last executing test programs: 4.327323415s ago: executing program 0 (id=1957): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xc, 0x4, 0x7, 0x8001, 0x4180, r0, 0x80000, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaabaaaaaa00000000000000069078640100feac1414aa00034e"], 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x20000800) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r6 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000100)='GPL\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="cbd720a9827b173f4843314447af6465f7b05dff2225be2845c0117b0845a17eb24c017b8c001c1e8f4e43a3671e5afe7382e56ebf50a72a54b13dda045febb51373c3065d95e73f8f9a8710678b27add9ad4beed46b6eaeb4cd6ae425e01cb5e4c7e045fff69a430ac9c1", 0x6b}], 0x1}, 0xc850) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) sendmmsg$inet(r2, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383f1c9f5be8e55148723ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae22356781c580df817f3168269eaeeae014fa9b1878bd89e2acb4853ffd7b9a06d7f5ff090c605f5d343e6d93c80d747365d21acea325c44fbb87f6271a2d9333e9b9dd1d36dfea61641d34fd54cd2970ac14acdadd04357bdd44bc926d0adef887b2e25c2f435ce79bac1d1f473c3a49a12aa5c5cfa4bfa4fd2470308ed259e62c218aee67006a3ca187c9aa13a806d99b2275341fd6022940537b1cb1fd2389f417ea92c6e77a09a9d09a98c4e2f0912d36b47588ff991aa98c3c650055bacb669aaf68dd4f8a7b43569c9af62e7cee6ba05278fe8642feafa5c436cb13fa45b3cdf750f8956c493acf7c561b12259331a363c74fb5f2947652ced415b0986b673680e8ad7bad823ff84c30681cbe45114510d9aa6f423f212bcdf1c244178ae31474d9f176707e9c481057f72d489372f7daeba51e3ea86895c8eed109566ad19f3957d0df21a671fce2d674c207d8643c85a018834f4e8e3992e6991d815", 0xeb}, {&(0x7f0000001440)="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", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f00000005c0)={0x0, 0x1d, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001700010301000000000000000a"], 0x14}}, 0x40054) socket$nl_route(0x10, 0x3, 0x0) 4.067276212s ago: executing program 1 (id=1962): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000040)=0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00'}) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) r4 = socket$inet(0x2, 0x200000003, 0x6) getsockopt$inet_buf(r4, 0x0, 0x50, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 3.536256731s ago: executing program 4 (id=1968): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0xe20, 0x70bd2a, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40044}, 0x200000c0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x1, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5, 0x1}, {0x0, 0x8000000, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x800000, 0x0, 0x6, 0x80000001}, {0xffff4c74, 0xc3}, {0x0, 0x5, 0x0, 0x9}, {0x5}, {0x0, 0x1}, {0x0, 0x10, 0x0, 0xfffffffd, 0x20000000}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0xd9f7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffc}, {0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x5, 0x0, 0x0, 0x4}, {0xffffffff, 0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {0x0, 0x5}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2a}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {0x0, 0x9}, {0x0, 0xffffffff, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2}, {}, {0x5}, {0x0, 0x0, 0x2000, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0xe3b6, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x4, 0x0, 0xfa48}, {0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x0, 0x0, 0x800}, {0xdb3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x400, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0x4}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {}, {}, {0x0, 0x5, 0xe}, {0x2000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x9797, 0x0, 0xec33, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x9, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7f}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0xfffffffd, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x81, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80, 0x2}, {0x10000008, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x200000}, {0x0, 0x10000, 0xffffffff, 0x0, 0xfffffffd}, {0x3, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x2d, 0x0, 0x10000}, {0x0, 0x3, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x1010000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x87}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x3}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {0x1}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {0x3}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x200c0) syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000001c0)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @device_a, @from_mac=@broadcast, @device_b, {0x7, 0x6}, "", @value={0x7, 0x0, 0x1, 0x0, 0xff}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}}, 0x1e) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r2, 0x300, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40008000) 3.283267245s ago: executing program 0 (id=1971): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000010000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000e2ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}]}, &(0x7f0000000440)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000080)={r2, 0x4, 0x20, 0x3}, &(0x7f0000000840)=0x18) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r3, &(0x7f00000027c0)={&(0x7f0000001740)={0xa, 0x4e24, 0xfffffffa, @remote, 0xfbffff7f}, 0x1c, 0x0}, 0x4040814) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x34, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe, {0xb}, [@nested={0x20, 0xe, 0x0, 0x1, [@nested={0x1c, 0x151, 0x0, 0x1, [@nested={0x4, 0xde}, @generic="70765d4999d685ed20e8a9e2396c113e298d49d3"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000004) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0xa, 0x8, 0x2, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.196968792s ago: executing program 3 (id=1972): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r3, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="ec000000ed0300022cbd7000fddbdf25f98d70923299a43aa0d0f0b3c6a79b247723838039814c6711f8c60b3ff66ddfdadcff455321100ddb53d60595966fa15ce0096a2f35c5798cc841ab0e7e1c2feb5b5779c6c1757d6784c71e22c6d0ade7a7a70a23ba3ee2a9adb4294dd695fc11ed9953d8b5103a1c9591b39fe92b6defe64c4f2718a1c87f136177ab99707032bfee2836aa31459097faa98de03c82590d99d3ee4e8a974255d1658309bcd9798425eb0ca2ae0c72fc4708a63ef120aa83861ac3757e0ea6a8c60630e383bda060512227856be38ca3469cd8fd4c9f0c73658413441c92ca000000"], 0xec}, 0x1, 0x0, 0x0, 0x80}, 0x24000053) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@loopback}}, {{@in6=@mcast2}, 0x0, @in=@private}}, &(0x7f00000004c0)=0xe8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000480)='illinois', 0x8) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x90656}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x40) 3.037073079s ago: executing program 1 (id=1973): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000880)=ANY=[], 0x32600) (async) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x19, 0x0, &(0x7f0000000280)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x24}, 0x94) 2.988658641s ago: executing program 1 (id=1974): socket$packet(0x11, 0x2, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000180)={r2, 0x1, 0xfff, 0xcc}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r3, r4}, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000001dc0)={{r1}, "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"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x4, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x2, 0x7fff, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000214000e00002f74214b34586d47423cddcb0000008000008276000000000000006e81a357601e3876", 0x2e}], 0x1}, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') 2.940902472s ago: executing program 3 (id=1975): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$bt_hci(r0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="cf0400000000fddbdf251300000008000300", @ANYRES32=r7, @ANYBLOB="0a000600ffffffffffff000006001200553a435beeec4c4985903bde095c3c010000000600b50028"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x4040004) 2.849931058s ago: executing program 4 (id=1976): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000140)=0xba, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket(0x10, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2251197285d76a80, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x334, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x0, 0x7, 0x1, 0x0, "0628f1636dda43b4b2df09cd8e0db1b19acccafe2f777a54732178473aee708f06e86686532da6592f2ee9216457327e91630dd4fd0209ec525aaccdb22ff99c41f36c62de311578296b8418bc2e79e8a3589f9e2615c4ae1fc886d93e88ad410c93bb378d9342f94798bb33b866b56dcda18f37c0394b186772950527e830f9573409251f469353d0eb434e3aec93d91fb5a2eac585ab182e48953f2b3f939fd08d3c4531099ee60c7d9aef40c008510985440069ebc7953105bf8e2789313375f95f5f6710daa5b43a5c457d5471c7fefea98c89cecdce961a8ec60fdf1ce7e84b059d450035fd28ab557d040b957864"}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x84}]}]}, @NFT_MSG_DELCHAIN={0x60, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0xb67}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14}}, 0x3d8}}, 0x4048010) r5 = socket(0x27, 0x800, 0x7f) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000004a008d2a00000000000000000a"], 0x1c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r5) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYRESHEX=0x0], 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x20008000) close(r3) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r8, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01001f000000000000000800000008000300", @ANYRES32=r11, @ANYBLOB="bdabbbf5be2eae315f6762ed77dab0f481b7b1c083f6bec17c9222f3e5f50a5eaa984851591a4a"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.665826348s ago: executing program 3 (id=1977): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2, r1, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) (async) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2, r1, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close(r3) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r3}, 0x8) 2.361117935s ago: executing program 2 (id=1978): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7, 0x4932, 0x7f, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000000), &(0x7f0000000040)=@udp, 0x2}, 0x20) (async) r2 = socket$kcm(0x2d, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7fffffff}]}, 0x2c}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x34, r6, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x8040) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b54570", 0x18}], 0x1}, 0x1) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000140), &(0x7f0000000300)=r8}, 0x20) r9 = socket$inet6(0xa, 0x2, 0x0) (async) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) (async) sendmsg$inet6(r9, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e21, 0x80000, @loopback, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x28, 0x29, 0x39, {0x8, 0x2, 0x2, 0xfc, 0x0, [@mcast2]}}}], 0x28}, 0x1400c0c0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x48, 0x1e, 0x109, 0x2, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}, 0x1, 0x2b1e, 0x0, 0x20044000}, 0x2000c000) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r3}) 2.258129804s ago: executing program 0 (id=1979): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0xac, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x68, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x50, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xc3fb}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x49d}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}, @NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf8}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 2.192633617s ago: executing program 0 (id=1980): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x44}}, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$l2tp(0x2, 0x2, 0x73) (async) r1 = socket$kcm(0xa, 0x2, 0x0) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) (async) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) (async) close(r2) r3 = socket(0x2, 0x80805, 0xfffc) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x84, @private=0xa010100, 0x4e23, 0x3, 'nq\x00', 0x22, 0x660f537f, 0xf0}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x0, 0x1, 0x1}}, 0x44) (async) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2b, 0x2, 0x200) (async) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000180)={r8, 0x5}, &(0x7f0000000240)=0x8) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x7c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4084810}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r9, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x24}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r9, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x12, 0x60}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4040) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 2.171420827s ago: executing program 2 (id=1981): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept(r0, &(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, &(0x7f0000000240)=0x80) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x80000000}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, r6, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r7, &(0x7f0000000080)={0x27, r6, 0x0, 0x3, 0x0, 0x5, "750538440ff92fe2aaf1beea7cdcc151042cd9893bc31f80716a120d8be6d7f81cd81ec275000386e7255f0669b740a5418d69d00000d51de08a00ee1d9a34", 0x400000011}, 0x60) bind$nfc_llcp(r2, &(0x7f0000000300)={0x27, r6, 0x1, 0x6, 0x0, 0x3, "6d54b32b83777620d4095b3833c5008fa0c538881339e8447e3806a3a98e23a6e07eba00bd2f7ff06be6c75608291a9751df7cb0e92c7d6d4e31dc013acbd2", 0x14}, 0x60) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x6c, r8, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x40}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0x4}}, 0x8001, 0x3c, @default, @val, @val={0x2d, 0x1a, {0x4000, 0x3, 0x5, 0x0, {0xfe, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x8}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff00000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 2.084520397s ago: executing program 1 (id=1982): syz_emit_ethernet(0x42, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0xc, "064d291a00000000d05c"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x2000}}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 2.079253654s ago: executing program 4 (id=1983): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000004b37731b9ff90000070000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./cgroup\x00', r1, 0x4000, r0}, 0x18) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04fa30c762de1400005a030000000000f408208fadb08d50028b4500200000000001000000000000000000"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1d, 0x800, 0x3d, 0x2, 0x230, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt(r5, 0x9, 0x6e76fce3, &(0x7f00000008c0)="8374875fabd5d406d87cc4dd0a08c64972ccac3a8ffdea05ec06a01a82041709935df651a4f665f4a54cdef564bfcc64e45fded70fd239e7319f59fe9de1d143faf130c31fd101b408280b9a1006f9b4324720cc2230bb9963e08cc3ac4aa9e096d9c1a644413c2820fca2e8814dc2de705bc615de6ebf53870636", 0x7b) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum64={0x5, 0x0, 0x0, 0x13, 0x1, 0x9}]}, {0x0, [0x0, 0x5f, 0x30, 0x0]}}, 0x0, 0x2a, 0x0, 0x1, 0x5}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x11, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, r1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0x7fffffff, 0x82, &(0x7f0000000540)=""/130, 0x40f00, 0x3, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x4, 0xc, 0xfff, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000780)=[r1, r3, r4, r1, r6, r1, r1], &(0x7f00000007c0)=[{0x0, 0x4, 0x8, 0xb}, {0x1, 0x1, 0xc, 0x6}], 0x10, 0x7fffffff}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000004040)={0x0, 0x0, @start={0x0, 0x0, "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", "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"}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r9, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/253, 0xfd}, {&(0x7f0000003b80)=""/215, 0xd7}, {&(0x7f0000003c80)=""/166, 0xa6}], 0x4, &(0x7f0000003ec0)=""/91, 0x5b}}], 0x2, 0x0, 0x0) sendmmsg$inet6(r9, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="40a065095646bdbc2f3b88b47a63e9ab187c9f7a4adea9e44727a1464b52b3a793d36839015d17ac6bce51c1888d9f98649b71326beb2d44966a", @ANYRES16=r10, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000001c0004800500030001000000050003000500000005000300060000000800020002000000"], 0x40}}, 0x0) socket$key(0xf, 0x3, 0x2) 1.878867217s ago: executing program 0 (id=1984): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7c}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x2}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.800557404s ago: executing program 4 (id=1985): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x94) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r5 = socket(0x10, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000840)=0x1c8, 0x4) readv(r3, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, r8, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x8}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c801) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) recvmsg(r9, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000925c9885fdb7f9fc5a2b3fd8de7cd7331a984e37747c3d3f6f086e6d0f68387d7739718ecfd79786e5fce277c58a3ff7f699de62b2a50f1a71c380ebb15f99858cc86045f5709929197c5728e865add3793ca27c70b34f1345de90a5cd34b4e7f764a010a001e69797ead703711817b0cf2fb1c6473d1cdf9ef8fc2fd8636ae63073a29c90b5f89ca0d76bc42c1573962787c5cbf3ee2ce8d48a9fe9ae8e4b7dfd7dfa696c320d85114cab1ad7689da12c9b73f28e218a7acb5d57b70af3d2b6b95f0633b269b0e6d64a4e16a6b295c96bdf493711c2d6eed50906f92504314b12b4719c24ff9c27e0a712"], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r6) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r11, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x40001) socket$inet6_tcp(0xa, 0x1, 0x0) 1.711206284s ago: executing program 1 (id=1986): ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000040)={{}, "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"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'sit0\x00', @broadcast}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0xc, 0x9, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000001100)='GPL\x00', 0x6, 0x98, &(0x7f0000001140)=""/152, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000001200)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x1, 0xf, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000001280)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000012c0)=[{0x5, 0x4, 0xf}, {0x5, 0x4, 0xd, 0x7}], 0x10, 0x5}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1e, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000850000001100000095"], &(0x7f0000001040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="0cff0900a244984f2595f43dfb1e", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, @loopback, {[@routing={0x32, 0x0, 0x1, 0x4}]}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) socket$nl_route(0x10, 0x3, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 1.710757397s ago: executing program 2 (id=1987): r0 = socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000030400000000fdffff0000000300", @ANYRES32=r2, @ANYBLOB="000000006f0018000500100002000020080040"], 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40000) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000087b8ae8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000008e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0xe}, 0x94) 833.498428ms ago: executing program 2 (id=1988): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000004b80)=@newtaction={0xb0, 0x30, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{0x98, 0x1, [@m_simple={0x94, 0xa, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, '!