026765][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'. [ 235.064844][T11566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'. [ 235.239023][T11568] hsr1: left promiscuous mode [ 235.250579][T11568] bond4: left promiscuous mode [ 235.258196][T11568] ip6gre1: left promiscuous mode [ 235.273425][T11568] bond5: left promiscuous mode [ 235.284249][T11568] bridge3: left promiscuous mode [ 235.304260][T11568] bond7: left promiscuous mode [ 235.310280][T11568] bond8: left promiscuous mode [ 235.319088][T11568] gretap2: left promiscuous mode [ 235.327051][T11570] netlink: 'syz.2.1524': attribute type 3 has an invalid length. [ 235.337473][T11570] netlink: 'syz.2.1524': attribute type 4 has an invalid length. [ 235.345563][T11570] netlink: 'syz.2.1524': attribute type 3 has an invalid length. [ 235.358721][T11567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.754429][T11588] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1529'. [ 236.334319][T11623] xt_CT: No such helper "pptp" [ 237.287284][T11659] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 237.306125][T11661] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1549'. [ 237.358994][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1548'. [ 237.384274][T11659] netlink: 'syz.2.1548': attribute type 10 has an invalid length. [ 237.407092][T11659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1548'. [ 237.433087][T11663] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 237.675290][T11668] dvmrp0: entered allmulticast mode [ 238.055604][T11699] netlink: zone id is out of range [ 238.073301][T11697] netlink: zone id is out of range [ 238.089813][T11703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1555'. [ 238.095166][T11697] netlink: zone id is out of range [ 238.104928][T11699] netlink: zone id is out of range [ 238.125480][T11699] netlink: zone id is out of range [ 238.153631][T11697] netlink: zone id is out of range [ 238.184819][T11699] netlink: zone id is out of range [ 238.205782][T11697] netlink: zone id is out of range [ 238.233117][T11699] netlink: zone id is out of range [ 238.269069][T11699] netlink: zone id is out of range [ 238.277240][T11711] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 238.389599][T11717] geneve3: entered promiscuous mode [ 238.409345][T11717] geneve3: entered allmulticast mode [ 238.472618][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1560'. [ 238.504617][ T1650] block nbd1: Possible stuck request ffff888027bc5080: control (read@0,4096B). Runtime 90 seconds [ 238.594106][T11723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1561'. [ 238.678659][T11723] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1561'. [ 239.064262][T11735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1564'. [ 239.097472][T11735] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 239.098117][T11740] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1566'. [ 239.688828][T11765] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.966676][T11789] xt_nfacct: accounting object `syz1' does not exist [ 239.993381][T11790] bond0: invalid NS target ff00:0:7bc7:fe28:5f22:8824:877b:d9d7 specified for addition [ 240.025459][T11790] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 240.529897][T11829] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1588'. [ 240.867326][T11850] IPv6: sit1: Disabled Multicast RS [ 240.925188][T11853] syzkaller0: entered promiscuous mode [ 240.932030][T11853] syzkaller0: entered allmulticast mode [ 241.087372][T11811] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 241.215101][T11866] syzkaller0: entered promiscuous mode [ 241.233424][T11866] syzkaller0: entered allmulticast mode [ 241.340404][T11873] tipc: Can't bind to reserved service type 0 [ 241.587432][T11886] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 241.836694][T11897] syzkaller0: entered promiscuous mode [ 241.842810][T11897] syzkaller0: entered allmulticast mode [ 242.306775][T11918] netlink: 'syz.1.1611': attribute type 1 has an invalid length. [ 242.354269][T11918] __nla_validate_parse: 7 callbacks suppressed [ 242.354287][T11918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1611'. [ 242.399200][T11926] ieee802154 phy1 wpan1: encryption failed: -90 [ 242.546114][T11934] syzkaller1: entered promiscuous mode [ 242.562124][T11934] syzkaller1: entered allmulticast mode [ 242.659874][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1617'. [ 242.953146][T11961] xt_hashlimit: overflow, rate too high: 0 [ 243.053955][T11958] netlink: 'syz.0.1621': attribute type 1 has an invalid length. [ 243.166229][T11966] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1622'. [ 243.269523][T11973] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1624'. [ 243.425038][T11980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1626'. [ 243.773315][T12000] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1631'. [ 243.796995][T12002] netlink: 'syz.2.1633': attribute type 1 has an invalid length. [ 243.819072][T12002] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1633'. [ 243.997046][T12010] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1636'. [ 244.032168][T12015] rdma_rxe: Failed to create IPv4 UDP tunnel [ 244.072850][ T7010] wlan1: failed to finalize CSA on link 0, disconnecting [ 244.154619][T12012] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 244.172604][ C0] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 244.280009][T12014] bond2 (unregistering): Released all slaves [ 244.577827][T12042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1645'. [ 245.377836][T12089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1655'. [ 245.614817][T12099] syzkaller0: entered promiscuous mode [ 245.634237][T12099] syzkaller0: entered allmulticast mode [ 245.674515][T12099] xt_recent: Unsupported userspace flags (000000b1) [ 245.818324][T12111] bond0: Device is already in use. [ 245.838073][T12111] tc action pedit unable to extract header offset for header type (0x5) [ 245.848039][T12111] tc action pedit unable to extract header offset for header type (0x5) [ 245.856516][T12111] tc action pedit unable to extract header offset for header type (0x5) [ 245.864943][T12111] tc action pedit unable to extract header offset for header type (0x5) [ 245.873385][T12111] tc action pedit unable to extract header offset for header type (0x5) [ 245.881811][T12111] tc action pedit unable to extract header offset for header type (0x5) [ 245.890214][T12111] tc action pedit unable to extract header offset for header type (0x5) [ 245.898641][T12111] tc action pedit unable to extract header offset for header type (0x5) [ 245.907053][T12111] tc action pedit unable to extract header offset for header type (0x5) [ 245.915474][T12111] tc action pedit unable to extract header offset for header type (0x5) [ 245.923901][T12111] net_ratelimit: 9 callbacks suppressed [ 245.923917][T12111] 0: reclassify loop, rule prio 0, protocol 800 [ 246.275491][T12131] netlink: 'syz.4.1669': attribute type 1 has an invalid length. [ 246.751348][T12148] sctp: [Deprecated]: syz.2.1675 (pid 12148) Use of int in max_burst socket option. [ 246.751348][T12148] Use struct sctp_assoc_value instead [ 247.172834][T12167] ip6gre1: entered allmulticast mode [ 248.154259][T12201] netlink: 'syz.0.1695': attribute type 39 has an invalid length. [ 248.167456][T12198] syzkaller0: entered promiscuous mode [ 248.174514][T12198] syzkaller0: entered allmulticast mode [ 248.309419][T12208] netlink: 'syz.4.1697': attribute type 3 has an invalid length. [ 248.323706][T12208] __nla_validate_parse: 7 callbacks suppressed [ 248.323724][T12208] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1697'. [ 248.351074][T12209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1692'. [ 248.491885][ T4943] Bluetooth: hci0: command 0x0c1a tx timeout [ 248.894370][ T8660] wlan1: Trigger new scan to find an IBSS to join [ 248.908645][ T8660] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x69 [ 248.980937][T12242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1707'. [ 248.986358][T12238] syzkaller0: entered promiscuous mode [ 248.994942][T12242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1707'. [ 249.006980][T12238] syzkaller0: entered allmulticast mode [ 249.067906][T12240] veth7: entered allmulticast mode [ 249.079709][T12245] netlink: 'syz.4.1709': attribute type 1 has an invalid length. [ 249.167517][T12245] veth7: entered allmulticast mode [ 249.192399][T12245] bond8: (slave veth7): Enslaving as an active interface with a down link [ 249.249907][T12251] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 249.296333][T12253] bond8: (slave veth0_to_bond): making interface the new active one [ 249.346765][T12253] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 249.514738][T12274] openvswitch: netlink: IP tunnel dst address not specified [ 249.687399][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1718'. [ 250.596279][T12290] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 250.803796][T12305] bridge6: entered promiscuous mode [ 250.809144][T12305] bridge6: entered allmulticast mode [ 251.771819][ T4943] Bluetooth: hci1: command 0x0406 tx timeout [ 251.778157][T12228] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 251.787479][T12242] netlink: 'syz.0.1707': attribute type 1 has an invalid length. [ 251.795945][T12242] netlink: 'syz.0.1707': attribute type 3 has an invalid length. [ 251.804258][T12242] netlink: 'syz.0.1707': attribute type 7 has an invalid length. [ 251.812457][T12242] netlink: 'syz.0.1707': attribute type 8 has an invalid length. [ 251.820373][T12242] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1707'. [ 251.830082][T12242] NCSI netlink: No device for ifindex 131092 [ 251.934374][ T79] wlan1: Trigger new scan to find an IBSS to join [ 252.065354][T12318] vlan2: entered allmulticast mode [ 252.077398][T12318] bond0: entered allmulticast mode [ 252.262901][T12336] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1733'. [ 252.277730][T12334] pim6reg: entered allmulticast mode [ 252.287897][T12334] pim6reg: left allmulticast mode [ 252.388040][T12336] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1733'. [ 252.445063][T12343] syzkaller1: entered promiscuous mode [ 252.476120][T12343] syzkaller1: entered allmulticast mode [ 252.668999][T12355] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1736'. [ 252.698681][T12351] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.708174][T12351] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.736701][T12357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.944976][T12369] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1742'. [ 253.143945][T12382] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 253.377684][T12397] pim6reg: entered allmulticast mode [ 