last executing test programs: 4.282525926s ago: executing program 4 (id=1881): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x10448) r5 = socket(0x2b, 0x80801, 0x1) accept4$x25(r5, &(0x7f00000003c0)={0x9, @remote}, &(0x7f0000000a00)=0x12, 0x800) setsockopt$inet6_tcp_int(r5, 0x11e, 0x1, &(0x7f0000000280)=0x400, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0200000000000000", 0x8) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fedbdf25140000001800078008000200070000008f19000300010000000100a200"], 0x2c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) unshare(0x2c020400) r6 = socket(0x18, 0x3, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000003f00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b707000014000480b7060000ffffff908500000005000000bf0900000000000035090100000000009500000000000000bf9100000000000056070000010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r6, 0x0) ppoll(&(0x7f0000000180)=[{r6}], 0x1, &(0x7f0000000200), 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000240)=r8, 0x4) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0x4ad}], 0x5) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x9, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 3.876514411s ago: executing program 4 (id=1885): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000000)={0x9, {{0xa, 0x4e22, 0xfffffff7, @mcast1, 0x1ff}}, {{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd}}}, 0x108) 3.72691254s ago: executing program 3 (id=1887): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r2, &(0x7f0000000140), 0x810) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1900000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f8"], 0x20) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x58}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='veth1_to_hsr\x00') 3.66029875s ago: executing program 0 (id=1888): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000100), 0x0) (async) r2 = socket$inet6(0x10, 0x2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8810) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x6, 0x7, 0x0, 0x1, 0x1e92}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r5}, &(0x7f0000000640), &(0x7f0000000680)='%pS \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6, r5}, 0xc) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000104000000000f00000063128f7055c811c10b8553aa9596191300000000136d6a69d08d677138142dbc28bd00b49cd2505cae27d128dc4951e94b7166d4e7ebacc50d566d54f7c812da9ed4452e21692d21ca17597ef7ba4a", @ANYRES32=0x0, @ANYBLOB="000004007573443b2c0012800b00010069703667726500001c000280080004006d000000060010004e21000006000f0009000000"], 0x4c}}, 0x40000) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) (async) write(r2, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c) 3.43705138s ago: executing program 3 (id=1889): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) listen(r0, 0x14) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd7000fcdbdf2502000000080001"], 0x1c}}, 0x840) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000000000000000000000000000a00030076657468300000003400128009000100766574680000000024000280200001"], 0x60}}, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf253a91210008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x5b05383a345356d) (async) r2 = socket(0x1, 0x2, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r5], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010001fff000000000500000000000000", @ANYRES32=0x0, @ANYBLOB="ffff0000ff", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40018c5}, 0x4000000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x60000, 0x2a8f2}}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x4004004) (async) close(0x3) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) (async) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r11, &(0x7f00000004c0)="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", &(0x7f00000000c0)=@udp=r2}, 0x20) 3.385533047s ago: executing program 0 (id=1890): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async, rerun: 64) close(0xffffffffffffffff) (async, rerun: 64) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000400)={r0, &(0x7f0000000140)='}\x00', 0x41400, &(0x7f00000001c0)={@_ha_fsid={[0x5, 0x1ff74a20]}, {0x273, 0x7, 0x3ae, 0x10001}}, 0x8, &(0x7f0000000200), &(0x7f00000003c0)}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x8, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) (async) write$tun(r3, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd00001100"], 0xfce) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r1, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0xd81, &(0x7f0000001e40)=ANY=[], 0x0) 3.376226989s ago: executing program 1 (id=1891): syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000006c0)={{0xffffffffffffffff, &(0x7f0000000000)='$]--,*\x00', 0x400101, &(0x7f0000000040)={@_ha_fsid={[0x7, 0x5]}, {0x7000, 0x8f89, 0x401}}, 0x7, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000200)=0x5}, 0x3, &(0x7f0000000640)=[{0x3, 0x4, &(0x7f0000000240)=')\xcb.\x00', &(0x7f0000000300)="1b51122d5dccab47b8d5ce687d92fff90d3ecf1eb75279b2b18132f0caae7bc49b5adad6e84459d0ba38524954805ddf8f76988da9610e97f43fe6dd637e707bb82f125bd56f07c545d274b23a7ac2c4820bbdf7784c1cef8ca8849c548b06c38e9ff6088266c4b1040efaf40879a18e386063364ff8a32fbaf93937558b69667ca655aca5e4a6b44791bdf3d4cb068c09efe363f87dc3d5d0005286584ece50915c1d5ae92d58840c9ef57cc46d51031895df6a4ec9bfcac5945c5c527292e110c2b71074cf57f64248ce1fad757ebd7553b542d9b3b567153709da304f4b54bea123e697002f43bfc2", 0xea, 0x2a}, {0x1, 0x1, &(0x7f0000000400)='-\x00', &(0x7f0000000440)="d44b85c2f99808bc550da54ad92a0edaf15ba2fa05cd4988122c406bd236fa2674a515d5732d9d3203509547ca4a8328be9274eda6661f52943816c45b34ffd78c38b2dee574ab65e6d681dee7cf8efbb2b7860b86f8e4ca42ef24afb86ff3de2fb54f7e4383e9189512c8bd21a8526bb29dbe2d6eda3ae2111917bc4e3bebad964b7e96ba8e4b4cc75a2613ca337087c2ecf159acedafb2426a431990b31e992a56af36170c8942892a049eacf4177cfa52578d5f2f2aecbb5e6b09426ec1c6481507e95bd81aa5e76e74d389818ec192509cac9768a9f1b9546cc5115687", 0xdf, 0x2}, {0x3, 0x6, &(0x7f0000000540)='IPVS\x00', &(0x7f0000000580)="ef87fc225056c57a68d3f1dddd5e93af6fcb5a4e932465e97726873ef22b2e2b654894e082b41f1746b1dfcd4944ebb19f7d0c7a210da95e74f93bf57be8eecc94c12b2f2c9f1769edc09ed38d6caad5c3e4bdfd720cc330a88087af77861104ea045e259e497ace636980d7f40e5d196a09ffbe377917ba0d9e9f7353cacdb418faa84efdbb3b62e993259db01feaf95cffccc4621a21c075978837066afe086cbb865cff60c0fe01d4e8d84c3e2e7e3a390e483896334e96", 0xb9, 0x10}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRESDEC=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) 3.1939767s ago: executing program 0 (id=1892): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) r1 = socket(0x15, 0x80005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee00, 0xee01}}}], 0x20, 0x80}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x5c, r6, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48800}, 0x4080) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000120000000000230000001800018014000200626f6e645f736c6176655f30000000000500020001"], 0x34}}, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r10, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) r11 = socket(0x8000000010, 0x2, 0x4) write(r11, &(0x7f00000002c0)="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", 0xfc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x2f, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0xf, @loopback, 0xffffff7f}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r12 = socket(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r14}, @CGW_SRC_IF={0x8, 0x9, r15}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r15, {0xe, 0xb}, {0xffff}, {0x1, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 3.117598067s ago: executing program 1 (id=1893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0xc8, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x7c, 0x12, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x40}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}]}}}]}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x104}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 3.108823682s ago: executing program 3 (id=1894): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710429000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008006411ff20010000000000000000000000000002ff05"], 0x9e) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="30000000fd97eda21f29b665a65ce70412a6895047c38c18fd03f177aca5a61712dbb5ecac7e66d2690117173a3476781b7d924b7cc8e92260770a9d4946c1660fa4f16d2e90b16851b18e5ce6bbeca059551fac73bd8d223d0905f73780fe5b92cdaa4d5e443cec8f649f3949bce04bb4d1906d6b61201d361f87b16cd8d3a197f62d6ef12b7921a96295eae83b7939e1483a22f7492f623b0b52bec2443abfb3d7d598aab27ea730e25496889a71cf2c032aac5f3c09e97d230d7455a7552897fc6e90b535d805a4e166ff3e1410c9c179398f384a137c577a8b43407944d0e378837f4c6d363075c40427ab5cd7f0e9c5f775dbaa4c8fc6", @ANYRES16=0x0, @ANYBLOB="120a25bd7000fcdbdf25010000000c000300040000000000000008000500ffffffff080008"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x80c0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="a80100006474dbce8ec660125fcb9bda8edc9604de8595b7bc724dc738542d707526c312eecd20f76e641f4a7d0aa4b4b8e1612518b1189731e4f2641df843d0", @ANYRES16=r5, @ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x40}, 0x20000041) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x42001, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) socket$unix(0x1, 0x3, 0x0) 2.837369494s ago: executing program 4 (id=1896): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000010c0), 0x40000, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001100)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x84, 0x30, 0xb, 0x9, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x4, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x40) getpeername$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) openat$ppp(0xffffffffffffff9c, &(0x7f00000010c0), 0x40000, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001100)=0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x84, 0x30, 0xb, 0x9, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x4, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x40) (async) getpeername$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) 2.835980351s ago: executing program 1 (id=1897): r0 = socket$inet6(0xa, 0x3, 0xff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000010500)={'virt_wifi0\x00', @local}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(r0, &(0x7f00000006c0)="600000000014334000e4331e26bff073b302d6b8b34123ca00000000000000000000000000000100", 0x28, 0x24000000, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x3, 0xff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000010500)={'virt_wifi0\x00', @local}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (async) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) (async) sendto$inet6(r0, &(0x7f00000006c0)="600000000014334000e4331e26bff073b302d6b8b34123ca00000000000000000000000000000100", 0x28, 0x24000000, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) 2.628232667s ago: executing program 2 (id=1898): r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000300), &(0x7f0000001080)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = gettid() sendmsg$netlink(r1, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000300)=ANY=[], 0x318}], 0x1, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee01}}}], 0x40, 0x24000050}, 0x8000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x11, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xd9, &(0x7f0000000f80)=""/217, 0x41100, 0x8, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', r5, 0xffffffffffffffff, 0x2, 0x3}, 0x50) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080), 0x4) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @empty}], 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}]}, &(0x7f0000000080)=0x10) 2.47954788s ago: executing program 4 (id=1899): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={r1, 0xcb}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000740)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) 2.312964287s ago: executing program 0 (id=1900): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="52cc424ee7761abd1dbcef6eda7622086cb953"], 0x18}}, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0xd, 0xa, 0x8003) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff6203f0fff8ffffff71a4f0ff000000002d040300000000003d030000000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007913000000000000b5000000000000009500000000000000023bc065b7a379d183f9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c26f71b29ee35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8ea8fcb913466aaa7f6d150352e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa48f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae5630800c5363092adaa1d8964162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee96a1c685508e6ca4fe5a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9029bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f75c345edcb84ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f277b8a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba0af35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c320e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0bad3b0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcefb9303a7861fce422f3f9c422a1619e6c6c2dd825743b22a6f93604c73d886c25ecaaeafccdeb19bd0cdbc5d22dae879561ea5606fa0c9dc23c0f52621aaae42180aecfd32cd6a66a1efa0949bc195dfcb691a26344362989371f2d5bf274363416b3cafb9a3331285449dc1afe9af7fed27bd4e36fa423d6c05ffa2acee27e2444b5ca28fc16fe31bd1320d4415ec0f5471b0b671d7626f773"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x4e) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'pimreg0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x4049004) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r15, 0x3e}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e105000000861100ff1144ee1611d4b8bf", 0x22}, {&(0x7f00000001c0)="856549090746643101d1304b6bee6eb2e5f8ea5522aef411bad5a935", 0x1c}], 0x2}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300, 0x4018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) socket(0x1, 0x803, 0x0) 2.17401758s ago: executing program 4 (id=1901): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0xe, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}}, 0x20000000) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000004c0)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x4000000) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000b0ff000000000000f0ffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d980000000000004f080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.003532926s ago: executing program 2 (id=1902): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r4, 0x0) shutdown(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @random="440043ab004a", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x300, 0x0, 0x2, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x36}}, {0x11, 0x7d, 0x0, @local}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0xe], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000002a40)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="a40000000906010800000000000000210200ffff200008801c0007801800028014000240fe880000000000000000000000000001080064a7c6b2e7b01e0940000000390500010007000000080009400001ff80580008800c000780060005404e2100001c0007801800028014000240fc000000000000000000080001100007800c001840000000000000000a0c0007800800094000000081100007800c00184000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r12 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r12, 0x10e, 0x1, &(0x7f0000000040)=0x1a, 0x4) 1.813740964s ago: executing program 1 (id=1903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) r1 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140000004500fde100000000000190780a010100ac1414aa04006d7800000000450000000000000000110000ac1414aa7f000001"], 0xfdef) 1.43652824s ago: executing program 4 (id=1904): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="89e7ee2c7cdad9b4b47380c96558", 0xe}, {&(0x7f00000007c0)="b373ce060bcda8bd13ce09e58864", 0xe}], 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r3, 0x5) connect$inet(r4, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r5 = accept(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="68c99bec193e4a91afac69231e88035a27f8fc404a360be235e32d43e339233c9d38e25d02c0c87099aac850ef2903d8f4faccc83fa76ae5dad9b8b26be8c315fa30fa6c0ae00fa991c2d4f3f1", 0x4d}], 0x1, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x15}}], 0x18}, 0x0) recvmsg(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/256, 0x100}], 0x1, &(0x7f0000000400)=""/16, 0xfffffffffffffde6}, 0x40) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000800)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001800)={{r6, 0x7fff, 0x2, 0xf64, 0x9, 0x87f, 0xfffffffffffffffc, 0x4, 0x6, 0x7, 0x7, 0x8001, 0xe790, 0x9, 0x4}, 0x10, [0x0, 0x0]}) 1.221242669s ago: executing program 2 (id=1905): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x329, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) (async) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x329, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) (async) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x3, 0x7, 0xfffffffc, 0x70a82, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3, 0x8, @void, @value, @value=r1}, 0x50) r2 = socket$inet(0x2, 0x800, 0x9) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000240)={r1, &(0x7f0000000140)='\x00', 0x907c0, &(0x7f0000000180)={@align=0x2, {0x400, 0xfffa, 0x80, 0xf}}, 0x7ff, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x2ae}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x20}, 0x2}) socket$nl_audit(0x10, 0x3, 0x9) (async) r4 = socket$nl_audit(0x10, 0x3, 0x9) bind(r4, &(0x7f00000002c0)=@caif=@util={0x25, "96400a65861f43a99d73f1a06115ccf6"}, 0x80) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000004c0)={'gretap0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x80, 0x7800, 0x18000, 0x3, {{0x29, 0x4, 0x1, 0x2, 0xa4, 0x65, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @rand_addr=0x64010100, {[@timestamp={0x44, 0x8, 0x19, 0x0, 0xf, [0xffff9683]}, @ssrr={0x89, 0x23, 0x6e, [@multicast1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @rand_addr=0x64010102, @private=0xa010102, @rand_addr=0x64010100]}, @cipso={0x86, 0x10, 0x0, [{0x5, 0xa, "2c19117905f2fdfd"}]}, @generic={0x83, 0x4, "e0a0"}, @generic={0x88, 0x6, "e083b0fd"}, @timestamp_addr={0x44, 0x24, 0xf5, 0x1, 0x4, [{@broadcast, 0x1}, {@private=0xa010101, 0x200}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x2}]}, @cipso={0x86, 0x24, 0x3, [{0x71caf20cd6fa4738, 0x11, "800b104210cc2e0d9c53f2af3ac035"}, {0x5, 0x6, "5533a875"}, {0x7, 0x7, "db8592e271"}]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}]}, 0x48}, 0x1, 0x0, 0x0, 0x44840}, 0x4001) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}]}, 0x48}, 0x1, 0x0, 0x0, 0x44840}, 0x4001) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x81, '\x00', r6, r3, 0x5, 0x1, 0x3}, 0x50) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r3) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r3) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x74, r9, 0xf34, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbf8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x61}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008041}, 0x4000010) recvmsg(r4, &(0x7f0000001b00)={&(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001a80)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/60, 0x3c}, {&(0x7f0000001900)=""/242, 0xf2}, {&(0x7f0000001a00)=""/69, 0x45}], 0x4, &(0x7f0000001ac0)=""/23, 0x17}, 