\\#-{\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xa6e, 0x80000000, 0x5, 0x80000000, 0x55de}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0xfd, 0x7, 0x1fb8c8c, 0x5}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x21, 0x6, "dc3651eefa551d55871ca7f7117dfea7b2f7a86db32a98e1726951595d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2000c004}, 0xc054) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e00000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x0, 0xb9, 0x25, @empty, @mcast2, 0x80, 0x40, 0x401, 0x3}}) 831.703641ms ago: executing program 0 (id=1989): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth1_virt_wifi\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x49}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7f6}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private1, {0x0, 0x7, 0x800000000000, 0x4, 0xb5f7, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8, 0x0, 0x3}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x40, "06ec87"}}]}, 0x140}}, 0x844) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x3}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x40010, &(0x7f00000002c0)={0xa, 0x4e21, 0x2, @local, 0x8}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x2, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x2, 0x8000}}}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8d, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0xf, 0x0, 0x5, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}]}}]}, 0x45c}}, 0x20004000) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'caif0\x00', {0x2, 0x4e22, @loopback}}) 648.080683ms ago: executing program 3 (id=1990): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0xac, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x68, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x50, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xc3fb}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x49d}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}, @NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf8}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 558.191993ms ago: executing program 3 (id=1991): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000000) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="34010000170001002bbd7000fbdbdf25e0000002000000000000000000000000000004d56c000000fc0200000000000000000000000000010a010102000000000000000000000000640101010000000000000000000000004e2400004e2154a70200008016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000038ffffffff0000000000000000000000004e2200074e2200050200200016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="050000000000000001000100000000000700000000000000000000000100000006000000000000007f000000000000000f000000000000000100000000000000ffffffff0000000000800000000000000400000000000000000000000000000003000000000020000000000300000000ec00000005000000010000002dbd70000c0008"], 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x8070bd28, 0xfffffffd, {0x2, 0x18, 0x0, 0x0, r6}, [@IFA_ADDRESS={0x8, 0x1, @remote}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x23}}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_TARGET_NETNSID={0x8}, @IFA_LOCAL={0x8, 0x2, @private=0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x8070bd28, 0xfffffffd, {0x2, 0x18, 0x0, 0x0, r6}, [@IFA_ADDRESS={0x8, 0x1, @remote}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x23}}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_TARGET_NETNSID={0x8}, @IFA_LOCAL={0x8, 0x2, @private=0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) (async) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) 337.368392ms ago: executing program 4 (id=1992): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r1], 0x38}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401003dbd010001000000080001"], 0x18}}, 0x20004018) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r3, @ANYRES8=r3, @ANYBLOB="150c000000000000a000128009000100766c616e000000009000028006000100040000000c0002001c00000010000000280004800c000142addfcb2b2c3477000c00010008000000f30000000bfa0100050000000b000003080003800c00010001800000ffff00000c0001000600000001f0ffff0c00010007000000040000000c00010001000100070000001c0004d3b50bcebca20fa900060000000c000100000000000a00000008000500", @ANYBLOB="704d62c177840e595ef3b474cad83310fabb66fc9af729a09bf378b8032cbae7d9a43a6123cc42b74fca0511f273cfad8f1e5abf73eee87617237d28b70f1a7d3bf94f56bf59b4c37c7c36d67fa882ce554f2b827e053774b8e67482a0c67b6dea18f27479569d55d1c898e013e825d695b58eebcf7bb5fe843601a2339a780e08ee1b3f878e4698a73a9de3a9d2e9fd"], 0xc8}, 0x1, 0x0, 0x0, 0x28001}, 0x8001) 271.371952ms ago: executing program 4 (id=1993): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000140)={0x2, 0xce20, @empty}, 0x10) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000007, 0x12, r0, 0x6bb2f000) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async, rerun: 64) r1 = socket(0xa, 0x3, 0x3a) (rerun: 64) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_DONE(r1, 0x29, 0xc9, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYBLOB="08001e00d7", @ANYRESHEX=r0], 0x2c}}, 0x0) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, 0x1c) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x46}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (async) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x101880, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='.\x00', 0x0, 0x4000, r3}, 0x18) (async) r4 = accept4$alg(r0, 0x0, 0x0, 0x800) ioctl$OCFS2_IOC_GROUP_ADD64(r4, 0x40186f03, &(0x7f0000000000)={0x7f, 0x45, 0x3, 0xfffd}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000100)=0x4) 239.593888ms ago: executing program 1 (id=1994): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, 0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000001000"/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000001f000000000000007e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708c10001010000ff0000000f000000000000000007020000f8ffffffb703000008000000b70400000000008200000095000000004f34927cffb293e67abef70366574672cfe3a8f57788e39b10961813206399e3196db5d19af155df28b7d357b5a8e29a10e57bd61953b0f9f0b0a7a1882024fdc089a2747c886a2560958fa0b4efa9e4ca7aa63cf6d5258176b27bb0a1b779fc674a7a2bc3ffa05721d25030e5fc066943b686fe0661ba29f248b91a6e1c7abbdbe7059209e03e522112b5ffbcf0a43224f025b6e094e604e40fc9f4f429a66f6eb466c49bc4cbad86a32c6f7ec813eaed5f0cb955479112a035e1b5c921b96f10d215bc9f96102a5ac9375b"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x8, 0x0, 0x0}}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=@gettaction={0x68, 0x32, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x22, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe1}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xd67}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000b40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000001440)=ANY=[@ANYBLOB="bc020000", @ANYRES16=r2, @ANYBLOB="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"], 0x2bc}, 0x1, 0x0, 0x0, 0x4000010}, 0x811) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff4}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4048844) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000000000000200000008000300fc05088aaa59adcac3fccb43aa783ad49a4d22b263413698b0242a7501d42136e66a8843b32064dc590be730e29bc120f31066b6eaf3ab3e1152fadb22a579c234d1ea7ea0c2a548a1fe34e7b74a620b", @ANYRES32=r5, @ANYBLOB="0c009900410000005f0000000800a00076090000080026006c0900000800270003000000"], 0x40}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000b80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000e40)=ANY=[@ANYBLOB="47f260eae791e6d25eac9a699980dd3bcadcebcd65a808de85f84b16d44bd392e6d689ed2ca81701b76bcdb4373eca461c2d246b60969bcd62dd8b027232fa83f85bf3db93d72a6a3afa864eef1865117c527e4ecad207a693fe8319bfa2ce98e5a11fa2803da5ca39cd2e25b2b3edb118043fd8d7a379a4677d61bc", @ANYRES16=r6, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x84}, 0x44000) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r7 = socket(0x2b, 0x80801, 0x1) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) (async) sendmsg$nl_generic(r7, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f0000004c80)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x20008000) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket(0xb, 0x80000, 0xcaf) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r11}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r12, 0x8b2c, &(0x7f0000000040)) (async) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 204.714198ms ago: executing program 2 (id=1995): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x20048850) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0xf9a76}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) 69.208815ms ago: executing program 3 (id=1996): socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1208000005000100"/22, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1208000005000100"/22, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socket$unix(0x1, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) (async) 0s ago: executing program 2 (id=1997): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000200), 0x0, &(0x7f00000000c0)=ANY=[], 0x18, 0x800}], 0x1, 0x4008080) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb0ff}, [@ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x7000000}, 0x94) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000280)=0x40, 0x4) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0x2, 0x8206, 0xffff5290, 0x100}, &(0x7f00000002c0)=0x10) kernel console output (not intermixed with test programs): tribute type 13 has an invalid length. [ 137.310104][ T6750] netlink: 'syz.1.210': attribute type 17 has an invalid length. [ 137.485573][ T6750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.505407][ T6750] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.536589][ T6750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.624069][ T6750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.644773][ T6750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.671316][ T6750] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.692553][ T6750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.715340][ T6750] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 137.733317][ T6753] netlink: 1 bytes leftover after parsing attributes in process `syz.2.212'. [ 137.750532][ T6618] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20003 - 0 [ 137.783819][ T6622] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.791101][ T6622] bridge0: port 1(bridge_slave_0) entered listening state [ 137.819542][ T6622] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.826757][ T6622] bridge0: port 2(bridge_slave_1) entered listening state [ 137.956086][ T6618] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20003 - 0 [ 137.984788][ T6758] netlink: 'syz.0.213': attribute type 1 has an invalid length. [ 137.993649][ T6618] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20003 - 0 [ 138.014107][ T6758] netlink: 'syz.0.213': attribute type 2 has an invalid length. [ 138.032532][ T6758] netlink: 16 bytes leftover after parsing attributes in process `syz.0.213'. [ 138.052973][ T6618] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20003 - 0 [ 138.149714][ T6770] bond1: option downdelay: invalid value (18446744073709551613) [ 138.157653][ T6770] bond1: option downdelay: allowed values 0 - 2147483647 [ 138.174757][ T6770] bond1 (unregistering): Released all slaves [ 138.445692][ T6781] netlink: 52 bytes leftover after parsing attributes in process `syz.0.218'. [ 138.559387][ T6785] netlink: 'syz.3.219': attribute type 1 has an invalid length. [ 138.583605][ T6785] netlink: 248 bytes leftover after parsing attributes in process `syz.3.219'. [ 138.702727][ T6794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.224'. [ 138.776154][ T6798] netlink: 'syz.3.224': attribute type 1 has an invalid length. [ 138.971283][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'. [ 138.980596][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'. [ 139.028485][ T6800] xt_HMARK: proto mask must be zero with L3 mode [ 139.336361][ T6814] nbd: must specify a device to reconfigure [ 140.037577][ T6844] syz.0.235 (6844) used obsolete PPPIOCDETACH ioctl [ 140.081713][ T6848] tipc: Started in network mode [ 140.095013][ T6850] Bluetooth: MGMT ver 1.23 [ 140.097851][ T6848] tipc: Node identity 7f, cluster identity 4711 [ 140.134161][ T6848] tipc: Node number set to 127 [ 140.341546][ T6865] Cannot find del_set index 0 as target [ 140.676905][ T6883] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 140.707458][ T6883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.295013][ T6909] __nla_validate_parse: 6 callbacks suppressed [ 141.295034][ T6909] netlink: 20 bytes leftover after parsing attributes in process `syz.2.253'. [ 141.370550][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.256'. [ 141.391273][ T6915] netlink: 'syz.4.256': attribute type 3 has an invalid length. [ 141.401662][ T6914] netlink: 20 bytes leftover after parsing attributes in process `syz.4.256'. [ 141.634195][ T6925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.259'. [ 141.651062][ T6925] netlink: 32 bytes leftover after parsing attributes in process `syz.3.259'. [ 141.718047][ T6927] vlan2: entered allmulticast mode [ 141.726070][ T6927] bond0: entered allmulticast mode [ 141.731907][ T6927] bond_slave_0: entered allmulticast mode [ 141.737907][ T6927] bond_slave_1: entered allmulticast mode [ 141.745284][ T6927] netlink: 14 bytes leftover after parsing attributes in process `syz.4.258'. [ 141.814869][ T6927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.831012][ T6927] bond_slave_0: left allmulticast mode [ 141.884560][ T6927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.939134][ T6927] bond_slave_1: left allmulticast mode [ 141.963667][ T6927] bond0 (unregistering): Released all slaves [ 142.114316][ T5753] IPVS: starting estimator thread 0... [ 142.229726][ T6940] IPVS: using max 35 ests per chain, 84000 per kthread [ 142.367649][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 142.667919][ T6971] netlink: 'syz.2.271': attribute type 6 has an invalid length. [ 142.689531][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 143.035973][ T6938] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 143.137969][ T6994] Bluetooth: MGMT ver 1.23 [ 143.721656][ T7023] syzkaller0: entered promiscuous mode [ 143.738529][ T7023] syzkaller0: entered allmulticast mode [ 144.030444][ T7050] netlink: 14 bytes leftover after parsing attributes in process `syz.4.290'. [ 144.097229][ T7047] bond0: (slave bond_slave_1): Releasing backup interface [ 144.174437][ T7057] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 144.444161][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'. [ 144.531230][ T7072] hsr_slave_1 (unregistering): left promiscuous mode [ 144.558191][ T7080] rdma_op ffff88802fb551f0 conn xmit_rdma 0000000000000000 [ 144.607113][ T7080] dummy0: entered promiscuous mode [ 144.613579][ T7080] dummy0: entered allmulticast mode [ 144.835589][ T7095] netlink: 'syz.0.303': attribute type 11 has an invalid length. [ 146.470251][ T7135] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 146.512885][ T7139] __nla_validate_parse: 5 callbacks suppressed [ 146.512903][ T7139] netlink: 20 bytes leftover after parsing attributes in process `syz.1.317'. [ 146.610827][ T7145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.316'. [ 146.727729][ T7135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.315'. [ 146.770606][ T7150] netlink: 96 bytes leftover after parsing attributes in process `syz.4.318'. [ 146.806723][ T7150] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 147.130531][ T7161] ip6gre1: entered promiscuous mode [ 147.583193][ T7171] syzkaller0: entered promiscuous mode [ 147.594740][ T7171] syzkaller0: entered allmulticast mode [ 148.313051][ T7199] netlink: 'syz.0.335': attribute type 13 has an invalid length. [ 148.409965][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.335'. [ 149.304980][ T6614] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.326362][ T6614] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.356952][ T6614] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.647177][ T7246] bond1: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 149.660084][ T7246] bond1: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms [ 149.711044][ T7254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.349'. [ 149.741885][ T7260] hsr0: entered promiscuous mode [ 149.796133][ T7254] tun0: tun_chr_ioctl cmd 1074025680 [ 149.804083][ T7258] netlink: 44 bytes leftover after parsing attributes in process `syz.4.348'. [ 149.927423][ T7271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.353'. [ 150.088608][ T7279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.350'. [ 150.495221][ T7286] netlink: 76 bytes leftover after parsing attributes in process `syz.0.356'. [ 150.922177][ T7306] tls_set_device_offload_rx: netdev not found [ 151.411289][ T7335] ieee802154 phy1 wpan1: encryption failed: -22 [ 151.680924][ T7346] __nla_validate_parse: 1 callbacks suppressed [ 151.680951][ T7346] netlink: 14 bytes leftover after parsing attributes in process `syz.3.373'. [ 151.735511][ T7346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.750365][ T7346] bond0 (unregistering): Released all slaves [ 151.973263][ T7356] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.376'. [ 152.318019][ T7373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.382'. [ 152.343709][ T7373] veth1_to_team: entered promiscuous mode [ 152.344815][ T7377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.383'. [ 152.355344][ T7373] ipvlan1: entered promiscuous mode [ 152.368072][ T7373] ipvlan1: left promiscuous mode [ 152.374087][ T7373] veth1_to_team: left promiscuous mode [ 152.561970][ T7382] netlink: 'syz.2.384': attribute type 1 has an invalid length. [ 152.651507][ T808] IPVS: starting estimator thread 0... [ 152.664699][ T7387] netlink: 'syz.0.387': attribute type 29 has an invalid length. [ 152.711170][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.387'. [ 152.749708][ T7389] IPVS: using max 27 ests per chain, 64800 per kthread [ 152.770194][ T7388] gretap1: entered allmulticast mode [ 152.789557][ T7388] bond1: (slave gretap1): making interface the new active one [ 152.846972][ T7388] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 152.884194][ T7394] hsr0: entered promiscuous mode [ 152.891796][ T7402] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 152.955850][ T7386] hsr0: left promiscuous mode [ 153.147659][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.391'. [ 