last executing test programs: 9.185337019s ago: executing program 2 (id=5584): unshare(0x8040480) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$inet6(0xa, 0x1, 0x100) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f00000005c0)={0xa, 0x4e1f, 0x6, @loopback, 0xa}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x80d4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9f, 0x10, 0x2, 0x88, 0x9c4}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x10) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000080)=0x10000, 0x4) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r4, @ANYRES16=r3, @ANYRES8, @ANYRESHEX=r6, @ANYRESDEC=r7, @ANYRES8=r0], 0x10448) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff, 0x0, 0x2000000000000}, {}, 0x70bd2d, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xfffffe82, 0x60, "210466d38547aa140db90100000000c542cb7a7db03db53320d36967b88848c18519f6516997b7a358ea37f391a3ef0acba616c503e48d50875d8ad2d60e2afd5b52c64b586f6dd9f7787bb65879848c53dc6f70922e9aaa5b97e41ae8875eb53423b28738991e65b3af6a0fe946af1a3c1af71e1637f2e6c025f181b69b16a65c193b70a3b8104e155cf41db9a1067ec9007940bda5fb6d686a793f426f739bb26a99769b0c5192ba59d4d68f66af00"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in6=@rand_addr=' \x01\x00'}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x800}, 0x800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001100), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003380)={&(0x7f0000000000)=ANY=[@ANYBLOB="bcd0ea4c", @ANYRES16=r9, @ANYBLOB="010027bd7000fddbdf2509000000380003801400020076657468305f746f5f626f6e6400000082fc010002000000080003000300000008000500e0000001060007004e220000"], 0x4c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x24000804) 9.183013571s ago: executing program 2 (id=5587): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001340)=@framed={{}, [@printk={@lx, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x16) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000180)="bc94be4322e4a40e86322b58d6a6db00fd75070b15a63fa7aebea91a98c2c925bbde9dd2ec18bf6ac8b7b24ee1409ee6dbf7ca5c52be51c4f9806d6844", &(0x7f00000001c0)=""/90}, 0x20) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000006c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/4096, 0x1000}, 0x100}], 0x1, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e28, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @private=0xa010102}, @in6={0xa, 0x4e20, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, @in6={0xa, 0x4e24, 0x6, @loopback, 0x3}, @in6={0xa, 0x4e24, 0xf, @loopback, 0x1}], 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_DST={0x8, 0x1, @local}, @RTA_IIF={0x8}]}, 0x2c}}, 0x20000050) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000000000080000", 0x1c) write$rfkill(r6, &(0x7f00000002c0)={0x0, 0x8, 0x2, 0x1, 0x1}, 0x8) bind$packet(r5, &(0x7f0000000240)={0x11, 0xf8, 0x0, 0x1, 0x10, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[], 0xfdef) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.033040457s ago: executing program 2 (id=5597): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xc, 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f8ffffff000000000000000085000000bc000000850000005000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="14000200fe8000000000"], 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r4 = accept(r2, 0x0, 0x0) shutdown(r4, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f, 0x61]}}, 0x0, 0x35}, 0x28) 7.114894637s ago: executing program 2 (id=5613): r0 = socket(0x10, 0x803, 0x0) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000300), 0x9) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0xfffffff5, {0x0, 0x0, 0x4a00, 0x0, 0x2844a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getnetconf={0x14, 0x52, 0x200, 0x70bd27, 0x25dfdbfa, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x811}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r2, {0x6}}}, 0x24}}, 0x0) 6.141782584s ago: executing program 2 (id=5621): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0xb, &(0x7f0000000040)=""/45, &(0x7f0000000080)=0x2d) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0xfa, 0xffffffff, 0x54, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x8000, 0xf, 0x1}}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x13, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xffff}, @call={0x85, 0x0, 0x0, 0x64}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 5.996671811s ago: executing program 2 (id=5622): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private=0xa010100, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x10000, 0x3, 0x1, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xa00) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="10000180"], 0x28}}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0x7, r6}, 0xc) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x4886) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, 0xc80, 0x1c00f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044081}, 0x400c040) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1d0, r7, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20002081}, 0x4010) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r11, @ANYBLOB="080004"], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002) (async) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r11, @ANYBLOB="080004"], 0x4c}, 0x1, 0x0, 0x0, 0x280c1}, 0x8000002) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_IFALIAS={0x14, 0x14, 'veth0\x00'}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x2c, r7, 0xa25, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4850}, 0x44001) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x2c, r7, 0xa25, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4850}, 0x44001) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@restrict={0xe, 0x0, 0x0, 0xb, 0x1}, @fwd={0x7}, @restrict={0x3, 0x0, 0x0, 0xb, 0x1}, @var={0xa, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x2e, 0x30]}}, &(0x7f00000002c0)=""/124, 0x50, 0x7c, 0x0, 0xd6e}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x10, &(0x7f0000000180)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @generic={0x3d, 0xf, 0x1, 0x4, 0x3}], &(0x7f0000000200)='GPL\x00', 0x9b, 0x0, 0x0, 0x41100, 0x22, '\x00', r12, 0x0, r13, 0x8, &(0x7f0000000580)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x8, 0x1ff, 0x4}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000600)=[{0x4, 0x3, 0x2, 0x2}, {0x3, 0x4, 0x1, 0x8}, {0x0, 0x3, 0x8, 0x5}, {0x1, 0x3, 0xb, 0x4}]}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x10, &(0x7f0000000180)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @generic={0x3d, 0xf, 0x1, 0x4, 0x3}], &(0x7f0000000200)='GPL\x00', 0x9b, 0x0, 0x0, 0x41100, 0x22, '\x00', r12, 0x0, r13, 0x8, &(0x7f0000000580)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x8, 0x1ff, 0x4}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000600)=[{0x4, 0x3, 0x2, 0x2}, {0x3, 0x4, 0x1, 0x8}, {0x0, 0x3, 0x8, 0x5}, {0x1, 0x3, 0xb, 0x4}]}, 0x94) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10000) 2.317660822s ago: executing program 1 (id=5664): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000007000000070000000020000000400000000e3ff01050000000300000005000093010004000a000000ffff00000600000002000000ff0f00000500000004000000400000000300000031e28cab08f3182c81000000100002007304000001000000060000000000000e0400000000630000000000000000000d"], 0x0, 0x8a, 0x0, 0x1, 0x6}, 0x28) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="ee", 0x48}], 