0x40000000) (async) recvmsg(r4, &(0x7f0000001b00)={&(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001a80)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/60, 0x3c}, {&(0x7f0000001900)=""/242, 0xf2}, {&(0x7f0000001a00)=""/69, 0x45}], 0x4, &(0x7f0000001ac0)=""/23, 0x17}, 0x40000000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r7) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000001d40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c00)={0xd0, r11, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xffff19ed, 0x1c}}}}, [@NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x27}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x8, 0x6]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x58a}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x5, 0x4, 0x3ff]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x383}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xc4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6b6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x381}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x404801c) sendmsg$NL80211_CMD_GET_REG(r10, &(0x7f0000001ec0)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x280000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001dc0)={0xc0, r11, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x98, 0x22, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffff8001}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffff08}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x88d}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffffe}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x401}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x4}]}, 0xc0}}, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000001f00)=0x8000) unshare(0x60010800) sendmsg$NFT_MSG_GETGEN(r7, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) sendmsg$NFT_MSG_GETGEN(r7, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r10, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x38, 0x1411, 0x400, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c004}, 0x24004005) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000002140)={r6, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x10) (async) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000002140)={r6, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x10) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000002180)={r8}, 0x8) write$cgroup_pressure(r13, &(0x7f00000021c0)={'full', 0x20, 0x9, 0x20, 0xffffffff00000001}, 0x2f) getsockopt$WPAN_WANTLQI(r7, 0x0, 0x3, &(0x7f0000002200), &(0x7f0000002240)=0x4) recvfrom$l2tp(r10, &(0x7f0000002280)=""/66, 0x42, 0x2100, &(0x7f0000002300), 0x10) (async) recvfrom$l2tp(r10, &(0x7f0000002280)=""/66, 0x42, 0x2100, &(0x7f0000002300), 0x10) 1.121513863s ago: executing program 0 (id=1906): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.12063374s ago: executing program 3 (id=1907): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000140)=0xffffffbe, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000700000000000000060000006b11a2000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0700000004000000000900000200000028000000", @ANYRES32, @ANYBLOB="000000000000000000000000005ab3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route(r3, 0x0, 0x880) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000ff07000009"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d000000ff0f0000040000000600000001000000", @ANYRES32=r4], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000340)=r4}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x7fff, r6, 0x20}, 0x38) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000008c0)=ANY=[@ANYRES32=r1, @ANYRESHEX, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaa0a0001007770616e3000000008002f000800000005002e00df79bface1d6a4faa7688e4238f5fa13c3e51e7a594fc75ecdf0b5ee31454c3fb7c8b8e8fae525768cc992c8d3fed7419b78d9cbef93509155c7d023ea4f2a67efc3bbfce292ea90c040838001e89eddcb37f1000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000840}, 0x2000c090) r8 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x3b, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r8, 0x29, 0x3b, 0x0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r9}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) sendto$inet6(r10, 0x0, 0x0, 0x40, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r12}, &(0x7f0000000080), &(0x7f0000000140)=r11}, 0x20) 1.02816786s ago: executing program 1 (id=1908): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}]}}}]}, 0x3c}}, 0x0) clock_gettime(0x0, &(0x7f0000001380)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001340)=[{{&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/42, 0x2a}, {&(0x7f0000000200)=""/247, 0xf7}], 0x2, &(0x7f0000000340)=""/4096, 0x1000}, 0x3}], 0x1, 0x10000, &(0x7f00000013c0)={r1, r2+60000000}) 930.656083ms ago: executing program 0 (id=1909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000380)}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={0x0, r1}, 0x18) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xfff2, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000810000000000000009000000731170000000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 837.827029ms ago: executing program 2 (id=1910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x104}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000e80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x4002}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r3, 0x2, 0x70bd25, 0x2b88, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0xa000080}, 0xc010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000001080)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001040)={&(0x7f0000000e00)={0x40, r6, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:groupadd_exec_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4100) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x216, 0x216, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x18}}, @struct={0x10, 0x9, 0x0, 0x4, 0x0, 0x5, [{0x7, 0x3, 0x6}, {0xf, 0x2, 0x6}, {0x0, 0x1, 0x6}, {0x3, 0x1, 0x9}, {0x2, 0x1, 0x1}, {0x7, 0x1, 0x92}, {0x5, 0x4, 0x5}, {0xa, 0x3, 0x9}, {0xb, 0x0, 0x7f}]}, @typedef, @struct={0x2, 0x7, 0x0, 0x4, 0x1, 0x5, [{0xb, 0x5, 0x1}, {0xa}, {0x0, 0x0, 0x5}, {0x2, 0x2, 0x2217}, {0x5, 0x3, 0xe22c}, {0x7, 0x5, 0x9}, {0x10, 0x2, 0xf9f}]}, @datasec={0xf, 0x8, 0x0, 0xf, 0x2, [{0x3, 0x8001, 0x7}, {0x2, 0x4, 0xac}, {0x1, 0x7, 0x10}, {0x3, 0x10000, 0x8}, {0x1, 0x2}, {0x5, 0x6, 0x8}, {0x3, 0x3, 0xb71f}, {0x2, 0xff, 0x7fffffff}], "1d36"}, @restrict={0xe, 0x0, 0x0, 0xb, 0x5}, @var={0xa, 0x0, 0x0, 0xe, 0x1, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @enum64={0xa, 0x9, 0x0, 0x13, 0x0, 0x4, [{0x6, 0x3, 0x65}, {0x2, 0x5c, 0x200}, {0xc, 0x6}, {0x8, 0xe, 0x3}, {0xb, 0x0, 0x2}, {0x1, 0xfffffffa, 0x70}, {0x1, 0x1, 0x4}, {0x5, 0x6}, {0x7, 0x8, 0x8}]}, @ptr={0x9}]}, {0x0, [0x5f, 0x0, 0x5f, 0x61, 0x41, 0x5f]}}, &(0x7f0000000b00)=""/135, 0x238, 0x87, 0x0, 0x9, 0x10000}, 0x28) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000cc0)={r1, &(0x7f0000000400)='syzkaller\x00', 0x420000, &(0x7f0000000800)={@_ha_fsid={[0x84, 0x8]}, {0x8, 0x3, 0x1, 0x32}}, 0x0, &(0x7f0000000840), &(0x7f0000000c80)=0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xb8, &(0x7f0000000700)=""/184, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, r7, 0x8, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10}, 0x94) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r10, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)="89", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x17, &(0x7f0000001140)=@sack_info={r9, 0xef, 0x6}, 0xc) r11 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r11, 0x84, 0x85, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 615.68948ms ago: executing program 3 (id=1911): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000001bc0)=@raw={'raw\x00', 0x4001, 0x3, 0x548, 0x0, 0x0, 0x148, 0x0, 0x148, 0x4b0, 0x240, 0x240, 0x4b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @rand_addr=0x64010100, 0x0, 0x0, '\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x2f, 0x3, 0x40}, 0x0, 0x288, 0x2d0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x5, 0x1, 0x2, 'syz1\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x7, 0x1, 'snmp_trap\x00'}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x11, 0x1, 0x60}, 0x0, 0x198, 0x1e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xa, 0x9, 0x1, 0x1, 'syz1\x00', 0x10}}, @common=@addrtype={{0x30}, {0xc02, 0x80, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0xa7, 0x1fe, 'snmp_trap\x00', {0x200000000000000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a8) 561.427748ms ago: executing program 1 (id=1912): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x12, 0xa01, 0x2, 0x0, {0xa}, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a00000019ff03c82ada93cc1213c25f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r1, @ANYRES16=r0, @ANYBLOB="1c"], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000b40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x4bc}, 0x1, 0x0, 0x0, 0xc91}, 0x4000) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890c, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x1, 0x1, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000041080100ffff07000400000001000000e463777a8a4562685fd8b4cd6c4f1357e4a67a80a56e9fa0648f1b71f44af428c6f109c8531b47704f77df6f9e0a1e9f3fdbf9cc03dec65dfea5f5795b557fb010a04c657a6f3874824f23b6089f382c2df7f7835002a70fa5f8259b2d7cb92c60ea039b1e7c2678a880c9838c89deed3532af1f04e6262412d1dfadddaf5e87"], 0x14}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000c40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYRESHEX=r0, @ANYRES32=r3, @ANYBLOB="0cf0ff8008000100", @ANYRES32=r3, @ANYBLOB="83c37e0fee56c66988e378d7efc1e48854b3ae90e8f921f4a9cc5e5188b55d9b162e0c6afe0bcdf264fed614b7021ec071768c50bb0510e14014aaa9b9b6a1f367532ca257e40ff170f1f08ba2b32d283d7d95abb000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x804) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket(0x11, 0x6, 0x0) setsockopt$packet_int(r8, 0x107, 0x9, &(0x7f0000000200)=0xec, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x0, 0x4e6a, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x7, 0xbd22, 0x5}}) connect$can_bcm(r8, &(0x7f00000006c0)={0x1d, r9}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="200026bd7000fedbdb25050000000000090000000000aa0000000000000000000000f921c3ba7fbb003fd59daa4730f960e46ebe405863ff707de7bd723d2f9496ae9c48e78de2cd05ac28906c6c98e61f25be0d8f7b08000000000000004cbaee52919f94eeec0630a06e19a0d662920ef694644a9645562f1b94988d850fb003976dc9e958fb2f7e4a98ef3a7bc5d6af317e0bec366d16464010bfc06607000400000000004fe9bdf879d0c31a24559c4c91a036422d7cb61469ab85ddd3cdcd51ec7c9b4fb72d9c58c4bdaf167d2502212253ee151222286fe48d65a4be"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r10 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(r10, 0xffffffffffffffff, 0x44) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000001080)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa008100000086dd60f57a1400403a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000000006050835900000000fc010000ce6700000000000000000000ff01000000000000000000000000000106000400"/122], 0x0) 385.497908ms ago: executing program 3 (id=1913): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x3c, 0x19, 0x901, 0x0, 0x20, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x8, 0x8, 0x1, 0x8, 0x2}}}]}, 0x3c}}, 0x0) 119.228947ms ago: executing program 2 (id=1914): r0 = socket$kcm(0x29, 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="d2ffdd934517f3e145f228e088a8", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r1, r3}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x138, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffc, 0x0, 0x4e24, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0xe8, 0x11, [{@in6=@local, @in=@multicast2, @in=@multicast1, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}, {@in6=@local, @in=@multicast2, @in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x1, 0x0, 0x3504, 0xa, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x32}, @in6=@private0, @in6=@remote, @in=@broadcast, 0x33, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x2010, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000d00000000010000000200000d"], &(0x7f0000000f40)=""/4089, 0x42, 0xff9, 0xa}, 0x28) 0s ago: executing program 2 (id=1915): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ppoll(&(0x7f0000000100)=[{r1, 0x1a0}], 0x1, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000200)={0x1}) shutdown(r1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="2800000001070103006acd52b85b5600000000000000020000091400060048bb0140000002b40800"], 0x28}, 0x1, 0x0, 0x0, 0x24000840}, 0x20008800) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000001a40)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x24, 0x0, 0xb, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0xc8000) socket(0x1a, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) unshare(0x2a020400) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001100), 0x200200, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x48, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @mcast2, [@fragment={0x2f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x65}, @hopopts={0xbe, 0x20000000000002a0}], "01a102e9493a5d5b"}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x9}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x431}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x804) socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000010c0)=@newtfilter={0x8d8, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8a8, 0x2, [@TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_ACT={0x620, 0x1, [@m_gact={0xd8, 0xf, 0x0, 0x0, {{0x9}, {0x4}, {0xac, 0x6, "e2bc6f450583fb03530a851edaacae49b8fce9dd1d62529d15104681b6dd4dd15ab89a2b290b817c0923e8de5aa5276943840b2654d0c71e905a59fa3cabf4f3165f4fb322e6e26b5df83a4f9e90a4fb820ef64aef3c48e0fa7f5dcc2f224e0b99f78107dc8c64c3a4edf9eda5c3f19750f43d154f6da9080d0b3a69ad304ffa3ccb9905372fb142b211b2e107a792c545fa7ef3f765cd6af70d0e57196a89689cdbd377b6497df3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0x30, 0x6, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_police={0x514, 0x19, 0x0, 0x0, {{0xb}, {0x4e0, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_TBF={0x3c, 0x1, {0x93, 0x8, 0x158cc908, 0x4, 0x8, {0xa6, 0x0, 0x5, 0x7, 0x6938, 0x8}, {0x9, 0x2, 0x5, 0xa, 0x3, 0x8}, 0x0, 0x7ff, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x1, 0x5f, 0xfffffffc, 0xe, 0x5e7, 0xff, 0x8, 0x0, 0x2, 0x2, 0x9, 0xffff, 0x8, 0x8000, 0xfff, 0xffff, 0x7f, 0x800, 0x9, 0x4, 0x7, 0x3, 0x9, 0x6, 0xd929, 0x42, 0x8d13, 0x80000000, 0x40, 0x0, 0x0, 0x1, 0x1ff, 0x59cd, 0xb7, 0x40, 0x3, 0x80000000, 0x9, 0x2, 0x8, 0x4ac, 0xffff, 0x4, 0x401, 0x6, 0xfffffffb, 0x6, 0x0, 0x2, 0x1, 0x6, 0x8, 0x81, 0x2, 0xc, 0x3, 0x6, 0x4fe3ab22, 0x8, 0x8000, 0x5, 0x7, 0x4, 0x8, 0x3, 0x7, 0x1, 0x5f4, 0x4, 0xffff8901, 0x3, 0x4, 0x2, 0x49200f2a, 0x8, 0x200, 0x1, 0x1, 0x986, 0xe, 0xfffffffe, 0x800, 0xd, 0x78000000, 0x10, 0x8, 0x74, 0x3, 0x2, 0x586, 0x1, 0xffff, 0xffffffff, 0xa25, 0x9, 0xff, 0x7, 0x8, 0xc8, 0x1, 0x0, 0x8d6, 0x6, 0xdd2, 0xffffff4a, 0x7fff, 0x1, 0x5, 0x1, 0x8, 0x2, 0x200000, 0x9, 0x5, 0x8, 0x1, 0x0, 0xd33, 0x65, 0x3, 0x3, 0x4, 0x81, 0x5, 0x1, 0x0, 0x0, 0x2, 0x4, 0x2, 0x4, 0xa8, 0x0, 0xfffffff7, 0x2f15, 0xcfcb, 0x0, 0x2, 0x9f90, 0x9, 0x5, 0xfffffe01, 0x292, 0x8, 0x4, 0xf, 0x4, 0x7, 0x0, 0x800, 0x9, 0x81, 0x8, 0x3, 0x5, 0x5, 0x6, 0x5, 0x5e8, 0x4, 0x1b, 0x0, 0x7, 0x4, 0xffff, 0x9, 0x6, 0x2, 0x7fffffff, 0x2, 0x5, 0x8, 0x9, 0x2, 0x401, 0x4, 0xe, 0x7, 0x80000000, 0x8, 0x5, 0x4, 0x81, 0x400000, 0x9, 0x7, 0x5, 0x3, 0x3, 0xba, 0x3ff, 0x9, 0x3, 0x8001, 0x7, 0x80, 0x4, 0x3, 0x7ff, 0x2, 0x8, 0x6, 0x7f, 0x1, 0x2, 0x0, 0x80, 0x5, 0x3, 0x51de, 0x8, 0xf, 0xaaed, 0x48dc, 0x3, 0x4, 0xfffff800, 0xfffffeff, 0x4, 0x1e, 0x9, 0xffffffff, 0x200, 0x1b24, 0x7f, 0xea, 0x0, 0x3, 0x0, 0x5, 0x93, 0x10000, 0x0, 0x3, 0x4, 0xf, 0x7fff, 0x1, 0xfca, 0x7f, 0x5, 0x1, 0x7fac, 0x7, 0x7, 0x4, 0x9, 0x9, 0x9, 0x2, 0x8, 0x1, 0xa0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2, 0x5, 0x1, 0x3, {0xd4, 0x2, 0x7, 0xfb, 0x400, 0x8}, {0x7, 0x0, 0x1, 0x8001, 0x8, 0x401}, 0x77a, 0x6, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x0, 0x0, 0x7, 0x1, {0x4, 0x0, 0xcb4, 0x400, 0x1, 0x9}, {0x6, 0x0, 0xb1, 0x9, 0x101, 0x5}, 0x5, 0xde4, 0x5}}]]}, {0xa, 0x6, "48bd810c52ef"}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_CGROUP_EMATCHES={0x120, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_LIST={0xcc, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x5, 0x3, 0x2}, {0xfffffff9, 0x1, 0x7, 0x10000006}}}, @TCF_EM_IPT={0x28, 0x3, 0x0, 0x0, {{0x8, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0xf, 0x2, 0x8}, {0x5, 0x0, 0x1}}}, @TCF_EM_IPT={0x74, 0x3, 0x0, 0x0, {{0x7, 0x9, 0xc7e}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x41, 0x5, "44e358ef1425c3548ca64450869dc4f7c36781c01df6bb93960f503881b1ef7234236cf673fcb35016c341311ebd8092831566c262052a579bcb197aaf"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x40}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x7}, {0x31c21a3c, 0x4, 0x9, 0x1, 0x6, 0x2, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x8, 0x2, 0x2}, {0x99, 0x3, 0x1, "321e38"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}, @TCA_CGROUP_EMATCHES={0x160, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x2, 0x4, 0x506}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9, 0x1, 0x4}, {0x5, 0x8, 0xcab2, 0x1, 0x3, 0x2, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x942, 0x3, 0x7}, {0x3, 0x0, 0x10000, 0xfffff03f}}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x10c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x108, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x7fff}, "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"}}]}]}]}}]}, 0x8d8}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): [ 89.907387][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.920336][ T5621] veth0_vlan: entered promiscuous mode [ 89.935157][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.973319][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.028737][ T5609] veth0_macvtap: entered promiscuous mode [ 90.051962][ T5621] veth1_vlan: entered promiscuous mode [ 90.061256][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.065211][ T5609] veth1_macvtap: entered promiscuous mode [ 90.072777][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.101082][ T5808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6'. [ 90.111126][ T5808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6'. [ 90.126758][ T3371] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.154384][ T5808] netlink: 'syz.3.6': attribute type 39 has an invalid length. [ 90.188840][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.217613][ T5621] veth0_macvtap: entered promiscuous mode [ 90.247871][ T5621] veth1_macvtap: entered promiscuous mode [ 90.269645][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.342747][ T3371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.353452][ T3371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.421478][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.438453][ T136] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.452902][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.480080][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.528564][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.578669][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.590564][ T5611] Bluetooth: hci1: command tx timeout [ 90.626954][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.657243][ T5819] Illegal XDP return value 32768 on prog (id 2) dev syz_tun, expect packet loss! [ 90.667442][ T5611] Bluetooth: hci3: command tx timeout [ 