last executing test programs: 5m50.011307994s ago: executing program 2 (id=2838): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x1c, r2, 0x21, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}]}, 0x2c}}, 0x18) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e61, @multicast2}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r7, 0x29, 0x8, &(0x7f0000000080)=0xf2b, 0x4) getsockopt$inet6_buf(r7, 0x29, 0x6, 0x0, &(0x7f00000000c0)) getsockopt$inet_tcp_buf(r3, 0x6, 0xd, &(0x7f00000000c0)=""/124, &(0x7f0000000140)=0x7c) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) socket$key(0xf, 0x3, 0x2) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x280, 0xe0, 0x2b8, 0xb0000010, 0xe0, 0x5c8f0200, 0x1b0, 0x3a8, 0x3a8, 0x1b0, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0x0, 0xffffffff], [], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x3}, 0x0, 0xa8, 0xe0, 0x700}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x1, 0x2}, {0x1, 0x2, 0x2}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0) ioctl$sock_SIOCOUTQNSD(r8, 0x894b, &(0x7f0000000180)) 5m48.755490032s ago: executing program 2 (id=2845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4c801}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24) socket$kcm(0x11, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000a, 0x810, 0xffffffffffffffff, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)="20a0", 0x2}, {&(0x7f0000000280)="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", 0xd81}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmsg(r0, &(0x7f0000002700)={&(0x7f0000000000)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000080)=""/5, 0x5}, {&(0x7f00000000c0)=""/182, 0xb6}, {&(0x7f0000001180)=""/225, 0xe1}, {&(0x7f0000000280)=""/102, 0x66}, {&(0x7f0000000300)=""/29, 0x1d}, {&(0x7f0000001600)=""/4096, 0x1000}], 0x6, &(0x7f0000002680)=""/108, 0x6c}, 0x80002042) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000015c0)={&(0x7f0000001140)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860c0000000201"], 0x20}, 0x4000004) 5m46.614569824s ago: executing program 2 (id=2849): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0xe, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x602, r0}, 0x38) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pipe(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @private=0xa010101}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000000000000000a80000", @ANYRES32=0x0, @ANYBLOB="4060000002400000140012800800010067726500080002800400120008001f00ff"], 0x3c}, 0x1, 0x0, 0x0, 0x40c0000}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x24044848) socket(0x2a, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001500010300000000000000000b000000fffa7b208cef4d4660909bc85572ad21923632778dca32b3c73b21e2064796ac44161997e66fb9b4806a818043b98a537ed167db4c0c4599365df9faf40bcf783b391d"], 0x14}}, 0x40088c0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0xe, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x602, r0}, 0x38) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) pipe(0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @private=0xa010101}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000000000000000a80000", @ANYRES32=0x0, @ANYBLOB="4060000002400000140012800800010067726500080002800400120008001f00ff"], 0x3c}, 0x1, 0x0, 0x0, 0x40c0000}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x24044848) (async) socket(0x2a, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001500010300000000000000000b000000fffa7b208cef4d4660909bc85572ad21923632778dca32b3c73b21e2064796ac44161997e66fb9b4806a818043b98a537ed167db4c0c4599365df9faf40bcf783b391d"], 0x14}}, 0x40088c0) (async) 5m46.083127715s ago: executing program 2 (id=2855): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800610001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x20) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000080)=0x7f, 0x4) setsockopt$inet6_int(r1, 0x29, 0x34, &(0x7f0000fcb000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="40000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="02000000e100000014001280090000000000040082800a000100"/40], 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x0) socket$kcm(0x2b, 0x1, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0xffffffff, 0x4) ioctl$XFS_IOC_GETVERSION(r3, 0x80087601, &(0x7f00000002c0)) write$tun(r6, &(0x7f0000000200)=ANY=[], 0x123f) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x5a, 0x1, 0x5, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000004026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x5, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0xa, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f425"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d220600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x87, &(0x7f0000000480)=""/135, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe92}, 0x21) r7 = socket$kcm(0x10, 0x2, 0x4) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r7) sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000040)=0x6) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r8, 0x8983, &(0x7f0000000100)={0x8, 'syzkaller0\x00', {'syz_tun\x00'}, 0x4}) recvmsg(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2082) socket$inet6(0xa, 0x4, 0x9) close(0x4) 5m45.501254377s ago: executing program 2 (id=2860): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0xa930bb9f3fd061f1) socket$key(0xf, 0x3, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x1) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0xd2fbbd4e9e777865}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000003ffffffffffff86dd69000000002006fffe800000f4ff00000000000000000039fe8000000000000000000000000000aa4e224e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8110000790780003050afffffffe000000090000"], 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002000)=@delchain={0x2c, 0x66, 0x49404108a2eb2df, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xffeb, 0x1d0c5d7c03b59b98}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00F', @ANYRES16, @ANYBLOB="000429bd7000ffdbdf250e0000003400028008000800050000000800030000000000080006000001000005000d0001000000080006000900000006"], 0x48}, 0x1, 0x0, 0x0, 0x400c1c4}, 0x44002) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r10, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="ec000000100001002d390d00fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8121000000000000140003006e657464657673696d30000000000000b0001680ac00018010000600fa010000060000000900000018000c80"], 0xec}}, 0x4000844) 5m42.254679928s ago: executing program 2 (id=2867): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r2, &(0x7f0000000240)=""/177, 0xb1, 0x40018102, &(0x7f0000000300)={0x2, 0x0, @local}, 0x10) socket(0x22, 0x6, 0x4) r3 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000200)='THAWED\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='FROZEN\x00', 0x7) 5m27.133114424s ago: executing program 32 (id=2867): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r2, &(0x7f0000000240)=""/177, 0xb1, 0x40018102, &(0x7f0000000300)={0x2, 0x0, @local}, 0x10) socket(0x22, 0x6, 0x4) r3 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000200)='THAWED\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='FROZEN\x00', 0x7) 2.164814582s ago: executing program 0 (id=4495): sendmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x10}}], 0x1, 0x4044c50) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2.030157682s ago: executing program 3 (id=4496): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002c80)=[{{&(0x7f00000008c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@ip_ttl={{0x14, 0x0, 0x1600bd75, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x30}}], 0x1, 0x40040) 2.020207733s ago: executing program 5 (id=4497): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="0201022e1fff3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 1.993296895s ago: executing program 0 (id=4498): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x10000000}) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000000)={0xc0000000}) 1.933171718s ago: executing program 3 (id=4499): syz_emit_ethernet(0x4c, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x16, 0x84, 0x0, @rand_addr=' \x01\x00', @local, {[], "a5ba94e385673ccfd3fe184ab0643975bcc85fbf4386"}}}}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x2, 0x1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000300), &(0x7f0000000280)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000bc0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000780)=ANY=[], 0x0) 1.870034172s ago: executing program 4 (id=4500): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80c20000000000000000000000900000000000000000000000900000200000000000000000902"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 1.836939767s ago: executing program 5 (id=4502): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="1801000016000100000000000000000064010100000000000000000000000000000000000000000000000000000000010000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000002c000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff0000000000000000960700002dbd70000000000000000002be0000000000000000000000b1a0010008001f00040000000c002000"], 0x118}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/21, 0x15}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f0000000300)=""/87, 0x57}, {&(0x7f0000000a40)=""/227, 0xe3}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000040)=""/118, 0x76}, {&(0x7f00000000c0)=""/19, 0x13}], 0x9}, 0xfffffffd}], 0x1, 0x2000, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r0) 1.749455773s ago: executing program 4 (id=4503): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @random="159e7a4437da"}]}, 0x40}}, 0x8000) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x80087601, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="24005a8020000180140003000000000011000000800020000100000004000200040001"], 0x40}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg(r9, &(0x7f000000b3c0)=[{{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000004480)="5e72d8", 0x3}], 0x1}}], 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x90656}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @dev={0xac, 0x14, 0x14, 0xa}}]}}}]}, 0x3c}}, 0x40) 1.674092296s ago: executing program 0 (id=4504): unshare(0x6020400) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000140)=0x4bc, 0x4) bind$nfc_llcp(r0, 0x0, 0x0) getsockopt$inet_buf(r0, 0x118, 0x1, 0x0, &(0x7f00000003c0)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x4c0400c0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000480)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) sendto$packet(r4, 0x0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, 0x0, 0x0) shutdown(r1, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000000440)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private1}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0x6, @remote, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000180)="589597c1", 0x4}], 0x1}}], 0x2, 0x40088d4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000ff20000180080001006475700014000280080001400000000c08000240000000020900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x400c1c4}, 0x44002) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.564391755s ago: executing program 5 (id=4505): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x3, 0x80000000, 0x0, @mcast1, @mcast2, 0x1, 0x20, 0x1, 0x4}}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x1403, 0x10, 0x70bd25, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x18, 0x2, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000000)={0x8, 'batadv_slave_0\x00', {'bridge0\x00'}, 0x4}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0x90b}, 0x10) (async) socket$kcm(0x29, 0x0, 0x0) (async) r4 = socket$kcm(0x29, 0x7, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r5, &(0x7f0000003340)={0x0, 0x0, &(0x7f0000003300)={&(0x7f00000032c0)={0x10, 0x140e, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4044801}, 0x20000000) (async) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1c00000022008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x4850) 1.561864304s ago: executing program 3 (id=4506): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000008080000000000080d00000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000120000850000007500000095", @ANYRESOCT=0x0, @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x84, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0x7ff, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x6}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x7c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x6, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158142, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x2, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x9, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x80, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0x5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x83}, {0xfffffffd, 0x8, 0x6, 0x5, 0x7fffffff, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x0, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x8401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x8, 0x5, 0x8}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x7, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x84, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0xd424, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff, 0x3ff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x5}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x1000009, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x2}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x6, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0xffffffff, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000000, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x2, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x4, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@gettaction={0x8c, 0x32, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2f}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb9acc68c}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x8c}}, 0x8004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2f, 0xe, 0x0, &(0x7f0000000440)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.283260404s ago: executing program 5 (id=4507): socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket(0x10, 0x3, 0xc) (rerun: 64) socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) socket$tipc(0x1e, 0x1, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180001000000000000000000000000009500000000000000563ca36446c55599abf257bf1cd40ce8adb18a77ef6b183b9bed74db3fd429e3033d112a90554d1f7e41224c3c7ed04e6869400507212580cecfa320a9"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="0300"/15, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000280), &(0x7f0000000500)=r2}, 0x20) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 1.205921597s ago: executing program 4 (id=4508): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000000800004000000", @ANYRES32, @ANYBLOB="aec3d33c8a8ae8755b96644c4cb95fe18733dc0fe0c177d67d82221e9133b38adc69c37a834c6e2fdabed91d89347697542453a0d80af03c62dc3c76367186a854fda7", @ANYRES32, @ANYRESDEC=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="840100", @ANYRES16=r1, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090003"], 0x184}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x28, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x2000c001) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000000080)='K', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x83, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000004) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4890) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) ioctl$sock_qrtr_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000540)={'tunl0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r9, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, 0x0, 0x30}, 0xc4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.205662077s ago: executing program 3 (id=4509): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000003100)=""/4080, 0xff0}], 0x1}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0), 0x0, 0x9200000000000000) 1.124255471s ago: executing program 1 (id=4510): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x10000, @value=r1}, 0x28) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000040000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000010000fcff00000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x103, &(0x7f0000000140)=""/259}, 0x94) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000400f1ff030000000f00000000000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) pwritev(0xffffffffffffffff, &(0x7f0000001bc0)=[{&(0x7f00000019c0)="775a47c70902f034c9742448a38cf40eff83f9bc38ad3928e4c9e1ae7743f2bf216514998ce879f31b40aac8fa4a5a8b06a5ff2bf88b883820acd0a6840c8e6976690453449f5a758bdb52271319bde8f292f68db2009163614b76d091", 0x5d}], 0x1, 0x39f, 0x101) (async) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@bloom_filter={0x21, 0x0, 0x7}, 0xa6) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x5}) ioctl$TUNSETPERSIST(r6, 0x400454c9, 0x1) (async) ioctl$TUNSETGROUP(r6, 0x400454ce, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff000000000000000018110000", @ANYRES32=r5, @ANYBLOB="000000fc00000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x2000002, 0xe, 0x700, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.024779905s ago: executing program 0 (id=4511): pipe(0x0) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) (async) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x3, 0x30) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x600) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x40b942b37d0000) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000090400000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000400002400128009000100626f6e64000000001400028004001f0004000000080007"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private2, @in=@local, 0x4e20, 0x0, 0x4e20, 0x0, 0x2, 0x20}, {0x0, 0x10401, 0x9141, 0x800, 0x0, 0xf42, 0x5, 0x4}, {0x0, 0x0, 0x0, 0x1000}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x2b}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x100350b, 0x5, 0x1, 0x4, 0x0, 0x8, 0xfffffffd}}, 0xe8) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xfffc, 0x6, @mcast1, 0x200000}, 0x1) 885.683904ms ago: executing program 1 (id=4512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0xe, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x6, 0x4a, 0x6, 0x6}]}, 0x10) close(0x3) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet(0x2, 0xa, 0x4) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a090400000000000000000200000048000480100001800c0001006e6f747261636b00340001800c0001007061796c6f616400240002800800024000000000080001400000000a080003400000000508000440000000020900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x24, r8, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0xfffffffc, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x4) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 823.917583ms ago: executing program 4 (id=4513): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff0000a50000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) (async) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x271c, 0x0, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000400)={r5}, 0x8) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r5, 0x5, 0x10}, 0xc) (async) write$cgroup_int(r1, &(0x7f0000000040)=0x10001, 0x12) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=@deltaction={0x24, 0x31, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendfile(r1, r0, 0x0, 0x9799) 733.026821ms ago: executing program 0 (id=4514): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000940)=@mangle={'mangle\x00', 0x1f, 0x6, 0x480, 0x98, 0x338, 0x188, 0x0, 