0x1}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000002840)={{r0, &(0x7f0000000000)='\'\x00', 0x80, &(0x7f0000000040)={@align=0x6, {0x0, 0x6, 0x2, 0x6}}, 0x4, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x22}, {[0x2b9, 0x9, 0x7, 0x7]}, 0x0, 0x1000, &(0x7f0000001840)=""/4096}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000028c0)={@private1={0xfc, 0x1, '\x00', 0x4}, 0x24, 0x0, 0xff, 0x3, 0x400, 0x5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000b4b2000000000000000000008510000001000000950000000000000085000000ad00000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x9c, &(0x7f0000001300)=""/156, 0x41000, 0xa}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000007000000070000000020000000400000000e3ff01050000000300000005000093010004000a000000ffff00000600000002000000ff0f00000500000004000000400000000300000031e28cab08f3182c81000000100002007304000001000000060000000000000e0400000000630000000000000000000d"], 0x0, 0x8a, 0x0, 0x1, 0x6}, 0x28) (async) socket$kcm(0x11, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="ee", 0x48}], 0x1}, 0x0) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000002840)={{r0, &(0x7f0000000000)='\'\x00', 0x80, &(0x7f0000000040)={@align=0x6, {0x0, 0x6, 0x2, 0x6}}, 0x4, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x22}, {[0x2b9, 0x9, 0x7, 0x7]}, 0x0, 0x1000, &(0x7f0000001840)=""/4096}) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000028c0)={@private1={0xfc, 0x1, '\x00', 0x4}, 0x24, 0x0, 0xff, 0x3, 0x400, 0x5}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000b4b2000000000000000000008510000001000000950000000000000085000000ad00000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x9c, &(0x7f0000001300)=""/156, 0x41000, 0xa}, 0x94) (async) 2.296438312s ago: executing program 0 (id=5665): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x20, 0x1, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040842}, 0x4000000) listen(r1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000001240)=""/181, &(0x7f0000001340)=0xb5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/163, 0xfeb2}], 0x2) write$cgroup_int(r3, &(0x7f0000000140), 0xfffffdef) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000300)={0x0, 0xa1, &(0x7f0000000040)={&(0x7f00000005c0)={0x2c, r5, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4004004) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="980000001000010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001800c0003007fff"], 0x98}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options]}, 0x24}, 0x1, 0x0, 0x0, 0x408d1}, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) close(0x4) close(r1) 2.146654254s ago: executing program 4 (id=5667): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0x30, 0x1ff}, 0x8) sendto$inet6(r1, &(0x7f00000004c0)="d7", 0x1, 0x8040, &(0x7f0000000000)={0xa, 0x0, 0x4, @private1, 0x8}, 0x1c) (async) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000002040)=""/4087, &(0x7f00000001c0)=0xff7) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 2.075113977s ago: executing program 1 (id=5668): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={r1, &(0x7f00000000c0)='nl80211\x00', 0x509440, &(0x7f0000000140)={@_ha_fsid={[0x8, 0x9]}, {0x3, 0x3ff, 0x9ac7, 0x8}}, 0x81, &(0x7f00000001c0), &(0x7f0000000200)=0x8}) accept4(r0, &(0x7f0000000300)=@xdp, &(0x7f0000000380)=0x80, 0x80800) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_channels={0x3c, 0x1, 0x4, 0x6dd1, 0x4000212a, 0x40000004, 0x6, 0x2, 0x1}}) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xffffffffffffff5a) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r4, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x24041055}, 0x4000000) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2.000196195s ago: executing program 4 (id=5670): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@generic={0x2, 0x6, 0xf0}) readv(0xffffffffffffffff, &(0x7f0000001240)=[{0x0}, {&(0x7f0000000e40)=""/199, 0xc7}, {0x0}], 0x3) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x0, 0x3, 0x10001, 0x8}, 0x4b}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00073c201400004000ff8400000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r1, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 1.923581513s ago: executing program 0 (id=5671): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x28, '\x00', 0x0, 0xe}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r6}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r10, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1, r9, 0x0, r10}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000009c0)={&(0x7f0000000300), 0xc, &(0x7f0000000980)={&(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="01002cbd7000fbdbdf250100000008000100", @ANYRESOCT=r9, @ANYBLOB="0401028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400080000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365004c000100240001006c625f74785f6d6574686f64000000000a000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r2, @ANYBLOB="f800028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000010008000100", @ANYRES32=r6, @ANYBLOB="7800028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400050000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=r2, @ANYRESHEX=r4], 0x2e4}, 0x1, 0x0, 0x0, 0x4095}, 0x4801) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010030bd7000fedbdf350a000000200003"], 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x24040014) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRESDEC=0x0, @ANYRES64=r13, @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x48b1) 1.874750463s ago: executing program 3 (id=5672): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000000000000c00000007"], 0x31) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x18, 0x32, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x18044) 1.816818985s ago: executing program 1 (id=5673): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x40}, 0x20000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) pselect6(0x40, &(0x7f0000000040)={0x200, 0x80, 0x2, 0x400, 0xc03, 0xffff, 0x7, 0x38d}, &(0x7f0000000080)={0xfffffffffffffff8, 0x25000000, 0x0, 0x3, 0x0, 0x7, 0x3, 0xea5}, &(0x7f00000000c0)={0x3ff, 0xffffffffffffffff, 0xd, 0x9, 0x80, 0x5, 0xa29, 0xc7a4}, &(0x7f0000000100), &(0x7f00000001c0)={&(0x7f0000000140)={[0xfffffffffffffffa]}, 0x8}) getsockname(r0, &(0x7f0000000240)=@hci, &(0x7f00000002c0)=0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001180)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x0, 0xd}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9702", 0x10a8, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x11}, @routing={0x88, 0xe, 0x1, 0x6, 0x0, [@private0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @mcast1, @remote, @rand_addr=' \x01\x00']}, @srh={0x3b, 0x12, 0x4, 0x9, 0x46, 0x10, 0x0, [@private1, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @empty]}], @param_prob={0x4, 0x1, 0x0, 0x2000068, {0xe, 0x6, '\x00', 0x5, 0x87, 0x1, @local, @private2={0xfc, 0x2, '\x00', 0x1}, [], "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"}}}}}}, 0x10de) 1.77838017s ago: executing program 4 (id=5674): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0x5f456000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) unshare(0x24020400) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000100)={0x2, 0xffdf, @private=0xa010100}, 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@migrate={0x164, 0x21, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in=@multicast1, @in=@rand_addr=0x64010100, 