253.423963][T12396] pim6reg: left allmulticast mode [ 253.603116][T12410] __nla_validate_parse: 3 callbacks suppressed [ 253.603142][T12410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1749'. [ 253.658176][T12401] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 253.685698][T12402] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 254.109871][T12412] syz.0.1751 (12412) used greatest stack depth: 17792 bytes left [ 254.314776][T12452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.584104][T12470] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1762'. [ 254.619127][T12470] nbd: illegal input index -8454144 [ 254.694406][T12470] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1762'. [ 254.971735][ T7010] wlan1: Trigger new scan to find an IBSS to join [ 254.990068][T12488] openvswitch: netlink: IPv6 tunnel dst address is zero [ 255.557100][T12506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1770'. [ 255.614708][T12511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1773'. [ 255.786321][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.883976][ T6988] wlan1: Creating new IBSS network, BSSID ce:f1:6e:41:37:ca [ 256.085755][T12534] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1779'. [ 256.188010][T12538] netlink: 'syz.2.1780': attribute type 3 has an invalid length. [ 256.231399][T12541] sctp: [Deprecated]: syz.3.1782 (pid 12541) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.231399][T12541] Use struct sctp_sack_info instead [ 256.248892][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1777'. [ 256.277515][T12541] sctp: [Deprecated]: syz.3.1782 (pid 12541) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.277515][T12541] Use struct sctp_sack_info instead [ 256.280487][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1777'. [ 256.351380][T12545] tc action pedit 'at' offset 4095 out of bounds [ 256.478463][T12549] bridge8: entered promiscuous mode [ 256.488116][T12549] bridge8: entered allmulticast mode [ 256.532760][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1786'. [ 256.735826][T12558] macvtap1: entered promiscuous mode [ 256.744575][T12558] vlan0: entered promiscuous mode [ 256.751611][T12558] macvtap1: entered allmulticast mode [ 256.757302][T12558] vlan0: entered allmulticast mode [ 256.763460][T12558] veth0_vlan: entered allmulticast mode [ 256.832335][T12563] bond9: (slave gretap0): Device is not bonding slave [ 256.839461][T12563] bond9: option active_slave: invalid value (gretap0) [ 256.853655][T12563] bond9 (unregistering): Released all slaves [ 256.906659][T12566] syzkaller0: entered promiscuous mode [ 256.929867][T12577] x_tables: duplicate underflow at hook 2 [ 256.937321][T12566] syzkaller0: entered allmulticast mode [ 257.221841][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1793'. [ 257.265636][ T7010] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.293247][ T7010] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.329370][ T7010] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.354574][ T7010] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.491928][T12602] geneve2: entered promiscuous mode [ 257.622992][T12612] syzkaller0: entered promiscuous mode [ 257.635843][T12612] syzkaller0: entered allmulticast mode [ 257.702733][T12611] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 257.720268][T12611] bond9: (slave lo): Enslaving as an active interface with an up link [ 257.767224][T12611] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 257.973003][T12630] 8021q: VLANs not supported on ip6tnl0 [ 258.066413][T12635] netlink: 'syz.0.1804': attribute type 9 has an invalid length. [ 258.192433][T12644] netlink: 'syz.2.1805': attribute type 1 has an invalid length. [ 258.331836][ T79] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 260.928139][T12629] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 261.135893][T12663] bridge0: Device is already in use. [ 261.143600][T12664] __nla_validate_parse: 3 callbacks suppressed [ 261.143618][T12664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1810'. [ 261.217085][T12670] netlink: 'syz.4.1813': attribute type 1 has an invalid length. [ 261.333388][T12670] bond9 (unregistering): Released all slaves [ 261.717458][T12692] syz_tun: entered allmulticast mode [ 261.734719][T12690] syz_tun: left allmulticast mode [ 262.139518][T12716] gretap2: entered promiscuous mode [ 262.161044][T12716] batman_adv: batadv0: Adding interface: gretap2 [ 262.183144][T12716] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 262.224629][T12716] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 262.489984][T12740] xt_ecn: cannot match TCP bits for non-tcp packets [ 262.575918][T12748] openvswitch: netlink: Message has 24 unknown bytes. [ 263.027892][T12778] netlink: 'syz.2.1846': attribute type 4 has an invalid length. [ 263.048266][T12782] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1847'. [ 263.060274][T12778] netlink: 'syz.2.1846': attribute type 1 has an invalid length. [ 263.070920][T12783] netlink: 'syz.0.1847': attribute type 1 has an invalid length. [ 263.078943][T12783] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1847'. [ 263.223981][T12795] netlink: 'syz.4.1849': attribute type 1 has an invalid length. [ 263.257186][T12795] netlink: 'syz.4.1849': attribute type 1 has an invalid length. [ 263.340194][T12802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1851'. [ 263.415431][T12806] netlink: 'syz.0.1853': attribute type 21 has an invalid length. [ 263.425364][T12806] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1853'. [ 263.451804][T12805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.473755][T12805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.600187][T12817] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1856'. [ 264.119056][T12849] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1864'. [ 264.244042][T12856] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1865'. [ 264.376242][T12871] tcf_pedit_act: 7 callbacks suppressed [ 264.376257][T12871] tc action pedit unable to extract header offset for header type (0x5) [ 264.392085][T12871] tc action pedit unable to extract header offset for header type (0x5) [ 264.400466][T12871] tc action pedit unable to extract header offset for header type (0x5) [ 264.408844][T12871] tc action pedit unable to extract header offset for header type (0x5) [ 264.417192][T12871] tc action pedit unable to extract header offset for header type (0x5) [ 264.425558][T12871] tc action pedit unable to extract header offset for header type (0x5) [ 264.433927][T12871] tc action pedit unable to extract header offset for header type (0x5) [ 264.442303][T12871] tc action pedit unable to extract header offset for header type (0x5) [ 264.450662][T12871] tc action pedit unable to extract header offset for header type (0x5) [ 264.459053][T12871] tc action pedit unable to extract header offset for header type (0x5) [ 264.467415][T12871] 0: reclassify loop, rule prio 0, protocol 800 [ 264.473766][T12872] 0: reclassify loop, rule prio 0, protocol 800 [ 264.499641][T12874] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20003 [ 264.896278][T12901] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1875'. [ 264.959395][T12901] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1875'. [ 267.064509][T12849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.325022][T12927] bond3: invalid ARP target 0.0.0.0 specified for addition [ 267.335094][T12927] bond3: option arp_ip_target: invalid value (0) [ 267.344554][T12927] bond3 (unregistering): Released all slaves [ 267.380311][T12937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.461026][T12944] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.823625][T12964] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 267.890604][T12963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.139727][T12981] xt_TCPMSS: Only works on TCP SYN packets [ 268.152685][T12981] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1897'. [ 268.572649][ T1650] block nbd1: Possible stuck request ffff888027bc5080: control (read@0,4096B). Runtime 120 seconds [ 268.595557][T13013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1900'. [ 268.621449][T13013] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1900'. [ 269.430137][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1908'. [ 269.474261][T13053] netlink: 'syz.0.1908': attribute type 5 has an invalid length. [ 269.499627][T13058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1910'. [ 269.520990][T13053] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1908'. [ 269.576430][T13053] geneve3: entered promiscuous mode [ 269.592925][T13053] geneve3: entered allmulticast mode [ 269.603662][T13062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1911'. [ 269.620563][ T79] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 269.647326][ T79] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 269.695448][ T79] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 270.157562][T13075] syzkaller1: entered promiscuous mode [ 270.176328][T13075] syzkaller1: entered allmulticast mode [ 270.226151][T13085] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1918'. [ 270.332890][T13093] netlink: 'syz.2.1920': attribute type 15 has an invalid length. [ 270.357031][T13093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1920'. [ 270.707505][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1926'. [ 270.837679][T13121] netlink: 'syz.0.1929': attribute type 1 has an invalid length. [ 270.845898][T13121] netlink: 'syz.0.1929': attribute type 1 has an invalid length. [ 270.978826][T13130] netlink: 'syz.0.1933': attribute type 1 has an invalid length. [ 271.015217][T13130] 8021q: adding VLAN 0 to HW filter on device bond2 [ 271.054320][T13133] nbd: nbd1 already in use [ 271.059267][T13133] block nbd1: NBD_DISCONNECT [ 271.065043][T13133] block nbd1: Send disconnect failed -32 [ 271.072045][T13133] block nbd1: shutting down sockets [ 271.081242][T13130] bond2: (slave gretap1): making interface the new active one [ 271.089931][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 271.099324][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 271.107229][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 271.115070][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 271.122927][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 271.133425][ T1629] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 271.143918][T13130] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 271.158355][ T1629] Buffer I/O error on dev nbd1, logical block 0, async page read [ 271.169945][ T1629] Buffer I/O error on dev nbd1, logical block 1, async page read [ 271.178986][ T1629] Buffer I/O error on dev nbd1, logical block 2, async page read [ 271.187790][ T1629] Buffer