last executing test programs: 2.815199705s ago: executing program 1 (id=2321): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000180)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x800, @loopback, 0x50000000}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}}], 0x1, 0x81) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000280)=ANY=[], 0x1000f) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000100039040f0e000000000000e96bd5c4", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800150000000000050016"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.71106942s ago: executing program 0 (id=2323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000047000fddbdf25072f00717e0051391b277290f9d400", @ANYRES32=r3, @ANYBLOB="140004006e6963766630000000000000000000000800050007000000"], 0x38}, 0x1, 0x0, 0x0, 0x48004}, 0x0) 2.543488395s ago: executing program 0 (id=2324): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) bind$nfc_llcp(r1, &(0x7f0000000100)={0x27, r3, 0xffffffffffffffff, 0x6, 0x0, 0xff, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f5237c9c58a8f60d4f1700000000000200000000001900", 0x3c}, 0x60) listen(r1, 0x40) r4 = socket(0x840000000002, 0x3, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40241, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$inet(0x2, 0x1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000640)='bond_slave_1\x00', 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r6, r8, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000540)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x20, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x0, 0x2, 0x1}], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x4e20, @remote}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}]}}}]}, 0x3c}}, 0x0) 2.061135129s ago: executing program 4 (id=2332): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2b}}, 0x0, 0x0, 0x50, 0x0, "6633c3a37ae5ff9d62dc3172c08219453e2af1f64fd758619542da6a6f9faa461c8cd13d167918d009ab11c4b442803a9f700ac40dae2aa3bb46db9320eee5000300203f0d39960285f2f7be7139623c"}, 0xd8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x1, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x35f, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv6={0x86dd, @gre_packet={0x6, 0x6, ':A#', 0x329, 0x2f, 0xff, @local, @empty, {[@srh={0x1, 0xa, 0x4, 0x5, 0xc5, 0x18, 0x7fec, [@dev={0xfe, 0x80, '\x00', 0x17}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}]}, @fragment={0x2b, 0x0, 0x3, 0x1, 0x0, 0x1e, 0x67}, @hopopts={0x32, 0x3, '\x00', [@pad1, @calipso={0x7, 0x18, {0x2, 0x4, 0xf, 0x2, [0x2, 0x8]}}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x64, 0x3, [], "a678f1bf38dc8422583d99b23acbc749c187107ca0e7ab57f8d7fd43c56f412c1529d8925fff3ab5b2a6811e7281962f7bfd4a550a798207b4fd491f3391929eb724ffbc644a8f3b4de7639de8c5b4fd05434439483605736a930abcbc216c59ac9da893"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0xc, 0x0, 0x81], "07679a6e797391960f7fdb5257c9e18b6a724d813e751247c92a6da9a55a068e744652cd18917b659ec806b4e80153d7082fa9f4094b5fab90df84580f81ce7764aacee4db4c5ef09b388ebdaff5530e6970f49db819ef5437cc070762bb4992e6f12c551800456c5ceed8488d2b2b56a4a2d0498f9070a0fc4535e440bb34a3518c810c5e70a10b45c0f24b23a665303fda1f36ba87570cae"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x3, 0x5, 0x7], "958f120a487421a49711a68910f2e15a04c18458b75ea59e7ad14fe945c351f510714001075851c079c6916f30ce25de4f27ceecd4497cb6c81c91ee01de017cc500cbcfc26569ed36c9ed17ed34d142441da09222998a15c76f64ce82c3f879c8a68c4357838a80e48ce4e83210f338d588d6c62b91ebaaadaebf5a01f266de3c939ea728c76ca86411495328cb1e596c298a86d6ccc151a3d07d6eef7262ef80a31e132b5f45f27f7373e9f4fa2a7613893b559a26e909237cb2a16cd0a0126aecb3be8e5f066e65bc9476e688cf4d9b6565cc3a1edf37"}, {0x8, 0x88be, 0x3, {{0x9, 0x1, 0xdb, 0x3, 0x1, 0x0, 0x4}, 0x1, {0x1b687489}}}, {0x8, 0x22eb, 0x3, {{0x4, 0x2, 0x64, 0x2, 0x0, 0x3, 0x0, 0x1}, 0x2, {0x80000001, 0x65, 0x0, 0x3, 0x0, 0x0, 0x3}}}, {0x8, 0x6558, 0x3, "a0b990f34f20eea5ef31609181267f5a072275acef37978111be1af098357a673be4e1fdc8d58e3a798d14adefa91dae3d5d5a590b6bebe76203f8ffff7e706bf441d15cf2c1f428690c713f3ef7e4fbf52c777d6acf80b9fe4b06b033f267a78fb3de769565897f31e77ade7be9bddbbbec569b2f1174873db2897c"}}}}}}}, 0x0) 1.982997772s ago: executing program 0 (id=2333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="32cc0000"], 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000004000000611820000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff85000000010000009500000000100000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.977270789s ago: executing program 3 (id=2343): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f00000000c0)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0c1}, 0x4) (async) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x11, 0x888e, r8, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) (async) sendto$packet(r9, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000900)=0xe8) getsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000940)={@rand_addr, @empty, 0x0}, &(0x7f0000000980)=0xc) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000009c0)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000ac0)=0xe8) sendmsg$nl_xfrm(r6, &(0x7f0000000d00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)=@newsa={0x1c0, 0x10, 0x0, 0x70bd2d, 0x25dfdbfe, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x5, 0x4e23, 0x1, 0xa, 0x80, 0x20, 0xc, r8, r10}, {@in6=@mcast1, 0x4d5, 0x6c}, @in=@empty, {0x9, 0x1, 0x0, 0xb, 0x7, 0xfffffffffffffffc, 0x8001, 0x4}, {0x5, 0x101, 0x0, 0xfffffffffffffff8}, {0x2, 0xa, 0x8}, 0x70bd2d, 0x3501, 0x2, 0x0, 0x8c, 0x11}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}, @policy={0xac, 0x7, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x3, 0x4e22, 0x8, 0xa, 0x0, 0x80, 0x0, r11, r12}, {0xf53f, 0x0, 0x5, 0x80000001, 0x2, 0xffff, 0xffffffffffffff7f, 0xa}, {0x9, 0xb4, 0x5, 0x931}, 0x92, 0x6e6bbf, 0x0, 0x1, 0x2, 0x3}}, @iptfs_max_qsize={0x8, 0x28, 0x2}, @srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0xc}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x90}, 0x24000041) (async) sendto$packet(r9, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000780), r6) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x4) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={r13, @in6={{0xa, 0x4e22, 0x1, @remote, 0x2}}}, 0x84) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000002c0)={r13, @in={{0x2, 0x4e21, @private=0xa010101}}}, 0x84) (async) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r4, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x4}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r14 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r14, 0x28, 0x1, &(0x7f0000000380)=""/54, &(0x7f00000003c0)=0x36) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1e, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) ioctl$sock_ifreq(r14, 0x8993, &(0x7f0000000540)={'macvlan1\x00', @ifru_names='wg0\x00'}) 1.920651695s ago: executing program 4 (id=2334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x8241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010029fcdbdf2500000000000000", @ANYRES32=0x0, @ANYBLOB="00210400022400001400030062617461647630000000000000000000040014001c0016801800018014000b"], 0x54}, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000240), 0x10) recvmmsg(r1, &(0x7f0000000280), 0x3fffffffffffe83, 0x2, 0x0) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r1], 0x48}}, 0x2404c054) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000440)={'syzkaller1\x00', @link_local}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4010) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e628}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb88a8230081"], 0x36) 1.856449341s ago: executing program 1 (id=2335): r0 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000380)={@local, 0x0}, &(0x7f00000003c0)=0x14) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000cc0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000000d40)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000c80)={'syztnl1\x00', &(0x7f0000000c00)={'syztnl0\x00', r1, 0x7, 0x80, 0x7f, 0x5, {{0x15, 0x4, 0x2, 0x8, 0x54, 0x64, 0x0, 0xb, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x6a, 0x3, 0x4, [{@remote, 0x7}]}, @ra={0x94, 0x4}, @generic={0x83, 0x11, "fd512000730287fbbfa45165326829"}, @lsrr={0x83, 0x13, 0x59, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @local]}, @lsrr={0x83, 0xb, 0xa2, [@local, @rand_addr=0x64010101]}]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r7 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)=@deltaction={0x5c, 0x31, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r7], 0xc4}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000700)=0xfffffffffffff801) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000004c0)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000500)={&(0x7f0000000340)={0xa, 0x4e21, 0x80000, @private0, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000290000003700000001d947"], 0x18}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r8, &(0x7f0000000a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x184, 0x1, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xe}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x4c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfff}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x49}}, @NFCTH_TUPLE={0x70, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb8}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x20008000}, 0x40800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000002306a949bbc61e65940d4d0a85a89a257694f352aa00696e2fa95e9736b10102de761e4a149470ac5002b1fab94079ef610423e8bb5765c75d39b476383130e8b664ba808f544c73d4bc3614388a656e56b8720084d764267702cd34d0ce13ca3e50a70a75fcbcf9b42886ac9331f8f4e725500abe425f2645091b518c3fade198fdcde40d40d5925948ea18b7260b6423ef93cc5daf1a", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="00000000000000000500"/28], 0x50) socket$netlink(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000440)={@mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @remote}, 0x5, 0x0, 0x7d, 0x0, 0xfffffffffffffffd, 0x9b0318}) 1.841002531s ago: executing program 0 (id=2336): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000feff00000000000000130000181305628c484b8338c301000020696c250000000000202020db1af8ff41000000bda102000003000007010000f8ffffffb702000008000000b703000000000000858000007b0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc8", 0xc5}], 0x1}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000640)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000700)=ANY=[@ANYBLOB='-'], 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) unshare(0x28000600) r5 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x114, 0x3, 0x0, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f00000003c0)={'sit0\x00', &(0x7f00000002c0)={@dev={0xac, 0x14, 0x14, 0x35}, 0x0, 0x0, 0x60, 0x0, [{@multicast2}, {@remote}, {@multicast2}, {@loopback}, {@empty}, {@private}]}}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r7 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x6c}, @sadb_sa={0x2, 0x1, 0x0, 0x2, 0x2, 0x9, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x20, 0x0, @in={0x2, 0x0, @empty}}]}, 0x58}, 0x1, 0x7}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x21}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) unshare(0x22020600) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x200010, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r8, 0x0}, 0x20) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r3], 0x3c}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r9, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 32) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x8000) (async) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.51729606s ago: executing program 3 (id=2338): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x11700}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004d010}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r1) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r2, 0x501, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100030000002c0004802800160080ff00000500030080ff00000500030080ff0000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xa8, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x84, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x550ce14e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b58e516}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7025758f}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40090}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xf}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x44041) 1.481784635s ago: executing program 2 (id=2339): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000500)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x44, &(0x7f0000000540)=""/4096, &(0x7f0000001540)=0x1000) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01030000000000000025050000000800090002000000060001000500000008000c00aa0a000008000b00040000005d920004000000000000fe015874f007d39ce4359e4ac709df812c746beff7e2e22f51ed3780d537a8"], 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 1.429111894s ago: executing program 1 (id=2340): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1035}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}, @IFLA_MTU={0x8, 0x4, 0x400}, @IFLA_VFINFO_LIST={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1035}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}, @IFLA_MTU={0x8, 0x4, 0x400}, @IFLA_VFINFO_LIST={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000000}, 0x0) 1.31983421s ago: executing program 3 (id=2341): unshare(0x20040600) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000010000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x324, 0x0, 0x0, 0x1f00c00e}, 0x4014) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r4, 0x0, 0x12, &(0x7f0000000400)=""/1, &(0x7f0000000440)=0x1) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0xfff2}, {0xa, 0x7}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_ACT={0x40, 0x3, [@m_skbmod={0x3c, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) sendmsg$nl_route(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv4_newrule={0x64, 0x20, 0x20, 0x70bd25, 0x25dfdbfe, {0x2, 0x0, 0x20, 0xe, 0x28, 0x0, 0x0, 0x2, 0x18}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_FLOW={0x8, 0xb, 0xe}, @FRA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x34}}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e24}}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000040}, 0xc005) (async) sendmsg$nl_route(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=@ipv4_newrule={0x64, 0x20, 0x20, 0x70bd25, 0x25dfdbfe, {0x2, 0x0, 0x20, 0xe, 0x28, 0x0, 0x0, 0x2, 0x18}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_FLOW={0x8, 0xb, 0xe}, @FRA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x34}}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e24}}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000040}, 0xc005) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000040)={0x0, 0xffffffffffffff14, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000040)={0x0, 0xffffffffffffff14, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f00000001c0)=""/63, &(0x7f0000000240)=0x3f) 1.316052069s ago: executing program 4 (id=2342): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000080)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x55}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000290000003700000001d947"], 0x18}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.259528059s ago: executing program 2 (id=2344): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x10, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="b4000000000000007910480000000000710436000000000095000000"], &(0x7f0000000840)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000880)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)=""/166, 0xa6}, {&(0x7f0000000240)=""/70, 0x46}, {&(0x7f0000000980)=""/4105, 0x1009}, {&(0x7f00000019c0)=""/128, 0x80}, {&(0x7f0000001a40)=""/195, 0xc3}, {&(0x7f0000001b40)=""/236, 0xec}, {&(0x7f0000001c40)=""/126, 0x7e}, {&(0x7f0000001cc0)=""/133, 0x85}], 0x8}}], 0x1, 0x40010122, 0x0) write(r0, &(0x7f0000001d80)="1400000052004f7fb3e4bf80a000080000000000", 0x14) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000001dc0)={0x2, 0x1, 0x1, 0xfffb, 0xc0, 0x2, 0x80, 0x6, {0x0, @in6={{0xa, 0x4e22, 0x1, @empty, 0x1ff}}, 0x22, 0x7ff, 0x7, 0x0, 0x4ef}}, &(0x7f0000001e80)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000001ec0)={r1, 0x6}, 0x8) 1.241582645s ago: executing program 4 (id=2345): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0xffff, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="f90b00003b000ede00000000000000000000000072485a7de0807fcf4ea5fd2d13aa104e04cb4ef5cef82805e2a7f4688b4fd9ca01d5e562d3d45bf7ce91e3b1823c73f485990b24209311e85d4cac0136c83b829dc000000000000000b97b0454bf921e76fd2d4d5f822c76cfd426fd2137bc6fa13f33c12cdd5fcfb0d9df62b838ce8c9fb931be6c9c33afcc55e541199878da8b0574f78f07"], 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0x1}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) socket$inet(0x2, 0x5, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000440)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newtfilter={0x20b4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x7}, {0xfff1, 0xfff3}, {0x30e}}, [@filter_kind_options=@f_matchall={{0xd}, {0x6c, 0x2, [@TCA_MATCHALL_ACT={0x68, 0x2, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_PARMS={0x18, 0x1, {0x6, 0xffffffff, 0x3, 0xfffeffff, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @filter_kind_options=@f_flow={{0x9}, {0x2008, 0x2, [@TCA_FLOW_ACT={0xf60, 0x9, 0x0, 0x1, [@m_police={0x664, 0x13, 0x0, 0x0, {{0xb}, {0x54c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7f, 0x3, 0xb8, 0x7, 0x5, 0x2, 0x1ce, 0x9, 0xed, 0x5, 0x7, 0x2f, 0x1000, 0x8, 0x6, 0x2, 0xbf, 0x3, 0xa, 0x9, 0x10000, 0x6, 0x6, 0x8, 0x8000, 0x7, 0x8, 0x0, 0x5, 0x7, 0x6, 0x4, 0x8, 0xc300000, 0x0, 0x7, 0x3, 0x4, 0x5, 0xbf, 0x5, 0x2, 0x81, 0x1, 0x8, 0x10000, 0x0, 0x0, 0x4, 0x1, 0x626, 0x7fffffff, 0x8, 0x9, 0x7, 0x10000, 0x1, 0x9, 0x0, 0x22, 0x4, 0x7fff, 0x8, 0x10001, 0x2, 0x9, 0xa, 0x6, 0x8, 0x3, 0x0, 0xff56, 0x8, 0x96c, 0x9, 0x4, 0x0, 0x1, 0x8, 0x0, 0x3, 0x6, 0x4, 0x2, 0x6, 0x3, 0xc, 0x0, 0x9, 0x7, 0x7fffffff, 0x80000000, 0x8, 0x7, 0x4, 0x5, 0x8, 0x3, 0x0, 0x3, 0x8000, 0x8000001, 0x5615, 0x1374, 0x3, 0x1, 0x8000, 0x0, 0xcb, 0x8, 0xffffff81, 0x2, 0x6, 0x4, 0x4, 0x7fffffff, 0x200, 0x7, 0x3, 0x101, 0xfffffffb, 0x6, 0x2, 0x752, 0x6842, 0x6, 0x7, 0x1, 0x1, 0x0, 0x7f, 0x7, 0x8, 0x5, 0x1000, 0xcd5, 0x4, 0x4, 0x0, 0x3, 0x80000000, 0xa, 0x1ff, 0x20, 0x3, 0x1, 0x8, 0x2, 0x4bb9, 0x7fffffff, 0x7, 0x1, 0x3, 0x3, 0x7, 0x5, 0x0, 0x7, 0xdcd, 0xfffffff9, 0x4, 0x1, 0x4, 0x2, 0x4, 0x85b9, 0x80000001, 0x6, 0xb51, 0x50000000, 0xb70, 0x1, 0xa9a, 0x1000, 0x3, 0x7, 0x0, 0x7f, 0x0, 0x7ea, 0x0, 0x9, 0x1, 0x3, 0x1, 0x67d, 0x3, 0x200, 0x4, 0x7, 0xa05, 0x8000, 0x2, 0x40, 0x42d7, 0x0, 0x1, 0x7, 0x2c62, 0x440b, 0x1, 0xcc9f, 0xd, 0x1000, 0xbc3d, 0x2, 0x3, 0x2610c000, 0x5, 0x1, 0x6, 0xc0, 0xa7, 0x6, 0x9, 0x0, 0x7, 0x80000001, 0xca, 0x7fffffff, 0x200, 0x0, 0x146, 0x4, 0x3ddc, 0x4b5, 0x401, 0x2, 0x4, 0x8b4, 0x10, 0x9, 0x7, 0x5, 0xc173, 0x5, 0xf71, 0x7, 0x9, 0x6, 0xf, 0x9, 0x8, 0x8, 0x101, 0x5, 0x1, 0x5, 0x4, 0x5, 0x2, 0xfffffffc, 0x8, 0x7, 0xcbe, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xaae}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x1, 0x7, 0x5, {0x4, 0x2, 0x8, 0x0, 0x4, 0x44f}, {0x75, 0x2, 0x800, 0x101, 0x8, 0x7}, 0x6, 0x0, 0x3}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8001}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x100}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x1, 0x2, 0x407, 0x7, {0x0, 0x0, 0x5ea, 0x5a4, 0x8000, 0x81}, {0x2, 0x1, 0x5, 0x6472, 0x2f7e, 0xfffffffb}, 0x6, 0x2, 0x4}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x625}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x100}, @TCA_POLICE_TBF={0x3c, 0x1, {0x72, 0x6, 0x80000001, 0xffff, 0x3ed, {0xd, 0x1, 0x3, 0x4, 0x17, 0x1}, {0x2, 0x2, 0x1, 0xc16f, 0x7, 0x5}, 0x9, 0xffff, 0x1}}]]}, {0xf0, 0x6, "cec948928023635c096383f3f1dd4917b7b5ec4515e6900a9bcef70dda38b1c5a044e7a4faba15af74a549739ff3855e68f4055266880211c30ab0f7811a67df515ec449e445b3ac0b41d5dc428f18a9da7013563b0d15efe4f80704a4ce1b50f83dda2056fa2b0097b687ce32263889ed6277d7c5ac5c4ca2bcd3840b61078c930b4c53482c17c418b61f6f0dee576317c1b9d838db5312050cb78731d972f275aaf04f4a02cf055a8d34dc872980fe426b8c1b3140fe3dd31346e90ee787aac49f06b3e9c00b3cb2f6d186146c8a88e8dcd0e90f0a3c8c172910f53e62d7670d45a5af6683c369ec556862"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0x160, 0x12, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xfffd}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xa2e6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0xa025, 0x3ff, 0x7, 0xe50, 0xf}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xe}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8b3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0xfe78, 0x3, 0x1, 0x8}}]}, {0xc2, 0x6, "8d2587227507d7a0f551b4bc6e23a57a4320eeba9dc3527b7ec768ff1ab9d4652122a25b48c9ebbd386470da89e61ad1222a1c249d00344ba931b6d05f09bdd1c973d20822867392fb71188762c2d3fc98ac69401356bf91261f539921e18545cfed089c573a04de468edacb24093663d6c1d3e07afacc71dd15d721763f3a6e3cdbfdf17d6263fa0334b52331a09633d7842b3b266f13e332d55e4f605a07fbc4ffee9b7442caa0ae7b5daed3a03abe7217d10a79f3f38884632869b885"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0xe0, 