153.360149][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 153.368844][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 153.450682][ T7426] netlink: 44 bytes leftover after parsing attributes in process `syz.2.393'. [ 153.909566][ T7436] veth5: entered promiscuous mode [ 153.926361][ T7445] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 154.437304][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'. [ 154.675541][ T7472] netlink: 176 bytes leftover after parsing attributes in process `syz.1.408'. [ 154.710918][ T7472] trusted_key: syz.1.408 sent an empty control message without MSG_MORE. [ 154.721757][ T7475] netlink: 16 bytes leftover after parsing attributes in process `syz.3.410'. [ 154.854797][ T7481] netlink: 'syz.3.411': attribute type 30 has an invalid length. [ 154.882523][ T1173] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.883020][ T7481] netlink: 'syz.3.411': attribute type 30 has an invalid length. [ 154.903903][ T1173] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.927917][ T1173] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.951622][ T1173] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.633646][ T7489] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.641330][ T7489] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.099913][ T7489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.148964][ T7489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.643813][ T6618] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.677889][ T6618] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.759742][ T1173] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.793070][ T7519] __nla_validate_parse: 2 callbacks suppressed [ 156.793091][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.420'. [ 156.836147][ T1173] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.860825][ T7517] syzkaller0: entered promiscuous mode [ 156.873732][ T7517] syzkaller0: entered allmulticast mode [ 156.916742][ T7517] netlink: 100 bytes leftover after parsing attributes in process `syz.3.419'. [ 157.021086][ T7531] netlink: 280 bytes leftover after parsing attributes in process `syz.4.424'. [ 157.279382][ T7542] netlink: 44 bytes leftover after parsing attributes in process `syz.1.427'. [ 158.518102][ T7582] gre1: entered allmulticast mode [ 158.525032][ T7589] netlink: 20 bytes leftover after parsing attributes in process `syz.1.438'. [ 158.572703][ T7594] tipc: Started in network mode [ 158.597173][ T7594] tipc: Node identity 6a3753e5865e, cluster identity 4711 [ 158.625103][ T7594] tipc: Enabled bearer , priority 0 [ 158.652630][ T7589] lo speed is unknown, defaulting to 1000 [ 158.660659][ T7595] syzkaller0: entered promiscuous mode [ 158.683695][ T7595] syzkaller0: entered allmulticast mode [ 158.699870][ T7600] netlink: 'syz.2.441': attribute type 1 has an invalid length. [ 158.708743][ T7589] lo speed is unknown, defaulting to 1000 [ 158.721071][ T7591] tipc: Resetting bearer [ 158.833566][ T7589] lo speed is unknown, defaulting to 1000 [ 158.874913][ T7589] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 158.950960][ T7589] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 158.976587][ T7602] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 159.019209][ T7602] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 159.046887][ T7589] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 159.122118][ T7589] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 159.157121][ T7603] bond2: (slave gretap2): making interface the new active one [ 159.186372][ T7603] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 159.202447][ T7589] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 159.216323][ T7590] tipc: Resetting bearer [ 159.264904][ T7590] tipc: Disabling bearer [ 159.287123][ T7616] netlink: 14 bytes leftover after parsing attributes in process `syz.0.444'. [ 159.324501][ T7600] macvlan2: entered promiscuous mode [ 159.352419][ T7600] macvlan2: entered allmulticast mode [ 159.382101][ T7600] bond2: entered promiscuous mode [ 159.395868][ T7600] gretap2: entered promiscuous mode [ 159.407187][ T7600] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 159.419097][ T7600] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 159.431760][ T7600] bond2: left promiscuous mode [ 159.436619][ T7600] gretap2: left promiscuous mode [ 159.561643][ T7615] vlan3: entered allmulticast mode [ 159.566845][ T7615] bond0: entered allmulticast mode [ 159.614481][ T7616] bond0 (unregistering): Released all slaves [ 159.651539][ T7589] lo speed is unknown, defaulting to 1000 [ 159.674872][ T7589] lo speed is unknown, defaulting to 1000 [ 159.700488][ T7589] lo speed is unknown, defaulting to 1000 [ 159.721895][ T7589] lo speed is unknown, defaulting to 1000 [ 159.756253][ T7589] lo speed is unknown, defaulting to 1000 [ 159.864337][ T7624] xt_hl: Unknown TTL match mode: 237 [ 159.974947][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'. [ 159.995032][ T7630] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 168.718520][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.725762][ C1] bridge0: topology change detected, propagating [ 168.733315][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.740691][ C1] bridge0: topology change detected, propagating [ 178.907878][ T7633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.448'. [ 178.921679][ T7633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.448'. [ 178.972305][ T7642] 8021q: VLANs not supported on ip_vti0 [ 179.026833][ T7641] netlink: 'syz.4.452': attribute type 1 has an invalid length. [ 179.055540][ T7650] netlink: 'syz.4.452': attribute type 1 has an invalid length. [ 179.125715][ T7641] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 179.126589][ T7650] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 179.326360][ T7665] vxcan0: tx address claim with dest, not broadcast [ 179.411351][ T7670] netlink: 'syz.3.458': attribute type 32 has an invalid length. [ 179.429836][ T7667] netlink: 52 bytes leftover after parsing attributes in process `syz.1.457'. [ 179.571224][ T7665] lo speed is unknown, defaulting to 1000 [ 179.821712][ T7684] netlink: 'syz.1.461': attribute type 1 has an invalid length. [ 180.558822][ T7684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.667259][ T7685] bond1: (slave veth3): Enslaving as an active interface with a down link [ 180.768434][ T7686] bond1: (slave dummy0): making interface the new active one [ 180.777349][ T7686] dummy0: entered promiscuous mode [ 180.810339][ T7686] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 180.903924][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.462'. [ 181.302842][ T7697] netlink: 'syz.3.463': attribute type 11 has an invalid length. [ 181.328455][ T7697] netlink: 'syz.3.463': attribute type 11 has an invalid length. [ 181.346483][ T7697] netlink: 204 bytes leftover after parsing attributes in process `syz.3.463'. [ 181.399719][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.464'. [ 181.452547][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.464'. [ 182.026499][ T7712] Dead loop on virtual device ip6_vti0 (net 38), fix it urgently! [ 182.040623][ T7710] syzkaller0: entered promiscuous mode [ 182.059033][ T7710] syzkaller0: entered allmulticast mode [ 182.447072][ T30] audit: type=1804 audit(1780009059.216:3): pid=7731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.469" name="/newroot/86/cgroup.controllers" dev="tmpfs" ino=460 res=1 errno=0 [ 182.484526][ T30] audit: type=1800 audit(1780009059.216:4): pid=7731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.469" name="cgroup.controllers" dev="tmpfs" ino=460 res=0 errno=0 [ 182.513243][ T7733] netlink: 56 bytes leftover after parsing attributes in process `syz.2.470'. [ 182.547069][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.469'. [ 182.556262][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.469'. [ 183.400815][ T7761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.700979][ T5769] IPVS: starting estimator thread 0... [ 183.709676][ T7785] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 183.818476][ T7788] IPVS: using max 28 ests per chain, 67200 per kthread [ 184.049647][ T7792] bond2: entered promiscuous mode [ 184.054878][ T7792] bond2: entered allmulticast mode [ 184.060684][ T7792] 8021q: adding VLAN 0 to HW filter on device bond2 [ 184.322368][ T7802] syzkaller0: entered promiscuous mode [ 184.328941][ T7802] syzkaller0: entered allmulticast mode [ 184.670846][ T7813] netlink: 'syz.1.492': attribute type 4 has an invalid length. [ 184.699056][ T7813] netlink: 'syz.1.492': attribute type 17 has an invalid length. [ 184.734014][ T7808] vlan2: entered allmulticast mode [ 184.749700][ T7808] bond0: entered allmulticast mode [ 184.889720][ T7821] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 184.907576][ T7821] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 184.932180][ T7828] netlink: 'syz.4.495': attribute type 1 has an invalid length. [ 185.041631][ T7833] __nla_validate_parse: 4 callbacks suppressed [ 185.041650][ T7833] netlink: 20 bytes leftover after parsing attributes in process `syz.4.495'. [ 185.344210][ T7828] netlink: 28 bytes leftover after parsing attributes in process `syz.4.495'. [ 185.377875][ T7843] netlink: 20 bytes leftover after parsing attributes in process `syz.3.499'. [ 185.463733][ T7833] bond1: (slave bridge1): making interface the new active one [ 185.496498][ T7833] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 185.541293][ T5760] lo speed is unknown, defaulting to 1000 [ 185.571337][ T7828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.961140][ T7859] netlink: 260 bytes leftover after parsing attributes in process `syz.3.503'. [ 187.283946][ T7888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.361652][ T7884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.410960][ T7884] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.478640][ T7884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.574499][ T7884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.587055][ T7884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.601862][ T7884] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.613004][ T7884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.629789][ T7884] veth1_vlan: left promiscuous mode [ 187.636598][ T7884] veth0_vlan: left promiscuous mode [ 187.650210][ T7898] netlink: 240 bytes leftover after parsing attributes in process `syz.4.510'. [ 187.659637][ T7884] veth0_vlan: entered promiscuous mode [ 187.670592][ T7884] veth1_vlan: entered promiscuous mode [ 187.684221][ T7884] veth1_macvtap: left promiscuous mode [ 187.693937][ T7884] veth0_macvtap: left promiscuous mode [ 187.702446][ T7884] veth0_macvtap: entered promiscuous mode [ 187.710191][ T7884] veth1_macvtap: entered promiscuous mode [ 187.725443][ T7884] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 187.735709][ T7884] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 187.750211][ T7884] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 187.770053][ T7884] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 187.806782][ T7884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.833225][ T7884] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.936032][ T7892] hmac(sha2: entered promiscuous mode [ 187.942696][ T7901] netlink: 'syz.3.513': attribute type 13 has an invalid length. [ 187.951040][ T7901] netlink: 'syz.3.513': attribute type 17 has an invalid length. [ 187.962415][ T6618] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.969590][ T6618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.981003][ T6618] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.988187][ T6618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.097252][ T7895] bridge1: entered promiscuous mode [ 188.102992][ T7895] bridge1: entered allmulticast mode [ 188.112125][ T7895] team0: Port device bridge1 added [ 188.125995][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.513'. [ 188.132134][ T7894] bridge2: entered promiscuous mode [ 188.144925][ T7894] bridge2: entered allmulticast mode [ 188.153208][ T7894] team0: Port device bridge2 added [ 188.158534][ T6614] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.167428][ T6614] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.315451][ T7919] netlink: 'syz.4.517': attribute type 3 has an invalid length. [ 188.330277][ T7919] netlink: 666 bytes leftover after parsing attributes in process `syz.4.517'. [ 188.544487][ T7901] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 188.578254][ T7926] netlink: 'syz.1.518': attribute type 6 has an invalid length. [ 188.607042][ T6614] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.617640][ T6614] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.275970][ T7950] geneve2: entered promiscuous mode [ 189.304957][ T7950] geneve2: entered allmulticast mode [ 189.477074][ T7953] bond0: entered allmulticast mode [ 189.551471][ T7963] netlink: 'syz.3.527': attribute type 1 has an invalid length. [ 189.784533][ T7963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.930501][ T7980] netlink: 32 bytes leftover after parsing attributes in process `syz.4.531'. [ 190.096724][ T7986] lo speed is unknown, defaulting to 1000 [ 190.166508][ T7995] netlink: 14 bytes leftover after parsing attributes in process `syz.0.533'. [ 190.225069][ T7995] netlink: 132 bytes leftover after parsing attributes in process `syz.0.533'. [ 190.725780][ T8004] netlink: 277 bytes leftover after parsing attributes in process `syz.0.536'. [ 191.042462][ T8015] netlink: 'syz.4.537': attribute type 1 has an invalid length. [ 191.085834][ T8022] IPVS: set_ctl: invalid protocol: 33 172.20.20.43:20000 [ 191.127005][ T8022] netlink: 'syz.2.540': attribute type 1 has an invalid length. [ 191.398021][ T8022] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.431855][ T8036] netlink: 40 bytes leftover after parsing attributes in process `syz.0.544'. [ 191.452591][ T8028] bond2: (slave bridge2): making interface the new active one [ 191.460415][ T8036] nbd: must specify at least one socket [ 191.466838][ T8028] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 191.522013][ T8030] bond3: (slave geneve3): making interface the new active one [ 191.544004][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.544'. [ 191.559234][ T8030] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 191.574162][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.544'. [ 191.651442][ T8035] macsec1: entered promiscuous mode [ 191.651841][ T8043] netlink: 76 bytes leftover after parsing attributes in process `syz.4.545'. [ 191.666208][ T8035] macsec1: entered allmulticast mode [ 191.735184][ T8040] dvmrp8: entered allmulticast mode [ 191.766494][ T8047] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.546'. [ 191.927654][ T6614] dummy0: left promiscuous mode [ 191.975044][ T8054] netlink: 'syz.2.548': attribute type 1 has an invalid length. [ 192.103057][ T8054] bond4: entered promiscuous mode [ 192.123320][ T8054] bond4: entered allmulticast mode [ 192.146924][ T8054] 8021q: adding VLAN 0 to HW filter on device bond4 [ 192.206525][ T8059] erspan1: entered allmulticast mode [ 192.233847][ T8059] bond4: (slave erspan1): making interface the new active one [ 192.258052][ T8059] erspan1: entered promiscuous mode [ 192.276617][ T8059] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 192.626893][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'. [ 192.917001][ T8078] lo speed is unknown, defaulting to 1000 [ 193.290716][ T8097] netlink: 257 bytes leftover after parsing attributes in process `syz.3.558'. [ 193.550874][ T8101] xt_hashlimit: size too large, truncated to 1048576 [ 193.682046][ T8101] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 193.727646][ T8109] can: request_module (can-proto-4) failed. [ 193.802099][ T8122] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 194.027951][ T8127] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 194.081922][ T8129] netlink: 'syz.0.567': attribute type 4 has an invalid length. [ 194.321187][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.616128][ T8150] lo speed is unknown, defaulting to 1000 [ 195.553883][ T8187] __nla_validate_parse: 13 callbacks suppressed [ 195.553909][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.579'. [ 195.606869][ T8186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.579'. [ 195.613958][ T8189] netlink: 20 bytes leftover after parsing attributes in process `syz.2.582'. [ 195.898095][ T8195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.584'. [ 196.092209][ T8202] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 196.458252][ T8229] netlink: 20 bytes leftover after parsing attributes in process `syz.3.594'. [ 196.504339][ T8232] syzkaller0: entered promiscuous mode [ 196.527678][ T8232] syzkaller0: entered allmulticast mode [ 196.568061][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'. [ 197.092195][ T8240] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.595'. [ 197.577348][ T8277] netlink: 'syz.4.605': attribute type 1 has an invalid length. [ 197.850885][ T8288] netlink: 44 bytes leftover after parsing attributes in process `syz.4.608'. [ 197.925182][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'. [ 198.097643][ T8298] netlink: 27 bytes leftover after parsing attributes in process `syz.3.611'. [ 198.426758][ T8304] netlink: 'syz.3.612': attribute type 13 has an invalid length. [ 198.534628][ T8304] gretap0: refused to change device tx_queue_len [ 198.542482][ T8304] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 198.658009][ T8320] netlink: 'syz.3.616': attribute type 8 has an invalid length. [ 198.764378][ T8313] syzkaller0: entered promiscuous mode [ 198.783130][ T8313] syzkaller0: entered allmulticast mode [ 198.831766][ T8320] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.839699][ T8320] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.025987][ T8320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.040938][ T8320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.184392][ T8321] pimreg: entered allmulticast mode [ 199.194229][ T6622] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.212085][ T6622] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.236966][ T6622] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.257956][ T6622] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.272147][ T8321] pimreg: left allmulticast mode [ 199.405937][ T6622] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.440107][ T6622] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.757284][ T7508] IPVS: starting estimator thread 0... [ 199.759587][ T8358] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 199.880115][ T8364] IPVS: using max 25 ests per chain, 60000 per kthread [ 201.308163][ T6622] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.317388][ T6622] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.424690][ T8369] lo speed is unknown, defaulting to 1000 [ 201.586594][ T8387] netlink: 'syz.4.632': attribute type 1 has an invalid length. [ 201.620822][ T8384] __nla_validate_parse: 174 callbacks suppressed [ 201.620841][ T8384] netlink: 830 bytes leftover after parsing attributes in process `syz.1.631'. [ 201.674544][ T8387] bond3: entered promiscuous mode [ 201.680613][ T8387] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.898285][ T8403] netlink: 64 bytes