90.668256][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.672911][ T5611] Bluetooth: hci4: command tx timeout [ 90.683184][ T5622] Bluetooth: hci2: command tx timeout [ 90.692228][ T5611] Bluetooth: hci0: command tx timeout [ 90.709846][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.811766][ T5828] netlink: 'syz.3.9': attribute type 3 has an invalid length. [ 90.819724][ T5828] netlink: 'syz.3.9': attribute type 1 has an invalid length. [ 90.829302][ T5828] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9'. [ 90.865873][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.877522][ T136] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.880678][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.045312][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.054192][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.070827][ T5830] bridge0: entered allmulticast mode [ 91.088635][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.104472][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.177966][ T3371] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.233192][ T3305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.253517][ T3305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.278571][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.365865][ T5835] syzkaller0: entered promiscuous mode [ 91.385156][ T5835] syzkaller0: entered allmulticast mode [ 91.629407][ T3371] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.673968][ T5848] syzkaller0: entered promiscuous mode [ 91.683523][ T5848] syzkaller0: entered allmulticast mode [ 91.707568][ T3371] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.743186][ T5849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14'. [ 91.777586][ T3305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.779118][ T5844] netlink: 564 bytes leftover after parsing attributes in process `syz.2.13'. [ 91.914702][ T5858] Zero length message leads to an empty skb [ 91.917330][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.938187][ T5844] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 91.988299][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.988750][ T10] cfg80211: failed to load regulatory.db [ 92.264591][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18'. [ 92.376214][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18'. [ 92.412969][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.420909][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.497721][ T5882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'. [ 92.673018][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.685771][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.886810][ T307] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.919288][ T5892] netdevsim netdevsim3 €Â: renamed from netdevsim0 (while UP) [ 93.093064][ T5905] bond1: invalid NS target :: specified for addition [ 93.105513][ T5905] bond1: option ns_ip6_target: invalid value (18446744073709551615) [ 93.125197][ T5905] bond1 (unregistering): Released all slaves [ 93.307443][ T3371] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.311343][ T5913] can: request_module (can-proto-3) failed. [ 93.347604][ T3305] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.369985][ T3305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.648419][ T3305] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.674732][ T3305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.722675][ T5934] syz.3.33 uses obsolete (PF_INET,SOCK_PACKET) [ 94.129350][ T5955] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 94.150364][ T5711] hid-generic 0005:2C45:0008.0001: item fetching failed at offset 2/3 [ 94.181738][ T5711] hid-generic 0005:2C45:0008.0001: probe with driver hid-generic failed with error -22 [ 94.275752][ T5970] nbd: must specify at least one socket [ 94.951374][ T5998] openvswitch: netlink: Flow actions attr not present in new flow. [ 95.134442][ T6004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.589652][ T6023] Bluetooth: MGMT ver 1.23 [ 95.873451][ T6039] __nla_validate_parse: 2 callbacks suppressed [ 95.873472][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.60'. [ 95.934627][ T6039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.60'. [ 96.234271][ T6051] netlink: 24 bytes leftover after parsing attributes in process `syz.1.64'. [ 96.349392][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 97.953985][ T6123] netlink: 324 bytes leftover after parsing attributes in process `syz.2.73'. [ 98.082177][ T6128] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 98.188009][ T6132] netlink: 20 bytes leftover after parsing attributes in process `syz.0.80'. [ 98.858239][ T6165] syzkaller0: entered promiscuous mode [ 98.902064][ T6165] syzkaller0: entered allmulticast mode [ 98.978010][ T6169] tipc: Started in network mode [ 99.016749][ T6169] tipc: Node identity 461c200af11b, cluster identity 4711 [ 99.054963][ T6169] tipc: Enabled bearer , priority 0 [ 99.090311][ T6177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.93'. [ 99.105327][ T6174] netlink: 20 bytes leftover after parsing attributes in process `syz.0.92'. [ 99.130993][ T6177] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 99.260982][ T6151] tipc: Resetting bearer [ 99.322820][ T6151] tipc: Disabling bearer [ 99.713842][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 99.738136][ T6205] netlink: 292 bytes leftover after parsing attributes in process `syz.0.100'. [ 99.953263][ T6213] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.961321][ T6213] IPv6: NLM_F_CREATE should be set when creating new route [ 100.288662][ T6226] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 100.320067][ T6226] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 100.370511][ T6226] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 100.391721][ T6226] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.411229][ T6226] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 100.772552][ T6238] vlan0: entered promiscuous mode [ 100.920035][ T6258] netlink: 'syz.2.114': attribute type 4 has an invalid length. [ 100.965268][ T6258] __nla_validate_parse: 1 callbacks suppressed [ 100.965284][ T6258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.114'. [ 101.175752][ T6271] netlink: 56 bytes leftover after parsing attributes in process `syz.4.117'. [ 101.347711][ T13] smbdirect: ib_dev[syz2] removed [ 101.486956][ T6286] netlink: 84 bytes leftover after parsing attributes in process `syz.1.120'. [ 102.049147][ T47] IPVS: starting estimator thread 0... [ 102.069264][ T6311] bridge0: left allmulticast mode [ 102.166779][ T6321] IPVS: using max 42 ests per chain, 100800 per kthread [ 102.194393][ T307] tipc: Subscription rejected, illegal request [ 102.249416][ T6332] netlink: 'syz.2.131': attribute type 32 has an invalid length. [ 102.293791][ T6311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.360235][ T6311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.373400][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 102.395768][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 102.471017][ T6341] netlink: 'syz.1.132': attribute type 29 has an invalid length. [ 102.898414][ T6355] netlink: 92 bytes leftover after parsing attributes in process `syz.3.135'. [ 102.937191][ T307] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.960311][ T307] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.980770][ T307] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.039715][ T307] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.133132][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 103.159264][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.138'. [ 103.437248][ T6372] netlink: 'syz.2.142': attribute type 1 has an invalid length. [ 103.474491][ T6372] netlink: 'syz.2.142': attribute type 2 has an invalid length. [ 103.516355][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'. [ 103.599815][ T6390] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 103.615055][ T6390] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 103.815490][ T6400] netlink: 'syz.4.150': attribute type 39 has an invalid length. [ 103.908359][ T6408] macsec1: entered allmulticast mode [ 103.921503][ T6408] dummy0: entered allmulticast mode [ 103.957642][ T6408] dummy0: left allmulticast mode [ 104.008807][ T6414] netlink: 32 bytes leftover after parsing attributes in process `syz.3.153'. [ 104.034342][ T6416] syzkaller0: entered promiscuous mode [ 104.054663][ T6416] syzkaller0: entered allmulticast mode [ 104.482729][ T6433] syzkaller0: entered promiscuous mode [ 104.488584][ T6433] syzkaller0: entered allmulticast mode [ 105.562705][ T6469] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.577072][ T6481] netlink: 'syz.3.171': attribute type 1 has an invalid length. [ 105.780319][ T6460] xt_CT: No such helper "netbios-ns" [ 105.853876][ T6481] veth3: entered allmulticast mode [ 106.101966][ T6509] __nla_validate_parse: 2 callbacks suppressed [ 106.101984][ T6509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 106.224682][ T6515] xt_hashlimit: size too large, truncated to 1048576 [ 106.234837][ T6511] netlink: 'syz.0.181': attribute type 2 has an invalid length. [ 106.244973][ T6514] xt_hashlimit: size too large, truncated to 1048576 [ 106.576551][ T136] IPVS: starting estimator thread 0... [ 106.677010][ T6541] IPVS: using max 30 ests per chain, 72000 per kthread [ 106.944774][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.195'. [ 107.164020][ T6569] xt_TCPMSS: Only works on TCP SYN packets [ 107.380699][ T6572] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.445565][ T6572] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.560951][ T6582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.198'. [ 110.286821][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.200'. [ 110.358900][ T6604] team0: Port device bridge0 added [ 110.635775][ T6622] ieee802154 phy0 wpan0: encryption failed: -22 [ 111.159838][ T6633] tipc: Enabled bearer , priority 0 [ 111.217151][ T6631] syzkaller0: MTU too low for tipc bearer [ 111.239662][ T6631] tipc: Disabling bearer [ 111.489596][ T6642] netlink: 'syz.1.210': attribute type 83 has an invalid length. [ 111.624472][ T6645] RDS: rds_bind could not find a transport for fe80::a8, load rds_tcp or rds_rdma? [ 111.656459][ T6649] netlink: 'syz.3.211': attribute type 11 has an invalid length. [ 111.693636][ T6654] ip6t_srh: unknown srh match flags 4000 [ 111.694111][ T6649] netlink: 'syz.3.211': attribute type 4 has an invalid length. [ 111.699960][ T6656] ip6t_srh: unknown srh match flags 4000 [ 111.710463][ T6649] netlink: 224 bytes leftover after parsing attributes in process `syz.3.211'. [ 111.724589][ T6651] netlink: 'syz.3.211': attribute type 11 has an invalid length. [ 111.734594][ T6651] netlink: 'syz.3.211': attribute type 4 has an invalid length. [ 111.744735][ T6651] netlink: 224 bytes leftover after parsing attributes in process `syz.3.211'. [ 112.160793][ T6683] veth0_to_hsr: entered promiscuous mode [ 112.177797][ T6683] veth0_to_hsr: left promiscuous mode [ 112.218928][ T6689] xt_hashlimit: size too large, truncated to 1048576 [ 112.254523][ T6666] syz.2.216 (6666) used greatest stack depth: 17120 bytes left [ 112.423903][ T6702] netlink: 20 bytes leftover after parsing attributes in process `syz.2.223'. [ 112.435204][ T6701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.223'. [ 112.494883][ T6701] syzkaller0: entered promiscuous mode [ 112.525179][ T6701] syzkaller0: entered allmulticast mode [ 112.853832][ T6712] netlink: 16 bytes leftover after parsing attributes in process `syz.3.225'. [ 114.382472][ T6710] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 114.392370][ T6712] bond0: entered promiscuous mode [ 114.407320][ T6712] bond_slave_0: entered promiscuous mode [ 114.413208][ T6712] bond_slave_1: entered promiscuous mode [ 114.425834][ T6712] veth0_to_bridge: entered promiscuous mode [ 114.441173][ T6712] hsr1: entered promiscuous mode [ 114.452803][ T6724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.228'. [ 114.752483][ T6745] batman_adv: batadv0: Adding interface: netdevsim0 [ 114.770035][ T6745] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.823120][ T6745] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 114.851767][ T6750] xfrm1: entered allmulticast mode [ 114.862062][ T6752] netlink: 220 bytes leftover after parsing attributes in process `syz.3.238'. [ 115.437375][ T6785] netlink: 104 bytes leftover after parsing attributes in process `syz.1.247'. [ 115.777062][ T6807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.254'. [ 116.265853][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'. [ 116.786412][ T6861] netlink: 40 bytes leftover after parsing attributes in process `syz.4.265'. [ 117.707484][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'. [ 118.002100][ T6905] bridge0: port 3(bond0) entered blocking state [ 118.110103][ T6905] bridge0: port 3(bond0) entered disabled state [ 118.140779][ T6905] bond0: entered allmulticast mode [ 118.179330][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 118.191990][ T6905] bond_slave_0: entered allmulticast mode [ 118.271321][ T6905] bond_slave_1: entered allmulticast mode [ 118.313662][ T6933] netlink: 'syz.1.279': attribute type 30 has an invalid length. [ 118.319498][ T6905] bond0: entered promiscuous mode [ 118.350020][ T6905] bond_slave_0: entered promiscuous mode [ 118.356199][ T6905] bond_slave_1: entered promiscuous mode [ 118.451969][ T6924] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.459742][ T6924] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.559348][ T6924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.574564][ T6924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.732485][ T6933] vxlan0: entered promiscuous mode [ 118.743776][ T6933] vxlan0: entered allmulticast mode [ 118.817425][ T136] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.849592][ T136] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.866729][ T136] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.890879][ T136] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.906151][ T136] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.939239][ T136] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.974465][ T136] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.037315][ T307] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.058811][ T6965] syzkaller0: entered promiscuous mode [ 119.072465][ T6965] syzkaller0: entered allmulticast mode [ 119.514949][ T6994] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 119.594463][ T6994] bond1 (unregistering): Released all slaves [ 120.127008][ T7021] netlink: 'syz.4.288': attribute type 1 has an invalid length. [ 120.199896][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.288'. [ 120.781744][ T6921] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.823358][ T6971] netlink: 'syz.3.284': attribute type 1 has an invalid length. [ 120.901524][ T7031] netlink: 24 bytes leftover after parsing attributes in process `syz.1.289'. [ 121.176129][ T7035] bond1: Unable to set down delay as MII monitoring is disabled [ 121.209115][ T7035] bond1 (unregistering): Released all slaves [ 121.295480][ T7048] batman_adv: batadv0: Adding interface: macvtap1 [ 121.302496][ T7048] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.364542][ T7048] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 121.375224][ T7060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.420875][ T7062] xt_socket: unknown flags 0x4c [ 121.434660][ T7060] openvswitch: netlink: Missing key (keys=40, expected=100) [ 121.453733][ T7063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.295'. [ 121.458292][ T7062] netlink: 'syz.4.296': attribute type 2 has an invalid length. [ 121.698077][ T7070] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'. [ 121.740714][ T7077] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 121.791429][ T7085] netlink: 'syz.2.302': attribute type 3 has an invalid length. [ 121.821878][ T7086] netlink: 'syz.2.302': attribute type 3 has an invalid length. [ 122.004686][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 122.021890][ T7096] gretap1: entered allmulticast mode [ 122.220186][ T7107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.310'. [ 122.339895][ T7113] netlink: 564 bytes leftover after parsing attributes in process `syz.0.312'. [ 122.370791][ T7113] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 122.480175][ T7129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.314'. [ 122.579292][ T7133] netlink: 24 bytes leftover after parsing attributes in process `syz.0.316'. [ 122.756435][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'. [ 122.910338][ T7147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.321'. [ 123.008780][ T7145] syzkaller0: entered promiscuous mode [ 123.015055][ T7145] syzkaller0: entered allmulticast mode [ 123.843023][ T7182] netlink: 'syz.0.328': attribute type 1 has an invalid length. [ 124.984404][ T7182] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 125.048013][ T7188] netlink: 16 bytes leftover after parsing attributes in process `syz.1.329'. [ 125.064584][ T7192] syzkaller0: entered promiscuous mode [ 125.085825][ T7192] syzkaller0: entered allmulticast mode [ 125.232210][ T7199] netlink: 88 bytes leftover after parsing attributes in process `syz.4.335'. [ 125.286860][ T7202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.333'. [ 125.321982][ T7200] syzkaller0: entered promiscuous mode [ 125.341966][ T7200] syzkaller0: entered allmulticast mode [ 125.390331][ T7205] netlink: 'syz.2.332': attribute type 2 has an invalid length. [ 125.633583][ T7215] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 125.763996][ T7215] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 125.967950][ T7228] vlan2: entered promiscuous mode [ 125.978360][ T7228] vlan0: entered promiscuous mode [ 126.222193][ T7239] netlink: 'syz.3.347': attribute type 11 has an invalid length. [ 126.236889][ T7238] tipc: Started in network mode [ 126.244340][ T7238] tipc: Node identity aaaaaaaaaa22, cluster identity 4711 [ 126.252773][ T7238] tipc: Enabled bearer , priority 10 [ 126.802687][ T7269] netlink: 'syz.1.356': attribute type 39 has an invalid length. [ 127.378857][ T5711] tipc: Node number set to 8956586 [ 127.768268][ T7314] __nla_validate_parse: 14 callbacks suppressed [ 127.768283][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.368'. [ 128.041978][ T7325] team0: Device xfrm0 is of different type [ 128.138667][ T7325] tipc: Started in network mode [ 128.149643][ T7325] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 128.168827][ T7325] tipc: Enabled bearer , priority 0 [ 128.204659][ T7327] tipc: Enabling of bearer rejected, already enabled [ 128.238052][ T7328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.373'. [ 128.282470][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'. [ 128.301113][ T7328] hsr_slave_0: left promiscuous mode [ 128.318101][ T7328] hsr_slave_1: left promiscuous mode [ 128.578264][ T7362] netlink: 244 bytes leftover after parsing attributes in process `syz.2.380'. [ 128.752607][ T7370] netlink: 68 bytes leftover after parsing attributes in process `syz.2.385'. [ 128.797781][ T7373] netlink: 204 bytes leftover after parsing attributes in process `syz.3.383'. [ 129.019022][ T7378] netlink: 622 bytes leftover after parsing attributes in process `syz.4.384'. [ 129.232813][ T7349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.269385][ T7349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.693459][ T7374] batadv_slave_1: entered promiscuous mode [ 129.715176][ T7363] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '¸ŠŸ>úáÂN9Ü5äx×Ùhˉ½p¡þàn [ 129.738613][ T47] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.773314][ T47] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.815189][ T5719] tipc: Node number set to 11578026 [ 129.881144][ T7377] batadv_slave_1: left promiscuous mode [ 129.947365][ T136] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.978237][ T136] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.999844][ T136] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.038744][ T136] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.080961][ T136] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.105930][ T7399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.391'. [ 130.117382][ T136] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.142844][ T7399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.391'. [ 130.184562][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'. [ 130.347996][ T7412] syzkaller0: entered promiscuous mode [ 130.365737][ T7412] syzkaller0: entered allmulticast mode [ 130.765775][ T7425] geneve2: entered promiscuous mode [ 130.957246][ T7439] netlink: 'syz.2.400': attribute type 83 has an invalid length. [ 131.094231][ T7446] bridge0: port 3(veth0) entered blocking state [ 131.118959][ T7446] bridge0: port 3(veth0) entered disabled state [ 131.140975][ T7446] veth0: entered allmulticast mode [ 131.166649][ T7446] veth0: entered promiscuous mode [ 131.256309][ T7455] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 131.319441][ T7462] warning: `syz.3.405' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 131.376255][ T7453] tipc: Enabling of bearer rejected, failed to enable media [ 131.425802][ T7453] veth0: entered promiscuous mode [ 131.440971][ T7453] veth0: entered allmulticast mode [ 132.630732][ T7528] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 132.734226][ T7532] sctp: [Deprecated]: syz.0.425 (pid 7532) Use of int in max_burst socket option. [ 132.734226][ T7532] Use struct sctp_assoc_value instead [ 132.804756][ T7532] netlink: 'syz.0.425': attribute type 3 has an invalid length. [ 132.923189][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.933927][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.099589][ T7550] __nla_validate_parse: 12 callbacks suppressed [ 133.099605][ T7550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.433'. [ 134.060372][ T7584] netlink: 'syz.3.443': attribute type 11 has an invalid length. [ 134.075871][ T7584] netlink: 4320 bytes leftover after parsing attributes in process `syz.3.443'. [ 135.013095][ T7607] netlink: 20 bytes leftover after parsing attributes in process `syz.3.448'. [ 135.175982][ T7620] netlink: 'syz.1.452': attribute type 1 has an invalid length. [ 135.267356][ T7630] netlink: 'syz.4.454': attribute type 5 has an invalid length. [ 135.299428][ T7620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.507450][ T7637] bond1: (slave dummy0): making interface the new active one [ 135.520223][ T7637] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 135.754181][ T7642] netlink: 28 bytes leftover after parsing attributes in process `syz.4.457'. [ 136.147405][ T7661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.461'. [ 136.293535][ T7671] bond1: (slave dummy0): Releasing active interface [ 136.329815][ T7673] netlink: 'syz.3.464': attribute type 58 has an invalid length. [ 136.365801][ T7673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.464'. [ 136.377188][ T7671] bridge_slave_0: left allmulticast mode [ 136.392801][ T7671] bridge_slave_0: left promiscuous mode [ 136.404767][ T7671] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.415347][ T7671] bridge_slave_1: left allmulticast mode [ 136.421353][ T7671] bridge_slave_1: left promiscuous mode [ 136.428785][ T7671] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.439991][ T7671] bond0: (slave bond_slave_0): Releasing backup interface [ 136.449901][ T7671] bond0: (slave bond_slave_1): Releasing backup interface [ 136.462515][ T7671] team0: Port device team_slave_0 removed [ 136.470842][ T7671] team0: Port device team_slave_1 removed [ 136.477318][ T7671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.489366][ T7671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.497700][ T7671] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 136.891737][ T7702] syzkaller0: entered promiscuous mode [ 136.904995][ T7703] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 136.906553][ T7702] syzkaller0: entered allmulticast mode [ 137.105711][ T7712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.475'. [ 137.119883][ T7713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.475'. [ 137.194074][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'. [ 137.206025][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'. [ 137.254122][ T7724] netlink: 'syz.2.478': attribute type 30 has an invalid length. [ 137.588915][ T7745] lo: entered promiscuous mode [ 137.617150][ T7745] tunl0: entered promiscuous mode [ 137.646384][ T7745] gre0: entered promiscuous mode [ 137.662939][ T7745] gretap0: entered promiscuous mode [ 137.669050][ T7745] erspan0: entered promiscuous mode [ 137.674702][ T7745] ip_vti0: entered promiscuous mode [ 137.681105][ T7745] ip6_vti0: entered promiscuous mode [ 137.701002][ T7745] sit0: entered promiscuous mode [ 137.708048][ T7745] ip6tnl0: entered promiscuous mode [ 137.714188][ T7745] ip6gre0: entered promiscuous mode [ 137.725526][ T7745] syz_tun: entered promiscuous mode [ 137.738459][ T7745] ip6gretap0: entered promiscuous mode [ 137.759562][ T7745] bridge0: entered promiscuous mode [ 137.775681][ T7745] vcan0: entered promiscuous mode [ 137.810239][ T7745] bond0: entered promiscuous mode [ 137.832803][ T7745] team0: entered promiscuous mode [ 137.840810][ T7745] dummy0: entered promiscuous mode [ 137.868027][ T7745] nlmon0: entered promiscuous mode [ 137.880909][ T7745] batadv0: entered promiscuous mode [ 137.898603][ T7745] vxcan0: entered promiscuous mode [ 137.911276][ T7745] vxcan1: entered promiscuous mode [ 137.943020][ T7745] veth0: entered promiscuous mode [ 137.952698][ T7745] veth1: entered promiscuous mode [ 137.960963][ T7745] wg0: entered promiscuous mode [ 137.968310][ T7745] wg2: entered promiscuous mode [ 137.974962][ T7745] veth0_to_bridge: entered promiscuous mode [ 137.982930][ T7745] bridge_slave_0: entered promiscuous mode [ 137.989443][ T7745] veth1_to_bridge: entered promiscuous mode [ 137.995937][ T7745] bridge_slave_1: entered promiscuous mode [ 138.003132][ T7745] veth0_to_bond: entered promiscuous mode [ 138.012517][ T7745] bond_slave_0: entered promiscuous mode [ 138.021546][ T7745] veth1_to_bond: entered promiscuous mode [ 138.028254][ T7745] bond_slave_1: entered promiscuous mode [ 138.047990][ T7745] veth0_to_team: entered promiscuous mode [ 138.054922][ T7745] team_slave_0: entered promiscuous mode [ 138.062207][ T7745] veth1_to_team: entered promiscuous mode [ 138.069220][ T7745] team_slave_1: entered promiscuous mode [ 138.079396][ T7768] netlink: 'syz.4.482': attribute type 1 has an invalid length. [ 138.089471][ T7745] veth0_to_batadv: entered promiscuous mode [ 138.097644][ T7745] batadv_slave_0: entered promiscuous mode [ 138.112135][ T7745] veth1_to_batadv: entered promiscuous mode [ 138.119565][ T7745] batadv_slave_1: entered promiscuous mode [ 138.127580][ T7745] xfrm0: entered promiscuous mode [ 138.135694][ T7745] veth0_to_hsr: entered promiscuous mode [ 138.154106][ T7745] veth1_to_hsr: entered promiscuous mode [ 138.211029][ T7773] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 138.250768][ T7758] netlink: 'syz.4.482': attribute type 39 has an invalid length. [ 138.251717][ T7752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.301581][ T7760] netlink: 'syz.4.482': attribute type 10 has an invalid length. [ 138.328500][ T7760] __nla_validate_parse: 1 callbacks suppressed [ 138.328518][ T7760] netlink: 40 bytes leftover after parsing attributes in process `syz.4.482'. [ 138.438534][ T7760] dummy0: entered promiscuous mode [ 139.684297][ T7847] netlink: 24 bytes leftover after parsing attributes in process `syz.2.504'. [ 139.699647][ T7844] syzkaller0: entered promiscuous mode [ 139.720400][ T7844] syzkaller0: entered allmulticast mode [ 139.743128][ T7850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.776058][ T7844] tipc: Started in network mode [ 139.792619][ T7844] tipc: Node identity ae4301cfa4cd, cluster identity 4711 [ 139.806935][ T7844] tipc: Enabled bearer , priority 0 [ 139.850664][ T7844] tipc: Resetting bearer [ 139.926395][ T7843] tipc: Resetting bearer [ 139.967378][ T7843] tipc: Disabling bearer [ 139.989080][ T7861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.507'. [ 140.006603][ T7861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.507'. [ 140.024001][ T7855] syzkaller0: entered promiscuous mode [ 140.031909][ T7855] syzkaller0: entered allmulticast mode [ 140.049741][ T7861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.507'. [ 140.059400][ T7861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.507'. [ 140.072245][ T7861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.507'. [ 140.101548][ T7861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.507'. [ 140.368430][ T7881] x_tables: duplicate underflow at hook 1 [ 140.557873][ T7895] netlink: 56 bytes leftover after parsing attributes in process `syz.3.517'. [ 140.588907][ T7899] netlink: 112 bytes leftover after parsing attributes in process `syz.2.518'. [ 141.230745][ T7928] vlan2: entered promiscuous mode [ 141.253552][ T7928] bridge0: entered promiscuous mode [ 141.583617][ T7965] netlink: 'syz.1.535': attribute type 4 has an invalid length. [ 141.598732][ T7965] netlink: 'syz.1.535': attribute type 4 has an invalid length. [ 141.606754][ T7966] netlink: 'syz.1.535': attribute type 4 has an invalid length. [ 141.620997][ T7965] lo: left promiscuous mode [ 141.988645][ T7979] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 142.322933][ T7997] netdevsim netdevsim2: Direct firmware load for á failed with error -2 [ 142.362321][ T7997] netdevsim netdevsim2: Falling back to sysfs fallback for: á [ 143.644974][ T8053] __nla_validate_parse: 11 callbacks suppressed [ 143.644990][ T8053] netlink: 112 bytes leftover after parsing attributes in process `syz.4.560'. [ 143.697300][ T8053] syzkaller1: entered promiscuous mode [ 143.734443][ T8053] syzkaller1: entered allmulticast mode [ 143.750267][ T8054] netlink: 'syz.4.560': attribute type 2 has an invalid length. [ 143.866698][ T8061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.563'. [ 143.917225][ T8056] netlink: 'syz.2.562': attribute type 6 has an invalid length. [ 144.097260][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.565'. [ 144.128571][ T8069] netlink: 'syz.4.567': attribute type 1 has an invalid length. [ 144.285431][ T8073] netlink: 'syz.3.568': attribute type 1 has an invalid length. [ 144.379420][ T8076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.568'. [ 144.432012][ T8073] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.458430][ T8088] bond2: (slave veth0_to_bond): making interface the new active one [ 144.471627][ T8088] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 144.517989][ T8073] bond2: entered promiscuous mode [ 144.529300][ T8073] veth0_to_bond: entered promiscuous mode [ 144.547222][ T8073] bond2: entered allmulticast mode [ 144.566834][ T8073] veth0_to_bond: entered allmulticast mode [ 144.970289][ T8102] netlink: 252 bytes leftover after parsing attributes in process `syz.3.575'. [ 144.980288][ T8102] netlink: 252 bytes leftover after parsing attributes in process `syz.3.575'. [ 145.016918][ T8102] sctp: [Deprecated]: syz.3.575 (pid 8102) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.016918][ T8102] Use struct sctp_sack_info instead [ 145.096374][ T8107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.573'. [ 145.126438][ T8107] netlink: 60 bytes leftover after parsing attributes in process `syz.1.573'. [ 145.197079][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.579'. [ 145.408878][ T8112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.578'. [ 147.437063][ T8151] syzkaller0: entered promiscuous mode [ 147.442909][ T8151] syzkaller0: entered allmulticast mode [ 148.497068][ T8122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 148.508047][ T8127] netlink: 'syz.0.581': attribute type 4 has an invalid length. [ 148.520106][ T8127] netlink: 'syz.0.581': attribute type 8 has an invalid length. [ 148.710852][ T8177] __nla_validate_parse: 3 callbacks suppressed [ 148.710867][ T8177] netlink: 52 bytes leftover after parsing attributes in process `syz.1.593'. [ 148.967340][ T8179] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 149.313591][ T8192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.371317][ T8195] netlink: 20 bytes leftover after parsing attributes in process `syz.1.596'. [ 149.428496][ T8192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.474528][ T8192] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 149.629138][ T8192] bond0 (unregistering): Released all slaves [ 149.874764][ T8179] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 149.888577][ T8179] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 149.914996][ T8179] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 149.939988][ T8179] netdevsim netdevsim4 netdevsim0: refused to change device tx_queue_len [ 149.958096][ T8194] tipc: Started in network mode [ 149.975593][ T8194] tipc: Node identity , cluster identity 4711 [ 149.992645][ T8194] tipc: Failed to obtain node identity [ 150.025010][ T8194] tipc: Enabling of bearer rejected, failed to enable media [ 150.064856][ T8208] ip6tnl1: entered allmulticast mode [ 150.079052][ T8209] netlink: 'syz.0.600': attribute type 1 has an invalid length. [ 150.117457][ T8209] netlink: 224 bytes leftover after parsing attributes in process `syz.0.600'. [ 150.321822][ T8223] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 150.881889][ T8246] ip_tables: iptables: counters copy to user failed while replacing table [ 150.911560][ T8246] netlink: 'syz.0.608': attribute type 11 has an invalid length. [ 151.300320][ T307] IPVS: starting estimator thread 0... [ 151.317729][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 151.406601][ T8256] IPVS: using max 33 ests per chain, 79200 per kthread [ 151.488555][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.611'. [ 151.537900][ T8259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.611'. [ 151.558419][ T8255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.567728][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.611'. [ 151.596819][ T8262] netlink: 24 bytes leftover after parsing attributes in process `syz.4.611'. [ 151.923252][ T8265] syzkaller0: entered promiscuous mode [ 151.932682][ T8265] syzkaller0: entered allmulticast mode [ 151.973929][ T8277] netlink: 'syz.4.619': attribute type 6 has an invalid length. [ 151.988580][ T8277] netlink: 'syz.4.619': attribute type 7 has an invalid length. [ 151.998110][ T8277] netlink: 'syz.4.619': attribute type 8 has an invalid length. [ 152.006848][ T8270] syzkaller1: entered promiscuous mode [ 152.012939][ T8270] syzkaller1: entered allmulticast mode [ 152.878385][ T8315] netlink: 36 bytes leftover after parsing attributes in process `syz.0.628'. [ 153.626770][ T5611] Bluetooth: hci4: command tx timeout [ 154.388459][ T8313] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.395565][ T8313] tipc: Resetting bearer [ 154.401846][ T8313] dummy0: left promiscuous mode [ 154.443760][ T8313] bond_slave_0: entered promiscuous mode [ 154.455470][ T8313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.467289][ T8313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 154.478333][ T8313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.492036][ T8313] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 154.517687][ T8322] gretap0: entered promiscuous mode [ 154.525129][ T8322] macsec1: entered allmulticast mode [ 154.530627][ T8322] gretap0: entered allmulticast mode [ 154.541377][ T8322] gretap0: left allmulticast mode [ 154.556604][ T8322] gretap0: left promiscuous mode [ 154.568308][ T8331] netlink: 'syz.4.633': attribute type 1 has an invalid length. [ 154.736174][ T8341] sock: sock_timestamping_bind_phc: sock not bind to device [ 154.749659][ T8341] netlink: 'syz.3.636': attribute type 2 has an invalid length. [ 154.771832][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.779055][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.808415][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.815587][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.839107][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.633'. [ 154.845784][ T8347] netlink: 'syz.0.637': attribute type 10 has an invalid length. [ 154.849712][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.633'. [ 154.911836][ T8331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.943744][ T8341] : entered promiscuous mode [ 154.955207][ T8342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.965326][ T8342] bond0: (slave batadv0): making interface the new active one [ 154.974621][ T8342] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 155.040538][ T8345] bond1: option broadcast_neighbor: invalid value (3) [ 155.049145][ T8345] bond1 (unregistering): Released all slaves [ 155.055845][ T8356] netlink: 'syz.0.638': attribute type 1 has an invalid length. [ 155.079984][ T8356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.638'. [ 155.749607][ T8389] netlink: 56 bytes leftover after parsing attributes in process `syz.2.649'. [ 157.112245][ T8391] pim6reg0: tun_chr_ioctl cmd 35111 [ 157.297419][ T8419] sctp: [Deprecated]: syz.0.656 (pid 8419) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.297419][ T8419] Use struct sctp_sack_info instead [ 157.327844][ T8414] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 157.340079][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.655'. [ 157.362094][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.655'. [ 157.394121][ T5611] Bluetooth: hci4: link tx timeout [ 157.401713][ T5611] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 157.482340][ T8422] netlink: 60 bytes leftover after parsing attributes in process `syz.2.657'. [ 157.513173][ T8422] netlink: 60 bytes leftover after parsing attributes in process `syz.2.657'. [ 157.705406][ T8441] hsr0: entered promiscuous mode [ 157.764151][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.4.661'. [ 159.468405][ T5611] Bluetooth: hci4: command 0x0406 tx timeout [ 160.324857][ T8442] hsr_slave_0: left promiscuous mode [ 160.356125][ T8442] hsr_slave_1: left promiscuous mode [ 162.030451][ T8466] pim6reg: entered allmulticast mode [ 162.053147][ T8466] pim6reg: left allmulticast mode [ 162.120280][ T12] IPVS: starting estimator thread 0... [ 162.135853][ T8473] IPVS: ip_vs_add_dest(): server weight less than zero [ 162.161546][ T8473] IPVS: rr: UDP 127.0.0.1:10000 - no destination available [ 162.238239][ T8474] IPVS: using max 39 ests per chain, 93600 per kthread [ 162.336426][ T8487] sctp: [Deprecated]: syz.3.677 (pid 8487) Use of int in max_burst socket option. [ 162.336426][ T8487] Use struct sctp_assoc_value instead [ 162.379510][ T8486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.676'. [ 162.484318][ T8498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.678'. [ 162.584074][ T8503] netlink: 'syz.1.680': attribute type 4 has an invalid length. [ 162.627187][ T8503] netlink: 17 bytes leftover after parsing attributes in process `syz.1.680'. [ 162.650175][ T8506] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 163.118813][ T8528] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 163.563460][ T8557] netlink: 156 bytes leftover after parsing attributes in process `syz.3.695'. [ 163.763926][ T8565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.699'. [ 164.074187][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'. [ 