0x7, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0xae, 0x6, "639030286e59e21360502984e93643635c41d81bb3e1f7f7ef7db55325ab74ad695978a7ff3a2a412a23b5a2d68c587083292fef54163f05647b34f33f0689de1082803c5eba0c838484c8d56cc14503a2e6c47ecd77c3ddfd401ee2f0f6b083c12d68837ee2dbc3671e916c34286e53b774b361f640b8c8079a177e1adbbd77434b5bc956cbb581e75264389f5030ad9eb365ffc208136087f71e108708f877a2b7e16870db89c9266a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x16c, 0x3, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9691}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x1, 0x0, 0x8, 0x6}, 0xd}}]}, {0xfe, 0x6, "b289b2984ce3b9e01623aa3d2d0547dd08591e48a4fa268bb053eabe49a20a2e2c15ffce0f3582524056b8aa9de3e82f4afb218d4145bdf324bb2e23a7da00655e80c5c7360d47bd2576f8152a4f6b8bc55ccb556d6c1591baaf41886b3ad0727cca2bd6fa61a22c67384b409a4991f612bd7c4cb4781c38e223fd98ebfee79467e85bfda175e737b8b16ef67119a37fa6d5ec73550384790e5ae0e383a1a4e1e3ca37270101a81dbf8cb773ec7bef2256f0fad07c441e610b51eb5d9ef6d3182695b5aa5c540e29452407539d210cc320ef8e0ca19bc83e322c4583250a3d86d33472c265a47562f24f6fbfbd247e1ae4f28787a0d0faa46781"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4}}}}, @m_ife={0x164, 0x8, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_METALST={0x44, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xfffffff9}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x1}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xc}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}]}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_TYPE={0x6, 0x5, 0xfffc}]}, {0xd5, 0x6, "4967481a02c469c6ae2cc1dfe23f3264d5b7e73b89454cb878896cc71a15391e73f0eb8060de3b608d7ec457834ac0c02820b297200222c05c42b44e7c9dadf5673ba44d4c2ecbe038e0f61bc2d7de18dab0908517270f26868ebcac18d7dc29a24e808c35e8dc079b600bbeb21b90d2920b5ed1b5d84e4fc7a55af7db5ee21bffccd629ed1e33bc7e87a72de8c9550c6bcb57e70a8d3d65c941eeb762c14b720117745fcf20f0dd42d90834a7454bef1a481e3b02632b85bb91e78c349f6bb3068229b4a773f10de631cc1d8f0746d03e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x120, 0x15, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x71}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x7f}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9323}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xe}]}, {0xc3, 0x6, "9f62a64ff44b8b6cef53e397b1fa3408d5810dc935881b7771eb5aa3ebef02be57f9dde14411222ba3b3a8dfbfdeb1c12118006c7e16817c0c28800218e5b54f728e3bce6380250cee47655167e339fff252f8b80432a5e75548804d70a9bb0817530b1729f438b91b5a5e9608abaea753696e7a5686e3ed7fb3ebd7419b8808bdd0424475ddc0f2b49a692a1d2e54280476395e526003e5b1055e921161087ce21f036592373bf38f9a2a5b1bb3c5f3d9f816c992eac9c94129fbd72a5364"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x6c, 0x1d, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x32}}]}, {0x5, 0x6, "a4"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x118, 0x7, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x3, 0xffffffffffffffff, 0x673c, 0xff}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x9, 0x0, 0xfffff6a4, 0x7ff}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x40}, @TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}]}, {0x8b, 0x6, "6b8dbb8d88a20de5a2d687bed803938f88fc49576751425799b2ce084a940f96102579ab59acaf971d074a4816fe58dded9c1c281eb9328f3d354c360a5c88bbf32488f8a9590f3823f08cc5afd144ca77c73bff071a7e1232e037cea2d211b79c16256c5dbd06151d657b53dc7fc159b0ea694ac59c40cdec549b0fcfb624afa859e6a0bb3864"}, {0xc, 0x7, {0x1, 0x5960b6e3333fc7e7}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x144, 0xf, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x7ff, 0x0, 0x2, 0xb}, @local, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x3, 0x5, 0xeb7, 0x4}, @rand_addr=0x64010100, @local, 0xff000000, 0x1}}]}, {0xcb, 0x6, "c2daed50103e861e2226a4731a16353192c8979b345dd8d8392151d6ad10128ddad0c075f5092125b312ecdfab1e37f61872ca3e752e62c9c52bf0eed8b4576c0880e257ecbd4709f10b5ed474dac56117d8e9be56ea94e8c8c7d09a0dcb934e952fb5ef4694e4bfc6a5a89cb86537d6a7b906c88bb0dcdd788f0a6ad1085178a574f1578ea9888763246e8357ac1e037b5d23a272a5b64d2e8261594a61ab10180a0a21dbcf0e54b457e629b57b60a1cebe864f659aa34153993d6369d5a2ba04dc976db0b174"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_FLOW_POLICE={0x10a4, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3e757629, 0x5, 0x1, 0x8, 0x1000, 0x10, 0x7, 0x6, 0x7, 0x9, 0x2, 0x800000, 0x6, 0x3, 0x9, 0x5, 0x1, 0x8, 0x2, 0x3ff, 0x3, 0x1, 0x7, 0x9, 0x0, 0x7, 0x0, 0x5, 0x3, 0x81, 0x0, 0x90, 0x6, 0x5, 0x9, 0x66, 0x2, 0x10, 0x10, 0x6, 0x6, 0x5, 0xffffffff, 0xffff, 0x9, 0xe9a, 0x3, 0x3, 0x0, 0x4, 0x2, 0x6, 0x5, 0x3, 0x5, 0x1, 0x2, 0x4, 0x40, 0xffffffff, 0x1, 0x3ff, 0x10000, 0x9, 0x2, 0x7, 0x46, 0xa, 0xfffffff9, 0x107, 0x8, 0xe, 0xfffffff9, 0x80000000, 0x5, 0xc0000000, 0x3, 0x9, 0x1fb8, 0x6, 0xfffffffb, 0x80000001, 0x8, 0x401, 0x0, 0x5, 0x10000, 0x9, 0x0, 0x7, 0x5, 0x0, 0x25, 0x9, 0xfffffffd, 0x5, 0x7, 0xc, 0x7, 0x9, 0x2, 0x5, 0x1, 0x81, 0xfff, 0x3ff, 0xfffffe00, 0x1, 0x7, 0x8, 0xfffffff8, 0xffffffff, 0x3, 0xff, 0x1498, 0x100, 0x401, 0x80, 0x9, 0x7, 0x0, 0x0, 0x10001, 0x9, 0xb, 0x3, 0x40, 0x1ff, 0x7fff, 0x4033, 0x80, 0x1, 0xb3f, 0x63aa, 0x1ff, 0x9, 0xb, 0xfaa, 0x8000, 0x18c, 0x8, 0x4, 0x4, 0x40000000, 0x6, 0x6, 0x3, 0xd9, 0x7f, 0x6, 0x10, 0x4, 0x78, 0xfffffff8, 0x5, 0x5, 0x9, 0x8000, 0x5, 0x3aa, 0xa4b7, 0x5, 0x3, 0x3, 0xffff, 0x4, 0x2, 0x4, 0x1, 0x0, 0x8001, 0x0, 0x7, 0x8, 0x3, 0x4, 0x5, 0x8, 0x1, 0x3, 0x6, 0xc, 0x0, 0x0, 0x1, 0x6, 0xfff, 0x9, 0x8, 0x2, 0x3, 0x9, 0x5, 0xfffffe00, 0x1, 0xfffffff7, 0x6, 0x7, 0x3, 0x3, 0x4, 0x4, 0x4, 0x7d4, 0x3, 0x0, 0x7fff, 0x0, 0x0, 0x6, 0x400, 0x7fff, 0x0, 0xffffffc0, 0x154f, 0x10001, 0x8, 0x4, 0x73, 0xffff, 0x0, 0x4, 0x8001, 0x0, 0xd203, 0x80000000, 0x3, 0x2bcc, 0xe, 0x9, 0x3, 0x1000, 0x7, 0x6, 0x0, 0x9, 0x1, 0x80, 0x8, 0x81, 0x6, 0x7, 0x3, 0x100, 0x9, 0x2, 0x400, 0x180, 0x6, 0x0, 0x200, 0x5, 0x81, 0x8, 0x2b1, 0x13]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x401, 0x3, 0x3ff, {0x6, 0x0, 0x0, 0x1000, 0x8001, 0x9}, {0xd, 0x1, 0x817, 0x6, 0x7, 0x916}, 0x10001, 0x4, 0x3ca}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x40, 0x8, 0x4, 0x100, 0x3, 0x4345, 0x7, 0x1e, 0x626a2fcb, 0x36b, 0x7, 0x47da, 0xf, 0x80000000, 0x4d0b, 0x4, 0x1c00, 0x5, 0x7f, 0x9, 0x200, 0x4, 0xfffffeff, 0x1, 0x6, 0xfd8c, 0x7, 0x55c8, 0xf, 0x1, 0x628e, 0x7, 0x3b3473ab, 0x8000, 0x0, 0x3f, 0x2, 0x1b3, 0xffff, 0x1, 0xcf, 0x400, 0x7, 0x4, 0x5, 0xffff, 0x2, 0x5, 0x4, 0x1e9a74e7, 0xdcb0, 0x311, 0x5, 0x3, 0x511c, 0xf5f1, 0x3ff, 0x2, 0x3, 0x0, 0x5, 0x5, 0x70, 0x0, 0x3, 0x10, 0x5, 0x10001, 0x3, 0x3, 0x7, 0x3, 0x2d9f, 0x0, 0x7ff, 0x2, 0x3, 0xa, 0x0, 0x6, 0xfff, 0x101, 0x9, 0x6, 0x10000, 0x401, 0x3, 0x8, 0xe601, 0x3, 0x9, 0x7fff, 0xffff, 0x8, 0x23, 0x3, 0x4, 0x81, 0xe, 0x6, 0xfffffff6, 0x4, 0x9, 0xffff, 0x9, 0x35e, 0xde6, 0x3, 0x2, 0x200, 0xfffffff8, 0x9, 0x8, 0x5, 0x3ff, 0x9, 0xf790, 0x7ff, 0xefd1, 0x4, 0x6, 0xd6, 0x1, 0x8, 0x9, 0x4, 0x7, 0x2cc1, 0x5, 0x10000, 0x3, 0xa39, 0x2, 0xfffffff9, 0x7, 0x0, 0x1f, 0x80, 0x9, 0x400, 0xec45, 0x4, 0x100, 0x9, 0x6, 0x6, 0x7, 0x4, 0x0, 0x7490, 0x31, 0x3, 0x40, 0x91e, 0x4, 0x401, 0x80000001, 0xe, 0x7ff, 0x1000, 0x6, 0x8e5, 0x58f, 0x1000, 0x3, 0xfffffffd, 0x0, 0x8, 0xffffffff, 0x7, 0x6cd, 0x400, 0x3, 0x2250, 0x0, 0x8, 0x5, 0x4, 0xffff, 0x0, 0x26800000, 0x1, 0x2, 0x8, 0x6, 0x8, 0x5, 0x9, 0x140, 0x9, 0x9, 0x10000, 0xd3, 0x5, 0x6, 0x5, 0x100, 0xf3, 0xc, 0x1, 0xbe, 0x8000, 0x80000000, 0x3, 0xffffffff, 0xd05, 0xfffffff5, 0x9, 0xfffffff9, 0x1, 0x1, 0x9, 0xec30, 0x7f, 0x8, 0xc03, 0x5, 0x8, 0x4, 0x7ff, 0x101, 0x9, 0x400, 0x1, 0x2d54, 0x80, 0xf99, 0xfff, 0x755f, 0x9, 0x93, 0x7, 0x758, 0xd28e, 0x1e, 0x4, 0x1, 0x7, 0x6, 0x4, 0x3, 0xff, 0xfffffff9, 0x7, 0x0, 0x3, 0x0, 0x3ba1519, 0x2, 0xf, 0x0, 0x7, 0x1, 0x10001, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x3, 0x8, 0xfff, 0x5, 0x7, 0x40, 0x3, 0x8, 0x9, 0x1, 0x2, 0x8, 0x7, 0x6af8, 0x80, 0x0, 0x8, 0x83d4, 0x800, 0x10, 0x80, 0x200, 0xffff, 0xd4, 0x3ff, 0xfffffffb, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0xfffffffc, 0x3, 0xd, 0x1, 0x10000, 0x0, 0x8, 0xfffffff0, 0x7fff, 0xdf5, 0x800, 0x5, 0x1000, 0x3, 0x7, 0xfff, 0x9, 0x101, 0xffffffff, 0x2, 0xfffffffb, 0x1f7, 0x7f, 0x5, 0x10001, 0x9, 0x0, 0xfffffa27, 0x2, 0x5, 0x0, 0x6, 0x0, 0xfffffffe, 0x3ae, 0x3, 0x100, 0x101, 0x6, 0x8, 0xff, 0x0, 0x9, 0x5, 0x400, 0x10001, 0xe, 0x7ff, 0x8, 0xa, 0x10000, 0xfffffff7, 0x5d, 0xfff, 0x7, 0x6, 0xc8a, 0x10000, 0x9, 0x3b7, 0x200, 0x8, 0x2, 0x7, 0x7, 0x9, 0x6, 0xfffffffe, 0xcebd, 0x8, 0x5, 0xffff0001, 0x80000001, 0x7, 0x7fffffff, 0x7fffffff, 0xc, 0x6, 0x3, 0xffffffff, 0xa, 0x4, 0x1, 0x3, 0xffffffff, 0x10, 0x2, 0x43, 0x99, 0x0, 0x5, 0xf, 0x7, 0x7ff, 0x3, 0x2, 0xfff, 0xff18, 0xa579313, 0x8, 0x29, 0xc, 0x2, 0x6, 0x8, 0x5, 0xfff, 0x5, 0x1, 0x2, 0x0, 0x101, 0x2, 0x10, 0x6, 0x1, 0x1ff, 0x7, 0x7, 0x1, 0x8, 0x7, 0xe, 0x8, 0x75ba, 0x512, 0x2f, 0xfffffff9, 0x6, 0xdb, 0x5ba9, 0x7, 0x200, 0x7ff, 0xc, 0x1, 0xf5, 0x7, 0x2, 0x1, 0x9, 0x1, 0xc, 0x6, 0x2, 0x1, 0x2, 0x4, 0x3, 0x5, 0xffffffff, 0x8000, 0x1, 0xc, 0x4, 0x4, 0x80000000, 0xeb2e, 0xe3a, 0x2, 0x1, 0x7, 0x4, 0x1, 0xf6, 0x5, 0x3, 0x7, 0x80, 0x200, 0x100, 0x8, 0x5, 0x4, 0x6, 0x3, 0xc, 0xffff, 0x8, 0x1, 0xfffffe01, 0xa, 0xfffffffc, 0x6, 0x8, 0x1, 0x2, 0x7, 0x3, 0x4, 0x5, 0x9, 0x3, 0x0, 0x4000000, 0xe, 0x5, 0x6, 0x1, 0xd, 0xfffffff0, 0x640cfa5d, 0x9, 0x9, 0x40, 0xfffffe01, 0xc004, 0x543, 0x0, 0xffff0000, 0xe, 0x7, 0x5, 0xfff, 0x2, 0x9, 0x8, 0x6, 0x7, 0xa, 0x0, 0x36900, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x0, 0x6, 0x200, 0xd0000000, {0x7, 0x0, 0x800, 0x1c, 0x0, 0x80000000}, {0x3, 0x0, 0x7, 0x40, 0x4}, 0x3, 0x2, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffb1, 0xfca, 0x1, 0x10, 0x0, 0xc964, 0xaae, 0x0, 0x101, 0x7f, 0x947, 0x2, 0x6, 0x8, 0x5, 0x2, 0xf7cb, 0x0, 0x5, 0x13, 0x6, 0x4, 0x3, 0x93fc, 0x3ff, 0x1, 0x2, 0xfd, 0x5, 0x1, 0x1, 0x8, 0x61aa, 0xa, 0x677, 0x3, 0xffff, 0x3, 0x6, 0x7, 0x4, 0x7, 0x9, 0x6, 0x10, 0x2, 0x62dbeaae, 0x7f, 0x9, 0x9, 0x5, 0x9, 0x7, 0x10000, 0x9, 0x6, 0xd, 0x7fffffff, 0x5, 0x2a68, 0x40, 0x7ff, 0x8, 0x9, 0x8, 0x7, 0x8, 0x40, 0x10001, 0x6, 0x401, 0x7fffffff, 0xfffffff9, 0x3, 0x4, 0x2, 0x9, 0x668c, 0x81, 0x101, 0x3, 0x6, 0x10000, 0x0, 0x1ff, 0x5, 0x1, 0x2, 0xc819, 0x7, 0xfffffffb, 0x6, 0xfffffff8, 0x4, 0x4, 0x8000, 0x7, 0x4, 0x1000, 0x3, 0x3, 0x3, 0x1ff, 0x5, 0x100, 0x200, 0xd, 0xf3, 0x4, 0xb, 0x8d7a, 0x5, 0x7, 0x4, 0x81, 0x3, 0x8001, 0x8, 0x5, 0x3ba0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x401, 0xc, 0x2, 0x4, 0x946, 0x8, 0x1, 0xe, 0x10001, 0x4, 0x0, 0x10, 0xfffffff8, 0x6, 0x2, 0xf2, 0x1, 0x0, 0x5, 0x6, 0x7fff, 0xc21e, 0x4, 0x90a, 0x40, 0x7a2f1e0a, 0xfffffff8, 0xc, 0xcaaa, 0xb1bb, 0x8, 0x40, 0x9, 0x3, 0x8, 0x7fff, 0x2, 0x100003ff, 0x7f, 0x8, 0xffff, 0x1, 0x8, 0x1, 0xb925, 0x9, 0x8001, 0x81, 0x10000, 0x0, 0x1743, 0x2569, 0x7, 0xc, 0x0, 0x7, 0x100, 0x2, 0x81, 0xd315, 0x80, 0x9, 0x200, 0x0, 0x3, 0x800, 0x8, 0x9, 0xa, 0x2, 0x8001, 0xd4, 0x6f, 0x2, 0x2, 0x4d, 0x0, 0x80000001, 0x10, 0x69, 0x5, 0xa, 0x8, 0x7fffffff, 0x2, 0x40, 0x1864, 0xea00000, 0x1, 0x476b, 0x6, 0x9, 0x4, 0x0, 0x101, 0x0, 0x0, 0x80000001, 0xd9, 0x9, 0xf, 0x5, 0x9, 0x6, 0x8, 0x9, 0x9f7, 0x6, 0x2, 0x1c, 0x7, 0x7, 0x0, 0x7f, 0x3, 0x2, 0x7f, 0x14b7, 0x8, 0x9, 0xff, 0xfffffff5, 0x0, 0x4, 0x9, 0x8, 0x2, 0x20, 0xffffffff, 0x8]}]}]}}]}, 0x20b4}}, 0x0) write(r8, &(0x7f0000000640)="000008004500001c123400004011e5c8ac141401ac14140204d204d200080000", 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x60, 0x24, 0x4, 0x70bd26, 0xffffffdf, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {0xb, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_RATE={0x6, 0x5, {0x9, 0x9}}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7f, 0x2, 0x7f}}}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc800}, 0x20008850) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f0000000740)=0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000cc0)={r11, 0x184, "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"}, &(0x7f0000000280)=0x160) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r12 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x89f1, &(0x7f00000008c0)={'tunl0\x00', &(0x7f0000000980)=@ethtool_cmd={0x3, 0x8, 0x0, 0x400, 0x0, 0x7e, 0xe7, 0x5, 0x87, 0x0, 0x80000, 0x0, 0x1, 0x4, 0x0, 0x82000045, [0x2, 0x9]}}) socket$unix(0x1, 0x1, 0x0) 1.054762367s ago: executing program 1 (id=2346): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x10, 0xf, &(0x7f0000001a00)=ANY=[@ANYBLOB="180800000000000000000000ffffffff18140000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000ffffffd7850000005a000000bca9000000000000350901000700000095000000000000003e980000000000002608000002000000850000008c000000b70000000000000095"], &(0x7f0000001a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ec}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0xfc1, &(0x7f0000000940)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf8b, 0x0, 0xff, @private2, @local, {[@routing={0x84}, @dstopts={0x3c, 0x1ee, '\x00', [@ra={0x5, 0x2, 0x8}, @generic={0x5, 0xf6b, "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"}]}], "22e7a0"}}}}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000200)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x8, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 987.679785ms ago: executing program 2 (id=2347): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, 0x0, 0x6) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @empty, @mcast1, [], "8029335287b7a081"}}}}}}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x5760, 0x0) write$tun(r1, &(0x7f0000000080)={@void, @val={0x3, 0x3, 0xd, 0x7fff, 0x0, 0x1}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @multicast, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010102}}, 0x26) 786.485527ms ago: executing program 2 (id=2348): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x891d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="911061000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 611.400508ms ago: executing program 3 (id=2349): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a6c000000060a010400000000000000000a0004050900010073797a3100000000400004803c0001800a000100696e6e65720000002c0100800800044000000012080002400000005f0800034000000002080002400000008408000140000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x94}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x1, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000580)=ANY=[@ANYBLOB="289de200", @ANYRES16=0x0, @ANYBLOB="000127bd7000fedbdf250b0000000800040002000000040001800500050002000000"], 0x28}}, 0x4005) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = epoll_create(0x7d95) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000800)={0x80002028}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$tipc(0x1e, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000140)=0xfff, 0x4) r4 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r4, 0x0, 0x3, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 507.568309ms ago: executing program 2 (id=2350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffb}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48842}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c80)=@newtfilter={0xd4, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0xf}, {}, {0x10, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xa4, 0x2, [@TCA_BASIC_EMATCHES={0xa0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x34, 0x3, 0x0, 0x0, {{0x8, 0x4, 0x6c}, [@TCA_EM_META_RVALUE={0x27, 0x3, [@TCF_META_TYPE_VAR="53a080bfa372c9d6", @TCF_META_TYPE_VAR="8681828267c53a32", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="12140867a79804", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT]}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0x8d8}, {{0x2, 0x0, 0x0, 0x1}, {0x3}}}}]}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x10, 0x9, 0xc8c6}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_NAME={0xfffffffffffffec4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x1ff}, {0x2, 0x6, 0x4}}}]}]}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x80) 426.200884ms ago: executing program 3 (id=2351): unshare(0x2c020400) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000980)={{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, {0xa, 0x4e21, 0x101, @mcast2, 0x10}, 0xffffffffffffffff, {[0x9, 0x5, 0x0, 0x3, 0x1, 0x7, 0x3, 0xa1]}}, 0x5c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x3, 0x8000}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1, 0x10, &(0x7f0000000880)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000900)=r10, 0x4) sendmsg$unix(r9, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x4000) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x3c, r11, 0x1, 0x0, 0x3, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfffffffc}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000280)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r12], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r13, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r14, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 364.843577ms ago: executing program 0 (id=2352): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socket$unix(0x1, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00'}) 307.312333ms ago: executing program 2 (id=2353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x4, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000300)={@void, @val={0x3, 0x3, 0x1b, 0x30, 0x32, 0x6}, @ipv6=@gre_packet={0x3, 0x6, '\x00', 0x44, 0x2f, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x4, {{0x8, 0x1, 0x7, 0x0, 0x0, 0x1, 0x7, 0x7}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x4, {{0xc, 0x2, 0x15, 0x3, 0x1, 0x2, 0x1, 0x7}, 0x2, {0x0, 0x8, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}}}}}, 0x76) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0x118, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x40000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller1\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x4, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x80}}, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', 0x1}) (async) write$tun(r0, &(0x7f0000000300)={@void, @val={0x3, 0x3, 0x1b, 0x30, 0x32, 0x6}, @ipv6=@gre_packet={0x3, 0x6, '\x00', 0x44, 0x2f, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x4, {{0x8, 0x1, 0x7, 0x0, 0x0, 0x1, 0x7, 0x7}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x4, {{0xc, 0x2, 0x15, 0x3, 0x1, 0x2, 0x1, 0x7}, 0x2, {0x0, 0x8, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}}}}}, 0x76) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0x118, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) 306.137088ms ago: executing program 1 (id=2354): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x9, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff00000000850000001b3bdf0095"], &(0x7f00000002c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1411, 0x4, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x9, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff00000000850000001b3bdf0095"], &(0x7f00000002c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1411, 0x4, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) 247.162413ms ago: executing program 4 (id=2355): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000040)="fc00", 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e0a, 0xb, @mcast2, 0x9}, 0x1c) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r4, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x11, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000180)={r8, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000240)={r8, @in={{0x2, 0x4e21, @empty}}, 0xb, 0x1000, 0x20000, 0x9, 0x34, 0xff, 0x4}, 0x9c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000980)="b9ff030760030084b89e08d186ddcef11086808ba3a1cc136e6931fe9ccb9db10495161309e01b6fdf8edbd766612b0ee82cab6218c7", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 136.758081ms ago: executing program 1 (id=2356): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=@base={0x9, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0xdef}, 0x50) close(r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000580)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES64=r1, @ANYBLOB="000000000000000079008301000000001800000000fd000000000000000000009500000000000000950000000000000001951d1ec378d31b5963cd68936d326a54b87defddaed300a13ac670874ee9635031e8d455a25090b8e91ca26d1fc7c396e50d4f01fbbb8a39ed394dff733351e043fa96826841ebd9d4208024b5b21080d4a92d46e31e67f5d2"], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238, 0x40f00}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000640)={&(0x7f0000000680)={0xa, 0x4e1f, 0x9, @dev={0xfe, 0x80, '\x00', 0x39}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0x45}]}}}], 0x25}, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r5 = socket$inet6(0x10, 0x3, 0x0) write(r5, &(0x7f00000001c0)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060805000000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000140)={{0x2, 0x4e26, @multicast2}, {0x306, @local}, 0x12, {0x2, 0x2, @multicast1}, 'lo\x00'}) r7 = accept4(r4, 0x0, 0x0, 0x80800) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000080)={0x0, 0x2, 0x5}) ioctl$sock_SIOCDELDLCI(r7, 0x8981, &(0x7f0000000100)={'geneve0\x00', 