leftover after parsing attributes in process `syz.4.632'. [ 202.545698][ T8420] bond4: option min_links: invalid value (18446744073709551612) [ 202.576649][ T8420] bond4: option min_links: allowed values 0 - 2147483647 [ 202.601733][ T8420] bond4 (unregistering): Released all slaves [ 202.684377][ T8437] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 202.867183][ T8430] syzkaller1: entered promiscuous mode [ 202.886336][ T8430] syzkaller1: entered allmulticast mode [ 203.043945][ T8455] netlink: 44 bytes leftover after parsing attributes in process `syz.2.645'. [ 203.069188][ T8435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.101404][ T8458] netlink: 'syz.0.647': attribute type 1 has an invalid length. [ 205.515529][ T8429] syzkaller0: entered promiscuous mode [ 205.521891][ T8429] syzkaller0: entered allmulticast mode [ 205.591332][ T8458] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.599447][ T8459] bond2: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 205.635342][ T8459] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 205.701993][ T8466] Bluetooth: MGMT ver 1.23 [ 205.823491][ T8468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.888265][ T8476] netlink: 300 bytes leftover after parsing attributes in process `syz.0.651'. [ 205.940370][ T8471] netlink: 'syz.0.651': attribute type 4 has an invalid length. [ 206.136597][ T8474] ip6_vti0: entered promiscuous mode [ 206.157952][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 206.276937][ T8488] veth0_macvtap: entered allmulticast mode [ 206.305100][ T8488] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 206.334035][ T8497] netlink: 45 bytes leftover after parsing attributes in process `syz.1.656'. [ 206.382967][ T8500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.658'. [ 206.473625][ T8503] netlink: 'syz.3.658': attribute type 2 has an invalid length. [ 206.503601][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.659'. [ 206.537983][ T8492] lo speed is unknown, defaulting to 1000 [ 206.565232][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.659'. [ 206.575975][ T8507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.660'. [ 206.935165][ T8527] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 206.965964][ T8528] __nla_validate_parse: 2 callbacks suppressed [ 206.965991][ T8528] netlink: 28 bytes leftover after parsing attributes in process `syz.1.665'. [ 207.102900][ T8528] 8021q: adding VLAN 0 to HW filter on device bond4 [ 207.225151][ T8536] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 207.237348][ T8539] netlink: 36 bytes leftover after parsing attributes in process `syz.3.668'. [ 207.255476][ T8536] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 207.317853][ T8541] netlink: 24 bytes leftover after parsing attributes in process `syz.4.667'. [ 207.341857][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.666'. [ 207.352282][ T8541] openvswitch: netlink: Flow key attr not present in new flow. [ 207.521313][ T8551] netlink: 'syz.4.672': attribute type 1 has an invalid length. [ 207.543898][ T8547] netlink: 88 bytes leftover after parsing attributes in process `syz.0.670'. [ 207.687255][ T8551] 8021q: adding VLAN 0 to HW filter on device bond4 [ 207.766752][ T8561] netlink: 'syz.2.677': attribute type 1 has an invalid length. [ 207.788135][ T8554] bond4: (slave macvlan0): making interface the new active one [ 207.850866][ T8554] bond4: (slave macvlan0): Enslaving as an active interface with an up link [ 207.940730][ T8574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.965010][ T8575] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.679'. [ 208.034984][ T8561] 8021q: adding VLAN 0 to HW filter on device bond5 [ 208.064833][ T8562] bond5: option lacp_rate: mode dependency failed, not supported in mode balance-alb(6) [ 208.363694][ T8590] netlink: 20 bytes leftover after parsing attributes in process `syz.4.684'. [ 208.507255][ T8595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.685'. [ 208.926490][ T8614] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.691'. [ 208.938059][ T8614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.120794][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'. [ 209.136955][ T8622] tipc: Started in network mode [ 209.146288][ T8622] tipc: Node identity 7ecacfed5af9, cluster identity 4711 [ 209.154855][ T8622] tipc: Enabled bearer , priority 0 [ 209.163225][ T8625] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 209.191189][ T8622] syzkaller0: entered promiscuous mode [ 209.208428][ T8622] syzkaller0: entered allmulticast mode [ 209.235191][ T8622] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 209.297958][ T8622] tipc: Resetting bearer [ 209.414108][ T8620] tipc: Resetting bearer [ 209.436843][ T8635] IPVS: length: 15 != 8 [ 209.480820][ T8620] tipc: Disabling bearer [ 209.788074][ T8646] syzkaller0: entered promiscuous mode [ 209.798370][ T8646] syzkaller0: entered allmulticast mode [ 210.039956][ T6622] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.062857][ T6622] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.082738][ T6622] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.102329][ T6622] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.166541][ T8657] netlink: 'syz.4.705': attribute type 1 has an invalid length. [ 210.389365][ T8657] 8021q: adding VLAN 0 to HW filter on device bond5 [ 210.436845][ T8660] macvlan3: entered promiscuous mode [ 210.456598][ T8660] macvlan3: entered allmulticast mode [ 210.488903][ T8660] bond5: entered allmulticast mode [ 210.521450][ T8660] bond5: entered promiscuous mode [ 210.559479][ T8660] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 210.614643][ T8660] team0: Port device macvlan3 added [ 210.675331][ T8665] bond5: (slave ip6gretap2): making interface the new active one [ 210.700320][ T8665] ip6gretap2: entered promiscuous mode [ 210.713007][ T8665] ip6gretap2: entered allmulticast mode [ 210.743553][ T8665] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 211.228844][ T8683] bond2: option fail_over_mac: invalid value (127) [ 211.270914][ T8683] bond2 (unregistering): Released all slaves [ 211.415861][ T8687] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚Y‡°”õËí [ 211.415861][ T8687] 3ìUH†5rºBnœæ [ 212.063269][ T8706] netlink: 'syz.4.718': attribute type 4 has an invalid length. [ 212.106785][ T8710] atomic_op ffff888053e8c198 conn xmit_atomic 0000000000000000 [ 212.224997][ T8714] __nla_validate_parse: 6 callbacks suppressed [ 212.225018][ T8714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.720'. [ 212.329539][ T8717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.722'. [ 213.048770][ T8741] netlink: 72 bytes leftover after parsing attributes in process `syz.0.729'. [ 213.278602][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.731'. [ 213.304128][ T8746] hsr_slave_0: left promiscuous mode [ 213.345487][ T8748] netlink: 'syz.3.732': attribute type 1 has an invalid length. [ 213.460715][ T8750] bond2: (slave dummy0): making interface the new active one [ 213.513807][ T8750] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 213.686357][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.732'. [ 213.856745][ T8763] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.738'. [ 214.010428][ T8768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.075475][ T8771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.741'. [ 214.081206][ T8768] syzkaller0: entered promiscuous mode [ 214.110451][ T8768] syzkaller0: entered allmulticast mode [ 214.162484][ T8771] ipvlan2: entered allmulticast mode [ 214.167966][ T8771] syz_tun: entered allmulticast mode [ 214.411195][ T5753] bridge0: entered promiscuous mode [ 214.526541][ T8790] netlink: 'syz.4.746': attribute type 1 has an invalid length. [ 214.541594][ T8790] netlink: 96 bytes leftover after parsing attributes in process `syz.4.746'. [ 214.562911][ T8790] netlink: 1 bytes leftover after parsing attributes in process `syz.4.746'. [ 214.604614][ T8796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.748'. [ 215.702718][ T8827] netlink: 'syz.4.756': attribute type 32 has an invalid length. [ 216.062414][ T8844] netlink: 'syz.2.761': attribute type 1 has an invalid length. [ 216.096495][ T8856] netlink: 'syz.1.759': attribute type 5 has an invalid length. [ 216.222380][ T8844] 8021q: adding VLAN 0 to HW filter on device bond6 [ 216.772954][ T8881] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.788819][ T8883] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 217.919580][ T8935] __nla_validate_parse: 3 callbacks suppressed [ 217.919600][ T8935] netlink: 20 bytes leftover after parsing attributes in process `syz.4.786'. [ 218.323185][ T8952] tunl0: entered allmulticast mode [ 218.370442][ T8956] nbd: couldn't find a device at index 0 [ 218.408847][ T8956] netlink: 56 bytes leftover after parsing attributes in process `syz.2.789'. [ 218.928980][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 219.394068][ T9002] 8021q: adding VLAN 0 to HW filter on device bond7 [ 219.668007][ T9015] nbd: socks must be embedded in a SOCK_ITEM attr [ 219.783726][ T9024] netlink: 36 bytes leftover after parsing attributes in process `syz.2.803'. [ 219.967548][ T9029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.005062][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 220.175332][ T9037] IPVS: length: 102 != 8 [ 220.321653][ T9042] pim6reg: entered allmulticast mode [ 220.332072][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'. [ 220.348534][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.809'. [ 220.361729][ T9048] netlink: 'syz.0.809': attribute type 15 has an invalid length. [ 220.540628][ T9050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.812'. [ 220.557009][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'. [ 220.683019][ T9062] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c) [ 220.886663][ T9073] xt_hashlimit: size too large, truncated to 1048576 [ 220.926109][ T9068] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.024329][ T9072] lo speed is unknown, defaulting to 1000 [ 221.726081][ T9117] netlink: 'syz.4.829': attribute type 3 has an invalid length. [ 221.753131][ T9117] netlink: 68 bytes leftover after parsing attributes in process `syz.4.829'. [ 221.923792][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.830'. [ 221.942950][ T9127] netlink: 'syz.1.831': attribute type 1 has an invalid length. [ 221.961639][ T9119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.975680][ T9127] netlink: 224 bytes leftover after parsing attributes in process `syz.1.831'. [ 222.065162][ T9119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.449586][ T9153] netlink: 'syz.3.839': attribute type 1 has an invalid length. [ 222.736255][ T9156] netlink: 'syz.3.840': attribute type 16 has an invalid length. [ 222.767257][ T9156] netlink: 'syz.3.840': attribute type 17 has an invalid length. [ 222.990127][ T9178] __nla_validate_parse: 4 callbacks suppressed [ 222.990146][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'. [ 223.127081][ T9188] netlink: 16 bytes leftover after parsing attributes in process `syz.0.847'. [ 225.008877][ T9180] syzkaller0: entered promiscuous mode [ 225.026282][ T9180] syzkaller0: entered allmulticast mode [ 225.103462][ T9198] bond1: (slave dummy0): Releasing active interface [ 225.145535][ T9198] bridge_slave_0: left allmulticast mode [ 225.181199][ T9198] bridge_slave_0: left promiscuous mode [ 225.207606][ T9198] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.237061][ T9198] bridge_slave_1: left allmulticast mode [ 225.250984][ T9198] bridge_slave_1: left promiscuous mode [ 225.262505][ T9198] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.287259][ T9198] bond0: (slave bond_slave_0): Releasing backup interface [ 225.310389][ T9198] bond0: (slave bond_slave_1): Releasing backup interface [ 225.338220][ T9198] team0: Port device team_slave_0 removed [ 225.363856][ T9198] team0: Port device team_slave_1 removed [ 225.371652][ T9198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.385698][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.855'. [ 225.397677][ T9198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.418507][ T9198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.426009][ T9198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.454405][ T9198] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 225.594510][ T9213] netlink: 10 bytes leftover after parsing attributes in process `syz.3.855'. [ 225.798238][ T9223] netlink: 'syz.4.857': attribute type 3 has an invalid length. [ 226.108791][ T9240] netlink: 'syz.1.862': attribute type 1 has an invalid length. [ 226.379903][ T9240] 8021q: adding VLAN 0 to HW filter on device bond5 [ 226.394352][ T9258] IPVS: ip_vs_edit_dest(): server weight less than zero [ 226.604824][ T9244] bond5: (slave veth7): Enslaving as an active interface with a down link [ 226.648521][ T9254] tipc: Enabled bearer , priority 0 [ 226.681104][ T9245] tipc: Resetting bearer [ 226.708554][ T9256] syzkaller0: entered promiscuous mode [ 226.714929][ T9256] syzkaller0: entered allmulticast mode [ 226.722448][ T9252] netlink: 180 bytes leftover after parsing attributes in process `syz.3.864'. [ 226.756640][ T9246] pim6reg: entered allmulticast mode [ 226.775939][ T9243] tipc: Resetting bearer [ 226.820581][ T9243] tipc: Disabling bearer [ 226.954827][ T9248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.863'. [ 227.155208][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.862'. [ 227.202134][ T9240] bond5: (slave dummy0): making interface the new active one [ 227.250744][ T9292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.871'. [ 227.258133][ T9244] netlink: 14 bytes leftover after parsing attributes in process `syz.1.862'. [ 227.289799][ T9240] dummy0: entered promiscuous mode [ 227.316230][ T9240] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 227.397446][ T9292] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.432095][ T9244] bond5: (slave dummy0): Releasing active interface [ 227.449961][ T9244] dummy0 (unregistering): left promiscuous mode [ 227.571482][ T9297] gretap2: entered allmulticast mode [ 227.840698][ T9311] batadv_slave_1: entered promiscuous mode [ 228.132591][ T9308] batadv_slave_1: left promiscuous mode [ 228.630900][ T9355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.887'. [ 228.641208][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.885'. [ 228.667582][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.885'. [ 228.708581][ T9356] netlink: 'syz.3.885': attribute type 15 has an invalid length. [ 228.865654][ T9366] gtp0: entered promiscuous mode [ 228.895335][ T9366] gtp0: entered allmulticast mode [ 228.998873][ T9368] ipt_ECN: cannot use operation on non-tcp rule [ 229.460040][ T9385] netlink: 27 bytes leftover after parsing attributes in process `syz.0.892'. [ 230.159872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 230.576834][ T9411] syzkaller0: entered promiscuous mode [ 230.599047][ T9411] syzkaller0: entered allmulticast mode [ 230.657902][ T9417] vlan0: entered allmulticast mode [ 230.665732][ T9417] bond0: entered allmulticast mode [ 230.674821][ T9421] batman_adv: batadv0: Adding interface: dummy0 [ 230.691703][ T9421] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.740545][ T9421] batman_adv: batadv0: Interface activated: dummy0 [ 230.982335][ T9429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.904'. [ 231.019498][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.902'. [ 231.127259][ T9430] batadv0: mtu less than device minimum [ 231.159184][ T9430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.172231][ T9430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.183960][ T9430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.195925][ T9430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.207644][ T9430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.219507][ T9430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.231341][ T9430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.243208][ T9430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.255072][ T9430] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 231.533591][ T9446] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.541595][ T9446] IPv6: NLM_F_CREATE should be set when creating new route [ 231.549016][ T9446] IPv6: NLM_F_CREATE should be set when creating new route [ 231.556317][ T9446] IPv6: NLM_F_CREATE should be set when creating new route [ 233.283948][ T9434] bridge3: entered promiscuous mode [ 233.289951][ T9434] bridge3: entered allmulticast mode [ 233.571188][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.909'. [ 233.640573][ T9456] netlink: 32 bytes leftover after parsing attributes in process `syz.1.909'. [ 234.321078][ T9486] netlink: 'syz.1.916': attribute type 13 has an invalid length. [ 235.220920][ T9510] batman_adv: batadv0: Adding interface: dummy0 [ 235.229148][ T9510] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.329431][ T9510] batman_adv: batadv0: Interface activated: dummy0 [ 235.500424][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.921'. [ 235.647245][ T9524] netlink: 52 bytes leftover after parsing attributes in process `syz.2.922'. [ 235.793548][ T9527] hsr0: entered promiscuous mode [ 235.806920][ T9528] hsr0: left promiscuous mode [ 236.427185][ T5635] block nbd1: Receive control failed (result -32) [ 236.726116][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.931'. [ 236.904539][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.933'. [ 237.144861][ T9558] bond6 (unregistering): Released all slaves [ 237.190199][ T9565] netlink: 'syz.1.934': attribute type 1 has an invalid length. [ 237.224858][ T9565] netlink: 13 bytes leftover after parsing attributes in process `syz.1.934'. [ 237.321577][ T9563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.934'. [ 237.358154][ T9563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.934'. [ 237.374870][ T9570] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 237.374870][ T9570] Please contact the netfilter-devel mailing list or update your nftables rules. [ 237.502935][ T9574] bridge0: port 3(vlan2) entered blocking state [ 237.509622][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.938'. [ 237.526045][ T9574] bridge0: port 3(vlan2) entered disabled state [ 237.536378][ T9574] vlan2: entered allmulticast mode [ 237.545259][ T9574] geneve0: entered allmulticast mode [ 237.554530][ T9574] vlan2: entered promiscuous mode [ 237.560072][ T9574] geneve0: entered promiscuous mode [ 237.600388][ T9575] netlink: 'syz.0.937': attribute type 3 has an invalid length. [ 237.628931][ T9575] netlink: 132 bytes leftover after parsing attributes in process `syz.0.937'. [ 238.196229][ T9601] netlink: 'syz.1.944': attribute type 32 has an invalid length. [ 238.796651][ T9626] xt_ecn: cannot match TCP bits for non-tcp packets [ 239.095535][ T9638] netlink: 'syz.2.954': attribute type 34 has an invalid length. [ 239.396131][ T9651] __nla_validate_parse: 1 callbacks suppressed [ 239.396151][ T9651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.957'. [ 240.156386][ T9680] syzkaller0: entered promiscuous mode [ 240.173753][ T9680] syzkaller0: entered allmulticast mode [ 240.362117][ T9692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.967'. [ 240.467510][ T9696] netlink: 256 bytes leftover after parsing attributes in process `syz.4.969'. [ 240.647770][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.972'. [ 240.703736][ T30] audit: type=1804 audit(1780009117.476:5): pid=9708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.972" name="/newroot/202/cgroup.controllers" dev="tmpfs" ino=1052 res=1 errno=0 [ 240.752026][ T30] audit: type=1800 audit(1780009117.476:6): pid=9708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.972" name="cgroup.controllers" dev="tmpfs" ino=1052 res=0 errno=0 [ 240.828002][ T30] audit: type=1804 audit(1780009117.526:7): pid=9708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.972" name="/newroot/202/cgroup.controllers" dev="tmpfs" ino=1052 res=1 errno=0 [ 241.885413][ T9727] netlink: 'syz.1.978': attribute type 4 has an invalid length. [ 241.912893][ T9727] netlink: 156 bytes leftover after parsing attributes in process `syz.1.978'. [ 241.936737][ T9727] net_ratelimit: 30 callbacks suppressed [ 241.936758][ T9727] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 242.021139][ T9729] netlink: 'syz.0.979': attribute type 10 has an invalid length. [ 242.059319][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.979'. [ 242.101897][ T9737] x_tables: duplicate underflow at hook 1 [ 242.181606][ T9738] macsec1: entered promiscuous mode [ 242.191618][ T9738] macsec1: entered allmulticast mode [ 242.265253][ T9743] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 242.297347][ T9743] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 242.314271][ T9746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.983'. [ 242.505176][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.985'. [ 242.654472][ T9751] bond6: Unable to set down delay as MII monitoring is disabled [ 242.665148][ T9751] bond6 (unregistering): Released all slaves [ 242.725506][ T9755] lo speed is unknown, defaulting to 1000 [ 243.040098][ T9775] netlink: 32 bytes leftover after parsing attributes in process `syz.2.990'. [ 243.116525][ T9775] xt_l2tp: invalid flags combination: 8 [ 243.346618][ T9782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.992'. [ 243.678683][ T9793] netlink: 'syz.1.993': attribute type 1 has an invalid length. [ 243.709245][ T9793] netlink: 'syz.1.993': attribute type 3 has an invalid length. [ 244.011385][ T9813] IPVS: sh: FWM 3 0x00000003 - no destination available [ 244.084521][ T9804] lo speed is unknown, defaulting to 1000 [ 244.152332][ T9818] tipc: Can't bind to reserved service type 0 [ 244.299229][ T9822] netlink: 'syz.4.1001': attribute type 10 has an invalid length. [ 244.353410][ T9826] netlink: 'syz.4.1001': attribute type 10 has an invalid length. [ 244.400687][ T9822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 244.439204][ T9822] team0: Port device netdevsim1 added [ 244.481051][ T9826] team0: Port device netdevsim1 removed [ 244.499976][ T9830] __nla_validate_parse: 3 callbacks suppressed [ 244.499994][ T9830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1002'. [ 244.521571][ T9838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1004'. [ 244.571191][ T9838] pim6reg: entered allmulticast mode [ 244.944373][ T9856] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1009'. [ 245.043869][ T9845] lo speed is unknown, defaulting to 1000 [ 245.193016][ T9874] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.1013'. [ 245.276427][ T9878] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.1013'. [ 245.332865][ T9880] macvlan0: entered promiscuous mode [ 245.446253][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1014'. [ 245.650301][ T9884] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 245.680343][ T9880] macvlan0: entered allmulticast mode [ 245.703858][ T9882] macvlan0 (unregistering): left promiscuous mode [ 245.711059][ T9882] macvlan0 (unregistering): left allmulticast mode [ 246.093814][ T9907] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 246.117882][ T9907] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 246.256814][ T9912] sctp: [Deprecated]: syz.2.1022 (pid 9912) Use of int in max_burst socket option. [ 246.256814][ T9912] Use struct sctp_assoc_value instead [ 246.469051][ T9919] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1025'. [ 246.513425][ T9923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1027'. [ 246.735408][ T9934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1029'. [ 246.817159][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1028'. [ 247.303346][ T9970] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 247.322189][ T9970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.792261][ T9990] netlink: 'syz.4.1041': attribute type 1 has an invalid length. [ 247.936033][ T9998] netlink: 'syz.3.1043': attribute type 1 has an invalid length. [ 248.227146][ T9990] 8021q: adding VLAN 0 to HW filter on device bond6 [ 248.292010][T10007] ip6tnl2: entered allmulticast mode [ 248.327581][ T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 249.026929][T10052] ip6gre1: entered promiscuous mode [ 249.035987][T10052] ip6gre1: entered allmulticast mode [ 249.056986][T10052] netlink: 'syz.1.1052': attribute type 6 has an invalid length. [ 249.331265][T10062] team0: Port device syz_tun added [ 249.528029][T10070] __nla_validate_parse: 14 callbacks suppressed [ 249.528050][T10070] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1059'. [ 249.563738][T10067] lo speed is unknown, defaulting to 1000 [ 249.669068][T10073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.844245][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1061'. [ 250.172319][T10097] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 252.024781][T10111] netlink: 'syz.0.1069': attribute type 1 has an invalid length. [ 252.154921][T10112] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 252.395432][T10132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1074'. [ 252.417126][T10129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1074'. [ 252.429318][T10135] netlink: 'syz.4.1075': attribute type 1 has an invalid length. [ 252.482449][T10135] bond7: entered promiscuous mode [ 252.488019][T10135] 8021q: adding VLAN 0 to HW filter on device bond7 [ 252.509961][T10134] bridge1: port 1(gretap3) entered blocking state [ 252.516752][T10134] bridge1: port 1(gretap3) entered disabled state [ 252.526754][T10134] gretap3: entered allmulticast mode [ 252.528871][T10135] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1075'. [ 252.544025][T10134] gretap3: entered promiscuous mode [ 252.576872][T10135] bond7: entered allmulticast mode [ 252.632001][T10135] bond7: (slave bridge4): making interface the new active one [ 252.639862][T10135] bridge4: entered promiscuous mode [ 252.645427][T10135] bridge4: entered allmulticast mode [ 252.654777][T10135] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 252.776285][T10150] xt_hashlimit: overflow, try lower: 6/0 [ 252.799016][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 252.890950][T10153] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 252.907285][T10153] bond8 (unregistering): Released all slaves [ 252.945672][T10165] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1083'. [ 253.073371][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1084'. [ 253.224659][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1086'. [ 253.310595][T10188] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1087'. [ 253.644823][T10203] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 253.679649][T10199] bond8: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 253.719205][T10199] bond8: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms [ 254.078780][T10220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1096'. [ 254.237120][T10222] geneve2: entered promiscuous mode [ 254.253599][ T62] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.286091][ T6616] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.305808][ T6616] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.323007][T10225] lo: Caught tx_queue_len zero misconfig [ 254.331522][ T6616] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.784488][T10248] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 255.090388][T10263] __nla_validate_parse: 1 callbacks suppressed [ 255.090407][T10263] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1108'. [ 255.124110][T10264] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 255.202075][T10268] netlink: 'syz.0.1111': attribute type 1 has an invalid length. [ 255.261907][T10272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1112'. [ 255.286902][T10273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1111'. [ 255.362568][T10273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1111'. [ 255.399897][T10268] bond5: entered promiscuous mode [ 255.411905][T10268] 8021q: adding VLAN 0 to HW filter on device bond5 [ 255.513675][T10279] bond5: (slave bridge2): making interface the new active one [ 255.521886][T10279] bridge2: entered promiscuous mode [ 255.530508][T10279] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 255.584538][T10286] siw: device registration error -23 [ 255.764524][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.889568][T10300] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 255.914833][T10287] syzkaller0: entered promiscuous mode [ 255.931789][T10287] syzkaller0: entered allmulticast mode [ 256.009821][T10307] netlink: 'syz.3.1119': attribute type 1 has an invalid length. [ 257.886338][T10307] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 258.062216][T10318] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1122'. [ 258.133616][T10324] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 258.297918][T10333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1128'. [ 258.318692][T10334] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 258.490092][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1132'. [ 258.536571][T10338] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1131'. [ 258.631323][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1135'. [ 258.645429][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1135'. [ 258.654580][T10347] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 258.725317][T10350] netlink: 'syz.3.1136': attribute type 1 has an invalid length. [ 258.772096][T10350] bond5: entered promiscuous mode [ 258.777750][T10350] 8021q: adding VLAN 0 to HW filter on device bond5 [ 259.447176][T10382] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 259.533029][T10389] netlink: 'syz.4.1145': attribute type 4 has an invalid length. [ 259.585188][T10389] netlink: 'syz.4.1145': attribute type 4 has an invalid length. [ 259.713341][T10401] block nbd2: Unsupported socket: should be TCP or UNIX. [ 259.723611][T10397] syzkaller1: entered promiscuous mode [ 259.741039][T10397] syzkaller1: entered allmulticast mode [ 259.750677][T10401] SET target dimension over the limit! [ 259.779623][T10399] IPVS: set_ctl: invalid protocol: 255 10.1.1.2:20001 [ 260.002777][ T7513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.318655][T10427] __nla_validate_parse: 4 callbacks suppressed [ 260.318678][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1156'. [ 260.354483][T10417] netlink: 'syz.3.1152': attribute type 1 has an invalid length. [ 260.362459][T10417] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1152'. [ 260.371556][T10417] netlink: 658 bytes leftover after parsing attributes in process `syz.3.1152'. [ 260.418401][T10417] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1152'. [ 260.647560][T10435] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 261.025522][T10442] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 261.046906][ T7513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.091611][T10448] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 261.201919][T10450] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1164'. [ 261.326198][T10454] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1166'. [ 261.337141][T10455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1165'. [ 261.360258][ T7515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.483419][T10462] tipc: Enabling of bearer rejected, failed to enable media [ 261.519061][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 262.080705][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.777628][T10508] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1177'. [ 262.784224][T10507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1178'. [ 262.844036][T10507] tipc: Started in network mode [ 262.852766][T10507] tipc: Node identity 080211000001, cluster identity 4711 [ 262.871325][T10507] tipc: Enabled bearer , priority 0 [ 263.124124][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.483358][ T7513] lo speed is unknown, defaulting to 1000 [ 263.491508][ T7513] syz2: Port: 1 Link DOWN [ 263.702286][T10514] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.742200][T10514] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.002960][T10514] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.016333][T10514] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.037283][T10551] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1188'. [ 264.106979][ T7515] tipc: Node number set to 134418688 [ 264.159304][ T7513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.277061][T10514] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.324711][T10514] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.495901][T10514] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.539243][T10514] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.836105][T10583] xt_hashlimit: size too large, truncated to 1048576 [ 264.935668][ T6620] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.953010][ T6620] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.042190][ T6616] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.067053][ T6616] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.154242][ T6616] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.180053][ T6616] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.198662][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.290421][ T6616] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.320003][ T6616] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.512861][T10599] bridge0: entered allmulticast mode [ 265.569444][T10598] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1202'. [ 265.912638][T10620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1207'. [ 265.976059][T10623] team0: entered promiscuous mode [ 265.984499][T10623] team_slave_0: entered promiscuous mode [ 265.991421][T10623] team_slave_1: entered promiscuous mode [ 266.092789][T10624] netlink: 'syz.1.1207': attribute type 1 has an invalid length. [ 266.142833][T10624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.144895][T10631] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 266.216609][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1211'. [ 266.249752][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.290400][T10638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.300657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.536812][T10641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1213'. [ 266.599276][T10646] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.020093][T10657] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1216'. [ 267.119793][ T7508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.159107][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'. [ 267.198738][T10667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 267.239728][T10670] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1218'. [ 267.280896][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.302328][T10667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 267.458714][T10678] xt_hashlimit: max too large, truncated to 1048576 [ 267.647439][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1224'. [ 267.864101][T10701] tipc: Started in network mode [ 267.892799][T10701] tipc: Node identity 080211000001, cluster identity 4096 [ 267.963484][T10701] tipc: Enabled bearer , priority 0 [ 268.274144][T10724] netlink: 'syz.4.1232': attribute type 1 has an invalid length. [ 268.318527][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.517798][T10737] Bluetooth: MGMT ver 1.23 [ 268.530881][T10724] 8021q: adding VLAN 0 to HW filter on device bond9 [ 268.692043][ T5293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 269.012610][T10749] IPVS: length: 35 != 1573080 [ 269.082002][ T7513] tipc: Node number set to 134418688 [ 269.359797][ T7513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.398757][ T7513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.675978][T10817] __nla_validate_parse: 6 callbacks suppressed [ 270.675998][T10817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1254'. [ 270.863598][T10823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.963766][T10824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.098233][T10832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1258'. [ 271.126936][T10832] xt_TPROXY: Can be used only with -p tcp or -p udp [ 271.384312][T10841] netlink: 'syz.0.1262': attribute type 11 has an invalid length. [ 271.410551][T10841] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1262'. [ 271.447874][ T7513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.587769][T10843] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1262'. [ 271.598935][T10847] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.1264'. [ 271.817478][T10862] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1270'. [ 271.844213][T10860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1269'. [ 271.888884][T10862] ip6gre2: entered promiscuous mode [ 271.904413][T10862] ip6gre2: entered allmulticast mode [ 272.059085][T10872] netlink: 'syz.1.1273': attribute type 5 has an invalid length. [ 272.345217][T10885] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1276'. [ 272.373525][T10887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.520436][T10897] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1280'. [ 272.544211][T10897] bridge5: entered promiscuous mode [ 272.549772][T10897] bridge5: entered allmulticast mode [ 272.560206][T10897] team0: Port device bridge5 added [ 272.569905][T10897] bridge0: port 3(team0) entered blocking state [ 272.582597][T10897] bridge0: port 3(team0) entered disabled state [ 272.591095][T10897] team0: entered allmulticast mode [ 272.596639][T10897] team_slave_0: entered allmulticast mode [ 272.603238][T10897] team_slave_1: entered allmulticast mode [ 272.757966][T10908] sock: sock_timestamping_bind_phc: sock not bind to device [ 272.943044][T10916] netlink: 'syz.0.1283': attribute type 3 has an invalid length. [ 273.159734][T10926] lo speed is unknown, defaulting to 1000 [ 273.177123][T10929] siw: device registration error -23 [ 273.200534][T10926] lo speed is unknown, defaulting to 1000 [ 273.251900][T10926] lo speed is unknown, defaulting to 1000 [ 273.277931][T10926] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 273.299295][T10926] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 273.316748][T10926] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 273.377544][T10936] dvmrp1: entered allmulticast mode [ 273.455612][T10926] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 273.619103][T10926] lo speed is unknown, defaulting to 1000 [ 273.697688][T10926] lo speed is unknown, defaulting to 1000 [ 273.736865][T10926] lo speed