last executing test programs: 3.674933647s ago: executing program 0 (id=4619): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x3b8, 0x12, 0x100, 0x70bd28, 0x25dfdbfd, {0x27, 0x1, 0x3, 0xe, {0x4e22, 0x4e24, [0x5, 0xc, 0x0, 0xfffffffa], [0x7ff, 0x8, 0x7, 0x4], r1, [0x1, 0x1]}, 0x7, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x69, 0x1, "af3010a662682c4e1c471e85f63cc7d341039f5754017ab72c808134280bf71cf69232cd2b3578fa5bdf4c82d292e8ad3f150bb696a4111608549ce8997188091ace64d47ace6d05bc9dea531d1b0c1c8cbab3e8498f5919d424500f494ef098572b8a82df"}, @INET_DIAG_REQ_BYTECODE={0x21, 0x1, "a6a6cbf6a34510bf6969bf4e2e172a91b2a5c4bcc3138179558b01a180"}, @INET_DIAG_REQ_BYTECODE={0x58, 0x1, "ffcf864fc404a277a5bc07c36c82feb6aac11383c6ae62cf5cd2d1e1b47b8d32b7746f9572170f253752fd713013d7f4fd59f9fa65409de85b9b9bbb2898d1adb968f5e71425f5528e3bd7d7581840e76cdc55e5"}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "a61038dff0af92c4cbf97c6e24160111e381c05789c6897e62c6dbac599f2f3104b0ca90fd6bce76d7cb3f50bbc64467324a5095d74ffd0242d11df4b04fc714f749b45acca9406d956564487ab4b338cdbd028f4d5e8a2f1773fa8c5bfe5cd8c827bbed5c90bb28b4cb489bb46a39fd19b308b65194ceb84855e6e6d5ef239e03ecf608966f7ffb674e16c2f3cdcdbc0a5e18a58ad8e015b3b0485bfd647c0ce96572518d9daf7db8821437e3651a61d1e52daa5cc338"}, @INET_DIAG_REQ_BYTECODE={0x38, 0x1, "712c208a63d87b7fc953cf923365d80ec0f590b295d8e1b6f2b9e05223c73a40bb46085482b1c7b45c7d936961ebadd8892bcc32"}, @INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "f63abfeb2dae1d2c43199b88921fd54fcc0919f75b9d15f1b637bfce75ee98628146a3968d3effca6dfc02e815d0e67e4ecfe79ca100187e7a50d1e81c964c0c9d0fe35495ab"}, @INET_DIAG_REQ_BYTECODE={0x93, 0x1, "e8c9c1501e63a6755efcf05ab119ef79ade522034351891ddef2e8f1b6f59492d38d383be9dfd5318dd5186b3718b87d7bcefdf56a59c471ab03e1b956443839fff3186710bce8ac3ae74fa6501f85211f138e8c758d991c42f86cc7299c56e0eb387385202abe66dfff0f7a8561864d0cc315a6ca4b1c578e05516bd6ffbb394bc668e0c4ce048a18148e8b0045da"}, @INET_DIAG_REQ_BYTECODE={0xaf, 0x1, "fa1db54597c2b4a439d03b7fadad95fef0128d30f98fea5d32e535578b70209014e3b677af790a00d5fea31537e33ccc45fec38ea554da3306851d8749ca97624fd0c75a2af9e8c298eb3a5ba8a60cd116b8bba5b27552c8df2c16bf0ace3f7848342839895cb41a35796abac950b40185230849e73a2163e2e754cfd0359ea5033677f99f29a800c252cf695c78e6ce3dcef842f5f3fad538b5ec1b9917b69eb0bb828a2d044970e7e348"}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x80}, 0x8050) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000580)={0x0, @remote, @initdev}, &(0x7f00000005c0)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r0, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', r1, 0x2f, 0x8, 0xfd, 0xaf4, 0x5, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x20, 0x7, 0xfaa}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000940)={&(0x7f0000000500), 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x17c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4044}, 0x84bfc7c2cb500cce) r6 = socket(0x2a, 0x4, 0x50ff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000980)={r0, 0x4, 0x2, 0x2}) write$cgroup_int(r7, &(0x7f00000009c0)=0x7, 0x12) r8 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r8, &(0x7f0000000a00)={0x2c, 0x3, r4, 0x17, r0}, 0x10) ioctl$XFS_IOC_INUMBERS(r8, 0x80405880, &(0x7f0000000a40)={{0x9, 0x4, 0x7, 0x21, 0x40}, [{0x5, 0x9, 0x3, 0x4a}]}) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b00), r7) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r9, 0x321, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc5) sendmmsg$alg(r6, &(0x7f0000002340)=[{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000c00)="c342ddba29152c9fa72b885a55a99c028eb0370429f04aa0717d01c880a5df64c2b94260d9651806205d70dc9891abe998eb3ad1ea6e87efd828db072a3bd3d217b9fc5dedeb6be39cad489c073ed4fd70fbb0d8756ab7", 0x57}, {&(0x7f0000000c80)="3a28787061a038f2a46dcd18040e47dc5e68e1d6a5b3991b7f9c39240ba977d97d872a7095bb1bd39724f2a2a7a99b77f28ca5c0fc4ae5236c74199e11a85ef648af590ec866a523a6f5643d41deeec6725ee292db379fba0defe4e0ea92bd1a2d33e65498f02c71760a1c60ec07c475", 0x70}, {&(0x7f0000000d00)="844fd4b41061e060ae17a10d6b6463f4cc8cece96f4d75a967f4146a4f08e459ff2fcf5018adb0d273de59faff0be83534a4a9508e9524b64d3424c84ca9b45f267a2909bd1b79c0630a9756c716d1f93040bc50fd19f138ef8244ce09", 0x5d}, {&(0x7f0000000d80)="3ae4ea658dc7f5a86dac640260f640a15afb3fd912891e3161e00afec5b4275ddcc753bb96f538766378fd8e2d2716530623855c042d13b401583c32f07c7b70fd317d92fc32e0f01f908b6404eb55bb59a1a0a009808e2e4a0938238586120f6c94849bf15ed9b6a15d552f82554a525ad3a9d5ae52e76ad946ca7b73f17d118fcd4665f3f0163a77f2092ec6c86843056338b47cf90589bafc", 0x9a}, {&(0x7f0000000e40)="e2a7f180a4ae8537fd922c789fe157a49bd9f8d86a937934ee7c407ede4dd5be709b032bf418c03fc40c66301de138e3d11c317c1e24cc746341f06c5f23074583c557abeea1b9d5fe729ff85f88fcbe162d08084148e3583531705a31b90e0726509f23124a677e01a3d3856aff9d03d9b7a85a2f05fff8a14170eb13d35a10060ece67", 0x84}, {&(0x7f0000000f00)="211aea4b3f11c019a229dd4776338a9699511f4ea2021f2817887dbff008b13593085703ffa1cab933b8fc214f61f437d55c0b450825b1e8d5e183e66742398bdadb6bfdb539e261fe8cb14de23fab3e974f4bc52184f903781e5d88265744a48586c851210b3f3bb69c69ee723006390961be2f3e863ae68d2ea93ee9b9fc5434193329956373684b0b0d18873bc0811d5cef35d4223a584a", 0x99}], 0x6, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x30, 0x117, 0x2, 0x1b, "51263d431e6ec9a9cb919a3c6734294aa80e0ca8aa41b3af0cb3bd"}], 0x48, 0x1}, {0x0, 0x0, &(0x7f0000002100)=[{&(0x7f00000010c0)="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", 0x1000}, {&(0x7f00000020c0)="c62b3ecdda0ec81e4f0269b346d4c7342cde95dcd358bb16f593eefaa57a28485d1f417fb2330e89ba7e46ab6e89c6fad3dec8", 0x33}], 0x2, &(0x7f0000002140)=[@assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18}, @iv={0x28, 0x117, 0x2, 0x14, "7ecc92bcd18f3224f4a036dae97300fe51b8ab27"}], 0xe8}, {0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000002240)="d0acc3c810", 0x5}], 0x1, &(0x7f00000022c0)=[@assoc={0x18, 0x117, 0x4, 0x10000}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xb}], 0x48, 0x45}], 0x3, 0xc080) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000002400)={0x0, @in={{0x2, 0x4e23, @empty}}}, &(0x7f00000024c0)=0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000002500)=@assoc_id=r10, &(0x7f0000002540)=0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r11, &(0x7f0000002680)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x58, r9, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x67}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xde}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040050}, 0x50) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000002740)=@mangle={'mangle\x00', 0x1f, 0x6, 0x588, 0x388, 0xe8, 0x0, 0x0, 0x2a0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, &(0x7f00000026c0), {[{{@ip={@rand_addr=0x64010100, @broadcast, 0xff, 0x0, 'pimreg1\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x1, 0x39}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@inet=@set2={{0x28}, {{0x4, 0x5, 0x4}}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@comment={{0x120}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x3}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @private=0xa010101, 0x0, 0xff000000, '\x00', 'caif0\x00', {0xff}, {0xff}, 0xc, 0x1, 0x22}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x0, 0xc00, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2e}, @loopback, 0xffffffff, 0xffffff00, 'pimreg\x00', 'gre0\x00', {}, {}, 0x21, 0x0, 0x3}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xc, 0xfff, @broadcast, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5e8) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000002d40)={r6, 0x10000, 0xec, 0x100000000}) bind$xdp(r7, &(0x7f0000002d80)={0x2c, 0x0, r4, 0x2c, r12}, 0x10) socket$netlink(0x10, 0x3, 0xb) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000002dc0)={@remote, @dev={0xac, 0x14, 0x14, 0x38}, r4}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r8, &(0x7f0000002e00)={0x40002000}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003040)={r0, 0x20, &(0x7f0000003000)={&(0x7f0000002f40)=""/27, 0x1b, 0x0, &(0x7f0000002f80)=""/82, 0x52}}, 0x10) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003080)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', 0x0, r0, 0x2, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x1a, 0x5, &(0x7f0000002e40)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r12}}], &(0x7f0000002e80)='syzkaller\x00', 0x80000001, 0x71, &(0x7f0000002ec0)=""/113, 0x41100, 0x11, '\x00', r5, @tracing=0x17, r12, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r13, 0xffffffffffffffff, 0x0, &(0x7f0000003100)=[r7, r12, r7, r7, r14], 0x0, 0x10, 0x1}, 0x94) 3.658400549s ago: executing program 2 (id=4620): sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r2, 0x1, 0x39, 0x0, &(0x7f0000000080)) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$kcm(0xa, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB="b7b4efb411385fa9f0b5950e4ecabfc2575a48262a49601a2c5f06692e220268ea06f874927c5b9490e8674cf29bd94bc99e64b0b1c38a9b23029e3cd7befe7d704dbe055c93a999ed82cb49890b309d3f2e2fbd0a741f04b0c11dfc05149475807f2e1083ce651e3e28e35625c21de2298b790495ebeb89f50ad035db0804648f47b308b63af7832962", @ANYRES32=r4, @ANYRES64=r1], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0), &(0x7f0000000700), 0x0, 0x20000000000000c4}}, 0x40) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000010004b0400000000000000007a000000", @ANYRES32=r8, @ANYBLOB="0000000000000000008001000180c200000000"], 0x2c}}, 0x0) (async) r9 = socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r9) (async) r10 = accept$phonet_pipe(r9, &(0x7f0000000140), &(0x7f00000001c0)=0x10) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040080001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)={@map=r12, r11, 0x26}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r12, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) setsockopt$PNPIPE_INITSTATE(r10, 0x113, 0x4, &(0x7f00000002c0), 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500180100002020692500000000002020206b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001000000100"/20, @ANYRES8=r10, @ANYBLOB="e6000000000000000008f41f000700009e92f2e79605ee2fc2c7c520b3b5418aab69c21c"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$TIPC_NL_NODE_GET(r9, 0x0, 0x4011) 3.398134043s ago: executing program 0 (id=4623): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000030000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0x210, 0x210, 0x0, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@ipv6={@private1, @loopback, [0xff, 0xff000000, 0x0, 0xffffffff], [0xff, 0xffffff00, 0xff, 0xffffff00], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x1, 0x7, 0x6, 0xdcbb106132937e2}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @common=@icmp6={{0x28}, {0xb, 'Z`', 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, [0xff, 0xffffff00, 0xff], [0x0, 0xff, 0xffffff00, 0xffffff00], 'syz_tun\x00', 'macvlan1\x00', {0xff}, {0xff}, 0x3b, 0xff, 0x1}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x1, {0x8}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x7, 0x40, {0x6a18}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='memory.swap.current\x00', 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000004c0)={r9, 0x3, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@newtclass={0x4c, 0x28, 0x2, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x10, 0xffe7}, {0xfff1, 0xb}, {0x4}}, [@TCA_RATE={0x6, 0x5, {0x9}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x10, 0xf3}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r7, r9, 0x25, 0x11, @void}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r4, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7, 0x14}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "bba3ab48f5"}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040005) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d20000009500000000000000c041fa0a373dfadc74a04660ed8eaf23ffcf9e27f29d84e86c8cebe12a18336e8ca4fe13a841f90f4f746af58a68ade9e69ccea8fc708f58fd2cf75f6b7f442afc2e03890c7827832c12898ffab243d3e34cf6555996a69d0e4776c67f21efa07a7e57b5fe2fecdda824fc15e4a73fdfeeefcbcacfd9dd6169c326c3ff6e8e7b6cdff8ca3c63455f16da6ba9f1082a"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r1, &(0x7f0000002a80)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbf198a084ce1c86dd62e68393004411"], 0x7e) 3.349223839s ago: executing program 2 (id=4624): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x6, 0x800, 0xfffffff9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x0, 0x0, 0x0, 0xd}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 2.718590948s ago: executing program 4 (id=4628): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}}, 0x800) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'vlan0\x00', {0x4}}) 2.662340945s ago: executing program 3 (id=4629): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) (async) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7b4da7384ae8095c0106", 0xe, 0x8040, &(0x7f0000000200)={0x11, 0x17, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) socket(0x11, 0x3, 0x0) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x4) (rerun: 32) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0x9}, {0x6, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 2.422883065s ago: executing program 1 (id=4630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x34, r1, 0x2799f5eec7981083, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xbde8b7aa92ee725b}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59095004000000000000080000001000048009000500"], 0x24}}, 0x0) 2.375977087s ago: executing program 4 (id=4631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x68, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) (async) write$cgroup_pressure(r4, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x8}, 0xd) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 2.364189131s ago: executing program 2 (id=4632): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4803}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000100)={0x10000, 0x67}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}}, 0x40000) 2.228517438s ago: executing program 1 (id=4633): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x10, 0x7, 0x40, @remote, @dev={0xfe, 0x80, '\x00', 0xb}, 0x10, 0x80, 0x5, 0x3}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r6 = syz_open_procfs$namespace(r3, &(0x7f0000001780)='ns/ipc\x00') getpid() sendmmsg$unix(r2, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @rights={{0x18, 0x1, 0x1, [r6, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x810) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@delpolicy={0x50, 0x14, 0x800, 0x70bd29, 0x25dfdbff, {{@in=@loopback, @in6=@private1, 0x4e20, 0x0, 0x4e23, 0x0, 0xa, 0x20, 0x0, 0xff, r1, r4}, 0x6e6bbb}}, 0x50}}, 0x20000855) 2.088165951s ago: executing program 0 (id=4634): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x8, 0x0, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x7, 0xfffff214}}) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x78}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 2.049733279s ago: executing program 4 (id=4635): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), 0x10, 0x1ff}, 0x94) r1 = socket$netlink(0x10, 0x3, 0xf) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001332564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000200)={r4, 0x2, 0x30}, &(0x7f0000000240)=0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r5}, 0x38) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x46, 0x9, 0x4, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180), 0x2f, 0x0, 0x0, 0x7400}, 0x4004014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) r8 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x4, 0xfff3}, {0x0, 0xffe0}, {0xfff3, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @broadcast}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c8c4) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) close(r2) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x110e22fff6) 1.971342696s ago: executing program 1 (id=4636): r0 = socket(0xa, 0x3, 0x3a) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x64}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40080}, 0x4044081) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}]}, 0x1c}}, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x891d, 0x0) ioctl$sock_netdev_private(r0, 0x89ff, &(0x7f0000000000)="0441e674d7300948b258a4cec761efb2fa4dabab39f06b168d92cd9151d663d84de4c7869566200b30a7551aa7d06926b2e1a56e62ea28e2c44d340ce2492b2312e0") 1.759663586s ago: executing program 3 (id=4637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0xa, 0x1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x4000000) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @private2}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xe3) r9 = accept4$inet(r3, &(0x7f0000000340)={0x2, 0x0, @empty}, &(0x7f0000000400)=0x10, 0x80800) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000440)={'macsec0\x00'}) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x4005, 0x20, 0x7, 0x8}, 0x7e}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r12, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r12, 0x6, 0x15, &(0x7f00000000c0), 0x4) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x40) 1.597277961s ago: executing program 0 (id=4638): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x8000000b, 0x8}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000500)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fedbdf25170000000400068004000280440006803e00040067636d286165732900000000000000000000000000000000000000000000000016000000f18dc9165a59deb0dc983d32c617ce9fe8101bad8fb800000400018004000980"], 0x68}, 0x1, 0x0, 0x0, 0x8884}, 0x800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000002c80), r4) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x84, r5, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20000000) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) socket(0x23, 0x80000, 0x3) 1.395584252s ago: executing program 4 (id=4639): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0xc, 0x3, &(0x7f0000000080)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x59}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0x4, 0x0, 0x1, 0x5, 0x4, 0x7, 0x5, 0xa, 0x3, 0xa, 0x2, 0x6, 0x8, 0x6, 0x1], 0x0, [0xff, 0x1, 0x3, 0x7, 0x1, 0x666b, 0x6, 0x1000, 0x6, 0x1, 0x5, 0x2, 0x9, 0x2, 0x7, 0x10b1], [0xc, 0x3, 0x2, 0x8, 0x5, 0x2, 0x0, 0x2, 0x1, 0x3ff, 0x7, 0xfff8, 0x13, 0x8, 0x0, 0xd0]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000000)=@hopopts={0x87, 0xa, '\x00', [@generic={0x43, 0x3f, "567031f193a9bc97fd89b7c8aab4dd8affb54aadf395497b1a9b5f96b63d4728b90fbeba719a76d5b532b883f7f96548320fbd24267600b08f508ade629b43"}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0xa}]}, 0x60) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={r6, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, @in6={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}]}, &(0x7f0000000180)=0x10) r7 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r7, 0x29, 0x7, &(0x7f0000000040)=0xde8, 0x56) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYRES16=0x0], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0xc, 0x3, &(0x7f0000000080)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x59}}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0x4, 0x0, 0x1, 0x5, 0x4, 0x7, 0x5, 0xa, 0x3, 0xa, 0x2, 0x6, 0x8, 0x6, 0x1], 0x0, [0xff, 0x1, 0x3, 0x7, 0x1, 0x666b, 0x6, 0x1000, 0x6, 0x1, 0x5, 0x2, 0x9, 0x2, 0x7, 0x10b1], [0xc, 