0x98, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x6, &(0x7f0000000600), {[{{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x5, 0x5}, {0x2, 0x5, 0x6}}}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@icmp={{0x28}, {0x3, 'oJ', 0x1}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x80, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23}}}, {{@ip={@loopback, @broadcast, 0xffffffff, 0x0, 'batadv0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x2f, 0x0, 0x4}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x6, 0x6, @broadcast, 0x4e22}}}, {{@ip={@multicast1, @local, 0xff000000, 0xff, 'ip6tnl0\x00', 'pim6reg0\x00', {}, {0xff}, 0x21}, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "bbd5", 0x1}}, @common=@unspec=@nfacct={{0x48}, {'syz1\x00', 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3ff, 0x2, @multicast2, 0x4e23}}}, {{@ip={@multicast2, @local, 0xffffff00, 0xff000000, 'vlan0\x00', 'pim6reg1\x00', {}, {}, 0x0, 0x3, 0x4}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xffff, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x447) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x21, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00082cbd701122c400ffdbdf25020000000c0006800600010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4004085) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x3, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@mcast2, 0x4e20, 0x56, 0x4e23, 0x7ff, 0x2, 0x0, 0x20}, {0x0, 0x8, 0x4, 0x4, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000001, 0x4, 0xffffffffffffff7f}, 0x3, 0x0, 0x1, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x37}, 0x0, 0x2b}, 0x2, @in=@remote, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x44}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) socket(0xa, 0x3, 0xff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) close(r8) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000040)=0x4) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 606.053353ms ago: executing program 4 (id=4515): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1, 0x6, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={r1, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = gettid() ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000180)=r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x1000}) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xe) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r5, &(0x7f00000002c0)={0x1a, 0x320, 0xac, 0x4, 0x8}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5b, 0x5b, 0x4, [@int={0x10, 0x0, 0x0, 0x1, 0x0, 0x56, 0x0, 0x28, 0x2}, @datasec={0xa, 0x5, 0x0, 0xf, 0x3, [{0x3, 0xef, 0x1}, {0x2, 0x8, 0xfffffff7}, {0x2, 0xc3}, {0x2, 0x0, 0x10000}, {0x1, 0x4, 0x9}], "506dc3"}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f00000004c0)=""/164, 0x78, 0xa4, 0x1, 0xfffffff5}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x8, 0xffffffff, 0x5, 0x28000, r6, 0x4fc, '\x00', r7, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xe, @value=r8}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r9) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r9) sendmsg$NL80211_CMD_START_SCHED_SCAN(r9, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x1b0, r10, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x124, 0x84, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @random="bd7153ff2eb6"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x80000000}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7fff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x605c}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="5acac325d71f"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x316}, @NL80211_BAND_2GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1000}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xe5}, @NL80211_BAND_LC={0x8, 0x5, 0x5}]}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x3ff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xd}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xb}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}]}]}]}, @NL80211_ATTR_SCAN_SSIDS={0x64, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x40000}, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400340}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x58, r11, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000811}, 0x4800) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000a80)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5dcf, 0x1, 0x2, 0x2, 0xe237, 0x3}, 0x20) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfb, {0x10, 0x0, 0x3, r3, 0x400, 0x8, 0x3, 0x0, 0x0, 0x6, 0x4}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x40040) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r9, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x102, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000) 587.712347ms ago: executing program 1 (id=4516): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000000c0)=ANY=[], &(0x7f0000000100)=""/27, 0x27, 0x1b, 0x1, 0x3}, 0x28) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000140)={0xc029}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x20}, 0xc) 521.860977ms ago: executing program 5 (id=4517): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r2], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa, 0xffb0}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000020000000000a03000000000000000000050000070900010073797a310000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4c045) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) close(0x3) pread64(r4, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff) writev(r4, &(0x7f0000000380)=[{&(0x7f0000000000)="60e42726b9f511e439f6fd31c1a0d1e4b5ea8eb6230f446f210ddaf98bfaab18165309d152f5bafc6cb15608d6c0f2", 0x2f}, {&(0x7f0000000240)="71de9408bd501f43482efebe07b0c25f07b722a512acf6d991d9999d4f4e7e850f2d920453dcf74d19cb30321ba7a90a1af3e645b78bbd7f1746129c69f8310e9c90b0993de2f9852225b40170def3200f68520dd18a1f1515e6029a5646a3cedfd6a2c1dc125de31d798dec9e2a54314d23dcd301fae64b37db24e5d8da7dc2cf37db316bb76e01d9d2f045f6e1a246ec295b996efee87f38f703f59cfe913df8680dfb79c3c39d6bad16ffab28fc804cb26d800760372baa6518af2c54efd6f95ecc260a60f898aeaff3c7cfeaeb7521d77dfa4c273c0ea818c4f0e50a2aa2c2290d02e0a453fa5a81f6e1aa5b2283b435c157", 0xf4}, {&(0x7f0000000340)="487cb51987e4eb4e83bb3aa835ef9ac676797fa9f0135c134cdc50de192ad6313c346bd1af4e6f0adc7dfd1cdcbcc2300f5e65603c4cdca342e46e50624bca", 0x3f}], 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x48}}, 0x0) 438.457414ms ago: executing program 0 (id=4518): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x8, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) recvmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003900)=""/15, 0xf}, 0x7fffffff}], 0x1, 0x2, 0x0) 428.847252ms ago: executing program 1 (id=4519): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c3a000000000000000200000000000006000000000600150001000000180016801400010000300000001100"/59], 0x3c}}, 0x8000) 293.498399ms ago: executing program 4 (id=4520): r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000002a80)=[{}], 0x1, 0xfffeffff) clock_gettime(0xffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000980)=@ethtool_coalesce={0xe, 0x2, 0x5a6, 0x400, 0x6, 0x18004, 0x2, 0x0, 0x8, 0x38, 0x1ff, 0xf, 0x0, 0x44, 0x2, 0x7, 0x38000, 0x0, 0xfffff20f, 0x1, 0x3, 0x73, 0x9}}) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x7, 0x5}, {0x6, 0xfd}]}) write$ppp(r2, &(0x7f0000000280)="1e08bc018558d8", 0x7) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x1f9, &(0x7f0000000480)={@random="e90c610faca2", @multicast, @void, {@mpls_mc={0x8848, {[{0x95}, {0xffff, 0x0, 0x1}], @ipv6=@dccp_packet={0xd, 0x6, "473403", 0x1bb, 0x21, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@hopopts={0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x42}}]}, @routing={0x22, 0x12, 0x2, 0x8d, 0x0, [@empty, @mcast1, @private0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, @private0]}, @dstopts={0x33, 0xf, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x80, 0x9, [0xff]}}, @generic={0x9, 0x6b, "a320a83fc30d1f8c3941652abe38caaa837de4d2542e294f6ddff0375861b6bb1c9185483912236e230c32d6c8f327fca8b0c920189340a6bfb8d7f774bb91b3cc102ef89ec21529fbfcffa7aa8a9e1370217c548b27ed88ab1f6571cf3a3984fbc8b719a859e60297e307"}]}, @fragment={0x2b, 0x0, 0x9, 0x0, 0x0, 0xe, 0x68}], {{0x4e23, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x2, 0x2, "9c41e6", 0x1, "5d6ee4"}, "66ab0af5fa619fa9df80d85e2c0e8eaa904b28a2cc75eb9edd849e959f7c73fcdb23e32740a4968ade1d884e6f4fefa263bbb02c6a8e028a039d935174be07054afe8618c04171b3aa283548dd8ab36ad85dbc9292a6d53797398f3d6cf22f3e41d59d"}}}}}}}, 0x0) syz_emit_ethernet(0x31, &(0x7f00000000c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}, "97e8fc"}}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x9d32f4b2e0c65377}) 260.981775ms ago: executing program 3 (id=4521): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000200)=0x1, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000001b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r1}, 0x10, &(0x7f00000003c0)={&(0x7f0000000280)=@canfd={{0x2, 0x1, 0x1}, 0xfe, 0x1, 0x0, 0x0, "c49bc517a6bdb5a8c574326b3d1a2cd328971128f016c3926cf5c07e97913f4927acf5c385672f9e15f9f096c4a8a50682532ce2971dca06656d719f72acb5a4"}, 0x48}, 0x2, 0x0, 0x0, 0x1}, 0x10044009) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="88000000", @ANYRES16, @ANYBLOB="010027bd70000000000001000000080007000a0101024e00010003dfe4dd9e6efa9e72e4065e1dd0ab4c3f17568492fa019225f4f55724dbd9d7264880ef7cef4da08a74e947a31ce6750f39bbd1700fc6dfe1dad89a05e44bd95d7a6eda083bb40ea3d63e0c0000ddd4a0c6f5e400000800022e989c5064000700000014000500ff010000000035a41de22f8f39c12f527399fb2fc92d66c1eee439f056f5165c688355ad11935d440050cb64c92fbf71b6776ddfb28baf7684ef49459ac1f623065922562a8c13619778e5d666d4e93f1354cea08193212f8c317e3a6e"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xbe}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 254.104237ms ago: executing program 1 (id=4522): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000001a80)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000005040)=0x1, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x4]}]}, 0x6c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'macvlan1\x00', 0x0}) sendto$packet(r7, 0x0, 0xfffffffffffffebc, 0x0, &(0x7f00000002c0)={0xc9, 0x1a, r8, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES64=r4], 0x1c}}, 0x8c0) unshare(0x2c020400) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, 0x0, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="40ed"], 0x4) 41.259458ms ago: executing program 1 (id=4523): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRESDEC], 0x50) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80400000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='\f\b\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x80c}, 0x1, 0x0, 0x0, 0x80}, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r3, 0x84, 0x80, &(0x7f00000011c0)="0000000000910000e4129f590200f38905132b475d0df6fbf4c017b268b2520de5ab9ef915af95f805b33adfbf015ec0975161d3ce937b522c6b88c642adb7dbf6797b8221fc9bc4327d3fc7080000000000000095d50ce57755702c9b3cbeb45348f0538dbd9b157c09f6d5269165c97fe501803f29e516a3fa9e2c611340a2553a6794afe7b10fa1466ce50ff90e7b965b46d3e8e3c3ed38ccd67561e30be973b33ad8644ce1f77bd264b9dd20c1e2d58ffb38444f66d24518b6fe8a805b53b0b6d47bf0c2f53efe768ea972482e204640004b5dad51487c4e3a00a3f09e64858b333293dd6b22b93b6a73a2835d88430578bb79e00bca534896ab43f1369dae9bb600869056036383147185d8396b25f611f56e92214e05bbe5058843ebef3f475ebf164cabae7d737ee140c54499a293da4e4ba202544db889606a24ca37986688ba95dd20d3e98b6938c3e910b646a1a59ffbe58b4036581e8492d37e48d53abd268ec0f13a17cefeaba08948676ffd3e0cc33f826a564930ce7d03aea93c871f902bebdc05df7ac638de186057d95e4aa44f42ae709bb73ff299689a1618844c9382f8c317557da3b14790604db6409d5926ee347f1dca21f6962e31ecd7cbe02c41369cf29f4e512947d17b31423b5bf0b7c1fc429ae23ba25fe206d06f5db489c0a620605c2ffda9c60ac81c5f7ceaea3507aa328dc98500b9f4e24d201900d9fd76772ff225b5318c24f1c009357f8a3c3ef73aae0793413b600dfab8da526acb8658545281a8a87211bd63307e53eb30b1a78ccb", 0x239) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB="370000002820000004000008", @ANYRES16=0x0, @ANYBLOB="91456640fb435766640eaabd0365676907e2dc3331cd82f61741157bfffbdb1834e8551f937c047d13b402e9faadc70e5c3aa1c69912cac41e01e843a03fa87140b9f1ad89db6d3c04a8b76770a665c0152feeb75eee0399c59eb6aafda112d9c95f0c6432e63693b9271a8af36860b607e2eb73bd104309483c2825dd3806d9cc39ed8e5b0adbd289af85ee07f2850d22e9d00b9ee0267b70ed0474cb5d7927187a5d7602850800f1a597ec0bae", @ANYRES64=0x0], 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3400000011000100000040030000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006970365f767469300000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf825ff96300000007020000f84bffffb703000008000000b7040000000000008500000058"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x14, &(0x7f0000000400)=ANY=[@ANYRESHEX=r2], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xe}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x58, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x5, @private0, 0xa06}]}, &(0x7f0000000640)=0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) r12 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r12, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r12) sendmsg$DEVLINK_CMD_RATE_NEW(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000001400)=ANY=[@ANYRESHEX=r11, @ANYRES32=r4, @ANYBLOB="010000000000000080004c000000841bfd23eb2de8f43aa272a7a797866fb4242d0271bc9cb3d4e6f5ba86ce1708954b9037e563163418a3d5639c8108090022b41a4b00bf8695b1f0e8b968cc23d0fd960800000079d122ff47a4cfe2fec1c8c1cff299b05c10fdf6dadd577a7489fd3b1f000000000000000000", @ANYRES32=r6, @ANYRES64=r7, @ANYRESHEX=r9], 0x14}, 0x1, 0x0, 0x0, 0x4870}, 0x4000004) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000000180), &(0x7f0000001a40)=0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r15 = openat$cgroup_int(r14, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r15, &(0x7f0000000340)=ANY=[@ANYRESDEC=r13, @ANYRES64=r14, @ANYRESDEC=r8, @ANYRES64=r0, @ANYRES8], 0x27) 38.467622ms ago: executing program 5 (id=4524): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5a13, 0x2, 0x2, 0x6, 0x1fd}) socket$netlink(0x10, 0x3, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r2 = socket(0x2, 0x80805, 0x0) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) shutdown(r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000400)={r4, @in6={{0xa, 0x3, 0x4, @mcast1, 0x4}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000340)=r5, 0x4) (async) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x1) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x40011, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000140), &(0x7f0000000280)=r7}, 0x20) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r9}, 0x4) (async, rerun: 64) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x4008000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 0s ago: executing program 3 (id=4525): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x108, 0x10, 0x439, 0x70bd2b, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x13, 0x618c4}, [@IFLA_LINKINFO={0xe8, 0x12, 0x0, 0x1, @vti={{0x8}, {0xdc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x27}}, @vti_common_policy=[@IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x10000}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x9}], @IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x39}}, @vti_common_policy=[@IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x3}, @IFLA_VTI_OKEY={0x8, 0x3, 0xd}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x80000001}, @IFLA_VTI_IKEY={0x8, 0x2, 0x4}, @IFLA_VTI_IKEY={0x8, 0x2, 0x5}, @IFLA_VTI_OKEY={0x8, 0x3, 0x62}], @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x80000000}, @IFLA_VTI_OKEY={0x8, 0x3, 0x1}, @IFLA_VTI_FWMARK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x7}, @IFLA_VTI_OKEY={0x8, 0x3, 0x7ff}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x2}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x1}, @IFLA_VTI_LINK={0x8}], @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010101}, @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010102}, @IFLA_VTI_LOCAL={0x8, 0x4, @local}, @IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1f}}]}}}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001c0001002cbd7000fddbdf2502000000", @ANYRES32=0x0, @ANYBLOB="0000080005000c000900000005090000000000000000000075312bbd8f17ed6fee25132fdc8ee9bcb2d7e69fdf9be64cba3779accd95bca7b874844cd715fbcf79a28e2d87d1cfcc0baca9a1ca80f7483b21fabd7c79603b93347f5bf84ba9c40e4582f919ecfede933ead3e7d0fadacf082ab8a734f20f2e25a76294f02322773f1538471b8142c2c9897c205ea1576c7dc8af25eefc4d75e8c14ae10c545b6e19bdfaf139ca1a455af939e0ee1ab5186c30d1cee1da168d8aa53af700a9df9f902095a0ca01f5cf7be14e4224c"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0xcd9ad27008a939a2) kernel console output (not intermixed with test programs): 50:50:50:50:50 [ 452.811097][T17672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2978'. [ 453.075024][T17669] ipvlan2: entered promiscuous mode [ 453.134156][ T7881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.166083][ T7881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.306643][T17685] IPVS: Unknown mcast interface: veth1_to_bridge [ 453.358330][T17679] tipc: Started in network mode [ 453.374462][T17679] tipc: Node identity 42fcd2a8a9ef, cluster identity 4711 [ 453.386979][T17679] tipc: Enabled bearer , priority 0 [ 453.486920][T17683] syzkaller0: entered promiscuous mode [ 453.495397][T17683] syzkaller0: entered allmulticast mode [ 453.508737][T17683] tipc: Resetting bearer [ 453.572430][T17678] tipc: Resetting bearer [ 453.699514][T17696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2982'. [ 453.731390][T17696] netlink: 'syz.4.2982': attribute type 10 has an invalid length. [ 453.745750][ T4939] Bluetooth: hci3: command tx timeout [ 453.783653][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 453.798659][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 453.808936][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 453.817295][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 453.835863][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 454.863540][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 454.924770][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 454.941251][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 454.967779][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 454.991758][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 455.821419][ T4939] Bluetooth: hci3: command tx timeout [ 455.916885][ T4939] Bluetooth: hci0: command tx timeout [ 456.999806][T17678] tipc: Disabling bearer [ 457.017052][T17696] geneve7: entered promiscuous mode [ 457.023221][T17696] geneve7: entered allmulticast mode [ 457.057853][ T10] tipc: Node number set to 3943944872 [ 457.101359][ T4939] Bluetooth: hci2: command tx timeout [ 457.306131][T17716] __nla_validate_parse: 1 callbacks suppressed [ 457.306151][T17716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2984'. [ 457.334132][T17717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2984'. [ 457.353645][T17715] vlan2: entered promiscuous mode [ 457.369376][T17715] hsr0: entered promiscuous mode [ 457.389690][T17715] vlan2: entered allmulticast mode [ 457.404761][T17715] hsr0: entered allmulticast mode [ 457.412636][T17715] hsr_slave_0: entered allmulticast mode [ 457.434602][T17715] hsr_slave_1: entered allmulticast mode [ 457.457073][T17717] hsr_slave_0: left promiscuous mode [ 457.471535][T17717] hsr_slave_1: left promiscuous mode [ 457.939056][T17756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2994'. [ 457.948862][T17756] netlink: 'syz.4.2994': attribute type 10 has an invalid length. [ 457.957592][T17756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2994'. [ 457.976486][T17756] geneve7: entered promiscuous mode [ 457.982647][ T4939] Bluetooth: hci0: command tx timeout [ 457.993647][T17756] geneve7: entered allmulticast mode [ 