0x401}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r2) 55.191209ms ago: executing program 0 (id=2357): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000340)=0x9, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000400)) socket$kcm(0x23, 0x2, 0x0) (async) sendmsg$sock(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0xc201}) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000340)=0x9, 0x4) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) (async) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000400)) (async) 18.730458ms ago: executing program 3 (id=2358): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000000)="0100ddff", 0x507b420f2d51f971) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty, 0x204}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xc, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f00000006c0)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x34}], {0x95, 0x0, 0x9}}, &(0x7f0000000700)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000740)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000840), 0x0, 0x10, &(0x7f0000000880), 0x85}, 0x52) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0xe, 0x0, &(0x7f00000005c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) setsockopt(r0, 0x1, 0x9, &(0x7f00000002c0), 0x29) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000010101010000800c0019801d00020019050000"], 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="dc5fdb1f97d7e6a9bae51c81b64d8200949f991ab4c071216d8962e865af69732bb17c9b7daf8705f4660eb198b2941e2527c73d8c63ab151f08d2cd5d5d893784b4cfaeecbc99f4895b8ae6f81f040bad24bdc788bc7173ae4bc5947fbd5853d68476de5a5d067a2943e0603c7978fae1697e887fde110d58c021331b18efb2a81beb36cf6cc2cbd3743694effddef91a6edf7f290de548f78194f1ae32c72f92eeef660bcc3636164e65f192", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES8=r3, @ANYRES32=r2, @ANYRES16=r3, @ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) 0s ago: executing program 4 (id=2359): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000240)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x2}], {0x95, 0x0, 0x700}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x2, 0x3, 0xfe, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x4}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}]}, 0x58}, 0x1, 0x7}, 0x0) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect(r1, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x1, @private=0xa010100}}, 0x80) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000340)=0x2000000) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x4, 0xffffffc0, 0xfffffffd, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9963ef6c, 0x40080006}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x4, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x2000007, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x6, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x10004, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0xc, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0xfffffffd, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0xa, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x6, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff93, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x5}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x86, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x10000, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x16}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800001, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x85, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x8, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcc, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x48}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x38, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae39, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x3, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0xb07, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x2}, {0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0xfffffffffffffe42, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) kernel console output (not intermixed with test programs): devsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.437518][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'. [ 287.542691][ T9491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.847'. [ 287.542766][ T9491] netlink: 48 bytes leftover after parsing attributes in process `syz.1.847'. [ 287.576328][ T9495] nbd: must specify a size in bytes for the device [ 287.658523][ T9499] netlink: 44 bytes leftover after parsing attributes in process `syz.3.848'. [ 287.860421][ T9518] validate_nla: 59 callbacks suppressed [ 287.860442][ T9518] netlink: 'syz.2.853': attribute type 1 has an invalid length. [ 287.877855][ T51] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 287.918030][ T9518] bond4: entered promiscuous mode [ 287.918550][ T9518] 8021q: adding VLAN 0 to HW filter on device bond4 [ 287.941183][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.856'. [ 287.941289][ T9525] x_tables: duplicate underflow at hook 1 [ 288.159875][ T9544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.861'. [ 288.302079][ T9548] netlink: 'syz.1.862': attribute type 1 has an invalid length. [ 288.329678][ T9548] 8021q: adding VLAN 0 to HW filter on device bond7 [ 288.337741][ T9548] bond4: (slave veth0_to_bond): Releasing backup interface [ 288.337765][ T9548] bond4: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 288.373830][ T9548] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 290.737841][ T9504] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 291.236641][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.872'. [ 291.376893][ T9593] netlink: 'syz.4.876': attribute type 1 has an invalid length. [ 291.376932][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 291.402332][ T9594] xt_recent: Unsupported userspace flags (000000c5) [ 291.430317][ T9594] pim6reg: entered allmulticast mode [ 291.430835][ T9592] syzkaller1: entered promiscuous mode [ 291.430851][ T9592] syzkaller1: entered allmulticast mode [ 291.437029][ T9593] netlink: 24 bytes leftover after parsing attributes in process `syz.4.876'. [ 291.579684][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.874'. [ 291.580785][ T9593] GUP no longer grows the stack in syz.4.876 (9593): 200000003000-20000000a000 (200000001000) [ 291.580838][ T9593] CPU: 1 UID: 0 PID: 9593 Comm: syz.4.876 Not tainted syzkaller #0 PREEMPT(full) [ 291.580859][ T9593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 291.580871][ T9593] Call Trace: [ 291.580879][ T9593] [ 291.580888][ T9593] dump_stack_lvl+0xe8/0x150 [ 291.580921][ T9593] __get_user_pages+0x23b6/0x2750 [ 291.580954][ T9593] ? lock_acquire+0x115/0x350 [ 291.580991][ T9593] ? __gup_longterm_locked+0xc3b/0x15c0 [ 291.581028][ T9593] __gup_longterm_locked+0xd52/0x15c0 [ 291.581057][ T9593] ? lock_acquire+0x115/0x350 [ 291.581094][ T9593] gup_fast_fallback+0x1d92/0x20e0 [ 291.581154][ T9593] ? __pfx_gup_fast_fallback+0x10/0x10 [ 291.581184][ T9593] ? lock_acquire+0x115/0x350 [ 291.581201][ T9593] ? is_valid_gup_args+0x11f/0x200 [ 291.581229][ T9593] ? get_user_pages_fast+0x4d/0xb0 [ 291.581258][ T9593] __iov_iter_get_pages_alloc+0x378/0xa40 [ 291.581293][ T9593] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 291.581318][ T9593] iov_iter_get_pages2+0x5e/0xa0 [ 291.581349][ T9593] __se_sys_vmsplice+0x7b5/0x1660 [ 291.581392][ T9593] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 291.581412][ T9593] ? __pfx_futex_wait+0x10/0x10 [ 291.581504][ T9593] do_syscall_64+0x166/0x520 [ 291.581530][ T9593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.581550][ T9593] ? clear_bhb_loop+0x70/0xc0 [ 291.581573][ T9593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.581592][ T9593] RIP: 0033:0x7f3499d9e559 [ 291.581619][ T9593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.581634][ T9593] RSP: 002b:00007f349ac24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 291.581659][ T9593] RAX: ffffffffffffffda RBX: 00007f349a025fa0 RCX: 00007f3499d9e559 [ 291.581673][ T9593] RDX: 0000000000000001 RSI: 0000200000000a40 RDI: 000000000000000e [ 291.581685][ T9593] RBP: 00007f3499e35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 291.581696][ T9593] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 291.581707][ T9593] R13: 00007f349a026038 R14: 00007f349a025fa0 R15: 00007fff929889f8 [ 291.581738][ T9593] [ 291.597553][ T9595] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.897480][ T9604] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 291.954650][ T9606] netlink: 'syz.1.878': attribute type 4 has an invalid length. [ 292.644171][ T9638] syzkaller0: entered promiscuous mode [ 292.644193][ T9638] syzkaller0: entered allmulticast mode [ 292.692414][ T9638] tipc: Started in network mode [ 292.692443][ T9638] tipc: Node identity 1e7351570b61, cluster identity 4711 [ 292.692889][ T9638] tipc: Enabled bearer , priority 0 [ 292.722688][ T9637] tipc: Resetting bearer [ 292.777432][ T9637] tipc: Disabling bearer [ 293.033899][ T9650] netlink: 'syz.2.892': attribute type 9 has an invalid length. [ 293.033922][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.892'. [ 293.058461][ T9648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.890'. [ 293.058669][ T9648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.890'. [ 293.061979][ T9648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.890'. [ 293.062174][ T9648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.890'. [ 293.062367][ T9648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.890'. [ 293.393324][ T9635] netdevsim netdevsim1 €Â: renamed from netdevsim0 (while UP) [ 293.781935][ T9683] netlink: Unknown conntrack attr (0) [ 294.127210][ T9694] ksmbd: Unknown IPC event: 8, ignore. [ 294.753356][ T9707] ipvlan3: entered allmulticast mode [ 294.753377][ T9707] ip6gretap0: entered allmulticast mode [ 294.784740][ T9707] batman_adv: batadv0: Adding interface: ipvlan3 [ 294.784757][ T9707] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.784781][ T9707] batman_adv: batadv0: Interface activated: ipvlan3 [ 295.032175][ T9716] netlink: 'syz.2.909': attribute type 1 has an invalid length. [ 295.403280][ T9732] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 295.921749][ T9751] netlink: 'syz.3.913': attribute type 4 has an invalid length. [ 296.634938][ T9797] __nla_validate_parse: 35 callbacks suppressed [ 296.634965][ T9797] netlink: 40 bytes leftover after parsing attributes in process `syz.4.921'. [ 296.635474][ T9797] netlink: 48 bytes leftover after parsing attributes in process `syz.4.921'. [ 296.672585][ T9796] xt_TCPMSS: Only works on TCP SYN packets [ 296.674594][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.922'. [ 296.678592][ T9797] netlink: 48 bytes leftover after parsing attributes in process `syz.4.921'. [ 296.679271][ T9802] netlink: 40 bytes leftover after parsing attributes in process `syz.4.921'. [ 296.926438][ T9816] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 296.930110][ T9817] tipc: Enabling of bearer rejected, failed to enable media [ 296.970230][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.926'. [ 296.972652][ T9819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.926'. [ 297.192346][ T9818] can: request_module (can-proto-0) failed. [ 297.413485][ T9832] syzkaller1: entered promiscuous mode [ 297.413507][ T9832] syzkaller1: entered allmulticast mode [ 298.015348][ T9886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.938'. [ 298.015419][ T9886] openvswitch: netlink: Missing valid actions attribute. [ 300.482601][ T9849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 300.603913][ T9890] netlink: 16 bytes leftover after parsing attributes in process `syz.1.939'. [ 300.603946][ T9890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.939'. [ 300.963800][ T9910] netlink: 'syz.3.946': attribute type 61 has an invalid length. [ 301.109036][ T9923] netlink: 'syz.4.950': attribute type 12 has an invalid length. [ 301.135858][ T9927] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 301.286547][ T9928] netlink: Conntrack attr has 8 unknown bytes [ 301.286591][ T9928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.295012][ T9924] veth1_to_batadv: entered promiscuous mode [ 301.311212][ T9924] debugfs: 'hsr1' already exists in 'hsr' [ 301.311252][ T9924] Cannot create hsr debugfs directory [ 301.316953][ T9924] hsr1: entered promiscuous mode [ 301.461355][ T9943] openvswitch: ovs-dp0: Dropping previously announced user features [ 301.508690][ T9943] netlink: 'syz.3.951': attribute type 11 has an invalid length. [ 301.771492][ T9962] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 301.877537][ T9971] __nla_validate_parse: 5 callbacks suppressed [ 301.877556][ T9971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.956'. [ 301.887582][ T9971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.956'. [ 301.887611][ T9971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.956'. [ 301.891562][ T9971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.956'. [ 301.891589][ T9971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.956'. [ 301.937834][ T9971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.956'. [ 301.937869][ T9971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.956'. [ 301.982141][ T9971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.956'. [ 301.982186][ T9971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.956'. [ 302.003416][ T9971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.956'. [ 302.103991][ T9971] tipc: Resetting bearer [ 302.296149][ T9994] netlink: 'syz.1.963': attribute type 102 has an invalid length. [ 302.604590][ T9971] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 302.635769][ T9971] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 302.718194][ T9999] veth0: entered promiscuous mode [ 302.728948][ T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.728979][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.729000][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 302.729036][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.729058][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.729079][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 302.729110][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.729131][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.729153][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 302.729185][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.729205][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.729239][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 302.766860][T10016] x_tables: duplicate underflow at hook 2 [ 302.852079][T10000] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.859119][T10011] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.859244][T10011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.859567][T10011] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.859679][T10011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.897804][T10011] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.897995][T10011] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.047389][T10024] bond0: (slave gretap0): Opening slave failed [ 303.048057][T10000] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.118015][T10000] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.246339][ T9998] veth0: left promiscuous mode [ 303.264822][T10000] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.279506][T10041] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 303.608483][T10058] smc: removing ib device rxe0 [ 303.682794][T10064] netlink: 'syz.2.982': attribute type 1 has an invalid length. [ 303.693347][T10064] ip_tables: iptables: counters copy to user failed while replacing table [ 303.754206][T10058] smbdirect: ib_dev[rxe0] removed [ 303.932687][T10065] syzkaller1: entered promiscuous mode [ 303.932710][T10065] syzkaller1: entered allmulticast mode [ 304.223069][T10083] can: request_module (can-proto-4) failed. [ 304.401368][T10088] syzkaller0: entered promiscuous mode [ 304.401390][T10088] syzkaller0: entered allmulticast mode [ 304.506146][T10088] tipc: Started in network mode [ 304.506172][T10088] tipc: Node identity b224f0ad9c3f, cluster identity 4711 [ 304.519895][T10088] tipc: Enabled bearer , priority 0 [ 304.542704][T10087] tipc: Resetting bearer [ 304.658479][T10087] tipc: Disabling bearer [ 304.798918][ T5628] Bluetooth: hci4: command 0x0406 tx timeout [ 305.588294][T10149] syzkaller0: entered promiscuous mode [ 305.588312][T10149] syzkaller0: entered allmulticast mode [ 305.663113][T10149] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 305.913529][T10164] batman_adv: batadv0: Adding interface: veth0 [ 305.913545][T10164] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.913571][T10164] batman_adv: batadv0: Interface activated: veth0 [ 305.980898][T10164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.980923][T10164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.005814][T10164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.005842][T10164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.028078][T10164] batman_adv: batadv0: Removing interface: vlan2 [ 306.036754][T10164] batman_adv: batadv0: Interface deactivated: veth0 [ 306.036774][T10164] batman_adv: batadv0: Removing interface: veth0 [ 306.112810][T10167] ip_tables: iptables: counters copy to user failed while replacing table [ 306.462491][T10184] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20004 [ 306.555198][T10186] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 306.555234][T10186] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 306.555268][T10186] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 306.666351][T10190] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 306.693226][T10190] netlink: 'syz.1.1008': attribute type 1 has an invalid length. [ 306.797582][T10190] bond8: entered promiscuous mode [ 306.797951][T10190] 8021q: adding VLAN 0 to HW filter on device bond8 [ 306.815806][T10198] bond8: entered allmulticast mode [ 306.909686][T10190] bond8: (slave bridge5): making interface the new active one [ 306.909710][T10190] bridge5: entered promiscuous mode [ 306.909915][T10190] bridge5: entered allmulticast mode [ 306.924848][ T9337] smbdirect: ib_dev[syz1] removed [ 306.935152][T10186] siw: device registration error -19 [ 306.945393][T10190] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 307.141058][T10216] ip_tables: iptables: counters copy to user failed while replacing table [ 307.143568][T10218] __nla_validate_parse: 208 callbacks suppressed [ 307.143588][T10218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1014'. [ 307.176144][T10216] ip_tables: iptables: counters copy to user failed while replacing table [ 307.190285][T10216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1013'. [ 307.220715][T10216] ip6_vti0: Caught tx_queue_len zero misconfig [ 307.222502][T10222] block nbd2: Unsupported socket: should be TCP or UNIX. [ 307.432620][T10229] ip6gre2: entered allmulticast mode [ 307.483363][T10227] batadv_slave_1: entered promiscuous mode [ 307.554713][T10227] netlink: Failed to add helper -22 [ 307.554766][T10227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.745648][T10245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1022'. [ 307.783606][T10248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1024'. [ 307.783639][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'. [ 307.796297][T10248] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1024'. [ 307.865896][T10254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1026'. [ 307.888471][T10250] sctp: [Deprecated]: syz.3.1024 (pid 10250) Use of int in max_burst socket option deprecated. [ 307.888471][T10250] Use struct sctp_assoc_value instead [ 307.888519][T10250] sctp: [Deprecated]: syz.3.1024 (pid 10250) Use of int in max_burst socket option deprecated. [ 307.888519][T10250] Use struct sctp_assoc_value instead [ 307.888557][T10250] sctp: [Deprecated]: syz.3.1024 (pid 10250) Use of int in max_burst socket option deprecated. [ 307.888557][T10250] Use struct sctp_assoc_value instead [ 307.888634][T10250] sctp: [Deprecated]: syz.3.1024 (pid 10250) Use of int in max_burst socket option deprecated. [ 307.888634][T10250] Use struct sctp_assoc_value instead [ 307.888671][T10250] sctp: [Deprecated]: syz.3.1024 (pid 10250) Use of int in max_burst socket option deprecated. [ 307.888671][T10250] Use struct sctp_assoc_value instead [ 307.888708][T10250] sctp: [Deprecated]: syz.3.1024 (pid 10250) Use of int in max_burst socket option deprecated. [ 307.888708][T10250] Use struct sctp_assoc_value instead [ 307.892034][T10250] sctp: [Deprecated]: syz.3.1024 (pid 10250) Use of int in max_burst socket option deprecated. [ 307.892034][T10250] Use struct sctp_assoc_value instead [ 307.892075][T10250] sctp: [Deprecated]: syz.3.1024 (pid 10250) Use of int in max_burst socket option deprecated. [ 307.892075][T10250] Use struct sctp_assoc_value instead [ 307.892110][T10250] sctp: [Deprecated]: syz.3.1024 (pid 10250) Use of int in max_burst socket option deprecated. [ 307.892110][T10250] Use struct sctp_assoc_value instead [ 307.892146][T10250] sctp: [Deprecated]: syz.3.1024 (pid 10250) Use of int in max_burst socket