0x3, 0x2, 0x8, 0x5, 0x2, 0x0, 0x2, 0x1, 0x3ff, 0x7, 0xfff8, 0x13, 0x8, 0x0, 0xd0]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000000)=@hopopts={0x87, 0xa, '\x00', [@generic={0x43, 0x3f, "567031f193a9bc97fd89b7c8aab4dd8affb54aadf395497b1a9b5f96b63d4728b90fbeba719a76d5b532b883f7f96548320fbd24267600b08f508ade629b43"}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0xa}]}, 0x60) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={r6, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, @in6={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}]}, &(0x7f0000000180)=0x10) (async) socket(0xa, 0x3, 0xff) (async) setsockopt$inet6_int(r7, 0x29, 0x7, &(0x7f0000000040)=0xde8, 0x56) (async) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYRES16=0x0], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async) 1.22413199s ago: executing program 1 (id=4640): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8", 0x17}], 0x1}], 0x1, 0x4814) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000280)={0x0, 'veth0_vlan\x00', {}, 0x9}) recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000340)=""/21, 0x15}], 0x2}, 0x3}], 0x2, 0x2001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) (async) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) accept$alg(r1, 0x0, 0x0) (async) sendmmsg$alg(r2, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8", 0x17}], 0x1}], 0x1, 0x4814) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000280)={0x0, 'veth0_vlan\x00', {}, 0x9}) (async) recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000340)=""/21, 0x15}], 0x2}, 0x3}], 0x2, 0x2001, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 1.142045782s ago: executing program 3 (id=4641): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x9) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) unshare(0x6020400) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x4, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 943.639315ms ago: executing program 1 (id=4642): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x3a, 0x1, 0x20, 0x0, {0xb}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x40010) r4 = socket(0x2c, 0x3, 0x3ff) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x148, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x73c7d38a1b8432c4, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14}]}}]}, 0x148}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305000000000000000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c28000050003000d"], 0x48}}, 0x0) getpeername(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000280)=0x80) 851.672576ms ago: executing program 2 (id=4643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xbc}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r2, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x5c, 0x433547ab64d46445, 0xb, 0x16, 0x48, 0x4, 0x18, 0x6c]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008075}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xbc}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r2, 0x1, 0x0, 0xffffffff, {{}, {@void, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x1b, 0x5c, 0x433547ab64d46445, 0xb, 0x16, 0x48, 0x4, 0x18, 0x6c]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008075}, 0x0) (async) 805.946569ms ago: executing program 4 (id=4644): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x7, 0x8}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x8, 0xa74, 0x8, 0x8, 0x0, 0x4, 0x7, 0x2, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={r1}, &(0x7f0000000100)=0x8) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xec, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xec}, 0x1, 0x0, 0x0, 0x319137c8d6a14236}, 0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x320e}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40000) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000480)=0xb, 0x4) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000004c0)={0x18, 0x0, {0x0, @remote, 'pimreg1\x00'}}, 0x1e) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000600)={r0, &(0x7f0000000500)='devlink\x00', 0x20000, &(0x7f0000000540)={@align=0x10000, {0x80, 0x8000, 0x10001, 0x5}}, 0x0, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0x1}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40004810}, 0x800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000780), r6) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000007c0)={{0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, {0xa, 0x4e21, 0x8001, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80}, 0xffffffffffffffff, {[0xffc000, 0x7, 0x2c3, 0x408, 0x0, 0x81, 0x8, 0x1]}}, 0x5c) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000880), r6) sendmsg$NLBL_MGMT_C_PROTOCOLS(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44001}, 0x20000004) accept4$nfc_llcp(r5, &(0x7f0000000980), &(0x7f0000000a00)=0x60, 0x80800) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000a40)) getsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40)=@generic={&(0x7f0000000b00)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)=r0}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x1e, 0x29, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @map_val={0x18, 0x4, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x5, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7aa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000dc0)='syzkaller\x00', 0xa, 0x9c, &(0x7f0000000e00)=""/156, 0x40f00, 0x72, '\x00', 0x0, @sk_lookup, r5, 0x8, &(0x7f0000000ec0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000f00)={0x4, 0x6, 0x7, 0xc}, 0x10, 0xffffffffffffffff, r5, 0x5, &(0x7f0000000f40)=[0x1, r5, r0, r0, r5, r5, r0, r5, r0, r0], &(0x7f0000000f80)=[{0x5, 0x4, 0xd}, {0x3, 0x4, 0x10, 0x6520784017717f0c}, {0x1, 0x2, 0x7, 0x7}, {0x1, 0x4, 0x5, 0x3}, {0x4, 0x2, 0x2, 0xc}], 0x10, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002140)={'\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000024c0)={r0, 0xe0, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000002240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4a, &(0x7f00000022c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000002300), &(0x7f0000002340), 0x8, 0x78, 0x8, 0x8, &(0x7f0000002380)}}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0x2, 0x27, &(0x7f0000002500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6c}, [@map_val={0x18, 0x9, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0xcb}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000002640)='syzkaller\x00', 0x200, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x24, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r10, 0x1, &(0x7f0000002680)=[r8, r8], &(0x7f00000026c0)=[{0x3, 0x1, 0x10, 0xa}], 0x10, 0x7fff}, 0x94) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002800)=@o_path={&(0x7f00000027c0)='./file1\x00', 0x0, 0x0, r10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000028c0)={0x7, 0x3, &(0x7f00000010c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x79}, @exit], &(0x7f0000001100)='GPL\x00', 0x6, 0x1000, &(0x7f0000001140)=""/4096, 0x41000, 0x71, '\x00', r11, @fallback, r5, 0x8, &(0x7f0000002180)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000021c0)={0x0, 0xd, 0x3, 0x4a}, 0x10, r12, r13, 0x2, &(0x7f0000002840)=[r14, r8, r9, r0], &(0x7f0000002880)=[{0x3, 0x1, 0x9, 0xc}, {0x1, 0x5}], 0x10, 0x4}, 0x94) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r15, &(0x7f0000002ac0)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x54, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x81}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xe}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xd5}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008002}, 0x4) 697.10468ms ago: executing program 3 (id=4645): splice(0xffffffffffffffff, &(0x7f0000000000)=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x6, 0x1, 0x0, 0x20000000) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000080003400000000114000000110007"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000140)=0x4) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 583.525587ms ago: executing program 1 (id=4646): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x4, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x4, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000340)={0x1d, r9, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r9, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000140)={r9, 0x1, 0x6, @random="708854d231a2"}, 0x10) syz_emit_ethernet(0x2d, &(0x7f0000000140)=ANY=[], 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 526.330914ms ago: executing program 0 (id=4647): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000100010017ff04000000a56f1c000000"], 0x14}}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, @in6={0xa, 0x4e24, 0x1, @empty, 0x3ff}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0x6}, @in6={0xa, 0x4e22, 0x2, @mcast2, 0x6}], 0xb0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4404048}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x21c, r1, 0x100, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x174, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xc5, 0x4, "eb9d2ea65fb2443c63ccc1c615879ab884198f27823bcd3cbd2650d589aeffb41327709de9f8014bda395a3fc86952f3cfca9b169a3f065db12c7a22cc747c9d270e38533f1f140140892bdfa48980507063d814df3523d9441a67b652b4d3a29d605d9e7e91ea7aaad4845f1bbdece67447b8553ab5db5a4fdbd0306e19890504ef796b3ff0f3d17b0b6f434503a020d972de597352937920d96e78586aface7f6348cf712b8cd3e52640bf35eefa810b6796856d06a31dde2c2190af99a7bf8e"}, @ETHTOOL_A_BITSET_VALUE={0x69, 0x4, "22f328a7af57448cdb9ed54f4a3f5f79b079525d641b9a4f8fdafb005f6e5bba62523aa0f1cb958cb26109ac63f2d2edb8f7ee80ef8c5483ebae429ac9120ab364357d45e8579f93195d2fd453c68d441a24340377db1400c0c65c9b64366b09978f67e298"}, @ETHTOOL_A_BITSET_VALUE={0x21, 0x4, "d353770c5410132c35e42de52cf3390a87386f1ef55896c8821db6a504"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x94, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbee}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd801}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2b23}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x4}, {0x4}, {0x4}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd598}]}]}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x1}, 0xd0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x84) sendto$inet(r3, &(0x7f0000000440)='!', 0x1, 0x4048845, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) 487.346392ms ago: executing program 2 (id=4648): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690036000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newlink={0x50, 0x10, 0x405, 0xffffffff, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_IFNAME={0x14}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x44010) 354.956614ms ago: executing program 4 (id=4649): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x3b}, {0x0, 0x0, 0x0, 0x1000000, 0xfffffffffffffffd, 0x0, 0x2e4e}, {0xfffffffffffffff8, 0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x6c}, 0xa, @in=@empty}}, 0xe8) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2720, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r4, 0x0, 0x20000000002) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xb, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x401}, [@jmp={0x5, 0x1, 0x4, 0x2, 0x7, 0x80}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000680)='syzkaller\x00', 0xfffffffa, 0xc5, &(0x7f00000006c0)=""/197, 0x40f00, 0x72, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000900)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000980)=[{0x0, 0x2, 0x1}, {0x5, 0x2, 0x2, 0x1}, {0x1, 0x3, 0x5, 0x2}], 0x10, 0x9}, 0x94) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$pppoe(0x18, 0x1, 0x0) tee(r7, r8, 0x1ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="8520000004000000185000001f00"/24], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x88, &(0x7f00000004c0)=""/136, 0x41100, 0x2, '\x00', 0x0, @fallback=0x25, r4, 0x8, &(0x7f0000000580)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xe, 0x8080000, 0x936}, 0x10, r5, r6, 0x0, &(0x7f0000000a80)=[r7], 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839", 0x5}], 0x1}, 0x0) recvmsg(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)=""/76, 0x4c}], 0x1}, 0x40fd) r11 = socket$inet6(0x10, 0x2, 0x0) write(r11, &(0x7f00000007c0)="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", 0xfc) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) 353.81902ms ago: executing program 3 (id=4650): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000080000000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100008000000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x0, 0xf, 0x0, &(0x7f00000003c0)="3eb5d4b44fa73cc4c14018d7a3da66", 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000079105d000000000005000000000000009552728188282000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 201.172891ms ago: executing program 0 (id=4651): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000040)={0x8, 'veth1_to_bond\x00', {'ip6gre0\x00'}, 0x81}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x14, &(0x7f00000001c0), 0x4) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast1, 0x4e20, 0x3, 'dh\x00', 0x1b, 0x0, 0x3f}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 186.475475ms ago: executing program 2 (id=4652): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) write$nbd(r1, &(0x7f0000000740)={0x67446698, 0x0, 0x2, 0x2, 0x1, "00660d5ea889a138a0802649e1bfb8f8179cf17aa0cfa6b54586331559d761eb"}, 0x30) recvmmsg(r1, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000008c0)=""/36, 0x24}, {&(0x7f0000000900)=""/203, 0xcb}], 0x2}, 0x8}], 0x1, 0x10000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0x6d}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x90) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r3}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2f00020b, 0x809, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 3 (id=4653): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800950001000000000000000000000000000000000000004c9e4d8b29eab5ca3908f5887e574634304aca9e16f56feed5d21036d93b41b6e0c3874d2ea55d1740fa34db70230b8a7df83287b4227f87d3bbee612b048bb70bf3b3263ab2e2aa446c4b4d0f6bd513b320f8bb7ce464ea48ca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x245}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="84010000100013070000000000000000fe88000000003a22e05ff6a2dba300000000000000001901fe8000000004000000000000000000414e21000000000900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x1}, 0x1000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000180), 0x4) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000040), 0x4) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000080), 0x4) tee(r4, r5, 0x8, 0x8) kernel console output (not intermixed with test programs): eft promiscuous mode [ 359.446909][ T6285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.485259][ T6285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.517484][ T6285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.528794][ T6285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.569096][ T6285] veth1_vlan: left promiscuous mode [ 359.588110][ T6285] veth0_vlan: left promiscuous mode [ 359.677090][T16485] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 359.980953][ T4941] Bluetooth: hci5: command tx timeout [ 360.218813][ T6285] team0 (unregistering): Port device team_slave_1 removed [ 360.260857][ T6285] team0 (unregistering): Port device team_slave_0 removed [ 360.467132][ T9] lo speed is unknown, defaulting to 1000 [ 360.489638][ T9] syú2: Port: 1 Link DOWN [ 360.518487][ T14] smbdirect: ib_dev[syú2] removed [ 361.221577][T16538] __nla_validate_parse: 2 callbacks suppressed [ 361.221598][T16538] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2947'. [ 361.298240][ T6285] IPVS: stop unused estimator thread 0... [ 361.313281][T16543] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2949'. [ 361.435131][T16551] xt_hashlimit: size too large, truncated to 1048576 [ 361.562065][T16548] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 361.617359][T16556] netlink: 'syz.1.2951': attribute type 2 has an invalid length. [ 361.621956][T16548] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 361.700618][T16548] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 361.793300][T16548] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 362.258941][ T6287] smbdirect: ib_dev[syz2] removed [ 362.478608][T16585] netlink: 'syz.2.2955': attribute type 1 has an invalid length. [ 362.665000][T16585] bond12: entered promiscuous mode [ 362.691855][T16585] 8021q: adding VLAN 0 to HW filter on device bond12 [ 362.914756][T16594] 8021q: adding VLAN 0 to HW filter on device bond12 [ 362.933830][T16594] bond12: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 362.961334][T16594] bond12: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 362.992990][T16594] bond12: (slave ip6gre3): making interface the new active one [ 363.010379][T16594] ip6gre3: entered promiscuous mode [ 363.028117][T16594] bond12: (slave ip6gre3): Enslaving as an active interface with an up link [ 363.105449][T16609] netlink: 'syz.3.2959': attribute type 1 has an invalid length. [ 363.122224][T16609] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2959'. [ 363.248074][T16614] sock: sock_set_timeout: `syz.2.2960' (pid 16614) tries to set negative timeout [ 363.273181][T16615] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2956'. [ 363.297226][T16178] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 363.364225][T16620] x_tables: duplicate underflow at hook 1 [ 363.389471][T16178] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.439126][T16178] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 363.498818][T16178] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 363.534339][T16178] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 363.578538][T16178] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 363.603484][T16178] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 363.608613][T16626] netlink: 'syz.2.2962': attribute type 1 has an invalid length. [ 363.642533][T16178] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 364.039838][T16178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.144036][T16178] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.186741][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.194016][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.267048][T16661] sctp: [Deprecated]: syz.1.2967 (pid 16661) Use of int in max_burst socket option deprecated. [ 364.267048][T16661] Use struct sctp_assoc_value instead [ 364.292672][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.300082][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.629870][T16674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2968'. [ 364.686875][T16680] "syz.2.2970" (16680) uses obsolete ecb(arc4) skcipher [ 364.696740][T16674] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2968'. [ 365.125350][T16697] syzkaller1: entered promiscuous mode [ 365.141584][T16697] syzkaller1: entered allmulticast mode [ 365.163873][T16699] syzkaller0: entered promiscuous mode [ 365.183533][T16699] syzkaller0: entered allmulticast mode [ 365.589591][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2976'. [ 365.707957][T16714] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2975'. [ 365.744445][T16725] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2978'. [ 365.754831][T16700] netlink: 