458.935798][T17797] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3002'. [ 459.024533][T17697] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.033706][T17804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3004'. [ 459.043138][T17697] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.051545][T17697] bridge_slave_0: entered allmulticast mode [ 459.058655][T17697] bridge_slave_0: entered promiscuous mode [ 459.085303][T17697] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.093139][T17697] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.105389][T17697] bridge_slave_1: entered allmulticast mode [ 459.113603][T17697] bridge_slave_1: entered promiscuous mode [ 459.183235][ T4939] Bluetooth: hci2: command tx timeout [ 459.198393][T17697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.213739][T17697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.278528][T17697] team0: Port device team_slave_0 added [ 459.288467][T17697] team0: Port device team_slave_1 added [ 459.342800][T17697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.350985][T17697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.388980][T17697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.400325][T17810] syz_tun: entered promiscuous mode [ 459.410494][T17697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.417853][T17697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.444916][T17697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.466366][T17810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3005'. [ 459.533912][T17697] hsr_slave_0: entered promiscuous mode [ 459.540879][T17697] hsr_slave_1: entered promiscuous mode [ 459.547374][T17697] debugfs: 'hsr0' already exists in 'hsr' [ 459.553502][T17697] Cannot create hsr debugfs directory [ 459.578146][T17810] netlink: 'syz.0.3005': attribute type 29 has an invalid length. [ 459.621274][T17702] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.628563][T17702] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.637574][T17702] bridge_slave_0: entered allmulticast mode [ 459.645145][T17702] bridge_slave_0: entered promiscuous mode [ 459.673482][T17702] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.682273][T17702] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.689683][T17702] bridge_slave_1: entered allmulticast mode [ 459.697741][T17702] bridge_slave_1: entered promiscuous mode [ 459.770365][T17816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3006'. [ 459.788956][T17702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.812539][T17810] syz_tun: left promiscuous mode [ 459.820544][T17816] netlink: 'syz.1.3006': attribute type 10 has an invalid length. [ 459.842662][T17702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.851995][T17816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3006'. [ 459.903307][T17816] geneve2: entered promiscuous mode [ 459.908546][T17816] geneve2: entered allmulticast mode [ 459.974276][T17702] team0: Port device team_slave_0 added [ 459.999593][T17819] IPv6: NLM_F_CREATE should be specified when creating new route [ 460.027913][T17702] team0: Port device team_slave_1 added [ 460.062366][ T5630] Bluetooth: hci0: command tx timeout [ 460.159127][T17702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.190096][T17702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.261101][T17702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.273814][ T10] IPVS: starting estimator thread 0... [ 460.277475][T17702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.320846][T17702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.358744][T17702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.382349][T17834] IPVS: using max 27 ests per chain, 64800 per kthread [ 460.518414][T17702] hsr_slave_0: entered promiscuous mode [ 460.532815][T17702] hsr_slave_1: entered promiscuous mode [ 460.548465][T17702] debugfs: 'hsr0' already exists in 'hsr' [ 460.557248][T17702] Cannot create hsr debugfs directory [ 460.634847][T17851] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 460.835726][T17861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3016'. [ 461.103298][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 461.229398][T17880] netlink: 'syz.0.3021': attribute type 1 has an invalid length. [ 461.261535][ T5630] Bluetooth: hci2: command tx timeout [ 461.354648][T17697] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 461.409239][T17697] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 461.446654][T17697] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 461.489736][T17697] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 461.507545][T17697] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 461.561650][T17697] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.583068][T17697] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 461.613747][T17697] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 461.985475][T17702] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 462.016297][T17702] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 462.026409][T17702] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 462.038437][T17702] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 462.056656][T17702] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 462.083122][T17702] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 462.119400][T17702] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 462.137340][T17702] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 462.149762][ T5630] Bluetooth: hci0: command tx timeout [ 462.278228][T17697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.348806][T17943] tc_dump_action: action bad kind [ 462.366276][T17697] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.366923][T17945] netlink: 'syz.0.3034': attribute type 4 has an invalid length. [ 462.386435][ T7881] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.393692][ T7881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.467338][ T7880] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.474584][ T7880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.494547][T17950] can: request_module (can-proto-0) failed. [ 462.573453][T17702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.612050][T17697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 462.663144][T17702] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.695736][ T7880] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.703019][ T7880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.748764][ T7881] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.756010][ T7881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.775267][T17959] __nla_validate_parse: 2 callbacks suppressed [ 462.775287][T17959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3039'. [ 463.055445][T17969] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3041'. [ 463.088062][T17969] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3041'. [ 463.341293][ T5630] Bluetooth: hci2: command tx timeout [ 463.495283][T17992] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 463.552716][T17992] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3047'. [ 463.639582][T17697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.689747][T18000] netlink: 'syz.4.3048': attribute type 13 has an invalid length. [ 463.757580][T18003] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 463.797490][T18011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3050'. [ 463.981448][ T5757] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 464.236579][T17697] veth0_vlan: entered promiscuous mode [ 464.254308][T18024] tipc: Enabled bearer , priority 0 [ 464.276973][T18024] tipc: Resetting bearer [ 464.293779][T18024] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 464.309081][T18026] Bluetooth: MGMT ver 1.23 [ 464.386304][ T5757] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 464.476076][T17702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.575044][T17697] veth1_vlan: entered promiscuous mode [ 464.584197][T18024] tipc: Resetting bearer [ 464.756801][T17697] veth0_macvtap: entered promiscuous mode [ 464.802018][T17697] veth1_macvtap: entered promiscuous mode [ 464.884301][T17697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.919932][T17697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.959351][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.011188][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.040220][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.073449][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.333211][T17702] veth0_vlan: entered promiscuous mode [ 465.358145][T17702] veth1_vlan: entered promiscuous mode [ 465.432416][T18051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3058'. [ 465.455088][ T7880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.481403][ T7880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.666183][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.677571][T17702] veth0_macvtap: entered promiscuous mode [ 465.693180][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.719743][T17702] veth1_macvtap: entered promiscuous mode [ 465.797059][T17702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.839422][T17702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.870444][ T6092] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.900534][ T6092] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.927473][ T6092] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.944283][ T6092] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.202577][ T7894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.230348][ T7894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.357122][ T3359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.373057][T18078] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3067'. [ 466.382075][ T3359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.779239][T18081] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 466.795672][T18081] bond1 (unregistering): Released all slaves [ 467.022396][T18102] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3071'. [ 467.055745][T18102] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3071'. [ 467.071214][T18102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3071'. [ 467.546920][ T4939] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 467.568641][ T4939] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 467.580103][ T4939] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 467.598902][ T4939] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 467.612923][ T4939] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 468.074960][T18139] __nla_validate_parse: 1 callbacks suppressed [ 468.074979][T18139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3080'. [ 469.235998][T18113] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.244826][T18113] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.252675][T18113] bridge_slave_0: entered allmulticast mode [ 469.262316][T18113] bridge_slave_0: entered promiscuous mode [ 469.271738][T18113] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.279085][T18113] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.286757][T18113] bridge_slave_1: entered allmulticast mode [ 469.295183][T18113] bridge_slave_1: entered promiscuous mode [ 469.329992][T18113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.344992][T18113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.386490][T18113] team0: Port device team_slave_0 added [ 469.396021][T18113] team0: Port device team_slave_1 added [ 469.499332][T18113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.526498][T18113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.558264][T18113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.569717][T18179] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3089'. [ 469.572896][T18113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.586695][T18113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.615478][T18113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.667990][ T4939] Bluetooth: hci6: command tx timeout [ 469.735570][ T7898] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.928351][ T7898] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.963077][T18113] hsr_slave_0: entered promiscuous mode [ 469.970044][T18113] hsr_slave_1: entered promiscuous mode [ 469.978174][T18113] debugfs: 'hsr0' already exists in 'hsr' [ 469.986756][T18113] Cannot create hsr debugfs directory [ 469.997371][T18199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3094'. [ 470.027905][T18197] veth0: entered promiscuous mode [ 470.128308][T18199] bond0: (slave bond_slave_1): Releasing backup interface [ 470.221099][T18214] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3098'. [ 470.264937][ T7898] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.316461][T18196] veth0: left promiscuous mode [ 470.429783][ T7898] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.715393][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 470.791514][ T3359] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.815233][T18237] netlink: 'syz.3.3103': attribute type 23 has an invalid length. [ 470.865435][ T3359] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.942467][ T48] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.024957][ T3359] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.741305][ T4939] Bluetooth: hci6: command tx timeout [ 471.777055][ T7898] bond3 (unregistering): (slave gretap1): Releasing active interface [ 471.904776][ T7898] bond7 (unregistering): (slave geneve3): Releasing active interface [ 471.914026][ T7898] geneve3 (unregistering): left allmulticast mode [ 472.110193][ T7898] bond1 (unregistering): Released all slaves [ 472.161551][ T7898] bond0 (unregistering): Released all slaves [ 472.166052][T18297] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 472.179565][T18297] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 472.205196][ T7898] bond2 (unregistering): Released all slaves [ 472.247752][ T7898] bond3 (unregistering): Released all slaves [ 472.262673][ T7898] bond4 (unregistering): Released all slaves [ 472.277062][ T7898] bond5 (unregistering): Released all slaves [ 472.291133][ T7898] bond6 (unregistering): Released all slaves [ 472.316808][ T7898] bond7 (unregistering): Released all slaves [ 472.345491][ T7898] bond8 (unregistering): Released all slaves [ 472.359495][ T7898] bond9 (unregistering): (slave bond10): Releasing backup interface [ 472.369153][ T7898] bond9 (unregistering): Released all slaves [ 472.383888][ T7898] bond10 (unregistering): Released all slaves [ 472.397904][ T7898] bond11 (unregistering): Released all slaves [ 472.423771][ T7898] bond12 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 472.436538][ T7898] bond12 (unregistering): Released all slaves [ 472.451971][ T7898] bond13 (unregistering): (slave veth5): Releasing active interface [ 472.463187][ T7898] bond13 (unregistering): Released all slaves [ 472.481598][ T7898] bond14 (unregistering): Released all slaves [ 472.499018][ T7898] bond15 (unregistering): Released all slaves [ 472.513925][ T7898] bond16 (unregistering): Released all slaves [ 472.616105][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 472.776334][T18113] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.831195][T18303] IPv6: Can't replace route, no match found [ 472.859000][T18306] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3116'. [ 472.884194][ T7898] tipc: Disabling bearer [ 472.916396][ T7898] tipc: Disabling bearer [ 472.966038][ T7898] tipc: Left network mode [ 472.966093][T18306] C: renamed from veth1_to_team (while UP) [ 473.133254][T18113] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.342154][T18328] netlink: 'syz.3.3122': attribute type 3 has an invalid length. [ 473.399412][T18328] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3122'. [ 473.406339][T18113] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.495873][T18334] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3121'. [ 473.541075][T18334] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 473.671527][T18339] xt_CT: You must specify a L4 protocol and not use inversions on it [ 473.823893][ T4939] Bluetooth: hci6: command tx timeout [ 473.888315][T18351] netlink: 'syz.5.3126': attribute type 4 has an invalid length. [ 473.940821][T18351] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3126'. [ 474.029949][T18113] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.106640][T18344] syzkaller1: entered promiscuous mode [ 474.119485][T18344] syzkaller1: entered allmulticast mode [ 475.212817][T18396] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3136'. [ 475.501732][T18113] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 475.548878][T18113] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 475.901364][ T4939] Bluetooth: hci6: command tx timeout [ 476.080174][T18424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3131'. [ 476.105629][T18113] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 476.147932][T18113] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.266246][T18430] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3139'. [ 476.279463][T18113] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 476.316042][T18113] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 476.476192][T18113] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 476.527405][T18113] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 476.617769][T18443] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3141'. [ 476.657271][T18443] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3141'. [ 476.754296][T18454] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3141'. [ 477.159366][T18462] netlink: 'syz.1.3144': attribute type 12 has an invalid length. [ 477.258950][ T7898] hsr_slave_0: left promiscuous mode [ 477.356280][T18475] netlink: 'syz.3.3147': attribute type 3 has an invalid length. [ 477.378526][T18475] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3147'. [ 478.763880][T18113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.005088][T18113] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.044468][ T7898] IPVS: stop unused estimator thread 0... [ 479.076951][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.084164][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.160593][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.167813][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.292736][T18528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3155'. [ 479.325781][T18528] netlink: 'syz.0.3155': attribute type 10 has an invalid length. [ 479.356141][T18528] netlink: 'syz.0.3155': attribute type 3 has an invalid length. [ 479.407963][T18528] geneve3: entered promiscuous mode [ 479.425558][T18528] geneve3: entered allmulticast mode [ 479.504391][T18538] xt_NFQUEUE: number of total queues is 0 [ 479.635799][ T5723] IPVS: starting estimator thread 0... [ 479.679215][T18551] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3160'. [ 479.696459][T18551] netlink: 'syz.0.3160': attribute type 29 has an invalid length. [ 479.738154][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3160'. [ 479.745901][T18549] IPVS: using max 29 ests per chain, 69600 per kthread [ 480.017512][T18562] ipt_REJECT: ECHOREPLY no longer supported. [ 480.217828][T18576] netlink: 'syz.3.3166': attribute type 3 has an invalid length. [ 480.229902][T18578] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 480.486080][T18588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3167'. [ 480.501982][T18588] lo: entered promiscuous mode [ 480.522102][T18588] lo: entered allmulticast mode [ 480.673554][T18113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.797041][T18606] bridge1: entered promiscuous mode [ 480.817170][T18606] bridge1: entered allmulticast mode [ 480.838882][T18603] tipc: Started in network mode [ 480.858575][T18603] tipc: Node identity daf5567f5f5a, cluster identity 4711 [ 480.897651][T18603] tipc: Enabled bearer , priority 0 [ 480.980092][T18603] tipc: Resetting bearer [ 481.040103][T18602] tipc: Disabling