is unknown, defaulting to 1000 [ 273.790707][T10926] lo speed is unknown, defaulting to 1000 [ 273.824591][T10926] lo speed is unknown, defaulting to 1000 [ 273.982841][T10952] ipvlan1: entered promiscuous mode [ 274.010375][T10952] ipvlan1: entered allmulticast mode [ 274.036847][T10952] veth0_vlan: entered allmulticast mode [ 274.072545][T10958] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1294'. [ 275.314292][T10995] team0 (unregistering): Port device team_slave_0 removed [ 275.365676][T10995] team0 (unregistering): Port device team_slave_1 removed [ 275.813664][T11019] netlink: 'syz.2.1310': attribute type 10 has an invalid length. [ 275.836682][T11019] __nla_validate_parse: 6 callbacks suppressed [ 275.836700][T11019] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1310'. [ 276.423884][T11044] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1315'. [ 276.468810][T11042] ip6tnl0: Caught tx_queue_len zero misconfig [ 276.752259][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1320'. [ 276.775226][T11062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1320'. [ 276.800417][T11062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1320'. [ 276.829053][T11062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1320'. [ 277.025839][T11068] netlink: 'syz.1.1323': attribute type 10 has an invalid length. [ 277.048944][T11068] team0: Port device veth1_to_hsr added [ 277.657533][T11105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1332'. [ 277.835299][T11105] 8021q: adding VLAN 0 to HW filter on device bond6 [ 277.855440][T11110] bond6: Unable to set down delay as MII monitoring is disabled [ 277.881269][T11105] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.1332'. [ 277.991843][T11123] ipip0: entered promiscuous mode [ 278.011752][T11114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1334'. [ 278.032221][T11126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1336'. [ 278.123186][T11119] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 278.319572][T11137] rdma_op ffff888033fb71f0 conn xmit_rdma 0000000000000000 [ 278.798600][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 278.842309][T11156] netlink: 'syz.4.1344': attribute type 1 has an invalid length. [ 279.045286][T11156] 8021q: adding VLAN 0 to HW filter on device bond10 [ 279.073530][T11184] netlink: 'syz.4.1344': attribute type 10 has an invalid length. [ 279.095744][T11184] dummy0: left allmulticast mode [ 279.103736][T11184] batman_adv: batadv0: Interface deactivated: dummy0 [ 279.113827][T11184] batman_adv: batadv0: Removing interface: dummy0 [ 279.155781][T11187] pim6reg: left allmulticast mode [ 279.217180][T11170] netlink: 'syz.3.1343': attribute type 1 has an invalid length. [ 279.239649][T11171] bond10: (slave veth7): Enslaving as an active interface with an up link [ 279.249917][T11170] netlink: 'syz.3.1343': attribute type 1 has an invalid length. [ 279.258150][T11170] netlink: 'syz.3.1343': attribute type 8 has an invalid length. [ 279.291791][T11176] pim6reg: entered allmulticast mode [ 279.301192][T11177] dummy0: left promiscuous mode [ 279.352129][T11177] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 279.415528][T11180] macvtap1: entered promiscuous mode [ 279.429161][T11180] macvtap1: entered allmulticast mode [ 279.437625][T11180] veth1_vlan: entered allmulticast mode [ 279.497843][T11185] macvtap2: entered promiscuous mode [ 279.504900][T11185] macvtap2: entered allmulticast mode [ 280.292460][T11222] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 280.431037][T11233] 8021q: VLANs not supported on nlmon0 [ 280.447653][T11222] nbd2: detected capacity change from 0 to 127 [ 280.490423][ T5635] block nbd2: Receive control failed (result -32) [ 280.505796][ T7745] block nbd2: Dead connection, failed to find a fallback [ 280.541330][ T7745] block nbd2: shutting down sockets [ 280.555107][ T7745] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.572357][ T7745] Buffer I/O error on dev nbd2, logical block 0, async page read [ 280.580895][ T7745] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.591622][ T7745] Buffer I/O error on dev nbd2, logical block 1, async page read [ 280.600013][ T7745] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.617578][ T7745] Buffer I/O error on dev nbd2, logical block 2, async page read [ 280.640535][ T7745] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.688610][ T7745] Buffer I/O error on dev nbd2, logical block 3, async page read [ 280.736956][ T7745] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.772506][T11240] x_tables: duplicate entry at hook 1 [ 280.787975][ T7745] Buffer I/O error on dev nbd2, logical block 0, async page read [ 280.820127][T11238] veth1_to_batadv: entered allmulticast mode [ 280.853742][ T7745] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.880308][ T7745] Buffer I/O error on dev nbd2, logical block 1, async page read [ 280.909772][ T7745] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.934946][ T7745] Buffer I/O error on dev nbd2, logical block 2, async page read [ 280.966024][ T7745] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.989451][ T7745] Buffer I/O error on dev nbd2, logical block 3, async page read [ 281.009197][ T7745] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 281.031840][ T7745] Buffer I/O error on dev nbd2, logical block 0, async page read [ 281.053503][ T7745] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 281.084120][ T7745] Buffer I/O error on dev nbd2, logical block 1, async page read [ 281.131305][ T7745] ldm_validate_partition_table(): Disk read failed. [ 281.164442][ T7745] Dev nbd2: unable to read RDB block 0 [ 281.178496][ T7745] nbd2: unable to read partition table [ 281.221102][ T7745] ldm_validate_partition_table(): Disk read failed. [ 281.236743][ T7745] Dev nbd2: unable to read RDB block 0 [ 281.251050][ T7745] nbd2: unable to read partition table [ 282.142973][T11291] netlink: 'syz.1.1373': attribute type 30 has an invalid length. [ 282.285725][ T147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.299950][ T147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.302400][T11299] __nla_validate_parse: 14 callbacks suppressed [ 282.302456][T11299] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1371'. [ 282.310698][ T147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.345213][ T147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.357976][T11301] xt_addrtype: ipv6 does not support BROADCAST matching [ 282.366987][T11301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1375'. [ 282.606858][T11307] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1377'. [ 283.090699][T11318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1380'. [ 283.153548][T11322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1381'. [ 283.315939][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1386'. [ 283.390251][T11337] xt_hashlimit: size too large, truncated to 1048576 [ 283.432209][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1383'. [ 283.504966][T11339] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1383'. [ 283.557757][T11345] netlink: 'syz.0.1383': attribute type 1 has an invalid length. [ 283.603037][T11347] xt_hashlimit: size too large, truncated to 1048576 [ 283.759054][T11330] netlink: 'syz.3.1385': attribute type 1 has an invalid length. [ 284.144149][T11366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1393'. [ 284.199559][T11370] netlink: 'syz.4.1394': attribute type 8 has an invalid length. [ 284.410822][T11366] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 284.442867][T11373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'. [ 284.507495][T11368] lo speed is unknown, defaulting to 1000 [ 284.552221][T11368] lo speed is unknown, defaulting to 1000 [ 285.826492][T11416] can: request_module (can-proto-3) failed. [ 285.966287][T11429] ip6erspan0: entered allmulticast mode [ 286.503216][T11467] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 287.034677][T11493] netlink: 'syz.2.1421': attribute type 58 has an invalid length. [ 287.393141][T11514] __nla_validate_parse: 13 callbacks suppressed [ 287.393161][T11514] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1426'. [ 287.629004][T11531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1426'. [ 287.782785][T11510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.945826][T11510] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.053436][ T7508] lo speed is unknown, defaulting to 1000 [ 288.061653][ T7508] syz2: Port: 1 Link ACTIVE [ 288.170553][T11559] team0: Port device ip6gre1 removed [ 288.208579][T11559] bond1: (slave gretap1): Releasing active interface [ 288.266742][T11559] gretap3: left allmulticast mode [ 288.282052][T11559] gretap3: left promiscuous mode [ 288.287887][T11559] bridge1: port 1(gretap3) entered disabled state [ 288.329717][T11559] bond5: (slave bridge2): Releasing backup interface [ 288.350553][T11559] bridge2: left promiscuous mode [ 288.653629][T11579] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1433'. [ 288.771421][T11588] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 288.983253][T11579] bond4: (slave macvlan0): Releasing active interface [ 289.946023][T11649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1447'. [ 289.991383][T11651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1448'. [ 290.091995][T11659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1447'. [ 290.207358][T11665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1451'. [ 290.261535][T11667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1452'. [ 290.446627][T11670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1453'. [ 290.584701][T11682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1456'. [ 290.815538][T11686] geneve1: Caught tx_queue_len zero misconfig [ 290.988695][T11691] netlink: 'syz.3.1459': attribute type 2 has an invalid length. [ 291.066032][T11697] netlink: 'syz.1.1461': attribute type 32 has an invalid length. [ 291.110266][T11696] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 291.293227][T11697] bond8: Setting coupled_control to off (0) [ 291.820721][T11734] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 292.044918][T11744] C: renamed from veth1_to_team [ 292.122205][T11748] macsec2: entered promiscuous mode [ 292.463601][T11767] __nla_validate_parse: 5 callbacks suppressed [ 292.463625][T11767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1481'. [ 292.587545][T11779] xt_hashlimit: size too large, truncated to 1048576 [ 292.755858][T11782] netlink: 'syz.1.1480': attribute type 1 has an invalid length. [ 292.790633][T11782] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1480'. [ 293.350618][T11791] netlink: 60687 bytes leftover after parsing attributes in process `syz.3.1485'. [ 293.486575][T11804] netlink: 'syz.0.1487': attribute type 11 has an invalid length. [ 293.527618][T11804] netlink: 'syz.0.1487': attribute type 11 has an invalid length. [ 293.547544][T11804] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1487'. [ 293.606151][T11813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1489'. [ 293.632571][T11813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1489'. [ 293.709008][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1491'. [ 293.728084][T11817] netlink: 'syz.1.1491': attribute type 30 has an invalid length. [ 293.779885][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1490'. [ 293.812837][ T6614] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.824033][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1491'. [ 293.840678][ T6614] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.853725][T11817] netlink: 'syz.1.1491': attribute type 30 has an invalid length. [ 293.874794][ T6614] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.890646][ T6614] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 294.074518][T11830] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 294.090209][T11830] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 294.275883][T11844] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 294.629501][T11867] vti0: entered promiscuous mode [ 294.644137][T11867] vti0: entered allmulticast mode [ 294.981591][T11871] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1505'. [ 295.162815][T11880] netlink: 'syz.3.1508': attribute type 11 has an invalid length. [ 295.188246][T11880] netlink: 'syz.3.1508': attribute type 11 has an invalid length. [ 297.163202][T11966] netlink: 'syz.1.1528': attribute type 11 has an invalid length. [ 297.204791][T11966] netlink: 'syz.1.1528': attribute type 11 has an invalid length. [ 297.261675][T11968] hsr_slave_0: left promiscuous mode [ 297.276628][T11968] hsr_slave_1: left promiscuous mode [ 297.551146][T11990] __nla_validate_parse: 62 callbacks suppressed [ 297.551169][T11990] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1535'. [ 297.662977][T11994] netlink: 'syz.2.1537': attribute type 33 has an invalid length. [ 297.675732][T11994] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1537'. [ 297.695159][T11994] `: renamed from team0 (while UP) [ 297.739458][T11996] netlink: 'syz.2.1537': attribute type 33 has an invalid length. [ 297.787749][T11996] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1537'. [ 297.845990][T12005] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1540'. [ 297.875888][T12005] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1540'. [ 297.899105][T12005] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1540'. [ 298.151728][T12005] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1540'. [ 298.162821][T12005] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1540'. [ 298.172575][T12005] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1540'. [ 298.184728][T12005] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1540'. [ 298.627684][ T30] audit: type=1804 audit(1780009175.396:8): pid=12035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1546" name="/newroot/340/cgroup.controllers" dev="tmpfs" ino=1750 res=1 errno=0 [ 298.694585][ T30] audit: type=1800 audit(1780009175.426:9): pid=12035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1546" name="cgroup.controllers" dev="tmpfs" ino=1750 res=0 errno=0 [ 298.727182][T12037] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 298.816528][T12041] tipc: Enabling of bearer rejected, failed to enable media [ 299.498650][T12059] sit0: entered promiscuous mode [ 299.524250][T12059] netlink: 'syz.0.1551': attribute type 1 has an invalid length. [ 299.555525][T12062] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 299.743400][T12072] netlink: 'syz.3.1554': attribute type 11 has an invalid length. [ 299.755501][T12072] netlink: 'syz.3.1554': attribute type 11 has an invalid length. [ 300.099721][T12090] netlink: 'syz.2.1559': attribute type 6 has an invalid length. [ 300.135334][T12090] netlink: 'syz.2.1559': attribute type 5 has an invalid length. [ 300.583292][T12105] netlink: 'syz.1.1563': attribute type 1 has an invalid length. [ 301.540645][T12158] netlink: 'syz.2.1576': attribute type 11 has an invalid length. [ 301.563650][T12158] netlink: 'syz.2.1576': attribute type 11 has an invalid length. [ 301.969498][T12175] erspan0: entered promiscuous mode [ 302.340373][T12198] netlink: 'syz.4.1585': attribute type 1 has an invalid length. [ 302.599243][T12205] __nla_validate_parse: 83 callbacks suppressed [ 302.599264][T12205] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1586'. [ 302.647787][T12201] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 302.692690][T12205] netlink: 'syz.3.1586': attribute type 1 has an invalid length. [ 302.694682][T12198] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1585'. [ 302.738152][T12201] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 302.749447][T12208] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1585'. [ 302.809271][T12203] bond11: (slave bridge8): Enslaving as an active interface with a down link [ 302.824851][T12209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1588'. [ 302.837333][T12213] netlink: 'syz.3.1586': attribute type 8 has an invalid length. [ 302.855324][T12209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1588'. [ 302.875635][T12198] 8021q: adding VLAN 0 to HW filter on device bond11 [ 303.236543][T12229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1593'. [ 303.555082][T12239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1595'. [ 303.643825][T12224] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.675591][T12249] netlink: 'syz.1.1598': attribute type 11 has an invalid length. [ 303.696299][T12249] netlink: 'syz.1.1598': attribute type 11 has an invalid length. [ 303.723722][T12249] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1598'. [ 303.778935][T12247] pimreg: entered allmulticast mode [ 303.928762][T12224] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.111866][T12224] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.134360][T12274] batadv_slave_1: entered promiscuous mode [ 304.226070][T12224] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.438096][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.442136][T12286] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1608'. [ 304.523829][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.708059][ T6616] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.804927][ T6616] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.821943][T12301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1610'. [ 304.962425][T12314] netlink: 'syz.3.1611': attribute type 10 has an invalid length. [ 304.972675][T12305] bond2: (slave dummy0): Releasing active interface [ 305.027607][T12314] dummy0: entered promiscuous mode [ 305.332031][T12329] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 305.373767][T12332] netlink: 'syz.4.1617': attribute type 1 has an invalid length. [ 305.576029][T12343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.761538][T12340] 8021q: adding VLAN 0 to HW filter on device bond13 [ 305.812941][T12340] bond12: (slave bond13): making interface the new active one [ 305.847039][T12340] bond12: (slave bond13): Enslaving as an active interface with an up link [ 306.132448][T12355] lo speed is unknown, defaulting to 1000 [ 306.169825][T12355] lo speed is unknown, defaulting to 1000 [ 306.282007][T12360] tipc: Resetting bearer [ 306.856146][T12400] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 306.882648][T12400] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 307.064916][T12416] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 307.116962][T12417] IPv6: NLM_F_CREATE should be specified when creating new route [ 307.171213][T12419] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 307.489779][T12441] netlink: 'syz.0.1639': attribute type 1 has an invalid length. [ 307.509144][T12438] dvmrp1: entered allmulticast mode [ 307.547590][T12436] pimreg: entered allmulticast mode [ 307.554228][T12441] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR [ 307.611085][T12444] netlink: zone id is out of range [ 307.636212][T12444] netlink: zone id is out of range [ 307.653306][T12444] netlink: zone id is out of range [ 307.664972][T12444] netlink: zone id is out of range [ 307.676641][T12444] netlink: zone id is out of range [ 307.691739][T12444] netlink: zone id is out of range [ 307.707864][T12444] netlink: zone id is out of range [ 307.732499][T12444] netlink: zone id is out of range [ 307.746074][T12444] netlink: zone