I/O error on dev nbd1, logical block 3, async page read [ 271.197447][ T1629] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 271.206969][ T1629] Buffer I/O error on dev nbd1, logical block 0, async page read [ 271.216129][ T1629] Buffer I/O error on dev nbd1, logical block 1, async page read [ 271.228098][ T1629] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 271.239506][ T1629] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 271.250972][ T1629] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 271.262799][ T1629] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 271.272603][ T1629] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 271.283454][ T5652] ldm_validate_partition_table(): Disk read failed. [ 271.301568][ T1629] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.311455][ T1629] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 271.327169][ T5652] Dev nbd1: unable to read RDB block 0 [ 271.337506][ T5652] nbd1: unable to read partition table [ 271.375719][ T5652] ldm_validate_partition_table(): Disk read failed. [ 271.396019][ T5652] Dev nbd1: unable to read RDB block 0 [ 271.405491][ T5652] nbd1: unable to read partition table [ 271.804172][T13152] syzkaller0: entered promiscuous mode [ 271.819713][T13152] syzkaller0: entered allmulticast mode [ 272.111114][T13169] netlink: 'syz.0.1945': attribute type 7 has an invalid length. [ 272.119663][T13169] netlink: 'syz.0.1945': attribute type 8 has an invalid length. [ 272.326043][T13180] dvmrp0: entered allmulticast mode [ 272.358018][T13189] netlink: 'syz.3.1952': attribute type 3 has an invalid length. [ 272.388228][T13186] bond10: Unable to set up delay as MII monitoring is disabled [ 272.405257][T13186] bond10 (unregistering): Released all slaves [ 272.475184][T13193] syzkaller0: entered promiscuous mode [ 272.482164][T13193] syzkaller0: entered allmulticast mode [ 272.509415][T13191] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 272.544576][T13193] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 272.707199][T13206] xt_hashlimit: size too large, truncated to 1048576 [ 273.179442][T13084] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 273.279376][T13224] netlink: 'syz.0.1962': attribute type 17 has an invalid length. [ 273.392400][T13229] __nla_validate_parse: 13 callbacks suppressed [ 273.392419][T13229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1965'. [ 273.410020][T13229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1965'. [ 273.485479][T13230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1964'. [ 273.624984][T13235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1967'. [ 273.661103][T13239] netlink: 'syz.0.1969': attribute type 1 has an invalid length. [ 273.720138][T13237] syzkaller0: entered promiscuous mode [ 273.747837][T13237] syzkaller0: entered allmulticast mode [ 273.817735][T13239] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 273.843470][T13239] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1969'. [ 273.857310][ T7008] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 273.871870][T13243] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1970'. [ 273.898644][T13239] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.938974][T13242] veth5: entered promiscuous mode [ 273.949168][T13242] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 274.001454][ T6988] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 274.336793][T13271] lo speed is unknown, defaulting to 1000 [ 274.367125][T13271] lo speed is unknown, defaulting to 1000 [ 274.406672][T13271] lo speed is unknown, defaulting to 1000 [ 274.424919][T13271] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 274.444787][T13271] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 274.479117][T13271] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 274.529854][T13271] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 274.695239][T13271] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 274.862711][T13271] lo speed is unknown, defaulting to 1000 [ 274.894642][T13271] lo speed is unknown, defaulting to 1000 [ 274.922771][T13271] lo speed is unknown, defaulting to 1000 [ 274.949731][ T4943] block nbd1: Receive control failed (result -32) [ 274.968397][T13271] lo speed is unknown, defaulting to 1000 [ 274.995241][T13271] lo speed is unknown, defaulting to 1000 [ 275.048711][T13276] smc: removing ib device syz0 [ 275.239362][T13276] smbdirect: ib_dev[syz0] removed [ 275.604720][T13316] xt_hashlimit: size too large, truncated to 1048576 [ 275.687441][T13319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1986'. [ 275.718797][T13319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1986'. [ 275.775964][T13324] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1986'. [ 276.210996][T13338] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1992'. [ 276.785835][T13362] openvswitch: netlink: Duplicate or invalid key (type 0). [ 276.815012][T13362] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.893321][T13373] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 277.089559][T13382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.568730][T13391] syzkaller0: entered promiscuous mode [ 277.576616][T13391] syzkaller0: entered allmulticast mode [ 277.602091][T13376] lo speed is unknown, defaulting to 1000 [ 277.755031][T13410] netlink: 'syz.4.2007': attribute type 62 has an invalid length. [ 277.891953][T13400] lo speed is unknown, defaulting to 1000 [ 278.050591][T13419] netlink: 'syz.2.2010': attribute type 21 has an invalid length. [ 278.081146][T13419] IPv6: NLM_F_CREATE should be specified when creating new route [ 280.393490][T13441] ipvlan2: entered promiscuous mode [ 280.426741][T13442] ipvlan3: entered promiscuous mode [ 280.469042][T13439] syzkaller0: entered promiscuous mode [ 280.488847][T13439] syzkaller0: entered allmulticast mode [ 280.582202][T13450] __nla_validate_parse: 4 callbacks suppressed [ 280.582222][T13450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2017'. [ 280.620175][T13450] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 281.118923][T13469] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2023'. [ 281.149769][T13469] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2023'. [ 281.241209][T13469] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 281.372586][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 281.543947][T13479] bond4: Removing last arp target with arp_interval on [ 281.616557][T13484] tipc: Bearer : already 2 bearers with priority 10 [ 281.648684][T13484] tipc: Bearer : trying with adjusted priority [ 281.677218][T13484] tipc: Enabling of bearer rejected, failed to enable media [ 281.845406][T13495] netlink: 'syz.3.2031': attribute type 33 has an invalid length. [ 281.875703][T13496] netlink: 'syz.3.2031': attribute type 33 has an invalid length. [ 281.916735][T13500] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2033'. [ 281.939696][T13505] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2031'. [ 281.954982][T13500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2033'. [ 282.045448][T13495] bond11: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 282.103528][T13495] bond11 (unregistering): Released all slaves [ 282.276148][T13496] bond11: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 282.331028][T13496] bond11 (unregistering): Released all slaves [ 282.359920][T13513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2035'. [ 282.408165][T13501] dvmrp0: entered allmulticast mode [ 282.563361][T13516] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2037'. [ 282.625685][T13522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2036'. [ 282.865741][T13535] netlink: 'syz.3.2041': attribute type 1 has an invalid length. [ 282.940043][T13543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2043'. [ 283.105831][T13544] bond11: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 283.195801][T13547] veth3: entered promiscuous mode [ 283.225075][T13547] bond11: (slave veth3): Enslaving as a backup interface with a down link [ 283.249663][T13538] tap0: tun_chr_ioctl cmd 2148553947 [ 283.762112][T13576] netdevsim netdevsim2: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 283.872412][ T29] audit: type=1107 audit(1784530103.572:4): pid=13578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='syÈ’' [ 284.017164][T13587] bond5: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 284.061621][T13587] bond5 (unregistering): Released all slaves [ 284.355561][T13611] xt_CT: You must specify a L4 protocol and not use inversions on it [ 284.558449][T13613] tipc: Enabled bearer , priority 0 [ 284.684106][ T7992] IPVS: starting estimator thread 0... [ 284.695456][T13619] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20001 [ 284.737082][T13613] syzkaller0: entered promiscuous mode [ 284.744257][T13613] syzkaller0: entered allmulticast mode [ 284.755337][T13613] tipc: Resetting bearer [ 284.775540][T13612] tipc: Resetting bearer [ 284.800897][T13620] IPVS: using max 36 ests per chain, 86400 per kthread [ 286.570965][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 287.946921][T13612] tipc: Disabling bearer [ 288.153557][T13651] syzkaller0: entered promiscuous mode [ 288.178647][T13651] syzkaller0: entered allmulticast mode [ 288.281628][T13666] __nla_validate_parse: 8 callbacks suppressed [ 288.281644][T13666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2073'. [ 288.484352][T13675] netlink: 'syz.3.2076': attribute type 29 has an invalid length. [ 288.498048][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2076'. [ 288.517194][T13678] veth1_macvtap: left promiscuous mode [ 288.573293][T13675] netlink: 'syz.3.2076': attribute type 63 has an invalid length. [ 288.621239][T13675] netlink: 'syz.3.2076': attribute type 63 has an invalid length. [ 288.665893][T13679] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 288.686001][T13679] bond9 (unregistering): Released all slaves [ 288.745691][T13686] netlink: 'syz.4.2077': attribute type 33 has an invalid length. [ 288.765010][T13686] raw_sendmsg: syz.4.2077 forgot to set AF_INET. Fix it! [ 288.796403][T13682] tipc: Enabling of bearer rejected, media not registered [ 288.813055][T13686] netlink: 'syz.4.2077': attribute type 5 has an invalid length. [ 288.823873][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2077'. [ 288.842549][T13682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2077'. [ 288.999874][T13692] syzkaller0: entered promiscuous mode [ 289.018436][T13692] syzkaller0: entered allmulticast mode [ 289.487849][T13722] netlink: 'syz.0.2089': attribute type 58 has an invalid length. [ 289.509099][T13717] xt_hashlimit: size too large, truncated to 1048576 [ 289.516270][T13722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2089'. [ 289.572733][ T8660] tipc: Subscription rejected, illegal request [ 289.777550][T13736] xt_hashlimit: size too large, truncated to 1048576 [ 290.124179][T13742] bond3: option all_slaves_active: invalid value (222) [ 290.185627][T13742] bond3 (unregistering): Released all slaves [ 290.334204][ T7008] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 290.399797][T13770] netlink: 284 bytes leftover after parsing attributes in process `syz.2.2097'. [ 290.418370][T13771] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2096'. [ 290.487750][T13755] syzkaller0: entered promiscuous mode [ 290.503630][T13755] syzkaller0: entered allmulticast mode [ 290.560077][T13776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2097'. [ 290.754877][ T5288] veth1_macvtap: entered promiscuous mode [ 290.802945][T13774] syzkaller1: entered promiscuous mode [ 290.828400][T13782] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 290.829119][T13774] syzkaller1: entered allmulticast mode [ 291.020530][ T7996] IPVS: starting estimator thread 0... [ 291.039367][T13797] IPVS: length: 24 != 55320 [ 291.074489][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2102'. [ 291.121517][T13798] IPVS: using max 26 ests per chain, 62400 per kthread [ 291.199353][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2104'. [ 291.249907][T13805] netlink: 'syz.2.2105': attribute type 1 has an invalid length. [ 292.180591][T13844] syzkaller0: entered promiscuous mode [ 292.206978][T13844] syzkaller0: entered allmulticast mode [ 293.206133][T13862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.337221][T13907] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.377485][T13916] __nla_validate_parse: 41 callbacks suppressed [ 293.377505][T13916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2129'. [ 293.408972][T13918] netlink: 'syz.2.2130': attribute type 39 has an invalid length. [ 295.954391][T13886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 296.206958][T13948] Unsupported ieee802154 address type: 0 [ 296.410188][T13964] Cannot find add_set index 2 as target [ 296.684194][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2142'. [ 296.714181][T13986] netlink: 'syz.2.2143': attribute type 1 has an invalid length. [ 296.885896][T13986] 8021q: adding VLAN 0 to HW filter on device bond10 [ 297.028187][T13950] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 297.080603][T14001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2146'. [ 297.360292][T14017] netlink: 'syz.4.2148': attribute type 9 has an invalid length. [ 297.720218][T14034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2155'. [ 297.858193][T14045] netlink: 'syz.4.2158': attribute type 12 has an invalid length. [ 297.916039][T14050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2160'. [ 298.157124][T14059] veth7: entered promiscuous mode [ 298.164574][T14059] veth7: entered allmulticast mode [ 298.335157][T14067] syzkaller0: entered promiscuous mode [ 298.365996][T14067] syzkaller0: entered allmulticast mode [ 298.481455][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2170'. [ 298.492641][T14082] netlink: 'syz.3.2171': attribute type 4 has an invalid length. [ 298.506799][T14082] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2171'. [ 298.677652][T14093] xt_limit: Overflow, try lower: 604147548/4200216962 [ 298.738333][T14092] bridge5: entered promiscuous mode [ 298.755399][T14092] bridge5: entered allmulticast mode [ 298.801496][T14097] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2175'. [ 298.818446][T14086] syzkaller0: entered promiscuous mode [ 298.833924][T14086] syzkaller0: entered allmulticast mode [ 298.852631][T14097] IPVS: Unknown mcast interface: vcan0 [ 299.097408][T14110] bond9: (slave lo): Releasing backup interface [ 299.115943][T14110] bond9: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 299.139930][T14115] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2182'. [ 299.155991][T14110] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 299.718261][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2189'. [ 301.856219][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 303.121372][T14192] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2199'. [ 303.142421][T14194] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2200'. [ 303.213917][T14194] syzkaller0: entered promiscuous mode [ 303.245962][T14194] syzkaller0: entered allmulticast mode [ 303.283923][T14196] netlink: 'syz.4.2201': attribute type 2 has an invalid length. [ 303.340898][T14196] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2201'. [ 303.804302][T14222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2208'. [ 303.827413][T14223] netlink: 'syz.1.2207': attribute type 1 has an invalid length. [ 304.131984][T14223] "syz.1.2207" (14223) uses obsolete ecb(arc4) skcipher [ 304.244349][T14249] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2215'. [ 304.262691][T14249] netlink: 'syz.4.2215': attribute type 9 has an invalid length. [ 304.305679][T14248] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2215'. [ 304.329214][T14248] netlink: 'syz.4.2215': attribute type 9 has an invalid length. [ 304.624265][T14268] netlink: 'syz.1.2220': attribute type 2 has an invalid length. [ 304.640534][T14244] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 304.748279][T14274] veth0_to_team: Caught tx_queue_len zero misconfig [ 305.052806][ T8660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.063475][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.073348][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.148868][T14293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2228'. [ 305.254964][T14301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.278950][ T8660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.299396][T14301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.304791][ T8660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.423536][T14301] sit0: Caught tx_queue_len zero misconfig [ 306.216130][ T3358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.224669][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.244437][T14353] syzkaller0: entered promiscuous mode [ 306.256375][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.286942][T14353] syzkaller0: entered allmulticast mode [ 306.399066][T14360] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2242'. [ 306.622522][T14378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2246'. [ 306.677615][T14378] netlink: 'syz.1.2246': attribute type 1 has an invalid length. [ 306.888683][T14378] 8021q: adding VLAN 0 to HW filter on device bond3 [ 306.930412][T14401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2252'. [ 307.009735][T14404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.023930][T14393] bond3: (slave geneve3): making interface the new active one [ 307.048997][T14408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2253'. [ 307.055798][T14393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.068174][T14408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2253'. [ 307.082232][T14393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.112495][T14393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.121720][T14393] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 307.188048][T14408] erspan0: entered promiscuous mode [ 307.206402][T14408] gretap0: entered promiscuous mode [ 307.224671][T14408] debugfs: 'hsr1' already exists in 'hsr' [ 307.244011][T14408] Cannot create hsr debugfs directory [ 307.284614][T14417] netlink: 'syz.1.2255': attribute type 10 has an invalid length. [ 307.457655][T14423] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2255'. [ 307.661849][T14434] block nbd2: NBD_DISCONNECT [ 307.702709][ T5636] block nbd2: Wrong magic (0x25609513) [ 307.720653][ T50] block nbd2: Disconnected due to user request. [ 307.731059][T14434] block nbd2: Send disconnect failed -32 [ 308.905706][T14497] __nla_validate_parse: 4 callbacks suppressed [ 308.905726][T14497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2270'. [ 308.973512][T14499] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2272'. [ 309.068130][T14502] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2273'. [ 309.123101][T14504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2274'. [ 309.163717][T14508] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2273'. [ 309.185981][T14504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2274'. [ 309.220301][T14516] x_tables: duplicate underflow at hook 2 [ 309.243827][T14516] x_tables: duplicate underflow at hook 2 [ 309.264367][T14516] x_tables: duplicate underflow at hook 2 [ 309.268975][T14519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2277'. [ 309.288761][T14516] x_tables: duplicate underflow at hook 2 [ 309.309888][T14516] x_tables: duplicate underflow at hook 2 [ 309.324192][T14516] x_tables: duplicate underflow at hook 2 [ 309.330593][T14519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2277'. [ 309.347304][T14516] x_tables: duplicate underflow at hook 2 [ 309.363736][T14516] x_tables: duplicate underflow at hook 2 [ 309.376400][T14516] x_tables: duplicate underflow at hook 2 [ 309.397638][T14516] x_tables: duplicate underflow at hook 2 [ 309.500509][T14533] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2280'. [ 310.198580][T14562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2290'. [ 310.236863][T14562] netlink: 'syz.4.2290': attribute type 17 has an invalid length. [ 310.299599][T14562] gretap0: entered promiscuous mode [ 310.337077][T14562] gretap0: left promiscuous mode [ 310.351849][ T3358] net_ratelimit: 22 callbacks suppressed [ 310.351881][ T3358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.395324][ T3358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.513266][T14580] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.590133][T14584] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.597422][T14584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.724356][ T3337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.734033][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.822718][ T8660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.910131][T14581] syzkaller0: entered promiscuous mode [ 310.924719][T14581] syzkaller0: entered allmulticast mode [ 310.934006][T14584] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.070320][T14585] bridge0: Caught tx_queue_len zero misconfig [ 311.087998][T14613] IPv6: NLM_F_CREATE should be specified when creating new route [ 311.096687][T14613] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.104043][T14613] IPv6: NLM_F_CREATE should be set when creating new route [ 