option deprecated. [ 307.892146][T10250] Use struct sctp_assoc_value instead [ 307.921495][T10257] bridge0: entered allmulticast mode [ 308.524589][T10282] openvswitch: netlink: Duplicate or invalid key (type 0). [ 309.453277][T10351] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 309.607681][T10355] tipc: MTU too low for tipc bearer [ 310.100624][T10379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1050'. [ 310.100653][T10379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1050'. [ 310.357142][T10385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1052'. [ 310.565131][T10395] netlink: 'syz.0.1054': attribute type 70 has an invalid length. [ 311.034769][T10413] netlink: 'syz.0.1062': attribute type 1 has an invalid length. [ 311.100183][T10413] bond7: entered promiscuous mode [ 311.102510][T10413] 8021q: adding VLAN 0 to HW filter on device bond7 [ 311.104626][T10424] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 311.134685][T10419] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 311.172370][T10413] 8021q: adding VLAN 0 to HW filter on device bond7 [ 311.172606][T10413] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 311.172618][T10413] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 311.210479][T10413] bond7: (slave xfrm1): making interface the new active one [ 311.210504][T10413] xfrm1: entered promiscuous mode [ 311.211659][T10413] bond7: (slave xfrm1): Enslaving as an active interface with an up link [ 311.601028][T10462] syzkaller0: entered promiscuous mode [ 311.601049][T10462] syzkaller0: entered allmulticast mode [ 311.625126][T10462] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 311.671983][T10462] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 311.729103][ T9337] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.729193][ T9337] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.729227][ T9337] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.729250][ T9337] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.987917][T10479] team0: entered promiscuous mode [ 311.987939][T10479] team_slave_0: entered promiscuous mode [ 311.988178][T10479] team_slave_1: entered promiscuous mode [ 311.988328][T10479] team0: entered allmulticast mode [ 311.988351][T10479] team_slave_0: entered allmulticast mode [ 311.988365][T10479] team_slave_1: entered allmulticast mode [ 312.532392][T10510] netlink: 'syz.4.1083': attribute type 1 has an invalid length. [ 312.532423][T10510] netlink: 'syz.4.1083': attribute type 2 has an invalid length. [ 312.532436][T10510] __nla_validate_parse: 2 callbacks suppressed [ 312.532446][T10510] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1083'. [ 312.987433][T10533] Bluetooth: hci0: unsupported parameter 5135 [ 312.987457][T10533] Bluetooth: hci0: unsupported parameter 8192 [ 312.987473][T10533] Bluetooth: hci0: unsupported parameter 5135 [ 312.987483][T10533] Bluetooth: hci0: unsupported parameter 8192 [ 313.368638][T10550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.382026][T10550] tipc: Resetting bearer [ 313.382957][T10550] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.384290][T10550] tipc: Resetting bearer [ 313.423217][T10550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.593681][T10550] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 313.623347][T10559] syzkaller0: entered promiscuous mode [ 313.623370][T10559] syzkaller0: entered allmulticast mode [ 313.726774][T10561] tipc: Enabled bearer , priority 0 [ 313.748697][T10569] vlan3: entered promiscuous mode [ 313.749918][T10569] bond0: entered promiscuous mode [ 313.749936][T10569] bond_slave_0: entered promiscuous mode [ 313.750162][T10569] bond_slave_1: entered promiscuous mode [ 313.767889][T10543] tipc: Resetting bearer [ 313.941874][T10542] tipc: Resetting bearer [ 313.978008][T10542] tipc: Disabling bearer [ 314.136849][T10582] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1097'. [ 314.297557][T10591] ip_tables: iptables: counters copy to user failed while replacing table [ 314.404306][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1098'. [ 314.471500][T10596] tun0: tun_chr_ioctl cmd 1074025677 [ 314.471605][T10596] tun0: linktype set to 0 [ 315.224884][T10637] netlink: NAT attribute has 8 unknown bytes [ 315.224920][T10637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.763344][T10663] x_tables: duplicate underflow at hook 3 [ 315.810929][T10664] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1112'. [ 315.810948][T10664] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1112'. [ 317.691314][T10612] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 317.808646][T10675] ip_tables: iptables: counters copy to user failed while replacing table [ 317.913316][T10681] netlink: 'syz.0.1115': attribute type 1 has an invalid length. [ 317.993716][T10688] veth1_macvtap: entered promiscuous mode [ 317.993884][T10688] macsec0: entered promiscuous mode [ 318.093036][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 318.098496][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.262654][T10702] netdevsim netdevsim0: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 318.384311][T10714] ip_tables: iptables: counters copy to user failed while replacing table [ 318.453074][T10721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.470541][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1128'. [ 318.505438][T10723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.747545][T10718] syzkaller0: entered promiscuous mode [ 318.747568][T10718] syzkaller0: entered allmulticast mode [ 319.290867][T10760] 8021q: VLANs not supported on ip_vti0 [ 319.331595][T10772] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1139'. [ 319.557311][T10778] ip_tables: iptables: counters copy to user failed while replacing table [ 319.662291][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'. [ 319.704443][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'. [ 320.117064][T10803] geneve1: entered promiscuous mode [ 320.151656][T10803] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 320.151690][T10803] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 320.151722][T10803] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 320.251987][T10800] Bluetooth: hci0: unsupported parameter 5134 [ 320.252010][T10800] Bluetooth: hci0: unsupported parameter 8192 [ 320.252020][T10800] Bluetooth: hci0: unsupported parameter 5134 [ 320.252031][T10800] Bluetooth: hci0: unsupported parameter 8192 [ 320.410364][T10813] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1152'. [ 320.465593][T10813] bridge_slave_0: left allmulticast mode [ 320.469655][T10813] bridge_slave_0: left promiscuous mode [ 320.469870][T10813] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.500482][T10813] bridge_slave_1: left allmulticast mode [ 320.500508][T10813] bridge_slave_1: left promiscuous mode [ 320.503138][T10813] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.523892][T10819] netlink: 8852 bytes leftover after parsing attributes in process `syz.4.1154'. [ 320.546255][T10813] bond7: (slave veth0_to_bond): Releasing backup interface [ 320.572200][T10813] bond0: (slave bond_slave_0): Releasing backup interface [ 320.576298][T10813] bond_slave_0: left promiscuous mode [ 320.611008][T10813] bond0: (slave bond_slave_1): Releasing backup interface [ 320.643056][T10813] bond_slave_1: left promiscuous mode [ 320.664739][T10813] team0: Port device team_slave_1 removed [ 320.666937][T10813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.666961][T10813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.671873][T10813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.671895][T10813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.685453][T10813] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 321.031249][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1159'. [ 321.712908][T10864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 322.191082][T10881] syzkaller0: entered promiscuous mode [ 322.191104][T10881] syzkaller0: entered allmulticast mode [ 322.239445][T10881] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 322.332600][T10887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1171'. [ 322.466435][T10883] syzkaller0: entered promiscuous mode [ 322.466457][T10883] syzkaller0: entered allmulticast mode [ 322.813237][T10895] tipc: MTU too low for tipc bearer [ 322.825425][T10895] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 322.890320][T10895] batman_adv: batadv0: Adding interface: ipvlan2 [ 322.890339][T10895] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.890364][T10895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.890379][T10895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.890392][T10895] batman_adv: batadv0: Interface activated: ipvlan2 [ 322.891652][T10897] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 322.991141][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1175'. [ 323.017296][T10897] ip_tables: iptables: counters copy to user failed while replacing table [ 323.113692][T10905] IPv6: NLM_F_CREATE should be specified when creating new route [ 323.113802][T10905] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1177'. [ 323.289219][T10917] sctp: [Deprecated]: syz.0.1179 (pid 10917) Use of int in max_burst socket option. [ 323.289219][T10917] Use struct sctp_assoc_value instead [ 323.293335][T10913] erspan0: entered promiscuous mode [ 324.065963][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.073064][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.082217][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.092516][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.101399][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.105639][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.112541][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.119213][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.124227][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.129977][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.136137][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.143277][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.157362][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.177696][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.197248][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.225499][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.244553][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.245952][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.247288][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.248636][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.297199][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.321963][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.340621][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.359594][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.367870][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.404524][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.405991][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.407317][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.408640][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.452752][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.455661][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.456950][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.458312][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.505971][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.510268][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.513424][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.561866][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.608506][T10962] __nla_validate_parse: 1 callbacks suppressed [ 324.608526][T10962] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1185'. [ 324.608692][T10962] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1185'. [ 324.657534][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.659409][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.660743][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.662040][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.663297][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.667195][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.673071][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.681310][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.688386][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.698052][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.714296][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.738348][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.778031][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.793300][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.799676][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.805007][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.810583][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.811980][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.827207][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.834106][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.851334][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.861945][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.869816][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.879558][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.888622][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.896100][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.911183][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.921923][T10884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.057197][T10972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1188'. [ 325.057221][T10972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1188'. [ 325.412364][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1190'. [ 325.431193][T10987] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1189'. [ 325.696809][T10993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1192'. [ 325.696834][T10993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1192'. [ 325.696857][T10993] netlink: 'syz.3.1192': attribute type 12 has an invalid length. [ 325.696869][T10993] netlink: 'syz.3.1192': attribute type 11 has an invalid length. [ 325.891456][T11000] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 325.898021][T11001] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1194'. [ 325.947981][T11005] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 325.948264][T11005] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 325.948460][T11005] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 325.954264][T11005] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 325.954483][T11005] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 325.959804][T11005] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 325.960021][T11005] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 325.960260][T11005] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 325.960447][T11005] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 326.165279][T11015] netlink: 'syz.1.1198': attribute type 1 has an invalid length. [ 326.217546][T11019] xt_TCPMSS: Only works on TCP SYN packets [ 326.351874][T11030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'. [ 326.411830][T11026] ovs-dp0: entered promiscuous mode [ 326.425222][T11026] netlink: 'syz.2.1201': attribute type 11 has an invalid length. [ 326.608383][T11040] bond9: Removing last ns target with arp_interval on [ 326.665822][T11046] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%v©´!«¿©)°ÙåÖA¯ÿ_½á†˜o [ 326.954682][ T31] audit: type=1800 audit(1792361310.389:2): pid=11036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1203" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1228 res=0 errno=0 [ 327.429342][T11097] netlink: 'syz.2.1215': attribute type 3 has an invalid length. [ 327.502095][ T9146] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 327.549124][ T9146] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 327.642708][ T9339] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 327.703620][T11116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.732455][T11116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.771615][T11116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.703951][T11152] x_tables: unsorted entry at hook 3 [ 328.721563][T11152] 8021q: adding VLAN 0 to HW filter on device bond10 [ 328.722619][ T1154] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 328.722849][ T1154] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 328.757602][T11152] bond10: (slave veth7): Enslaving as an active interface with an up link [ 328.768503][T11152] lo: entered promiscuous mode [ 328.768629][T11152] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 329.600068][ T9141] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 330.657930][T11112] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 330.871536][T11176] __nla_validate_parse: 7 callbacks suppressed [ 330.871556][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1232'. [ 330.902714][T11178] netlink: 'syz.4.1233': attribute type 1 has an invalid length. [ 330.931255][T11183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1232'. [ 331.000800][T11188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1233'. [ 331.025628][T11178] 8021q: adding VLAN 0 to HW filter on device bond1 [ 331.053192][T11189] lo: entered allmulticast mode [ 331.063703][T11189] tunl0: entered promiscuous mode [ 331.063723][T11189] tunl0: entered allmulticast mode [ 331.066052][T11189] gre0: entered promiscuous mode [ 331.066074][T11189] gre0: entered allmulticast mode [ 331.203658][T11189] gretap0: entered promiscuous mode [ 331.203681][T11189] gretap0: entered allmulticast mode [ 331.204321][T11189] erspan0: entered promiscuous mode [ 331.204337][T11189] erspan0: entered allmulticast mode [ 331.204846][T11189] ip_vti0: entered promiscuous mode [ 331.204859][T11189] ip_vti0: entered allmulticast mode [ 331.205485][T11189] ip6_vti0: entered promiscuous mode [ 331.205499][T11189] ip6_vti0: entered allmulticast mode [ 331.206003][T11189] sit0: entered promiscuous mode [ 331.206017][T11189] sit0: entered allmulticast mode [ 331.206802][T11189] ip6tnl0: entered promiscuous mode [ 331.206816][T11189] ip6tnl0: entered allmulticast mode [ 331.207444][T11189] ip6gre0: entered promiscuous mode [ 331.207459][T11189] ip6gre0: entered allmulticast mode [ 331.208008][T11189] syz_tun: entered promiscuous mode [ 331.208021][T11189] syz_tun: entered allmulticast mode [ 331.253334][T11189] ip6gretap0: entered promiscuous mode [ 331.253358][T11189] ip6gretap0: entered allmulticast mode [ 331.255319][T11189] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.255474][T11189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.255816][T11189] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.255925][T11189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.261221][T11189] bridge0: entered promiscuous mode [ 331.261275][T11189] bridge0: entered allmulticast mode [ 331.265806][T11189] vcan0: entered promiscuous mode [ 331.265827][T11189] vcan0: entered allmulticast mode [ 331.270759][T11189] bond0: entered promiscuous mode [ 331.270779][T11189] bond_slave_0: entered promiscuous mode [ 331.274808][T11189] bond_slave_1: entered promiscuous mode [ 331.274971][T11189] bond0: entered allmulticast mode [ 331.274983][T11189] bond_slave_0: entered allmulticast mode [ 331.275023][T11189] bond_slave_1: entered allmulticast mode [ 331.286145][T11189] nlmon0: entered promiscuous mode [ 331.286165][T11189] nlmon0: entered allmulticast mode [ 331.295705][T11189] batadv0: entered promiscuous mode [ 331.295726][T11189] batadv0: entered allmulticast mode [ 331.305307][T11189] vxcan0: entered promiscuous mode [ 331.305328][T11189] vxcan0: entered allmulticast mode [ 331.305892][T11189] vxcan1: entered promiscuous mode [ 331.305905][T11189] vxcan1: entered allmulticast mode [ 331.315544][T11189] veth0: entered promiscuous mode [ 331.315567][T11189] veth0: entered allmulticast mode [ 331.318110][T11189] veth1: entered promiscuous mode [ 331.318141][T11189] veth1: entered allmulticast mode [ 331.322582][T11189] wg0: entered promiscuous mode [ 331.322600][T11189] wg0: entered allmulticast mode [ 331.344006][T11189] wg1: entered promiscuous mode [ 331.344026][T11189] wg1: entered allmulticast mode [ 331.353185][T11194] xt_hashlimit: size too large, truncated to 1048576 [ 331.391302][T11189] wg2: entered promiscuous mode [ 331.391361][T11189] wg2: entered allmulticast mode [ 331.391966][T11189] veth0_to_bridge: entered promiscuous mode [ 331.391981][T11189] veth0_to_bridge: entered allmulticast mode [ 331.407087][T11189] veth1_to_bridge: entered promiscuous mode [ 331.407115][T11189] veth1_to_bridge: entered allmulticast mode [ 331.423798][T11189] veth0_to_bond: entered promiscuous mode [ 331.423818][T11189] veth0_to_bond: entered allmulticast mode [ 331.427929][T11189] veth1_to_bond: entered promiscuous mode [ 331.427951][T11189] veth1_to_bond: entered allmulticast mode [ 331.446508][T11189] veth0_to_team: entered promiscuous mode [ 331.446530][T11189] veth0_to_team: entered allmulticast mode [ 331.455596][T11189] veth1_to_team: entered promiscuous mode [ 331.455618][T11189] veth1_to_team: entered allmulticast mode [ 