0x4e22, 0x8001, 0x7, 0x0, 0xa, 0x80, 0x80, 0x3b}, 0x6e6bb3, 0x1}, [@migrate={0xe8, 0x11, [{@in6=@empty, @in=@loopback, @in=@multicast1, @in6=@private0, 0x2b, 0x3, 0x0, 0x34ff, 0x2, 0xa}, {@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x19}, @in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0xff, 0x3, 0x0, 0x3501, 0x5, 0x2}, {@in=@remote, @in=@multicast1, @in=@multicast2, @in6=@local, 0x2b, 0x0, 0x0, 0x34ff, 0x2, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@remote, @in=@local, 0x0, 0x2}}]}, 0x164}, 0x1, 0x0, 0x0, 0x400c000}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.682098479s ago: executing program 3 (id=5675): syz_emit_ethernet(0x46, &(0x7f0000000600)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x67, 0x48, 0x0, 0x11, 0x0, @multicast1}, "341517c1b7df60c7"}}}}}, 0x0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8084}, 0x40400c4) 1.584395521s ago: executing program 3 (id=5676): r0 = socket$inet6(0xa, 0x3, 0x5) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x7}], 0x1, 0x0) (async) recvmsg(r2, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x8, 0x3, 0x12d8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1208, 0xffffffff, 0xffffffff, 0x1208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xfd}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x30, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x3b, 0x0, 0x0, 0x3}, 0x0, 0x1108, 0x1138, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x2, {0x8}}}, @common=@srh={{0x30}, {0x1, 0x4, 0x7, 0x3, 0x8001, 0x4000, 0x3004}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x1338) 1.488358872s ago: executing program 3 (id=5677): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendto$inet(r1, &(0x7f0000000080)=' ', 0x1, 0x24048003, 0x0, 0x0) r2 = accept4$tipc(r1, 0x0, 0x0, 0x800) unshare(0x20000400) unshare(0x4e060000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000000)=0xfffffebe) unshare(0x800) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000380), 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000280)={r3, 0x7fffffff, 0x0, 0x4}) setsockopt$inet6_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f0000001740)=@ccm_128={{0x303}, "9e3d2eafe32a6a16", "896997d5597d578185c990d24dcd6edd", "150a0699", "dded6354f42884cc"}, 0x28) socket$kcm(0x2, 0x3, 0x2) r5 = socket$kcm(0x10, 0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r7 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000017c0)}, 0x40841) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, &(0x7f0000000200)=0x10, 0xfffffdc8) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000018c0)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000040020000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r9, @ANYRES32=r0, @ANYRES16=r4, @ANYBLOB="b115af074577781a7e2e0b63f03f9c51907a69eb497c44f9c409672bf4f6724e0f9835b9b5cfccddb444a27c85287a638492781747d052f859fedef5ba24847a0d7e7ea2dfdb7c9f8076471aedf10211ac715d0dc311c5de2166bb0e8ded8304e076cab4bcdc936d35bac19518454cc0f2ad4b33d0ee6be07f9da8ec00bd32950c88d283774e00a3000f29113ec8ff7b8ea784bd1b2d04ee27e594bdbd897da81c2bc28aa5bb4c20a8f4b37b2798b351bdd06857328456fdddeec31ebaf5293c4d0efc730c07e1651fb3aee24610a162c1920cf39961fd"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4050) socket$inet_icmp(0x2, 0x2, 0x1) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000240)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40040) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r12, 0x11c, 0x3, &(0x7f0000000600)=""/176, &(0x7f0000000140)=0xb0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYRES8=r10, @ANYRESDEC=r6, @ANYRES64=r3, @ANYRES64=r5, @ANYRES64=r7, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRES8, @ANYBLOB="f714d0f525c1291e34994fec746ac7f02a7ac47eb785e1f28fed385587c8c0922f50587458a5e2956c285f94e3c494518439a79345598bac8c97605349219b707c15eb54d687695dd33ed42d055432e23fbdce66590866fa3c9da8"], 0x60}, 0x1, 0x0, 0x0, 0x400c004}, 0x20040010) 1.340085066s ago: executing program 0 (id=5678): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x800, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x1000003, 0x7, 0x9}, 0x10) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r0], 0x1c}}, 0x0) 1.12476442s ago: executing program 0 (id=5679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r1 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f00000001c0)={0x24, r3, 0xb04, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32) write$tun(r0, &(0x7f0000002300)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x0, 0xd}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ee9f02", 0x1ff, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x11}], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x50, 0x3, 0x6, 0x5665, [{0x19, 0xe, "640b4eb88822b4102cac0feec1070c0c49962320bcbf8b468e72f98c8fe277c9d1ffdcd3d0e30bc1552a4355c07e81975710d7a16eb426ac77a83208dd179d6294fca3fc797b366adce622a86b45ae1d5780686f2702ab67e6f1ecf14fcc6e16e35390cf7ccfd65269e56775d00f42a0"}, {0x4, 0x0, "8adcd6"}, {0x1f, 0x1c, "1298d70056a53bd8b061350e2b964c878bd959f4a96e36052ab5885b8868e0080a56e8b90f613dfcde3f50cccfd435d9bad54ad118270c8505296188f9fb60f51614939a2d6c76ff8801fba593fb0f4478ba341bd9b65d96b8feb04bdd374fc97761d67257699915cae1e22f05934eeaacb2f1fe8c7cdc912e011ff981c174bf88edba40ff3784f84cc9ee2efc03025a00b77743318958f26aadc2511fa779417b32b2791dcebe16509b156a534c5452f09b640f21d673b9251162f9124513f535326217389bbb6f916c9099fa4d9d4be0502a2768f603e6c8cf94061f43348e22f3b8"}, {0x2, 0x10, "0fbd882a26d8ca00b28c20f2bfb4e95ffad326e1a57ba2e0a210228bb2f777ea5809d8ef2ea3bc9fb2d9137b9664c6f274234af6770b0240b68d73e6288d82604bcf07d449bec71db016093f3bb67c87bf371cb5714bfbd2c11ca0879417be2c5edc57830c992c299c0cae48a046edc1bed6d1fef7eecf543a223657aebb7a84af36d9"}, {0x18, 0x0, "be79fca3"}]}}}}}, 0x235) (async, rerun: 32) sendmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="65ed4432cc9114a11ffc934085ca8ba3e8203da1b3eb60fe1d57e5e5d32d432f4701321a833e269f89d1a96fadaab5443326b6f46a00f645def0abcb6819ee9fbf4d4ad465acd589bab22070558888f3435048165fb3b7121a4ef1b26c57e5b357d7aca7ed772ace7290dd01d87fdd800778b2cac2400f54ae8aeedaf407f4c4701692d4984f0a971a9e5c2b49c218646a42593961c468ed1f91734d80f7d038b0eba85b7a200ede95eaf6a8698343133b2da7baa1a5", 0xb6}, {&(0x7f0000000240)="89d5cac2bfcaf593a104cc69a633df051c3dd7deae44a0685d59b588b9305d2f16faa5a88c54e6e79ac8946f515bd0da7eb836f809e516d3dc76ad08d7150cf0591cda85598196b362217c85ce68d730bcbf5fbefdd8e39efcba7e9e31f62b57535d756e76d2969064404cee46af10a63c6e6b61f4572a217c4fb71a868b969a5a0799f80f15c7775e5875eb6351d5eea40caba6bee1b4bb5b80d19ea85cf0a94d29212f0bc0d51b98ec5fc6e72ff47de0dd1d68677413", 0xb7}, {&(0x7f0000000300)="02635a4a866746aaf485e678f9bfe1d53d2b5363d481231e61ff9cf25f2d425e637fcb1ff66c07a5fa878e8a7198bb63f3bf198e3e3935b097f188159206b32a776b12fdf1d2729a7c395581eecf4d6cbcd2131121001e16e32d57ecf1", 0x5d}], 0x3, &(0x7f00000003c0)=[{0xd8, 0x10f, 0x10000, "f0ab98109e455974fb2693739e06dcf726c6e9a4aa607055d747a40116765317700db64b6cf4dd33ac203b51ed95476cd057eb403ea8cc8859a304f030669f7e965af1e343a9dca93e3c3e7ec43a27aad505876799cfa3be8027fe04aa07c2cd357f07babd7c8de16521d7ccd079ea31b04e9babe72993269cba37ccde183f7447a2008d4c63b2497bec3d8daeebbaafa9f6593a9f4a27e54d4c63c6b14aac97bc156570e04089fad35811b6589e3b2bac1f75d53f3d229842c42cef877aee3cb1ad"}, {0x98, 0x104, 0x1, "0f82cec2e0d2c2a7772ba98c2be81cefd63b6c6ab25a18ef96e07082af7373fb17d6896782172efde268bfabeef80aea211c5d080accca3691c0a303d99f54fdc6d12d3304d27262ae46948c99e0f396d615a8126f441eca6f4feac23d4c6a9aba67539eb571ec112cbfea35f60613ad5f3d00725cb8a9e4dbac8e76e0dbcfdfab3fe7"}, {0x60, 