311.149402][T14617] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.571059][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.599357][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.868497][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.877038][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.335007][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.755736][T14643] netlink: 'syz.4.2303': attribute type 5 has an invalid length. [ 313.916280][T14657] __nla_validate_parse: 70 callbacks suppressed [ 313.916300][T14657] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2308'. [ 314.036142][T14664] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 314.509482][T14690] netlink: 'syz.2.2313': attribute type 4 has an invalid length. [ 314.537221][T14687] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 314.560272][T14690] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2313'. [ 314.578630][T14691] batadv_slave_0: Caught tx_queue_len zero misconfig [ 314.594211][T14687] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 315.025768][T14719] macvlan0: entered promiscuous mode [ 315.369723][T14745] netlink: 'syz.0.2324': attribute type 7 has an invalid length. [ 315.380352][ T809] net_ratelimit: 17 callbacks suppressed [ 315.380371][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.408054][T14745] netlink: 'syz.0.2324': attribute type 7 has an invalid length. [ 315.495871][T14746] netlink: 'syz.0.2324': attribute type 7 has an invalid length. [ 315.932623][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.101163][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.109623][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.321059][ T3358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.329532][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.212581][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.221456][ T3337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.230016][ T3337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.430993][ T3358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.439443][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.857513][T14713] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 317.868459][T14734] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2318'. [ 318.207216][T14788] tls_set_device_offload: netdev not found [ 318.630272][T14824] netlink: 'syz.1.2339': attribute type 15 has an invalid length. [ 318.638978][T14825] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 318.663732][T14824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2339'. [ 318.803156][ T8660] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 318.806696][T14824] netlink: 'syz.1.2339': attribute type 15 has an invalid length. [ 318.847689][ T8660] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 318.857994][T14824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2339'. [ 318.860384][T14837] netlink: 'syz.0.2344': attribute type 1 has an invalid length. [ 318.895987][T14837] netlink: 'syz.0.2344': attribute type 2 has an invalid length. [ 318.909536][ T8660] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 318.921387][ T8660] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 319.104603][T14853] netlink: 'syz.1.2348': attribute type 1 has an invalid length. [ 319.118179][T14849] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 319.126221][T14849] team0: Device ipvlan2 is already an upper device of the team interface [ 319.295076][ T5636] Bluetooth: hci4: command 0x0406 tx timeout [ 319.343850][T14863] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2352'. [ 319.359910][T14862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2351'. [ 319.386968][T14864] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2352'. [ 319.469489][T14876] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 319.502191][T14876] bond9: (slave lo): Enslaving as an active interface with an up link [ 319.873585][T14901] netlink: 'syz.0.2363': attribute type 1 has an invalid length. [ 319.895963][T14901] netlink: 'syz.0.2363': attribute type 16 has an invalid length. [ 320.024809][T14907] macvlan3: entered promiscuous mode [ 320.046307][T14907] macvlan3: entered allmulticast mode [ 320.074702][T14907] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 320.113583][T14907] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 320.138970][T14907] team0: Port device macvlan3 added [ 320.176821][T14922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2369'. [ 320.215721][T14921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2371'. [ 320.293146][T14926] vlan4: entered allmulticast mode [ 320.309201][T14926] bridge7: entered allmulticast mode [ 320.346250][T14932] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2374'. [ 320.371322][T14927] syzkaller0: entered promiscuous mode [ 320.380588][T14927] syzkaller0: entered allmulticast mode [ 320.412749][ T7010] net_ratelimit: 14 callbacks suppressed [ 320.412768][ T7010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.563145][ T7008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.586138][ T7008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.752158][T14947] validate_nla: 1 callbacks suppressed [ 320.752178][T14947] netlink: 'syz.2.2379': attribute type 1 has an invalid length. [ 320.792277][ T7008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.800983][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.823170][T14947] 8021q: adding VLAN 0 to HW filter on device bond11 [ 320.833156][T14945] syzkaller0: entered promiscuous mode [ 320.845785][T14945] syzkaller0: entered allmulticast mode [ 321.015480][T14958] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2381'. [ 321.050999][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.066078][T14959] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2381'. [ 321.233296][T14969] xt_hashlimit: size too large, truncated to 1048576 [ 321.280525][ T8660] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 321.451126][ T7992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.476158][T14979] syzkaller0: entered promiscuous mode [ 321.487774][T14979] syzkaller0: entered allmulticast mode [ 321.696967][ T3358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.722016][ T3358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.734617][ T3358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.367095][T15028] netlink: 'syz.1.2402': attribute type 12 has an invalid length. [ 322.377386][T15028] netlink: 'syz.1.2402': attribute type 29 has an invalid length. [ 322.388970][T15028] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2402'. [ 322.402015][T15032] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2403'. [ 322.419805][T15028] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 322.655964][T15045] Unsupported ieee802154 address type: 0 [ 322.765844][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.803809][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.158868][T15075] xt_policy: neither incoming nor outgoing policy selected [ 323.383420][T15084] netlink: 'syz.0.2419': attribute type 33 has an invalid length. [ 323.563547][T15090] lo speed is unknown, defaulting to 1000 [ 323.636808][T15100] netlink: 'syz.4.2424': attribute type 4 has an invalid length. [ 323.718715][T15103] bridge6: entered promiscuous mode [ 323.866080][T15099] batadv_slave_1: entered allmulticast mode [ 324.354049][T15133] __nla_validate_parse: 10 callbacks suppressed [ 324.354070][T15133] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2429'. [ 324.496271][T15125] bond12: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 324.532937][T15125] bond12 (unregistering): Released all slaves [ 324.818267][T15144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2433'. [ 324.986885][T15110] infiniband syz0: set active [ 324.999377][T15110] infiniband syz0: added batadv_slave_0 [ 325.010284][T15110] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 325.012823][T15110] infiniband syz0: Couldn't open port 1 [ 325.027660][T15110] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 325.043440][T15110] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 325.059511][T15156] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2436'. [ 325.082209][T15110] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 325.222808][T15110] RDS/IB: syz0: added [ 325.237893][T15110] smc: adding ib device syz0 with port count 1 [ 325.255503][T15110] smc: ib device syz0 port 1 has no pnetid [ 325.378710][T15167] syzkaller0: entered promiscuous mode [ 325.384713][T15167] syzkaller0: entered allmulticast mode [ 325.446644][T15174] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2441'. [ 325.540188][ T79] net_ratelimit: 18 callbacks suppressed [ 325.540208][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.634820][T15176] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2443'. [ 325.763358][T15150] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 325.774016][T15181] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 622 [ 326.202963][ T8660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.225379][ T8660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.283784][T15205] veth1_to_bond: entered allmulticast mode [ 326.299735][T15205] veth1_to_bond: entered promiscuous mode [ 326.319421][T15205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2452'. [ 326.332995][T15209] ªªªªªª: renamed from veth0_vlan (while UP) [ 326.339010][T15208] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2453'. [ 326.369802][T15205] veth1_to_bond (unregistering): left allmulticast mode [ 326.396706][T15205] veth1_to_bond (unregistering): left promiscuous mode [ 326.421840][ T3358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.430477][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.710319][T15230] netlink: 'syz.2.2458': attribute type 3 has an invalid length. [ 326.739381][T15230] IPVS: ip_vs_edit_dest(): server weight less than zero [ 326.963111][T15243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.024211][T15243] xfrm2: entered allmulticast mode [ 327.195274][T15250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2463'. [ 327.229188][T15255] nbd: nbd0 already in use [ 327.271350][T15258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.363733][ T8660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.392432][ T8660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.412698][T15265] bond0: Caught tx_queue_len zero misconfig [ 327.424155][T15265] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 327.456688][ T3358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.597857][T15273] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2470'. [ 327.722287][T15282] netlink: 'syz.3.2470': attribute type 2 has an invalid length. [ 327.822652][T15281] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2473'. [ 327.892193][T15287] netlink: 'syz.2.2474': attribute type 13 has an invalid length. [ 328.366305][T15303] bridge0: port 3(veth1_to_bridge) entered blocking state [ 328.386364][T15303] bridge0: port 3(veth1_to_bridge) entered disabled state [ 328.406683][T15303] veth1_to_bridge: entered allmulticast mode [ 328.442480][T15303] veth1_to_bridge: entered promiscuous mode [ 328.456726][T15303] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 328.471928][T15303] bridge0: port 3(veth1_to_bridge) entered blocking state [ 328.479245][T15303] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 328.495978][T15308] tipc: Disabling bearer [ 328.883313][T15322] syzkaller0: entered promiscuous mode [ 328.896824][T15322] syzkaller0: entered allmulticast mode [ 329.490179][T15356] __nla_validate_parse: 1 callbacks suppressed [ 329.490200][T15356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2496'. [ 329.582781][T15351] veth0_to_bridge: entered promiscuous mode [ 329.589473][T15357] veth0_to_bridge: left promiscuous mode [ 329.714329][T15367] netlink: 'syz.0.2500': attribute type 11 has an invalid length. [ 329.758578][T15370] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2496'. [ 331.651467][T15356] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2496'. [ 331.868157][T15396] netlink: 'syz.1.2503': attribute type 7 has an invalid length. [ 331.901165][T15396] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2503'. [ 331.982876][T15408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2506'. [ 332.039499][T15413] net_ratelimit: 4 callbacks suppressed [ 332.039520][T15413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.094046][ T29] audit: type=1107 audit(1784530151.792:5): pid=15405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 332.114225][T15416] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2510'. [ 332.235365][T15416] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2510'. [ 332.255613][T15422] netlink: 45 bytes leftover after parsing attributes in process `syz.4.2512'. [ 332.697053][T15451] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2516'. [ 332.962111][T15468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2522'. [ 333.035937][T15468] vlan4: entered promiscuous mode [ 333.060527][T15468] bond0: entered promiscuous mode [ 333.091040][T15468] O·Äõr&: entered promiscuous mode [ 333.097400][T15468] bond_slave_1: entered promiscuous mode [ 333.109261][T15472] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20003 [ 333.182986][T15479] netlink: 'syz.1.2525': attribute type 2 has an invalid length. [ 333.191660][T15479] netlink: 'syz.1.2525': attribute type 8 has an invalid length. [ 333.193456][T15480] netlink: 'syz.1.2525': attribute type 2 has an invalid length. [ 333.214329][T15480] netlink: 'syz.1.2525': attribute type 8 has an invalid length. [ 333.303193][T15484] ip6tnl0: Caught tx_queue_len zero misconfig [ 333.388933][T15491] xt_TPROXY: Can be used only with -p tcp or -p udp [ 334.034234][T15527] netlink: 'syz.1.2541': attribute type 61 has an invalid length. [ 334.707214][T15554] __nla_validate_parse: 7 callbacks suppressed [ 334.707233][T15554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2549'. [ 335.178821][T15586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2558'. [ 335.201005][T15586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.449196][T15597] sctp: [Deprecated]: syz.1.2563 (pid 15597) Use of int in max_burst socket option. [ 335.449196][T15597] Use struct sctp_assoc_value instead [ 335.526617][T15607] netlink: 'syz.3.2564': attribute type 1 has an invalid length. [ 335.639794][T15608] pimreg: entered allmulticast mode [ 335.654835][T15607] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2564'. [ 335.824039][T15613] vlan5: entered promiscuous mode [ 335.832283][T15613] hsr0: entered promiscuous mode [ 335.844233][T15613] vlan5: entered allmulticast mode [ 335.857736][T15613] hsr0: entered allmulticast mode [ 335.871394][T15613] hsr_slave_0: entered allmulticast mode [ 335.878751][T15613] hsr_slave_1: entered allmulticast mode [ 335.935673][T15613] syzkaller0: entered promiscuous mode [ 335.949527][T15613] syzkaller0: entered allmulticast mode [ 336.120061][T15618] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 336.774156][T15642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2572'. [ 336.808058][T15641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2572'. [ 336.873920][T15642] bridge8: entered promiscuous mode [ 336.878094][T15645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2576'. [ 336.916088][T15649] netlink: get zone limit has 4 unknown bytes [ 336.925211][T15650] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2578'. [ 337.016575][T15649] bond13 (unregistering): Released all slaves [ 337.284092][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2582'. [ 337.325341][T15673] openvswitch: netlink: IP tunnel dst address not specified [ 337.428576][T15680] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2585'. [ 337.468022][T15679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2586'. [ 337.833774][T15699] netdevsim netdevsim0: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 337.937784][T15706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.179301][T15712] syzkaller1: entered promiscuous mode [ 338.189383][T15712] syzkaller1: entered allmulticast mode [ 338.361570][T15722] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20003 [ 338.631563][T15728] netlink: 'syz.0.2599': attribute type 2 has an invalid length. [ 338.703340][T15728] netlink: 'syz.0.2599': attribute type 1 has an invalid length. [ 340.444050][T15811] __nla_validate_parse: 5 callbacks suppressed [ 340.444070][T15811] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2623'. [ 340.756151][ T3337] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 340.815283][T15832] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2628'. [ 340.825682][T15832] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2628'. [ 341.136766][T15840] sctp: [Deprecated]: syz.3.2631 (pid 15840) Use of int in maxseg socket option. [ 341.136766][T15840] Use struct sctp_assoc_value instead [ 341.223390][T15850] sctp: [Deprecated]: syz.0.2633 (pid 15850) Use of struct sctp_assoc_value in delayed_ack socket option. [ 341.223390][T15850] Use struct sctp_sack_info instead [ 341.300998][ T48] smc: removing ib device syz0 [ 341.374951][T15852] ip6tnl0: entered promiscuous mode [ 341.387007][ T809] syz0: Port: 1 Link DOWN [ 341.404289][T15852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2632'. [ 341.607975][ T48] smbdirect: ib_dev[syz0] removed [ 341.916101][T15864] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2637'. [ 342.067528][T15862] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2636'. [ 342.636632][T15887] openvswitch: netlink: Flow key attr not present in new flow. [ 343.047774][T15895] netlink: 'syz.1.2641': attribute type 83 has an invalid length. [ 343.049001][T15892] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 343.116254][T15894] IPVS: set_ctl: invalid protocol: 11608 255.255.255.255:20001 [ 343.549068][T15917] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2649'. [ 343.815350][T15927] sctp: [Deprecated]: syz.3.2652 (pid 15927) Use of int in max_burst socket option. [ 343.815350][T15927] Use struct sctp_assoc_value instead [ 343.975308][T15940] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2654'. [ 344.158746][T15946] team_slave_1: Caught tx_queue_len zero misconfig [ 344.418089][T15953] IPVS: length: 8 != 1152 [ 344.447803][T15954] netlink: 'syz.3.2658': attribute type 1 has an invalid length. [ 344.450406][T15953] netlink: 'syz.3.2658': attribute type 1 has an invalid length. [ 344.676829][T15953] 8021q: adding VLAN 0 to HW filter on device bond13 [ 345.003696][T15983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.552741][T16031] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2675'. [ 345.597261][T16032] xt_hashlimit: size too large, truncated to 1048576 [ 346.087475][T16051] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2684'. [ 346.132540][T16052] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 346.182711][T16052] gretap2: left allmulticast mode [ 346.189916][T16052] geneve3: left allmulticast mode [ 346.197290][T16052] bond6: left allmulticast mode [ 346.206266][T16052] bridge0: left allmulticast mode [ 346.224364][T16052] ip6gre1: left allmulticast mode [ 346.245345][T16052] veth7: left allmulticast mode [ 346.277475][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2683'. [ 346.458596][T16070] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2687'. [ 346.489511][T16066] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.496830][T16066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.685582][T16066] 8021q: adding VLAN 0 to HW filter on device bond3 [ 346.714076][T16066] 8021q: adding VLAN 0 to HW filter on device bond6 [ 346.747996][T16066] geneve3: left promiscuous mode [ 346.763915][T16066] 8021q: adding VLAN 0 to HW filter on device bond9 [ 346.782328][T16066] 8021q: adding VLAN 0 to HW filter on device bond10 [ 346.793271][T16066] 8021q: adding VLAN 0 to HW filter on device bond11 [ 346.798313][ T3358] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 346.820502][T16066] veth3: left promiscuous mode [ 346.833598][T16066] veth7: left promiscuous mode [ 346.839192][T16066] bridge5: left promiscuous mode [ 346.847310][T16066] bridge6: left promiscuous mode [ 346.856488][T16066] 8021q: adding VLAN 0 to HW filter on device bond12 [ 346.872067][T16070] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2687'. [ 346.882744][T16070] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2687'. [ 346.902367][ T48] bond11: (slave ip6gretap1): link status up again after 0 ms [ 346.918340][ T8660] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.925621][ T8660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.945026][ T48] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 346.967736][ T48] bond11: (slave ip6gretap1): link status up again after 0 ms [ 347.020337][ T48] bond11: (slave ip6gretap1): link status up again after 0 ms [ 347.068436][ T48] bond11: (slave ip6gretap1): link status up again after 0 ms [ 347.100889][ T8660] bond11: (slave ip6gretap1): link status up again after 0 ms [ 347.141683][ T8660] bond11: (slave ip6gretap1): link status up again after 0 ms [ 347.176920][ T8660] bond11: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 347.221071][T16099] IPVS: set_ctl: invalid protocol: 92 100.1.1.0:20001 [ 347.233696][ T8660] bond11: active interface up! [ 347.333797][T16105] netlink: 'syz.0.2697': attribute type 4 has an invalid length. [ 347.344054][T16105] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2697'. [ 347.373973][T16105] .