'syz.2.2973': attribute type 4 has an invalid length. [ 365.836654][T16725] 8021q: VLANs not supported on gre0 [ 366.145370][T16178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.181585][T16741] netlink: 'syz.0.2981': attribute type 21 has an invalid length. [ 366.211671][T16741] netlink: 'syz.0.2981': attribute type 22 has an invalid length. [ 366.241011][T16741] netlink: 'syz.0.2981': attribute type 23 has an invalid length. [ 366.266888][T16741] netlink: 'syz.0.2981': attribute type 25 has an invalid length. [ 366.286654][T16741] netlink: 'syz.0.2981': attribute type 26 has an invalid length. [ 366.300285][T16741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2981'. [ 366.329227][T16741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2981'. [ 366.386968][ T29] audit: type=1107 audit(1782913079.943:12): pid=16739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 366.451276][T16754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2984'. [ 366.555975][T16754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2984'. [ 366.671673][T16761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.738559][T16765] validate_nla: 1 callbacks suppressed [ 366.738579][T16765] netlink: 'syz.2.2983': attribute type 39 has an invalid length. [ 366.765583][T16763] netlink: 'syz.3.2985': attribute type 61 has an invalid length. [ 366.812423][T16764] netlink: 'syz.3.2985': attribute type 61 has an invalid length. [ 367.099547][T16780] netlink: 'syz.0.2988': attribute type 39 has an invalid length. [ 369.181623][T16797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2992'. [ 369.192286][T16797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2992'. [ 369.206335][T16797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2992'. [ 369.216514][T16797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2992'. [ 369.251905][T16797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2992'. [ 369.497431][T16178] veth0_vlan: entered promiscuous mode [ 369.577075][T16178] veth1_vlan: entered promiscuous mode [ 369.675858][T16811] netlink: 'syz.0.2996': attribute type 83 has an invalid length. [ 369.682136][T16178] veth0_macvtap: entered promiscuous mode [ 369.721163][T16178] veth1_macvtap: entered promiscuous mode [ 369.745834][T16814] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2998'. [ 369.789515][T16178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.894749][T16178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.944328][ T6286] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.997829][ T6286] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.025285][ T6286] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.067463][ T6286] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.271055][T16842] netlink: 'syz.0.3005': attribute type 1 has an invalid length. [ 370.353847][T16842] 8021q: adding VLAN 0 to HW filter on device bond12 [ 370.468683][T16843] bond12: (slave veth3): Enslaving as an active interface with a down link [ 370.493349][ T6299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.519696][ T6299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.576461][T16853] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 370.755806][ T29] audit: type=1804 audit(1782913084.313:13): pid=16866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3011" name="/newroot/626/cgroup.controllers" dev="tmpfs" ino=3204 res=1 errno=0 [ 370.805226][ T29] audit: type=1800 audit(1782913084.343:14): pid=16866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3011" name="cgroup.controllers" dev="tmpfs" ino=3204 res=0 errno=0 [ 370.954275][ T6291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.997259][ T6291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.226221][T16883] netlink: 'syz.1.3016': attribute type 10 has an invalid length. [ 371.248490][T16884] SET target dimension over the limit! [ 371.284603][T16884] SET target dimension over the limit! [ 371.307271][T16884] SET target dimension over the limit! [ 371.333094][T16884] SET target dimension over the limit! [ 371.366606][T16884] SET target dimension over the limit! [ 371.396139][T16884] SET target dimension over the limit! [ 371.426074][T16884] SET target dimension over the limit! [ 371.454397][T16884] SET target dimension over the limit! [ 371.477112][T16884] SET target dimension over the limit! [ 371.496136][T16884] SET target dimension over the limit! [ 371.951925][T16908] __nla_validate_parse: 35 callbacks suppressed [ 371.951948][T16908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3023'. [ 371.984906][T16910] Set syz1 is full, maxelem 65536 reached [ 371.994808][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 372.006178][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 372.015540][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 372.026284][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 372.034787][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 372.079150][T16908] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3023'. [ 372.153363][T16908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3023'. [ 372.165320][T16922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3025'. [ 372.214873][T16922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3025'. [ 372.289510][T16919] C: renamed from lo (while UP) [ 372.313126][T16919] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 372.868684][T16938] syzkaller0: entered promiscuous mode [ 372.874743][T16938] syzkaller0: entered allmulticast mode [ 373.242876][T16906] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.251455][T16906] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.258696][T16906] bridge_slave_0: entered allmulticast mode [ 373.267321][T16906] bridge_slave_0: entered promiscuous mode [ 373.284375][T16906] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.292305][T16906] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.299644][T16906] bridge_slave_1: entered allmulticast mode [ 373.307764][T16906] bridge_slave_1: entered promiscuous mode [ 373.363447][T16906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.377368][T16906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.434575][T16906] team0: Port device team_slave_0 added [ 373.443575][T16906] team0: Port device team_slave_1 added [ 373.474341][T16906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.481580][T16906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.508917][T16906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.522184][T16906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.529741][T16906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.556076][T16906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.619544][T16906] hsr_slave_0: entered promiscuous mode [ 373.626854][T16906] hsr_slave_1: entered promiscuous mode [ 373.633562][T16906] debugfs: 'hsr0' already exists in 'hsr' [ 373.639324][T16906] Cannot create hsr debugfs directory [ 373.801835][T16906] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.813978][T16906] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 373.915536][T16906] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.928131][T16906] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 374.005405][T16906] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.016362][T16906] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 374.092512][T16906] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.103651][T16906] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 374.140913][ T4941] Bluetooth: hci2: command tx timeout [ 374.938258][T16912] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 375.014190][T16906] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 375.076490][T16906] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 375.118341][T16906] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 375.173165][T16906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 375.207525][T16962] pim6reg: entered allmulticast mode [ 375.232852][T16966] pim6reg: left allmulticast mode [ 375.278413][T16906] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 375.294857][T16906] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 375.304376][T16963] veth0: entered promiscuous mode [ 375.316234][T16971] netlink: 'syz.3.3036': attribute type 1 has an invalid length. [ 375.326198][T16906] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 375.345636][T16962] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3034'. [ 375.361036][T16906] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 375.378802][T16959] veth0: left promiscuous mode [ 375.397251][T16974] netlink: 'syz.4.3037': attribute type 39 has an invalid length. [ 375.698091][T16997] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3040'. [ 375.708484][T16997] tipc: Invalid UDP bearer configuration [ 375.708535][T16997] tipc: Enabling of bearer rejected, failed to enable media [ 375.905215][T16906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.908860][T17003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3041'. [ 375.942380][T17002] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3043'. [ 375.991849][T16906] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.015156][T17002] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3043'. [ 376.038583][ T6298] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.045826][ T6298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.098117][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.105394][ T6298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.193971][T17015] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 376.221244][ T4941] Bluetooth: hci2: command tx timeout [ 376.767619][T17053] veth0_macvtap: left allmulticast mode [ 376.797740][T17053] macsec0: left allmulticast mode [ 376.823715][T17053] geneve0: left allmulticast mode [ 376.875901][T17053] ip6gretap1: left allmulticast mode [ 376.934957][T17053] ip6gre2: left allmulticast mode [ 376.964082][T17053] bond8: left allmulticast mode [ 376.978403][T17053] bridge7: left allmulticast mode [ 376.993645][T17053] ip6erspan1: left allmulticast mode [ 377.339504][T17088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3064'. [ 377.389601][T17089] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3064'. [ 377.428314][T17094] gtp0: entered promiscuous mode [ 377.433537][T17094] gtp0: entered allmulticast mode [ 377.519087][T16906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.527840][T17096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3065'. [ 377.582878][T17098] tipc: Enabling of bearer rejected, failed to enable media [ 377.614515][T17098] netlink: 'syz.4.3067': attribute type 1 has an invalid length. [ 377.637021][T17098] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3067'. [ 377.654330][T17098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3067'. [ 377.751396][T16906] veth0_vlan: entered promiscuous mode [ 377.848583][T16906] veth1_vlan: entered promiscuous mode [ 377.897603][T17111] hsr0: entered promiscuous mode [ 377.943336][T16906] veth0_macvtap: entered promiscuous mode [ 377.969827][T16906] veth1_macvtap: entered promiscuous mode [ 378.028027][T16906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.088626][T16906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.145616][ T6291] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.185304][ T6291] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.247295][ T6291] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.262055][T17127] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3075'. [ 378.275177][ T6291] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.301423][ T4941] Bluetooth: hci2: command tx timeout [ 378.489859][ T6291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.516827][T17133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3080'. [ 378.532046][ T6291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.541667][T17133] x_tables: duplicate underflow at hook 2 [ 378.696387][ T6298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.709867][ T6298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.088521][T17163] netlink: 'syz.4.3084': attribute type 1 has an invalid length. [ 379.107765][T17163] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3084'. [ 379.415327][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 379.436708][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 379.453966][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 379.465870][ T5632] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 379.475054][ T5632] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 379.777375][T17176] syzkaller0: entered promiscuous mode [ 379.786967][T17176] syzkaller0: entered allmulticast mode [ 380.390302][ T4941] Bluetooth: hci2: command tx timeout [ 381.591595][ T4941] Bluetooth: hci3: command tx timeout [ 382.639503][T17226] IPv6: sit4: Disabled Multicast RS [ 382.745996][T17228] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3099'. [ 382.852263][T17230] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 382.884170][T17230] tipc: Enabling of bearer rejected, already enabled [ 382.918720][T17242] netlink: 'syz.4.3103': attribute type 64 has an invalid length. [ 382.931004][T17230] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3100'. [ 382.945885][T17242] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3103'. [ 383.403986][T17262] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 383.497327][T17177] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.554367][T17177] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.579690][T17177] bridge_slave_0: entered allmulticast mode [ 383.602748][T17177] bridge_slave_0: entered promiscuous mode [ 383.628880][T17177] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.658289][T17177] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.667713][ T4941] Bluetooth: hci3: command tx timeout [ 383.694265][T17177] bridge_slave_1: entered allmulticast mode [ 383.737547][T17177] bridge_slave_1: entered promiscuous mode [ 383.944283][T17177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.979615][T17272] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3107'. [ 383.993034][T17272] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 384.007631][T17177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.156872][T17177] team0: Port device team_slave_0 added [ 384.166235][T17177] team0: Port device team_slave_1 added [ 384.224433][T17177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.231689][T17177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.260004][T17177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.271858][T17299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3112'. [ 384.284586][T17177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.291892][T17177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.322324][T17299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3112'. [ 384.333570][T17177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.497881][T17308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3116'. [ 384.512571][T17308] netlink: 'syz.1.3116': attribute type 7 has an invalid length. [ 384.566397][T17177] hsr_slave_0: entered promiscuous mode [ 384.589758][T17177] hsr_slave_1: entered promiscuous mode [ 384.623201][T17177] debugfs: 'hsr0' already exists in 'hsr' [ 384.629020][T17177] Cannot create hsr debugfs directory [ 384.827158][T17320] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 384.964702][T17328] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3120'. [ 385.133841][T17328] vlan2: entered allmulticast mode [ 385.139282][T17328] bond0: entered allmulticast mode [ 385.149421][T17328] bond_slave_0: entered allmulticast mode [ 385.165423][T17328] bond_slave_1: entered allmulticast mode [ 385.206114][T17333] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3123'. [ 385.284651][T17344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3125'. [ 385.615549][T17177] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.629045][T17177] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.640238][T17177] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 385.681489][T17354] syzkaller0: entered promiscuous mode [ 385.691162][T17354] syzkaller0: entered allmulticast mode [ 385.740679][ T4941] Bluetooth: hci3: command tx timeout [ 385.844262][T17177] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.854902][T17177] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.885939][T17177] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 386.040023][T17177] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.067244][T17177] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.088674][T17177] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 386.185638][T17383] 8021q: adding VLAN 0 to HW filter on device bond10 [ 386.244027][T17177] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.254600][T17177] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.266036][T17177] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 386.412813][T17397] xt_TCPMSS: Only works on TCP SYN packets [ 386.711038][T17373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 386.728869][T17177] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 386.781073][T17177] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 386.829339][T17177] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 386.904637][T17177] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 386.914972][T17177] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 386.931489][T17177] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 386.978487][T17177] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 387.012667][T17177] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 387.136009][T17429] netlink: 'syz.0.3146': attribute type 63 has an invalid length. [ 387.186307][T17436] netlink: 'syz.0.3146': attribute type 63 has an invalid length. [ 387.285845][T17177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.348734][T17177] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.391987][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.399220][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.444212][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.451475][ T6298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.488303][T17455] netlink: 'syz.0.3151': attribute type 11 has an invalid length. [ 387.514638][T17455] netlink: 'syz.0.3151': attribute type 1 has an invalid length. [ 387.814652][T17468] vcan0: entered promiscuous mode [ 387.820928][ T4941] Bluetooth: hci3: command tx timeout [ 387.830750][T17468] vcan0: entered allmulticast mode [ 387.931703][T17476] syzkaller0: entered promiscuous mode [ 387.960230][T17476] syzkaller0: entered allmulticast mode [ 388.106407][T17482] netlink: 'syz.1.3158': attribute type 21 has an invalid length. [ 388.140465][T17482] netlink: 'syz.1.3158': attribute type 1 has an invalid length. [ 388.275561][T17492] __nla_validate_parse: 7 callbacks suppressed [ 388.275581][T17492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3160'. [ 388.522951][T17496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3161'. [ 388.589091][T17508] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 388.704868][T17514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.860742][T17177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.112102][T17177] veth0_vlan: entered promiscuous mode [ 389.162032][T17177] veth1_vlan: entered promiscuous mode [ 389.299042][T17177] veth0_macvtap: entered promiscuous mode [ 389.333561][T17177] veth1_macvtap: entered promiscuous mode [ 389.388305][T17177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.431455][T17177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.484758][ T6286] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.536501][ T6286] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.548228][T17527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3169'. [ 389.576149][ T6286] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.614553][ T6286] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.876250][T17538] netlink: 'syz.4.3172': attribute type 1 has an invalid length. [ 389.886645][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.920071][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.947068][T17538] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 390.024999][ T6283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.096720][ T6283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.156777][T17553] netlink: 'syz.4.3176': attribute type 32 has an invalid length. [ 390.192698][T17555] netlink: 'syz.4.3176': attribute type 32 has an invalid length. [ 390.505428][T17569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3178'. [ 390.596149][T17570] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3178'. [ 390.938919][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 390.953987][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 390.971988][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 390.985876][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 390.996281][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 391.645315][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.685263][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.702483][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 392.043425][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.115057][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.159436][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 392.466444][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.505529][T17647] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3197'. [ 392.516088][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.538276][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 392.556128][T17651] netlink: 'syz.0.3199': attribute type 11 has an invalid length. [ 393.101073][ T5632] Bluetooth: hci1: command tx timeout [ 393.612997][T17687] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3205'. [ 393.986482][T17707] x_tables: duplicate underflow at hook 3 [ 394.034621][T17705] netlink: 'syz.4.3211': attribute type 1 has an invalid length. [ 394.075598][ T48] bridge0: port 3(00ªX¹¦Dö») entered disabled state [ 394.087861][T17705] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3211'. [ 394.108318][ T48] bridge_slave_1: left promiscuous mode [ 394.135289][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.219736][ T48] bridge_slave_0: left allmulticast mode [ 394.245030][ T48] bridge_slave_0: left promiscuous mode [ 394.270479][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.345929][ T48] veth3: left allmulticast mode [ 394.362856][ T48] veth3: left promiscuous mode [ 394.377461][ T48] bridge1: port 1(veth3) entered disabled state [ 394.873489][T17740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3218'. [ 394.961450][T17745] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3219'. [ 395.180979][ T5632] Bluetooth: hci1: command tx timeout [ 395.249065][ T48] bond8 (unregistering): (slave ip6gretap1): Releasing active interface [ 395.700347][ T48] bond1 (unregistering): Released all slaves [ 395.717293][ T48] bond2 (unregistering): Released all slaves [ 395.734893][ T48] bond3 (unregistering): Released all slaves [ 395.761638][ T48] bond4 (unregistering): Released all slaves [ 395.779989][ T48] bond5 (unregistering): Released all slaves [ 395.797124][ T48] bond6 (unregistering): Released all slaves [ 395.827100][ T48] bond7 (unregistering): Released all slaves [ 395.843555][ T48] bond8 (unregistering): Released all slaves [ 395.860984][ T48] bond9 (unregistering): Released all slaves [ 395.878891][ T48] bond0 (unregistering): Released all slaves [ 395.906812][ T48] bond10 (unregistering): Released all slaves [ 396.121414][T17740] team0: Port device team_slave_0 removed [ 396.222989][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 396.335705][ T48] tipc: Disabling bearer [ 396.416278][ T48] tipc: Disabling bearer [ 396.444273][ T48] tipc: Left network mode [ 396.650684][ T48] IPVS: stopping master sync thread 12024 ... [ 396.882509][T17778] syzkaller0: entered promiscuous mode [ 396.890980][T17778] syzkaller0: entered allmulticast mode [ 396.919515][T17791] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 397.105471][T17802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3230'. [ 397.163422][T17582] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.173591][T17582] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.182649][T17582] bridge_slave_0: entered allmulticast mode [ 397.192805][T17582] bridge_slave_0: entered promiscuous mode [ 397.262162][ T5632] Bluetooth: hci1: command tx timeout [ 397.497901][T17823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3235'. [ 397.599151][T17582] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.612816][T17582] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.620923][T17582] bridge_slave_1: entered allmulticast mode [ 397.629637][T17582] bridge_slave_1: entered promiscuous mode [ 397.847750][T17823] macvtap0: entered promiscuous mode [ 397.860560][T17823] macvtap0: entered allmulticast mode [ 397.877753][T17823] vlan0: entered allmulticast mode [ 397.891888][T17823] veth0_vlan: entered allmulticast mode [ 398.228982][T17848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3239'. [ 398.343684][T17856] netlink: 'syz.0.3241': attribute type 83 has an invalid length. [ 398.368494][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 398.393734][T17853] tc_dump_action: action bad kind [ 398.440682][T17582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.457369][T17582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.577931][T17863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3244'. [ 398.594055][ T48] hsr_slave_0: left promiscuous mode [ 398.603097][ T48] hsr_slave_1: left promiscuous mode [ 398.609254][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.618190][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.629233][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.637246][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.655995][ T48] veth0_macvtap: left promiscuous mode [ 398.662088][ T48] veth1_vlan: left promiscuous mode [ 398.667516][ T48] veth0_vlan: left promiscuous mode [ 398.759403][T17868] xt_cgroup: path and classid specified [ 399.090959][ T48] team0 (unregistering): Port device team_slave_1 removed [ 399.132465][ T48] team0 (unregistering): Port device team_slave_0 removed [ 399.340555][ T5632] Bluetooth: hci1: command tx timeout [ 399.370785][T17864] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 399.446210][T17582] team0: Port device team_slave_0 added [ 399.476145][T17582] team0: Port device team_slave_1 added [ 399.631736][T17582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.660278][T17582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.756043][T17891] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 399.766677][T17582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.798236][T17582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.813862][T17882] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20003 [ 399.825653][T17582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.853207][T17582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.864920][T17882] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3250'. [ 399.874363][T17882] tipc: Invalid UDP bearer configuration [ 399.874418][T17882] tipc: Enabling of bearer rejected, failed to enable media [ 400.361789][ T48] IPVS: stop unused estimator thread 0... [ 400.396024][T17582] hsr_slave_0: entered promiscuous mode [ 400.418051][T17582] hsr_slave_1: entered promiscuous mode [ 400.459214][T17582] debugfs: 'hsr0' already exists in 'hsr' [ 400.475500][T17582] Cannot create hsr debugfs directory [ 400.502643][T17924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3257'. [ 400.543326][T17919] netlink: 'syz.0.3257': attribute type 61 has an invalid length. [ 400.613821][T17919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3257'. [ 401.378023][T17938] bond1 (unregistering): Released all slaves [ 401.617386][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 401.767773][T17958] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3265'. [ 401.828185][T17960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3265'. [ 401.865091][T17961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3266'. [ 402.386314][T17981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3268'. [ 402.428678][T17981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3268'. [ 402.678765][T17986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3269'. [ 402.769351][T17999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3269'. [ 402.793390][ T29] audit: type=1804 audit(1782913116.353:15): pid=17995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3271" name="/newroot/40/cgroup.controllers" dev="tmpfs" ino=222 res=1 errno=0 [ 402.857560][ T29] audit: type=1800 audit(1782913116.383:16): pid=17995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3271" name="cgroup.controllers" dev="tmpfs" ino=222 res=0 errno=0 [ 403.164389][T18014] sctp: [Deprecated]: syz.3.3275 (pid 18014) Use of struct sctp_assoc_value in delayed_ack socket option. [ 403.164389][T18014] Use struct sctp_sack_info instead [ 403.646024][T18030] 8021q: adding VLAN 0 to HW filter on device bond2 [ 404.169971][T18069] netlink: 'syz.4.3285': attribute type 5 has an invalid length. [ 404.253026][T18069] geneve2: entered promiscuous mode [ 404.278145][T18069] geneve2: entered allmulticast mode [ 404.315395][ T6291] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 404.324656][ T6291] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 404.334289][ T6291] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 404.377496][T17582] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 404.424196][T17582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 404.465406][ T6291] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 404.503591][T17582] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 404.525164][ T6062] IPVS: starting estimator thread 0... [ 404.558491][T17582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 404.575768][T17582] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 404.635963][T18083] IPVS: using max 25 ests per chain, 60000 per kthread [ 405.069567][T17582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.088288][T18076] syzkaller1: entered promiscuous mode [ 405.115282][T18076] syzkaller1: entered allmulticast mode [ 405.215982][T18101] __nla_validate_parse: 4 callbacks suppressed [ 405.216001][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3290'. [ 405.368416][T17582] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 405.391745][T17582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 405.545600][T18116] IPVS: set_ctl: invalid protocol: 137 172.30.1.3:20001 [ 405.796757][T17582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.872050][T18131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3296'. [ 405.885720][T17582] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.967600][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.974899][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.991154][T18136] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 406.035070][ T6299] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.042374][ T6299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.674259][T18166] openvswitch: netlink: Missing valid actions attribute. [ 406.698734][T18166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.004478][T18184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3311'. [ 407.029042][T18184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3311'. [ 407.089712][T18192] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3312'. [ 407.115009][T18180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3310'. [ 407.126736][T18184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3311'. [ 407.137814][T18192] openvswitch: netlink: Message has 4 unknown bytes. [ 407.145872][T18180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3310'. [ 407.160642][T18184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3311'. [ 407.978882][T18229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3319'. [ 408.174061][T17582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.402421][T17582] veth0_vlan: entered promiscuous mode [ 408.445194][T17582] veth1_vlan: entered promiscuous mode [ 408.596425][T17582] veth0_macvtap: entered promiscuous mode [ 408.635039][T17582] veth1_macvtap: entered promiscuous mode [ 408.732549][T17582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.826147][T17582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.921429][ T6283] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.950993][ T6283] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.985518][T18273] syzkaller0: entered promiscuous mode [ 409.007263][T18273] syzkaller0: entered allmulticast mode [ 409.041639][ T6283] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.057988][ T6283] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.111702][T18285] netlink: 'syz.2.3333': attribute type 1 has an invalid length. [ 409.192135][T18285] 8021q: adding VLAN 0 to HW filter on device bond2 [ 409.306757][T18286] gretap1: entered promiscuous mode [ 409.592364][ T6291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.608658][T18299] netlink: 'syz.2.3336': attribute type 12 has an invalid length. [ 409.616907][ T6291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.745538][ T6283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.768737][ T6283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.011832][T18317] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 410.336052][T18332] __nla_validate_parse: 4 callbacks suppressed [ 410.336073][T18332] netlink: 54 bytes leftover after parsing attributes in process `syz.3.3346'. [ 410.390444][T18332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3346'. [ 410.426212][ T4941] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 410.441137][ T4941] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 410.453276][ T4941] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 410.468129][ T4941] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 410.478245][ T4941] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 410.488530][T18338] netlink: 'syz.4.3348': attribute type 11 has an invalid length. [ 410.722797][T18351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3349'. [ 410.964744][T18358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3351'. [ 411.077908][T18359] netlink: 'syz.3.3352': attribute type 15 has an invalid length. [ 411.105333][T18359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3352'. [ 411.408628][T18370] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3356'. [ 411.422471][T18375] syzkaller0: entered promiscuous mode [ 411.441539][T18375] syzkaller0: entered allmulticast mode [ 411.628722][T18387] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 411.644963][T18390] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20003 [ 412.019874][T18410] netlink: 'syz.1.3368': attribute type 1 has an invalid length. [ 412.289413][T18426] netlink: 'syz.4.3372': attribute type 10 has an invalid length. [ 412.294744][T18424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3373'. [ 412.379026][T18426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.408250][T18426] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 412.541554][ T4941] Bluetooth: hci4: command tx timeout [ 412.648802][T18438] lo speed is unknown, defaulting to 1000 [ 412.670362][T18440] netlink: 'syz.4.3378': attribute type 21 has an invalid length. [ 412.681821][T18444] xt_TCPMSS: Only works on TCP SYN packets [ 412.718129][T18438] lo speed is unknown, defaulting to 1000 [ 412.744705][T18438] lo speed is unknown, defaulting to 1000 [ 412.771485][T18438] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 412.816617][T18438] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 412.875488][T18450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3379'. [ 412.886932][T18438] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 412.924341][T18336] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.951387][T18438] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 412.952375][T18336] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.001788][T18336] bridge_slave_0: entered allmulticast mode [ 413.018623][T18336] bridge_slave_0: entered promiscuous mode [ 413.040531][T18336] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.058129][T18336] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.079671][T18336] bridge_slave_1: entered allmulticast mode [ 413.105796][T18336] bridge_slave_1: entered promiscuous mode [ 413.130950][T18438] lo speed is unknown, defaulting to 1000 [ 413.194130][T18438] lo speed is unknown, defaulting to 1000 [ 413.245748][T18438] lo speed is unknown, defaulting to 1000 [ 413.257746][T18336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.281193][T18438] lo speed is unknown, defaulting to 1000 [ 413.293981][T18336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.315748][T18438] lo speed is unknown, defaulting to 1000 [ 413.375397][T18438] lo speed is unknown, defaulting to 1000 [ 413.436061][T18438] lo speed is unknown, defaulting to 1000 [ 413.461033][T18336] team0: Port device team_slave_0 added [ 413.467183][T18468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3388'. [ 413.477654][T18438] lo speed is unknown, defaulting to 1000 [ 413.483826][T18466] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 413.492635][T18336] team0: Port device team_slave_1 added [ 413.508170][T18468] netlink: 'syz.3.3388': attribute type 1 has an invalid length. [ 413.630367][T18475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3390'. [ 413.711833][T18336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.726026][T18336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.767108][T18336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.825487][T18336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.836211][T18336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.863168][T18336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.999387][T18491] netlink: 'syz.1.3395': attribute type 64 has an invalid length. [ 414.109308][T18336] hsr_slave_0: entered promiscuous mode [ 414.132095][T18336] hsr_slave_1: entered promiscuous mode [ 414.138724][T18336] debugfs: 'hsr0' already exists in 'hsr' [ 414.145314][T18336] Cannot create hsr debugfs directory [ 414.316679][T18501] netlink: 'syz.4.3399': attribute type 1 has an invalid length. [ 414.486890][T18507] macvlan2: entered promiscuous mode [ 414.499130][T18507] macvlan2: entered allmulticast mode [ 414.507418][T18507] bond3: entered promiscuous mode [ 414.513771][T18507] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 414.533047][T18507] bond3: left promiscuous mode [ 414.622355][ T4941] Bluetooth: hci4: command tx timeout [ 