0x3a, 0x58f, "8f0e916fce1cd7eb2b7498ffe034fdb4edd8a011f5b4c395919ad1bf3eb2512afb80e4136f1730b5916b575979968bdbf02212445c7f2c7d59dea0ce4ab2fc25be51400d36a529e5fa378b89bace27a6"}, {0x40, 0x118, 0x101, "5fabae68b302a30a78eac1a28ff787e6d1d796455ca3f80c2e4ab56b6b45ff27d2afa60643e59e67ae4098a9d66b"}, {0xc8, 0x10b, 0xc, "bd72391d48b72ca4f95a7410956a3cc0438260b6e9e3ca50f8a7dc814a9f666e4c9655882daaa9d427e3883769e996f8918bf1ec80ca3c31d27bab691b5b3ce6b031c861215c5cba86c01ba936a00a714300224ebf094cd9336a9a51b5f8a44240d36d412903811c893ba19beb7f0451ecc472d45f6cc7d4e90348b5d57b14787d474002bb3d00f7ab51cc5ee6575c62a8a1c83dbb0d102b489996cbd8d054adbffd3eeb0e5b4aaafd2a5a867c0327a028082797"}, {0xe0, 0x0, 0xfff, "75cca37a5f8a8e65d6e973d756c0f32399194832416cfa3025999a64513eb55f1354c92cb2beb3aff0d5b9a445f8997bad68b5e7323cb5819b61b6eddcf7a24d8bc08f24b80c501c93fd1c20ffd534a8f5476d0d755a6d8543348520300b407cfd651aa37b16d351cbe6e38e2fc2b7297da1eb2f31bb21a457376556f94abb599f09b79a78abb25920a9b718d3ceb555d5461238e3d1d0d0b69d96a410b9b8396e2569e2f9ae0256c45486f75ac0c56f79d293104403a3d6194f0dcfcef05277b49a0b0761f94dbb6bc019f0c844c033"}, {0x78, 0x3a, 0x5, "b820fd9bc84874d560b373b11323d8a7d6973e3488fe919ba9cc61ef371989a86a417a30ab929e024101ec51c2745f7c33610325e54cbba0413c7a3fbe8b1ac3c214e84c74b6b82ab41af27f1f4c5b20197e78c056e615a5c020852c553e8be0f8cce8a277"}], 0x430}, 0x1) 968.89056ms ago: executing program 0 (id=5680): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xd, 0x2, 0x0, 0x8}}, @TCA_CT_ACTION={0x6, 0x3, 0x14}]}, {0x1f}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c0001800600060086dd"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) close(r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYRES32=r2], 0x70}, 0x1, 0x0, 0x0, 0x40008c4}, 0x40) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.events\x00', 0x275a, 0xfffe) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond_slave_0\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r7}) bind$packet(r5, &(0x7f00000000c0)={0x11, 0xe4, r7, 0x1, 0x4, 0x6, @broadcast}, 0x14) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000100)={r0, 0x6, 0x4, 0xffffffffffff0001}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x20, r11, 0x483, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r11, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xf64}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040804) 946.497111ms ago: executing program 4 (id=5681): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) write(r0, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000200000000000000080009000d000000", 0x24) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001500010025bd7000fbdbdf250a100000", @ANYRES32=0x0, @ANYBLOB="14000100000000000000000000002cff00000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x810) socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x21, @any, 0x0, 0x2}, 0xe) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) r3 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0xda, &(0x7f0000000f00)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0xa4, 0x2b, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x81}, {[@srh={0x0, 0x0, 0x4, 0x0, 0x6, 0x40, 0x86}], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "8a2e0b0ec46fadbd18834312e9385e5b91593453652ca34faa9af7e503cdd8a4", "c7d38cffe3874f77f421060f4ddfabe88f79f6a4c06e7f495ebd67c2b83bd11c9b2b5b6508ccf912ff63750351d69e6f", "a9b67a62f584fabf70acf4e004a87a4898ab17058c5d1c20e471b1ae", {"18904dfcb9386eca1bb9020b9c18d3e0", "e760555695aaf81ffd8de70c81ecf313"}}}}}}}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="57d2404c9667aa53c8d3f015392a3f5098835a10c7a0c0b6f1c2775d2e73eb2587ca4d7aa5996679b517be0bbff949ac37a0f2b0df2d3addb3702b15e843d5e945b7d498a6500db02413227a401b2f169ebbac4f3fec0215c29dbd48d7314f005fa785b5b48df19a6255c6e250"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r3, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x8000) 761.982352ms ago: executing program 0 (id=5682): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x15) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{&(0x7f0000000100)=@llc={0x1a, 0x304, 0x0, 0x5a, 0x67, 0xff, @remote}, 0x80, 0x0}}], 0x1, 0x4044000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, 0x0, &(0x7f0000000080)) socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001700000227bd70eda8081009af3f238e02fadbdf25fe000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000000) 644.858755ms ago: executing program 1 (id=5683): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x38, r1, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4c854}, 0x20044800) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34, 0x0, 0x1}, 0x28) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f0000000040)='\r\a', &(0x7f0000000100)=@tcp6=r3, 0x1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r4, &(0x7f0000000400), 0x0}, 0x20) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x22, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000100000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000010000000000b7120000020000007b8af8ff00000000bf2200ffffffb703000008000000b70400000200000085000000820000001811000000000000000000000000cb0a4c3438f0d0894adfe20db136bcd0ea4fd99580", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000085100000feffffff350306010800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000005c0)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0xb, &(0x7f0000000180)="43fc96a19a9093471160d923689acdf9e6194fa9e78b83d938b0d53960001aaa6e2dcbb6aafd1f1fafc5006e5ba3daed80f950dac397cfda3615a800d26b6fad76e113b85aece9bdf068b4c350e93076329818", 0x53) (async) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r5, 0x40106e8c, &(0x7f0000000040)=[0xc696, 0x6]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) 644.075882ms ago: executing program 4 (id=5684): mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000000c0)=0x101, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f00000005c0)={&(0x7f0000000200), 0xc, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="dc9e0000", @ANYRES16=r4, @ANYBLOB="00012dbd7000ffdbdf254d0000000800030000000000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e3000000000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000002900a800cdb955fa4b78a0bcf636858359a2e7c2aede40bd8ac653c8754731e0708a5f2f04ea816f3d000000"], 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002d00200000001ef540574773755e5e48dc7edb27394d97ad76e9d5a0bfc624177363d041a1d277a0385d27eae1b70fb6"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x400448e7, &(0x7f0000000080)) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000f702010100000000000000000500ab930800044000005932280002800600034000010000060003400005000004000180080001000a010100"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c00"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r8 = accept$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(r8, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x122}}, 0x0) write$rfkill(r1, 0x0, 0x0) getsockopt(r0, 0x5, 0x0, &(0x7f00000001c0)=""/158, &(0x7f0000000280)=0x9e) 493.310797ms ago: executing program 1 (id=5685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) unshare(0x20000400) (async) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400c000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe08}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x90}}, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r6, &(0x7f0000000140), 0x44, 