`: renamed from  (while UP) [ 347.750920][ T6988] net_ratelimit: 4 callbacks suppressed [ 347.750952][ T6988] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 347.891199][ T3358] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 347.986781][ T50] block nbd0: Receive control failed (result -107) [ 348.008827][T16144] block nbd0: reconnected socket [ 348.015831][T16145] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 (while UP) [ 348.060914][ T6988] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 348.081968][T16150] Cannot find add_set index 46338 as target [ 348.244185][ T3358] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 348.301822][T16167] IPv6: sit1: Disabled Multicast RS [ 348.314381][T16167] ipt_ECN: cannot use operation on non-tcp rule [ 348.401758][ T3358] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 348.511274][ T79] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 348.643769][ T79] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 348.773428][ T6988] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 348.905075][ T79] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 349.020655][T16209] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2732'. [ 349.033297][T16209] xt_check_table_hooks: 23 callbacks suppressed [ 349.033315][T16209] x_tables: duplicate underflow at hook 3 [ 349.046469][ T79] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 349.118939][T16214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2733'. [ 349.168715][T16214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2733'. [ 349.366797][T16227] netlink: 'syz.1.2737': attribute type 26 has an invalid length. [ 349.395988][T16227] netlink: 'syz.1.2737': attribute type 26 has an invalid length. [ 349.728077][T16246] tipc: Enabling of bearer rejected, failed to enable media [ 349.783317][T16248] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 349.918607][T16253] netlink: 'syz.2.2746': attribute type 8 has an invalid length. [ 349.963757][T16253] netlink: 'syz.2.2746': attribute type 8 has an invalid length. [ 350.005526][T16253] netlink: 'syz.2.2746': attribute type 8 has an invalid length. [ 350.057595][T16253] netlink: 'syz.2.2746': attribute type 8 has an invalid length. [ 350.077648][T16253] netlink: 'syz.2.2746': attribute type 8 has an invalid length. [ 350.099651][T16253] netlink: 'syz.2.2746': attribute type 8 has an invalid length. [ 350.120051][T16253] netlink: 'syz.2.2746': attribute type 8 has an invalid length. [ 350.153932][T16253] netlink: 'syz.2.2746': attribute type 8 has an invalid length. [ 350.185853][T16253] netlink: 'syz.2.2746': attribute type 8 has an invalid length. [ 350.216796][T16253] netlink: 'syz.2.2746': attribute type 8 has an invalid length. [ 350.306182][T16258] tipc: Enabling of bearer rejected, already enabled [ 350.491319][ T5636] Bluetooth: hci4: command 0x0406 tx timeout [ 350.772211][T16278] xt_TCPMSS: Only works on TCP SYN packets [ 351.021385][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888033492c00: rx timeout, send abort [ 351.030643][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888033492c00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 351.379189][T16301] ip6t_srh: unknown srh match flags 5F28 [ 351.610284][T16322] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 351.626350][T16322] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 351.634577][T16322] gretap3: entered promiscuous mode [ 351.639860][T16322] gretap3: entered allmulticast mode [ 351.653000][T16320] bond9: (slave lo): Releasing backup interface [ 351.686299][T16320] bond9: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 351.754846][T16320] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 351.922522][T16335] 8021q: adding VLAN 0 to HW filter on device bond5 [ 351.930141][T16335] bridge0: port 4(bond5) entered blocking state [ 351.939025][T16335] bridge0: port 4(bond5) entered disabled state [ 351.945910][T16335] bond5: entered allmulticast mode [ 351.954460][T16335] bond5: entered promiscuous mode [ 351.961455][T16335] bridge0: port 4(bond5) entered blocking state [ 351.967883][T16335] bridge0: port 4(bond5) entered forwarding state [ 352.307365][ T3358] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 352.468701][T16375] __nla_validate_parse: 5 callbacks suppressed [ 352.468721][T16375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2784'. [ 352.498052][T16360] syzkaller0: entered promiscuous mode [ 352.526813][T16360] syzkaller0: entered allmulticast mode [ 353.158811][T16404] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2787'. [ 353.719273][T16430] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2791'. [ 355.363455][ T8660] bridge0: port 4(bond5) entered disabled state [ 355.371361][ T8660] net_ratelimit: 23 callbacks suppressed [ 355.371379][ T8660] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 355.491528][ T8660] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 355.542672][T16442] validate_nla: 23 callbacks suppressed [ 355.542694][T16442] netlink: 'syz.3.2793': attribute type 1 has an invalid length. [ 355.582830][T16447] netlink: 45 bytes leftover after parsing attributes in process `syz.4.2796'. [ 355.594183][T16442] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2793'. [ 355.623329][T16448] netlink: 'syz.3.2793': attribute type 1 has an invalid length. [ 355.624078][ T8660] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 355.649360][T16450] netlink: 'syz.0.2797': attribute type 32 has an invalid length. [ 355.659734][T16442] netlink: 'syz.3.2793': attribute type 1 has an invalid length. [ 355.668250][T16450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2797'. [ 355.679488][T16442] netlink: 2016 bytes leftover after parsing attributes in process `syz.3.2793'. [ 355.731167][T16450] bond6: option coupled_control: invalid value (192) [ 355.748678][T16450] bond6 (unregistering): Released all slaves [ 355.860545][T16448] 8021q: adding VLAN 0 to HW filter on device bond14 [ 355.873869][T16447] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2796'. [ 355.891767][ T8660] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 355.907648][T16464] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2793'. [ 356.008694][T16469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2801'. [ 356.052923][T16471] lo: Caught tx_queue_len zero misconfig [ 356.091328][ T8660] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 356.222493][ T7008] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 356.304973][T16486] syzkaller0: entered promiscuous mode [ 356.327507][T16486] syzkaller0: entered allmulticast mode [ 356.381524][ T8660] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 356.480115][T16494] 8021q: VLANs not supported on gre0 [ 356.545717][ T808] lo speed is unknown, defaulting to 1000 [ 356.551853][ T7008] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 356.677366][T16499] 0ªî{X¹¦: left allmulticast mode [ 356.745879][T16514] netlink: 'syz.4.2814': attribute type 2 has an invalid length. [ 356.754160][T16500] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 356.783257][T16500] 1ªî{X¹¦: entered allmulticast mode [ 356.802134][T16500] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 356.858442][T16514] : entered promiscuous mode [ 356.897730][T16518] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 356.936339][T16523] xt_TPROXY: Can be used only with -p tcp or -p udp [ 356.972768][ T153] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 357.157708][T16533] syzkaller0: entered promiscuous mode [ 357.163905][T16533] syzkaller0: entered allmulticast mode [ 357.174651][T16531] [ 357.177029][T16531] ====================================================== [ 357.184073][T16531] WARNING: possible circular locking dependency detected [ 357.191145][T16531] syzkaller #0 Not tainted [ 357.195632][T16531] ------------------------------------------------------ [ 357.202674][T16531] syz.2.2818/16531 is trying to acquire lock: [ 357.208762][T16531] ffffffff8ec848a0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 357.218100][T16531] [ 357.218100][T16531] but task is already holding lock: [ 357.225483][T16531] ffff88807eef83b8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 357.235011][T16531] [ 357.235011][T16531] which lock already depends on the new lock. [ 357.235011][T16531] [ 357.245420][T16531] [ 357.245420][T16531] the existing dependency chain (in reverse order) is: [ 357.254442][T16531] [ 357.254442][T16531] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 357.262011][T16531] __might_fault+0xcb/0x130 [ 357.267051][T16531] _copy_from_user+0x28/0xb0 [ 357.272328][T16531] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 357.278947][T16531] ip_generic_getfrag+0x149/0x2d0 [ 357.284563][T16531] __ip6_append_data+0x3b26/0x40c0 [ 357.290257][T16531] ip6_append_data+0x108/0x270 [ 357.295564][T16531] rawv6_sendmsg+0x1298/0x18c0 [ 357.300949][T16531] sock_sendmsg_nosec+0x10e/0x180 [ 357.306538][T16531] ____sys_sendmsg+0x54e/0x850 [ 357.311874][T16531] ___sys_sendmsg+0x2a5/0x360 [ 357.317096][T16531] __x64_sys_sendmsg+0x1b1/0x290 [ 357.322596][T16531] do_syscall_64+0x174/0x580 [ 357.327843][T16531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.334310][T16531] [ 357.334310][T16531] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 357.342061][T16531] lock_sock_nested+0x41/0x100 [ 357.347363][T16531] inet_shutdown+0x6a/0x390 [ 357.352523][T16531] nbd_mark_nsock_dead+0x2cb/0x550 [ 357.358275][T16531] recv_work+0x1cee/0x1e10 [ 357.363225][T16531] process_scheduled_works+0xa8e/0x14e0 [ 357.369338][T16531] worker_thread+0xa47/0xfb0 [ 357.374470][T16531] kthread+0x388/0x470 [ 357.379088][T16531] ret_from_fork+0x514/0xb70 [ 357.384256][T16531] ret_from_fork_asm+0x1a/0x30 [ 357.389570][T16531] [ 357.389570][T16531] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 357.397237][T16531] __mutex_lock+0x19d/0x1550 [ 357.402454][T16531] nbd_queue_rq+0x373/0x1150 [ 357.407583][T16531] blk_mq_dispatch_rq_list+0x499/0x1990 [ 357.413730][T16531] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 357.420636][T16531] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 357.427252][T16531] blk_mq_run_work_fn+0x16c/0x300 [ 357.432812][T16531] process_scheduled_works+0xa8e/0x14e0 [ 357.438895][T16531] worker_thread+0xa47/0xfb0 [ 357.444022][T16531] kthread+0x388/0x470 [ 357.448634][T16531] ret_from_fork+0x514/0xb70 [ 357.453766][T16531] ret_from_fork_asm+0x1a/0x30 [ 357.459064][T16531] [ 357.459064][T16531] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 357.466294][T16531] __mutex_lock+0x19d/0x1550 [ 357.471430][T16531] nbd_queue_rq+0xc1/0x1150 [ 357.476478][T16531] blk_mq_dispatch_rq_list+0x499/0x1990 [ 357.482565][T16531] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 357.489441][T16531] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 357.495968][T16531] blk_mq_run_work_fn+0x16c/0x300 [ 357.501532][T16531] process_scheduled_works+0xa8e/0x14e0 [ 357.507615][T16531] worker_thread+0xa47/0xfb0 [ 357.512741][T16531] kthread+0x388/0x470 [ 357.517368][T16531] ret_from_fork+0x514/0xb70 [ 357.522539][T16531] ret_from_fork_asm+0x1a/0x30 [ 357.527834][T16531] [ 357.527834][T16531] -> #3 (set->srcu){.