414.693921][T18336] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.734981][T18336] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 414.759549][T18336] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 414.917687][T18336] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.941268][T18336] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 414.970224][T18336] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 415.132896][T18336] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.171619][T18336] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 415.200452][T18336] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 415.388586][T18336] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.413658][T18336] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 415.456715][T18336] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 416.168498][T18336] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 416.196472][T18336] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 416.205310][T18336] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 416.230870][T18336] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 416.239681][T18336] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 416.271941][T18336] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 416.281032][T18336] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 416.313694][T18336] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 416.430153][T18534] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 416.436147][T18534] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 416.636471][T18534] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 416.650236][T18534] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 416.701689][ T4941] Bluetooth: hci4: command tx timeout [ 416.877098][T18555] netlink: 'syz.4.3416': attribute type 11 has an invalid length. [ 416.891228][T18534] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 416.901385][T18555] netlink: 'syz.4.3416': attribute type 8 has an invalid length. [ 416.922884][T18534] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 416.926208][T18555] __nla_validate_parse: 3 callbacks suppressed [ 416.926257][T18555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3416'. [ 416.961814][T18555] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.969599][T18555] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.155606][T18563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.183212][T18534] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 417.216422][T18534] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 417.283235][T18336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.373408][T18336] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.511141][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.518427][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.526688][T18534] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 417.546286][T18534] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 417.604291][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.611608][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.732176][T18578] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3421'. [ 417.752426][T18577] netlink: 'syz.1.3420': attribute type 1 has an invalid length. [ 417.924286][T18585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3422'. [ 417.953596][T18585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3422'. [ 417.980954][T18585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3422'. [ 418.428290][T18336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.572420][T18336] veth0_vlan: entered promiscuous mode [ 418.617426][T18336] veth1_vlan: entered promiscuous mode [ 418.780075][T18336] veth0_macvtap: entered promiscuous mode [ 418.819682][T18336] veth1_macvtap: entered promiscuous mode [ 419.039012][T18336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.162384][T18628] netlink: 'syz.2.3430': attribute type 2 has an invalid length. [ 419.192978][T18336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.226389][ T6299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.264735][ T6299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.298055][ T6299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.312638][T18633] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 419.326373][ T6299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.745912][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 419.817271][T18648] x_tables: unsorted underflow at hook 4 [ 419.930421][ T6298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.973453][ T6298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.122712][ T6298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.143103][ T6298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.153795][T18668] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3440'. [ 420.412789][ T7522] IPVS: starting estimator thread 0... [ 420.510671][T18687] IPVS: using max 25 ests per chain, 60000 per kthread [ 420.801076][T18704] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3448'. [ 420.999010][T18715] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3452'. [ 421.196932][T18721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3453'. [ 421.277492][T18724] netlink: 'syz.1.3454': attribute type 5 has an invalid length. [ 421.461416][T18732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.520943][T18732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.678596][T18742] syzkaller1: entered promiscuous mode [ 421.708902][T18742] syzkaller1: entered allmulticast mode [ 421.829670][T18744] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.837583][T18744] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.946852][T18744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.965529][T18744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.196830][T18761] netlink: 'syz.2.3464': attribute type 12 has an invalid length. [ 422.229071][T18745] team0: Device ipvlan2 is already an upper device of the team interface [ 422.277341][ T6291] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.309868][ T6291] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.411690][ T6291] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.455645][ T6291] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.589552][T18768] netlink: 684 bytes leftover after parsing attributes in process `syz.0.3467'. [ 422.754426][T18776] x_tables: duplicate underflow at hook 3 [ 422.783863][T18768] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3467'. [ 423.158347][T18791] sit0: Master is either lo or non-ether device [ 423.313772][T18800] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3479'. [ 424.380524][T18851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3494'. [ 424.440933][T18854] netlink: 'syz.0.3496': attribute type 1 has an invalid length. [ 424.463183][T18854] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3496'. [ 424.474953][T18854] netlink: 'syz.0.3496': attribute type 1 has an invalid length. [ 424.562910][T18860] IPv6: NLM_F_CREATE should be specified when creating new route [ 424.607486][T18860] netlink: 'syz.2.3497': attribute type 1 has an invalid length. [ 424.661848][T18865] xt_hashlimit: size too large, truncated to 1048576 [ 424.739469][T18868] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.3499'. [ 424.776247][T18868] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 424.797534][T18867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3500'. [ 424.854907][T18868] 0ªX¹¦Dö»: entered allmulticast mode [ 425.507313][T18889] xt_CONNSECMARK: invalid mode: 0 [ 425.524901][T18892] netlink: 'syz.0.3508': attribute type 11 has an invalid length. [ 425.557001][T18892] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3508'. [ 425.910568][T18910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3513'. [ 425.932088][T18916] sctp: [Deprecated]: syz.0.3515 (pid 18916) Use of struct sctp_assoc_value in delayed_ack socket option. [ 425.932088][T18916] Use struct sctp_sack_info instead [ 426.223306][T18928] netlink: 'syz.2.3519': attribute type 2 has an invalid length. [ 426.345407][T18932] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3520'. [ 426.543734][T18936] syzkaller1: entered promiscuous mode [ 426.564625][T18936] syzkaller1: entered allmulticast mode [ 426.759769][T18948] netlink: 'syz.4.3526': attribute type 1 has an invalid length. [ 426.794632][T18948] netlink: 'syz.4.3526': attribute type 1 has an invalid length. [ 426.818410][T18948] netlink: 'syz.4.3526': attribute type 1 has an invalid length. [ 426.857132][T18948] netlink: 'syz.4.3526': attribute type 1 has an invalid length. [ 427.279509][T18972] netlink: 'syz.2.3533': attribute type 83 has an invalid length. [ 427.919773][T18997] __nla_validate_parse: 2 callbacks suppressed [ 427.919795][T18997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3539'. [ 428.950347][T19024] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3548'. [ 429.092056][T19031] netlink: 'syz.0.3552': attribute type 3 has an invalid length. [ 429.335790][T19042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3554'. [ 429.452325][T19047] xt_policy: output policy not valid in PREROUTING and INPUT [ 429.520424][T19046] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 429.587806][T19047] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3555'. [ 429.727866][T19050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3557'. [ 429.867032][T19063] netlink: 'syz.2.3560': attribute type 13 has an invalid length. [ 430.178240][ T7522] lo speed is unknown, defaulting to 1000 [ 430.576801][T19081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.633965][T19081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.789670][T19085] team0: entered promiscuous mode [ 430.812702][T19085] team_slave_0: entered promiscuous mode [ 430.834032][T19085] team_slave_1: entered promiscuous mode [ 430.864801][T19085] netlink: 'syz.0.3566': attribute type 39 has an invalid length. [ 430.882148][T19092] netlink: 'syz.2.3569': attribute type 1 has an invalid length. [ 430.916884][T19093] xt_SECMARK: invalid mode: 9 [ 430.953309][T19092] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 431.714222][T19121] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3577'. [ 431.791554][T19125] xt_hashlimit: size too large, truncated to 1048576 [ 431.819468][T19126] netlink: 'syz.3.3575': attribute type 1 has an invalid length. [ 431.842773][T19126] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3575'. [ 431.879358][T19129] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 431.948144][T19132] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3578'. [ 432.236140][T19140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3580'. [ 432.701153][T19156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3586'. [ 432.805763][T19161] x_tables: duplicate underflow at hook 1 [ 433.146953][T19174] netlink: 'syz.4.3590': attribute type 2 has an invalid length. [ 433.194296][T19176] netlink: 'syz.1.3592': attribute type 21 has an invalid length. [ 436.747042][T19178] team0: entered promiscuous mode [ 436.752983][T19178] team_slave_0: entered promiscuous mode [ 436.758928][T19178] team_slave_1: entered promiscuous mode [ 436.765903][T19178] team0: left promiscuous mode [ 436.774446][T19178] team_slave_0: left promiscuous mode [ 436.788322][T19178] team_slave_1: left promiscuous mode [ 437.022053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 437.107415][T19193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3596'. [ 437.142074][T19193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3596'. [ 437.333744][T19193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3596'. [ 437.523107][T19209] netlink: 'syz.3.3605': attribute type 1 has an invalid length. [ 437.604391][T19213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3603'. [ 437.619599][T19208] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 437.649512][T19208] veth3: entered promiscuous mode [ 437.687743][T19209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3605'. [ 437.722051][T19208] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 437.804782][T19217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3606'. [ 437.929086][T19217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.072680][T19219] macvlan4: entered promiscuous mode [ 438.118096][T19219] macvlan4: entered allmulticast mode [ 438.182436][T19219] bond1: entered promiscuous mode [ 438.217946][T19219] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 438.367695][T19239] netlink: 'syz.4.3610': attribute type 1 has an invalid length. [ 438.392160][T19241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3611'. [ 438.419163][T19242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3609'. [ 438.460837][T19242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3609'. [ 438.631650][T19251] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3612'. [ 438.789106][T19219] bond1: left promiscuous mode [ 438.798686][T19239] xt_TCPMSS: Only works on TCP SYN packets [ 438.833999][T19248] tipc: Enabling of bearer rejected, failed to enable media [ 439.307807][T19265] bridge0: port 3(bond0) entered blocking state [ 439.344423][T19265] bridge0: port 3(bond0) entered disabled state [ 439.371056][T19265] bond0: entered allmulticast mode [ 439.397796][T19265] bond_slave_0: entered allmulticast mode [ 439.439510][T19265] bond_slave_1: entered allmulticast mode [ 439.512057][T19265] bond0: entered promiscuous mode [ 439.552570][T19265] bond_slave_0: entered promiscuous mode [ 439.573705][T19265] bond_slave_1: entered promiscuous mode [ 439.616588][T19265] bridge0: port 3(bond0) entered blocking state [ 439.623937][T19265] bridge0: port 3(bond0) entered forwarding state [ 439.843367][T19267] xt_hashlimit: size too large, truncated to 1048576 [ 440.282397][T19278] syzkaller0: entered promiscuous mode [ 440.307270][T19278] syzkaller0: entered allmulticast mode [ 440.354665][T19304] veth1_to_bond: entered allmulticast mode [ 440.792722][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ee17800: rx timeout, send abort [ 440.801739][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ee17800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 443.952203][T19307] veth1_to_bond: entered promiscuous mode [ 443.970412][T19339] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 443.977094][T19343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.025806][T19348] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.064427][T19307] veth1_to_bond: left promiscuous mode [ 444.090290][T19307] veth1_to_bond: left allmulticast mode [ 444.545962][T19369] netlink: 'syz.0.3641': attribute type 2 has an invalid length. [ 445.157480][T19398] __nla_validate_parse: 2 callbacks suppressed [ 445.157501][T19398] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3647'. [ 445.719968][T19420] syzkaller0: entered promiscuous mode [ 445.741658][T19420] syzkaller0: entered allmulticast mode [ 445.882183][T19425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3652'. [ 445.929531][T19425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3652'. [ 446.006637][ T1015] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.017047][T19425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3652'. [ 446.051377][ T1015] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.063566][T19425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3652'. [ 446.097772][ T1015] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.111888][T19420] xt_CT: No such helper "snmp_trap" [ 446.122693][ T1015] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.474362][T19443] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 446.488850][T19443] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 446.499069][T19443] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 446.742801][T19451] openvswitch: netlink: Missing key (keys=40, expected=100) [ 446.875515][T19453] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 447.373808][T19466] netlink: 'syz.2.3666': attribute type 1 has an invalid length. [ 448.512074][T19505] syzkaller0: entered promiscuous mode [ 448.550405][T19505] syzkaller0: entered allmulticast mode [ 448.702522][T19505] tipc: Started in network mode [ 448.742285][T19505] tipc: Node identity 4ab121e022a2, cluster identity 4711 [ 448.776865][T19512] netlink: 'syz.1.3674': attribute type 4 has an invalid length. [ 448.810880][T19512] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3674'. [ 448.822699][T19505] tipc: Enabled bearer , priority 0 [ 448.834492][T19514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3674'. [ 448.919118][T19509] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001 [ 448.959190][T19495] tipc: Resetting bearer [ 448.991198][T19518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3677'. [ 449.067192][T19518] netlink: zone id is out of range [ 449.086922][T19518] netlink: zone id is out of range [ 449.095939][T19518] netlink: set zone limit has 8 unknown bytes [ 449.114596][T19495] tipc: Disabling bearer [ 449.125868][T19522] xt_cgroup: path and classid specified [ 449.523672][T19542] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3682'. [ 449.917387][T19555] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3684'. [ 450.438985][T19580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3692'. [ 450.492061][T19580] netlink: 'syz.2.3692': attribute type 1 has an invalid length. [ 450.546626][T19580] netlink: 'syz.2.3692': attribute type 2 has an invalid length. [ 450.642874][T19590] netlink: 'syz.0.3693': attribute type 6 has an invalid length. [ 450.864001][T19596] netlink: 'syz.4.3695': attribute type 8 has an invalid length. [ 450.926803][T19599] bridge0: port 4(vlan2) entered blocking state [ 450.984485][T19599] bridge0: port 4(vlan2) entered disabled state [ 451.022820][T19599] vlan2: entered allmulticast mode [ 451.058750][T19599] vlan2: entered promiscuous mode [ 451.135411][T19597] bond0: left allmulticast mode [ 451.143952][T19597] bond_slave_0: left allmulticast mode [ 451.166466][T19597] bond_slave_1: left allmulticast mode [ 451.184608][T19597] bond0: left promiscuous mode [ 451.199598][T19597] bond_slave_0: left promiscuous mode [ 451.243097][T19597] bond_slave_1: left promiscuous mode [ 451.264794][T19597] bridge0: port 3(bond0) entered disabled state [ 451.328604][T19597] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.355921][T19597] bridge_slave_1: left allmulticast mode [ 451.363485][T19616] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3700'. [ 451.374257][T19597] bridge_slave_1: left promiscuous mode [ 451.384928][T19597] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.394916][T19616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3700'. [ 451.405623][T19616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3700'. [ 451.428800][T19597] bond0: (slave bond_slave_0): Releasing backup interface [ 451.471533][T19597] bond0: (slave bond_slave_1): Releasing backup interface [ 451.601196][T19597] team0: Port device team_slave_0 removed [ 451.643454][T19597] team0: Port device team_slave_1 removed [ 451.667951][T19597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.682727][T19597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.696184][T19597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.705040][T19597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.717273][T19597] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 452.035358][T19610] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-xor(2) [ 452.072862][T19610] bond4 (unregistering): Released all slaves [ 452.161763][T19617] netlink: 