bearer [ 481.150300][T18623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3174'. [ 481.596267][T18113] veth0_vlan: entered promiscuous mode [ 481.644932][T18113] veth1_vlan: entered promiscuous mode [ 481.648769][T18640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3179'. [ 481.774326][T18113] veth0_macvtap: entered promiscuous mode [ 481.813527][T18113] veth1_macvtap: entered promiscuous mode [ 481.885938][T18113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.970110][T18113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.050417][ T7894] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.096384][ T7894] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.144221][ T7894] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.177251][ T7894] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.300283][T18658] tap0: tun_chr_ioctl cmd 1074025677 [ 482.329911][T18658] tap0: linktype set to 780 [ 482.531259][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.569799][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.659652][ T7883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.683689][ T7883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.029572][T18682] openvswitch: netlink: Tunnel attr 91 out of range max 16 [ 483.146648][T18684] syzkaller0: entered promiscuous mode [ 483.171418][T18684] syzkaller0: entered allmulticast mode [ 483.314703][T15329] IPVS: starting estimator thread 0... [ 483.362855][T18692] No such timeout policy "syz1" [ 483.379801][T18692] netlink: zone id is out of range [ 483.393280][T18692] netlink: zone id is out of range [ 483.406732][T18692] netlink: zone id is out of range [ 483.420320][T18692] netlink: zone id is out of range [ 483.426953][T18697] IPVS: using max 28 ests per chain, 67200 per kthread [ 483.439704][T18692] netlink: zone id is out of range [ 483.455732][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3186'. [ 483.473069][T18692] netlink: zone id is out of range [ 483.478351][T18692] netlink: zone id is out of range [ 483.496346][T18692] netlink: zone id is out of range [ 483.961654][T18718] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3192'. [ 483.993567][T18718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3192'. [ 483.997208][T18715] IPVS: Unknown mcast interface:  [ 484.199269][T18730] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3196'. [ 484.486895][T18743] syzkaller0: entered promiscuous mode [ 484.505609][T18743] syzkaller0: entered allmulticast mode [ 485.180544][T18781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3214'. [ 485.197230][T18783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3215'. [ 485.346312][T18783] team0: Port device team_slave_0 removed [ 485.511011][T18787] syzkaller0: entered promiscuous mode [ 485.516715][T18787] syzkaller0: entered allmulticast mode [ 486.075174][T18824] netlink: 'syz.5.3226': attribute type 10 has an invalid length. [ 486.096853][T18830] sctp: [Deprecated]: syz.3.3228 (pid 18830) Use of int in maxseg socket option. [ 486.096853][T18830] Use struct sctp_assoc_value instead [ 486.125116][T18827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3227'. [ 486.242496][T18836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3228'. [ 489.702434][T18851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.808504][T18855] netlink: 558 bytes leftover after parsing attributes in process `syz.5.3234'. [ 489.829802][T18857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.850288][T18859] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3235'. [ 489.892707][T18851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.916802][T18859] vlan2: entered allmulticast mode [ 489.982092][T18859] gretap0: entered allmulticast mode [ 490.098031][T18868] net_ratelimit: 14 callbacks suppressed [ 490.098052][T18868] netlink: zone id is out of range [ 490.152608][T18868] netlink: zone id is out of range [ 490.158649][T18870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3238'. [ 490.180667][T18868] netlink: zone id is out of range [ 490.188586][T18870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3238'. [ 490.210089][T18871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3237'. [ 490.212645][T18870] netlink: 'syz.1.3238': attribute type 12 has an invalid length. [ 490.220992][T18868] netlink: zone id is out of range [ 490.235157][T18868] netlink: zone id is out of range [ 490.241332][T18868] netlink: zone id is out of range [ 490.246841][T18868] netlink: zone id is out of range [ 490.252546][T18868] netlink: zone id is out of range [ 490.264495][T18868] netlink: zone id is out of range [ 490.265015][T18870] netlink: 'syz.1.3238': attribute type 14 has an invalid length. [ 490.282345][T18868] netlink: set zone limit has 8 unknown bytes [ 490.323472][T18874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3238'. [ 490.528861][T18883] tipc: Enabling of bearer rejected, failed to enable media [ 490.605584][T18885] syzkaller0: entered promiscuous mode [ 490.627693][T18885] syzkaller0: entered allmulticast mode [ 490.833906][T18895] bond2: option min_links: invalid value (18446744073709551612) [ 490.854877][T18895] bond2: option min_links: allowed values 0 - 2147483647 [ 490.880276][T18895] bond2 (unregistering): Released all slaves [ 490.925517][T18901] vlan2: entered promiscuous mode [ 490.938986][T18901] hsr0: entered promiscuous mode [ 490.956084][T18901] vlan2: entered allmulticast mode [ 490.974836][T18909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3248'. [ 490.981260][T18901] hsr0: entered allmulticast mode [ 490.999242][T18901] hsr_slave_0: entered allmulticast mode [ 491.018213][T18901] hsr_slave_1: entered allmulticast mode [ 491.144364][T18909] hsr_slave_0: left promiscuous mode [ 491.159391][T18909] hsr_slave_1: left promiscuous mode [ 491.214355][T18912] syzkaller0: entered promiscuous mode [ 491.224452][T18912] syzkaller0: entered allmulticast mode [ 491.551686][T18924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3252'. [ 491.827665][T18938] bond0: entered promiscuous mode [ 491.841886][T18938] bond_slave_0: entered promiscuous mode [ 491.854596][T18938] bond_slave_1: entered promiscuous mode [ 491.898549][T18938] bond0: left promiscuous mode [ 491.919081][T18938] bond_slave_0: left promiscuous mode [ 491.940491][T18938] bond_slave_1: left promiscuous mode [ 492.129379][T18942] bond0: entered promiscuous mode [ 492.143772][T18942] bond_slave_0: entered promiscuous mode [ 492.159208][T18942] bond_slave_1: entered promiscuous mode [ 492.194156][T18942] bond0: left promiscuous mode [ 492.202774][T18942] bond_slave_0: left promiscuous mode [ 492.216140][T18942] bond_slave_1: left promiscuous mode [ 492.452543][T18943] syzkaller0: entered promiscuous mode [ 492.466664][T18966] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3260'. [ 492.490701][T18943] syzkaller0: entered allmulticast mode [ 492.532523][T18966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.548109][T18966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.561395][T18966] bond0 (unregistering): Released all slaves [ 492.626509][T18974] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3262'. [ 496.059620][T18989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3267'. [ 496.088538][T18989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3267'. [ 496.110547][T18992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3268'. [ 496.175507][T18996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3269'. [ 496.225868][T18999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3271'. [ 496.246698][T19004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3267'. [ 496.276140][T18999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3271'. [ 496.384463][T18996] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3269'. [ 496.533129][T18993] block nbd64: NBD_DISCONNECT [ 496.565720][T19003] bridge1: left promiscuous mode [ 496.674907][ T1045] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.694376][ T1045] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.715465][ T1045] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.793290][T18990] udevd[18990]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 496.811931][ T1045] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.004113][T19025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3276'. [ 497.166104][T19025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 497.179678][T19041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3276'. [ 497.256825][T19037] 8021q: adding VLAN 0 to HW filter on device bond2 [ 497.259363][T19025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.267645][T19037] bond1: (slave bond2): Enslaving as an active interface with an up link [ 497.349222][T19041] bond1 (unregistering): (slave bond2): Releasing backup interface [ 497.363991][T19041] bond1 (unregistering): Released all slaves [ 497.427900][T19046] vlan3: entered allmulticast mode [ 497.448091][T19046] bond0: entered allmulticast mode [ 497.455197][T19046] bond_slave_0: entered allmulticast mode [ 497.570033][T19044] syzkaller0: entered promiscuous mode [ 497.587950][T19044] syzkaller0: entered allmulticast mode [ 497.699830][T19062] xt_CT: You must specify a L4 protocol and not use inversions on it [ 500.863979][T19063] netlink: 'syz.1.3284': attribute type 1 has an invalid length. [ 500.882194][T19063] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 501.067942][T19085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.126536][T19085] __nla_validate_parse: 5 callbacks suppressed [ 501.126555][T19085] netlink: 58 bytes leftover after parsing attributes in process `syz.0.3289'. [ 501.146531][T19085] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3289'. [ 501.847583][T19113] tipc: Enabled bearer , priority 0 [ 502.204930][T19131] syzkaller0: entered promiscuous mode [ 502.242850][T19131] syzkaller0: entered allmulticast mode [ 503.957027][T19159] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3305'. [ 504.719680][T19112] tipc: Disabling bearer [ 504.952706][T19180] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3308'. [ 505.017187][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3309'. [ 505.032979][T19184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3310'. [ 505.050919][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3309'. [ 505.060411][T19184] netlink: 'syz.3.3310': attribute type 5 has an invalid length. [ 505.079555][T19184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3310'. [ 505.080460][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3309'. [ 505.143490][T19182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3309'. [ 505.201215][T19184] geneve2: entered promiscuous mode [ 505.206673][T19184] geneve2: entered allmulticast mode [ 505.223095][ T1045] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 50941 - 0 [ 505.240203][ T1045] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 50941 - 0 [ 505.279138][ T1045] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 50941 - 0 [ 505.319002][ T1045] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 50941 - 0 [ 505.555287][T19208] syzkaller0: entered promiscuous mode [ 505.573232][T19208] syzkaller0: entered allmulticast mode [ 505.629389][T19210] syzkaller0: entered promiscuous mode [ 505.637566][T19210] syzkaller0: entered allmulticast mode [ 506.129686][T19238] netlink: 'syz.4.3328': attribute type 10 has an invalid length. [ 506.157613][T19238] netlink: 'syz.4.3328': attribute type 3 has an invalid length. [ 506.190001][T19238] geneve2: entered promiscuous mode [ 506.198975][T19238] geneve2: entered allmulticast mode [ 506.432532][T19246] syzkaller0: entered promiscuous mode [ 506.449325][T19246] syzkaller0: entered allmulticast mode [ 506.498857][T15329] IPVS: starting estimator thread 0... [ 506.509382][T19241] __nla_validate_parse: 51 callbacks suppressed [ 506.509401][T19241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3329'. [ 506.572320][T19252] veth0_to_team: entered promiscuous mode [ 506.603905][T19252] veth0_to_team: left promiscuous mode [ 506.621729][T19250] IPVS: using max 33 ests per chain, 79200 per kthread [ 506.774490][T19259] netlink: 'syz.0.3335': attribute type 3 has an invalid length. [ 506.785015][T19261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3336'. [ 506.798372][T19254] x_tables: duplicate underflow at hook 2 [ 506.800150][T19261] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3336'. [ 506.874539][ T7880] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.874549][T19261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3336'. [ 506.874583][ T7880] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.892980][T19261] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3336'. [ 506.961400][ T7880] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.978612][ T7880] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.062745][T19271] netlink: 'syz.1.3339': attribute type 1 has an invalid length. [ 507.349143][T19291] openvswitch: netlink: Flow actions attr not present in new flow. [ 507.363154][T19285] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 507.383708][T19285] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 507.551382][T19308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3349'. [ 507.625541][T19308] netlink: 'syz.3.3349': attribute type 1 has an invalid length. [ 507.643723][T19308] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3349'. [ 507.803131][T19319] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3351'. [ 508.742455][T19326] syzkaller1: entered promiscuous mode [ 508.761885][T19326] syzkaller1: entered allmulticast mode [ 508.773579][T19328] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 508.928675][T19340] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 509.135912][T19349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3359'. [ 509.233689][T19353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3360'. [ 509.287690][T19354] smc: ib device syz2 ibport 1 erased user defined pnetid S [ 509.543959][T19375] netlink: 'syz.0.3364': attribute type 3 has an invalid length. [ 509.559461][T19347] udevd[19347]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 509.578542][T19375] netlink: 'syz.0.3364': attribute type 3 has an invalid length. [ 509.770251][T19340] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 509.784223][T19340] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 509.967241][T19340] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 509.983849][T19340] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 509.999071][T19388] syzkaller0: entered promiscuous mode [ 510.005633][T19388] syzkaller0: entered allmulticast mode [ 510.143564][T19340] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 510.161322][T19340] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 510.217847][T19340] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 510.246995][T19340] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 510.496236][T19392] tipc: Enabled bearer , priority 0 [ 510.517874][T19395] syzkaller0: entered promiscuous mode [ 510.532231][T19395] syzkaller0: entered allmulticast mode [ 510.579648][T19340] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 510.584152][T19390] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 510.590653][T19340] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 510.673050][T19398] netlink: 'syz.1.3372': attribute type 19 has an invalid length. [ 510.726212][T19395] tipc: Resetting bearer [ 510.759121][T19389] tipc: Resetting bearer [ 510.823475][T19389] tipc: Disabling bearer [ 510.946000][T19404] tap0: tun_chr_ioctl cmd 1074025677 [ 510.988324][T19404] tap0: linktype set to 780 [ 511.145636][T19419] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 511.247406][T19428] netlink: 'syz.5.3378': attribute type 10 has an invalid length. [ 511.279862][T19428] netlink: 'syz.5.3378': attribute type 3 has an invalid length. [ 511.299511][T19431] netlink: 'syz.4.3379': attribute type 1 has an invalid length. [ 511.299809][T19428] geneve2: entered promiscuous mode [ 511.313560][T19428] geneve2: entered allmulticast mode [ 511.646690][T19447] __nla_validate_parse: 10 callbacks suppressed [ 511.646709][T19447] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3382'. [ 511.661913][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 511.836147][T19453] tipc: Started in network mode [ 511.857623][T19453] tipc: Node identity 4efb903a1d71, cluster identity 4711 [ 511.893270][T19453] tipc: Enabled bearer , priority 0 [ 511.925787][T19461] netlink: 'syz.3.3386': attribute type 30 has an invalid length. [ 511.994969][T19461] bond1: option arp_missed_max: invalid value (0) [ 511.996213][T19458] netlink: 'syz.5.3385': attribute type 2 has an invalid length. [ 512.006327][T19459] netlink: 'syz.5.3385': attribute type 2 has an invalid length. [ 512.033716][T19461] bond1: option arp_missed_max: allowed values 1 - 255 [ 512.077180][T19461] bond1 (unregistering): Released all slaves [ 512.194700][T19466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3388'. [ 512.215394][T19466] siw: device registration error -23 [ 512.413302][T19470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3389'. [ 512.576446][T19449] tipc: Disabling bearer [ 512.695683][T19458] ´: entered promiscuous mode [ 512.717650][T19470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.746949][T19470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.771042][T19470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.793351][T19470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.887660][T19478] syzkaller1: entered promiscuous mode [ 512.907892][T19478] syzkaller1: entered allmulticast mode [ 512.919438][T19486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3392'. [ 512.972779][T19488] kthread_run failed with err -4 [ 513.257261][T19502] batadv0: entered promiscuous mode [ 513.288558][T19509] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3399'. [ 513.291886][T19502] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 513.327913][T19502] batadv0: left promiscuous mode [ 513.424512][T19512] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 513.447512][T19509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3399'. [ 513.466851][T19510] tipc: Started in network mode [ 513.473513][T19510] tipc: Node identity b2e17f8ea9e, cluster identity 4711 [ 513.488661][T19510] tipc: Enabled bearer , priority 0 [ 513.616797][T19504] syzkaller0: entered promiscuous mode [ 513.623494][T19504] syzkaller0: entered allmulticast mode [ 513.641269][T19504] tipc: Resetting bearer [ 513.657373][T19519] pim6reg99999999: entered allmulticast mode [ 513.707834][T19524] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3404'. [ 513.736946][T19503] tipc: Resetting bearer [ 513.878907][T19531] xt_hashlimit: invalid rate [ 514.052202][T19539] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 514.060516][T19539] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 517.294537][T19503] tipc: Disabling bearer [ 517.327234][ T8040] tipc: Node number set to 453083022 [ 517.643210][T19569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3417'. [ 517.694287][T19569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.745328][T19576] netlink: zone id is out of range [ 517.747145][T19577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 517.757276][T19576] netlink: zone id is out of range [ 517.779791][T19576] netlink: zone id is out of range [ 517.794766][T19576] netlink: zone id is out of range [ 517.807598][T19576] netlink: zone id is out of range [ 518.095584][T19595] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3420'. [ 518.369687][T19570] syzkaller0: entered promiscuous mode [ 518.380023][T19570] syzkaller0: entered allmulticast mode [ 518.513351][T19609] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3423'. [ 518.665150][T19609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3423'. [ 518.836357][T19621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3423'. [ 518.956113][T19616] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 518.963503][T19616] IPv6: NLM_F_CREATE should be set when creating