164.299961][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.706'. [ 164.385630][ T8594] netlink: 40 bytes leftover after parsing attributes in process `syz.3.706'. [ 164.418753][ T8599] netlink: 220 bytes leftover after parsing attributes in process `syz.0.708'. [ 164.436692][ T8599] tc_dump_action: action bad kind [ 164.951207][ T8622] netlink: 'syz.2.715': attribute type 1 has an invalid length. [ 165.130717][ T8626] veth3: entered allmulticast mode [ 165.169034][ T8626] bond2: (slave veth3): Enslaving as an active interface with a down link [ 165.234131][ T8635] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 165.484754][ T8651] netlink: 'syz.3.721': attribute type 3 has an invalid length. [ 165.588002][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'. [ 166.997335][ T8732] netlink: 'syz.1.739': attribute type 24 has an invalid length. [ 170.774973][ T8792] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.821175][ T8792] __nla_validate_parse: 171 callbacks suppressed [ 170.821194][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.749'. [ 170.844916][ T8789] tc_dump_action: action bad kind [ 170.892015][ T8802] netlink: 'syz.3.749': attribute type 5 has an invalid length. [ 170.941597][ T8789] netlink: 'syz.1.748': attribute type 1 has an invalid length. [ 170.947430][ T8790] netlink: 'syz.1.748': attribute type 1 has an invalid length. [ 170.997994][ T8790] bond2: entered promiscuous mode [ 171.003638][ T8790] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.023986][ T8806] syzkaller0: entered promiscuous mode [ 171.029672][ T8806] syzkaller0: entered allmulticast mode [ 171.039792][ T8806] netlink: 'syz.4.752': attribute type 13 has an invalid length. [ 171.047684][ T8806] netlink: 'syz.4.752': attribute type 17 has an invalid length. [ 171.083522][ T8814] netlink: 104 bytes leftover after parsing attributes in process `syz.3.754'. [ 171.151741][ T8821] netlink: 36 bytes leftover after parsing attributes in process `syz.0.756'. [ 171.184714][ T8806] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 171.569627][ T8839] netlink: 'syz.2.761': attribute type 11 has an invalid length. [ 171.589330][ T8839] netlink: 224 bytes leftover after parsing attributes in process `syz.2.761'. [ 171.617689][ T8838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.974664][ T8872] PF_CAN: dropped non conform CAN XL skbuff: dev type 23, len 40 [ 172.053251][ T8876] Bluetooth: MGMT ver 1.23 [ 172.121278][ T8879] netlink: 'syz.4.773': attribute type 7 has an invalid length. [ 172.158461][ T8875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.772'. [ 172.172891][ T8875] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 172.185562][ T8875] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 172.196025][ T8875] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 172.214696][ T8879] netlink: 36 bytes leftover after parsing attributes in process `syz.4.773'. [ 172.336378][ T8888] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.602544][ T8902] netlink: 36 bytes leftover after parsing attributes in process `syz.1.777'. [ 172.695049][ T8911] erspan0: entered promiscuous mode [ 172.710418][ T8911] erspan0: entered allmulticast mode [ 172.975684][ T8921] vlan2: entered allmulticast mode [ 172.990000][ T8921] bridge_slave_0: entered allmulticast mode [ 173.168467][ T8932] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 173.312693][ T8952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.346302][ T8955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.358817][ T8959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.819372][ T8980] netlink: 5 bytes leftover after parsing attributes in process `syz.2.794'. [ 175.127790][ T9018] ip_tables: iptables: counters copy to user failed while replacing table [ 175.461907][ T9033] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 176.923695][ T8991] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 177.146818][ T9040] netlink: 'syz.1.811': attribute type 1 has an invalid length. [ 177.166691][ T9040] netlink: 40 bytes leftover after parsing attributes in process `syz.1.811'. [ 177.207437][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.811'. [ 177.297710][ T9052] netlink: 'syz.1.811': attribute type 10 has an invalid length. [ 177.318454][ T9052] vxcan0: left promiscuous mode [ 177.331939][ T9052] vxcan0: entered promiscuous mode [ 177.350417][ T9052] team0: Port device vxcan0 added [ 177.578573][ T9066] syzkaller0: entered promiscuous mode [ 177.584880][ T9066] syzkaller0: entered allmulticast mode [ 178.092537][ T9090] can: request_module (can-proto-0) failed. [ 178.173955][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.826'. [ 178.239055][ T9098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.826'. [ 178.277813][ T9103] netlink: 72 bytes leftover after parsing attributes in process `syz.2.829'. [ 178.331734][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.829'. [ 178.413574][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.827'. [ 178.908283][ T47] IPVS: starting estimator thread 0... [ 179.006811][ T9144] IPVS: using max 34 ests per chain, 81600 per kthread [ 179.605837][ T9178] netlink: 'syz.4.847': attribute type 1 has an invalid length. [ 179.617804][ T9178] netlink: 'syz.4.847': attribute type 7 has an invalid length. [ 179.625958][ T9178] netlink: 'syz.4.847': attribute type 8 has an invalid length. [ 179.669008][ T9178] netlink: 'syz.4.847': attribute type 1 has an invalid length. [ 179.685070][ T9181] netlink: 52 bytes leftover after parsing attributes in process `syz.0.848'. [ 179.695672][ T9178] netlink: 96 bytes leftover after parsing attributes in process `syz.4.847'. [ 179.732787][ T9183] tipc: Enabling of bearer rejected, failed to enable media [ 179.853104][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.851'. [ 179.883494][ T9189] ieee802154 phy0 wpan0: encryption failed: -22 [ 180.389208][ T9201] hsr_slave_0: left promiscuous mode [ 180.401941][ T9201] hsr_slave_1: left promiscuous mode [ 180.438225][ T30] audit: type=1804 audit(1787645091.374:2): pid=9224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.861" name=2F6E6577726F6F742F3137332FB702 dev="tmpfs" ino=900 res=1 errno=0 [ 180.512883][ T30] audit: type=1800 audit(1787645091.404:3): pid=9224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.861" name=B702 dev="tmpfs" ino=900 res=0 errno=0 [ 181.896811][ T9320] syzkaller0: entered promiscuous mode [ 181.926215][ T9320] syzkaller0: entered allmulticast mode [ 181.964941][ T9329] netlink: 'syz.2.884': attribute type 7 has an invalid length. [ 182.012190][ T9332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.025673][ T9333] netlink: 'syz.2.884': attribute type 7 has an invalid length. [ 182.079002][ T9329] nbd: must specify a size in bytes for the device [ 182.153301][ T9339] netlink: 'syz.1.885': attribute type 13 has an invalid length. [ 182.223834][ T9340] __nla_validate_parse: 18 callbacks suppressed [ 182.223851][ T9340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'. [ 182.254333][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'. [ 182.304133][ T9345] netlink: 14 bytes leftover after parsing attributes in process `syz.2.887'. [ 182.367489][ T9352] netlink: 'syz.2.887': attribute type 1 has an invalid length. [ 182.642078][ T9352] bond3: entered promiscuous mode [ 182.658771][ T9362] netdevsim netdevsim4: Direct firmware load for .® failed with error -2 [ 182.669239][ T9362] netdevsim netdevsim4: Falling back to sysfs fallback for: .® [ 182.698844][ T9352] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.721538][ T9364] IPVS: nq: FWM 3 0x00000003 - no destination available [ 183.160067][ T9388] netlink: 'syz.1.895': attribute type 13 has an invalid length. [ 183.175121][ T9388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.895'. [ 183.232581][ T9388] bond_slave_0: entered allmulticast mode [ 183.476230][ T9405] netlink: 20 bytes leftover after parsing attributes in process `syz.2.900'. [ 183.517738][ T9405] netlink: 20 bytes leftover after parsing attributes in process `syz.2.900'. [ 183.546331][ T9407] No such timeout policy "syz0" [ 183.562238][ T9400] syzkaller0: entered promiscuous mode [ 183.586054][ T9400] syzkaller0: entered allmulticast mode [ 183.817865][ T9420] No such timeout policy "syz1" [ 186.339384][ T9482] IPVS: nq: FWM 3 0x00000003 - no destination available [ 186.445642][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.912'. [ 186.539557][ T9489] netlink: 60 bytes leftover after parsing attributes in process `syz.4.914'. [ 186.586091][ T9486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.001110][ T9500] netlink: 72 bytes leftover after parsing attributes in process `syz.4.918'. [ 187.018675][ T9501] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.915'. [ 187.674421][ T9546] netlink: 32 bytes leftover after parsing attributes in process `syz.0.926'. [ 187.745444][ T9546] netlink: 32 bytes leftover after parsing attributes in process `syz.0.926'. [ 187.761241][ T9546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.926'. [ 187.809899][ T9546] netlink: 16 bytes leftover after parsing attributes in process `syz.0.926'. [ 188.064132][ T30] audit: type=1800 audit(1787645098.994:4): pid=9565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.930" name="r" dev="tmpfs" ino=859 res=0 errno=0 [ 188.249596][ T9576] tipc: Enabling not permitted [ 188.267562][ T9576] tipc: Enabling of bearer rejected, failed to enable media [ 188.373727][ T9576] bridge2: entered promiscuous mode [ 188.404510][ T9576] bridge2: entered allmulticast mode [ 188.498522][ T9582] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 188.531552][ T9582] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 189.511896][ T9642] netlink: 'syz.0.947': attribute type 1 has an invalid length. [ 189.580895][ T9647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.951'. [ 189.660158][ T9647] netlink: 136 bytes leftover after parsing attributes in process `syz.3.951'. [ 189.685189][ T9647] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 189.733176][ T9647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.951'. [ 189.757913][ T9656] netlink: 'syz.0.954': attribute type 1 has an invalid length. [ 189.814171][ T9655] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20000 [ 189.825959][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.955'. [ 189.826284][ T9660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.954'. [ 189.878608][ T9655] syzkaller1: entered promiscuous mode [ 189.885154][ T9655] syzkaller1: entered allmulticast mode [ 189.894054][ T9660] 8021q: adding VLAN 0 to HW filter on device bond4 [ 190.088300][ T9674] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 190.313894][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.962'. [ 190.458986][ T9691] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 190.512669][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.519902][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.976010][ T9738] ip_tables: iptables: counters copy to user failed while replacing table [ 191.507243][ T9755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.524106][ T9715] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.740040][ T9757] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 191.769962][ T9757] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 192.287020][ T9798] netlink: 'syz.1.991': attribute type 3 has an invalid length. [ 192.678599][ T9820] vxcan3: entered promiscuous mode [ 193.131841][ T9834] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.233693][ T9834] bridge_slave_1 (unregistering): left allmulticast mode [ 193.242442][ T9834] bridge_slave_1 (unregistering): left promiscuous mode [ 193.251365][ T9834] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.276290][ T9843] __nla_validate_parse: 10 callbacks suppressed [ 193.276309][ T9843] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1003'. [ 193.319830][ T9843] unsupported nlmsg_type 40 [ 193.332629][ T9846] netlink: 'syz.1.1005': attribute type 1 has an invalid length. [ 193.365387][ T9846] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1005'. [ 193.493622][ T9842] syzkaller1: entered promiscuous mode [ 193.529333][ T9842] syzkaller1: entered allmulticast mode [ 193.827561][ T9877] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1012'. [ 193.860341][ T9875] netlink: 'syz.0.1013': attribute type 1 has an invalid length. [ 193.950894][ T9875] bond5: entered promiscuous mode [ 193.956777][ T9875] 8021q: adding VLAN 0 to HW filter on device bond5 [ 193.993641][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1013'. [ 194.032918][ T9888] syzkaller1: entered promiscuous mode [ 194.038838][ T9888] syzkaller1: entered allmulticast mode [ 194.060427][ T9875] bond5 (unregistering): Released all slaves [ 194.104889][ T9885] xt_CT: No such helper "syz0" [ 194.350575][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.394197][ T9910] syzkaller0: entered promiscuous mode [ 194.424095][ T9910] syzkaller0: entered allmulticast mode [ 194.466595][ T9916] tunl0: left promiscuous mode [ 194.484699][ T9916] gre0: left promiscuous mode [ 194.491237][ T9918] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1022'. [ 194.504933][ T9916] gretap0: left promiscuous mode [ 194.514533][ T9916] erspan0: left promiscuous mode [ 194.521562][ T9916] ip_vti0: left promiscuous mode [ 194.527614][ T9916] ip6_vti0: left promiscuous mode [ 194.533220][ T9916] sit0: left promiscuous mode [ 194.540240][ T9916] ip6tnl0: left promiscuous mode [ 194.546016][ T9916] ip6gre0: left promiscuous mode [ 194.551821][ T9916] syz_tun: left promiscuous mode [ 194.557683][ T9916] ip6gretap0: left promiscuous mode [ 194.563895][ T9916] vcan0: left promiscuous mode [ 194.569971][ T9916] bond0: left promiscuous mode [ 194.575572][ T9916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.582921][ T9916] team0: left promiscuous mode [ 194.588030][ T9916] vxcan0: left promiscuous mode [ 194.593641][ T9916] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.601138][ T9916] dummy0: left promiscuous mode [ 194.607349][ T9916] nlmon0: left promiscuous mode [ 194.612958][ T9916] batadv0: left promiscuous mode [ 194.618615][ T9916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.626650][ T9916] vxcan1: left promiscuous mode [ 194.632335][ T9916] veth0: left promiscuous mode [ 194.638939][ T9916] veth1: left promiscuous mode [ 194.645380][ T9916] wg0: left promiscuous mode [ 194.651576][ T9916] wg2: left promiscuous mode [ 194.657126][ T9916] veth0_to_bridge: left promiscuous mode [ 194.663515][ T9916] bridge_slave_0: left promiscuous mode [ 194.669842][ T9916] veth1_to_bridge: left promiscuous mode [ 194.676518][ T9916] bridge_slave_1: left promiscuous mode [ 194.682866][ T9916] veth0_to_bond: left promiscuous mode [ 194.690073][ T9916] veth1_to_bond: left promiscuous mode [ 194.696716][ T9916] bond_slave_1: left promiscuous mode [ 194.702793][ T9916] veth0_to_team: left promiscuous mode [ 194.709368][ T9916] team_slave_0: left promiscuous mode [ 194.715271][ T9916] veth1_to_team: left promiscuous mode [ 194.721762][ T9916] team_slave_1: left promiscuous mode [ 194.727871][ T9916] veth0_to_batadv: left promiscuous mode [ 194.734249][ T9916] batadv_slave_0: left promiscuous mode [ 194.741124][ T9916] xfrm0: left promiscuous mode [ 194.747122][ T9916] veth0_to_hsr: left promiscuous mode [ 194.753888][ T9916] veth1_to_hsr: left promiscuous mode [ 194.760843][ T9916] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.771355][ T9916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.784307][ T9916] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 194.809935][ T9918] macvlan2: entered allmulticast mode [ 194.817933][ T9918] syz_tun: entered allmulticast mode [ 194.824713][ T9918] syz_tun: left allmulticast mode [ 195.133239][ T9936] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 196.201887][ T9964] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 196.271630][ T9965] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1036'. [ 196.920661][ T9889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 197.171111][ T9979] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1041'. [ 197.189646][ T9980] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1038'. [ 197.190063][ T9979] netlink: 'syz.4.1041': attribute type 7 has an invalid length. [ 197.209392][ T9979] netlink: 'syz.4.1041': attribute type 8 has an invalid length. [ 197.225749][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1041'. [ 197.404949][ T9990] netdevsim netdevsim2: Direct firmware load for .® failed with error -2 [ 197.459157][ T9990] netdevsim netdevsim2: Falling back to sysfs fallback for: .® [ 197.760037][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1050'. [ 198.384493][T10044] __nla_validate_parse: 1 callbacks suppressed [ 198.384509][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1060'. [ 198.405918][T10044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1060'. [ 198.427335][T10044] netlink: 'syz.1.1060': attribute type 11 has an invalid length. [ 198.444204][T10044] netlink: 'syz.1.1060': attribute type 13 has an invalid length. [ 198.554308][T10064] netlink: 'syz.2.1064': attribute type 1 has an invalid length. [ 198.923801][T10083] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1069'. [ 198.994157][T10088] netlink: 'syz.4.1070': attribute type 1 has an invalid length. [ 199.182622][T10099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1073'. [ 199.225956][T10099] erspan1: entered allmulticast mode [ 199.303361][T10101] syz.2.1073 (10101) used obsolete PPPIOCDETACH ioctl [ 199.316239][T10103] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1076'. [ 199.329238][T10103] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1076'. [ 199.551322][T10116] dvmrp8: entered allmulticast mode [ 199.772042][T10133] ip_tables: iptables: counters copy to user failed while replacing table [ 199.782918][T10130] tipc: Cannot configure node identity twice [ 199.806338][T10130] tipc: New replicast peer: 127.0.0.2 [ 199.813702][T10130] tipc: Enabled bearer , priority 5 [ 199.944004][T10144] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1086'. [ 200.220082][T10148] xt_CT: No such helper "syz0" [ 200.227400][T10150] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1087'. [ 200.603341][T10182] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1095'. [ 200.615218][T10182] netlink: 'syz.4.1095': attribute type 9 has an invalid length. [ 200.630399][T10182] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1095'. [ 200.779662][T10182] nbd0: detected capacity change from 0 to 63 [ 200.797360][T10184] block nbd4: not configured, cannot reconfigure [ 200.819285][ T5617] block nbd0: Receive control failed (result -104) [ 200.944980][ T24] tipc: Node number set to 177078735 [ 202.785459][T10239] netlink: 'syz.3.1108': attribute type 1 has an invalid length. [ 202.794284][T10239] netlink: 'syz.3.1108': attribute type 2 has an invalid length. [ 203.179177][T10258] syzkaller0: entered promiscuous mode [ 203.202188][T10258] syzkaller0: entered allmulticast mode [ 203.363900][T10268] netlink: 'syz.0.1116': attribute type 10 has an invalid length. [ 203.434993][T10280] __nla_validate_parse: 7 callbacks suppressed [ 203.435008][T10280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1119'. [ 203.481446][T10268] veth0_to_bond: entered promiscuous mode [ 203.489067][T10268] veth0_to_bond: entered allmulticast mode [ 203.507863][T10280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1119'. [ 203.643434][T10292] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1122'. [ 204.018944][T10318] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1130'. [ 204.041907][T10318] syz_tun: entered promiscuous mode [ 204.050094][T10318] macvlan1: entered allmulticast mode [ 204.055639][T10318] syz_tun: entered allmulticast mode [ 204.073597][T10318] syz_tun: left allmulticast mode [ 204.091599][T10318] syz_tun: left promiscuous mode [ 204.187550][T10329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1129'. [ 204.337250][T10331] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1132'. [ 204.491072][T10311] syzkaller1: entered promiscuous mode [ 204.506682][T10311] syzkaller1: entered allmulticast mode [ 205.003561][T10362] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1141'. [ 205.078792][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'. [ 205.099896][T10366] sock: sock_timestamping_bind_phc: sock not bind to device [ 205.177724][T10368] syzkaller0: entered promiscuous mode [ 205.187694][T10368] syzkaller0: entered allmulticast mode [ 205.219845][T10368] tipc: Enabled bearer , priority 0 [ 205.296048][T10367] tipc: Resetting bearer [ 205.349381][T10367] tipc: Disabling bearer [ 205.981743][T10411] ip6gre1: entered promiscuous mode [ 205.991902][T10411] ip6gre1: entered allmulticast mode [ 206.047995][ T307] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.083508][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.103510][ T307] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.125186][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1157'. [ 206.438779][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.682180][ T5622] Bluetooth: hci1: command 0x0406 tx timeout [ 206.682833][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 206.688371][ T5617] Bluetooth: hci3: command 0x0406 tx timeout [ 206.987569][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 208.790390][T10412] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 209.014347][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1162'. [ 209.042694][T10474] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1162'. [ 209.054279][T10486] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1165'. [ 209.064854][T10481] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1164'. [ 209.077367][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1162'. [ 209.092647][T10486] vlan0: entered allmulticast mode [ 209.102633][T10475] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1162'. [ 209.156026][T10486] syzkaller0: refused to change device tx_queue_len [ 209.174484][T10481] netlink: 'syz.2.1164': attribute type 1 has an invalid length. [ 209.208700][T10481] netlink: 'syz.2.1164': attribute type 2 has an invalid length. [ 209.442509][T10507] netlink: 'syz.4.1172': attribute type 3 has an invalid length. [ 209.470266][T10503] netlink: 'syz.2.1170': attribute type 1 has an invalid length. [ 209.499987][T10504] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1171'. [ 209.528150][T10504] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1171'. [ 209.591947][T10513] netlink: 'syz.0.1174': attribute type 1 has an invalid length. [ 209.741154][T10523] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1177'. [ 209.764169][T10527] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 209.796873][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 210.030596][T10540] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1180'. [ 210.031138][T10542] netlink: 'syz.4.1181': attribute type 1 has an invalid length. [ 210.146235][T10542] bond1: entered promiscuous mode [ 210.169776][T10542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.246251][T10547] macvtap1: entered allmulticast mode [ 210.260855][T10548] bond1: (slave bridge4): making interface the new active one [ 210.268714][T10548] bridge4: entered promiscuous mode [ 210.275991][T10548] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 210.812442][T10564] netlink: 'syz.2.1187': attribute type 32 has an invalid length. [ 211.685329][T10628] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 211.808391][T10641] netlink: 'syz.0.1206': attribute type 3 has an invalid length. [ 211.826097][T10632] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 211.836746][T10632] openvswitch: netlink: Message has -2 unknown bytes. [ 212.124726][T10653] gretap0: entered promiscuous mode [ 212.137452][T10653] debugfs: 'hsr0' already exists in 'hsr' [ 212.164128][T10653] Cannot create hsr debugfs directory [ 212.182279][T10666] netlink: 'syz.0.1212': attribute type 1 has an invalid length. [ 212.272458][T10666] 8021q: adding VLAN 0 to HW filter on device bond5 [ 212.323622][T10657] bond5: (slave gretap1): making interface the new active one [ 212.356076][T10657] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 212.432380][T10679] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 213.082599][T10694] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 213.108859][T10700] sctp: [Deprecated]: syz.0.1218 (pid 10700) Use of int in maxseg socket option. [ 213.108859][T10700] Use struct sctp_assoc_value instead [ 213.130346][T10694] bond5 (unregistering): Released all slaves [ 214.088136][T10716] __nla_validate_parse: 12 callbacks suppressed [ 214.088152][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1225'. [ 214.111626][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1225'. [ 214.229025][T10721] netlink: 'syz.2.1226': attribute type 1 has an invalid length. [ 214.314189][T10717] team0: Port device team_slave_0 removed [ 214.406080][T10733] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1228'. [ 214.634894][T10742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1229'. [ 214.691365][T10743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1231'. [ 214.721949][ T30] audit: type=1800 audit(1787645125.654:5): pid=10747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1232" name="memory.events" dev="tmpfs" ino=1185 res=0 errno=0 [ 215.258895][T10762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1236'. [ 215.590859][T10782] netlink: 'syz.3.1239': attribute type 2 has an invalid length. [ 215.816246][T10782] : entered promiscuous mode [ 216.401104][T10815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1244'. [ 216.462377][T10809] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1244'. [ 216.890218][T10823] syzkaller0: entered promiscuous mode [ 216.918575][T10823] syzkaller0: entered allmulticast mode [ 217.237732][T10839] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1249'. [ 217.386668][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 217.410409][T10845] netlink: 'syz.0.1254': attribute type 2 has an invalid length. [ 217.513022][T10851] netlink: 'syz.3.1255': attribute type 1 has an invalid length. [ 217.540999][T10852] erspan2: entered allmulticast mode [ 217.634697][T10851] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 217.816342][T10864] veth1_macvtap: left promiscuous mode [ 217.885436][T10864] veth0_macvtap: left promiscuous mode [ 217.892667][T10864] veth0_macvtap: entered promiscuous mode [ 217.922460][T10864] veth1_macvtap: entered promiscuous mode [ 217.939976][T10864] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 217.949430][T10875] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1257'. [ 217.960999][T10864] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.982417][T10864] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 218.982075][T10864] bond1: entered allmulticast mode [ 218.988494][T10864] bridge4: entered allmulticast mode [ 218.995887][T10864] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 219.009608][T10864] hsr0: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 219.028759][T10871] wg2: Caught tx_queue_len zero misconfig [ 219.088665][T10873] ip6tnl0: Caught tx_queue_len zero misconfig [ 219.457616][T10896] __nla_validate_parse: 2 callbacks suppressed [ 219.457634][T10896] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1264'. [ 219.532232][T10890] netlink: 'syz.1.1264': attribute type 1 has an invalid length. [ 219.677629][ T136] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.706198][ T136] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.752438][ T136] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.775446][ T136] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.075608][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1272'. [ 220.099536][T10914] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.131677][T10922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1272'. [ 220.151335][T10914] team0: Port device bond2 added [ 220.160085][T10922] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1272'. [ 220.246755][T10894] syzkaller1: entered promiscuous mode [ 220.252444][T10894] syzkaller1: entered allmulticast mode [ 220.536372][T10932] netlink: 'syz.0.1275': attribute type 11 has an invalid length. [ 220.570615][T10932] netlink: 'syz.0.1275': attribute type 4 has an invalid length. [ 220.603076][T10932] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1275'. [ 220.788597][T10939] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1277'. [ 220.843015][T10939] block nbd0: NBD_DISCONNECT [ 220.868488][T10939] block nbd0: Send disconnect failed -32 [ 220.939150][T10939] block nbd0: shutting down sockets [ 220.972844][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 220.982672][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 220.990500][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 221.000043][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 221.008008][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 221.015803][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 221.064528][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 221.076144][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 221.084154][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 221.092034][ T25] Buffer I/O error on dev nbd0, logical block 2, async page read [ 221.099870][ T25] Buffer I/O error on dev nbd0, logical block 3, async page read [ 221.109150][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 221.118786][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 221.126593][ T25] Buffer I/O error on dev nbd0, logical block 1, async page read [ 221.134632][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 221.145509][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 221.157342][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 221.167707][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 221.180820][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 221.190802][ T8862] ldm_validate_partition_table(): Disk read failed. [ 221.198258][ T1591] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 221.208511][ T8862] Dev nbd0: unable to read RDB block 0 [ 221.218036][ T8862] nbd0: unable to read partition table [ 221.235234][ T8862] ldm_validate_partition_table(): Disk read failed. [ 221.257779][ T8862] Dev nbd0: unable to read RDB block 0 [ 221.266720][ T8862] nbd0: unable to read partition table [ 221.341968][T10949] netlink: 'syz.0.1280': attribute type 6 has an invalid length. [ 221.466698][T10955] netlink: 340 bytes leftover after parsing attributes in process `syz.3.1282'. [ 221.484507][T10949] tc_dump_action: action bad kind [ 221.554250][T10955] netlink: 340 bytes leftover after parsing attributes in process `syz.3.1282'. [ 222.202197][T10971] tipc: Started in network mode [ 222.210546][T10971] tipc: Node identity 000000002e0000000000000000000001, cluster identity 4711 [ 222.223719][T10971] tipc: Enabling of bearer rejected, failed to enable media [ 222.239937][T10969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1286'. [ 222.276980][T10971] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1287'. [ 222.306744][T10975] IPVS: length: 4096 != 24 [ 222.493307][T10987] bond6: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 222.940597][T10987] bond6 (unregistering): Released all slaves [ 222.948844][T10969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.697542][T11000] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 224.332677][T11014] bond0 (unregistering): left allmulticast mode [ 224.370127][T11014] bond_slave_0: left allmulticast mode [ 224.417129][T11014] bond_slave_1: left allmulticast mode [ 224.443528][T11014] bond0 (unregistering): left promiscuous mode [ 224.469276][T11014] bond_slave_0: left promiscuous mode [ 224.485267][T11014] bond_slave_1: left promiscuous mode [ 224.517820][T11014] bridge0: port 3(bond0) entered disabled state [ 224.545261][T11014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.575191][T11014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.600369][T11014] bond0 (unregistering): Released all slaves [ 224.742425][T11022] tipc: Resetting bearer [ 224.861802][T11032] netdevsim netdevsim4 netdevsim0: refused to change device tx_queue_len [ 224.882399][T11043] __nla_validate_parse: 3 callbacks suppressed [ 224.882417][T11043] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1305'. [ 225.218002][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1309'. [ 225.534129][T11067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1312'. [ 225.855563][T11080] netlink: 'syz.3.1313': attribute type 32 has an invalid length. [ 225.916321][T11080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1313'. [ 226.026511][T11084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1313'. [ 226.096553][T11084] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1313'. [ 226.287390][T11091] netlink: 'syz.1.1318': attribute type 1 has an invalid length. [ 226.323124][T11080] bond5: option coupled_control: invalid value (10) [ 226.342673][T11091] netlink: 'syz.1.1318': attribute type 5 has an invalid length. [ 226.387821][T11080] bond5 (unregistering): Released all slaves [ 226.940191][T11105] bridge0: port 3(syz_tun) entered blocking state [ 226.963643][T11105] bridge0: port 3(syz_tun) entered disabled state [ 226.979538][T11105] syz_tun: entered allmulticast mode [ 227.068456][T11114] netlink: 'syz.0.1325': attribute type 1 has an invalid length. [ 227.089650][T11114] netlink: 756 bytes leftover after parsing attributes in process `syz.0.1325'. [ 227.149280][T11105] syz_tun: entered promiscuous mode [ 227.179118][T11105] bridge0: port 3(syz_tun) entered blocking state [ 227.187318][T11105] bridge0: port 3(syz_tun) entered forwarding state [ 227.297650][T11116] netlink: 'syz.1.1326': attribute type 1 has an invalid length. [ 227.440966][T11129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1326'. [ 227.648046][T11124] bond3: (slave geneve2): making interface the new active one [ 227.659631][T11124] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 227.692821][T11129] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.756577][ T307] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 227.773235][ T307] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 227.795512][ T307] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 227.846574][ T307] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 227.955285][ T30] audit: type=1107 audit(1787645138.884:6): pid=11148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 228.692226][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1334'. [ 228.787931][T11184] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1344'. [ 228.826275][T11184] pim6reg: entered allmulticast mode [ 228.935351][T11183] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 229.050798][T11187] bond0: (slave gretap0): Opening slave failed [ 229.075183][T11190] netlink: 'syz.1.1345': attribute type 5 has an invalid length. [ 229.452714][T11208] Bluetooth: hci0: unsupported parameter 5135 [ 229.526804][T11208] Bluetooth: hci0: unsupported parameter 8192 [ 229.573976][T11208] Bluetooth: hci0: unsupported parameter 5135 [ 229.619353][T11208] Bluetooth: hci0: unsupported parameter 8192 [ 229.797010][T11225] netlink: 'syz.2.1353': attribute type 39 has an invalid length. [ 229.925856][T11233] __nla_validate_parse: 1 callbacks suppressed [ 229.925873][T11233] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1357'. [ 230.260453][T11236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.366174][T11244] netlink: 'syz.3.1360': attribute type 16 has an invalid length. [ 230.404310][T11244] netlink: 'syz.3.1360': attribute type 17 has an invalid length. [ 230.592180][T11244] veth0: left promiscuous mode [ 230.629388][T11244] veth0: left allmulticast mode [ 230.773164][T11244] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.791492][T11244] veth3: left allmulticast mode [ 230.810707][T11244] hsr1: left promiscuous mode [ 230.859270][T11244] geneve2: left promiscuous mode [ 230.869373][T11244] bond2: left promiscuous mode [ 230.874246][T11244] veth0_to_bond: left promiscuous mode [ 230.897578][T11244] bond2: left allmulticast mode [ 230.940683][T11244] veth0_to_bond: left allmulticast mode [ 230.960117][T11244] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.067462][T11244] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.125610][T11244] vxcan3: left promiscuous mode [ 231.327988][T11244] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.395725][T11264] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 231.498021][T11270] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 231.567316][T11270] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 231.598014][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1367'. [ 231.614253][T11277] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1367'. [ 231.664707][T11277] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1367'. [ 231.787741][T11277] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1367'. [ 231.900095][T11277] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1367'. [ 231.929802][T11277] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1367'. [ 231.971079][T11277] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1367'. [ 232.058623][T11277] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1367'. [ 232.200673][T11277] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1367'. [ 232.238370][T11292] syzkaller0: entered promiscuous mode [ 232.275939][T11292] syzkaller0: entered allmulticast mode [ 232.375165][T11292] tipc: Enabled bearer , priority 0 [ 232.454955][T11292] tipc: Resetting bearer [ 232.571583][T11290] tipc: Resetting bearer [ 232.655583][T11290] tipc: Disabling bearer [ 232.920404][T11319] netlink: 'syz.1.1379': attribute type 29 has an invalid length. [ 233.087752][T11312] ip6t_rpfilter: unknown options [ 233.386613][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 233.616978][T11341] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 234.197917][T11355] xt_TCPMSS: Only works on TCP SYN packets [ 234.763089][T11383] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 234.875383][T11389] netlink: 'syz.2.1398': attribute type 7 has an invalid length. [ 234.918958][T11389] netlink: 'syz.2.1398': attribute type 8 has an invalid length. [ 234.968492][T11391] __nla_validate_parse: 17 callbacks suppressed [ 234.968509][T11391] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1398'. [ 234.973486][T11389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1398'. [ 235.022230][T11383] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 235.076217][T11383] bond6 (unregistering): Released all slaves [ 235.150361][T11388] dummy0: entered allmulticast mode [ 235.151052][T11384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1397'. [ 235.264109][T11384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1397'. [ 235.277071][ T13] netdevsim netdevsim3 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.300570][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.322714][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.347283][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.351544][T11365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 237.646035][T11457] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1418'. [ 237.722144][T11457] syzkaller1: entered promiscuous mode [ 237.738784][T11457] syzkaller1: entered allmulticast mode [ 237.800152][T11457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1418'. [ 