'syz.0.3698': attribute type 12 has an invalid length. [ 452.427809][T19636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3706'. [ 452.487777][T19643] netlink: 'syz.0.3709': attribute type 4 has an invalid length. [ 452.542150][T19636] bond0: (slave bond_slave_1): Releasing backup interface [ 452.549800][T19641] IPVS: length: 187 != 24 [ 452.574560][T19642] netlink: 'syz.0.3709': attribute type 4 has an invalid length. [ 452.856770][T19656] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3712'. [ 453.183883][T19668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3716'. [ 453.279718][ T6285] tipc: Subscription rejected, illegal request [ 453.335332][T19679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3720'. [ 453.618005][T19690] netlink: 'syz.4.3724': attribute type 10 has an invalid length. [ 453.681399][T19679] bond2: Invalid ad_actor_system MAC address. [ 453.699358][T19679] bond2: option ad_actor_system: invalid value (1) [ 453.728426][T19679] bond2 (unregistering): Released all slaves [ 453.921201][T19690] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 453.972366][T19690] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 454.868488][T19724] netlink: 'syz.3.3735': attribute type 1 has an invalid length. [ 455.124188][T19735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3738'. [ 455.145829][T19736] pimreg: entered allmulticast mode [ 455.149297][T19735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3738'. [ 455.465691][T19744] netlink: 'syz.3.3740': attribute type 6 has an invalid length. [ 456.050764][T19763] __nla_validate_parse: 1 callbacks suppressed [ 456.050801][T19763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3748'. [ 456.137862][T19763] netlink: 'syz.0.3748': attribute type 20 has an invalid length. [ 456.184171][T19763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3748'. [ 456.306503][ T6299] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.317711][T19763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3748'. [ 456.344953][ T6299] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.352860][T19763] netlink: 'syz.0.3748': attribute type 20 has an invalid length. [ 456.386345][ T6299] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.398671][T19763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3748'. [ 456.420960][ T6299] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.911483][T19791] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3754'. [ 457.302516][T19798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3757'. [ 457.347762][T19800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3757'. [ 457.357541][T19799] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3756'. [ 457.695819][T19807] 8021q: VLANs not supported on sit0 [ 457.800073][T19809] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3760'. [ 457.861607][T19809] unsupported nlmsg_type 40 [ 457.942768][T19815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3764'. [ 457.968457][T19815] netlink: zone id is out of range [ 457.991107][T19815] netlink: zone id is out of range [ 458.002018][T19816] sctp: [Deprecated]: syz.0.3763 (pid 19816) Use of struct sctp_assoc_value in delayed_ack socket option. [ 458.002018][T19816] Use struct sctp_sack_info instead [ 458.019239][T19815] netlink: get zone limit has 8 unknown bytes [ 458.597672][T19836] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 458.639196][T19836] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 459.023460][T19845] netlink: 'syz.3.3773': attribute type 11 has an invalid length. [ 459.235558][T19849] netlink: 'syz.3.3774': attribute type 1 has an invalid length. [ 459.295472][T19849] 8021q: adding VLAN 0 to HW filter on device bond2 [ 459.454433][T19851] bond2: (slave geneve2): making interface the new active one [ 459.483551][T19851] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 460.277667][T19884] block nbd3: NBD_DISCONNECT [ 460.301262][T19884] block nbd3: Send disconnect failed -32 [ 460.334300][T19884] block nbd3: shutting down sockets [ 460.351470][T19889] netlink: 'syz.2.3785': attribute type 26 has an invalid length. [ 460.375614][T19889] netlink: 'syz.2.3785': attribute type 6 has an invalid length. [ 460.384703][T19889] netlink: 'syz.2.3785': attribute type 5 has an invalid length. [ 461.030697][T19918] hsr_slave_0: left promiscuous mode [ 461.049947][T19918] hsr_slave_1: left promiscuous mode [ 461.554690][T19934] __nla_validate_parse: 10 callbacks suppressed [ 461.554712][T19934] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3800'. [ 461.572859][T19935] netlink: 'syz.4.3802': attribute type 12 has an invalid length. [ 461.606421][T19935] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3802'. [ 461.772559][T19943] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3805'. [ 461.797691][T19943] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3805'. [ 462.591121][T19976] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 462.659294][T19983] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3812'. [ 463.073619][T19992] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3817'. [ 463.188522][T19997] syzkaller0: entered promiscuous mode [ 463.225777][T19997] syzkaller0: entered allmulticast mode [ 463.267218][T19997] tipc: Started in network mode [ 463.283498][T19997] tipc: Node identity 6e5b3a8b1f4d, cluster identity 4711 [ 463.294610][T19997] tipc: Enabled bearer , priority 0 [ 463.428324][T20002] bond3: option min_links: invalid value (18446744073709551614) [ 463.437162][T20002] bond3: option min_links: allowed values 0 - 2147483647 [ 463.450738][T20002] bond3 (unregistering): Released all slaves [ 463.484406][T19994] tipc: Resetting bearer [ 463.553554][T19994] tipc: Disabling bearer [ 464.329822][T20041] bridge5: entered promiscuous mode [ 464.352920][T20041] bridge5: entered allmulticast mode [ 464.654501][T20055] tc action pedit 'at' offset 5 out of bounds [ 464.663004][T20055] tc action pedit 'at' offset 5 out of bounds [ 464.669933][T20055] tc action pedit 'at' offset 5 out of bounds [ 464.676914][T20055] tc action pedit 'at' offset 5 out of bounds [ 464.684076][T20055] tc action pedit 'at' offset 5 out of bounds [ 464.692938][T20055] tc action pedit 'at' offset 5 out of bounds [ 464.700021][T20055] tc action pedit 'at' offset 5 out of bounds [ 464.706987][T20055] tc action pedit 'at' offset 5 out of bounds [ 464.713971][T20055] tc action pedit 'at' offset 5 out of bounds [ 464.720987][T20055] tc action pedit 'at' offset 5 out of bounds [ 464.727924][T20055] 0: reclassify loop, rule prio 0, protocol 800 [ 464.933204][T20061] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 465.194448][T20070] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3843'. [ 465.347254][T20077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3843'. [ 465.459306][T20085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3846'. [ 465.947914][T20101] syzkaller1: entered promiscuous mode [ 465.965253][T20101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3849'. [ 466.186874][T20113] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 466.219459][T20106] netlink: 'syz.0.3851': attribute type 1 has an invalid length. [ 466.560879][T20133] ip6tnl0: Caught tx_queue_len zero misconfig [ 466.592096][T20132] lo: entered promiscuous mode [ 466.623757][T20132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 466.736696][T20133] veth0: entered promiscuous mode [ 466.776315][T20140] syzkaller0: entered promiscuous mode [ 466.813843][T20140] syzkaller0: entered allmulticast mode [ 466.904374][T20128] __nla_validate_parse: 3 callbacks suppressed [ 466.904429][T20128] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3857'. [ 467.059203][T20140] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 467.076575][T20136] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3857'. [ 467.112271][T20150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3861'. [ 467.125606][T20140] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 467.183033][T20150] 8021q: VLANs not supported on ip6tnl0 [ 467.248420][T20120] veth0: left promiscuous mode [ 467.423313][T20153] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3862'. [ 468.053275][T20167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3865'. [ 468.093663][T20167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3865'. [ 468.095816][T20155] bridge0: port 3(ipvlan3) entered blocking state [ 468.146538][T20155] bridge0: port 3(ipvlan3) entered disabled state [ 468.207091][T20155] ipvlan3: entered allmulticast mode [ 468.265782][T20155] bridge0: entered allmulticast mode [ 468.322602][T20155] ipvlan3: left allmulticast mode [ 468.339225][T20155] bridge0: left allmulticast mode [ 468.438132][T20175] syzkaller0: entered promiscuous mode [ 468.446721][T20175] syzkaller0: entered allmulticast mode [ 468.672467][T20192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3870'. [ 468.692779][T20192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3870'. [ 468.711594][T20192] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 469.118365][T20208] lo speed is unknown, defaulting to 1000 [ 469.358256][T20221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3880'. [ 469.381229][T20220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3880'. [ 469.662916][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 470.384272][ T48] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.410639][ T48] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.437979][ T48] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.501371][ T48] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.071863][ T29] audit: type=1800 audit(1782913184.623:17): pid=20262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3891" name="memory.events" dev="tmpfs" ino=591 res=0 errno=0 [ 471.940066][T20298] __nla_validate_parse: 7 callbacks suppressed [ 471.971199][T20298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3904'. [ 472.216007][T20301] netlink: 3080 bytes leftover after parsing attributes in process `syz.3.3905'. [ 472.235079][T20301] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.3905'. [ 472.253300][T20312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3907'. [ 472.263237][T20312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3907'. [ 472.294736][T20312] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3907'. [ 472.411208][T20314] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3909'. [ 472.742490][T20333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3914'. [ 472.803198][T20333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3914'. [ 472.859189][T20333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3914'. [ 472.945409][T20338] sctp: [Deprecated]: syz.3.3915 (pid 20338) Use of struct sctp_assoc_value in delayed_ack socket option. [ 472.945409][T20338] Use struct sctp_sack_info instead [ 472.998849][ T1015] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.025348][ T1015] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.064834][ T1015] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.097506][ T1015] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.165502][T20347] veth1_to_bond: entered allmulticast mode [ 473.354883][T20348] veth1_to_bond (unregistering): left allmulticast mode [ 473.397453][T20348] bond0: (slave bond_slave_1): Releasing backup interface [ 473.749702][T20370] vlan0: entered allmulticast mode [ 473.757193][T20370] veth0_vlan: entered allmulticast mode [ 473.771905][T20367] netlink: 'syz.2.3923': attribute type 13 has an invalid length. [ 474.455111][T20396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.937966][T20411] sctp: [Deprecated]: syz.2.3935 (pid 20411) Use of struct sctp_assoc_value in delayed_ack socket option. [ 474.937966][T20411] Use struct sctp_sack_info instead [ 475.316189][T20429] Bluetooth: MGMT ver 1.23 [ 476.054074][T20450] team0: Port device team_slave_0 removed [ 476.733889][T20490] netlink: 'syz.4.3960': attribute type 10 has an invalid length. [ 476.797181][T20490] team0: Port device geneve1 added [ 476.992472][T20499] netlink: 'syz.3.3963': attribute type 1 has an invalid length. [ 477.053357][T20499] syzkaller0: entered promiscuous mode [ 477.079912][T20499] syzkaller0: entered allmulticast mode [ 477.144743][T20505] bond2: Removing last ns target with arp_interval on [ 477.348088][T20511] syzkaller1: entered promiscuous mode [ 477.355452][T20511] syzkaller1: entered allmulticast mode [ 477.671598][T20528] __nla_validate_parse: 10 callbacks suppressed [ 477.671619][T20528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3968'. [ 477.739969][T20527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3968'. [ 477.775487][T20525] syzkaller1: entered promiscuous mode [ 477.812556][T20525] syzkaller1: entered allmulticast mode [ 478.336421][T20556] IPv6: sit1: Disabled Multicast RS [ 478.368988][T20561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3979'. [ 478.395951][T20561] team0: entered promiscuous mode [ 478.402136][T20561] team_slave_0: entered promiscuous mode [ 478.408352][T20561] team_slave_1: entered promiscuous mode [ 478.417288][T20561] geneve1: entered promiscuous mode [ 478.426005][T20563] netlink: 'syz.4.3979': attribute type 9 has an invalid length. [ 478.484983][T20561] gretap0: entered promiscuous mode [ 479.214901][T20587] syzkaller0: entered promiscuous mode [ 479.231548][T20587] syzkaller0: entered allmulticast mode [ 479.306328][T20587] 0: reclassify loop, rule prio 0, protocol 800 [ 479.592538][T20600] pim6reg: entered allmulticast mode [ 479.718558][T20612] openvswitch: netlink: Tunnel attr 3 has unexpected len 8 expected 1 [ 480.042444][T20622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4000'. [ 480.054992][T20623] netlink: 336 bytes leftover after parsing attributes in process `syz.0.4001'. [ 480.075907][T20622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4000'. [ 480.121371][T20622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4000'. [ 480.146743][T20622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4000'. [ 480.176543][T20626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4000'. [ 480.225928][T20627] syzkaller0: entered promiscuous mode [ 480.242728][T20627] syzkaller0: entered allmulticast mode [ 480.602011][T20636] team0: Device gtp0 is up. Set it down before adding it as a team port [ 480.636676][T20638] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4006'. [ 480.774909][T20645] xt_l2tp: v2 doesn't support IP mode [ 481.416003][T20670] h: entered promiscuous mode [ 482.230045][T20698] netlink: 'syz.0.4022': attribute type 29 has an invalid length. [ 482.563591][T20706] sock: sock_set_timeout: `syz.1.4025' (pid 20706) tries to set negative timeout [ 482.819398][T20720] lo: entered allmulticast mode [ 482.825681][T20720] tunl0: entered allmulticast mode [ 482.836082][T20720] gre0: entered allmulticast mode [ 482.885941][T20720] erspan0: entered allmulticast mode [ 482.949750][T20723] __nla_validate_parse: 2 callbacks suppressed [ 482.949769][T20723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4030'. [ 482.967422][T20720] ip_vti0: entered allmulticast mode [ 482.978153][T20720] ip6_vti0: entered allmulticast mode [ 483.016478][T20720] sit0: entered allmulticast mode [ 483.057063][T20720] ip6tnl0: entered allmulticast mode [ 483.104339][T20720] ip6gre0: entered allmulticast mode [ 483.148079][T20720] syz_tun: entered allmulticast mode [ 483.304669][T20737] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4033'. [ 483.424858][T20736] syzkaller0: entered promiscuous mode [ 483.431611][T20736] syzkaller0: entered allmulticast mode [ 483.736791][T20759] netlink: 'syz.1.4039': attribute type 12 has an invalid length. [ 483.756527][T20759] netlink: 'syz.1.4039': attribute type 29 has an invalid length. [ 483.766317][T20759] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4039'. [ 483.776727][T20759] netlink: 'syz.1.4039': attribute type 3 has an invalid length. [ 483.788461][T20759] netlink: 'syz.1.4039': attribute type 2 has an invalid length. [ 483.818364][T20759] netlink: 'syz.1.4039': attribute type 3 has an invalid length. [ 483.850316][T20759] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4039'. [ 483.879963][T20762] lo: Caught tx_queue_len zero misconfig [ 483.969809][T20764] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.4041'. [ 484.533318][T20780] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4045'. [ 484.614324][T20784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4046'. [ 484.871774][T20787] team0: Device xfrm0 is of different type [ 485.155241][T20800] vlan3: entered allmulticast mode [ 485.176741][T20800] veth1_virt_wifi: entered allmulticast mode [ 485.308783][T20805] syzkaller0: entered promiscuous mode [ 485.322784][T20805] syzkaller0: entered allmulticast mode [ 486.096254][T20840] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 486.682168][T20859] openvswitch: netlink: IP tunnel dst address not specified [ 486.999276][T20870] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 487.015024][T20870] bond3 (unregistering): Released all slaves [ 487.225371][T20879] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4070'. [ 487.298056][T20885] set_target_v3_checkentry: 23 callbacks suppressed [ 487.298079][T20885] SET target dimension over the limit! [ 487.376183][T20888] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4072'. [ 487.414729][T20888] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 487.757543][T20899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4076'. [ 487.781203][T20899] netlink: 'syz.0.4076': attribute type 1 has an invalid length. [ 487.800468][T20899] netlink: 'syz.0.4076': attribute type 2 has an invalid length. [ 487.897506][T20904] netlink: 'syz.1.4078': attribute type 3 has an invalid length. [ 487.925954][T20904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.255945][T20959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4089'. [ 489.288185][T20959] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 489.307977][T20964] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4089'. [ 489.318796][T20959] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 489.327952][T20964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4089'. [ 489.351433][T20959] gretap1: entered promiscuous mode [ 489.368639][T20959] gretap1: entered allmulticast mode [ 489.422871][T20964] tipc: Started in network mode [ 489.438822][T20964] tipc: Node identity fa244bef7d82, cluster identity 4711 [ 489.513143][T20964] tipc: Enabled bearer , priority 0 [ 489.641605][T20971] x_tables: unsorted underflow at hook 1 [ 489.721420][T20959] syzkaller0: entered promiscuous mode [ 489.735928][T20959] syzkaller0: entered allmulticast mode [ 489.764188][T20959] tipc: Resetting bearer [ 489.823664][T20958] tipc: Resetting bearer [ 493.348077][T20958] tipc: Disabling bearer [ 493.368253][ T5761] tipc: Node number set to 2275822575 [ 493.640734][T21015] ip6t_rpfilter: unknown options [ 493.839111][T21021] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 493.849963][T21021] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 493.860938][T21021] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 493.896300][T21024] x_tables: duplicate underflow at hook 1 [ 493.935008][T21024] sctp: [Deprecated]: syz.4.4104 (pid 21024) Use of int in max_burst socket option. [ 493.935008][T21024] Use struct sctp_assoc_value instead [ 494.330509][T21036] tipc: Enabled bearer , priority 0 [ 494.359935][T21035] syzkaller0: entered promiscuous mode [ 494.367151][T21035] syzkaller0: entered allmulticast mode [ 494.516407][T21035] tipc: Resetting