id is out of range [ 307.753033][T12444] netlink: zone id is out of range [ 308.073371][T12467] tipc: Enabling of bearer rejected, already enabled [ 308.127672][T12466] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 308.220102][T12474] __nla_validate_parse: 17 callbacks suppressed [ 308.220123][T12474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1647'. [ 308.524079][T12485] netlink: 'syz.0.1649': attribute type 3 has an invalid length. [ 308.600757][T12491] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1651'. [ 308.741055][T12503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1653'. [ 308.872865][T12501] syzkaller0: entered promiscuous mode [ 308.899636][T12501] syzkaller0: entered allmulticast mode [ 309.048084][T12516] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 309.331686][T12485] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 309.353413][T12526] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1658'. [ 309.417714][T12525] netlink: 'syz.1.1657': attribute type 2 has an invalid length. [ 309.444733][T12525] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1657'. [ 309.474523][T12525] netlink: 'syz.1.1657': attribute type 1 has an invalid length. [ 309.511376][T12525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1657'. [ 309.550813][T12525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1657'. [ 309.595827][ T30] audit: type=1800 audit(1780009186.366:10): pid=12539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1661" name="memory.events" dev="tmpfs" ino=1785 res=0 errno=0 [ 309.635617][T12542] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1660'. [ 310.216077][T12579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1667'. [ 310.349338][T12576] lo speed is unknown, defaulting to 1000 [ 310.366329][T12579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1667'. [ 310.379934][ T1173] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.409639][ T1173] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.426773][ T1173] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.451641][T12576] lo speed is unknown, defaulting to 1000 [ 310.483557][ T1173] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.574313][T12581] lo speed is unknown, defaulting to 1000 [ 310.622234][T12581] lo speed is unknown, defaulting to 1000 [ 311.117769][ T5635] block nbd3: Receive control failed (result -32) [ 311.117822][ T5640] block nbd3: Receive control failed (result -32) [ 311.326090][T12621] netlink: 'syz.3.1677': attribute type 30 has an invalid length. [ 311.402763][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.435556][T12621] netlink: 'syz.3.1677': attribute type 30 has an invalid length. [ 311.449776][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.470405][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.574861][T12638] netlink: 'syz.2.1681': attribute type 1 has an invalid length. [ 311.681580][T12638] bond8: entered promiscuous mode [ 311.687503][T12638] 8021q: adding VLAN 0 to HW filter on device bond8 [ 311.768184][T12639] vlan0: entered allmulticast mode [ 311.787349][T12639] bond8: entered allmulticast mode [ 312.089085][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 312.252799][T12660] vlan0: entered promiscuous mode [ 312.274293][T12660] bridge0: entered promiscuous mode [ 312.555694][T12681] syzkaller1: entered promiscuous mode [ 312.568396][T12681] syzkaller1: entered allmulticast mode [ 313.445505][T12720] __nla_validate_parse: 4 callbacks suppressed [ 313.445526][T12720] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1697'. [ 313.630776][T12727] netlink: 'syz.0.1699': attribute type 1 has an invalid length. [ 313.898873][T12727] 8021q: adding VLAN 0 to HW filter on device bond8 [ 314.065892][T12760] netlink: 'syz.4.1706': attribute type 2 has an invalid length. [ 314.115642][T12760] netlink: 'syz.4.1706': attribute type 2 has an invalid length. [ 314.145527][T12731] bond8: (slave veth5): Enslaving as an active interface with a down link [ 314.197004][T12740] bond8: (slave dummy0): making interface the new active one [ 314.211963][T12740] dummy0: entered promiscuous mode [ 314.227534][T12740] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 314.394576][T12769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1708'. [ 314.508674][T12777] netlink: 'syz.3.1709': attribute type 10 has an invalid length. [ 314.554788][T12784] netlink: 'syz.3.1709': attribute type 10 has an invalid length. [ 314.681491][T12772] bond6: down delay (5) is not a multiple of miimon (2), value rounded to 4 ms [ 314.704024][T12772] bond6: entered promiscuous mode [ 314.722555][T12777] dummy0: left promiscuous mode [ 315.189388][T12779] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 315.535222][T12779] bond9 (unregistering): Released all slaves [ 315.670879][T12796] lo speed is unknown, defaulting to 1000 [ 315.772549][T12796] lo speed is unknown, defaulting to 1000 [ 316.880738][T12874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1725'. [ 317.074848][T12866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.738218][T12922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1738'. [ 317.757114][T12922] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 317.764515][T12922] IPv6: NLM_F_CREATE should be set when creating new route [ 317.771878][T12922] IPv6: NLM_F_CREATE should be set when creating new route [ 318.095766][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1743'. [ 318.202165][T12942] bridge0: port 3(erspan0) entered blocking state [ 318.209449][T12942] bridge0: port 3(erspan0) entered disabled state [ 318.216174][T12942] erspan0: entered allmulticast mode [ 318.227225][T12942] erspan0: entered promiscuous mode [ 318.239995][T12942] erspan0: left allmulticast mode [ 318.246051][T12942] erspan0: left promiscuous mode [ 318.265910][T12942] bridge0: port 3(erspan0) entered disabled state [ 318.864046][T12977] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1753'. [ 318.964750][T12984] netlink: 'syz.2.1756': attribute type 10 has an invalid length. [ 318.978007][T12984] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1756'. [ 319.292488][T12990] bond14: Unable to set down delay as MII monitoring is disabled [ 319.316157][T13008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1760'. [ 319.340890][T12990] bond14 (unregistering): Released all slaves [ 319.500881][T13014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1762'. [ 319.515420][T13015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1762'. [ 319.534775][T12998] lo speed is unknown, defaulting to 1000 [ 319.605677][T12998] lo speed is unknown, defaulting to 1000 [ 319.987903][T13034] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1766'. [ 319.998066][T13033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1768'. [ 320.040286][T13036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1766'. [ 320.938026][T13056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1775'. [ 320.976664][T13056] 8021q: adding VLAN 0 to HW filter on device bond8 [ 321.379253][ T30] audit: type=1800 audit(1780009198.156:11): pid=13087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1783" name="memory.events" dev="tmpfs" ino=1984 res=0 errno=0 [ 321.478701][T13091] syz_tun: entered allmulticast mode [ 321.519087][T13084] net_ratelimit: 394 callbacks suppressed [ 321.519108][T13084] openvswitch: netlink: IPv4 tunnel dst address is zero [ 321.578483][T13095] bridge5: entered promiscuous mode [ 322.597159][T13127] 8021q: VLANs not supported on wg2 [ 322.623807][T13130] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 322.641679][T13130] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 322.752961][T13132] xt_TPROXY: Can be used only with -p tcp or -p udp [ 323.683820][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1803'. [ 324.031290][T13175] FAULT_INJECTION: forcing a failure. [ 324.031290][T13175] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 324.080225][T13175] CPU: 1 UID: 0 PID: 13175 Comm: syz.4.1808 Not tainted syzkaller #0 PREEMPT(full) [ 324.080261][T13175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 324.080283][T13175] Call Trace: [ 324.080295][T13175] [ 324.080303][T13175] dump_stack_lvl+0xe8/0x150 [ 324.080333][T13175] should_fail_ex+0x412/0x560 [ 324.080361][T13175] _copy_from_user+0x2d/0xb0 [ 324.080388][T13175] ___sys_sendmsg+0x1c6/0x360 [ 324.080410][T13175] ? __lock_acquire+0x6b5/0x2cf0 [ 324.080437][T13175] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.080501][T13175] ? __fget_files+0x2a/0x420 [ 324.080525][T13175] ? __fget_files+0x3a0/0x420 [ 324.080560][T13175] __x64_sys_sendmsg+0x1bd/0x2a0 [ 324.080590][T13175] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 324.080621][T13175] ? __pfx_ksys_write+0x10/0x10 [ 324.080658][T13175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.080680][T13175] do_syscall_64+0x174/0xf80 [ 324.080701][T13175] ? clear_bhb_loop+0x40/0x90 [ 324.080731][T13175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.080751][T13175] RIP: 0033:0x7fc86fb9ce59 [ 324.080776][T13175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.080794][T13175] RSP: 002b:00007fc870a4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.080819][T13175] RAX: ffffffffffffffda RBX: 00007fc86fe15fa0 RCX: 00007fc86fb9ce59 [ 324.080834][T13175] RDX: 0000000004040004 RSI: 0000200000001080 RDI: 0000000000000005 [ 324.080847][T13175] RBP: 00007fc870a4c090 R08: 0000000000000000 R09: 0000000000000000 [ 324.080859][T13175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.080870][T13175] R13: 00007fc86fe16038 R14: 00007fc86fe15fa0 R15: 00007ffd07eade68 [ 324.080903][T13175] [ 324.676380][T13196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1815'. [ 324.686632][T13192] --map-set only usable from mangle table [ 324.687466][T13196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1815'. [ 324.703724][T13196] netlink: 38 bytes leftover after parsing attributes in process `syz.3.1815'. [ 324.734713][T13196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.816572][T13206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'. [ 325.096140][T13213] lo speed is unknown, defaulting to 1000 [ 325.124340][T13214] lo speed is unknown, defaulting to 1000 [ 325.139481][T13213] lo speed is unknown, defaulting to 1000 [ 325.150016][T13202] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1816'. [ 325.184343][T13214] lo speed is unknown, defaulting to 1000 [ 325.766792][ T6626] dummy0: left promiscuous mode [ 325.966269][T13257] FAULT_INJECTION: forcing a failure. [ 325.966269][T13257] name failslab, interval 1, probability 0, space 0, times 1 [ 326.036815][T13257] CPU: 0 UID: 0 PID: 13257 Comm: syz.0.1823 Not tainted syzkaller #0 PREEMPT(full) [ 326.036844][T13257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 326.036857][T13257] Call Trace: [ 326.036865][T13257] [ 326.036874][T13257] dump_stack_lvl+0xe8/0x150 [ 326.036904][T13257] should_fail_ex+0x412/0x560 [ 326.036932][T13257] should_failslab+0xa8/0x100 [ 326.036956][T13257] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 326.036985][T13257] ? __alloc_skb+0x186/0x7d0 [ 326.037015][T13257] ? __alloc_skb+0x1d0/0x7d0 [ 326.037043][T13257] ? __local_bh_enable_ip+0xd0/0x130 [ 326.037069][T13257] __alloc_skb+0x1d0/0x7d0 [ 326.037114][T13257] netlink_sendmsg+0x5d4/0xb40 [ 326.037149][T13257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.037176][T13257] ? aa_sock_msg_perm+0xf1/0x1b0 [ 326.037207][T13257] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 326.037240][T13257] ____sys_sendmsg+0x972/0x9f0 [ 326.037260][T13257] ? __might_fault+0xaf/0x130 [ 326.037291][T13257] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.037323][T13257] ? import_iovec+0x73/0xa0 [ 326.037350][T13257] ___sys_sendmsg+0x2a5/0x360 [ 326.037371][T13257] ? __lock_acquire+0x6b5/0x2cf0 [ 326.037397][T13257] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.037456][T13257] ? __fget_files+0x2a/0x420 [ 326.037480][T13257] ? __fget_files+0x3a0/0x420 [ 326.037515][T13257] __x64_sys_sendmsg+0x1bd/0x2a0 [ 326.037539][T13257] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 326.037573][T13257] ? __pfx_ksys_write+0x10/0x10 [ 326.037611][T13257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.037633][T13257] do_syscall_64+0x174/0xf80 [ 326.037652][T13257] ? trace_irq_disable+0x3b/0x140 [ 326.037683][T13257] ? clear_bhb_loop+0x40/0x90 [ 326.037708][T13257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.037728][T13257] RIP: 0033:0x7fbba879ce59 [ 326.037747][T13257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.037765][T13257] RSP: 002b:00007fbba96f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.037787][T13257] RAX: ffffffffffffffda RBX: 00007fbba8a15fa0 RCX: 00007fbba879ce59 [ 326.037802][T13257] RDX: 0000000004040004 RSI: 0000200000001080 RDI: 0000000000000005 [ 326.037815][T13257] RBP: 00007fbba96f4090 R08: 0000000000000000 R09: 0000000000000000 [ 326.037832][T13257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.037844][T13257] R13: 00007fbba8a16038 R14: 00007fbba8a15fa0 R15: 00007fff041fa278 [ 326.037878][T13257] [ 326.455359][T13261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1822'. [ 327.059775][T13271] lo speed is unknown, defaulting to 1000 [ 327.086444][T13271] lo speed is unknown, defaulting to 1000 [ 327.883991][T13291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1833'. [ 327.902526][T13291] block nbd4: Unsupported socket: should be TCP or UNIX. [ 327.952809][T13289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1833'. [ 327.990708][T13289] block nbd4: Unsupported socket: should be TCP or UNIX. [ 328.182562][T13301] netlink: 'syz.1.1834': attribute type 1 has an invalid length. [ 328.411841][T13309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1834'. [ 328.446546][T13295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1832'. [ 328.837797][ T5635] block nbd4: Receive control failed (result -1) [ 328.913255][T13314] sctp: [Deprecated]: syz.0.1836 (pid 13314) Use of int in max_burst socket option. [ 328.913255][T13314] Use struct sctp_assoc_value instead [ 329.365137][T13334] nbd: must specify a size in bytes for the device [ 329.904675][T13349] SET target dimension over the limit! [ 330.065972][T13355] netlink: 'syz.4.1849': attribute type 8 has an invalid length. [ 330.180162][T13360] __nla_validate_parse: 4 callbacks suppressed [ 330.180182][T13360] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1851'. [ 330.321474][T13353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1850'. [ 330.359237][T13353] IPVS: sh: FWM 3 0x00000003 - no destination available [ 330.510048][T13372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1855'. [ 330.528711][T13372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1855'. [ 330.553127][T13370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1854'. [ 330.670389][T13376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1856'. [ 330.703649][T13383] x_tables: unsorted entry at hook 2 [ 330.716113][T13370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1854'. [ 330.860568][T13382] RDS: rds_bind could not find a transport for 0:b3::, load rds_tcp or rds_rdma? [ 330.906396][T13381] lo speed is unknown, defaulting to 1000 [ 330.919583][T13393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1860'. [ 330.942292][T13390] RDS: rds_bind could not find a transport for 0:b3::, load rds_tcp or rds_rdma? [ 330.960120][T13381] lo speed is unknown, defaulting to 1000 [ 331.005693][T13370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1854'. [ 331.077516][ T5635] block nbd5: Receive control failed (result -1) [ 331.109790][T13401] netlink: 'syz.4.1862': attribute type 12 has an invalid length. [ 331.129751][T13401] netlink: 'syz.4.1862': attribute type 29 has an invalid length. [ 331.153183][T13401] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1862'. [ 331.178155][T13401] netlink: 'syz.4.1862': attribute type 1 has an invalid length. [ 331.187707][T13401] netlink: 'syz.4.1862': attribute type 2 has an invalid length. [ 331.493491][T13416] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 331.508424][T13416] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 332.002735][T13437] netlink: 'syz.4.1871': attribute type 5 has an invalid length. [ 332.081728][T13437] geneve3: entered promiscuous mode [ 332.098837][T13437] geneve3: entered allmulticast mode [ 332.114415][ T136] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 41574 - 0 [ 332.146175][ T136] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 55411 - 0 [ 332.169186][ T136] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 41574 - 0 [ 332.190591][ T136] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 55411 - 0 [ 332.217959][ T136] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 41574 - 0 [ 332.257730][ T136] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 55411 - 0 [ 332.276556][ T136] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 41574 - 0 [ 332.296290][ T136] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 55411 - 0 [ 332.325218][T13456] netlink: 'syz.4.1877': attribute type 23 has an invalid length. [ 332.345278][T13453] bridge0: port 3(vlan2) entered blocking state [ 332.354141][T13453] bridge0: port 3(vlan2) entered disabled state [ 332.362473][T13453] vlan2: entered allmulticast mode [ 332.389933][T13453] vlan2: entered promiscuous mode [ 332.401873][T13457] netlink: 'syz.4.1877': attribute type 23 has an invalid length. [ 333.098227][T13496] netlink: 'syz.4.1886': attribute type 4 has an invalid length. [ 333.187744][T13498] raw_sendmsg: syz.1.1884 forgot to set AF_INET. Fix it! [ 333.517793][T13509] team_slave_0 (unregistering): left promiscuous mode [ 333.569449][T13509] team_slave_0 (unregistering): left allmulticast mode [ 333.598724][T13509] team0: Port device team_slave_0 removed [ 333.661820][T13514] syzkaller1: entered promiscuous mode [ 333.674847][T13514] syzkaller1: entered allmulticast mode [ 333.814565][T13528] sctp: [Deprecated]: syz.3.1893 (pid 13528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 333.814565][T13528] Use struct sctp_sack_info instead [ 333.872367][T13530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.176386][T13545] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 334.718650][T13580] netlink: 'syz.0.1908': attribute type 1 has an invalid length. [ 334.872747][T13586] bond9: (slave geneve2): making interface the new active one [ 334.892466][T13586] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 334.926333][T13586] netlink: 'syz.0.1908': attribute type 3 has an invalid length. [ 334.973586][T13580] 8021q: adding VLAN 0 to HW filter on device bond9 [ 335.006949][ T6622] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 335.116682][ T6622] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 335.207753][T13609] netlink: 'syz.0.1917': attribute type 1 has an invalid length. [ 335.264610][ T6622] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 335.326844][T13617] __nla_validate_parse: 14 callbacks suppressed [ 335.326864][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1918'. [ 335.337595][T13611] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 335.379388][T13609] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1917'. [ 335.394181][T13609] 8021q: adding VLAN 0 to HW filter on device bond10 [ 335.603002][T13625] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 335.654177][T13630] netlink: 'syz.0.1921': attribute type 1 has an invalid length. [ 