237.849708][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1422'. [ 238.064281][T11484] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1421'. [ 238.300233][T11488] Bluetooth: ISO socket layer initialized [ 238.493117][T11492] netlink: 'syz.4.1425': attribute type 39 has an invalid length. [ 239.186941][T11516] veth7: entered allmulticast mode [ 239.292779][T11527] openvswitch: netlink: IP tunnel dst address not specified [ 239.322595][T11526] gre2: entered promiscuous mode [ 239.371987][T11526] gre2: entered allmulticast mode [ 239.697510][T11550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1441'. [ 239.785463][T11553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1442'. [ 239.821479][T11553] netlink: 'syz.4.1442': attribute type 12 has an invalid length. [ 239.880115][T11553] netlink: 'syz.4.1442': attribute type 13 has an invalid length. [ 239.924837][T11562] C: renamed from veth1_to_team (while UP) [ 239.941385][T11562] netlink: 'syz.3.1444': attribute type 1 has an invalid length. [ 239.951694][T11562] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 240.252266][T11573] netlink: 'syz.0.1449': attribute type 19 has an invalid length. [ 240.288757][T11573] __nla_validate_parse: 2 callbacks suppressed [ 240.288783][T11573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1449'. [ 240.314129][T11576] netlink: 'syz.0.1449': attribute type 1 has an invalid length. [ 240.413951][T11584] IPVS: set_ctl: invalid protocol: 29 127.0.0.1:20000 [ 240.536270][T11584] tipc: Enabling of bearer rejected, failed to enable media [ 240.684402][T11596] netlink: 'syz.2.1454': attribute type 39 has an invalid length. [ 240.824771][T11600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1456'. [ 240.904689][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1456'. [ 240.906902][T11598] netlink: 'syz.0.1455': attribute type 8 has an invalid length. [ 241.697522][T11617] netlink: 2108 bytes leftover after parsing attributes in process `syz.0.1460'. [ 243.345555][T11594] netlink: 'syz.2.1454': attribute type 10 has an invalid length. [ 243.361244][ T136] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.566844][ T136] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.581039][ T136] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.621275][ T136] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.653265][T11629] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1465'. [ 243.782586][T11624] netlink: 'syz.2.1463': attribute type 4 has an invalid length. [ 243.838894][T11633] netlink: 'syz.2.1463': attribute type 4 has an invalid length. [ 243.919116][T11640] netlink: zone id is out of range [ 243.930069][T11640] netlink: zone id is out of range [ 243.939059][T11641] netlink: 'syz.0.1467': attribute type 13 has an invalid length. [ 243.965998][T11641] netlink: 'syz.0.1467': attribute type 17 has an invalid length. [ 244.076835][T11640] batadv0: entered promiscuous mode [ 244.119312][T11640] macvtap1: entered promiscuous mode [ 244.131709][T11640] macvtap1: entered allmulticast mode [ 244.145873][T11640] batadv0: entered allmulticast mode [ 244.168713][T11640] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 244.202930][T11640] batadv0: left allmulticast mode [ 244.210002][T11640] batadv0: left promiscuous mode [ 244.289534][T11641] gretap0: refused to change device tx_queue_len [ 244.296770][T11641] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 244.541037][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1473'. [ 244.612272][T11667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1475'. [ 244.645399][T11667] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 244.690997][T11659] IPVS: Scheduler module ip_vs_sip not found [ 244.703162][T11667] netlink: 'syz.2.1475': attribute type 1 has an invalid length. [ 244.806891][T11669] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1475'. [ 244.817952][T11674] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20003 [ 244.829406][T11667] 8021q: adding VLAN 0 to HW filter on device bond6 [ 244.960215][T11678] gretap0: entered promiscuous mode [ 244.975345][T11678] vlan0: entered promiscuous mode [ 245.240768][T11686] netlink: Unknown conntrack attr (type=16383, max=9) [ 245.279279][T11686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.601283][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1486'. [ 245.653608][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1486'. [ 245.669729][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1486'. [ 245.685570][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1486'. [ 245.732036][T11711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1486'. [ 245.742787][T11713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1486'. [ 245.771908][T11711] netlink: 'syz.3.1486': attribute type 18 has an invalid length. [ 245.792698][T11713] netlink: 'syz.3.1486': attribute type 18 has an invalid length. [ 245.808860][T11710] netlink: 'syz.3.1486': attribute type 18 has an invalid length. [ 245.921169][T11721] netlink: 'syz.1.1489': attribute type 2 has an invalid length. [ 245.956500][T11721] netlink: 'syz.1.1489': attribute type 2 has an invalid length. [ 245.980313][T11726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 245.990589][T11716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.999945][T11716] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.010504][T11716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.037515][T11729] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1491'. [ 246.126216][T11716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.154302][T11716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.181851][T11716] tipc: Resetting bearer [ 246.195468][T11716] veth1_vlan: left promiscuous mode [ 246.202489][T11716] veth0_vlan: left promiscuous mode [ 246.210455][T11716] veth0_vlan: entered promiscuous mode [ 246.219177][T11716] veth1_vlan: entered promiscuous mode [ 246.231890][T11716] veth1_macvtap: left promiscuous mode [ 246.246421][T11716] veth0_macvtap: left promiscuous mode [ 246.257088][T11716] veth0_macvtap: entered promiscuous mode [ 246.269577][T11716] veth1_macvtap: entered promiscuous mode [ 246.292982][T11716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 246.301520][T11716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 246.311948][T11716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 246.320500][T11716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 246.328975][T11716] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 246.374641][ T12] bridge0: port 3(veth0) entered blocking state [ 246.381125][ T12] bridge0: port 3(veth0) entered forwarding state [ 246.426511][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.433769][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.527965][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.535203][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.647106][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.672613][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.797112][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.834386][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.930243][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1498'. [ 247.035235][T11752] gretap1: entered allmulticast mode [ 247.266906][T11756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1499'. [ 247.996316][T11776] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.010029][T11776] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.353577][T11776] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.407857][T11776] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.644616][T11776] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.668393][T11776] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.694520][T11796] ip6t_REJECT: ECHOREPLY is not supported [ 249.003962][T11776] netdevsim netdevsim3 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.036547][T11776] netdevsim netdevsim3 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.185444][T11809] validate_nla: 1 callbacks suppressed [ 249.185461][T11809] netlink: 'syz.2.1511': attribute type 30 has an invalid length. [ 249.390655][T11809] netlink: 'syz.2.1511': attribute type 30 has an invalid length. [ 249.647013][T11820] syzkaller0: entered promiscuous mode [ 249.662821][T11820] syzkaller0: entered allmulticast mode [ 249.703934][T11816] pim6reg1: entered promiscuous mode [ 249.721644][T11816] pim6reg1: entered allmulticast mode [ 250.226653][ T307] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.250087][ T307] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.283224][ T307] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.324638][ T307] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.366928][ T307] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.395928][ T307] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.486541][ T307] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.530529][ T307] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.534058][T11849] netlink: 'syz.1.1524': attribute type 12 has an invalid length. [ 252.224954][T11861] __nla_validate_parse: 3 callbacks suppressed [ 252.224972][T11861] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1527'. [ 252.286265][T11861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1527'. [ 252.461004][T11888] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 252.686665][T11893] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 253.016660][T11917] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 253.055516][T11918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1539'. [ 255.361413][T11887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.794561][T11938] 8021q: adding VLAN 0 to HW filter on device bond6 [ 255.795138][T11944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1544'. [ 256.713899][T11984] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 256.822284][T11987] ip_tables: iptables: counters copy to user failed while replacing table [ 257.940943][T12015] Cannot find set identified by id 65534 to match [ 258.000281][T12014] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1561'. [ 258.038856][T12022] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1563'. [ 258.207010][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1563'. [ 258.224912][T12032] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1567'. [ 258.899838][T12055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1574'. [ 258.980504][T12055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1574'. [ 260.200238][T12109] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 260.602657][T12107] batman_adv: batadv0: Adding interface: ip6gretap1 [ 260.619184][T12107] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 260.662657][T12107] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 261.010333][T12131] netlink: 'syz.0.1597': attribute type 15 has an invalid length. [ 261.391054][T12151] tipc: Enabled bearer , priority 20 [ 261.511155][T12159] netlink: 'syz.2.1604': attribute type 32 has an invalid length. [ 261.531884][T12159] netlink: 'syz.2.1604': attribute type 32 has an invalid length. [ 261.638981][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1606'. [ 261.661184][T12164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1606'. [ 261.679359][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1606'. [ 261.705937][T12164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1606'. [ 261.893944][T12168] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 262.141082][T12174] syzkaller0: entered promiscuous mode [ 262.164661][T12174] syzkaller0: entered allmulticast mode [ 262.200780][T12174] TC_ACT_REPEAT abuse ? [ 262.219982][T12174] vlan1: entered promiscuous mode [ 262.225191][T12174] vlan0: entered promiscuous mode [ 262.678983][ T7380] tipc: Node number set to 771751937 [ 262.744885][T12179] netlink: 'syz.0.1612': attribute type 3 has an invalid length. [ 263.146196][T12204] bridge0: port 3(vlan2) entered blocking state [ 263.168282][T12204] bridge0: port 3(vlan2) entered disabled state [ 263.186350][T12204] vlan2: entered allmulticast mode [ 263.209215][T12204] geneve0: entered allmulticast mode [ 263.222733][T12204] vlan2: entered promiscuous mode [ 263.230072][T12210] __nla_validate_parse: 1 callbacks suppressed [ 263.230088][T12210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1621'. [ 263.245731][T12204] geneve0: entered promiscuous mode [ 263.261887][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1621'. [ 263.271500][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1621'. [ 263.282101][T12210] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1621'. [ 263.301644][T12210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1621'. [ 263.375745][T12214] netlink: 'syz.3.1622': attribute type 1 has an invalid length. [ 263.870306][T12223] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.121323][T12252] netlink: 'syz.2.1626': attribute type 21 has an invalid length. [ 264.173639][T12224] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.180903][T12224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.229717][T12224] bridge0: entered promiscuous mode [ 264.235093][T12224] bridge0: entered allmulticast mode [ 264.301618][T12231] syz_tun: entered allmulticast mode [ 264.328222][T12244] pim6reg: left allmulticast mode [ 264.336386][T12258] netlink: 'syz.0.1628': attribute type 1 has an invalid length. [ 264.344537][T12244] syz_tun: left allmulticast mode [ 264.364650][T12253] tipc: New replicast peer: 255.255.255.255 [ 264.377198][T12253] tipc: Enabled bearer , priority 5 [ 264.397789][T12257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1628'. [ 264.511780][T12258] bond0: entered promiscuous mode [ 264.541030][T12258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.661933][T12258] ip_tables: iptables: counters copy to user failed while replacing table [ 266.026869][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.034514][T12316] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1642'. [ 266.091436][T12315] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1642'. [ 266.280924][T12323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1644'. [ 266.420513][T12328] netlink: 'syz.2.1646': attribute type 21 has an invalid length. [ 266.477186][T12328] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1646'. [ 266.546122][T12328] netlink: 'syz.2.1646': attribute type 4 has an invalid length. [ 266.611592][T12328] netlink: 'syz.2.1646': attribute type 5 has an invalid length. [ 267.415447][T12360] netlink: 'syz.0.1657': attribute type 3 has an invalid length. [ 267.865662][T12380] syzkaller0: entered promiscuous mode [ 267.917196][T12380] syzkaller0: entered allmulticast mode [ 268.329786][T12399] __nla_validate_parse: 4 callbacks suppressed [ 268.329805][T12399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1665'. [ 268.698654][T12411] sctp: [Deprecated]: syz.1.1667 (pid 12411) Use of int in max_burst socket option deprecated. [ 268.698654][T12411] Use struct sctp_assoc_value instead [ 269.490386][T12430] netlink: 'syz.2.1674': attribute type 1 has an invalid length. [ 269.532477][T12430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1674'. [ 269.552018][T12432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1675'. [ 269.554063][T12430] x_tables: duplicate underflow at hook 3 [ 269.643696][T12432] veth5: entered allmulticast mode [ 269.934175][T12445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1677'. [ 270.039767][T12443] bond7: invalid NS target :: specified for addition [ 270.079837][T12443] bond7: option ns_ip6_target: invalid value (18446744073709551615) [ 270.155604][T12443] bond7 (unregistering): Released all slaves [ 270.517480][T12462] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1682'. [ 270.882534][T12472] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1682'. [ 271.289250][T12487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1688'. [ 271.323566][T12491] netlink: 'syz.3.1689': attribute type 1 has an invalid length. [ 271.362907][T12491] nbd: error processing sock list [ 271.382914][T12491] block nbd0: shutting down sockets [ 271.735472][T12517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1694'. [ 271.810038][T12517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1694'. [ 272.377482][T12530] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 272.560912][T12530] bond3 (unregistering): Released all slaves [ 272.888042][T12540] netlink: 'syz.3.1702': attribute type 1 has an invalid length. [ 272.924137][T12540] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1702'. [ 272.977420][T12545] netlink: 'syz.1.1700': attribute type 1 has an invalid length. [ 273.139866][T12545] 8021q: adding VLAN 0 to HW filter on device bond5 [ 273.165579][T12543] syzkaller1: entered allmulticast mode [ 273.367429][T12569] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1706'. [ 273.465964][T12571] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1707'. [ 273.585987][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1710'. [ 273.610311][T12580] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1710'. [ 273.619089][T12577] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1709'. [ 273.663474][T12577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1709'. [ 273.951902][T12600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1715'. [ 273.976999][T12600] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1715'. [ 273.994008][T12600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1715'. [ 274.000886][T12604] netlink: 'syz.0.1716': attribute type 2 has an invalid length. [ 274.068643][T12604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1716'. [ 278.454652][T12661] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 278.939469][T12703] netlink: 'syz.3.1738': attribute type 2 has an invalid length. [ 278.987633][T12703] netlink: 'syz.3.1738': attribute type 2 has an invalid length. [ 279.062160][T12703] __nla_validate_parse: 3 callbacks suppressed [ 279.062177][T12703] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.1738'. [ 279.275934][T12721] IPv6: sit3: Disabled Multicast RS [ 279.366085][T12722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1744'. [ 279.403558][T12724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1742'. [ 279.422008][T12731] block nbd0: Unsupported socket: should be TCP or UNIX. [ 279.432562][T12724] bond0: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 279.482974][T12733] sctp: [Deprecated]: syz.0.1742 (pid 12733) Use of int in maxseg socket option. [ 279.482974][T12733] Use struct sctp_assoc_value instead [ 279.839681][T12748] netlink: 'syz.4.1750': attribute type 4 has an invalid length. [ 279.894450][T12749] netlink: 'syz.4.1750': attribute type 4 has an invalid length. [ 280.127146][T12751] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1751'. [ 280.385743][T12761] syzkaller1: entered promiscuous mode [ 280.420490][T12761] syzkaller1: entered allmulticast mode [ 280.469351][T12773] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1757'. [ 280.568399][T12761] syzkaller1: left promiscuous mode [ 280.583602][T12761] syzkaller1: left allmulticast mode [ 280.687211][T12776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.699398][T12765] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1755'. [ 280.777466][T12773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.858072][T12773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.860686][T12780] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 281.066029][T12786] macvlan0: entered promiscuous mode [ 281.078475][T12786] netlink: 'syz.2.1760': attribute type 1 has an invalid length. [ 281.093168][T12786] netlink: 'syz.2.1760': attribute type 2 has an invalid length. [ 281.245275][T12791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1761'. [ 