new route [ 518.971371][T19616] IPv6: NLM_F_CREATE should be set when creating new route [ 519.262448][T19637] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3429'. [ 519.909180][T19664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3437'. [ 519.932105][T19664] netlink: 'syz.4.3437': attribute type 10 has an invalid length. [ 519.951547][T19664] netlink: 'syz.4.3437': attribute type 3 has an invalid length. [ 520.134737][T19672] netlink: 'syz.5.3439': attribute type 2 has an invalid length. [ 520.146798][T19676] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3439'. [ 520.170652][T19684] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3439'. [ 520.273272][T19688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 520.280666][T19688] IPv6: NLM_F_CREATE should be set when creating new route [ 520.287948][T19688] IPv6: NLM_F_CREATE should be set when creating new route [ 520.508447][T19689] tipc: Enabled bearer , priority 0 [ 520.657345][T19692] syzkaller0: entered promiscuous mode [ 520.668041][T19692] syzkaller0: entered allmulticast mode [ 521.036588][T19702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3444'. [ 521.145302][T19686] tipc: Disabling bearer [ 521.317720][T19712] netlink: 'syz.1.3450': attribute type 10 has an invalid length. [ 521.326027][T19712] netlink: 'syz.1.3450': attribute type 3 has an invalid length. [ 521.341628][T19712] geneve2: entered promiscuous mode [ 521.347324][T19712] geneve2: entered allmulticast mode [ 521.578349][T19719] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 521.585670][T19719] IPv6: NLM_F_CREATE should be set when creating new route [ 521.593016][T19719] IPv6: NLM_F_CREATE should be set when creating new route [ 521.908443][T19740] net_ratelimit: 51 callbacks suppressed [ 521.908462][T19740] IPVS: sed: FWM 3 0x00000003 - no destination available [ 521.993385][T19742] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode [ 522.005704][T19742] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode [ 522.016948][T19742] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 522.169165][T19749] netlink: 'syz.5.3463': attribute type 1 has an invalid length. [ 522.190956][T19750] netlink: 'syz.5.3463': attribute type 1 has an invalid length. [ 522.245320][T19749] bond0: entered promiscuous mode [ 522.259918][T19749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.276187][T19754] bond0: entered allmulticast mode [ 522.357667][T19750] bond0: (slave bridge2): making interface the new active one [ 522.386714][T19750] bridge2: entered promiscuous mode [ 522.398955][T19750] bridge2: entered allmulticast mode [ 522.427021][T19750] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 522.500710][T19754] bond0: (slave bridge3): Enslaving as a backup interface with an up link [ 522.749259][T19769] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 522.754319][T19775] __nla_validate_parse: 9 callbacks suppressed [ 522.754338][T19775] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3469'. [ 522.756601][T19769] IPv6: NLM_F_CREATE should be set when creating new route [ 522.777393][T19775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3469'. [ 522.780387][T19769] IPv6: NLM_F_CREATE should be set when creating new route [ 523.019807][T19781] syzkaller0: entered promiscuous mode [ 523.040344][T19781] syzkaller0: entered allmulticast mode [ 523.196285][T19784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3470'. [ 523.408190][T19804] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3475'. [ 523.433269][T19804] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3475'. [ 523.609798][T19806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3477'. [ 523.816725][T19812] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 523.851482][T19817] netlink: 'syz.0.3479': attribute type 1 has an invalid length. [ 523.992736][T19820] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3480'. [ 524.024782][T19820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3480'. [ 524.048448][T19820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3480'. [ 524.100895][ T5723] IPVS: starting estimator thread 0... [ 524.128304][T19822] xt_hashlimit: size too large, truncated to 1048576 [ 524.160200][T19824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3480'. [ 524.197817][T19825] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 524.200354][T19829] IPVS: using max 29 ests per chain, 69600 per kthread [ 524.210124][T19832] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.242698][T19834] netlink: 'syz.5.3481': attribute type 11 has an invalid length. [ 524.329624][T19832] bridge_slave_0 (unregistering): left allmulticast mode [ 524.350671][T19832] bridge_slave_0 (unregistering): left promiscuous mode [ 524.393058][T19832] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.068977][T19866] bond0: entered promiscuous mode [ 525.082936][T19866] bond_slave_0: entered promiscuous mode [ 525.105282][T19866] ipvlan1: entered promiscuous mode [ 525.138662][T19866] ipvlan1: left promiscuous mode [ 525.152203][T19866] bond0: left promiscuous mode [ 525.160510][T19866] bond_slave_0: left promiscuous mode [ 525.187522][T19871] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 525.342191][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.404291][T19887] netlink: 'syz.5.3494': attribute type 10 has an invalid length. [ 525.412683][T19887] netlink: 'syz.5.3494': attribute type 3 has an invalid length. [ 525.455670][T19889] siw: device registration error -23 [ 525.588022][T19891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 525.944547][T19915] --map-set only usable from mangle table [ 525.982052][T19913] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 525.993212][T19913] bond2: (slave vti0): Error -95 calling set_mac_address [ 526.013876][T19915] netlink: 'syz.0.3503': attribute type 1 has an invalid length. [ 526.032125][T19910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.043689][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.087465][T19909] IPv6: Can't replace route, no match found [ 526.094955][T19915] netlink: 'syz.0.3503': attribute type 5 has an invalid length. [ 526.140049][T19915] veth3: entered allmulticast mode [ 526.176509][T19915] bond2: (slave veth0_to_bond): making interface the new active one [ 526.205998][T19915] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 526.382703][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.619641][T19946] SET target dimension over the limit! [ 526.646982][T19944] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.745236][T19941] netlink: zone id is out of range [ 527.009085][T19958] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 527.031872][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 527.423704][T15329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.447519][T19987] tipc: Started in network mode [ 527.465218][T19987] tipc: Node identity ac14140f, cluster identity 4711 [ 527.487699][T19987] tipc: New replicast peer: 255.255.255.255 [ 527.507642][T19987] tipc: Enabled bearer , priority 10 [ 527.521992][T19987] netlink: 'syz.4.3521': attribute type 1 has an invalid length. [ 527.536009][T19990] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 527.551354][T19990] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 527.647734][T19987] bond2: entered promiscuous mode [ 527.653466][T19987] 8021q: adding VLAN 0 to HW filter on device bond2 [ 527.764935][T19991] bond2: entered allmulticast mode [ 527.808877][T20000] bond2: (slave bridge1): making interface the new active one [ 527.816755][T20000] bridge1: entered promiscuous mode [ 527.823562][T20000] bridge1: entered allmulticast mode [ 527.829999][T20000] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 527.839974][ T8040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.202583][T20013] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 528.340181][T20017] __nla_validate_parse: 13 callbacks suppressed [ 528.340194][T20017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3527'. [ 528.463422][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.508383][T20021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.517859][T20011] syzkaller0: entered promiscuous mode [ 528.517886][T20011] syzkaller0: entered allmulticast mode [ 528.531893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.621827][ T5723] tipc: Node number set to 2886997007 [ 528.972003][ T8040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.148746][T20048] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3531'. [ 529.397076][T20058] netlink: 'syz.5.3533': attribute type 1 has an invalid length. [ 529.508679][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.591281][ T8040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.154363][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 532.364119][T20048] ip6gre1: entered promiscuous mode [ 532.369364][T20048] ip6gre1: entered allmulticast mode [ 532.377004][ T3359] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 532.389808][ T3359] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 532.401987][ T8040] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 532.490824][ T8040] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 532.620848][ T5723] net_ratelimit: 5 callbacks suppressed [ 532.620867][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.922168][T20105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.946553][T20095] pim6reg1: entered promiscuous mode [ 532.952779][T20095] pim6reg1: entered allmulticast mode [ 532.983914][T20086] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 532.991542][T20086] IPv6: NLM_F_CREATE should be set when creating new route [ 532.999029][T20086] IPv6: NLM_F_CREATE should be set when creating new route [ 533.127123][T20114] netlink: 'syz.0.3543': attribute type 4 has an invalid length. [ 533.137958][T20116] netlink: 'syz.5.3544': attribute type 4 has an invalid length. [ 533.160889][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.172634][T20114] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3543'. [ 533.191060][ T5625] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 533.210826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.255715][T20114] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 533.443523][T20130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.481372][T20134] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3548'. [ 533.512377][T20130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.662693][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.808134][T20144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.906155][T20149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 534.164398][T20171] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3553'. [ 534.550988][ T5625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.595886][T20192] bridge_slave_1: left allmulticast mode [ 534.609404][T20192] bridge_slave_1: left promiscuous mode [ 534.624909][T20192] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.701903][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.735850][T20192] team0: Port device team_slave_0 removed [ 534.764362][T20192] team0: Port device team_slave_1 removed [ 534.785530][T20192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.811814][T20192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.838710][T20192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.867154][T20192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.886234][T20192] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 534.978841][T20195] team0: Port device xfrm0 added [ 535.221675][T20225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 535.509364][T20234] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3571'. [ 535.535464][T20240] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3574'. [ 535.589728][T20242] netlink: 'syz.1.3575': attribute type 1 has an invalid length. [ 535.664905][T20248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3575'. [ 535.729470][T20251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3578'. [ 535.743390][T20248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3575'. [ 535.756177][T20242] bond3: (slave veth0_to_bond): making interface the new active one [ 535.772124][T20242] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 535.988040][T20262] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3581'. [ 536.206065][T20277] netlink: 'syz.1.3585': attribute type 1 has an invalid length. [ 536.214570][T20277] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3585'. [ 536.258983][T20283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3585'. [ 536.358254][T20276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 536.700766][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 536.730148][T20304] netlink: 'syz.5.3594': attribute type 10 has an invalid length. [ 536.756207][T20304] netlink: 'syz.5.3594': attribute type 3 has an invalid length. [ 537.184893][T20322] veth0: entered promiscuous mode [ 537.249528][T20322] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 537.274870][T20327] netlink: 'syz.5.3602': attribute type 27 has an invalid length. [ 537.278776][T20321] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 537.426877][T20327] veth2: entered allmulticast mode [ 537.453609][T20322] veth0: left promiscuous mode [ 537.821232][ T5723] net_ratelimit: 51 callbacks suppressed [ 537.821250][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.888901][T20347] geneve4: entered promiscuous mode [ 538.824276][T20373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 538.831615][T20373] IPv6: NLM_F_CREATE should be set when creating new route [ 538.839009][T20373] IPv6: NLM_F_CREATE should be set when creating new route [ 538.863617][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.045947][T20380] bond1: option min_links: invalid value (18446744073709551612) [ 539.068103][T20380] bond1: option min_links: allowed values 0 - 2147483647 [ 539.104708][T20380] bond1 (unregistering): Released all slaves [ 539.181912][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.406365][T20393] tipc: Enabled bearer , priority 0 [ 539.464253][T20400] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 539.486927][T20400] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 539.547386][T20403] macsec1: entered promiscuous mode [ 539.563374][T20403] bridge0: entered promiscuous mode [ 539.588963][T20390] tipc: Disabling bearer [ 539.901072][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.925976][T20420] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.938104][T20427] syzkaller0: entered promiscuous mode [ 539.959083][T20427] syzkaller0: entered allmulticast mode [ 539.987777][T20432] netlink: 'syz.1.3629': attribute type 1 has an invalid length. [ 540.025623][T20427] tipc: Enabled bearer , priority 0 [ 540.133324][T20432] 8021q: adding VLAN 0 to HW filter on device bond4 [ 540.143865][T20433] bond4: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 540.156080][T20433] bond4: entered allmulticast mode [ 540.176345][T20435] bond4: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 540.223046][T20426] tipc: Resetting bearer [ 540.344033][T20426] tipc: Disabling bearer [ 540.355460][T20455] __nla_validate_parse: 6 callbacks suppressed [ 540.355477][T20455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3634'. [ 540.464851][T20461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3634'. [ 540.558667][T20471] syzkaller1: entered promiscuous mode [ 540.579646][T20471] syzkaller1: entered allmulticast mode [ 540.620938][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.728935][T20476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.867412][T20491] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3641'. [ 540.896372][T20493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3643'. [ 540.915971][T20493] netlink: 356 bytes leftover after parsing attributes in process `syz.4.3643'. [ 540.938489][T20493] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3643'. [ 540.947960][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.010928][T20493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3643'. [ 541.027209][T20504] netlink: 'syz.3.3644': attribute type 3 has an invalid length. [ 541.028494][T20494] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3643'. [ 541.040324][T20499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3644'. [ 541.069938][T20494] netlink: 356 bytes leftover after parsing attributes in process `syz.4.3643'. [ 541.303227][T20521] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 541.566711][T20538] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 541.749238][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.830120][T20557] syzkaller0: entered promiscuous mode [ 541.853363][T20557] syzkaller0: entered allmulticast mode [ 541.985233][T15329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.367374][T20589] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 542.912005][T20617] syzkaller0: entered promiscuous mode [ 542.918966][T20617] syzkaller0: entered allmulticast mode [ 543.025590][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.127178][T20626] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 543.314967][T20644] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 543.371346][T20644] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 543.632091][T20655] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 543.691705][T20655] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 543.728800][T20655] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 543.955377][T20672] netlink: 'syz.3.3691': attribute type 1 has an invalid length. [ 543.991353][T20672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.059687][T20678] syzkaller0: entered promiscuous mode [ 544.073637][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.083944][T20678] syzkaller0: entered allmulticast mode [ 544.138598][T20683] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 544.409689][T20693] geneve3: entered promiscuous mode [ 544.426019][T20693] geneve3: entered allmulticast mode [ 544.493511][T20700] netlink: 'syz.1.3696': attribute type 1 has an invalid length. [ 544.564939][T20706] netlink: 'syz.3.3699': attribute type 30 has an invalid length. [ 544.603494][T20707] netlink: 'syz.5.3700': attribute type 1 has an invalid length. [ 544.781417][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.911150][ T5757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.991834][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.018740][T20707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 545.076380][T20715] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 545.103696][ T1227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.580969][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 545.692651][T20719] mac80211_hwsim hwsim40 wlan0: left promiscuous mode [ 545.693446][T20745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 545.699749][T20719] mac80211_hwsim hwsim40 wlan0: left allmulticast mode [ 545.737489][T20719] geneve2: left promiscuous mode [ 545.743947][T20719] geneve2: left allmulticast mode [ 545.792765][T20719] bond0: left promiscuous mode [ 545.797776][T20719] bridge2: left promiscuous mode [ 545.803358][T20719] bond0: left allmulticast mode [ 545.808329][T20719] bridge2: left allmulticast mode [ 545.818815][T20719] geneve3: left promiscuous mode [ 545.824939][T20719] geneve3: left allmulticast mode [ 545.905895][ T3359] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.924494][ T3359] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.937919][ T3359] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.949673][ T3359] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.961657][ T3359] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.971530][ T3359] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.001341][ T3359] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.033577][ T3359] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.162011][T20765] syzkaller0: entered promiscuous mode [ 546.183989][T20765] syzkaller0: entered