bearer [ 494.586700][T21035] tipc: Disabling bearer [ 494.983934][T21064] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4113'. [ 495.206899][T21068] netlink: 'syz.3.4117': attribute type 4 has an invalid length. [ 495.366356][T21069] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4116'. [ 495.438769][T21076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4120'. [ 495.479672][T21079] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4119'. [ 495.619817][T21090] netlink: 'syz.3.4123': attribute type 1 has an invalid length. [ 495.661426][T21090] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4123'. [ 495.682948][T21090] netlink: 'syz.3.4123': attribute type 1 has an invalid length. [ 495.878793][T21102] gtp0: entered promiscuous mode [ 495.895268][T21102] gtp0: entered allmulticast mode [ 496.003889][T21106] Cannot find del_set index 3 as target [ 496.351119][T21122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4133'. [ 496.489494][T21124] batadv1: entered allmulticast mode [ 496.728092][T21127] netlink: 'syz.1.4134': attribute type 3 has an invalid length. [ 496.825973][T21134] bridge_slave_1: left allmulticast mode [ 496.848347][T21134] bridge_slave_1: left promiscuous mode [ 496.861166][T21134] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.925384][T21134] bridge_slave_0: left allmulticast mode [ 496.949957][T21134] bridge_slave_0: left promiscuous mode [ 496.968179][T21134] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.106990][T21145] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4140'. [ 497.301449][T21152] netlink: 'syz.2.4142': attribute type 5 has an invalid length. [ 497.717149][T21175] netlink: 'syz.4.4148': attribute type 26 has an invalid length. [ 497.871064][T21178] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4149'. [ 498.132498][T21187] netlink: 'syz.4.4151': attribute type 1 has an invalid length. [ 498.506170][T21190] ip6gretap1: entered promiscuous mode [ 498.529129][T21190] ip6gretap1: entered allmulticast mode [ 498.588437][T21190] bond4: (slave ip6gretap1): making interface the new active one [ 498.619747][T21190] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 498.636233][T21190] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 498.646902][T21190] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 498.687771][T21168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4147'. [ 498.698299][T21168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.465255][T21225] netlink: 'syz.2.4161': attribute type 33 has an invalid length. [ 499.519362][T21225] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 499.723071][T21236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4163'. [ 499.922712][T21237] ip6tnl0: Caught tx_queue_len zero misconfig [ 500.109015][T21247] __nla_validate_parse: 1 callbacks suppressed [ 500.109038][T21247] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4166'. [ 500.533009][T21264] vlan1: entered allmulticast mode [ 500.561409][T21264] bond0: entered allmulticast mode [ 500.599326][T21264] bond_slave_0: entered allmulticast mode [ 500.625542][T21264] bond_slave_1: entered allmulticast mode [ 500.690828][T21272] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4173'. [ 500.737217][T21272] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4173'. [ 500.749074][T21271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4174'. [ 500.771111][T21272] netlink: 'syz.4.4173': attribute type 6 has an invalid length. [ 500.785205][T21272] netlink: 'syz.4.4173': attribute type 5 has an invalid length. [ 500.801503][T21272] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4173'. [ 501.629186][T21309] syzkaller0: entered allmulticast mode [ 501.973731][T21323] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4190'. [ 502.009317][T21324] netlink: 'syz.4.4189': attribute type 27 has an invalid length. [ 502.033137][T21324] netlink: 'syz.4.4189': attribute type 4 has an invalid length. [ 502.062887][T21324] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4189'. [ 502.673889][T21353] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4198'. [ 502.709183][T21350] syzkaller0: entered promiscuous mode [ 502.731106][T21350] syzkaller0: entered allmulticast mode [ 503.357556][T21384] tipc: Started in network mode [ 503.371799][T21384] tipc: Node identity dec5502588ba, cluster identity 4711 [ 503.388118][T21384] tipc: Enabled bearer , priority 0 [ 503.421942][T21384] syzkaller0: entered promiscuous mode [ 503.443610][T21384] syzkaller0: entered allmulticast mode [ 503.515667][T21391] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 503.607507][T21389] No such timeout policy "syz0" [ 503.704922][T21397] tipc: Resetting bearer [ 503.761591][T21383] tipc: Resetting bearer [ 503.784948][T21385] netlink: 'syz.4.4207': attribute type 2 has an invalid length. [ 503.856016][T21383] tipc: Disabling bearer [ 503.883753][T21387] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4207'. [ 503.960932][T21400] bridge1: entered promiscuous mode [ 503.967391][T21400] bridge1: entered allmulticast mode [ 503.975508][T21411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4213'. [ 504.238616][T21415] netlink: 'syz.1.4214': attribute type 33 has an invalid length. [ 504.285854][T21415] IPv6: NLM_F_CREATE should be specified when creating new route [ 504.502720][T21425] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 504.613095][T21430] netlink: 'syz.4.4220': attribute type 1 has an invalid length. [ 504.816388][T21432] geneve2: entered promiscuous mode [ 505.920020][T21474] netlink: 'syz.4.4233': attribute type 1 has an invalid length. [ 506.296541][T21477] macvtap1: entered allmulticast mode [ 506.357244][T21480] bond6: (slave bridge3): making interface the new active one [ 506.367797][T21503] netlink: 'syz.2.4240': attribute type 5 has an invalid length. [ 506.378744][T21480] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 506.396230][T21486] syzkaller0: entered promiscuous mode [ 506.402509][T21486] syzkaller0: entered allmulticast mode [ 506.480791][T21504] syzkaller0: entered promiscuous mode [ 506.492927][T21504] syzkaller0: entered allmulticast mode [ 506.701075][T21511] __nla_validate_parse: 3 callbacks suppressed [ 506.701128][T21511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4242'. [ 506.959260][T21519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4244'. [ 507.393693][T21528] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4249'. [ 507.408697][T21528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4249'. [ 507.459993][T21526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4246'. [ 507.592725][T21528] netlink: 'syz.1.4249': attribute type 1 has an invalid length. [ 507.933507][T21544] ¾¡[™™H: renamed from virt_wifi0 [ 530.707269][T21561] rdma_rxe: Failed to create IPv4 UDP tunnel [ 530.928503][T21573] lo: entered allmulticast mode [ 530.955437][T21573] lo: left allmulticast mode [ 531.089954][T21578] netlink: 'syz.4.4263': attribute type 1 has an invalid length. [ 531.485738][T21592] x_tables: duplicate underflow at hook 1 [ 531.808228][T21563] infiniband syz1: set active [ 531.819762][T21563] infiniband syz1: added bridge_slave_0 [ 531.938601][T21563] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 531.962018][T21563] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 532.029042][T21563] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 532.067962][T21613] lo: entered allmulticast mode [ 532.073381][T21613] lo: left allmulticast mode [ 532.134260][T21613] netlink: 'syz.0.4273': attribute type 1 has an invalid length. [ 532.160510][T21613] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4273'. [ 532.249199][T21563] RDS/IB: syz1: added [ 532.267076][T21563] smc: adding ib device syz1 with port count 1 [ 532.297598][T21563] smc: ib device syz1 port 1 has no pnetid [ 532.421024][T21629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4275'. [ 532.468479][T21629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4275'. [ 533.254934][T21652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4280'. [ 533.288829][T21652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4280'. [ 533.305153][T21654] "syz.3.4281" (21654) uses obsolete ecb(arc4) skcipher [ 533.468572][T21659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4281'. [ 533.607073][T21659] netlink: 'syz.3.4281': attribute type 21 has an invalid length. [ 533.672449][T21666] : renamed from bond0 (while UP) [ 533.901942][T21673] netlink: 'syz.1.4286': attribute type 83 has an invalid length. [ 534.139568][T21675] xt_bpf: check failed: parse error [ 534.184522][T21682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4290'. [ 534.228986][T21682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4290'. [ 534.255267][T21682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4290'. [ 534.394016][T21682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4290'. [ 534.618699][T21696] gre0: entered promiscuous mode [ 534.642103][T21696] gre0: entered allmulticast mode [ 535.561559][T21731] xfrm1: entered allmulticast mode [ 536.615126][T21770] netlink: 'syz.4.4317': attribute type 2 has an invalid length. [ 537.223798][T21785] gretap0: entered promiscuous mode [ 537.239835][T21785] batman_adv: batadv0: Adding interface: gretap0 [ 537.248096][T21785] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 537.284131][T21785] batman_adv: batadv0: Not using interface gretap0 (retrying later): interface not active [ 537.503248][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 537.707251][T21805] lo speed is unknown, defaulting to 1000 [ 537.906388][T21816] __nla_validate_parse: 6 callbacks suppressed [ 537.906442][T21816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4328'. [ 537.929779][T21816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4328'. [ 537.966705][T21818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4329'. [ 537.977059][T21816] macvtap1: entered promiscuous mode [ 538.004591][T21816] vlan0: entered promiscuous mode [ 538.014089][T21816] macvtap1: entered allmulticast mode [ 538.020934][T21816] vlan0: entered allmulticast mode [ 538.027472][T21816] veth0_vlan: entered allmulticast mode [ 538.048121][T21821] netlink: 'syz.3.4329': attribute type 4 has an invalid length. [ 538.086360][T21821] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4329'. [ 538.279032][T21828] netlink: 'syz.0.4333': attribute type 1 has an invalid length. [ 538.538815][T21828] 8021q: adding VLAN 0 to HW filter on device bond1 [ 539.343193][T21864] xt_nat: multiple ranges no longer supported [ 539.956495][T21873] netlink: 'syz.4.4343': attribute type 23 has an invalid length. [ 540.272704][T21881] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4346'. [ 540.441619][T21887] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4348'. [ 540.469413][T21887] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4348'. [ 540.639187][T21895] syz_tun: entered allmulticast mode [ 541.549319][T21925] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.557832][T21925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.642813][T21928] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4363'. [ 541.729650][T21931] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4363'. [ 541.824049][T21933] syzkaller0: entered promiscuous mode [ 541.830962][T21933] syzkaller0: entered allmulticast mode [ 541.839186][T21933] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 541.945752][T21938] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 542.250985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 542.263299][ C0] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 542.967755][T21964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4376'. [ 543.496900][T21978] bond3 (unregistering): Released all slaves [ 543.568766][T21984] netlink: 'syz.1.4381': attribute type 12 has an invalid length. [ 543.593576][T21984] netlink: 'syz.1.4381': attribute type 29 has an invalid length. [ 543.616116][T21984] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4381'. [ 543.659040][T21984] netlink: 51 bytes leftover after parsing attributes in process `syz.1.4381'. [ 543.671330][T21986] netlink: 'syz.4.4382': attribute type 1 has an invalid length. [ 543.832503][T21986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.868625][T21988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.885854][T21988] bond0: (slave gre1): The slave device specified does not support setting the MAC address [ 543.919904][T21988] bond0: (slave gre1): Error -95 calling set_mac_address [ 543.999031][T21990] gretap1: entered promiscuous mode [ 544.031533][T21990] bond0: (slave gretap1): making interface the new active one [ 544.047938][T21990] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 544.065024][T21999] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 544.084970][T22005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4384'. [ 544.098310][T21999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.102454][T22005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4384'. [ 544.139890][T21986] macvlan2: entered promiscuous mode [ 544.188925][T21986] macvlan2: entered allmulticast mode [ 544.212245][T21986] bond0: entered promiscuous mode [ 544.253663][T21986] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 544.306040][T21986] bond0: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 544.320750][T21986] bond0: left promiscuous mode [ 544.383475][T22003] syzkaller1: entered promiscuous mode [ 544.404938][T22003] syzkaller1: entered allmulticast mode [ 544.738342][T22025] nbd: couldn't find a device at index 0 [ 544.853848][T22030] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4390'. [ 544.978654][T22035] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4392'. [ 545.217191][T22038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.343194][T22038] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 545.442574][T22049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 545.464922][T22051] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4396'. [ 545.653563][T22055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4397'. [ 546.038510][T22080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4402'. [ 546.071120][T22080] netlink: 'syz.3.4402': attribute type 10 has an invalid length. [ 546.424335][T22092] syzkaller0: entered promiscuous mode [ 546.444248][T22092] syzkaller0: entered allmulticast mode [ 546.459447][T22091] syzkaller0: entered promiscuous mode [ 546.473286][T22091] syzkaller0: entered allmulticast mode [ 546.915034][T22112] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 547.624723][T22135] netlink: 'syz.0.4419': attribute type 1 has an invalid length. [ 547.641865][T22139] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 547.809636][T22148] syzkaller0: entered promiscuous mode [ 547.821257][T22148] syzkaller0: entered allmulticast mode [ 548.204867][T22153] syzkaller0: entered promiscuous mode [ 548.210793][T22153] syzkaller0: entered allmulticast mode [ 549.194366][T22183] netlink: 'syz.4.4434': attribute type 1 has an invalid length. [ 549.216371][T22183] __nla_validate_parse: 39 callbacks suppressed [ 549.216391][T22183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4434'. [ 552.442966][T22179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4432'. [ 552.457054][T22190] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 553.173620][T22228] xt_CT: You must specify a L4 protocol and not use inversions on it [ 553.592463][T22253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4451'. [ 553.875499][T22263] x_tables: duplicate underflow at hook 1 [ 553.893199][T22265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4454'. [ 554.248403][T22280] netlink: 'syz.4.4460': attribute type 3 has an invalid length. [ 554.279837][T22280] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4460'. [ 554.340941][T22280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4460'. [ 554.779520][T22298] 8021q: VLANs not supported on ip6tnl0 [ 555.042801][T22307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4468'. [ 555.182128][ T5632] block nbd0: Receive control failed (result -107) [ 555.408247][T22327] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4473'. [ 555.819026][T22342] netlink: 'syz.4.4475': attribute type 1 has an invalid length. [ 555.972109][T22353] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4481'. [ 556.242505][T22361] netlink: 'syz.2.4483': attribute type 21 has an invalid length. [ 556.590630][T22370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4486'. [ 556.849142][T22378] netlink: 'syz.0.4489': attribute type 2 has an invalid length. [ 556.881174][T22378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4489'. [ 557.102756][T22390] xt_CT: You must specify a L4 protocol and not use inversions on it [ 558.302441][T22437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4506'. [ 558.672648][T22448] vxcan2: entered allmulticast mode [ 558.818797][T22462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4512'. [ 558.828047][T22459] netlink: 'syz.0.4511': attribute type 25 has an invalid length. [ 558.828241][T22459] netlink: 'syz.0.4511': attribute type 25 has an invalid length. [ 558.856206][T22459] netlink: 284 bytes leftover after parsing attributes in process `syz.0.4511'. [ 559.651318][T22500] xt_CT: You must specify a L4 protocol and not use inversions on it [ 559.955551][T22499] lo: left allmulticast mode [ 559.963625][T22499] tunl0: left allmulticast mode [ 559.969030][T22499] gre0: left allmulticast mode [ 559.974605][T22499] 0ªX¹¦Dö»: left allmulticast mode [ 559.980511][T22499] erspan0: left allmulticast mode [ 559.985768][T22499] ip_vti0: left allmulticast mode [ 559.995686][T22499] ip6_vti0: left allmulticast mode [ 560.010650][T22499] sit0: left allmulticast mode [ 560.021030][T22499] ip6tnl0: left allmulticast mode [ 560.030776][T22499] ip6gre0: left allmulticast mode [ 560.043422][T22499] syz_tun: left allmulticast mode [ 560.134234][T22499] bridge5: left allmulticast mode [ 560.156331][T22514] xt_policy: output policy not valid in PREROUTING and INPUT [ 560.338503][T22523] __nla_validate_parse: 2 callbacks suppressed [ 560.338526][T22523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4528'. [ 560.370599][T22523] netlink: 'syz.4.4528': attribute type 6 has an invalid length. [ 560.379636][T22523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4528'. [ 560.407201][T22523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4528'. [ 560.417690][T22523] netlink: 'syz.4.4528': attribute type 6 has an invalid length. [ 560.427131][T22523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4528'. [ 560.536548][T22526] netlink: 'syz.0.4529': attribute type 21 has an invalid length. [ 560.567423][T22526] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4529'. [ 561.317236][T22557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4539'. [ 561.514603][T22564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4540'. [ 562.165667][T22581] netlink: 'syz.2.4547': attribute type 4 has an invalid length. [ 562.389295][ T7522] lo speed is unknown, defaulting to 1000 [ 562.413218][ T7522] syú2: Port: 1 Link DOWN [ 563.197492][T22608] netlink: 'syz.2.4554': attribute type 1 has an invalid length. [ 563.332197][T22616] netlink: 'syz.1.4556': attribute type 2 has an invalid length. [ 563.407895][T22608] bond3: entered promiscuous mode [ 563.439372][T22608] 8021q: adding VLAN 0 to HW filter on device bond3 [ 563.485557][T22615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4556'. [ 563.611321][T22622] syzkaller0: entered promiscuous