331.463412][T11189] veth0_to_batadv: entered promiscuous mode [ 331.463435][T11189] veth0_to_batadv: entered allmulticast mode [ 331.474029][T11189] batadv_slave_0: entered promiscuous mode [ 331.474049][T11189] batadv_slave_0: entered allmulticast mode [ 331.474707][T11189] veth1_to_batadv: entered promiscuous mode [ 331.474720][T11189] veth1_to_batadv: entered allmulticast mode [ 331.476123][T11195] xt_hashlimit: size too large, truncated to 1048576 [ 331.482394][T11189] batadv_slave_1: entered allmulticast mode [ 331.483005][T11189] xfrm0: entered promiscuous mode [ 331.493125][T11189] xfrm0: entered allmulticast mode [ 331.493877][T11189] veth0_to_hsr: entered promiscuous mode [ 331.493891][T11189] veth0_to_hsr: entered allmulticast mode [ 331.518701][T11189] hsr_slave_0: entered allmulticast mode [ 331.541172][T11189] veth1_to_hsr: entered promiscuous mode [ 331.541194][T11189] veth1_to_hsr: entered allmulticast mode [ 331.551762][T11189] hsr_slave_1: entered allmulticast mode [ 331.552442][T11189] hsr0: entered promiscuous mode [ 331.552457][T11189] hsr0: entered allmulticast mode [ 331.558648][T11189] veth1_virt_wifi: entered promiscuous mode [ 331.558667][T11189] veth1_virt_wifi: entered allmulticast mode [ 331.562273][T11189] veth0_virt_wifi: entered promiscuous mode [ 331.562292][T11189] veth0_virt_wifi: entered allmulticast mode [ 331.566541][T11189] virt_wifi0: entered promiscuous mode [ 331.566560][T11189] virt_wifi0: entered allmulticast mode [ 331.566574][T11189] net_ratelimit: 25 callbacks suppressed [ 331.566584][T11189] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 332.017996][T11199] netlink: 'syz.0.1236': attribute type 11 has an invalid length. [ 332.294068][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1240'. [ 332.352201][T11220] netlink: 'syz.3.1240': attribute type 1 has an invalid length. [ 332.388630][T11219] syzkaller1: entered promiscuous mode [ 332.388654][T11219] syzkaller1: entered allmulticast mode [ 332.405160][T11226] Bluetooth: hci0: unsupported parameter 5135 [ 332.405182][T11226] Bluetooth: hci0: unsupported parameter 8192 [ 332.405193][T11226] Bluetooth: hci0: unsupported parameter 5135 [ 332.405204][T11226] Bluetooth: hci0: unsupported parameter 8192 [ 332.415502][T11222] lo: Caught tx_queue_len zero misconfig [ 332.544278][T11231] netlink: 'syz.1.1243': attribute type 4 has an invalid length. [ 332.565952][T11238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1246'. [ 332.642133][T11238] bridge0: port 1(veth0) entered blocking state [ 332.642302][T11238] bridge0: port 1(veth0) entered disabled state [ 332.642484][T11238] veth0: entered allmulticast mode [ 332.651364][T11238] veth0: entered promiscuous mode [ 333.036978][T11259] IPVS: nq: FWM 3 0x00000003 - no destination available [ 333.040583][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 333.318187][T11273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1255'. [ 333.438016][T11278] 8021q: VLANs not supported on ip6tnl0 [ 333.446121][T11274] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1256'. [ 333.558887][ T9337] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.630390][T11286] netlink: 'syz.2.1261': attribute type 2 has an invalid length. [ 333.914906][T11302] syzkaller1: entered allmulticast mode [ 334.044943][T11308] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1268'. [ 334.143754][T11312] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1270'. [ 334.150098][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1270'. [ 334.196060][T11313] ipvlan2: entered promiscuous mode [ 341.759022][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 359.679135][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 379.521557][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.013688][T11336] ip6tnl2: entered allmulticast mode [ 386.018007][ T9337] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 386.018232][ T9337] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 386.049564][T10321] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 386.200920][T10321] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 386.202133][T11346] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1272'. [ 386.354646][T11358] veth0_to_bridge: entered promiscuous mode [ 386.364948][T11358] macsec1: entered allmulticast mode [ 386.364968][T11358] veth0_to_bridge: entered allmulticast mode [ 386.391018][T11358] veth0_to_bridge: left allmulticast mode [ 386.391048][T11358] veth0_to_bridge: left promiscuous mode [ 386.619756][T10324] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 386.698473][T11367] netlink: 'syz.0.1281': attribute type 1 has an invalid length. [ 386.753850][T11367] 8021q: adding VLAN 0 to HW filter on device bond8 [ 386.828499][T11375] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 386.835862][T11368] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 387.001766][T11386] lo speed is unknown, defaulting to 1000 [ 387.005042][T11386] lo speed is unknown, defaulting to 1000 [ 387.006127][T11386] lo speed is unknown, defaulting to 1000 [ 387.276771][T11386] infiniband syz0: set active [ 387.276831][ T9149] lo speed is unknown, defaulting to 1000 [ 387.276894][T11386] infiniband syz0: added lo [ 387.342158][T11386] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 387.342232][T11386] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 387.342269][T11386] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 387.383166][T11404] netlink: 424 bytes leftover after parsing attributes in process `syz.1.1293'. [ 387.383196][T11404] netlink: 424 bytes leftover after parsing attributes in process `syz.1.1293'. [ 387.420954][T11407] netlink: 424 bytes leftover after parsing attributes in process `syz.1.1293'. [ 387.420985][T11407] netlink: 424 bytes leftover after parsing attributes in process `syz.1.1293'. [ 387.518650][T11386] RDS/IB: syz0: added [ 387.518715][T11386] smc: adding ib device syz0 with port count 1 [ 387.522339][T11386] smc: ib device syz0 port 1 has no pnetid [ 387.525877][T10321] lo speed is unknown, defaulting to 1000 [ 387.525949][T11386] lo speed is unknown, defaulting to 1000 [ 387.663304][T11414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.785668][T11386] lo speed is unknown, defaulting to 1000 [ 387.834948][T11416] sctp: [Deprecated]: syz.4.1296 (pid 11416) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.834948][T11416] Use struct sctp_sack_info instead [ 387.837427][T11417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.872599][T11419] ip6erspan0: entered promiscuous mode [ 388.092492][T11426] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1297'. [ 388.141847][T11386] lo speed is unknown, defaulting to 1000 [ 388.391209][T11438] openvswitch: netlink: IP tunnel dst address not specified [ 388.422548][T11438] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1299'. [ 388.782664][T11386] lo speed is unknown, defaulting to 1000 [ 389.218287][T11477] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1305'. [ 389.585953][T11490] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 389.643558][T11386] lo speed is unknown, defaulting to 1000 [ 389.959732][T11509] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 390.210833][T11519] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1312'. [ 390.399036][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 391.169702][T11565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1321'. [ 391.301399][T11579] __nla_validate_parse: 3 callbacks suppressed [ 391.301417][T11579] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1324'. [ 391.610373][ T5628] Bluetooth: hci4: command 0x0406 tx timeout [ 391.724702][T11596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1327'. [ 391.724729][T11596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1327'. [ 391.968153][T11613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1333'. [ 391.986294][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1333'. [ 392.284072][T11627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1339'. [ 392.340849][T11631] pimreg0: tun_chr_ioctl cmd 1074025677 [ 392.341000][T11631] pimreg0: linktype set to 774 [ 392.406346][T11631] bond11 (unregistering): Released all slaves [ 392.433015][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1340'. [ 392.433036][T11637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1340'. [ 392.463527][T11638] xt_hashlimit: size too large, truncated to 1048576 [ 392.503287][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1341'. [ 392.637310][T11644] netlink: 'syz.0.1343': attribute type 11 has an invalid length. [ 392.637336][T11644] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1343'. [ 392.817710][T11644] tipc: Resetting bearer [ 392.882946][ T9145] lo speed is unknown, defaulting to 1000 [ 392.910165][T10321] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 392.981246][T10321] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 393.248543][T11669] bridge0 (unregistering): left allmulticast mode [ 393.314423][T11677] ip6tnl3: entered allmulticast mode [ 393.469588][T11685] ip_tables: iptables: counters copy to user failed while replacing table [ 393.470130][T11687] tipc: Enabling of bearer rejected, failed to enable media [ 393.471942][T11688] xt_nfacct: accounting object `IíYA#£ÍÓ¾8æ3ÿÕ_ûä™Öp_+ÂÌx' does not exist [ 393.510936][T11683] smc: net device vlan1 applied user defined pnetid SYZ2 [ 393.736781][T11702] block nbd0: reconnected socket [ 393.805824][ T5624] block nbd0: Receive control failed (result -32) [ 393.919623][T11706] ieee802154 phy1 wpan1: encryption failed: -22 [ 393.982676][T11720] sctp: [Deprecated]: syz.3.1363 (pid 11720) Use of int in maxseg socket option. [ 393.982676][T11720] Use struct sctp_assoc_value instead [ 393.985777][T11720] netlink: 'syz.3.1363': attribute type 2 has an invalid length. [ 394.016625][T11720] : entered promiscuous mode [ 394.230414][T11736] netlink: 'syz.0.1368': attribute type 1 has an invalid length. [ 394.344746][T11742] x_tables: unsorted entry at hook 1 [ 394.466577][T11739] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.503211][T11749] Bluetooth: hci0: unsupported parameter 5135 [ 394.503234][T11749] Bluetooth: hci0: unsupported parameter 8192 [ 394.503316][T11749] Bluetooth: hci0: unsupported parameter 5135 [ 394.503329][T11749] Bluetooth: hci0: unsupported parameter 8192 [ 394.748343][T11754] ip6tnl0: Caught tx_queue_len zero misconfig [ 394.767316][T11754] tipc: Enabled bearer , priority 0 [ 394.767937][T11754] syzkaller0: entered promiscuous mode [ 394.767955][T11754] syzkaller0: entered allmulticast mode [ 394.794138][T11754] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 394.877590][T11754] tipc: Resetting bearer [ 394.889753][T11753] tipc: Resetting bearer [ 394.942740][T11753] tipc: Disabling bearer [ 395.195408][T11769] lo speed is unknown, defaulting to 1000 [ 395.481539][T11782] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 395.488116][T11782] bond9 (unregistering): Released all slaves [ 395.856574][T11809] tc_dump_action: action bad kind [ 396.259717][T11814] syzkaller0: entered promiscuous mode [ 396.259743][T11814] syzkaller0: entered allmulticast mode [ 397.214411][T11829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.229234][T11829] netlink: zone id is out of range [ 397.229251][T11829] netlink: zone id is out of range [ 397.229259][T11829] netlink: zone id is out of range [ 397.229265][T11829] netlink: zone id is out of range [ 397.229272][T11829] netlink: zone id is out of range [ 397.229279][T11829] netlink: zone id is out of range [ 397.229593][T11829] netlink: zone id is out of range [ 397.229602][T11829] netlink: zone id is out of range [ 397.229609][T11829] netlink: zone id is out of range [ 397.262602][T11829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.438980][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 399.486115][T11835] x_tables: duplicate underflow at hook 2 [ 399.621448][T11846] net_ratelimit: 1707 callbacks suppressed [ 399.621468][T11846] ip_tables: iptables: counters copy to user failed while replacing table [ 399.947871][T11866] __nla_validate_parse: 18 callbacks suppressed [ 399.947891][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1403'. [ 399.947909][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1403'. [ 399.948147][T11867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1403'. [ 399.948165][T11867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1403'. [ 399.999294][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 400.034186][T11869] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1405'. [ 400.034282][T11869] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1405'. [ 400.035159][T11866] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1403'. [ 400.076116][T11872] dvmrp0: entered allmulticast mode [ 400.105820][T11872] dvmrp0: left allmulticast mode [ 400.250164][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1408'. [ 400.344739][T11881] xt_hashlimit: size too large, truncated to 1048576 [ 400.534481][T11898] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1414'. [ 400.534694][T11898] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1414'. [ 400.838217][T11914] netlink: 'syz.4.1418': attribute type 1 has an invalid length. [ 400.876774][T11914] 8021q: adding VLAN 0 to HW filter on device bond2 [ 400.929006][T11913] bond9: option tlb_dynamic_lb: invalid value (255) [ 400.935071][T11913] bond9 (unregistering): Released all slaves [ 401.441762][T11939] netlink: 'syz.1.1423': attribute type 1 has an invalid length. [ 401.803353][T11964] xt_CT: You must specify a L4 protocol and not use inversions on it [ 402.048141][T11976] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.048276][T11976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.069390][T11976] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 402.271488][T11991] netlink: 'syz.3.1438': attribute type 16 has an invalid length. [ 402.312737][T11991] batman_adv: batadv0: Adding interface: syzkaller0 [ 402.313940][T11991] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.313977][T11991] batman_adv: batadv0: Interface activated: syzkaller0 [ 402.352457][T11989] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 402.425517][T11989] batman_adv: batadv0: Removing interface: syzkaller0 [ 402.948675][T12015] netlink: 'syz.0.1443': attribute type 1 has an invalid length. [ 403.506464][T12041] ip_tables: iptables: counters copy to user failed while replacing table [ 404.388690][T12076] sctp: [Deprecated]: syz.1.1459 (pid 12076) Use of int in max_burst socket option. [ 404.388690][T12076] Use struct sctp_assoc_value instead [ 404.535207][T12080] siw: device registration error -23 [ 404.535629][T12079] siw: device registration error -23 [ 404.807401][T12073] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 404.809294][T12078] geneve1: entered promiscuous mode [ 404.871223][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.871271][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.871315][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.871345][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.048335][T12088] netlink: 'syz.4.1462': attribute type 1 has an invalid length. [ 405.142400][T12098] __nla_validate_parse: 142 callbacks suppressed [ 405.142422][T12098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1462'. [ 405.155981][T12088] veth11: entered promiscuous mode [ 405.203812][T12106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1467'. [ 405.275885][T12104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1466'. [ 405.318224][T12104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1466'. [ 405.350577][T12104] netlink: 'syz.3.1466': attribute type 8 has an invalid length. [ 405.352447][T12104] sch_fq: defrate 0 ignored. [ 405.403971][T12104] openvswitch: netlink: IPv4 tunnel dst address is zero [ 405.493247][T12121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1470'. [ 405.696783][T12134] x_tables: duplicate underflow at hook 1 [ 405.891697][T12143] pimreg: entered allmulticast mode [ 405.894437][T12144] netlink: 'syz.0.1476': attribute type 21 has an invalid length. [ 405.924313][T12151] netlink: 'syz.0.1476': attribute type 21 has an invalid length. [ 406.502171][T12193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1488'. [ 406.566297][T12196] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 406.878843][T12209] pim6reg99999999: entered allmulticast mode [ 406.980063][T12222] dvmrp0: entered allmulticast mode [ 406.980208][T12213] netlink: 4948 bytes leftover after parsing attributes in process `syz.3.1493'. [ 406.984633][T12213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1493'. [ 406.984664][T12213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1493'. [ 407.038520][T12222] dvmrp0: left allmulticast mode [ 407.164997][T12226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1496'. [ 407.299291][T12236] 8021q: adding VLAN 0 to HW filter on device bond3 [ 407.332958][T12236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.348250][T12236] bond3: (slave bond0): Enslaving as an active interface with a down link [ 407.368627][T12239] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 407.372660][T12234] bond0: Caught tx_queue_len zero misconfig [ 407.432176][T12236] bond3 (unregistering): (slave bond0): Releasing active interface [ 407.441443][T12236] bond3 (unregistering): Released all slaves [ 407.663108][T12259] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 408.212750][T12289] openvswitch: netlink: IP tunnel dst address not specified [ 408.291686][T12289] bond0 (unregistering): Released all slaves [ 408.404538][T12306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.471069][T12310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.507240][T12314] x_tables: duplicate underflow at hook 2 [ 408.567695][T12305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.107233][T12354] netlink: 'syz.1.1526': attribute type 4 has an invalid length. [ 409.625548][T12391] netlink: 'syz.0.1535': attribute type 1 has an invalid length. [ 409.806659][T12407] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 410.187736][T12432] ip_tables: iptables: counters copy to user failed while replacing table [ 410.232390][T12434] xt_TCPMSS: Only works on TCP SYN packets [ 410.263101][T12439] ip_tables: iptables: counters copy to user failed while replacing table [ 410.514755][T12451] __nla_validate_parse: 20 callbacks suppressed [ 410.514769][T12451] netlink: 23 bytes leftover after parsing attributes in process `syz.0.1551'. [ 410.544113][T12453] pim6reg1: entered promiscuous mode [ 410.544127][T12453] pim6reg1: entered allmulticast mode [ 410.864859][T12466] netlink: 'syz.2.1555': attribute type 12 has an invalid length. [ 410.870813][T12466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1555'. [ 410.922801][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1554'. [ 411.223179][T12478] sctp: [Deprecated]: syz.3.1559 (pid 12478) Use of int in maxseg socket option. [ 411.223179][T12478] Use struct sctp_assoc_value instead [ 411.226725][T12479] sctp_setsockopt_maxburst: 23 callbacks suppressed [ 411.226744][T12479] sctp: [Deprecated]: syz.3.1559 (pid 12479) Use of int in max_burst socket option deprecated. [ 411.226744][T12479] Use struct sctp_assoc_value instead [ 411.948203][T12496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1561'. [ 412.015772][T12507] Bluetooth: MGMT ver 1.23 [ 412.035253][T12507] netlink: zone id is out of range [ 412.057917][T12503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.168518][T12512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.181719][T12512] netlink: 'syz.0.1568': attribute type 16 has an invalid length. [ 412.181739][T12512] netlink: 'syz.0.1568': attribute type 17 has an invalid length. [ 412.185329][T12512] 0ªX¹¦Dö»: left allmulticast mode [ 412.226540][T12512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.266352][T12512] veth1_vlan: left promiscuous mode [ 412.290543][T12512] vlan0: left promiscuous mode [ 412.301256][T12512] veth1_vlan: entered promiscuous mode [ 412.308455][T12512] veth1_macvtap: left promiscuous mode [ 412.310235][T12512] veth0_macvtap: left promiscuous mode [ 412.311607][T12512] veth0_macvtap: entered promiscuous mode [ 412.312908][T12512] veth1_macvtap: entered promiscuous mode [ 412.325616][T12512] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 412.326820][T12512] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 412.327940][T12512] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 412.328546][T12512] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 412.375414][T12514] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1570'. [ 412.387542][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.388404][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.390085][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.394465][T12520] netlink: 'syz.1.1572': attribute type 10 has an invalid length. [ 412.930059][T12540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1577'. [ 412.944060][T12540] netlink: 'syz.2.1577': attribute type 1 has an invalid length. [ 412.944080][T12540] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1577'. [ 413.034082][T12546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1579'. [ 413.036027][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1579'. [ 413.038389][T12546] ip_tables: iptables: counters copy to user failed while replacing table [ 413.094733][T12542] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 413.112041][T12548] syzkaller0: entered promiscuous mode [ 413.112061][T12548] syzkaller0: entered allmulticast mode [ 413.166992][T12550] openvswitch: netlink: Unexpected mask (mask=200240, allowed=210048) [ 413.168366][T12542] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1578'. [ 413.376048][T12542] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 414.009037][ T5712] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 414.079295][ T5628] Bluetooth: hci4: command 0x0406 tx timeout [ 414.231054][T12615] ip_tables: iptables: counters copy to user failed while replacing table [ 414.238230][T12615] IPVS: set_ctl: invalid protocol: 0 172.30.0.4:20003 [ 414.337091][T12623] ip_tables: iptables: counters copy to user failed while replacing table [ 414.352478][T12624] IPVS: set_ctl: invalid protocol: 0 172.30.0.4:20003 [ 414.804073][ T5712] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 415.453480][T12681] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.551519][T12681] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.675725][T12681] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.737970][T12681] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.959697][ T9339] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.959742][ T9339] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.959781][ T9339] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.959811][ T9339] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.236855][T12569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.919033][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 455.039056][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 471.678993][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 473.396964][T12716] ip_tables: iptables: counters copy to user failed while replacing table [ 473.422148][T12715] syzkaller0: entered promiscuous mode [ 473.422169][T12715] syzkaller0: entered allmulticast mode [ 473.664518][ T25] lo speed is unknown, defaulting to 1000 [ 473.664573][ T25] syz0: Port: 1 Link DOWN [ 473.682839][ T25] lo speed is unknown, defaulting to 1000 [ 473.792648][T12737] __nla_validate_parse: 3 callbacks suppressed [ 473.792669][T12737] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1621'. [ 473.792686][T12737] IPVS: Unknown mcast interface: macsec0 [ 473.935191][T12749] syzkaller0: left promiscuous mode [ 473.935214][T12749] syzkaller0: left allmulticast mode [ 473.935611][T12751] netlink: 'syz.3.1624': attribute type 2 has an invalid length. [ 473.961366][T12752] netlink: 'syz.3.1624': attribute type 2 has an invalid length. [ 474.354783][T12784] netlink: 'syz.0.1632': attribute type 21 has an invalid length. [ 474.354806][T12784] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1632'. [ 474.380842][T12784] netlink: 'syz.0.1632': attribute type 5 has an invalid length. [ 474.380875][T12784] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1632'. [ 474.381120][T12784] netlink: 'syz.0.1632': attribute type 21 has an invalid length. [ 474.381133][T12784] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1632'. [ 474.381174][T12784] netlink: 'syz.0.1632': attribute type 5 has an invalid length. [ 474.381184][T12784] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1632'. [ 474.381399][T12784] netlink: 'syz.0.1632': attribute type 21 has an invalid length. [ 474.381412][T12784] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1632'. [ 474.381443][T12784] netlink: 'syz.0.1632': attribute type 5 has an invalid length. [ 474.381453][T12784] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1632'. [ 474.387862][T12784] netlink: 'syz.0.1632': attribute type 21 has an invalid length. [ 474.387882][T12784] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1632'. [ 474.387929][T12784] netlink: 'syz.0.1632': attribute type 5 has an invalid length. [ 474.387940][T12784] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1632'. [ 474.388146][T12784] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1632'. [ 475.250887][T12838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.505171][T12863] ip_tables: iptables: counters copy to user failed while replacing table [ 475.505829][T12863] xt_TCPMSS: Only works on TCP SYN packets [ 475.591735][T12868] lo speed is unknown, defaulting to 1000 [ 476.027877][T12887] tipc: Cannot configure node identity twice [ 476.028129][T12888] tipc: Cannot configure node identity twice [ 476.122219][T12893] ebt_limit: overflow, try lower: 4294901760/65535 [ 476.303998][T12897] Cannot find add_set index 0 as target [ 476.445614][T12907] openvswitch: netlink: IP tunnel dst address not specified [ 476.822486][T12930] IPv6: Can't replace route, no match found [ 477.111402][T12954] netlink: Invalid conntrack helper [ 477.111456][T12954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.294609][T12969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.514853][T12981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.833489][T12989] 8021q: adding VLAN 0 to HW filter on device bond9 [ 477.834144][T12990] bond9: option mode: unable to set because the bond device is up [ 477.912966][T12989] bond9 (unregistering): Released all slaves [ 478.147067][T12968] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 478.417505][T13016] openvswitch: ovs-dp0: Dropping previously announced user features [ 478.424332][T13016] netlink: 'syz.2.1692': attribute type 11 has an invalid length. [ 478.428200][T13020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.688822][T13034] tipc: Resetting bearer [ 478.939284][ T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.939318][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.939355][ T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.939377][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.939409][ T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.939432][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.945372][T13054] validate_nla: 61 callbacks suppressed [ 478.945401][T13054] netlink: 'syz.4.1703': attribute type 2 has an invalid length. [ 478.945606][T13054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 479.169143][T13067] __nla_validate_parse: 141 callbacks suppressed [ 479.169163][T13067] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.1709'. [ 479.169273][T13067] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» [ 479.208255][T13067] 1ªX¹¦Dö»: entered allmulticast mode [ 479.267467][T13074] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.1709'. [ 479.267586][T13074] 0ªX¹¦Dö»: renamed from 01ªX¹¦Dö» (while UP) [ 479.374073][T13086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.414554][T13091] syzkaller0: entered promiscuous mode [ 479.414574][T13091] syzkaller0: entered allmulticast mode [ 479.427542][T13091] 0: reclassify loop, rule prio 0, protocol 800 [ 479.486215][T13099] netlink: 'syz.1.1717': attribute type 2 has an invalid length. [ 479.504378][T13099] ´: entered promiscuous mode [ 479.554840][T13095] netlink: 'syz.0.1714': attribute type 3 has an invalid length. [ 479.575971][T13095] netlink: 'syz.0.1714': attribute type 1 has an invalid length. [ 479.575994][T13095] netlink: 'syz.0.1714': attribute type 268 has an invalid length. [ 479.576007][T13095] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1714'. [ 479.609590][T13101] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1716'. [ 479.609807][T13101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 479.725732][T13100] dummy0: entered allmulticast mode [ 479.735651][T13097] dummy0: left allmulticast mode [ 479.755625][T13115] xt_l2tp: missing protocol rule (udp|l2tpip) [ 479.821962][T13118] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1722'. [ 479.822559][T13118] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1722'. [ 480.031243][T13133] netlink: 'syz.1.1727': attribute type 13 has an invalid length. [ 480.032255][T13130] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1725'. [ 480.223381][T13145] netlink: 'syz.4.1732': attribute type 1 has an invalid length. [ 480.281284][T13145] bond3: entered promiscuous mode [ 480.282109][T13145] 8021q: adding VLAN 0 to HW filter on device bond3 [ 480.304394][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1732'. [ 480.340291][T13153] sctp: [Deprecated]: syz.1.1733 (pid 13153) Use of int in max_burst socket option deprecated. [ 480.340291][T13153] Use struct sctp_assoc_value instead [ 480.388489][T13145] 8021q: adding VLAN 0 to HW filter on device bond3 [ 480.393877][T13145] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 480.393901][T13145] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 480.408005][T13159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1734'. [ 480.434464][T13145] bond3: (slave wireguard0): making interface the new active one [ 480.434488][T13145] wireguard0: entered promiscuous mode [ 480.435825][T13145] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 480.508323][T13163] openvswitch: netlink: Multiple metadata blocks provided [ 480.538475][T13163] gre0: Caught tx_queue_len zero misconfig [ 480.844593][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1740'. [ 480.968678][T13176] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 480.973695][T13176] team0: Device ipvlan2 is already an upper device of the team interface [ 481.096290][T13188] bond9: option packets_per_slave: invalid value (134217728) [ 481.096316][T13188] bond9: option packets_per_slave: allowed values 0 - 65535 [ 481.119629][T13188] bond9 (unregistering): Released all slaves [ 481.385798][T13201] 8021q: adding VLAN 0 to HW filter on device bond10 [ 481.528423][T13217] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 481.552914][T13217] bond9: (slave lo): Enslaving as an active interface with an up link [ 481.565344][T13217] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 481.661500][T13216] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 481.693725][T13234] ip_tables: iptables: counters copy to user failed while replacing table [ 481.829137][ T9329] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.829480][ T9329] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.829515][ T9329] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.829544][ T9329] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.059834][ T3357] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.059917][ T3357] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.059946][ T3357] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.135986][T13261] vlan0: entered promiscuous mode [ 482.258396][ T31] audit: type=1804 audit(1792361465.689:3): pid=13259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1755" name="/newroot/323/cgroup.controllers" dev="tmpfs" ino=1670 res=1 errno=0 [ 482.284675][ T31] audit: type=1800 audit(1792361465.689:4): pid=13259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1755" name="cgroup.controllers" dev="tmpfs" ino=1670 res=0 errno=0 [ 482.397354][T13272] xfrm0: entered allmulticast mode [ 482.397539][T13272] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 482.514627][T13280] netlink: 'syz.1.1762': attribute type 1 has an invalid length. [ 482.585663][T13280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.637281][T13287] bond0: (slave gretap1): making interface the new active one [ 482.638398][T13287] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 482.959414][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 483.757517][T13349] openvswitch: netlink: Message has 4 unknown bytes. [ 483.987790][T13362] netlink: 'syz.1.1780': attribute type 1 has an invalid length. [ 484.075026][T13364] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.273736][T13380] netlink: 'syz.0.1784': attribute type 1 has an invalid length. [ 484.342156][T13383] __nla_validate_parse: 12 callbacks suppressed [ 484.342176][T13383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1784'. [ 484.411087][T13380] 8021q: adding VLAN 0 to HW filter on device bond11 [ 484.581188][T13400] netlink: 'syz.3.1786': attribute type 11 has an invalid length. [ 484.581210][T13400] netlink: 'syz.3.1786': attribute type 9 has an invalid length. [ 484.581222][T13400] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1786'. [ 484.689947][T13407] openvswitch: netlink: Unknown key attributes 2 [ 485.456929][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1796'. [ 485.761583][T13471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1799'. [ 485.830324][T13485] netlink: 'syz.3.1800': attribute type 1 has an invalid length. [ 485.830346][T13485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1800'. [ 487.172056][ T5281] netdevsim netdevsim1 netdevsim3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 487.225878][ T5281] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 487.322759][T13503] ip6tnl0: Caught tx_queue_len zero misconfig [ 487.322783][T13503] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1803'. [ 487.489532][T13508] ip_tables: iptables: counters copy to user failed while replacing table [ 487.532491][T13511] tipc: Enabled bearer , priority 0 [ 487.596635][T13510] tipc: Disabling bearer [ 487.621344][T13509] team0: Port device veth0 removed [ 487.623759][T13509] batman_adv: batadv0: Adding interface: veth0 [ 487.623777][T13509] batman_adv: batadv0: Not using interface veth0 (retrying later): interface not active [ 487.625704][T13512] batman_adv: batadv0: Removing interface: ipvlan2 [ 487.634466][T13512] batman_adv: batadv0: Removing interface: ipvlan3 [ 487.635127][T13512] batman_adv: batadv0: Removing interface: veth0 [ 487.667588][T13518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1810'. [ 487.667609][T13518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1810'. [ 487.667631][T13518] netlink: 'syz.2.1810': attribute type 11 has an invalid length. [ 487.667644][T13518] netlink: 'syz.2.1810': attribute type 13 has an invalid length. [ 487.884549][T13516] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 487.887183][T13516] bond4: (slave macvlan3): Enslaving as an active interface with an up link [ 487.887254][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1809'. [ 487.887946][T13523] ip6gretap0: left promiscuous mode [ 487.887965][T13523] ip6gretap0: left allmulticast mode [ 487.893491][T13530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1813'. [ 487.912872][T13523] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 488.291323][T13548] ip_tables: iptables: counters copy to user failed while replacing table [ 488.443726][T13558] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 488.447395][T13558] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 488.983915][T13580] netlink: 'syz.2.1828': attribute type 1 has an invalid length. [ 489.077333][T13580] 8021q: adding VLAN 0 to HW filter on device bond8 [ 489.164174][T13580] bond8: (slave geneve2): making interface the new active one [ 489.179187][T13580] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 489.209363][ T3274] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.211495][ T3274] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.211533][ T3274] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.211562][ T3274] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.422113][T13609] syzkaller0: entered promiscuous mode [ 489.422133][T13609] syzkaller0: entered allmulticast mode [ 489.483113][T13610] netlink: 'syz.4.1829': attribute type 8 has an invalid length. [ 489.778687][T13627] netlink: 'syz.2.1836': attribute type 1 has an invalid length. [ 489.896221][T13630] veth8: entered allmulticast mode [ 489.914750][T13630] bond9: (slave veth8): Enslaving as an active interface with a down link [ 489.930631][T13627] bond3: (slave veth0_to_bond): Releasing backup interface [ 489.930655][T13627] bond3: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 489.937176][T13627] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 489.974748][T13648] __nla_validate_parse: 7 callbacks suppressed [ 489.974768][T13648] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1840'. [ 490.053487][T13652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1840'. [ 490.058610][T13646] macvlan2: entered promiscuous mode [ 490.058631][T13646] macvlan2: entered allmulticast mode [ 490.065546][T13646] bond9: entered promiscuous mode [ 490.078183][T13646] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 490.106425][T13646] bond9: left promiscuous mode [ 490.108247][T13654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1841'. [ 490.108268][T13654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1841'. [ 490.108326][T13654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1841'. [ 490.370763][T13671] ip_tables: iptables: counters copy to user failed while replacing table [ 490.513370][T13674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1846'. [ 490.608295][T13688] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1850'. [ 490.671666][T13692] bond0: Caught tx_queue_len zero misconfig [ 490.750252][T13697] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1854'. [ 490.934626][T13710] veth1_vlan: left promiscuous mode [ 490.976901][T13715] lo: Caught tx_queue_len zero misconfig [ 491.331541][T13735] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1863'. [ 491.396238][T13740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1865'. [ 491.537427][T13749] syzkaller1: entered promiscuous mode [ 491.537515][T13749] syzkaller1: entered allmulticast mode [ 491.641533][T13757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.938705][T13792] netlink: 'syz.2.1878': attribute type 1 has an invalid length. [ 492.085262][T13792] bond10: entered promiscuous mode [ 492.085780][T13792] 8021q: adding VLAN 0 to HW filter on device bond10 [ 492.461451][T13817] nbd: socks must be embedded in a SOCK_ITEM attr [ 492.461752][T13817] block nbd2: shutting down sockets [ 492.977390][T13841] syzkaller1: entered promiscuous mode [ 492.977413][T13841] syzkaller1: entered allmulticast mode [ 493.334314][T13850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.728624][T13882] ip_tables: iptables: counters copy to user failed while replacing table [ 493.751591][T13874] bond11: option ad_user_port_key: mode dependency failed, not supported in mode broadcast(3) [ 493.754521][T13874] bond11 (unregistering): Released all slaves [ 493.807433][T13888] syzkaller0: left promiscuous mode [ 493.807453][T13888] syzkaller0: left allmulticast mode [ 493.862647][T13891] xt_bpf: check failed: parse error [ 493.863372][T13893] netlink: 'syz.1.1906': attribute type 3 has an invalid length. [ 493.863435][T13893] netlink: 'syz.1.1906': attribute type 3 has an invalid length. [ 493.863476][T13893] netlink: 'syz.1.1906': attribute type 3 has an invalid length. [ 493.863517][T13893] netlink: 'syz.1.1906': attribute type 3 has an invalid length. [ 493.863558][T13893] netlink: 'syz.1.1906': attribute type 3 has an invalid length. [ 493.863597][T13893] netlink: 'syz.1.1906': attribute type 3 has an invalid length. [ 493.863658][T13893] netlink: 'syz.1.1906': attribute type 3 has an invalid length. [ 496.601964][T13863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 496.602223][T13864] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 497.041794][T13939] ip_tables: iptables: counters copy to user failed while replacing table [ 497.377220][T13929] virtio_blk virtio5: 1/0/0 default/read/poll queues [ 497.382552][T13929] virtio_blk virtio5: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 497.496531][T13946] __nla_validate_parse: 20 callbacks suppressed [ 497.496552][T13946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1917'. [ 497.833824][T13980] validate_nla: 35 callbacks suppressed [ 497.833842][T13980] netlink: 'syz.2.1927': attribute type 2 has an invalid length. [ 497.862796][T13982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1926'. [ 497.984074][T13984] syzkaller0: entered promiscuous mode [ 497.984099][T13984] syzkaller0: entered allmulticast mode [ 497.987688][T13988] tipc: Enabled bearer , priority 0 [ 498.054969][T13994] ip_tables: iptables: counters copy to user failed while replacing table [ 498.065532][T13992] netlink: 'syz.2.1928': attribute type 1 has an invalid length. [ 498.065583][T13992] netlink: 'syz.2.1928': attribute type 6 has an invalid length. [ 498.065596][T13992] netlink: 'syz.2.1928': attribute type 3 has an invalid length. [ 499.242380][T14033] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1934'. [ 499.651197][T14064] ip_tables: iptables: counters copy to user failed while replacing table [ 499.755273][T14070] 8021q: VLANs not supported on vcan0 [ 499.845993][T14073] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1944'. [ 499.947012][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1948'. [ 500.006904][T14083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1947'. [ 500.017327][T14083] netlink: 'syz.3.1947': attribute type 1 has an invalid length. [ 500.017347][T14083] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1947'. [ 500.029765][T14083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1947'. [ 500.174999][T14089] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1950'. [ 500.813768][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1953'. [ 501.439956][T14147] syzkaller0: entered promiscuous mode [ 501.439980][T14147] syzkaller0: entered allmulticast mode [ 501.726626][T14153] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 501.728112][T14153] xfrm0: left allmulticast mode [ 501.728313][T14153] team0: Device xfrm0 failed to enter team mode [ 501.728327][T14153] team0: Device xfrm0 failed to enter team mode [ 501.729335][T14153] tipc: Enabling of bearer rejected, already enabled [ 501.735336][T14156] block nbd2: server does not support multiple connections per device. [ 501.736022][T14156] block nbd2: shutting down sockets [ 501.913536][T14158] ip_tables: iptables: counters copy to user failed while replacing table [ 502.286705][T14181] xt_hashlimit: size too large, truncated to 1048576 [ 502.344464][T14188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.356944][T14190] Cannot find del_set index 4 as target [ 502.416435][T14192] netlink: 'syz.4.1969': attribute type 21 has an invalid length. [ 502.416457][T14192] netlink: 'syz.4.1969': attribute type 20 has an invalid length. [ 502.796989][T14210] netlink: 'syz.0.1973': attribute type 1 has an invalid length. [ 502.797011][T14210] __nla_validate_parse: 2 callbacks suppressed [ 502.797022][T14210] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1973'. [ 503.242064][T14232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1979'. [ 503.266559][T14233] tipc: Enabled bearer , priority 10 [ 503.418710][T14243] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1983'. [ 503.437818][T14248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1983'. [ 503.462455][T14249] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 503.471571][T14250] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 504.075197][T14285] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1991'. [ 504.206491][T14251] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 504.268684][T14288] can: request_module (can-proto-0) failed. [ 504.381951][ T5352] tipc: Node number set to 773583021 [ 504.552025][T14306] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 504.597994][T14309] netlink: 'syz.0.1994': attribute type 4 has an invalid length. [ 504.598016][T14309] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1994'. [ 505.574498][T14307] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1996'. [ 505.576775][T14314] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1999'. [ 505.738676][T14323] netlink: 'syz.1.2001': attribute type 1 has an invalid length. [ 505.738697][T14323] netlink: 'syz.1.2001': attribute type 2 has an invalid length. [ 505.819390][T14341] netlink: 'syz.4.2005': attribute type 1 has an invalid length. [ 505.871717][T14342] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2005'. [ 505.872498][T14346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2005'. [ 505.876051][T14341] 8021q: adding VLAN 0 to HW filter on device bond5 [ 505.934879][T14341] gretap1: entered promiscuous mode [ 505.948644][T14341] bond5: (slave gretap1): making interface the new active one [ 505.956932][T14341] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 506.006647][T14341] 8021q: adding VLAN 0 to HW filter on device bond6 [ 506.016328][T14341] bond5: (slave bond6): Enslaving as an active interface with a down link [ 506.066593][T14342] 8021q: adding VLAN 0 to HW filter on device bond7 [ 506.076040][T14342] bond5: (slave bond7): Enslaving as an active interface with a down link [ 506.094679][T14346] bond5 (unregistering): (slave gretap1): Releasing active interface [ 506.111882][T14346] bond5 (unregistering): (slave bond6): Releasing active interface [ 506.133149][T14346] bond5 (unregistering): (slave bond7): Releasing active interface [ 506.136979][T14346] bond5 (unregistering): Released all slaves [ 506.378299][T14372] netlink: 'syz.4.2010': attribute type 4 has an invalid length. [ 506.402184][T14372] ip_tables: iptables: counters copy to user failed while replacing table [ 506.468059][T14381] block nbd0: reconnected socket [ 506.468184][T14381] block nbd0: reconnected socket [ 506.479865][T14381] netlink: 'syz.0.2011': attribute type 9 has an invalid length. [ 506.680770][ T5628] block nbd0: Receive control failed (result -32) [ 506.682368][ T5624] block nbd0: Receive control failed (result -32) [ 507.293801][T14405] openvswitch: netlink: Flow actions attr not present in new flow. [ 507.431676][T14422] ip_tables: iptables: counters copy to user failed while replacing table [ 507.506998][T14425] x_tables: duplicate underflow at hook 2 [ 507.580788][T14429] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 507.778523][T14435] sctp: [Deprecated]: syz.3.2026 (pid 14435) Use of int in maxseg socket option. [ 507.778523][T14435] Use struct sctp_assoc_value instead [ 507.778572][T14435] sctp: [Deprecated]: syz.3.2026 (pid 14435) Use of int in maxseg socket option. [ 507.778572][T14435] Use struct sctp_assoc_value instead [ 507.778609][T14435] sctp: [Deprecated]: syz.3.2026 (pid 14435) Use of int in maxseg socket option. [ 507.778609][T14435] Use struct sctp_assoc_value instead [ 507.778645][T14435] sctp: [Deprecated]: syz.3.2026 (pid 14435) Use of int in maxseg socket option. [ 507.778645][T14435] Use struct sctp_assoc_value instead [ 507.778681][T14435] sctp: [Deprecated]: syz.3.2026 (pid 14435) Use of int in maxseg socket option. [ 507.778681][T14435] Use struct sctp_assoc_value instead [ 507.778717][T14435] sctp: [Deprecated]: syz.3.2026 (pid 14435) Use of int in maxseg socket option. [ 507.778717][T14435] Use struct sctp_assoc_value instead [ 507.782069][T14435] sctp: [Deprecated]: syz.3.2026 (pid 14435) Use of int in maxseg socket option. [ 507.782069][T14435] Use struct sctp_assoc_value instead [ 507.782111][T14435] sctp: [Deprecated]: syz.3.2026 (pid 14435) Use of int in maxseg socket option. [ 507.782111][T14435] Use struct sctp_assoc_value instead [ 507.782146][T14435] sctp: [Deprecated]: syz.3.2026 (pid 14435) Use of int in maxseg socket option. [ 507.782146][T14435] Use struct sctp_assoc_value instead [ 507.782181][T14435] sctp: [Deprecated]: syz.3.2026 (pid 14435) Use of int in maxseg socket option. [ 507.782181][T14435] Use struct sctp_assoc_value instead [ 507.898403][T14436] syzkaller0: entered promiscuous mode [ 507.898424][T14436] syzkaller0: entered allmulticast mode [ 508.002089][T14450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.168343][T14459] netlink: 'syz.1.2032': attribute type 1 has an invalid length. [ 508.512034][T14471] ip6tnl2: entered allmulticast mode [ 508.513426][ T9335] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 508.513635][ T9335] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 508.544250][ T5352] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 508.856755][T14489] netlink: 'syz.2.2043': attribute type 1 has an invalid length. [ 508.856776][T14489] __nla_validate_parse: 8 callbacks suppressed [ 508.856786][T14489] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2043'. [ 508.865350][T14487] ip6_vti0: left promiscuous mode [ 508.865378][T14487] ip6_vti0: left allmulticast mode [ 508.883923][ T5352] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 508.942404][T14491] ip_tables: iptables: counters copy to user failed while replacing table [ 509.002162][T14497] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2045'. [ 509.514343][T14536] netlink: 'syz.0.2056': attribute type 1 has an invalid length. [ 509.521955][ T5352] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 509.572711][T14536] bond12: option mode: invalid value (48) [ 509.668153][T14536] bond12 (unregistering): Released all slaves [ 509.756030][T14539] bond10: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 509.757116][T14539] bond10 (unregistering): Released all slaves [ 510.068223][T14564] netlink: 'syz.4.2063': attribute type 1 has an invalid length. [ 510.069771][T14564] xt_socket: unknown flags 0x8 [ 510.164222][T14570] netlink: 4732 bytes leftover after parsing attributes in process `syz.1.2064'. [ 510.281368][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2066'. [ 510.515390][T14593] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2068'. [ 510.515541][T14593] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2068'. [ 510.515666][T14593] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2068'. [ 510.515794][T14593] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2068'. [ 510.515919][T14593] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2068'. [ 510.520872][T14593] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2068'. [ 510.548673][T14597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.721388][T14600] ip_tables: iptables: counters copy to user failed while replacing table [ 511.093320][T14612] bridge0: entered allmulticast mode [ 511.173627][T14610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.488515][T14639] ip_tables: iptables: counters copy to user failed while replacing table [ 511.556968][T14636] netlink: 'syz.4.2079': attribute type 10 has an invalid length. [ 511.586892][T14636] team0: Port device dummy0 added [ 511.945591][T14667] netlink: 'syz.1.2087': attribute type 1 has an invalid length. [ 512.639427][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 513.143206][T14718] netlink: 'syz.4.2097': attribute type 21 has an invalid length. [ 513.143265][T14718] netlink: 'syz.4.2097': attribute type 4 has an invalid length. [ 515.299204][T14689] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 515.491603][T14736] 8021q: VLANs not supported on ip6tnl0 [ 515.491917][T14732] netlink: 'syz.4.2104': attribute type 1 has an invalid length. [ 515.584688][T14740] __nla_validate_parse: 38 callbacks suppressed [ 515.584707][T14740] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2103'. [ 515.658631][T14751] Bluetooth: hci0: unsupported parameter 5135 [ 515.658653][T14751] Bluetooth: hci0: unsupported parameter 8192 [ 515.658665][T14751] Bluetooth: hci0: unsupported parameter 5135 [ 515.658676][T14751] Bluetooth: hci0: unsupported parameter 8192 [ 515.864873][T14755] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2107'. [ 515.898264][T14760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2109'. [ 515.998374][T14736] lo: entered promiscuous mode [ 515.998394][T14736] lo: entered allmulticast mode [ 515.998620][T14736] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2104'. [ 515.998637][T14736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.007919][T14765] netlink: 'syz.2.2112': attribute type 1 has an invalid length. [ 516.010376][T14767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2112'. [ 516.106497][T14765] bond11: entered promiscuous mode [ 516.108587][T14765] 8021q: adding VLAN 0 to HW filter on device bond11 [ 516.187645][T14767] 8021q: adding VLAN 0 to HW filter on device bond11 [ 516.187991][T14767] bond11: (slave wireguard0): The slave device specified does not support setting the MAC address [ 516.188010][T14767] bond11: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 516.256887][T14767] bond11: (slave wireguard0): making interface the new active one [ 516.256917][T14767] wireguard0: entered promiscuous mode [ 516.272809][T14767] bond11: (slave wireguard0): Enslaving as an active interface with an up link [ 516.356337][T14789] xt_cgroup: path and classid specified [ 517.076658][T14823] bond12: ARP target 9.0.0.0 is already present [ 517.076683][T14823] bond12: option arp_ip_target: invalid value (9) [ 517.081584][T14823] bond12 (unregistering): Released all slaves [ 517.124385][T14832] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2125'. [ 517.234072][T14839] veth1_to_bond: Caught tx_queue_len zero misconfig [ 517.235798][T14840] xt_IDLETIMER: timeout value is zero [ 517.592062][T14856] ip6gre2: entered promiscuous mode [ 517.592085][T14856] ip6gre2: entered allmulticast mode [ 517.713005][T14868] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2136'. [ 517.985747][ T264] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 517.985964][ T264] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 518.027217][ T25] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 518.145862][T13876] udevd[13876]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 518.299269][T14892] sctp: [Deprecated]: syz.4.2138 (pid 14892) Use of int in max_burst socket option deprecated. [ 518.299269][T14892] Use struct sctp_assoc_value instead [ 518.302565][T14893] sctp: [Deprecated]: syz.4.2138 (pid 14893) Use of int in max_burst socket option deprecated. [ 518.302565][T14893] Use struct sctp_assoc_value instead [ 518.367170][T14887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2137'. [ 518.367203][T14887] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2137'. [ 518.422045][T14895] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2139'. [ 518.438361][ T25] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 518.501805][ T31] audit: type=1800 audit(1792361501.939:5): pid=14900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2141" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=2403 res=0 errno=0 [ 518.563966][T14901] netlink: 'syz.2.2142': attribute type 2 has an invalid length. [ 518.565339][T14901] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 518.592911][T14901] netlink: 'syz.2.2142': attribute type 62 has an invalid length. [ 518.800496][ T25] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 518.907521][T14558] block nbd2: Receive control failed (result -32) [ 518.907521][ T5624] block nbd2: Receive control failed (result -32) [ 519.245783][T14930] netlink: 'syz.0.2150': attribute type 4 has an invalid length. [ 519.283775][T14558] Bluetooth: hci1: ISO packet too small [ 519.933066][T14975] openvswitch: netlink: ct_state flags 806d0004 unsupported [ 520.091316][T14990] ip_tables: iptables: counters copy to user failed while replacing table [ 520.279728][T14999] Cannot find add_set index 34 as target [ 520.335700][T15001] batadv_slave_0: Caught tx_queue_len zero misconfig [ 520.545758][T15005] af_packet: tpacket_rcv: packet too big, clamped from 268 to 4294967272. macoff=96 [ 520.729583][T15015] __nla_validate_parse: 9 callbacks suppressed [ 520.729602][T15015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2172'. [ 520.732227][T15017] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2172'. [ 520.749760][ T264] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 520.749804][ T264] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 520.749834][ T264] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 520.749863][ T264] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 520.816057][T15019] netlink: 'syz.2.2173': attribute type 4 has an invalid length. [ 520.816081][T15019] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2173'. [ 520.818714][T15019] .`: renamed from bond0 [ 521.094306][T15028] xt_hashlimit: size too large, truncated to 1048576 [ 521.145621][T15030] ip_tables: iptables: counters copy to user failed while replacing table [ 521.146588][T15030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2176'. [ 521.475357][T15042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2179'. [ 521.506548][T15042] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2179'. [ 521.599009][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 521.806684][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2182'. [ 521.930712][T15063] sctp: [Deprecated]: syz.4.2184 (pid 15063) Use of struct sctp_assoc_value in delayed_ack socket option. [ 521.930712][T15063] Use struct sctp_sack_info instead [ 521.962476][T15065] bridge0: port 1(bond0) entered blocking state [ 521.962654][T15065] bridge0: port 1(bond0) entered disabled state [ 521.962816][T15065] bond0: entered allmulticast mode [ 521.964965][T15065] bond0: entered promiscuous mode [ 522.003488][T15065] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2185'. [ 522.026224][T15065] hsr_slave_1 (unregistering): left promiscuous mode [ 522.168884][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.168967][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.169040][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.169115][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.169181][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.169254][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.169326][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.169446][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.169517][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.169595][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.169697][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.169778][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.169850][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.169920][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.169991][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.170064][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.170134][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.170206][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.178476][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.178567][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.178644][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.178711][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.184719][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.184805][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.184873][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.184942][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.185014][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.185087][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.185159][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.185230][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.185301][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.185375][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.185454][T15083] 8021q: VLANs not supported on ip6tnl0 [ 522.398983][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 522.528400][T15094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2191'. [ 522.528578][T15094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2191'. [ 522.789399][T15108] syzkaller1: entered promiscuous mode [ 522.789421][T15108] syzkaller1: entered allmulticast mode [ 523.009247][T15123] netlink: 'syz.2.2197': attribute type 1 has an invalid length. [ 523.071890][T15123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.102498][T15127] bond0: entered allmulticast mode [ 523.121169][T15130] syzkaller0: left promiscuous mode [ 523.121192][T15130] syzkaller0: left allmulticast mode [ 523.158614][T15123] bond0: (slave ip6gretap2): making interface the new active one [ 523.158638][T15123] ip6gretap2: entered allmulticast mode [ 523.173275][T15123] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 523.222098][T15126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 523.290851][ T9140] lo speed is unknown, defaulting to 1000 [ 523.290890][ T9140] syz0: Port: 1 Link ACTIVE [ 523.290957][ T9140] lo speed is unknown, defaulting to 1000 [ 523.717154][T15162] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 523.727127][T15162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.459461][T15212] netlink: 'syz.4.2219': attribute type 4 has an invalid length. [ 524.582549][T15216] netlink: 'syz.4.2219': attribute type 4 has an invalid length. [ 524.896834][T15232] netlink: 'syz.0.2225': attribute type 10 has an invalid length. [ 525.023910][T15247] bridge11: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 525.121827][ C1] TC_ACT_REPEAT abuse ? [ 525.142843][T15255] netlink: 'syz.2.2233': attribute type 16 has an invalid length. [ 525.142867][T15255] netlink: 'syz.2.2233': attribute type 17 has an invalid length. [ 525.169020][T15255] tipc: Resetting bearer [ 525.206475][T15255] 8021q: adding VLAN 0 to HW filter on device .