allmulticast mode [ 546.227300][T20777] netlink: 'syz.5.3714': attribute type 1 has an invalid length. [ 546.292727][T20777] veth3: entered allmulticast mode [ 546.310039][T20777] bond2: (slave veth3): Enslaving as an active interface with a down link [ 546.391882][T20779] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 546.419688][T20777] bond2: (slave veth0_to_bond): Releasing active interface [ 546.566666][T20786] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 547.043978][T20827] netlink: 'syz.5.3727': attribute type 1 has an invalid length. [ 547.063567][T20828] netlink: 'syz.5.3727': attribute type 1 has an invalid length. [ 547.079801][ T29] audit: type=1804 audit(1784322883.875:6): pid=20831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3729" name="/newroot/106/cgroup.controllers" dev="tmpfs" ino=566 res=1 errno=0 [ 547.109373][ T29] audit: type=1800 audit(1784322883.905:7): pid=20831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3729" name="cgroup.controllers" dev="tmpfs" ino=566 res=0 errno=0 [ 547.113636][T20827] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 547.151946][T20828] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 547.399101][T20844] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 547.717765][T20880] syzkaller0: entered promiscuous mode [ 547.745273][T20880] syzkaller0: entered allmulticast mode [ 548.288326][T20909] pim6reg: tun_chr_ioctl cmd 2147767507 [ 548.337680][T20914] __nla_validate_parse: 13 callbacks suppressed [ 548.337698][T20914] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3743'. [ 548.654043][T20926] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 548.661329][T20926] IPv6: NLM_F_CREATE should be set when creating new route [ 548.668572][T20926] IPv6: NLM_F_CREATE should be set when creating new route [ 548.838997][T20917] netlink: 'syz.4.3744': attribute type 1 has an invalid length. [ 548.913913][T20934] netlink: 'syz.0.3748': attribute type 3 has an invalid length. [ 548.930763][T20934] netlink: 'syz.0.3748': attribute type 6 has an invalid length. [ 549.334355][T20957] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.342975][T20958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.632721][T20971] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 549.856934][T20988] netlink: 'syz.1.3759': attribute type 14 has an invalid length. [ 550.134918][T21005] Bluetooth: MGMT ver 1.23 [ 550.140308][T21005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.152737][T21005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3766'. [ 550.187051][T21005] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3766'. [ 550.209714][T21011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3766'. [ 550.216512][T21009] netlink: 'syz.3.3764': attribute type 5 has an invalid length. [ 550.407730][T21017] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 550.662537][T21038] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3773'. [ 550.673816][T21038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3773'. [ 550.835138][T21051] netlink: 'syz.5.3776': attribute type 2 has an invalid length. [ 550.847584][T21051] netlink: 'syz.5.3776': attribute type 1 has an invalid length. [ 550.863470][T21051] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3776'. [ 550.907679][T21051] x_tables: duplicate underflow at hook 1 [ 551.040313][T21056] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3779'. [ 551.071154][T21057] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3778'. [ 551.120248][T21057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3778'. [ 551.365916][T21075] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 551.375996][T21073] ip6tnl1: entered allmulticast mode [ 552.024380][T21102] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 552.058636][T21102] syzkaller0: entered promiscuous mode [ 552.073665][T21102] syzkaller0: entered allmulticast mode [ 552.114428][T21128] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 552.337632][T21121] syzkaller0: entered promiscuous mode [ 552.343575][T21121] syzkaller0: entered allmulticast mode [ 554.594682][T21155] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 555.873280][T21160] validate_nla: 4 callbacks suppressed [ 555.873298][T21160] netlink: 'syz.1.3800': attribute type 3 has an invalid length. [ 555.886741][T21160] __nla_validate_parse: 3 callbacks suppressed [ 555.886758][T21160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3800'. [ 555.988132][T21163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3801'. [ 556.028139][T21163] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3801'. [ 556.058491][T21165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3803'. [ 556.285477][T21184] netlink: zone id is out of range [ 556.302465][T21184] netlink: zone id is out of range [ 556.313531][T21184] netlink: zone id is out of range [ 556.329101][T21184] netlink: zone id is out of range [ 556.359323][T21184] netlink: zone id is out of range [ 556.388230][T21186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 556.399016][T21190] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3809'. [ 556.436431][T21194] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 556.445174][T21184] netlink: zone id is out of range [ 556.493019][T21193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 556.581150][T21193] bond3: option arp_interval: invalid value (18446744073709551615) [ 556.614973][T21193] bond3: option arp_interval: allowed values 0 - 2147483647 [ 556.651087][T21193] bond3 (unregistering): Released all slaves [ 556.858398][T21206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3816'. [ 556.889088][T21206] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3816'. [ 556.928206][T21206] geneve3: entered promiscuous mode [ 556.934185][T21206] geneve3: entered allmulticast mode [ 557.163068][T21226] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3818'. [ 557.472268][T21230] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 557.515401][T21234] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3823'. [ 557.756836][T21241] xt_CT: No such helper "snmp_trap" [ 557.965595][T21258] netlink: 'syz.0.3830': attribute type 7 has an invalid length. [ 557.992396][T21258] netlink: 'syz.0.3830': attribute type 8 has an invalid length. [ 558.009854][T21258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3830'. [ 558.026679][T21250] IPv6: Can't replace route, no match found [ 558.534117][T21282] syzkaller0: entered promiscuous mode [ 558.575067][T21283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 558.582372][T21283] IPv6: NLM_F_CREATE should be set when creating new route [ 558.589669][T21283] IPv6: NLM_F_CREATE should be set when creating new route [ 558.602083][T21282] syzkaller0: entered allmulticast mode [ 558.987667][T21297] ip6gre1: entered promiscuous mode [ 559.008209][T21297] ip6gre1: entered allmulticast mode [ 559.651293][T21337] vlan2: entered promiscuous mode [ 559.673750][T21337] bridge0: entered promiscuous mode [ 559.711750][T21331] xt_hashlimit: size too large, truncated to 1048576 [ 559.876553][T21348] openvswitch: netlink: Flow key attr not present in new flow. [ 560.405220][T21367] netlink: 'syz.1.3857': attribute type 1 has an invalid length. [ 560.533915][T21377] netlink: 'syz.4.3858': attribute type 21 has an invalid length. [ 560.555342][T21377] netlink: 'syz.4.3858': attribute type 6 has an invalid length. [ 560.799083][T21392] syzkaller0: entered promiscuous mode [ 560.804879][T21392] syzkaller0: entered allmulticast mode [ 560.835649][T21391] IPVS: Unknown mcast interface: vcan0 [ 561.212018][T21403] xt_TCPMSS: Only works on TCP SYN packets [ 561.458195][T21413] syzkaller1: entered promiscuous mode [ 561.483206][T21413] syzkaller1: entered allmulticast mode [ 561.492825][T21416] netlink: 'syz.4.3869': attribute type 2 has an invalid length. [ 561.513399][T21416] __nla_validate_parse: 14 callbacks suppressed [ 561.513414][T21416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3869'. [ 561.538947][T21413] netlink: 'syz.3.3868': attribute type 62 has an invalid length. [ 561.596727][T21415] bond3: option mode: invalid value (254) [ 561.606025][T21415] bond3 (unregistering): Released all slaves [ 561.975744][T21422] tipc: Enabled bearer , priority 10 [ 562.037748][T21424] netlink: 'syz.3.3872': attribute type 29 has an invalid length. [ 562.378211][T21433] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 563.067121][T21474] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3884'. [ 563.089336][T21474] x_tables: duplicate underflow at hook 2 [ 563.091612][ T5723] tipc: Node number set to 2242860671 [ 563.098482][T21474] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3884'. [ 563.151717][T21480] x_tables: duplicate entry at hook 1 [ 563.217195][T21485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3886'. [ 563.249299][T21485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3886'. [ 563.500815][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 563.556229][T21503] netlink: 'syz.0.3891': attribute type 10 has an invalid length. [ 563.578179][T21503] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3891'. [ 563.588319][T21503] bond0: entered promiscuous mode [ 563.593797][T21503] bond_slave_0: entered promiscuous mode [ 563.599772][T21503] bond_slave_1: entered promiscuous mode [ 563.607705][T21503] bridge0: port 3(bond0) entered blocking state [ 563.615023][T21503] bridge0: port 3(bond0) entered disabled state [ 563.615075][T21505] netlink: 'syz.3.3889': attribute type 1 has an invalid length. [ 563.621670][T21503] bond0: entered allmulticast mode [ 563.635295][T21503] bond_slave_0: entered allmulticast mode [ 563.641488][T21503] bond_slave_1: entered allmulticast mode [ 563.651017][T21503] bridge0: port 3(bond0) entered blocking state [ 563.657484][T21503] bridge0: port 3(bond0) entered forwarding state [ 563.723126][T21511] netlink: 'syz.3.3889': attribute type 1 has an invalid length. [ 563.807097][T21516] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3893'. [ 563.845760][T21509] bond1: (slave bridge2): making interface the new active one [ 563.867213][T21509] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 563.943522][T21523] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3895'. [ 564.083965][T21532] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3898'. [ 564.120737][T21540] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3899'. [ 564.145097][T21538] syzkaller0: entered promiscuous mode [ 564.166376][T21538] syzkaller0: entered allmulticast mode [ 599.340884][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 612.188861][T21547] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3904'. [ 612.189914][T21556] --map-set only usable from mangle table [ 612.219282][T21547] netlink: 'syz.4.3904': attribute type 30 has an invalid length. [ 612.245468][T21553] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3901'. [ 612.285688][T21561] netlink: 'syz.5.3905': attribute type 1 has an invalid length. [ 612.349520][T21553] ipvlan2: entered promiscuous mode [ 612.361663][T21561] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 612.364936][T21556] syzkaller0: entered promiscuous mode [ 612.379512][T21556] syzkaller0: entered allmulticast mode [ 612.480840][T21568] sctp: [Deprecated]: syz.0.3906 (pid 21568) Use of int in maxseg socket option. [ 612.480840][T21568] Use struct sctp_assoc_value instead [ 612.826191][T21592] x_tables: duplicate underflow at hook 3 [ 612.895667][T21599] netlink: 'syz.0.3914': attribute type 7 has an invalid length. [ 613.143654][T21606] syzkaller0: entered promiscuous mode [ 613.165964][T21606] syzkaller0: entered allmulticast mode [ 613.496891][T21641] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3921'. [ 616.934337][T21666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 616.966810][T21669] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3928'. [ 617.134951][T21678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3930'. [ 617.164890][T21678] netlink: 'syz.0.3930': attribute type 61 has an invalid length. [ 617.183278][T21678] netlink: 'syz.0.3930': attribute type 62 has an invalid length. [ 617.209033][T21678] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3930'. [ 617.778318][T21718] netlink: 'syz.0.3941': attribute type 9 has an invalid length. [ 618.159115][T21748] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 618.528168][T21758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3950'. [ 618.556672][T21758] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3950'. [ 618.582849][T21763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3950'. [ 618.802514][T21773] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 618.835704][T21770] netlink: 'syz.1.3954': attribute type 16 has an invalid length. [ 618.845866][T21776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3956'. [ 618.850609][T21770] netlink: 'syz.1.3954': attribute type 17 has an invalid length. [ 619.019320][T21770] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 619.226670][T21787] sctp: [Deprecated]: syz.5.3958 (pid 21787) Use of int in max_burst socket option. [ 619.226670][T21787] Use struct sctp_assoc_value instead [ 619.268075][T21787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3958'. [ 619.406587][T21792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3960'. [ 619.545734][T21800] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3962'. [ 619.588717][T21795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3961'. [ 619.622961][T21795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 619.686120][T21808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3964'. [ 619.714460][T21808] vlan2: entered promiscuous mode [ 619.727599][T21808] hsr0: entered promiscuous mode [ 619.739341][T21808] vlan2: entered allmulticast mode [ 619.759185][T21808] hsr0: entered allmulticast mode [ 619.786427][T21808] hsr_slave_0: entered allmulticast mode [ 619.800804][T21808] hsr_slave_1: entered allmulticast mode [ 620.037821][T21820] netlink: 'syz.3.3968': attribute type 13 has an invalid length. [ 620.149446][T21822] IPVS: set_ctl: invalid protocol: 8 172.30.0.1:20003 [ 620.521760][T21836] nbd: must specify a size in bytes for the device [ 620.613149][T21848] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20002 [ 620.626622][T21846] openvswitch: netlink: Actions may not be safe on all matching packets [ 621.314760][T21884] netlink: 'syz.4.3984': attribute type 1 has an invalid length. [ 621.399678][T21884] 8021q: adding VLAN 0 to HW filter on device bond3 [ 621.559315][T21889] syzkaller1: entered promiscuous mode [ 621.572700][T21889] syzkaller1: entered allmulticast mode [ 622.076994][T21920] netlink: 'syz.3.3998': attribute type 1 has an invalid length. [ 622.102488][T21920] netlink: 'syz.3.3998': attribute type 5 has an invalid length. [ 622.262995][T21930] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 622.346262][T21930] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 622.605458][T21947] netlink: 'syz.3.4005': attribute type 1 has an invalid length. [ 622.625354][T21946] netlink: 'syz.3.4005': attribute type 1 has an invalid length. [ 622.676520][T21947] bond3: entered promiscuous mode [ 622.690981][T21947] 8021q: adding VLAN 0 to HW filter on device bond3 [ 622.787582][T21946] 8021q: adding VLAN 0 to HW filter on device bond3 [ 622.801401][T21946] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 622.822968][T21946] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 622.846688][T21946] bond3: (slave vti0): making interface the new active one [ 622.871250][T21946] vti0: entered promiscuous mode [ 622.878725][T21946] bond3: (slave vti0): Enslaving as an active interface with an up link [ 622.901943][ T7883] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.911599][ T7883] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.922029][T21955] __nla_validate_parse: 10 callbacks suppressed [ 622.922054][T21955] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4007'. [ 622.944634][ T7883] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.983088][ T7883] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.107368][T21960] netlink: 538 bytes leftover after parsing attributes in process `syz.0.4008'. [ 623.389205][T21970] bond4: option packets_per_slave: invalid value (1048582) [ 623.418833][T21970] bond4: option packets_per_slave: allowed values 0 - 65535 [ 623.473758][T21978] xt_CT: No such helper "netbios-ns" [ 623.485444][T21970] bond4 (unregistering): Released all slaves [ 623.742283][T22000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 623.794513][T22000] sctp: [Deprecated]: syz.1.4019 (pid 22000) Use of struct sctp_assoc_value in delayed_ack socket option. [ 623.794513][T22000] Use struct sctp_sack_info instead [ 623.864088][T22011] sctp: [Deprecated]: syz.1.4019 (pid 22011) Use of struct sctp_assoc_value in delayed_ack socket option. [ 623.864088][T22011] Use struct sctp_sack_info instead [ 624.214985][T22027] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4022'. [ 625.142129][T22070] syzkaller0: entered promiscuous mode [ 625.159056][T22070] syzkaller0: entered allmulticast mode [ 625.379221][T22076] bond4: option packets_per_slave: invalid value (1048582) [ 625.424449][T22076] bond4: option packets_per_slave: allowed values 0 - 65535 [ 625.465133][T22076] bond4 (unregistering): Released all slaves [ 625.626211][T22103] netlink: 'syz.1.4033': attribute type 13 has an invalid length. [ 625.643700][T22103] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4033'. [ 625.658772][T22105] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4034'. [ 625.742930][T22110] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4034'. [ 625.786262][T22110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.363581][T22124] syzkaller0: entered promiscuous mode [ 626.382769][T22124] syzkaller0: entered allmulticast mode [ 626.717684][T22150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4042'. [ 626.901473][T22163] netlink: 'syz.1.4043': attribute type 1 has an invalid length. [ 627.057862][T22167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4046'. [ 627.076116][T22169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4043'. [ 627.092075][T22167] netlink: 'syz.4.4046': attribute type 10 has an invalid length. [ 627.127908][T22167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4046'. [ 630.417074][T22163] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.424827][T22163] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.584622][T22163] bridge_slave_0: left allmulticast mode [ 630.590810][T22163] bridge_slave_0: left promiscuous mode [ 630.596678][T22163] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.623278][T22163] bridge_slave_1: left allmulticast mode [ 630.629057][T22163] bridge_slave_1: left promiscuous mode [ 630.635241][T22163] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.655249][T22163] bond3: (slave veth0_to_bond): Releasing active interface [ 630.672166][T22163] bond0: (slave bond_slave_0): Releasing backup interface [ 630.682816][T22163] bond_slave_0: left allmulticast mode [ 630.708462][T22163] team0: Port device team_slave_0 removed [ 630.734642][T22163] team0: Port device team_slave_1 removed [ 630.750189][T22163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.769391][T22163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.790355][T22163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.806677][T22163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.834696][T22163] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 631.199564][T22187] netlink: 'syz.1.4049': attribute type 8 has an invalid length. [ 631.232003][T22187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4049'. [ 631.619778][T22219] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4060'. [ 631.637537][T22219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 631.989650][T22249] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4065'. [ 632.003327][T22247] netlink: 'syz.5.4066': attribute type 3 has an invalid length. [ 632.030477][T22241] bond4: option packets_per_slave: invalid value (1048582) [ 