mode [ 563.630258][T22622] syzkaller0: entered allmulticast mode [ 563.710682][T22601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4550'. [ 563.803419][T22633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4557'. [ 563.977978][T22639] tipc: Enabled bearer , priority 0 [ 564.222945][T22639] syzkaller0: entered promiscuous mode [ 564.228776][T22639] syzkaller0: entered allmulticast mode [ 564.237317][T22639] tipc: Resetting bearer [ 564.331119][T22646] team0 (unregistering): Port device team_slave_1 removed [ 564.383968][T22638] tipc: Resetting bearer [ 564.538579][T22654] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 568.516125][T22638] tipc: Disabling bearer [ 568.568847][ T7522] tipc: Node number set to 1897282187 [ 568.690545][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 568.715635][T22663] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 568.764254][ T6295] bridge_slave_1: left allmulticast mode [ 568.795356][ T6295] bridge_slave_1: left promiscuous mode [ 568.839210][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.898668][ T6295] bridge_slave_0: left allmulticast mode [ 568.911260][T22674] netlink: 'syz.0.4568': attribute type 1 has an invalid length. [ 568.951719][ T6295] bridge_slave_0: left promiscuous mode [ 568.963720][ T6295] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.971627][T22675] netlink: 'syz.4.4569': attribute type 11 has an invalid length. [ 569.103368][T22678] block nbd0: Unsupported socket: should be TCP or UNIX. [ 569.114397][T22683] __nla_validate_parse: 2 callbacks suppressed [ 569.114446][T22683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4568'. [ 569.500863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 569.900883][ T6295] batman_adv: batadv0: Removing interface: gretap1 [ 569.948045][ T6295] bond9 (unregistering): (slave geneve3): Releasing active interface [ 569.983827][ T6295] geneve0 (unregistering): left promiscuous mode [ 570.106959][ T6295] bond8 (unregistering): (slave bridge7): Releasing backup interface [ 570.115293][ T6295] bridge7 (unregistering): left promiscuous mode [ 570.165728][ T6295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.177062][ T6295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.198287][ T6295] bond0 (unregistering): (slave bond7): Releasing backup interface [ 570.209335][ T6295] bond0 (unregistering): Released all slaves [ 570.227117][ T6295] bond1 (unregistering): Released all slaves [ 570.246895][ T6295] bond2 (unregistering): Released all slaves [ 570.274692][ T6295] bond3 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 570.294470][ T6295] bond3 (unregistering): Released all slaves [ 570.323152][ T6295] bond4 (unregistering): Released all slaves [ 570.344659][ T6295] bond5 (unregistering): Released all slaves [ 570.364197][ T6295] bond6 (unregistering): Released all slaves [ 570.399416][ T6295] bond7 (unregistering): Released all slaves [ 570.424049][ T6295] bond8 (unregistering): Released all slaves [ 570.447745][ T6295] bond9 (unregistering): Released all slaves [ 570.475151][ T6295] bond10 (unregistering): Released all slaves [ 570.496915][ T6295] bond11 (unregistering): Released all slaves [ 570.525057][ T6295] bond12 (unregistering): (slave veth3): Releasing active interface [ 570.537113][ T6295] bond12 (unregistering): Released all slaves [ 570.559752][ T6295] bond13 (unregistering): Released all slaves [ 570.587166][ T6295] bond14 (unregistering): Released all slaves [ 570.609015][ T6287] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.616917][ T6287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.664460][T22682] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 571.107297][ T6295] : left promiscuous mode [ 571.380514][ T6295] tipc: Disabling bearer [ 571.399764][ T6295] tipc: Left network mode [ 571.456950][T22717] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 572.185301][T22739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4587'. [ 572.209122][T22740] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4585'. [ 572.343017][T22736] tcf_pedit_act: 7 callbacks suppressed [ 572.343076][T22736] tc action pedit 'at' offset 6 out of bounds [ 572.535440][T22748] netlink: 'syz.2.4589': attribute type 11 has an invalid length. [ 573.032007][T22755] netlink: 'syz.2.4592': attribute type 11 has an invalid length. [ 573.105601][T22756] bond0: entered promiscuous mode [ 573.449400][T22765] netlink: 768 bytes leftover after parsing attributes in process `syz.1.4595'. [ 573.619211][T22770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4596'. [ 573.677053][T22770] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4596'. [ 573.739889][T22773] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4599'. [ 573.789210][T22773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4599'. [ 573.847509][T22779] netlink: 'syz.1.4600': attribute type 11 has an invalid length. [ 573.936771][T22780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4600'. [ 573.966354][ T6295] hsr_slave_0: left promiscuous mode [ 573.995407][ T6295] hsr_slave_1: left promiscuous mode [ 574.012658][ T6295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.029080][ T6295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.047887][T22787] openvswitch: netlink: Missing key (keys=40, expected=100) [ 574.069329][ T6295] vlan0: left allmulticast mode [ 574.084830][ T6295] veth0_vlan: left allmulticast mode [ 575.223867][ T6295] team0 (unregistering): Port device team_slave_1 removed [ 575.253617][ T6295] team0 (unregistering): Port device team_slave_0 removed [ 575.461190][T22789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4604'. [ 575.522968][T22797] syzkaller1: entered promiscuous mode [ 575.540668][T22797] syzkaller1: entered allmulticast mode [ 575.577158][T22807] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4606'. [ 575.600898][T22807] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4606'. [ 575.766650][T22816] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4608'. [ 575.834687][T22814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4609'. [ 575.895531][T22819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4610'. [ 576.129634][T22827] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4613'. [ 576.186558][T22827] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4613'. [ 576.294977][T22827] netlink: 'syz.3.4613': attribute type 1 has an invalid length. [ 576.353160][ T6295] IPVS: stop unused estimator thread 0... [ 576.390498][T22831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4614'. [ 576.868156][T22851] netlink: 'syz.4.4621': attribute type 10 has an invalid length. [ 576.964532][T22851] bond0 (unregistering): (slave gretap1): Releasing active interface [ 577.057985][T22851] bond0 (unregistering): Released all slaves [ 577.388523][T22858] syzkaller0: entered promiscuous mode [ 577.444420][T22858] syzkaller0: entered allmulticast mode [ 577.527249][T22879] netlink: 'syz.2.4624': attribute type 12 has an invalid length. [ 577.910439][T22889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4629'. [ 577.970728][T22889] hsr_slave_0: left promiscuous mode [ 578.007536][T22889] hsr_slave_1: left promiscuous mode [ 578.165888][T22893] kthread_run failed with err -4 [ 578.425406][T22908] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.189130][T22927] netlink: 'syz.4.4639': attribute type 1 has an invalid length. [ 580.277436][T22970] netlink: 'syz.4.4649': attribute type 12 has an invalid length. [ 580.375184][T22970] [ 580.377597][T22970] ====================================================== [ 580.384658][T22970] WARNING: possible circular locking dependency detected [ 580.391716][T22970] syzkaller #0 Not tainted [ 580.396156][T22970] ------------------------------------------------------ [ 580.403197][T22970] syz.4.4649/22970 is trying to acquire lock: [ 580.409290][T22970] ffffffff8ea84680 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x61/0x660 [ 580.418677][T22970] [ 580.418677][T22970] but task is already holding lock: [ 580.426072][T22970] ffff88802b080530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa40 [ 580.435483][T22970] [ 580.435483][T22970] which lock already depends on the new lock. [ 580.435483][T22970] [ 580.445921][T22970] [ 580.445921][T22970] the existing dependency chain (in reverse order) is: [ 580.454965][T22970] [ 580.454965][T22970] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 580.462583][T22970] __mutex_lock+0x19d/0x1550 [ 580.467836][T22970] __ipv6_dev_mc_inc+0x4e/0xa40 [ 580.473255][T22970] __ipv6_sock_mc_join+0x4f7/0x740 [ 580.478918][T22970] ipv6_mcast_join_leave+0x1a2/0x240 [ 580.484952][T22970] do_ipv6_setsockopt+0x1990/0x3180 [ 580.490705][T22970] ipv6_setsockopt+0x59/0x170 [ 580.496026][T22970] do_sock_setsockopt+0x17c/0x1b0 [ 580.501812][T22970] __x64_sys_setsockopt+0x13d/0x1b0 [ 580.507556][T22970] do_syscall_64+0x174/0x580 [ 580.512688][T22970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.519125][T22970] [ 580.519125][T22970] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 580.526896][T22970] lock_sock_nested+0x41/0x100 [ 580.532311][T22970] inet_shutdown+0x6a/0x390 [ 580.537471][T22970] nbd_mark_nsock_dead+0x2cb/0x550 [ 580.543213][T22970] recv_work+0x1cee/0x1e10 [ 580.548218][T22970] process_scheduled_works+0xa8e/0x14e0 [ 580.554334][T22970] worker_thread+0xa47/0xfb0 [ 580.559490][T22970] kthread+0x388/0x470 [ 580.564099][T22970] ret_from_fork+0x514/0xb70 [ 580.569260][T22970] ret_from_fork_asm+0x1a/0x30 [ 580.574576][T22970] [ 580.574576][T22970] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 580.582254][T22970] __mutex_lock+0x19d/0x1550 [ 580.587391][T22970] nbd_queue_rq+0x373/0x1150 [ 580.592534][T22970] blk_mq_dispatch_rq_list+0x499/0x1990 [ 580.598748][T22970] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 580.605771][T22970] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 580.612296][T22970] blk_mq_run_work_fn+0x16c/0x300 [ 580.617879][T22970] process_scheduled_works+0xa8e/0x14e0 [ 580.623984][T22970] worker_thread+0xa47/0xfb0 [ 580.629123][T22970] kthread+0x388/0x470 [ 580.633750][T22970] ret_from_fork+0x514/0xb70 [ 580.638895][T22970] ret_from_fork_asm+0x1a/0x30 [ 580.644213][T22970] [ 580.644213][T22970] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 580.651462][T22970] __mutex_lock+0x19d/0x1550 [ 580.656599][T22970] nbd_queue_rq+0xc1/0x1150 [ 580.661651][T22970] blk_mq_dispatch_rq_list+0x499/0x1990 [ 580.667753][T22970] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 580.674621][T22970] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 580.681150][T22970] blk_mq_run_work_fn+0x16c/0x300 [ 580.686729][T22970] process_scheduled_works+0xa8e/0x14e0 [ 580.692856][T22970] worker_thread+0xa47/0xfb0 [ 580.698011][T22970] kthread+0x388/0x470 [ 580.702621][T22970] ret_from_fork+0x514/0xb70 [ 580.707761][T22970] ret_from_fork_asm+0x1a/0x30 [ 580.713083][T22970] [ 580.713083][T22970] -> #3 (set->srcu){.+.+}-{0:0}: [ 580.720241][T22970] __synchronize_srcu+0xc9/0x2f0 [ 580.725763][T22970] elevator_switch+0x1e8/0x7b0 [ 580.731169][T22970] elevator_change+0x2fa/0x480 [ 580.736494][T22970] elevator_set_default+0x375/0x440 [ 580.742247][T22970] blk_register_queue+0x3f3/0x4e0 [ 580.747910][T22970] __add_disk+0x6cb/0xe30 [ 580.752815][T22970] add_disk_fwnode+0xfb/0x4b0 [ 580.758040][T22970] nbd_dev_add+0x733/0xb60 [ 580.763000][T22970] nbd_init+0x15f/0x1e0 [ 580.767832][T22970] do_one_initcall+0x250/0x870 [ 580.773152][T22970] do_initcall_level+0x10a/0x1a0 [ 580.778755][T22970] do_initcalls+0x59/0xa0 [ 580.783636][T22970] kernel_init_freeable+0x29d/0x3e0 [ 580.789394][T22970] kernel_init+0x1d/0x1d0 [ 580.794276][T22970] ret_from_fork+0x514/0xb70 [ 580.799412][T22970] ret_from_fork_asm+0x1a/0x30 [ 580.804730][T22970] [ 580.804730][T22970] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 580.812579][T22970] __mutex_lock+0x19d/0x1550 [ 580.817716][T22970] elevator_change+0x1af/0x480 [ 580.823046][T22970] elevator_set_none+0xb5/0x140 [ 580.828456][T22970] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 580.834809][T22970] nbd_start_device+0x189/0xb30 [ 580.840210][T22970] nbd_genl_connect+0x1597/0x1c10 [ 580.845779][T22970] genl_family_rcv_msg_doit+0x233/0x340 [ 580.851990][T22970] genl_rcv_msg+0x614/0x7a0 [ 580.857040][T22970] netlink_rcv_skb+0x226/0x4a0 [ 580.862352][T22970] genl_rcv+0x28/0x40 [ 580.866907][T22970] netlink_unicast+0x7bb/0x940 [ 580.872237][T22970] netlink_sendmsg+0x813/0xb40 [ 580.877545][T22970] sock_sendmsg_nosec+0x13a/0x180 [ 580.883122][T22970] ____sys_sendmsg+0x54e/0x850 [ 580.888430][T22970] ___sys_sendmsg+0x2a5/0x360 [ 580.893657][T22970] __x64_sys_sendmsg+0x1b1/0x290 [ 580.899141][T22970] do_syscall_64+0x174/0x580 [ 580.904275][T22970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.910716][T22970] [ 580.910716][T22970] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 580.919390][T22970] blk_alloc_queue+0x544/0x690 [ 580.924712][T22970] __blk_mq_alloc_disk+0x194/0x390 [ 580.930374][T22970] nbd_dev_add+0x494/0xb60 [ 580.935341][T22970] nbd_init+0x15f/0x1e0 [ 580.940036][T22970] do_one_initcall+0x250/0x870 [ 580.945353][T22970] do_initcall_level+0x10a/0x1a0 [ 580.950851][T22970] do_initcalls+0x59/0xa0 [ 580.955738][T22970] kernel_init_freeable+0x29d/0x3e0 [ 580.961483][T22970] kernel_init+0x1d/0x1d0 [ 580.966359][T22970] ret_from_fork+0x514/0xb70 [ 580.971498][T22970] ret_from_fork_asm+0x1a/0x30 [ 580.976810][T22970] [ 580.976810][T22970] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 580.984054][T22970] __lock_acquire+0x1520/0x2cf0 [ 580.989445][T22970] lock_acquire+0x106/0x350 [ 580.994492][T22970] fs_reclaim_acquire+0x71/0x100 [ 580.999980][T22970] __kmalloc_cache_noprof+0x61/0x660 [ 581.005824][T22970] __ipv6_dev_mc_inc+0x447/0xa40 [ 581.011319][T22970] pndisc_constructor+0xe0/0x150 [ 581.016840][T22970] pneigh_create+0x237/0x4a0 [ 581.022217][T22970] neigh_add+0x6ea/0xf60 [ 581.027009][T22970] rtnetlink_rcv_msg+0x7b9/0xc00 [ 581.032555][T22970] netlink_rcv_skb+0x226/0x4a0 [ 581.037874][T22970] netlink_unicast+0x7bb/0x940 [ 581.043181][T22970] netlink_sendmsg+0x813/0xb40 [ 581.048499][T22970] sock_sendmsg_nosec+0x13a/0x180 [ 581.054074][T22970] sock_write_iter+0x2de/0x3e0 [ 581.059386][T22970] vfs_write+0x612/0xba0 [ 581.064238][T22970] ksys_write+0x150/0x270 [ 581.069122][T22970] do_syscall_64+0x174/0x580 [ 581.074251][T22970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.080688][T22970] [ 581.080688][T22970] other info that might help us debug this: [ 581.080688][T22970] [ 581.090940][T22970] Chain exists of: [ 581.090940][T22970] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 581.090940][T22970] [ 581.103579][T22970] Possible unsafe locking scenario: [ 581.103579][T22970] [ 581.111053][T22970] CPU0 CPU1 [ 581.116462][T22970] ---- ---- [ 581.121843][T22970] lock(&idev->mc_lock); [ 581.126227][T22970] lock(sk_lock-AF_INET6); [ 581.133273][T22970] lock(&idev->mc_lock); [ 581.140149][T22970] lock(fs_reclaim); [ 581.144157][T22970] [ 581.144157][T22970] *** DEADLOCK *** [ 581.144157][T22970] [ 581.152312][T22970] 3 locks held by syz.4.4649/22970: [ 581.157526][T22970] #0: ffffffff8fdeac00 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 581.166977][T22970] #1: ffffffff8ff1a338 (&tbl->phash_lock){+.+.}-{4:4}, at: pneigh_create+0x4a/0x4a0 [ 581.176504][T22970] #2: ffff88802b080530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa40 [ 581.186203][T22970] [ 581.186203][T22970] stack backtrace: [ 581.192130][T22970] CPU: 0 UID: 0 PID: 22970 Comm: syz.4.4649 Not tainted syzkaller #0 PREEMPT(full) [ 581.192154][T22970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 581.192176][T22970] Call Trace: [ 581.192183][T22970] [ 581.192193][T22970] dump_stack_lvl+0xe8/0x150 [ 581.192220][T22970] print_circular_bug+0x2e1/0x300 [ 581.192249][T22970] check_noncircular+0x12e/0x150 [ 581.192279][T22970] __lock_acquire+0x1520/0x2cf0 [ 581.192304][T22970] ? preempt_schedule_common+0x82/0xd0 [ 581.192334][T22970] ? preempt_schedule_thunk+0x16/0x40 [ 581.192368][T22970] ? __mutex_lock+0x321/0x1550 [ 581.192386][T22970] ? __kmalloc_cache_noprof+0x61/0x660 [ 581.192416][T22970] lock_acquire+0x106/0x350 [ 581.192436][T22970] ? __kmalloc_cache_noprof+0x61/0x660 [ 581.192469][T22970] ? __ipv6_dev_mc_inc+0x4e/0xa40 [ 581.192491][T22970] ? __pfx___mutex_lock+0x10/0x10 [ 581.192511][T22970] fs_reclaim_acquire+0x71/0x100 [ 581.192529][T22970] ? __kmalloc_cache_noprof+0x61/0x660 [ 581.192559][T22970] __kmalloc_cache_noprof+0x61/0x660 [ 581.192591][T22970] ? __ipv6_dev_mc_inc+0x447/0xa40 [ 581.192611][T22970] ? __ipv6_dev_mc_inc+0x447/0xa40 [ 581.192637][T22970] __ipv6_dev_mc_inc+0x447/0xa40 [ 581.192665][T22970] pndisc_constructor+0xe0/0x150 [ 581.192681][T22970] ? __pfx_pndisc_constructor+0x10/0x10 [ 581.192701][T22970] ? __kmalloc_noprof+0x1ad/0x720 [ 581.192731][T22970] ? pneigh_create+0x11c/0x4a0 [ 581.192758][T22970] ? pneigh_create+0x15b/0x4a0 [ 581.192787][T22970] pneigh_create+0x237/0x4a0 [ 581.192817][T22970] neigh_add+0x6ea/0xf60 [ 581.192843][T22970] ? __pfx_neigh_add+0x10/0x10 [ 581.192869][T22970] ? __dev_queue_xmit+0x29b/0x37f0 [ 581.192995][T22970] ? __pfx_neigh_add+0x10/0x10 [ 581.193015][T22970] rtnetlink_rcv_msg+0x7b9/0xc00 [ 581.193049][T22970] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 581.193079][T22970] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 581.193109][T22970] ? ref_tracker_free+0x689/0x830 [ 581.193201][T22970] ? __pfx_ref_tracker_free+0x10/0x10 [ 581.193234][T22970] netlink_rcv_skb+0x226/0x4a0 [ 581.193258][T22970] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 581.193289][T22970] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 581.193317][T22970] ? netlink_deliver_tap+0x2e/0x1b0 [ 581.193336][T22970] ? netlink_deliver_tap+0x2e/0x1b0 [ 581.193362][T22970] netlink_unicast+0x7bb/0x940 [ 581.193387][T22970] netlink_sendmsg+0x813/0xb40 [ 581.193414][T22970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 581.193437][T22970] ? aa_sock_msg_perm+0xf1/0x1b0 [ 581.193507][T22970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 581.193529][T22970] sock_sendmsg_nosec+0x13a/0x180 [ 581.193558][T22970] sock_write_iter+0x2de/0x3e0 [ 581.193585][T22970] ? __pfx_sock_write_iter+0x10/0x10 [ 581.193613][T22970] ? bpf_lsm_file_permission+0x9/0x20 [ 581.193659][T22970] ? security_file_permission+0x75/0x260 [ 581.193747][T22970] vfs_write+0x612/0xba0 [ 581.193775][T22970] ? __pfx_vfs_write+0x10/0x10 [ 581.193802][T22970] ? __fget_files+0x2a/0x420 [ 581.193825][T22970] ksys_write+0x150/0x270 [ 581.193856][T22970] ? __pfx_ksys_write+0x10/0x10 [ 581.193884][T22970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.193905][T22970] do_syscall_64+0x174/0x580 [ 581.193923][T22970] ? clear_bhb_loop+0x40/0x90 [ 581.193946][T22970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.193965][T22970] RIP: 0033:0x7f6fdeb9de59 [ 581.193985][T22970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.194002][T22970] RSP: 002b:00007f6fdfa3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 581.194021][T22970] RAX: ffffffffffffffda RBX: 00007f6fdee26090 RCX: 00007f6fdeb9de59 [ 581.194037][T22970] RDX: 00000000000000fc RSI: 00002000000007c0 RDI: 000000000000000e [ 581.194049][T22970] RBP: 00007f6fdec33e6f R08: 0000000000000000 R09: 0000000000000000 [ 581.194061][T22970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.194074][T22970] R13: 00007f6fdee26128 R14: 00007f6fdee26090 R15: 00007ffd5a2a28f8 [ 581.194096][T22970] [ 581.650190][T22978] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 582.113677][ T5286] 8021q: adding VLAN 0 to HW filter on device netdevsim3