+.+}-{0:0}: [ 357.534976][T16531] __synchronize_srcu+0xc9/0x2f0 [ 357.540494][T16531] elevator_switch+0x1e8/0x7b0 [ 357.545880][T16531] elevator_change+0x2fa/0x480 [ 357.551182][T16531] elevator_set_default+0x375/0x440 [ 357.556916][T16531] blk_register_queue+0x3f3/0x4e0 [ 357.562518][T16531] __add_disk+0x6cb/0xe30 [ 357.567382][T16531] add_disk_fwnode+0xfb/0x4b0 [ 357.572590][T16531] nbd_dev_add+0x733/0xb60 [ 357.577552][T16531] nbd_init+0x15f/0x1e0 [ 357.582248][T16531] do_one_initcall+0x250/0x870 [ 357.587559][T16531] do_initcall_level+0x10a/0x1a0 [ 357.593042][T16531] do_initcalls+0x59/0xa0 [ 357.597912][T16531] kernel_init_freeable+0x29d/0x3e0 [ 357.603655][T16531] kernel_init+0x1d/0x1d0 [ 357.608551][T16531] ret_from_fork+0x514/0xb70 [ 357.613681][T16531] ret_from_fork_asm+0x1a/0x30 [ 357.619003][T16531] [ 357.619003][T16531] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 357.626840][T16531] __mutex_lock+0x19d/0x1550 [ 357.631980][T16531] elevator_change+0x1af/0x480 [ 357.637290][T16531] elevator_set_none+0xb5/0x140 [ 357.642687][T16531] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 357.649048][T16531] nbd_start_device+0x189/0xb30 [ 357.654449][T16531] nbd_genl_connect+0x1597/0x1c10 [ 357.660024][T16531] genl_family_rcv_msg_doit+0x233/0x340 [ 357.666308][T16531] genl_rcv_msg+0x614/0x7a0 [ 357.671349][T16531] netlink_rcv_skb+0x226/0x4a0 [ 357.676699][T16531] genl_rcv+0x28/0x40 [ 357.681215][T16531] netlink_unicast+0x7bb/0x940 [ 357.686516][T16531] netlink_sendmsg+0x813/0xb40 [ 357.691813][T16531] sock_sendmsg_nosec+0x13a/0x180 [ 357.697380][T16531] ____sys_sendmsg+0x54e/0x850 [ 357.702688][T16531] ___sys_sendmsg+0x2a5/0x360 [ 357.707909][T16531] __x64_sys_sendmsg+0x1b1/0x290 [ 357.713390][T16531] do_syscall_64+0x174/0x580 [ 357.718531][T16531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.724960][T16531] [ 357.724960][T16531] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 357.733590][T16531] blk_alloc_queue+0x544/0x690 [ 357.738894][T16531] __blk_mq_alloc_disk+0x194/0x390 [ 357.744552][T16531] nbd_dev_add+0x494/0xb60 [ 357.749511][T16531] nbd_init+0x15f/0x1e0 [ 357.754206][T16531] do_one_initcall+0x250/0x870 [ 357.759533][T16531] do_initcall_level+0x10a/0x1a0 [ 357.765026][T16531] do_initcalls+0x59/0xa0 [ 357.769899][T16531] kernel_init_freeable+0x29d/0x3e0 [ 357.775647][T16531] kernel_init+0x1d/0x1d0 [ 357.780534][T16531] ret_from_fork+0x514/0xb70 [ 357.785698][T16531] ret_from_fork_asm+0x1a/0x30 [ 357.791001][T16531] [ 357.791001][T16531] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 357.798232][T16531] __lock_acquire+0x1520/0x2cf0 [ 357.803650][T16531] lock_acquire+0x106/0x350 [ 357.808727][T16531] fs_reclaim_acquire+0x71/0x100 [ 357.814201][T16531] prepare_alloc_pages+0x15b/0x650 [ 357.819849][T16531] __alloc_frozen_pages_noprof+0x12f/0x380 [ 357.826198][T16531] alloc_pages_mpol+0x212/0x380 [ 357.831611][T16531] folio_alloc_mpol_noprof+0x39/0x160 [ 357.837524][T16531] vma_alloc_folio_noprof+0xe1/0x1e0 [ 357.843353][T16531] do_pte_missing+0x173a/0x34b0 [ 357.848744][T16531] handle_mm_fault+0x1b36/0x3080 [ 357.854220][T16531] do_user_addr_fault+0x744/0x1340 [ 357.859895][T16531] exc_page_fault+0x6a/0xc0 [ 357.864951][T16531] asm_exc_page_fault+0x26/0x30 [ 357.870425][T16531] __put_user_4+0xd/0x30 [ 357.875208][T16531] qrtr_ioctl+0x24e/0x450 [ 357.880168][T16531] sock_do_ioctl+0x101/0x320 [ 357.885301][T16531] sock_ioctl+0x57a/0x7e0 [ 357.890205][T16531] __se_sys_ioctl+0xfc/0x170 [ 357.895357][T16531] do_syscall_64+0x174/0x580 [ 357.900574][T16531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.906997][T16531] [ 357.906997][T16531] other info that might help us debug this: [ 357.906997][T16531] [ 357.917232][T16531] Chain exists of: [ 357.917232][T16531] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 357.917232][T16531] [ 357.929854][T16531] Possible unsafe locking scenario: [ 357.929854][T16531] [ 357.937312][T16531] CPU0 CPU1 [ 357.942688][T16531] ---- ---- [ 357.948061][T16531] rlock(&mm->mmap_lock); [ 357.952490][T16531] lock(sk_lock-AF_INET6); [ 357.959530][T16531] lock(&mm->mmap_lock); [ 357.966423][T16531] lock(fs_reclaim); [ 357.970425][T16531] [ 357.970425][T16531] *** DEADLOCK *** [ 357.970425][T16531] [ 357.978585][T16531] 2 locks held by syz.2.2818/16531: [ 357.983797][T16531] #0: ffff888054deae20 (sk_lock-AF_QIPCRTR){+.+.}-{0:0}, at: qrtr_ioctl+0xd1/0x450 [ 357.993224][T16531] #1: ffff88807eef83b8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 358.003209][T16531] [ 358.003209][T16531] stack backtrace: [ 358.009111][T16531] CPU: 0 UID: 0 PID: 16531 Comm: syz.2.2818 Not tainted syzkaller #0 PREEMPT(full) [ 358.009139][T16531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 358.009169][T16531] Call Trace: [ 358.009178][T16531] [ 358.009185][T16531] dump_stack_lvl+0xe8/0x150 [ 358.009215][T16531] print_circular_bug+0x2e1/0x300 [ 358.009234][T16531] check_noncircular+0x12e/0x150 [ 358.009266][T16531] __lock_acquire+0x1520/0x2cf0 [ 358.009296][T16531] ? unwind_next_frame+0x8f/0x2550 [ 358.009318][T16531] ? prepare_alloc_pages+0x15b/0x650 [ 358.009341][T16531] lock_acquire+0x106/0x350 [ 358.009363][T16531] ? prepare_alloc_pages+0x15b/0x650 [ 358.009392][T16531] fs_reclaim_acquire+0x71/0x100 [ 358.009413][T16531] ? prepare_alloc_pages+0x15b/0x650 [ 358.009435][T16531] prepare_alloc_pages+0x15b/0x650 [ 358.009461][T16531] __alloc_frozen_pages_noprof+0x12f/0x380 [ 358.009488][T16531] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 358.009515][T16531] ? __pfx_policy_nodemask+0x10/0x10 [ 358.009543][T16531] ? __lock_acquire+0x683/0x2cf0 [ 358.009567][T16531] alloc_pages_mpol+0x212/0x380 [ 358.009595][T16531] folio_alloc_mpol_noprof+0x39/0x160 [ 358.009623][T16531] vma_alloc_folio_noprof+0xe1/0x1e0 [ 358.009650][T16531] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 358.009677][T16531] ? __pte_offset_map+0x29/0x240 [ 358.009695][T16531] ? __pte_offset_map+0x29/0x240 [ 358.009713][T16531] do_pte_missing+0x173a/0x34b0 [ 358.009743][T16531] handle_mm_fault+0x1b36/0x3080 [ 358.009767][T16531] ? handle_mm_fault+0xec/0x3080 [ 358.009788][T16531] ? __pfx_handle_mm_fault+0x10/0x10 [ 358.009812][T16531] ? __lock_acquire+0x683/0x2cf0 [ 358.009837][T16531] ? lock_mm_and_find_vma+0xa7/0x340 [ 358.009859][T16531] do_user_addr_fault+0x744/0x1340 [ 358.009892][T16531] exc_page_fault+0x6a/0xc0 [ 358.009919][T16531] asm_exc_page_fault+0x26/0x30 [ 358.009936][T16531] RIP: 0010:__put_user_4+0xd/0x30 [ 358.009963][T16531] Code: 66 89 01 31 c9 0f 01 ca e9 40 92 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 17 92 03 00 90 90 90 90 90 90 90 90 90 90 [ 358.009979][T16531] RSP: 0018:ffffc90004877bb8 EFLAGS: 00050202 [ 358.009994][T16531] RAX: 0000000000034000 RBX: 0000000000000000 RCX: 0000200000005280 [ 358.010007][T16531] RDX: 0000000000000001 RSI: ffffffff8e4af75f RDI: ffffffff8c4bd380 [ 358.010026][T16531] RBP: ffffc90004877cb0 R08: ffffffff821b447f R09: 0000000000000000 [ 358.010038][T16531] R10: 0000000000000000 R11: ffff88807eef83b8 R12: 1ffff9200090ef7c [ 358.010051][T16531] R13: dffffc0000000000 R14: ffff888054deabc0 R15: 0000000000034000 [ 358.010067][T16531] ? __might_fault+0xaf/0x130 [ 358.010090][T16531] qrtr_ioctl+0x24e/0x450 [ 358.010109][T16531] ? __pfx_qrtr_ioctl+0x10/0x10 [ 358.010129][T16531] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 358.010149][T16531] sock_do_ioctl+0x101/0x320 [ 358.010181][T16531] ? __pfx_sock_do_ioctl+0x10/0x10 [ 358.010198][T16531] ? hook_file_ioctl+0x1f0/0x5f0 [ 358.010358][T16531] sock_ioctl+0x57a/0x7e0 [ 358.010377][T16531] ? __pfx_sock_ioctl+0x10/0x10 [ 358.010395][T16531] ? __fget_files+0x2a/0x420 [ 358.010418][T16531] ? __fget_files+0x3a2/0x420 [ 358.010439][T16531] ? __fget_files+0x2a/0x420 [ 358.010463][T16531] ? bpf_lsm_file_ioctl+0x9/0x20 [ 358.010500][T16531] ? __pfx_sock_ioctl+0x10/0x10 [ 358.010520][T16531] __se_sys_ioctl+0xfc/0x170 [ 358.010536][T16531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.010555][T16531] do_syscall_64+0x174/0x580 [ 358.010580][T16531] ? trace_irq_disable+0x3b/0x140 [ 358.010616][T16531] ? clear_bhb_loop+0x40/0x90 [ 358.010647][T16531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.010664][T16531] RIP: 0033:0x7fc5c6b9de99 [ 358.010680][T16531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.010698][T16531] RSP: 002b:00007fc5c7aea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.010717][T16531] RAX: ffffffffffffffda RBX: 00007fc5c6e25fa0 RCX: 00007fc5c6b9de99 [ 358.010730][T16531] RDX: 0000200000005280 RSI: 0000000000005411 RDI: 0000000000000004 [ 358.010742][T16531] RBP: 00007fc5c6c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 358.010752][T16531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.010762][T16531] R13: 00007fc5c6e26038 R14: 00007fc5c6e25fa0 R15: 00007ffdac61a568 [ 358.010783][T16531] [ 358.488619][T16540] bond15: option resend_igmp: invalid value (32767) [ 358.495977][T16540] bond15: option resend_igmp: allowed values 0 - 255 [ 358.504771][T16540] bond15 (unregistering): Released all slaves [ 360.390851][ T153] net_ratelimit: 18 callbacks suppressed [ 360.390872][ T153] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 360.510827][ T153] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 360.620828][ T153] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 360.731598][ T7008] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 360.850832][ T153] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 360.960847][ T48] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 361.070865][ T48] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 361.181241][ T8660] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 361.291192][ T48] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 361.400867][ T8660] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 365.471028][ T48] net_ratelimit: 36 callbacks suppressed [ 365.471048][ T48] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 365.591118][ T153] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 365.700933][ T8660] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 365.810930][ T48] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 365.920946][ T48] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 366.030868][ T48] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 366.140905][ T48] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 366.250886][ T48] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 366.360931][ T48] bond11: (slave ip6gretap1): failed to get link speed/duplex [ 366.471073][ T8660] bond11: (slave ip6gretap1): failed to get link speed/duplex