632.041981][T22247] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4066'. [ 632.058724][T22251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4065'. [ 632.064998][T22241] bond4: option packets_per_slave: allowed values 0 - 65535 [ 632.076058][T22247] netlink: 'syz.5.4066': attribute type 1 has an invalid length. [ 632.084158][T22247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4066'. [ 632.093911][T22251] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4065'. [ 632.104825][T22241] bond4 (unregistering): Released all slaves [ 632.149342][T22244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4065'. [ 632.228237][T22255] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4067'. [ 632.412007][T22263] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4070'. [ 632.570265][T22269] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4 [ 632.779302][T22274] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.814777][T22274] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.946299][ T6083] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.221635][T22298] syzkaller0: entered promiscuous mode [ 633.227389][T22298] syzkaller0: entered allmulticast mode [ 633.235853][T22299] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 633.435632][T22305] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 633.917011][T22312] netlink: 'syz.3.4082': attribute type 25 has an invalid length. [ 634.210799][T22318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.209208][T22348] __nla_validate_parse: 4 callbacks suppressed [ 637.209228][T22348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4087'. [ 637.344449][T22361] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 637.608904][T22370] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 637.618810][T22370] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4092'. [ 637.876021][ T5284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 638.192475][T22393] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 638.763809][T22426] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 638.773478][T22426] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 638.785268][T22426] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 639.661411][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 642.085415][T22438] ipvlan2: entered promiscuous mode [ 642.099206][T22438] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 642.113182][T22438] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 642.124850][T22438] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 642.188444][T22460] tipc: Can't bind to reserved service type 1 [ 642.423678][T22471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4118'. [ 642.592066][T22481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4118'. [ 642.622630][T22481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4118'. [ 642.625836][T22484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4123'. [ 642.974624][T22503] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4127'. [ 643.189574][T22511] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4130'. [ 643.273194][T22515] ip6erspan0: entered allmulticast mode [ 643.317678][T22517] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4131'. [ 643.543852][T22533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4135'. [ 643.656506][T22546] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4136'. [ 644.059920][T22562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4142'. [ 645.068625][T22614] xt_bpf: check failed: parse error [ 645.364269][T22625] netlink: 'syz.4.4164': attribute type 24 has an invalid length. [ 645.832059][T22649] netlink: 'syz.3.4172': attribute type 5 has an invalid length. [ 646.132560][T22655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.151120][T22655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.185087][T22655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.270359][T22669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.275194][T22652] syzkaller0: entered promiscuous mode [ 646.305502][T22655] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.307303][T22652] syzkaller0: entered allmulticast mode [ 646.468359][T22654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.484864][T22654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.818973][T22465] udevd[22465]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 650.020325][T22661] syzkaller0: entered promiscuous mode [ 650.026166][T22661] syzkaller0: entered allmulticast mode [ 650.090907][T22700] __nla_validate_parse: 9 callbacks suppressed [ 650.090926][T22700] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4181'. [ 650.488189][T22721] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4184'. [ 653.482730][T22721] bond0 (unregistering): Released all slaves [ 653.703819][T22734] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4188'. [ 653.765315][T22736] netlink: 'syz.1.4189': attribute type 6 has an invalid length. [ 653.806516][T22743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4191'. [ 653.878137][T22747] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4191'. [ 653.939995][T22747] nbd: device at index 64 is going down [ 653.954387][T22750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4193'. [ 653.968742][T22743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4191'. [ 653.978893][T22743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4191'. [ 654.681354][T22774] netlink: 140 bytes leftover after parsing attributes in process `syz.5.4201'. [ 654.753944][T22774] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4201'. [ 654.767301][T22778] openvswitch: netlink: Message has 20 unknown bytes. [ 654.784818][T22780] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 654.842314][ T4939] block nbd5: Receive control failed (result -22) [ 654.872883][T22778] nbd5: detected capacity change from 0 to 32 [ 654.915722][ T1683] block nbd5: Dead connection, failed to find a fallback [ 654.923970][ T1683] block nbd5: shutting down sockets [ 654.935701][ T1683] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 654.953631][ T1683] Buffer I/O error on dev nbd5, logical block 0, async page read [ 654.963586][ T1683] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 654.975365][ T1683] Buffer I/O error on dev nbd5, logical block 0, async page read [ 654.984383][ T1683] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 654.995415][ T1683] Buffer I/O error on dev nbd5, logical block 0, async page read [ 655.005567][ T1683] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 655.015425][ T1683] Buffer I/O error on dev nbd5, logical block 0, async page read [ 655.025125][ T1683] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 655.034338][ T1683] Buffer I/O error on dev nbd5, logical block 0, async page read [ 655.042891][ T1683] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 655.052539][ T1683] Buffer I/O error on dev nbd5, logical block 0, async page read [ 655.062866][ T1683] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 655.072387][ T1683] Buffer I/O error on dev nbd5, logical block 0, async page read [ 655.082492][ T1683] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 655.092055][ T1683] Buffer I/O error on dev nbd5, logical block 0, async page read [ 655.092770][T22791] netlink: 'syz.4.4206': attribute type 2 has an invalid length. [ 655.100140][T22748] ldm_validate_partition_table(): Disk read failed. [ 655.116001][ T1683] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 655.119343][T22793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.125490][ T1683] Buffer I/O error on dev nbd5, logical block 0, async page read [ 655.142839][ T1683] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 655.152377][ T1683] Buffer I/O error on dev nbd5, logical block 0, async page read [ 655.164805][T22748] Dev nbd5: unable to read RDB block 0 [ 655.173578][T22748] nbd5: unable to read partition table [ 655.202178][T22748] ldm_validate_partition_table(): Disk read failed. [ 655.210942][T22748] Dev nbd5: unable to read RDB block 0 [ 655.220447][T22748] nbd5: unable to read partition table [ 655.446928][T22804] netlink: 'syz.1.4208': attribute type 1 has an invalid length. [ 655.463563][T22804] __nla_validate_parse: 4 callbacks suppressed [ 655.463584][T22804] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4208'. [ 655.510774][T22804] netlink: 'syz.1.4208': attribute type 23 has an invalid length. [ 655.527476][T22807] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 655.527673][T22804] netlink: 'syz.1.4208': attribute type 21 has an invalid length. [ 655.554638][T22804] IPv6: NLM_F_CREATE should be specified when creating new route [ 655.726573][T22810] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4210'. [ 655.759123][T22813] x_tables: unsorted entry at hook 2 [ 655.805658][T22818] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4211'. [ 656.066561][T22823] netlink: 'syz.3.4213': attribute type 3 has an invalid length. [ 656.084745][T22823] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4213'. [ 656.312854][T22837] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 656.575245][T22846] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 657.110811][T22858] dvmrp3: entered allmulticast mode [ 657.126944][ T7882] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.156922][ T7882] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.249688][ T7882] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.282764][ T7882] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.300469][ T7882] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.335303][ T7882] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.367204][ T7882] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.392267][ T7882] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.416966][T22875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4226'. [ 657.436645][T22875] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4226'. [ 657.547897][T22877] syzkaller0: entered promiscuous mode [ 657.568441][T22877] syzkaller0: entered allmulticast mode [ 657.604393][T22877] tipc: Enabled bearer , priority 0 [ 657.644380][T22877] tipc: Resetting bearer [ 657.980041][T22874] tipc: Resetting bearer [ 658.027679][T22874] tipc: Disabling bearer [ 658.158944][T22903] macsec1: entered promiscuous mode [ 658.173697][T22900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.186076][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.208091][T22902] lo: entered promiscuous mode [ 658.239465][T22902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 658.284405][T22908] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4235'. [ 658.351690][T22908] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.363186][T22908] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.383200][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 706.224300][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 758.520784][T22929] macvlan0: entered promiscuous mode [ 758.533262][T22929] netlink: 'syz.1.4237': attribute type 1 has an invalid length. [ 758.550926][T22929] netlink: 'syz.1.4237': attribute type 2 has an invalid length. [ 758.551651][T22931] netlink: 'syz.4.4240': attribute type 58 has an invalid length. [ 758.624532][T22931] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4240'. [ 758.793213][T22950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4245'. [ 759.213062][T22981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4254'. [ 759.377839][T22988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4256'. [ 759.382290][T22991] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4257'. [ 759.436990][T22997] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4260'. [ 759.610146][T22998] lo: entered allmulticast mode [ 759.716675][T23008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 759.735768][T23009] lo: left allmulticast mode [ 759.911168][T23017] mac80211_hwsim hwsim40 syzkaller0: entered promiscuous mode [ 759.921906][T23017] mac80211_hwsim hwsim40 syzkaller0: entered allmulticast mode [ 760.072374][T23028] tipc: Enabled bearer , priority 0 [ 760.080960][T23027] syzkaller0: entered promiscuous mode [ 760.088847][T23027] syzkaller0: entered allmulticast mode [ 760.173444][T23028] tipc: Resetting bearer [ 760.184463][T23037] ipip1: entered promiscuous mode [ 760.336489][T23044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4271'. [ 760.424612][T23046] netlink: 'syz.1.4272': attribute type 1 has an invalid length. [ 760.579836][T23046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.659379][T23069] IPVS: set_ctl: invalid protocol: 51 172.20.20.42:20002 [ 760.670200][T23052] vlan3: entered allmulticast mode [ 760.678045][T23067] IPVS: set_ctl: invalid protocol: 51 172.20.20.42:20002 [ 760.687965][T23052] bond0: entered allmulticast mode [ 760.732446][T23046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.887193][T23046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.907324][T23057] bond0: (slave geneve3): making interface the new active one [ 760.920106][T23057] geneve3: entered allmulticast mode [ 760.929850][T23057] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 760.941777][T23060] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4276'. [ 760.960305][ T7882] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.035596][T23082] bond4: option packets_per_slave: invalid value (1048582) [ 761.055818][T23082] bond4: option packets_per_slave: allowed values 0 - 65535 [ 761.073898][T23082] bond4 (unregistering): Released all slaves [ 761.103177][ T7882] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.114657][ T7882] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.135146][ T7882] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.224525][T23091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4282'. [ 761.245027][T23090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4282'. [ 761.289236][T23093] netlink: 'syz.5.4283': attribute type 83 has an invalid length. [ 761.312173][T23098] netlink: 'syz.3.4285': attribute type 10 has an invalid length. [ 761.745447][T23118] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 761.784726][T23118] bond5: (slave vti0): Error -95 calling set_mac_address [ 761.874225][T23135] netlink: 'syz.3.4294': attribute type 2 has an invalid length. [ 761.918837][T23127] netlink: 'syz.5.4293': attribute type 1 has an invalid length. [ 762.003208][T23134] : option downdelay: invalid value (18446744073709547007) [ 762.023734][T23134] : option downdelay: allowed values 0 - 2147483647 [ 762.043396][T23134]  (unregistering): Released all slaves [ 762.504706][T23159] tipc: Enabling of bearer rejected, already enabled [ 762.688535][T23166] batadv0: entered promiscuous mode [ 762.740652][T23166] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 763.089539][T23188] syzkaller0: entered promiscuous mode [ 763.147139][T23188] syzkaller0: entered allmulticast mode [ 763.180265][T23181] tipc: Enabling of bearer rejected, already enabled [ 763.361884][T23200] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 763.375311][T23203] netlink: 'syz.1.4312': attribute type 10 has an invalid length. [ 763.987841][T23232] __nla_validate_parse: 13 callbacks suppressed [ 763.987863][T23232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4320'. [ 764.009577][T23232] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4320'. [ 764.029756][T23232] geneve4: entered promiscuous mode [ 764.035360][T23232] geneve4: entered allmulticast mode [ 764.108371][T23243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4323'. [ 764.125647][T23243] netlink: 'syz.1.4323': attribute type 10 has an invalid length. [ 764.547213][T23269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4327'. [ 765.087676][T23289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4331'. [ 765.097875][T23289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4331'. [ 765.098070][T23287] syzkaller1: entered promiscuous mode [ 765.111016][T23289] netlink: 'syz.4.4331': attribute type 12 has an invalid length. [ 765.122561][T23289] netlink: 'syz.4.4331': attribute type 11 has an invalid length. [ 765.122596][T23287] syzkaller1: entered allmulticast mode [ 765.246879][T23297] xt_socket: unknown flags 0x8 [ 765.247098][T23298] xt_socket: unknown flags 0x8 [ 765.307392][T23301] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4334'. [ 765.318055][T23301] ksmbd: Unknown IPC event: 1, ignore. [ 765.399007][T23303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4335'. [ 765.412118][T23303] netlink: 'syz.4.4335': attribute type 10 has an invalid length. [ 765.626207][T23307] xt_hashlimit: invalid rate [ 766.022226][T23324] netlink: 'syz.4.4342': attribute type 2 has an invalid length. [ 766.041053][T23324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4342'. [ 766.096255][T23324] ¿: entered promiscuous mode [ 766.285045][T23333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4346'. [ 766.302430][T23333] netlink: 'syz.3.4346': attribute type 10 has an invalid length. [ 766.649651][T23350] netlink: 'syz.3.4351': attribute type 11 has an invalid length. [ 766.799672][T23357] netlink: 'syz.3.4354': attribute type 40 has an invalid length. [ 767.163984][T23370] netlink: 'syz.0.4358': attribute type 10 has an invalid length. [ 767.196507][T23371] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 768.283353][T23410] syzkaller0: entered promiscuous mode [ 768.324800][T23410] syzkaller0: entered allmulticast mode [ 768.822729][T23433] syzkaller0: entered promiscuous mode [ 768.850941][T23439] netlink: 'syz.1.4376': attribute type 10 has an invalid length. [ 768.863601][T23433] syzkaller0: entered allmulticast mode [ 769.881455][T23472] __nla_validate_parse: 15 callbacks suppressed [ 769.881477][T23472] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4379'. [ 769.898585][T23472] netlink: 'syz.5.4379': attribute type 10 has an invalid length. [ 772.036607][T23483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4382'. [ 772.060002][T23483] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4382'. [ 772.124217][T23487] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4384'. [ 772.254881][T23493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4385'. [ 772.372453][T23497] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4387'. [ 772.470693][T23502] netlink: 'syz.4.4387': attribute type 6 has an invalid length. [ 772.496396][T23502] IPv6: NLM_F_CREATE should be specified when creating new route [ 772.664209][T23491] fb: renamed from bridge0 (while UP) [ 772.790739][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 772.916684][T23530] ip6t_REJECT: ECHOREPLY is not supported [ 773.025673][T23534] sctp: [Deprecated]: syz.3.4396 (pid 23534) Use of int in max_burst socket option. [ 773.025673][T23534] Use struct sctp_assoc_value instead [ 773.144673][T23539] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4397'. [ 773.222725][T23543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4399'. [ 773.233865][T23540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4395'. [ 773.264928][T23540] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4395'. [ 773.308824][T23545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.327194][T23547] syz_tun: entered allmulticast mode [ 773.346943][T23551] lo: left promiscuous mode [ 773.447244][T23551] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.454488][T23551] bridge0: port 2(bridge_slave_1) entered listening state [ 773.462005][T23551] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.469237][T23551] bridge0: port 1(bridge_slave_0) entered listening state [ 773.589423][T23551] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 773.701414][T23547] syz_tun (unregistering): left allmulticast mode [ 773.835218][T23567] hsr_slave_1 (unregistering): left promiscuous mode [ 773.893942][T23564] fb: renamed from bridge0 (while UP) [ 774.137424][T23588] netlink: 'syz.5.4411': attribute type 10 has an invalid length. [ 774.258159][T23598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.346824][T23587] netlink: 'syz.3.4410': attribute type 2 has an invalid