335.663403][T13630] netlink: 'syz.0.1921': attribute type 1 has an invalid length. [ 335.678960][T13630] netlink: 'syz.0.1921': attribute type 2 has an invalid length. [ 335.699968][T13630] netlink: 'syz.0.1921': attribute type 1 has an invalid length. [ 335.723878][T13634] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1921'. [ 335.738955][T13634] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1921'. [ 335.864297][T13639] bond0: Caught tx_queue_len zero misconfig [ 335.935696][T13646] netlink: 'syz.0.1926': attribute type 9 has an invalid length. [ 336.128863][T13650] xt_NFQUEUE: number of total queues is 0 [ 336.248309][T13654] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1930'. [ 336.294847][T13657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1931'. [ 336.308924][T13654] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1930'. [ 336.347391][T13660] xt_hashlimit: size too large, truncated to 1048576 [ 336.354905][T13660] xt_hashlimit: max too large, truncated to 1048576 [ 336.406607][T13663] xt_limit: Overflow, try lower: 324382443/0 [ 336.473838][T13660] ipt_REJECT: TCP_RESET invalid for non-tcp [ 336.622211][T13671] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1935'. [ 336.859048][T13682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1939'. [ 336.981275][T13685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'. [ 337.035587][T13689] xt_hashlimit: overflow, try lower: 6/0 [ 337.103667][T13690] netlink: 'syz.4.1942': attribute type 1 has an invalid length. [ 337.137764][T13689] erspan0: entered promiscuous mode [ 337.146404][T13689] gretap0: entered promiscuous mode [ 337.195851][T13690] 8021q: adding VLAN 0 to HW filter on device bond14 [ 337.213623][T13688] bond14: entered promiscuous mode [ 337.232443][T13688] bond14: entered allmulticast mode [ 337.466218][T13707] netlink: 'syz.3.1948': attribute type 11 has an invalid length. [ 337.655416][T13714] lo: MTU too low for tipc bearer [ 337.661536][T13714] tipc: Enabling of bearer rejected, failed to enable media [ 337.817227][T13723] netlink: 'syz.3.1955': attribute type 142 has an invalid length. [ 338.428508][T13739] 8021q: adding VLAN 0 to HW filter on device bond11 [ 338.707899][T13763] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 338.759923][T13765] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 338.775561][T13766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.169962][T13780] 8021q: adding VLAN 0 to HW filter on device bond9 [ 339.192419][T13782] bond9: Unable to set down delay as MII monitoring is disabled [ 339.433575][T13787] syzkaller0: entered promiscuous mode [ 339.439780][T13787] syzkaller0: entered allmulticast mode [ 340.171878][T13814] IPVS: sh: FWM 3 0x00000003 - no destination available [ 340.215055][T13818] netlink: 'syz.1.1982': attribute type 1 has an invalid length. [ 340.591297][T13838] netlink: 'syz.4.1985': attribute type 13 has an invalid length. [ 340.610153][T13837] __nla_validate_parse: 12 callbacks suppressed [ 340.610173][T13837] netlink: 67 bytes leftover after parsing attributes in process `syz.2.1987'. [ 340.614336][T13838] netlink: 'syz.4.1985': attribute type 17 has an invalid length. [ 340.805402][T13846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1985'. [ 340.816749][T13831] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.824703][T13831] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.975711][T13831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.996604][T13831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.085843][T13831] bond5: left allmulticast mode [ 341.093997][T13831] ip6gretap2: left allmulticast mode [ 341.101272][T13831] bond5: left promiscuous mode [ 341.106401][T13831] ip6gretap2: left promiscuous mode [ 341.499724][T13838] bridge0: port 3(team0) entered blocking state [ 341.506208][T13838] bridge0: port 3(team0) entered forwarding state [ 341.525394][T13838] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.544711][T13838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.577040][T13838] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.584392][T13838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.608567][T13838] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.615883][T13838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.646227][T13838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.658167][T13838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.686655][T13838] veth1_macvtap: left promiscuous mode [ 341.694440][T13838] veth0_macvtap: left promiscuous mode [ 341.700677][T13838] veth0_macvtap: left allmulticast mode [ 341.711656][T13838] veth0_macvtap: entered promiscuous mode [ 341.730756][T13838] veth1_macvtap: entered promiscuous mode [ 341.746680][T13838] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 341.804799][ T136] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.813782][ T136] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 41574 - 0 [ 341.823917][ T136] netdevsim netdevsim4 eth0: unset [1, 2] type 2 family 0 port 55411 - 0 [ 341.842692][T13866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1991'. [ 341.846181][ T136] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.877994][ T136] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 41574 - 0 [ 341.890412][ T136] netdevsim netdevsim4 eth1: unset [1, 2] type 2 family 0 port 55411 - 0 [ 341.906905][T13859] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 341.957364][ T136] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.984223][ T136] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 41574 - 0 [ 342.000436][ T136] netdevsim netdevsim4 eth2: unset [1, 2] type 2 family 0 port 55411 - 0 [ 342.034705][ T136] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.053045][ T136] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 41574 - 0 [ 342.064418][ T136] netdevsim netdevsim4 eth3: unset [1, 2] type 2 family 0 port 55411 - 0 [ 342.084560][T13871] netlink: 'syz.2.1995': attribute type 1 has an invalid length. [ 342.103066][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 342.172339][T13874] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1994'. [ 342.210681][T13876] [ 342.213073][T13876] ====================================================== [ 342.220161][T13876] WARNING: possible circular locking dependency detected [ 342.227311][T13876] syzkaller #0 Not tainted [ 342.232203][T13876] ------------------------------------------------------ [ 342.239247][T13876] syz.1.1994/13876 is trying to acquire lock: [ 342.245350][T13876] ffffffff8ea855a0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 342.255487][T13876] [ 342.255487][T13876] but task is already holding lock: [ 342.262870][T13876] ffff888096770260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 342.272735][T13876] [ 342.272735][T13876] which lock already depends on the new lock. [ 342.272735][T13876] [ 342.283217][T13876] [ 342.283217][T13876] the existing dependency chain (in reverse order) is: [ 342.292432][T13876] [ 342.292432][T13876] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 342.300461][T13876] lock_sock_nested+0x41/0x100 [ 342.305866][T13876] __inet6_bind+0x30c/0xf60 [ 342.311445][T13876] mptcp_bind+0x110/0x1d0 [ 342.316336][T13876] __sys_bind+0x2e3/0x410 [ 342.321228][T13876] __x64_sys_bind+0x7a/0x90 [ 342.326368][T13876] do_syscall_64+0x174/0xf80 [ 342.331504][T13876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.337937][T13876] [ 342.337937][T13876] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 342.345815][T13876] lock_sock_nested+0x41/0x100 [ 342.351145][T13876] inet_shutdown+0x6a/0x390 [ 342.356204][T13876] nbd_mark_nsock_dead+0x2e9/0x560 [ 342.361985][T13876] recv_work+0x1c2e/0x1d40 [ 342.367208][T13876] process_scheduled_works+0xb5d/0x1860 [ 342.373354][T13876] worker_thread+0xa53/0xfc0 [ 342.378583][T13876] kthread+0x389/0x470 [ 342.383419][T13876] ret_from_fork+0x514/0xb70 [ 342.388565][T13876] ret_from_fork_asm+0x1a/0x30 [ 342.393972][T13876] [ 342.393972][T13876] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 342.401669][T13876] __mutex_lock+0x1a3/0x1550 [ 342.406802][T13876] nbd_queue_rq+0x37b/0x1100 [ 342.411951][T13876] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 342.418062][T13876] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 342.424953][T13876] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 342.431484][T13876] blk_mq_run_hw_queue+0x348/0x4f0 [ 342.437138][T13876] blk_mq_dispatch_list+0xd16/0xe10 [ 342.442878][T13876] blk_mq_flush_plug_list+0x48d/0x570 [ 342.448803][T13876] __blk_flush_plug+0x3ed/0x4d0 [ 342.454330][T13876] __submit_bio+0x28d/0x580 [ 342.459387][T13876] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 342.465587][T13876] block_read_full_folio+0x599/0x830 [ 342.471519][T13876] filemap_read_folio+0x137/0x3b0 [ 342.477097][T13876] do_read_cache_folio+0x358/0x590 [ 342.482770][T13876] read_part_sector+0xb6/0x2b0 [ 342.488188][T13876] adfspart_check_ICS+0xb1/0x960 [ 342.493671][T13876] bdev_disk_changed+0x817/0x1770 [ 342.499253][T13876] blkdev_get_whole+0x380/0x510 [ 342.504659][T13876] bdev_open+0x31e/0xd30 [ 342.509457][T13876] blkdev_open+0x470/0x610 [ 342.514424][T13876] do_dentry_open+0x822/0x13a0 [ 342.519732][T13876] vfs_open+0x3b/0x340 [ 342.524343][T13876] path_openat+0x2e08/0x3860 [ 342.529492][T13876] do_file_open+0x23e/0x4a0 [ 342.534544][T13876] do_sys_openat2+0x113/0x200 [ 342.539777][T13876] __x64_sys_openat+0x138/0x170 [ 342.545207][T13876] do_syscall_64+0x174/0xf80 [ 342.550346][T13876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.556878][T13876] [ 342.556878][T13876] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 342.564129][T13876] __mutex_lock+0x1a3/0x1550 [ 342.569283][T13876] nbd_queue_rq+0xc6/0x1100 [ 342.574354][T13876] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 342.580454][T13876] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 342.587337][T13876] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 342.593874][T13876] blk_mq_run_hw_queue+0x348/0x4f0 [ 342.599532][T13876] blk_mq_dispatch_list+0xd16/0xe10 [ 342.605293][T13876] blk_mq_flush_plug_list+0x48d/0x570 [ 342.611219][T13876] __blk_flush_plug+0x3ed/0x4d0 [ 342.616711][T13876] __submit_bio+0x28d/0x580 [ 342.622024][T13876] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 342.628217][T13876] block_read_full_folio+0x599/0x830 [ 342.634077][T13876] filemap_read_folio+0x137/0x3b0 [ 342.639684][T13876] do_read_cache_folio+0x358/0x590 [ 342.645353][T13876] read_part_sector+0xb6/0x2b0 [ 342.650667][T13876] adfspart_check_ICS+0xb1/0x960 [ 342.656318][T13876] bdev_disk_changed+0x817/0x1770 [ 342.661899][T13876] blkdev_get_whole+0x380/0x510 [ 342.667297][T13876] bdev_open+0x31e/0xd30 [ 342.672102][T13876] blkdev_open+0x470/0x610 [ 342.677070][T13876] do_dentry_open+0x822/0x13a0 [ 342.682382][T13876] vfs_open+0x3b/0x340 [ 342.687010][T13876] path_openat+0x2e08/0x3860 [ 342.692168][T13876] do_file_open+0x23e/0x4a0 [ 342.697238][T13876] do_sys_openat2+0x113/0x200 [ 342.702469][T13876] __x64_sys_openat+0x138/0x170 [ 342.707863][T13876] do_syscall_64+0x174/0xf80 [ 342.713001][T13876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.719533][T13876] [ 342.719533][T13876] -> #3 (set->srcu){.+.+}-{0:0}: [ 342.726683][T13876] __synchronize_srcu+0xca/0x300 [ 342.732163][T13876] elevator_switch+0x1e8/0x7a0 [ 342.737481][T13876] elevator_change+0x2cc/0x450 [ 342.742804][T13876] elevator_set_default+0x36c/0x430 [ 342.748569][T13876] blk_register_queue+0x3e9/0x4e0 [ 342.754158][T13876] __add_disk+0x677/0xd50 [ 342.759038][T13876] add_disk_fwnode+0xfb/0x480 [ 342.764264][T13876] nbd_dev_add+0x72c/0xb50 [ 342.769240][T13876] nbd_init+0x168/0x1f0 [ 342.773956][T13876] do_one_initcall+0x250/0x870 [ 342.779276][T13876] do_initcall_level+0x104/0x190 [ 342.784862][T13876] do_initcalls+0x59/0xa0 [ 342.789736][T13876] kernel_init_freeable+0x2a6/0x3e0 [ 342.795486][T13876] kernel_init+0x1d/0x1d0 [ 342.800465][T13876] ret_from_fork+0x514/0xb70 [ 342.805612][T13876] ret_from_fork_asm+0x1a/0x30 [ 342.810921][T13876] [ 342.810921][T13876] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 342.818811][T13876] __mutex_lock+0x1a3/0x1550 [ 342.823962][T13876] elevator_change+0x1b3/0x450 [ 342.829292][T13876] elevator_set_none+0xb5/0x140 [ 342.834790][T13876] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 342.841143][T13876] nbd_start_device+0x17f/0xb10 [ 342.846543][T13876] nbd_genl_connect+0x165b/0x1cf0 [ 342.852115][T13876] genl_family_rcv_msg_doit+0x22a/0x330 [ 342.858410][T13876] genl_rcv_msg+0x61c/0x7a0 [ 342.863551][T13876] netlink_rcv_skb+0x232/0x4b0 [ 342.868865][T13876] genl_rcv+0x28/0x40 [ 342.873428][T13876] netlink_unicast+0x75c/0x8e0 [ 342.878823][T13876] netlink_sendmsg+0x813/0xb40 [ 342.884177][T13876] ____sys_sendmsg+0x972/0x9f0 [ 342.889480][T13876] ___sys_sendmsg+0x2a5/0x360 [ 342.894701][T13876] __x64_sys_sendmsg+0x1bd/0x2a0 [ 342.900191][T13876] do_syscall_64+0x174/0xf80 [ 342.905330][T13876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.911773][T13876] [ 342.911773][T13876] -> #1 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 342.920405][T13876] blk_alloc_queue+0x546/0x680 [ 342.925725][T13876] __blk_mq_alloc_disk+0x197/0x390 [ 342.931507][T13876] nbd_dev_add+0x499/0xb50 [ 342.936758][T13876] nbd_init+0x168/0x1f0 [ 342.941467][T13876] do_one_initcall+0x250/0x870 [ 342.946771][T13876] do_initcall_level+0x104/0x190 [ 342.952259][T13876] do_initcalls+0x59/0xa0 [ 342.957138][T13876] kernel_init_freeable+0x2a6/0x3e0 [ 342.962884][T13876] kernel_init+0x1d/0x1d0 [ 342.967761][T13876] ret_from_fork+0x514/0xb70 [ 342.972904][T13876] ret_from_fork_asm+0x1a/0x30 [ 342.978409][T13876] [ 342.978409][T13876] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 342.985818][T13876] __lock_acquire+0x15a5/0x2cf0 [ 342.991318][T13876] lock_acquire+0x106/0x350 [ 342.996455][T13876] fs_reclaim_acquire+0x71/0x100 [ 343.001947][T13876] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 343.008329][T13876] __alloc_skb+0x1d0/0x7d0 [ 343.013302][T13876] tcp_stream_alloc_skb+0x3f/0x580 [ 343.018975][T13876] tcp_connect+0x1570/0x5400 [ 343.024389][T13876] tcp_v6_connect+0x1295/0x1b10 [ 343.029792][T13876] __inet_stream_connect+0x25a/0xdd0 [ 343.035660][T13876] inet_stream_connect+0x66/0xa0 [ 343.041182][T13876] kernel_connect+0x141/0x1c0 [ 343.046417][T13876] smc_connect+0x7a5/0xd90 [ 343.051395][T13876] __sys_connect+0x312/0x450 [ 343.056535][T13876] __x64_sys_connect+0x7a/0x90 [ 343.061848][T13876] do_syscall_64+0x174/0xf80 [ 343.067101][T13876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.073549][T13876] [ 343.073549][T13876] other info that might help us debug this: [ 343.073549][T13876] [ 343.083882][T13876] Chain exists of: [ 343.083882][T13876] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 343.083882][T13876] [ 343.097220][T13876] Possible unsafe locking scenario: [ 343.097220][T13876] [ 343.104688][T13876] CPU0 CPU1 [ 343.110067][T13876] ---- ---- [ 343.115469][T13876] lock(k-sk_lock-AF_INET6); [ 343.120177][T13876] lock(sk_lock-AF_INET6); [ 343.127316][T13876] lock(k-sk_lock-AF_INET6); [ 343.134624][T13876] lock(fs_reclaim); [ 343.138631][T13876] [ 343.138631][T13876] *** DEADLOCK *** [ 343.138631][T13876] [ 343.146794][T13876] 2 locks held by syz.1.1994/13876: [ 343.152013][T13876] #0: ffff88802a1172e0 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_connect+0xbd/0xd90 [ 343.161551][T13876] #1: ffff888096770260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 343.171769][T13876] [ 343.171769][T13876] stack backtrace: [ 343.177684][T13876] CPU: 0 UID: 0 PID: 13876 Comm: syz.1.1994 Not tainted syzkaller #0 PREEMPT(full) [ 343.177705][T13876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 343.177716][T13876] Call Trace: [ 343.177724][T13876] [ 343.177733][T13876] dump_stack_lvl+0xe8/0x150 [ 343.177753][T13876] print_circular_bug+0x2e1/0x300 [ 343.177777][T13876] check_noncircular+0x12e/0x150 [ 343.177800][T13876] __lock_acquire+0x15a5/0x2cf0 [ 343.177822][T13876] ? do_raw_spin_lock+0x12b/0x2f0 [ 343.177848][T13876] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 343.177870][T13876] lock_acquire+0x106/0x350 [ 343.177886][T13876] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 343.177909][T13876] ? ip6_dst_check+0xe2/0x7e0 [ 343.177930][T13876] fs_reclaim_acquire+0x71/0x100 [ 343.177953][T13876] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 343.177975][T13876] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 343.177996][T13876] ? ip6_default_advmss+0x80/0x3b0 [ 343.178025][T13876] ? __alloc_skb+0x1d0/0x7d0 [ 343.178052][T13876] __alloc_skb+0x1d0/0x7d0 [ 343.178078][T13876] tcp_stream_alloc_skb+0x3f/0x580 [ 343.178093][T13876] ? __asan_memset+0x22/0x50 [ 343.178114][T13876] tcp_connect+0x1570/0x5400 [ 343.178144][T13876] ? ktime_get_with_offset+0x93/0x2d0 [ 343.178173][T13876] ? __pfx_tcp_connect+0x10/0x10 [ 343.178196][T13876] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 343.178221][T13876] ? lockdep_hardirqs_on+0x7a/0x110 [ 343.178246][T13876] ? ktime_get_with_offset+0x93/0x2d0 [ 343.178273][T13876] ? seqcount_lockdep_reader_access+0xea/0x100 [ 343.178306][T13876] ? __asan_memset+0x22/0x50 [ 343.178328][T13876] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 343.178351][T13876] ? inet6_hash_connect+0xeb/0x170 [ 343.178378][T13876] tcp_v6_connect+0x1295/0x1b10 [ 343.178409][T13876] ? __pfx_tcp_v6_connect+0x10/0x10 [ 343.178434][T13876] ? futex_unqueue+0x22/0x240 [ 343.178450][T13876] ? futex_unqueue+0x22/0x240 [ 343.178465][T13876] ? futex_unqueue+0x22/0x240 [ 343.178481][T13876] ? futex_unqueue+0x211/0x240 [ 343.178499][T13876] __inet_stream_connect+0x25a/0xdd0 [ 343.178525][T13876] ? do_raw_spin_lock+0x12b/0x2f0 [ 343.178546][T13876] ? lock_sock_nested+0x6a/0x100 [ 343.178568][T13876] ? __pfx___inet_stream_connect+0x10/0x10 [ 343.178592][T13876] ? inet_stream_connect+0x51/0xa0 [ 343.178615][T13876] ? __local_bh_enable_ip+0xd0/0x130 [ 343.178633][T13876] inet_stream_connect+0x66/0xa0 [ 343.178657][T13876] kernel_connect+0x141/0x1c0 [ 343.178677][T13876] ? __pfx_kernel_connect+0x10/0x10 [ 343.178694][T13876] ? do_raw_spin_lock+0x12b/0x2f0 [ 343.178721][T13876] ? smc_connect+0xbd/0xd90 [ 343.178743][T13876] ? __local_bh_enable_ip+0xd0/0x130 [ 343.178760][T13876] smc_connect+0x7a5/0xd90 [ 343.178785][T13876] __sys_connect+0x312/0x450 [ 343.178810][T13876] ? __pfx___sys_connect+0x10/0x10 [ 343.178838][T13876] ? rcu_is_watching+0x15/0xb0 [ 343.178859][T13876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.178876][T13876] __x64_sys_connect+0x7a/0x90 [ 343.178900][T13876] do_syscall_64+0x174/0xf80 [ 343.178914][T13876] ? trace_irq_disable+0x3b/0x140 [ 343.178938][T13876] ? clear_bhb_loop+0x40/0x90 [ 343.178956][T13876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.178972][T13876] RIP: 0033:0x7f134d39ce59 [ 343.178987][T13876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.179001][T13876] RSP: 002b:00007f134e2d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 343.179026][T13876] RAX: ffffffffffffffda RBX: 00007f134d616090 RCX: 00007f134d39ce59 [ 343.179038][T13876] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000005 [ 343.179049][T13876] RBP: 00007f134d432d6f R08: 0000000000000000 R09: 0000000000000000 [ 343.179058][T13876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.179068][T13876] R13: 00007f134d616128 R14: 00007f134d616090 R15: 00007fff67a87b18 [ 343.179088][T13876] [ 346.078765][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)