281.880685][T12801] syzkaller0: entered promiscuous mode [ 281.911212][T12801] syzkaller0: entered allmulticast mode [ 282.007494][T12802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1764'. [ 282.017924][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1764'. [ 282.377821][T12820] netlink: 'syz.4.1766': attribute type 1 has an invalid length. [ 282.405793][T12822] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1768'. [ 282.419008][T12813] pim6reg1: entered allmulticast mode [ 282.626742][T12820] 8021q: adding VLAN 0 to HW filter on device bond3 [ 283.059928][T12834] ipip0: entered promiscuous mode [ 283.162900][T12840] netlink: 'syz.1.1771': attribute type 32 has an invalid length. [ 283.386302][T12840] bond6: option coupled_control: invalid value (16) [ 283.395574][T12840] bond6 (unregistering): Released all slaves [ 284.264489][T12856] smbdirect: ib_dev[syr1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 284.304366][T12856] smbdirect: ib_dev[syr1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 284.330672][T12856] smbdirect: ib_dev[syr1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 284.412224][T12866] __nla_validate_parse: 7 callbacks suppressed [ 284.412243][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1776'. [ 284.470233][T12856] infiniband syr1: RDMA CMA: cma_listen_on_dev, error -98 [ 284.669843][T12867] bridge0: entered allmulticast mode [ 284.969964][T12889] SET target dimension over the limit! [ 285.221555][T12899] netlink: 'syz.4.1785': attribute type 7 has an invalid length. [ 285.301935][T12899] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1785'. [ 285.477487][T12903] netlink: 'syz.3.1787': attribute type 2 has an invalid length. [ 285.520771][T12903] netlink: 'syz.3.1787': attribute type 2 has an invalid length. [ 285.552354][T12903] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.1787'. [ 285.686342][T12908] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 286.015645][T12922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1791'. [ 286.203529][T12927] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 286.242074][T12927] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 286.360624][T12928] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 286.397309][T12928] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 286.651199][T12934] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1796'. [ 286.934323][T12939] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.033855][T12939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.197339][T12939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.219468][T12939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.263038][T12939] veth1_vlan: left promiscuous mode [ 287.279061][T12939] veth0_vlan: left promiscuous mode [ 287.297262][T12939] veth0_vlan: entered promiscuous mode [ 287.317961][T12939] veth1_vlan: entered promiscuous mode [ 287.365093][T12939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 287.383122][T12939] batman_adv: batadv0: Interface activated: netdevsim0 [ 287.406116][T12939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 287.430727][T12939] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 287.449544][T12939] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 287.479746][T12939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.539351][T12939] 8021q: adding VLAN 0 to HW filter on device bond3 [ 287.577729][T12939] ip6gre1: left promiscuous mode [ 287.612270][T12939] batman_adv: batadv0: Interface activated: ip6gretap1 [ 287.619751][ T5816] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 287.657893][T12939] bridge0: port 3(vlan2) entered blocking state [ 287.665904][T12939] bridge0: port 3(vlan2) entered forwarding state [ 287.675585][T12939] bond0: left promiscuous mode [ 287.691562][T12939] ipip0: left promiscuous mode [ 287.732197][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1797'. [ 287.838443][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.847681][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.916134][T12961] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 287.932500][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.939792][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.984136][T12963] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 288.067119][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.102511][ T30] audit: type=1804 audit(1787645199.034:7): pid=12968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1804" name="/newroot/334/cgroup.controllers" dev="tmpfs" ino=1743 res=1 errno=0 [ 288.119639][ T1161] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 288.168579][ T30] audit: type=1800 audit(1787645199.034:8): pid=12968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1804" name="cgroup.controllers" dev="tmpfs" ino=1743 res=0 errno=0 [ 288.241513][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.291293][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.325804][ T30] audit: type=1804 audit(1787645199.054:9): pid=12968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1804" name="/newroot/334/cgroup.controllers" dev="tmpfs" ino=1743 res=1 errno=0 [ 288.366763][ T3371] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.507545][ T5739] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 289.104459][T12993] syzkaller0: entered promiscuous mode [ 289.128112][T12993] syzkaller0: entered allmulticast mode [ 289.189552][T12993] netlink: 'syz.3.1811': attribute type 1 has an invalid length. [ 289.236639][T13001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1815'. [ 290.039316][T13030] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.403148][T13047] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 291.078424][T13047] bond0: (slave gretap0): Opening slave failed [ 291.598028][T13063] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 291.598581][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1830'. [ 291.704847][T13068] lo: Caught tx_queue_len zero misconfig [ 292.228926][T13090] netlink: 'syz.4.1839': attribute type 13 has an invalid length. [ 292.506629][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 297.593311][T13098] syzkaller1: entered promiscuous mode [ 297.604918][T13098] syzkaller1: entered allmulticast mode [ 298.068657][T13143] netlink: 'syz.1.1849': attribute type 3 has an invalid length. [ 298.302057][T13143] tipc: Resetting bearer [ 298.331511][T13143] tipc: Resetting bearer [ 298.744424][T13166] x_tables: ip_tables: osf match: only valid for protocol 6 [ 299.131346][T13187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1861'. [ 299.286108][T13187] ipvlan3: entered allmulticast mode [ 299.302501][T13194] netlink: 'syz.3.1862': attribute type 1 has an invalid length. [ 299.325318][T13187] syz_tun: entered allmulticast mode [ 299.335673][ T30] audit: type=1800 audit(1787645210.274:10): pid=13197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1865" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1829 res=0 errno=0 [ 299.432980][T13188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1861'. [ 299.489686][T13202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1864'. [ 299.522097][T13188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1861'. [ 299.553364][T13202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1864'. [ 299.568992][T13188] netlink: 'syz.2.1861': attribute type 15 has an invalid length. [ 299.642720][T13198] bond7: (slave bridge2): Enslaving as a backup interface with an up link [ 299.652692][T13204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1864'. [ 299.678853][T13204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1864'. [ 299.705035][T13188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1861'. [ 299.720360][T13188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1861'. [ 299.729560][T13188] netlink: 'syz.2.1861': attribute type 15 has an invalid length. [ 299.759541][T13200] macvlan0: entered promiscuous mode [ 299.796693][T13200] macvlan0: entered allmulticast mode [ 299.803320][T13200] bond7: entered promiscuous mode [ 299.809429][T13200] bridge2: entered promiscuous mode [ 299.815964][T13200] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 299.875782][T13200] bond7: left promiscuous mode [ 299.882291][T13200] bridge2: left promiscuous mode [ 299.988329][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 300.037740][T13204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1864'. [ 300.226375][ T13] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 60387 - 0 [ 300.264113][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 300.298489][ T13] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 60387 - 0 [ 300.348036][ T3371] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 300.386802][ T3371] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 60387 - 0 [ 300.413407][ T3371] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 300.448160][ T3371] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 60387 - 0 [ 300.559990][T13230] Bluetooth: hci0: unsupported parameter 5135 [ 300.616786][T13230] Bluetooth: hci0: unsupported parameter 8192 [ 300.642567][T13230] Bluetooth: hci0: unsupported parameter 5135 [ 300.673971][T13230] Bluetooth: hci0: unsupported parameter 8192 [ 300.767770][T13237] batman_adv: batadv0: Adding interface: vlan1 [ 300.809289][T13237] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.961521][T13237] batman_adv: batadv0: Not using interface vlan1 (retrying later): interface not active [ 301.232368][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 302.280640][T13283] netlink: 'syz.3.1887': attribute type 5 has an invalid length. [ 302.327774][T13290] netlink: 'syz.0.1888': attribute type 4 has an invalid length. [ 303.316590][T13328] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 303.753460][T13338] netlink: 'syz.0.1900': attribute type 1 has an invalid length. [ 304.093028][T13338] 8021q: adding VLAN 0 to HW filter on device bond6 [ 304.356286][T13364] __nla_validate_parse: 11 callbacks suppressed [ 304.356302][T13364] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1902'. [ 304.393951][T13338] syzkaller0: entered promiscuous mode [ 304.415838][T13338] syzkaller0: entered allmulticast mode [ 304.530343][T13357] syzkaller1: entered promiscuous mode [ 304.536102][T13357] syzkaller1: entered allmulticast mode [ 305.104651][T13368] syzkaller0: entered promiscuous mode [ 305.111865][T13393] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1910'. [ 305.137226][T13368] syzkaller0: entered allmulticast mode [ 306.112825][T13417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1915'. [ 306.187040][T13417] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 306.197379][ C1] Increase LOCKDEP_CIRCULAR_QUEUE_BITS to avoid this warning: [ 306.204887][ C1] ------------[ cut here ]------------ [ 306.206519][T13417] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 306.210350][ C1] lockdep bfs error:-1 [ 306.210375][ C1] WARNING: kernel/locking/lockdep.c:2075 at print_bfs_bug+0x20/0x40, CPU#1: ksoftirqd/1/23 [ 306.210409][ C1] Modules linked in: [ 306.210445][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 306.219779][T13417] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 306.222874][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.222904][ C1] RIP: 0010:print_bfs_bug+0x22/0x40 [ 306.222929][ C1] Code: 90 90 90 90 90 90 90 90 55 53 89 fb e8 17 6b 2f 03 89 c5 e8 a0 89 ff ff 85 ed 74 13 83 fb ff 74 16 48 8d 3d 70 d0 b8 0e 89 de <67> 48 0f b9 3a 5b 5d c3 cc cc cc cc cc 48 c7 c7 40 be 3e 8e e8 15 [ 306.288190][ C1] RSP: 0018:ffffc900001d7200 EFLAGS: 00010046 [ 306.294265][ C1] RAX: 000000000000003b RBX: 00000000ffffffff RCX: fc66e628db034f00 [ 306.302233][ C1] RDX: 8000000000000500 RSI: 00000000ffffffff RDI: ffffffff905bcbd0 [ 306.310204][ C1] RBP: 0000000000000001 R08: 0000000000000100 R09: 1ffff9200003adf0 [ 306.318176][ C1] R10: dffffc0000000000 R11: fffff5200003adf1 R12: 000000000000004d [ 306.326169][ C1] R13: ffffffff941ce550 R14: ffff88801e2e0000 R15: ffffffff971191c8 [ 306.334141][ C1] FS: 0000000000000000(0000) GS:ffff888125024000(0000) knlGS:0000000000000000 [ 306.343077][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 306.349660][ C1] CR2: 0000200000001200 CR3: 0000000052446000 CR4: 00000000003526f0 [ 306.357642][ C1] Call Trace: [ 306.360917][ C1] [ 306.363852][ C1] __lock_acquire+0x24f0/0x2cf0 [ 306.368717][ C1] ? lock_acquire+0x106/0x350 [ 306.373415][ C1] ? pcpu_alloc+0x25b/0x310 [ 306.377950][ C1] lock_acquire+0x106/0x350 [ 306.382471][ C1] ? pcpu_alloc+0x25b/0x310 [ 306.386987][ C1] _raw_spin_lock+0x2e/0x40 [ 306.391506][ C1] ? pcpu_alloc+0x25b/0x310 [ 306.396005][ C1] pcpu_alloc+0x25b/0x310 [ 306.400334][ C1] alloc_object+0xbf/0x300 [ 306.404747][ C1] debug_object_activate+0x17f/0x420 [ 306.410036][ C1] ? __pfx_radix_tree_node_rcu_free+0x10/0x10 [ 306.416103][ C1] call_rcu+0x43/0x8b0 [ 306.420184][ C1] xas_store+0xe61/0x17f0 [ 306.424524][ C1] xa_erase+0x6a/0xf0 [ 306.428517][ C1] hsr_get_seq_block+0x100/0x430 [ 306.433458][ C1] hsr_check_duplicate+0x9e/0x170 [ 306.438483][ C1] hsr_forward_skb+0xff3/0x2b70 [ 306.443326][ C1] ? local_lock_release+0x9c/0x160 [ 306.448439][ C1] ? hsr_forward_skb+0xb9/0x2b70 [ 306.453379][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 306.458654][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 306.463679][ C1] ? __skb_pad+0x3f8/0x600 [ 306.468181][ C1] send_hsr_supervision_frame+0x733/0xcf0 [ 306.473908][ C1] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 306.480156][ C1] hsr_announce+0x1db/0x370 [ 306.484662][ C1] ? hsr_announce+0x89/0x370 [ 306.489250][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 306.494276][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 306.499649][ C1] call_timer_fn+0x18d/0x5f0 [ 306.504242][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 306.509266][ C1] ? call_timer_fn+0xd5/0x5f0 [ 306.513940][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 306.519055][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 306.524248][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 306.529272][ C1] __run_timer_base+0x652/0x8b0 [ 306.534129][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 306.539505][ C1] run_timer_softirq+0xb7/0x170 [ 306.544386][ C1] handle_softirqs+0x226/0x860 [ 306.549150][ C1] ? run_ksoftirqd+0x36/0x60 [ 306.553738][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 306.558756][ C1] run_ksoftirqd+0x36/0x60 [ 306.563170][ C1] smpboot_thread_fn+0x565/0xa70 [ 306.568107][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 306.573140][ C1] kthread+0x38b/0x480 [ 306.577208][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 306.582665][ C1] ? __pfx_kthread+0x10/0x10 [ 306.587260][ C1] ret_from_fork+0x514/0xb70 [ 306.591867][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 306.596984][ C1] ? __switch_to+0xc89/0x1420 [ 306.601667][ C1] ? __pfx_kthread+0x10/0x10 [ 306.606257][ C1] ret_from_fork_asm+0x1a/0x30 [ 306.611029][ C1] [ 306.614045][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 306.621314][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 306.630502][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.640553][ C1] Call Trace: [ 306.643828][ C1] [ 306.646768][ C1] vpanic+0x56d/0xa60 [ 306.650752][ C1] ? __pfx__printk+0x10/0x10 [ 306.655335][ C1] ? __pfx_vpanic+0x10/0x10 [ 306.659860][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 306.665151][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 306.670359][ C1] panic+0xc5/0xd0 [ 306.674089][ C1] ? __pfx_panic+0x10/0x10 [ 306.678508][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 306.683448][ C1] __warn+0x315/0x4c0 [ 306.687433][ C1] ? print_bfs_bug+0x20/0x40 [ 306.692020][ C1] ? print_bfs_bug+0x20/0x40 [ 306.696601][ C1] __report_bug+0x276/0x570 [ 306.701128][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 306.706240][ C1] ? print_bfs_bug+0x20/0x40 [ 306.710823][ C1] ? __pfx___report_bug+0x10/0x10 [ 306.715847][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 306.720866][ C1] ? rcu_is_watching+0x16/0xb0 [ 306.725626][ C1] report_bug_entry+0x19b/0x290 [ 306.730495][ C1] ? print_bfs_bug+0x22/0x40 [ 306.735077][ C1] ? print_bfs_bug+0x27/0x40 [ 306.739657][ C1] handle_bug+0xce/0x200 [ 306.743899][ C1] exc_invalid_op+0x1a/0x50 [ 306.748411][ C1] asm_exc_invalid_op+0x1a/0x20 [ 306.753287][ C1] RIP: 0010:print_bfs_bug+0x22/0x40 [ 306.758482][ C1] Code: 90 90 90 90 90 90 90 90 55 53 89 fb e8 17 6b 2f 03 89 c5 e8 a0 89 ff ff 85 ed 74 13 83 fb ff 74 16 48 8d 3d 70 d0 b8 0e 89 de <67> 48 0f b9 3a 5b 5d c3 cc cc cc cc cc 48 c7 c7 40 be 3e 8e e8 15 [ 306.778092][ C1] RSP: 0018:ffffc900001d7200 EFLAGS: 00010046 [ 306.784164][ C1] RAX: 000000000000003b RBX: 00000000ffffffff RCX: fc66e628db034f00 [ 306.792136][ C1] RDX: 8000000000000500 RSI: 00000000ffffffff RDI: ffffffff905bcbd0 [ 306.800114][ C1] RBP: 0000000000000001 R08: 0000000000000100 R09: 1ffff9200003adf0 [ 306.808085][ C1] R10: dffffc0000000000 R11: fffff5200003adf1 R12: 000000000000004d [ 306.816056][ C1] R13: ffffffff941ce550 R14: ffff88801e2e0000 R15: ffffffff971191c8 [ 306.824039][ C1] __lock_acquire+0x24f0/0x2cf0 [ 306.828905][ C1] ? lock_acquire+0x106/0x350 [ 306.833595][ C1] ? pcpu_alloc+0x25b/0x310 [ 306.838099][ C1] lock_acquire+0x106/0x350 [ 306.842602][ C1] ? pcpu_alloc+0x25b/0x310 [ 306.847110][ C1] _raw_spin_lock+0x2e/0x40 [ 306.851619][ C1] ? pcpu_alloc+0x25b/0x310 [ 306.856116][ C1] pcpu_alloc+0x25b/0x310 [ 306.860445][ C1] alloc_object+0xbf/0x300 [ 306.864868][ C1] debug_object_activate+0x17f/0x420 [ 306.870153][ C1] ? __pfx_radix_tree_node_rcu_free+0x10/0x10 [ 306.876219][ C1] call_rcu+0x43/0x8b0 [ 306.880284][ C1] xas_store+0xe61/0x17f0 [ 306.884612][ C1] xa_erase+0x6a/0xf0 [ 306.888591][ C1] hsr_get_seq_block+0x100/0x430 [ 306.893537][ C1] hsr_check_duplicate+0x9e/0x170 [ 306.898576][ C1] hsr_forward_skb+0xff3/0x2b70 [ 306.903428][ C1] ? local_lock_release+0x9c/0x160 [ 306.908549][ C1] ? hsr_forward_skb+0xb9/0x2b70 [ 306.913489][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 306.918767][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 306.923794][ C1] ? __skb_pad+0x3f8/0x600 [ 306.928213][ C1] send_hsr_supervision_frame+0x733/0xcf0 [ 306.933947][ C1] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 306.940203][ C1] hsr_announce+0x1db/0x370 [ 306.944709][ C1] ? hsr_announce+0x89/0x370 [ 306.949301][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 306.954342][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 306.959716][ C1] call_timer_fn+0x18d/0x5f0 [ 306.964299][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 306.969319][ C1] ? call_timer_fn+0xd5/0x5f0 [ 306.973984][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 306.979085][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 306.984274][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 306.989297][ C1] __run_timer_base+0x652/0x8b0 [ 306.994170][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 306.999561][ C1] run_timer_softirq+0xb7/0x170 [ 307.004423][ C1] handle_softirqs+0x226/0x860 [ 307.009191][ C1] ? run_ksoftirqd+0x36/0x60 [ 307.013787][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 307.018805][ C1] run_ksoftirqd+0x36/0x60 [ 307.023218][ C1] smpboot_thread_fn+0x565/0xa70 [ 307.028158][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 307.033177][ C1] kthread+0x38b/0x480 [ 307.037239][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 307.042689][ C1] ? __pfx_kthread+0x10/0x10 [ 307.047295][ C1] ret_from_fork+0x514/0xb70 [ 307.051894][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 307.057002][ C1] ? __switch_to+0xc89/0x1420 [ 307.061677][ C1] ? __pfx_kthread+0x10/0x10 [ 307.066275][ C1] ret_from_fork_asm+0x1a/0x30 [ 307.071044][ C1] [ 307.074324][ C1] Kernel Offset: disabled [ 307.078640][ C1] Rebooting in 86400 seconds..