length. [ 774.354974][T23587] netlink: 'syz.3.4410': attribute type 5 has an invalid length. [ 774.365524][T23587] netlink: 'syz.3.4410': attribute type 2 has an invalid length. [ 774.375043][T23587] netlink: 'syz.3.4410': attribute type 5 has an invalid length. [ 774.424359][T23605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.436894][T23605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.448695][T23605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.480072][T23605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.499781][T23605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.516511][T23605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.530152][T23605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.563030][T23612] netlink: 'syz.3.4417': attribute type 21 has an invalid length. [ 774.586258][T23612] netlink: 'syz.3.4417': attribute type 4 has an invalid length. [ 775.042130][T23633] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20004 [ 775.176569][T23631] bond4: option tlb_dynamic_lb: invalid value (26) [ 775.221681][T23631] bond4 (unregistering): Released all slaves [ 775.247431][T23641] __nla_validate_parse: 9 callbacks suppressed [ 775.247450][T23641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4424'. [ 775.287751][T23641] netlink: 'syz.0.4424': attribute type 10 has an invalid length. [ 775.865844][T23665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4435'. [ 776.071827][T23671] netlink: 'syz.4.4436': attribute type 1 has an invalid length. [ 776.198625][T23679] netlink: 'syz.1.4439': attribute type 2 has an invalid length. [ 776.291562][ T29] audit: type=1804 audit(1784323113.095:8): pid=23682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4440" name="/newroot/293/memory.events" dev="tmpfs" ino=1526 res=1 errno=0 [ 776.366615][ T29] audit: type=1800 audit(1784323113.095:9): pid=23682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4440" name="memory.events" dev="tmpfs" ino=1526 res=0 errno=0 [ 776.402548][ T29] audit: type=1804 audit(1784323113.125:10): pid=23682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4440" name="/newroot/293/memory.events" dev="tmpfs" ino=1526 res=1 errno=0 [ 776.579475][T23691] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 776.734598][T23699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4446'. [ 776.913855][T23699] 8021q: adding VLAN 0 to HW filter on device bond6 [ 776.938332][T23710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4450'. [ 776.971841][T23702] bond6: entered allmulticast mode [ 777.113246][T23713] bond4: (slave macvlan1): Enslaving as an active interface with an up link [ 777.131285][T23718] netlink: 'syz.3.4452': attribute type 3 has an invalid length. [ 777.166485][T23720] netlink: 'syz.1.4451': attribute type 1 has an invalid length. [ 777.176942][T23718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4452'. [ 777.196876][T23710] bond4 (unregistering): (slave macvlan1): Releasing backup interface [ 777.206582][T23720] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4451'. [ 777.248988][T23720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4451'. [ 777.278553][T23710] bond4 (unregistering): Released all slaves [ 777.418750][T23720] ip6gre2: entered promiscuous mode [ 777.435155][T23720] ip6gre2: entered allmulticast mode [ 777.471947][T20850] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 777.496889][T20850] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 777.505318][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 777.559437][T23726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4455'. [ 777.609962][T23726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4455'. [ 777.643046][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 777.652813][T23726] syzkaller0: entered promiscuous mode [ 777.670083][T23726] syzkaller0: entered allmulticast mode [ 778.050696][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 778.074310][T23753] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 778.095034][T23756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4465'. [ 778.305148][ T1045] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.329197][ T1045] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.342301][T23779] netlink: 'syz.0.4468': attribute type 2 has an invalid length. [ 778.360288][ T1045] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.395154][ T1045] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 778.431962][T23779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.488483][T23779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.608214][T23794] bridge0: port 3(netdevsim1) entered blocking state [ 778.612820][T23782] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 778.637917][T23794] bridge0: port 3(netdevsim1) entered disabled state [ 778.687781][T23794] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 778.733727][T23794] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 778.762259][T23794] bridge0: port 3(netdevsim1) entered blocking state [ 778.769193][T23794] bridge0: port 3(netdevsim1) entered listening state [ 778.924900][T23806] netlink: 'syz.5.4475': attribute type 1 has an invalid length. [ 780.032723][T23867] macvlan0: left promiscuous mode [ 780.052377][T23867] mac80211_hwsim hwsim36 wlan0: left promiscuous mode [ 780.078834][T23867] mac80211_hwsim hwsim36 wlan0: left allmulticast mode [ 780.105381][T23873] netlink: 'syz.5.4502': attribute type 32 has an invalid length. [ 780.107350][T23867] bridge1: left allmulticast mode [ 780.135915][T23867] vlan2: left allmulticast mode [ 780.141418][T23867] gretap0: left allmulticast mode [ 780.149586][T23867] geneve2: left promiscuous mode [ 780.155323][T23867] geneve2: left allmulticast mode [ 780.171282][T23867] bond4: left allmulticast mode [ 780.181397][T23867] ip6tnl1: left allmulticast mode [ 780.192018][T23867] ipvlan2: left promiscuous mode [ 780.221275][ C1] net_ratelimit: 1890 callbacks suppressed [ 780.221293][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.238756][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.249310][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.294666][T23867] vlan3: left allmulticast mode [ 780.311101][T23867] bond0: left allmulticast mode [ 780.322773][T23867] geneve3: left allmulticast mode [ 780.343439][T23867] geneve4: left promiscuous mode [ 780.361327][T23867] geneve4: left allmulticast mode [ 780.375056][T23867] bond6: left allmulticast mode [ 780.386613][T23867] ip6gre2: left promiscuous mode [ 780.398090][T23867] ip6gre2: left allmulticast mode [ 780.446804][T18837] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.492161][T18837] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.513332][T18837] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.550713][T18837] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.642162][T18837] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.663570][T18837] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.673303][T18837] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.693491][T18837] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.788433][T23900] __nla_validate_parse: 3 callbacks suppressed [ 780.788453][T23900] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4508'. [ 781.021294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.032333][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.040819][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.049102][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.057572][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.066614][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.075078][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.117406][T23928] x_tables: duplicate entry at hook 1 [ 781.781959][T23945] [ 781.784362][T23945] ====================================================== [ 781.791381][T23945] WARNING: possible circular locking dependency detected [ 781.798402][T23945] syzkaller #0 Not tainted [ 781.802803][T23945] ------------------------------------------------------ [ 781.809817][T23945] syz.4.4520/23945 is trying to acquire lock: [ 781.815867][T23945] ffffffff8ec848a0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650 [ 781.825353][T23945] [ 781.825353][T23945] but task is already holding lock: [ 781.832725][T23945] ffff88807b815cf8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 781.842234][T23945] [ 781.842234][T23945] which lock already depends on the new lock. [ 781.842234][T23945] [ 781.852715][T23945] [ 781.852715][T23945] the existing dependency chain (in reverse order) is: [ 781.861817][T23945] [ 781.861817][T23945] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 781.869421][T23945] __might_fault+0xcb/0x130 [ 781.874453][T23945] _copy_from_iter+0x100/0x1660 [ 781.879914][T23945] tcp_sendmsg_locked+0x2620/0x55c0 [ 781.885680][T23945] tcp_sendmsg+0x2f/0x50 [ 781.890433][T23945] sock_sendmsg_nosec+0x10e/0x180 [ 781.896063][T23945] sock_write_iter+0x2de/0x3e0 [ 781.901344][T23945] vfs_write+0x612/0xba0 [ 781.906189][T23945] ksys_write+0x150/0x270 [ 781.911035][T23945] do_syscall_64+0x174/0x580 [ 781.916161][T23945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.922592][T23945] [ 781.922592][T23945] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 781.930234][T23945] lock_sock_nested+0x41/0x100 [ 781.935592][T23945] inet_shutdown+0x6a/0x390 [ 781.940672][T23945] nbd_mark_nsock_dead+0x2cb/0x550 [ 781.946422][T23945] recv_work+0x1cee/0x1e10 [ 781.951423][T23945] process_scheduled_works+0xa8e/0x14e0 [ 781.957536][T23945] worker_thread+0xa47/0xfb0 [ 781.962670][T23945] kthread+0x388/0x470 [ 781.967360][T23945] ret_from_fork+0x514/0xb70 [ 781.972510][T23945] ret_from_fork_asm+0x1a/0x30 [ 781.977791][T23945] [ 781.977791][T23945] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 781.985438][T23945] __mutex_lock+0x19d/0x1550 [ 781.990653][T23945] nbd_queue_rq+0x373/0x1150 [ 781.995772][T23945] blk_mq_dispatch_rq_list+0x499/0x1990 [ 782.001943][T23945] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 782.008897][T23945] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 782.015450][T23945] blk_mq_run_work_fn+0x16c/0x300 [ 782.021091][T23945] process_scheduled_works+0xa8e/0x14e0 [ 782.027154][T23945] worker_thread+0xa47/0xfb0 [ 782.032257][T23945] kthread+0x388/0x470 [ 782.036860][T23945] ret_from_fork+0x514/0xb70 [ 782.041981][T23945] ret_from_fork_asm+0x1a/0x30 [ 782.047278][T23945] [ 782.047278][T23945] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 782.054494][T23945] __mutex_lock+0x19d/0x1550 [ 782.059610][T23945] nbd_queue_rq+0xc1/0x1150 [ 782.064633][T23945] blk_mq_dispatch_rq_list+0x499/0x1990 [ 782.070695][T23945] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 782.077631][T23945] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 782.084125][T23945] blk_mq_run_work_fn+0x16c/0x300 [ 782.089750][T23945] process_scheduled_works+0xa8e/0x14e0 [ 782.095805][T23945] worker_thread+0xa47/0xfb0 [ 782.100908][T23945] kthread+0x388/0x470 [ 782.105491][T23945] ret_from_fork+0x514/0xb70 [ 782.110608][T23945] ret_from_fork_asm+0x1a/0x30 [ 782.115882][T23945] [ 782.115882][T23945] -> #3 (set->srcu){.+.+}-{0:0}: [ 782.122995][T23945] __synchronize_srcu+0xc9/0x2f0 [ 782.128488][T23945] elevator_switch+0x1e8/0x7b0 [ 782.133838][T23945] elevator_change+0x2fa/0x480 [ 782.139114][T23945] elevator_set_default+0x375/0x440 [ 782.144828][T23945] blk_register_queue+0x3f3/0x4e0 [ 782.150445][T23945] __add_disk+0x6cb/0xe30 [ 782.155325][T23945] add_disk_fwnode+0xfb/0x4b0 [ 782.160510][T23945] nbd_dev_add+0x733/0xb60 [ 782.165444][T23945] nbd_init+0x15f/0x1e0 [ 782.170259][T23945] do_one_initcall+0x250/0x870 [ 782.175539][T23945] do_initcall_level+0x10a/0x1a0 [ 782.181020][T23945] do_initcalls+0x59/0xa0 [ 782.185859][T23945] kernel_init_freeable+0x29d/0x3e0 [ 782.191663][T23945] kernel_init+0x1d/0x1d0 [ 782.196504][T23945] ret_from_fork+0x514/0xb70 [ 782.201614][T23945] ret_from_fork_asm+0x1a/0x30 [ 782.206894][T23945] [ 782.206894][T23945] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 782.214701][T23945] __mutex_lock+0x19d/0x1550 [ 782.219812][T23945] elevator_change+0x1af/0x480 [ 782.225090][T23945] elevator_set_none+0xb5/0x140 [ 782.230454][T23945] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 782.236776][T23945] nbd_start_device+0x189/0xb30 [ 782.242143][T23945] nbd_genl_connect+0x1597/0x1c10 [ 782.247683][T23945] genl_family_rcv_msg_doit+0x233/0x340 [ 782.253743][T23945] genl_rcv_msg+0x614/0x7a0 [ 782.258764][T23945] netlink_rcv_skb+0x226/0x4a0 [ 782.264130][T23945] genl_rcv+0x28/0x40 [ 782.269020][T23945] netlink_unicast+0x7bb/0x940 [ 782.274340][T23945] netlink_sendmsg+0x813/0xb40 [ 782.279627][T23945] sock_sendmsg_nosec+0x13a/0x180 [ 782.285256][T23945] ____sys_sendmsg+0x54e/0x850 [ 782.290622][T23945] ___sys_sendmsg+0x2a5/0x360 [ 782.295910][T23945] __x64_sys_sendmsg+0x1b1/0x290 [ 782.301364][T23945] do_syscall_64+0x174/0x580 [ 782.306467][T23945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.312871][T23945] [ 782.312871][T23945] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 782.321475][T23945] blk_alloc_queue+0x544/0x690 [ 782.326753][T23945] __blk_mq_alloc_disk+0x194/0x390 [ 782.332392][T23945] nbd_dev_add+0x494/0xb60 [ 782.337382][T23945] nbd_init+0x15f/0x1e0 [ 782.342063][T23945] do_one_initcall+0x250/0x870 [ 782.347354][T23945] do_initcall_level+0x10a/0x1a0 [ 782.352812][T23945] do_initcalls+0x59/0xa0 [ 782.357656][T23945] kernel_init_freeable+0x29d/0x3e0 [ 782.363376][T23945] kernel_init+0x1d/0x1d0 [ 782.368219][T23945] ret_from_fork+0x514/0xb70 [ 782.373334][T23945] ret_from_fork_asm+0x1a/0x30 [ 782.378610][T23945] [ 782.378610][T23945] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 782.385997][T23945] __lock_acquire+0x1520/0x2cf0 [ 782.391414][T23945] lock_acquire+0x106/0x350 [ 782.396529][T23945] fs_reclaim_acquire+0x71/0x100 [ 782.401991][T23945] prepare_alloc_pages+0x15b/0x650 [ 782.407630][T23945] __alloc_frozen_pages_noprof+0x12f/0x380 [ 782.413966][T23945] alloc_pages_mpol+0x212/0x380 [ 782.419361][T23945] folio_alloc_mpol_noprof+0x39/0x160 [ 782.425265][T23945] vma_alloc_folio_noprof+0xe1/0x1e0 [ 782.431072][T23945] do_pte_missing+0x173a/0x34b0 [ 782.436436][T23945] handle_mm_fault+0x1b36/0x3080 [ 782.441883][T23945] do_user_addr_fault+0x744/0x1340 [ 782.447558][T23945] exc_page_fault+0x6a/0xc0 [ 782.452578][T23945] asm_exc_page_fault+0x26/0x30 [ 782.457936][T23945] ep_try_send_events+0x5a2/0xd50 [ 782.463496][T23945] do_epoll_wait+0x483/0xd30 [ 782.468594][T23945] __x64_sys_epoll_wait+0x1d7/0x230 [ 782.474307][T23945] do_syscall_64+0x174/0x580 [ 782.479678][T23945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.486108][T23945] [ 782.486108][T23945] other info that might help us debug this: [ 782.486108][T23945] [ 782.496337][T23945] Chain exists of: [ 782.496337][T23945] fs_reclaim --> sk_lock-AF_INET --> &mm->mmap_lock [ 782.496337][T23945] [ 782.508886][T23945] Possible unsafe locking scenario: [ 782.508886][T23945] [ 782.516359][T23945] CPU0 CPU1 [ 782.521710][T23945] ---- ---- [ 782.527159][T23945] rlock(&mm->mmap_lock); [ 782.531581][T23945] lock(sk_lock-AF_INET); [ 782.538507][T23945] lock(&mm->mmap_lock); [ 782.545347][T23945] lock(fs_reclaim); [ 782.549323][T23945] [ 782.549323][T23945] *** DEADLOCK *** [ 782.549323][T23945] [ 782.557459][T23945] 2 locks held by syz.4.4520/23945: [ 782.562647][T23945] #0: ffff8880397be860 (&ep->mtx){+.+.}-{4:4}, at: ep_try_send_events+0x197/0xd50 [ 782.571963][T23945] #1: ffff88807b815cf8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 782.581988][T23945] [ 782.581988][T23945] stack backtrace: [ 782.587863][T23945] CPU: 1 UID: 0 PID: 23945 Comm: syz.4.4520 Not tainted syzkaller #0 PREEMPT(full) [ 782.587883][T23945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 782.587893][T23945] Call Trace: [ 782.587901][T23945] [ 782.587909][T23945] dump_stack_lvl+0xe8/0x150 [ 782.587934][T23945] print_circular_bug+0x2e1/0x300 [ 782.587952][T23945] check_noncircular+0x12e/0x150 [ 782.587978][T23945] __lock_acquire+0x1520/0x2cf0 [ 782.588002][T23945] ? is_bpf_text_address+0x26/0x2b0 [ 782.588028][T23945] ? prepare_alloc_pages+0x15b/0x650 [ 782.588047][T23945] lock_acquire+0x106/0x350 [ 782.588065][T23945] ? prepare_alloc_pages+0x15b/0x650 [ 782.588085][T23945] ? is_bpf_text_address+0x26/0x2b0 [ 782.588108][T23945] fs_reclaim_acquire+0x71/0x100 [ 782.588125][T23945] ? prepare_alloc_pages+0x15b/0x650 [ 782.588144][T23945] prepare_alloc_pages+0x15b/0x650 [ 782.588165][T23945] __alloc_frozen_pages_noprof+0x12f/0x380 [ 782.588187][T23945] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 782.588215][T23945] ? __pfx_policy_nodemask+0x10/0x10 [ 782.588237][T23945] ? __lock_acquire+0x683/0x2cf0 [ 782.588257][T23945] alloc_pages_mpol+0x212/0x380 [ 782.588280][T23945] folio_alloc_mpol_noprof+0x39/0x160 [ 782.588302][T23945] vma_alloc_folio_noprof+0xe1/0x1e0 [ 782.588324][T23945] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 782.588346][T23945] ? __pte_offset_map+0x29/0x240 [ 782.588361][T23945] ? __pte_offset_map+0x29/0x240 [ 782.588377][T23945] do_pte_missing+0x173a/0x34b0 [ 782.588402][T23945] handle_mm_fault+0x1b36/0x3080 [ 782.588422][T23945] ? handle_mm_fault+0xec/0x3080 [ 782.588440][T23945] ? __pfx_handle_mm_fault+0x10/0x10 [ 782.588461][T23945] ? lock_mm_and_find_vma+0xa7/0x340 [ 782.588480][T23945] do_user_addr_fault+0x744/0x1340 [ 782.588507][T23945] exc_page_fault+0x6a/0xc0 [ 782.588530][T23945] asm_exc_page_fault+0x26/0x30 [ 782.588545][T23945] RIP: 0010:ep_try_send_events+0x5a2/0xd50 [ 782.588569][T23945] Code: b6 04 28 84 c0 0f 85 f8 03 00 00 49 8b 06 48 ba 00 f0 ff ff ff 7f 00 00 48 8b 74 24 48 48 89 f1 48 39 d1 48 0f 47 ca 0f 01 cb <44> 89 21 48 89 41 04 0f 01 ca 48 83 c6 0c 4c 8d a4 24 80 00 00 00 [ 782.588583][T23945] RSP: 0018:ffffc9000eedfb00 EFLAGS: 00050283 [ 782.588596][T23945] RAX: 0000000000000000 RBX: ffff888077518858 RCX: 0000200000002a80 [ 782.588608][T23945] RDX: 00007ffffffff000 RSI: 0000200000002a80 RDI: ffff8880775188b3 [ 782.588619][T23945] RBP: ffffc9000eedfc10 R08: ffff8880349f5b9f R09: 1ffff1100693eb73 [ 782.588630][T23945] R10: dffffc0000000000 R11: ffffed100693eb74 R12: 0000000000000304 [ 782.588641][T23945] R13: dffffc0000000000 R14: ffff8880775188ac R15: 1ffff1100eea3115 [ 782.588662][T23945] ? __pfx_ep_try_send_events+0x10/0x10 [ 782.588687][T23945] ? _raw_spin_unlock_irq+0x23/0x50 [ 782.588786][T23945] ? do_epoll_wait+0x661/0xd30 [ 782.588801][T23945] do_epoll_wait+0x483/0xd30 [ 782.588819][T23945] ? do_epoll_wait+0x746/0xd30 [ 782.588837][T23945] ? __pfx_do_epoll_wait+0x10/0x10 [ 782.588852][T23945] ? __pfx_ep_autoremove_wake_function+0x10/0x10 [ 782.588868][T23945] ? __pfx_do_futex+0x10/0x10 [ 782.588907][T23945] __x64_sys_epoll_wait+0x1d7/0x230 [ 782.588930][T23945] ? __pfx___x64_sys_epoll_wait+0x10/0x10 [ 782.588952][T23945] ? rcu_is_watching+0x15/0xb0 [ 782.588977][T23945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.588993][T23945] do_syscall_64+0x174/0x580 [ 782.589014][T23945] ? trace_irq_disable+0x3b/0x140 [ 782.589032][T23945] ? clear_bhb_loop+0x40/0x90 [ 782.589049][T23945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.589064][T23945] RIP: 0033:0x7f0116d9de99 [ 782.589078][T23945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.589091][T23945] RSP: 002b:00007f0117ce2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e8 [ 782.589106][T23945] RAX: ffffffffffffffda RBX: 00007f0117025fa0 RCX: 00007f0116d9de99 [ 782.589117][T23945] RDX: 0000000000000001 RSI: 0000200000002a80 RDI: 0000000000000003 [ 782.589127][T23945] RBP: 00007f0116e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 782.589136][T23945] R10: 00000000fffeffff R11: 0000000000000246 R12: 0000000000000000 [ 782.589146][T23945] R13: 00007f0117026038 R14: 00007f0117025fa0 R15: 00007ffe223c8408 [ 782.589170][T23945] [ 783.020983][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 783.520822][ T5284] veth0_vlan: left promiscuous mode [ 783.534678][T22179] veth0_vlan: entered promiscuous mode [ 788.780574][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 788.787996][ C1] bridge0: port 2(bridge_slave_1) entered learning state