0x24048005, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) recvfrom(r6, 0x0, 0x0, 0x10677, 0x0, 0x0) 389.228287ms ago: executing program 3 (id=5686): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f0000000240)={0xa, 0x4e21, 0x81, @ipv4={'\x00', '\xff\xff', @local}, 0x2000006}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0xcdeb}, 0x8000) r1 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000580)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r1}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@allocspi={0x1f8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x70bd25, 0x70bd26, 0x70bd29, 0x7}}, @sa={0xe4, 0x6, {{@in6=@mcast2, @in6=@private2, 0x4e24, 0x5, 0x4e22, 0x8175, 0x2, 0x80, 0x40, 0x16}, {@in=@multicast1, 0x4d2, 0xf7b07c621d3cd55b}, @in=@multicast1, {0x45, 0x1, 0x9, 0x9, 0x8, 0x8, 0xfffffffffffff800, 0x6}, {0x9, 0xc, 0x6}, {0x8, 0x3, 0x3}, 0x70bd2a, 0x3503, 0x2, 0x4, 0x6, 0x99}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f00000005c0), &(0x7f0000000600)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x10, @loopback}}}, 0x108) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r3}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000e0c3239c2a6e96ab705fd01135221f91ab5e80e7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) close(0x3) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854) sendmsg$NFT_MSG_GETCHAIN(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x701, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100a7c9124e000000000700000a2c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a3100000000140000001100010000000000000000000100000a8dbeac5388195b7eaaf9fb2217f3d9a1e20da8a1a52e38da109f470e12b14abbe6de80bf972c561999c8ac876a5fe6a205968efaf275e7ab55f87151dcb81444ca88d94b12c7b824ce546f075d1e477648b944a79dc7fcdea891dea37f6636f62059d915d32fe835d9688eea82465b71b0203ab5f7a94cc5be7bb0092680c244ca0000135d3e14675d37298140b7d3"], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) readv(r9, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/246, 0xf6}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRESOCT=r8, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r10) bpf$MAP_CREATE(0x400000000000000, &(0x7f0000000000)=@base={0x1d, 0x4, 0x2, 0x0, 0x201}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000780)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000640)={'dvmrp0\x00', {0x2, 0x4e22, @remote}}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 261.526448ms ago: executing program 1 (id=5687): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="100000001a0000082cbd6000fedbdf25"], 0x10}, {&(0x7f00000008c0)={0x10, 0x1e, 0x0, 0x70bd2d, 0x25dfdbfc}, 0x10}], 0x2, 0x0, 0x0, 0x4}, 0x40040) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2a0, 0x0, 0xb, 0x148, 0x0, 0x148, 0x208, 0x240, 0x240, 0x208, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0xe8, 0x130, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x4e24, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e24], [0x1, 0x0, 0x43, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x41, 0x0, 0x0, 0x0, 0xfc]}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xab, 0x6, 'syz1\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) 95.100085ms ago: executing program 3 (id=5688): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0xc, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000042}, 0xc0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x4090) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004cc0)={0x28, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0xd, 0x1, 0x0, 0x1, [@generic="1064598c3382549b51"]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 0s ago: executing program 4 (id=5689): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x17}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x8000fe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRESDEC, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000805f00000a4c0000000c0a010100000000000000000a0009000900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c00044000000000000000071400000011000100000000000027f056dda3dfa9006afb20b7ab12058b4decece69eccb9106cbd1f03eaa601c9f886d779fc18b7b4ae57b62717b7c1a982431d4e22fe4621df3e08ee9b5a66823ad568e5a8e2cc7070a733e141739f0146ab3992fabfe5cfc5fe440f8021325b3202a160f92222bb2ac6b907e03fc65b77e49a6ec64853e4de377d93"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x7) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x44, r5, 0x8, 0x70bd25, 0x1, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0xe}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x20000800) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 0 (id=5697): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) connect$inet(r1, &(0x7f0000000240)={0x2, 0x8, @loopback}, 0x10) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)}, 0x808c) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r8, 0x4004743c, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r11, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r10}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff, 0x5}, 0xffffffffffffff00) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r12, &(0x7f00000001c0), 0x0}, 0x20) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x30, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) kernel console output (not intermixed with test programs): nvalid length. [ 585.537937][T22541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4159'. [ 585.586469][T22538] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4160'. [ 585.809010][T22544] netlink: 'syz.1.4159': attribute type 5 has an invalid length. [ 585.829881][T22544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4159'. [ 585.872843][T22518] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.916319][T22518] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.067881][T22518] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.073434][T22555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4164'. [ 586.108316][T22518] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.158394][T22560] syzkaller0: entered promiscuous mode [ 586.168323][T22560] syzkaller0: entered allmulticast mode [ 586.273642][T22518] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.287604][T22518] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.457503][T22518] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.494027][T22518] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.526642][T22571] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.551486][T22571] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.781883][T22583] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4171'. [ 586.805220][T22571] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.816388][T22571] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.919809][T22592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4173'. [ 586.952079][T14296] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.963225][T14296] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.979056][T22571] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.990460][T22571] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.026626][T22595] netlink: 'syz.1.4173': attribute type 5 has an invalid length. [ 587.040261][T22595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4173'. [ 587.074560][T14296] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.086312][T14296] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.112420][T22571] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 