` [ 525.208563][T15255] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.227635][T15255] batadv0: left promiscuous mode [ 525.227658][T15255] batadv0: left allmulticast mode [ 525.228451][T15255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.305021][T15255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.317025][T15255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.341065][T15255] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 525.341091][T15255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 525.342910][T15255] veth0_vlan: left promiscuous mode [ 525.344497][T15255] veth0_vlan: entered promiscuous mode [ 525.354180][T15255] veth1_vlan: entered promiscuous mode [ 525.391808][T15255] veth1_macvtap: left promiscuous mode [ 525.396441][T15255] veth0_macvtap: left promiscuous mode [ 525.407180][T15255] veth0_macvtap: entered promiscuous mode [ 525.410260][T15255] veth1_macvtap: entered promiscuous mode [ 525.447069][T15255] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 525.494972][T15260] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 525.537490][T15258] x_tables: duplicate underflow at hook 1 [ 525.565901][T15270] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 525.568626][T15270] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 525.575973][T15270] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 525.576318][T15270] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 525.643868][T15275] ±ÿ: renamed from lo (while UP) [ 525.777881][T15280] __nla_validate_parse: 13 callbacks suppressed [ 525.777903][T15280] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2237'. [ 525.866537][T15282] syzkaller0: entered promiscuous mode [ 525.866562][T15282] syzkaller0: entered allmulticast mode [ 525.899522][T15281] tipc: Enabling of bearer rejected, failed to enable media [ 526.020980][T15293] netlink: 'syz.1.2241': attribute type 1 has an invalid length. [ 526.139380][T15305] netlink: 'syz.3.2244': attribute type 1 has an invalid length. [ 526.157085][T15306] bond10: (slave geneve3): making interface the new active one [ 526.158606][T15306] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 526.160374][ C1] net_ratelimit: 62 callbacks suppressed [ 526.160393][ C1] TC_ACT_REPEAT abuse ? [ 526.170265][ T9329] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 526.202573][ T9335] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 526.203227][ T9329] netdevsim netdevsim1 €Â: set [1, 1] type 2 family 0 port 20000 - 0 [ 526.204675][T15293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2241'. [ 526.206354][T15293] bond10: entered promiscuous mode [ 526.206372][T15293] geneve3: entered promiscuous mode [ 526.214773][T15293] 8021q: adding VLAN 0 to HW filter on device bond10 [ 526.349981][T14558] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 526.464788][T15323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2249'. [ 526.479720][ T25] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 526.558044][T15323] 8021q: adding VLAN 0 to HW filter on device bond12 [ 526.620810][T15323] macvtap1: entered allmulticast mode [ 526.653093][T15323] bond12: (slave sit2): refused to change device type [ 526.795272][T15344] netlink: 'syz.4.2254': attribute type 1 has an invalid length. [ 526.831657][T15347] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2255'. [ 526.841430][T15344] bond5: entered promiscuous mode [ 526.841834][T15344] 8021q: adding VLAN 0 to HW filter on device bond5 [ 526.862662][ T9140] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 527.038973][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 527.199692][ C1] TC_ACT_REPEAT abuse ? [ 527.220208][T15367] netlink: zone id is out of range [ 527.220253][T15367] netlink: zone id is out of range [ 527.220388][T15367] netlink: zone id is out of range [ 527.220427][T15367] netlink: zone id is out of range [ 527.220435][T15367] netlink: zone id is out of range [ 527.220442][T15367] netlink: zone id is out of range [ 527.220448][T15367] netlink: zone id is out of range [ 527.232042][T15366] netlink: 'syz.1.2259': attribute type 21 has an invalid length. [ 527.395877][T15381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2264'. [ 527.535794][T15386] netlink: 'syz.2.2265': attribute type 16 has an invalid length. [ 527.535815][T15386] netlink: 'syz.2.2265': attribute type 17 has an invalid length. [ 528.132547][T15434] syzkaller1: entered promiscuous mode [ 528.132570][T15434] syzkaller1: entered allmulticast mode [ 528.693193][T15448] netlink: 'syz.1.2280': attribute type 1 has an invalid length. [ 528.777095][T15448] netlink: 'syz.1.2280': attribute type 4 has an invalid length. [ 528.804210][T15448] ip6tnl3: entered promiscuous mode [ 528.804232][T15448] ip6tnl3: entered allmulticast mode [ 529.260465][T15475] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2290'. [ 529.291388][T15474] Bluetooth: MGMT ver 1.23 [ 529.334168][T15474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2289'. [ 529.368485][T15485] netlink: 'syz.0.2292': attribute type 21 has an invalid length. [ 529.398540][T15485] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2292'. [ 529.398574][T15485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2292'. [ 529.398709][T15483] nbd3: detected capacity change from 0 to 63 [ 529.452370][T14558] block nbd3: Receive control failed (result -104) [ 529.626055][T15492] bridge1: left promiscuous mode [ 529.626306][T15492] tipc: Resetting bearer [ 529.626514][T15492] tipc: Resetting bearer [ 529.626771][T15492] bond5: left promiscuous mode [ 529.626990][T15492] hsr1: left promiscuous mode [ 529.627143][T15492] bond7: left promiscuous mode [ 529.627155][T15492] xfrm1: left promiscuous mode [ 529.661380][T15497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2299'. [ 530.294509][ T31] audit: type=1804 audit(1792361513.729:6): pid=15541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2311" name="/newroot/439/cgroup.controllers" dev="tmpfs" ino=2274 res=1 errno=0 [ 530.294641][ T31] audit: type=1800 audit(1792361513.729:7): pid=15541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2311" name="cgroup.controllers" dev="tmpfs" ino=2274 res=0 errno=0 [ 530.367653][T15511] netlink: 'syz.0.2301': attribute type 4 has an invalid length. [ 530.405599][ T44] lo speed is unknown, defaulting to 1000 [ 530.405621][ T44] syz0: Port: 1 Link DOWN [ 530.405715][ T44] lo speed is unknown, defaulting to 1000 [ 530.611587][T15553] v: renamed from veth0_vlan [ 530.834501][T15563] __nla_validate_parse: 4 callbacks suppressed [ 530.834520][T15563] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2318'. [ 530.865645][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2318'. [ 530.952567][T15570] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2317'. [ 531.005803][T15570] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2317'. [ 531.013640][T15561] sch_fq: defrate 8 ignored. [ 531.125044][T15583] syzkaller0: MTU not usable for tipc bearer [ 531.125082][T15583] tipc: Enabling of bearer rejected, failed to enable media [ 531.139467][T15584] syzkaller0: MTU not usable for tipc bearer [ 531.139503][T15584] tipc: Enabling of bearer rejected, failed to enable media [ 531.198931][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 531.199083][ C0] net_ratelimit: 71 callbacks suppressed [ 531.199097][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 531.255973][T15583] syzkaller0: mtu less than device minimum [ 531.278482][T15597] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2323'. [ 532.084251][T15653] sctp: [Deprecated]: syz.3.2343 (pid 15653) Use of int in max_burst socket option. [ 532.084251][T15653] Use struct sctp_assoc_value instead [ 532.211812][T15661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2337'. [ 532.224996][ T5281] v: left promiscuous mode [ 532.238836][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 532.281369][ T44] v: entered promiscuous mode [ 532.345943][T15656] netlink: 'syz.1.2335': attribute type 1 has an invalid length. [ 532.357905][T15662] netlink: 'syz.0.2336': attribute type 1 has an invalid length. [ 532.372127][T15667] netlink: 'syz.0.2336': attribute type 10 has an invalid length. [ 532.372156][T15667] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2336'. [ 532.536665][T15662] bond13: option mode: invalid value (13) [ 532.550410][T15662] bond13 (unregistering): Released all slaves [ 532.662132][T15687] netlink: 'syz.3.2341': attribute type 10 has an invalid length. [ 532.662154][T15687] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2341'. [ 532.718461][T15662] netlink: 'syz.0.2336': attribute type 1 has an invalid length. [ 532.773129][T15667] dummy0: entered promiscuous mode [ 532.887884][T15662] bond13: option mode: invalid value (13) [ 532.892269][T15662] bond13 (unregistering): Released all slaves [ 532.936585][T15702] xt_hashlimit: size too large, truncated to 1048576 [ 533.182426][T15687] tipc: Enabling of bearer rejected, failed to enable media [ 533.278840][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 533.385282][T15725] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2349'. [ 533.626911][T15735] bridge_slave_1: Caught tx_queue_len zero misconfig [ 533.626938][T15735] sch_fq: defrate 8 ignored. [ 533.666892][T15740] sch_fq: defrate 8 ignored. [ 533.685430][T14558] Bluetooth: hci3: command 0x0406 tx timeout [ 533.731256][T15737] netlink: 'syz.2.2353': attribute type 1 has an invalid length. [ 533.731278][T15737] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2353'. [ 533.783624][T15737] netlink: 'syz.2.2353': attribute type 1 has an invalid length. [ 533.937907][T15753] netlink: 'syz.1.2356': attribute type 12 has an invalid length. [ 533.938548][T15753] [ 533.948734][T15753] ====================================================== [ 533.955765][T15753] WARNING: possible circular locking dependency detected [ 533.962819][T15753] syzkaller #0 Not tainted [ 533.967261][T15753] ------------------------------------------------------ [ 533.974286][T15753] syz.1.2356/15753 is trying to acquire lock: [ 533.980365][T15753] ffffffff8fe903a0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x61/0x600 [ 533.989698][T15753] [ 533.989698][T15753] but task is already holding lock: [ 533.997072][T15753] ffff88807c5f1530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xaf0 [ 534.006328][T15753] [ 534.006328][T15753] which lock already depends on the new lock. [ 534.006328][T15753] [ 534.016740][T15753] [ 534.016740][T15753] the existing dependency chain (in reverse order) is: [ 534.025770][T15753] [ 534.025770][T15753] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 534.033366][T15753] __mutex_lock+0x19d/0x1550 [ 534.038501][T15753] __ipv6_dev_mc_inc+0x4e/0xaf0 [ 534.043870][T15753] __ipv6_sock_mc_join+0x511/0x830 [ 534.049518][T15753] do_ipv6_mcast_group_source+0x3df/0x4c0 [ 534.055754][T15753] do_ipv6_setsockopt+0x17a7/0x2960 [ 534.061466][T15753] ipv6_setsockopt+0x59/0x170 [ 534.066658][T15753] do_sock_setsockopt+0x17c/0x1b0 [ 534.072206][T15753] __x64_sys_setsockopt+0x13d/0x1b0 [ 534.077930][T15753] do_syscall_64+0x166/0x520 [ 534.083040][T15753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.089455][T15753] [ 534.089455][T15753] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 534.097191][T15753] lock_sock_nested+0x41/0x100 [ 534.102485][T15753] inet_shutdown+0x6a/0x390 [ 534.107530][T15753] nbd_mark_nsock_dead+0x2cb/0x550 [ 534.113165][T15753] sock_shutdown+0x15e/0x260 [ 534.118270][T15753] nbd_clear_sock+0x24/0x170 [ 534.123385][T15753] nbd_config_put+0x477/0x7e0 [ 534.128578][T15753] nbd_genl_connect+0x19b8/0x1cd0 [ 534.134155][T15753] genl_family_rcv_msg_doit+0x233/0x340 [ 534.140221][T15753] genl_rcv_msg+0x614/0x7a0 [ 534.145244][T15753] netlink_rcv_skb+0x226/0x4a0 [ 534.150524][T15753] genl_rcv+0x28/0x40 [ 534.155025][T15753] netlink_unicast+0x8ef/0xa80 [ 534.160309][T15753] netlink_sendmsg+0x813/0xb40 [ 534.165603][T15753] sock_sendmsg_nosec+0x14e/0x190 [ 534.171148][T15753] ____sys_sendmsg+0x54e/0x850 [ 534.176433][T15753] ___sys_sendmsg+0x2a5/0x360 [ 534.181644][T15753] __x64_sys_sendmsg+0x1b1/0x290 [ 534.187106][T15753] do_syscall_64+0x166/0x520 [ 534.192235][T15753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.198651][T15753] [ 534.198651][T15753] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 534.206294][T15753] __mutex_lock+0x19d/0x1550 [ 534.211418][T15753] nbd_queue_rq+0x373/0xff0 [ 534.216463][T15753] blk_mq_dispatch_rq_list+0x499/0x1990 [ 534.222546][T15753] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 534.229406][T15753] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 534.235909][T15753] blk_mq_run_work_fn+0x16c/0x300 [ 534.241458][T15753] process_scheduled_works+0xc3d/0x1630 [ 534.247536][T15753] worker_thread+0xa47/0xfb0 [ 534.252664][T15753] kthread+0x38b/0x480 [ 534.257251][T15753] ret_from_fork+0x514/0xb70 [ 534.262363][T15753] ret_from_fork_asm+0x1a/0x30 [ 534.267652][T15753] [ 534.267652][T15753] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 534.274860][T15753] __mutex_lock+0x19d/0x1550 [ 534.279978][T15753] nbd_queue_rq+0xc1/0xff0 [ 534.284931][T15753] blk_mq_dispatch_rq_list+0x499/0x1990 [ 534.291096][T15753] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 534.297955][T15753] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 534.304460][T15753] blk_mq_run_work_fn+0x16c/0x300 [ 534.310005][T15753] process_scheduled_works+0xc3d/0x1630 [ 534.316077][T15753] worker_thread+0xa47/0xfb0 [ 534.321188][T15753] kthread+0x38b/0x480 [ 534.325763][T15753] ret_from_fork+0x514/0xb70 [ 534.330867][T15753] ret_from_fork_asm+0x1a/0x30 [ 534.336150][T15753] [ 534.336150][T15753] -> #3 (set->srcu){.+.+}-{0:0}: [ 534.343265][T15753] __synchronize_srcu+0xc9/0x2f0 [ 534.348745][T15753] elevator_switch+0x1e8/0x7b0 [ 534.354030][T15753] elevator_change+0x2fa/0x480 [ 534.359312][T15753] elevator_set_default+0x375/0x440 [ 534.365022][T15753] blk_register_queue+0x3f3/0x4e0 [ 534.370564][T15753] __add_disk+0x6b8/0xdb0 [ 534.375403][T15753] add_disk_fwnode+0x100/0x3a0 [ 534.380688][T15753] nbd_dev_add+0x733/0xb60 [ 534.385614][T15753] nbd_init+0x168/0x1f0 [ 534.390301][T15753] do_one_initcall+0x250/0x870 [ 534.395588][T15753] do_initcall_level+0x10a/0x1a0 [ 534.401047][T15753] do_initcalls+0x59/0xa0 [ 534.405892][T15753] kernel_init_freeable+0x29d/0x3e0 [ 534.411604][T15753] kernel_init+0x22/0x1d0 [ 534.416441][T15753] ret_from_fork+0x514/0xb70 [ 534.421543][T15753] ret_from_fork_asm+0x1a/0x30 [ 534.426860][T15753] [ 534.426860][T15753] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 534.434665][T15753] __mutex_lock+0x19d/0x1550 [ 534.439780][T15753] elevator_change+0x1af/0x480 [ 534.445088][T15753] elevator_set_none+0xb5/0x140 [ 534.450462][T15753] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 534.456787][T15753] nbd_start_device+0x189/0xb30 [ 534.462156][T15753] nbd_genl_connect+0x167d/0x1cd0 [ 534.467695][T15753] genl_family_rcv_msg_doit+0x233/0x340 [ 534.473851][T15753] genl_rcv_msg+0x614/0x7a0 [ 534.478900][T15753] netlink_rcv_skb+0x226/0x4a0 [ 534.484218][T15753] genl_rcv+0x28/0x40 [ 534.488721][T15753] netlink_unicast+0x8ef/0xa80 [ 534.494029][T15753] netlink_sendmsg+0x813/0xb40 [ 534.499327][T15753] sock_sendmsg_nosec+0x14e/0x190 [ 534.505129][T15753] ____sys_sendmsg+0x54e/0x850 [ 534.510412][T15753] ___sys_sendmsg+0x2a5/0x360 [ 534.515612][T15753] __x64_sys_sendmsg+0x1b1/0x290 [ 534.521159][T15753] do_syscall_64+0x166/0x520 [ 534.526268][T15753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.532674][T15753] [ 534.532674][T15753] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 534.541284][T15753] blk_alloc_queue+0x544/0x690 [ 534.546586][T15753] __blk_mq_alloc_disk+0x194/0x390 [ 534.552224][T15753] nbd_dev_add+0x494/0xb60 [ 534.557155][T15753] nbd_init+0x168/0x1f0 [ 534.561827][T15753] do_one_initcall+0x250/0x870 [ 534.567192][T15753] do_initcall_level+0x10a/0x1a0 [ 534.572645][T15753] do_initcalls+0x59/0xa0 [ 534.577493][T15753] kernel_init_freeable+0x29d/0x3e0 [ 534.583213][T15753] kernel_init+0x22/0x1d0 [ 534.588052][T15753] ret_from_fork+0x514/0xb70 [ 534.593160][T15753] ret_from_fork_asm+0x1a/0x30 [ 534.598454][T15753] [ 534.598454][T15753] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 534.605657][T15753] __lock_acquire+0x164c/0x2de0 [ 534.611035][T15753] lock_acquire+0x115/0x350 [ 534.616047][T15753] fs_reclaim_acquire+0x71/0x100 [ 534.621526][T15753] __kmalloc_cache_noprof+0x61/0x600 [ 534.627330][T15753] __ipv6_dev_mc_inc+0x447/0xaf0 [ 534.632785][T15753] pndisc_constructor+0xe0/0x150 [ 534.638247][T15753] pneigh_create+0x253/0x4e0 [ 534.643352][T15753] neigh_add+0x77a/0x1090 [ 534.648202][T15753] rtnetlink_rcv_msg+0x7b9/0xc00 [ 534.653653][T15753] netlink_rcv_skb+0x226/0x4a0 [ 534.658933][T15753] netlink_unicast+0x8ef/0xa80 [ 534.664211][T15753] netlink_sendmsg+0x813/0xb40 [ 534.669482][T15753] sock_sendmsg_nosec+0x14e/0x190 [ 534.675020][T15753] sock_write_iter+0x2de/0x3e0 [ 534.680320][T15753] vfs_write+0x612/0xba0 [ 534.685088][T15753] ksys_write+0x150/0x270 [ 534.689940][T15753] do_syscall_64+0x166/0x520 [ 534.695053][T15753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.701465][T15753] [ 534.701465][T15753] other info that might help us debug this: [ 534.701465][T15753] [ 534.711693][T15753] Chain exists of: [ 534.711693][T15753] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 534.711693][T15753] [ 534.724389][T15753] Possible unsafe locking scenario: [ 534.724389][T15753] [ 534.731833][T15753] CPU0 CPU1 [ 534.737187][T15753] ---- ---- [ 534.742545][T15753] lock(&idev->mc_lock); [ 534.746869][T15753] lock(sk_lock-AF_INET6); [ 534.753877][T15753] lock(&idev->mc_lock); [ 534.760715][T15753] lock(fs_reclaim); [ 534.764689][T15753] [ 534.764689][T15753] *** DEADLOCK *** [ 534.764689][T15753] [ 534.772849][T15753] locks held by syz.1.2356/15753: 3, last CPU#0: [ 534.779170][T15753] #0: ffffffff9125b7e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 534.788587][T15753] #1: ffff888023f8d3f8 (&tbl->phash_lock){+.+.}-{4:4}, at: pneigh_create+0x49/0x4e0 [ 534.798207][T15753] #2: ffff88807c5f1530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xaf0 [ 534.807876][T15753] [ 534.807876][T15753] stack backtrace: [ 534.813770][T15753] CPU: 0 UID: 0 PID: 15753 Comm: syz.1.2356 Not tainted syzkaller #0 PREEMPT(full) [ 534.823123][T15753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 534.833185][T15753] Call Trace: [ 534.836457][T15753] [ 534.839385][T15753] dump_stack_lvl+0xe8/0x150 [ 534.843983][T15753] print_circular_bug+0x2e2/0x300 [ 534.849019][T15753] check_noncircular+0x12f/0x150 [ 534.853949][T15753] __lock_acquire+0x164c/0x2de0 [ 534.858789][T15753] ? __pfx___mutex_trylock_common+0x10/0x10 [ 534.864671][T15753] ? rcu_is_watching+0x16/0xb0 [ 534.869422][T15753] ? trace_contention_end+0x3d/0x140 [ 534.874697][T15753] ? __mutex_lock+0x30b/0x1550 [ 534.879449][T15753] lock_acquire+0x115/0x350 [ 534.883936][T15753] ? __kmalloc_cache_noprof+0x61/0x600 [ 534.889390][T15753] ? __pfx___mutex_lock+0x10/0x10 [ 534.894421][T15753] fs_reclaim_acquire+0x71/0x100 [ 534.899352][T15753] ? __kmalloc_cache_noprof+0x61/0x600 [ 534.904800][T15753] __kmalloc_cache_noprof+0x61/0x600 [ 534.910073][T15753] ? __ipv6_dev_mc_inc+0x447/0xaf0 [ 534.915185][T15753] ? __ipv6_dev_mc_inc+0x447/0xaf0 [ 534.920287][T15753] __ipv6_dev_mc_inc+0x447/0xaf0 [ 534.925220][T15753] pndisc_constructor+0xe0/0x150 [ 534.930145][T15753] ? __pfx_pndisc_constructor+0x10/0x10 [ 534.935679][T15753] ? __kmalloc_noprof+0x1ab/0x720 [ 534.940696][T15753] ? pneigh_create+0x12c/0x4e0 [ 534.945454][T15753] ? pneigh_create+0x148/0x4e0 [ 534.950210][T15753] pneigh_create+0x253/0x4e0 [ 534.954791][T15753] neigh_add+0x77a/0x1090 [ 534.959114][T15753] ? __pfx_neigh_add+0x10/0x10 [ 534.963876][T15753] ? __pfx_neigh_add+0x10/0x10 [ 534.968649][T15753] rtnetlink_rcv_msg+0x7b9/0xc00 [ 534.973586][T15753] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 534.978687][T15753] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 534.984143][T15753] ? __copy_skb_header+0xa3/0x4a0 [ 534.989180][T15753] netlink_rcv_skb+0x226/0x4a0 [ 534.993979][T15753] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 534.999432][T15753] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 535.004707][T15753] ? netlink_deliver_tap+0x2e/0x1b0 [ 535.009889][T15753] ? netlink_deliver_tap+0x2e/0x1b0 [ 535.015075][T15753] netlink_unicast+0x8ef/0xa80 [ 535.019842][T15753] netlink_sendmsg+0x813/0xb40 [ 535.024598][T15753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.029873][T15753] ? apparmor_socket_sendmsg+0x98/0x360 [ 535.035409][T15753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.040769][T15753] sock_sendmsg_nosec+0x14e/0x190 [ 535.045791][T15753] sock_write_iter+0x2de/0x3e0 [ 535.050551][T15753] ? __pfx_sock_write_iter+0x10/0x10 [ 535.055834][T15753] ? bpf_lsm_file_permission+0x9/0x20 [ 535.061199][T15753] ? security_file_permission+0x75/0x260 [ 535.066823][T15753] vfs_write+0x612/0xba0 [ 535.071053][T15753] ? __pfx_vfs_write+0x10/0x10 [ 535.075809][T15753] ? __fget_files+0x2a/0x420 [ 535.080394][T15753] ksys_write+0x150/0x270 [ 535.084713][T15753] ? __pfx_ksys_write+0x10/0x10 [ 535.089554][T15753] do_syscall_64+0x166/0x520 [ 535.094147][T15753] ? trace_irq_disable+0x3b/0x140 [ 535.099163][T15753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.105218][T15753] ? clear_bhb_loop+0x70/0xc0 [ 535.109881][T15753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.115762][T15753] RIP: 0033:0x7f4c4b99e559 [ 535.120165][T15753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.139757][T15753] RSP: 002b:00007f4c4c908028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 535.148167][T15753] RAX: ffffffffffffffda RBX: 00007f4c4bc25fa0 RCX: 00007f4c4b99e559 [ 535.156125][T15753] RDX: 00000000000000fc RSI: 00002000000001c0 RDI: 0000000000000007 [ 535.164082][T15753] RBP: 00007f4c4ba35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 535.172039][T15753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.179999][T15753] R13: 00007f4c4bc26038 R14: 00007f4c4bc25fa0 R15: 00007ffd11869d88 [ 535.187967][T15753] [ 535.191966][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 535.759202][T14558] Bluetooth: hci3: command 0x0406 tx timeout [ 536.239331][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 537.279073][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 537.839236][T14558] Bluetooth: hci3: command 0x0406 tx timeout [ 538.319090][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 539.359179][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 539.519424][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 539.919115][T14558] Bluetooth: hci3: command 0x0406 tx timeout [ 540.399107][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 541.439318][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 541.998980][T14558] Bluetooth: hci3: command 0x0406 tx timeout [ 542.479081][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 543.518883][ C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available