587.135270][T22571] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.210881][ T1326] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.226892][ T1326] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.247726][T22599] netlink: 'syz.1.4176': attribute type 4 has an invalid length. [ 587.278088][ T1326] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.287459][ T1326] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.301146][T22602] netlink: 'syz.1.4176': attribute type 4 has an invalid length. [ 587.331724][T22601] netlink: 'syz.2.4177': attribute type 1 has an invalid length. [ 587.459051][T14303] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.489899][T14303] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.616448][T14303] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.648300][T14303] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.682542][T22614] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4179'. [ 587.697780][T14303] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.722590][T14303] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.781617][ T6292] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.795351][ T6292] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.858965][T22625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4182'. [ 588.275025][T22632] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4184'. [ 588.316031][T22641] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4186'. [ 588.392783][T22624] netlink: 'syz.4.4183': attribute type 39 has an invalid length. [ 588.450783][T22644] netlink: 'syz.1.4186': attribute type 5 has an invalid length. [ 588.466272][T22644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4186'. [ 588.513173][T22648] IPv4: Oversized IP packet from 127.202.26.0 [ 588.533551][T14303] bond0: (slave bond_slave_0): interface is now down [ 588.566245][T14303] bond0: (slave bond_slave_1): interface is now down [ 588.617921][T14303] bond0: now running without any active interface! [ 588.811625][T22659] "syz.0.4190" (22659) uses obsolete ecb(arc4) skcipher [ 588.820149][T22661] x_tables: duplicate underflow at hook 2 [ 588.948317][T22667] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 589.310240][T22672] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.462834][T22688] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4197'. [ 589.706355][T22698] netlink: 'syz.4.4199': attribute type 5 has an invalid length. [ 589.707704][T22701] netlink: 'syz.1.4200': attribute type 5 has an invalid length. [ 590.402337][ T6292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.428639][ T6292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.444353][T22734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.299440][T22755] __nla_validate_parse: 9 callbacks suppressed [ 591.299457][T22755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4213'. [ 591.355049][T22752] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4212'. [ 591.419872][T22758] geneve2: entered promiscuous mode [ 611.603950][T22766] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4215'. [ 611.624640][T22766] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4215'. [ 611.626915][T22771] sock: sock_set_timeout: `syz.3.4218' (pid 22771) tries to set negative timeout [ 611.637599][T22766] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4215'. [ 611.950462][T22787] netlink: 'syz.1.4221': attribute type 1 has an invalid length. [ 612.182149][T22787] 8021q: adding VLAN 0 to HW filter on device bond4 [ 612.628731][T22812] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4225'. [ 612.890228][T22821] netlink: 4920 bytes leftover after parsing attributes in process `syz.4.4230'. [ 612.914701][T22820] netlink: 4920 bytes leftover after parsing attributes in process `syz.4.4230'. [ 613.231045][T22838] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 613.382845][T22838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4234'. [ 613.417552][T22838] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4234'. [ 613.646395][T22857] x_tables: duplicate underflow at hook 4 [ 613.705973][T22861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4240'. [ 613.731654][T22861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4240'. [ 614.342513][T22881] netlink: 'syz.0.4246': attribute type 1 has an invalid length. [ 614.463608][T22881] bond3: entered promiscuous mode [ 614.481029][T22881] 8021q: adding VLAN 0 to HW filter on device bond3 [ 614.569930][T22891] bond3: (slave bridge6): making interface the new active one [ 614.578470][T22891] bridge6: entered promiscuous mode [ 614.586236][T22891] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 615.267833][T22922] IPVS: Error connecting to the multicast addr [ 615.314399][T22926] netlink: 'syz.2.4259': attribute type 2 has an invalid length. [ 615.378004][T22926] netlink: 'syz.2.4259': attribute type 2 has an invalid length. [ 615.840115][T22949] openvswitch: netlink: Flow key attr not present in new flow. [ 616.698372][T22981] bond5 (unregistering): Released all slaves [ 616.999523][T22989] __nla_validate_parse: 6 callbacks suppressed [ 616.999540][T22989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4271'. [ 617.039684][T22991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4272'. [ 617.068783][T22991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4272'. [ 617.338811][T22998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4274'. [ 617.630629][T23012] bond0: entered promiscuous mode [ 617.638450][T23012] bond_slave_0: entered promiscuous mode [ 617.644599][T23012] bond_slave_1: entered promiscuous mode [ 617.699985][T23018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4279'. [ 617.772444][T23016] batman_adv: batadv0: Interface activated: vlan2 [ 617.811212][T23016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.910692][T23016] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 617.924839][T23016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 617.951557][T23016] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 618.037874][T22994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4273'. [ 618.080228][T23023] pim6reg1: entered promiscuous mode [ 618.106782][T23023] pim6reg1: entered allmulticast mode [ 618.567098][T23029] netlink: 'syz.3.4281': attribute type 1 has an invalid length. [ 618.580752][T23044] veth7: entered promiscuous mode [ 618.613192][T23046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4285'. [ 618.966244][T23063] hsr0: entered promiscuous mode [ 619.054549][T23055] hsr0: left promiscuous mode [ 619.073317][T23068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4290'. [ 619.500909][T23080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4293'. [ 619.587933][T23086] netlink: 'syz.3.4295': attribute type 1 has an invalid length. [ 619.605823][T23086] netlink: 'syz.3.4295': attribute type 1 has an invalid length. [ 619.738842][T23088] bond4 (unregistering): Released all slaves [ 619.860972][T23092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4297'. [ 619.881398][T23094] macsec0: entered promiscuous mode [ 619.977959][T23093] macsec0: left promiscuous mode [ 620.128471][T23099] netlink: 'syz.2.4300': attribute type 5 has an invalid length. [ 620.401654][T23122] tipc: New replicast peer: 172.20.20.170 [ 620.451562][T23122] tipc: Enabled bearer , priority 5 [ 621.564165][ T6934] tipc: Node number set to 3866594307 [ 624.259941][ T3313] tipc: Resetting bearer [ 624.644726][ T3313] bond6 (unregistering): (slave gretap1): Releasing active interface [ 624.676566][ T3313] tipc: Disabling bearer [ 625.011959][ T3313] bond2 (unregistering): (slave bridge5): Releasing backup interface [ 625.070373][ T3313] bond3 (unregistering): (slave bridge6): Releasing active interface [ 625.589503][ T3313] bond10 (unregistering): (slave bridge17): Releasing active interface [ 625.665381][ T3313] bond0 (unregistering): Released all slaves [ 625.685391][ T3313] bond1 (unregistering): Released all slaves [ 625.708793][ T3313] bond2 (unregistering): (slave veth5): Releasing backup interface [ 625.722687][ T3313] bond2 (unregistering): Released all slaves [ 625.741790][ T3313] bond3 (unregistering): Released all slaves [ 625.760831][ T3313] bond4 (unregistering): Released all slaves [ 625.787113][ T3313] bond5 (unregistering): Released all slaves [ 625.806169][ T3313] bond6 (unregistering): Released all slaves [ 625.827254][ T3313] bond7 (unregistering): Released all slaves [ 625.848658][ T3313] bond8 (unregistering): Released all slaves [ 625.873890][ T3313] bond9 (unregistering): Released all slaves [ 625.904525][ T3313] bond10 (unregistering): Released all slaves [ 626.107454][ T3313] : left promiscuous mode [ 626.199020][ T3313] tipc: Disabling bearer [ 626.207739][ T3313] tipc: Left network mode [ 626.599257][ T3313] hsr_slave_0: left promiscuous mode [ 626.605562][ T3313] hsr_slave_1: left promiscuous mode [ 626.623280][ T3313] veth1_macvtap: left promiscuous mode [ 626.629790][ T3313] veth1_vlan: left promiscuous mode [ 626.635682][ T3313] veth0_vlan: left promiscuous mode [ 627.276099][ T3313] IPVS: stop unused estimator thread 0... [ 640.041848][T23145] __nla_validate_parse: 7 callbacks suppressed [ 640.041866][T23145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4313'. [ 640.110939][T23147] xt_hashlimit: size too large, truncated to 1048576 [ 640.155196][T23144] netlink: 47 bytes leftover after parsing attributes in process `syz.3.4314'. [ 640.747867][T23170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4318'. [ 640.840345][T23170] netlink: 'syz.2.4318': attribute type 5 has an invalid length. [ 640.867512][T23170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4318'. [ 640.920924][T23179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4321'. [ 640.948682][T23179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4321'. [ 640.973049][T23179] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4321'. [ 641.799824][T23217] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4332'. [ 641.823902][T23217] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4332'. [ 642.008960][T23223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4334'. [ 642.072500][T23223] netlink: 'syz.4.4334': attribute type 5 has an invalid length. [ 642.184153][T23224] netlink: 'syz.1.4335': attribute type 1 has an invalid length. [ 642.394995][T23230] batman_adv: batadv0: Interface activated: vlan2 [ 642.519182][T23230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.544306][T23230] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.565976][T23230] bridge0: port 3(dummy0) entered blocking state [ 642.572500][T23230] bridge0: port 3(dummy0) entered forwarding state [ 642.585813][T23230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.603922][ T3313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 642.641203][T23230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.654960][T23230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.669620][T23230] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 642.680431][T23230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 642.699458][T23230] veth1_vlan: left promiscuous mode [ 642.715669][T23230] veth0_vlan: left promiscuous mode [ 642.722213][T23230] veth0_vlan: entered promiscuous mode [ 642.732179][T23230] veth1_vlan: entered promiscuous mode [ 642.745029][T23230] veth1_macvtap: left promiscuous mode [ 642.753503][T23230] veth1_macvtap: entered promiscuous mode [ 642.768282][T23230] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 642.778246][T23230] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 642.790008][T23230] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 642.799785][T23230] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 642.808727][T23230] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 642.861067][T14299] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.868262][T14299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.891475][T14299] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.898685][T14299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.024680][T23246] openvswitch: netlink: Missing key (keys=40, expected=100) [ 643.042342][T23246] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 643.209150][T23253] veth1_to_team: entered promiscuous mode [ 643.231180][T23253] veth1_to_team: left promiscuous mode [ 643.478237][T23267] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 646.152928][T23253] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 646.353433][T23308] netlink: 'syz.3.4355': attribute type 12 has an invalid length. [ 646.374417][T23308] __nla_validate_parse: 5 callbacks suppressed [ 646.374434][T23308] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4355'. [ 646.457667][T23308] netlink: 'syz.3.4355': attribute type 39 has an invalid length. [ 647.116892][T23339] netlink: 'syz.0.4365': attribute type 1 has an invalid length. [ 647.140009][T23332] netlink: 'syz.2.4362': attribute type 13 has an invalid length. [ 647.192953][T23339] 8021q: adding VLAN 0 to HW filter on device bond4 [ 647.200690][T23347] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 647.648267][T21407] block nbd4: Receive control failed (result -32) [ 647.884773][T14292] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 648.126037][T23378] bridge7: entered promiscuous mode [ 648.163127][T23378] bridge7: entered allmulticast mode [ 648.249473][T23388] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4374'. [ 648.265564][T23388] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4374'. [ 648.323329][T23391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4376'. [ 648.462156][T23397] tunl0: Caught tx_queue_len zero misconfig [ 648.468079][T23401] netlink: 276 bytes leftover after parsing attributes in process `syz.3.4378'. [ 648.576670][T23394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4376'. [ 648.770528][T23394] veth5: entered allmulticast mode [ 648.822414][T23394] bond5: (slave veth5): Enslaving as an active interface with an up link [ 648.839841][ T30] audit: type=1800 audit(1779118701.475:20): pid=23420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4383" name="memory.events" dev="tmpfs" ino=1515 res=0 errno=0 [ 648.849239][T23391] syzkaller1: entered promiscuous mode [ 648.899255][T23413] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4380'. [ 648.923248][T23391] syzkaller1: entered allmulticast mode [ 649.125707][T23399] bond5 (unregistering): (slave veth5): Releasing backup interface [ 649.146173][T23399] bond5 (unregistering): Released all slaves [ 649.422979][T23436] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20002 [ 649.533992][T23444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4389'. [ 649.686022][T23451] mac80211_hwsim hwsim46 syzkaller0: entered promiscuous mode [ 649.705724][T23451] mac80211_hwsim hwsim46 syzkaller0: entered allmulticast mode [ 650.194707][T23453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4392'. [ 650.272253][T23453] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4392'. [ 650.800667][T23498] netlink: zone id is out of range [ 650.826862][T23498] netlink: zone id is out of range [ 650.840234][T23498] netlink: zone id is out of range [ 650.855570][T23498] netlink: zone id is out of range [ 650.888275][T23498] netlink: zone id is out of range [ 650.902227][T23500] netlink: zone id is out of range [ 650.925779][T23498] netlink: zone id is out of range [ 650.940108][T23500] netlink: zone id is out of range [ 650.947151][T23498] netlink: zone id is out of range [ 650.962127][T23500] netlink: zone id is out of range [ 651.428056][T23525] batman_adv: batadv0: Interface deactivated: vlan2 [ 651.884739][T23536] __nla_validate_parse: 5 callbacks suppressed [ 651.884758][T23536] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4410'. [ 652.039807][T23525] erspan1: left promiscuous mode [ 652.049595][T23525] erspan1: left allmulticast mode [ 652.055983][T23525] bond1: left allmulticast mode [ 652.061015][T23525] ip6gre1: left promiscuous mode [ 652.066447][T23525] ip6gre1: left allmulticast mode [ 652.071917][T23525] bond0: left promiscuous mode [ 652.077081][T23525] bond0: left allmulticast mode [ 652.104240][T23525] batman_adv: batadv0: Interface deactivated: macsec1 [ 652.112160][T23543] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4412'. [ 652.121746][T23525] macsec1: left promiscuous mode [ 652.132570][T23525] geneve2: left promiscuous mode [ 652.197231][T23525] bridge7: left promiscuous mode [ 652.204545][T23525] bridge7: left allmulticast mode [ 652.239590][T23534] macsec0: entered promiscuous mode [ 652.246531][T14298] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.257387][T14298] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.281219][T14298] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.290202][T23547] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4413'. [ 652.300274][T23547] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4413'. [ 652.310819][T14298] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.333935][T23547] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4413'. [ 652.344796][T23527] macsec0: left promiscuous mode [ 652.467629][T23549] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.475002][T23549] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.589613][T23549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.701629][T14298] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.737391][T14298] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.755652][T14298] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.785295][T14298] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.833379][T23566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4417'. [ 652.869939][T14298] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.888932][T23570] netlink: 'syz.2.4419': attribute type 1 has an invalid length. [ 652.897210][T14298] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.906152][T14303] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.923819][T14303] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.057177][T23570] bond3: entered promiscuous mode [ 653.062802][T23570] 8021q: adding VLAN 0 to HW filter on device bond3 [ 653.086110][T23573] netlink: 'syz.0.4417': attribute type 5 has an invalid length. [ 653.097006][T23573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4417'. [ 653.191958][T23574] bond3: (slave bridge8): making interface the new active one [ 653.207703][T23574] bridge8: entered promiscuous mode [ 653.225028][T23574] bond3: (slave bridge8): Enslaving as an active interface with an up link [ 653.250365][ T5633] Bluetooth: hci3: command 0x0405 tx timeout [ 653.279510][T23578] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 653.308411][T23578] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 653.363005][T23601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4420'. [ 653.381587][T23599] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 653.491019][T23585] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 653.509901][T23585] bond5: (slave lo): Enslaving as an active interface with an up link [ 653.649009][T14299] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 653.815274][T23620] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4425'. [ 653.870327][T23626] macsec0: entered promiscuous mode [ 653.888716][T23620] unsupported nlmsg_type 40 [ 654.063056][T23613] macsec0: left promiscuous mode [ 654.324507][T23648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4430'. [ 654.739294][T23654] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 655.313215][T23694] netlink: 'syz.4.4440': attribute type 1 has an invalid length. [ 655.385373][T23694] 8021q: adding VLAN 0 to HW filter on device bond6 [ 655.558836][T23694] veth9: entered allmulticast mode [ 655.611898][T23694] bond6: (slave veth9): Enslaving as an active interface with an up link [ 655.627963][T23713] macsec0: entered promiscuous mode [ 655.670157][T23704] macsec0: left promiscuous mode [ 655.812806][T23711] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.824904][T23711] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.900966][T23705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.961972][T23711] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 655.972736][T23711] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.103055][T23711] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 656.120780][T23711] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.215490][T23711] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 656.227100][T23711] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.331224][T14303] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.340198][T14303] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.359520][ T3313] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.367975][ T3313] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.383136][ T3313] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.391493][ T3313] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.413159][ T3313] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.421568][ T3313] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.508579][T23738] ipvlan0: entered promiscuous mode [ 656.566844][T23742] vlan3: entered allmulticast mode [ 656.572349][T23742] bond0: entered allmulticast mode [ 656.580374][T23742] bond_slave_0: entered allmulticast mode [ 656.586328][T23742] bond_slave_1: entered allmulticast mode [ 656.789360][T23749] macsec0: entered promiscuous mode [ 656.826712][T23747] macsec0: left promiscuous mode [ 657.083887][ T5633] Bluetooth: hci2: command 0x0406 tx timeout [ 657.235154][T23778] lo: Caught tx_queue_len zero misconfig [ 657.482606][T23796] macsec0: entered promiscuous mode [ 657.578859][T23788] macsec0: left promiscuous mode [ 657.772994][T23806] netlink: 'syz.4.4475': attribute type 8 has an invalid length. [ 657.844485][T23817] __nla_validate_parse: 7 callbacks suppressed [ 657.844503][T23817] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4478'. [ 658.141930][T23829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4480'. [ 658.160819][T23823] syzkaller1: entered promiscuous mode [ 658.167260][T23823] syzkaller1: entered allmulticast mode [ 658.168817][T23825] netlink: 428 bytes leftover after parsing attributes in process `syz.1.4479'. [ 658.247851][T23825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4479'. [ 658.860725][T23858] x_tables: duplicate underflow at hook 1 [ 658.874797][ T6921] IPVS: starting estimator thread 0... [ 658.933657][T23861] netlink: 'syz.2.4491': attribute type 1 has an invalid length. [ 658.989921][T23861] 8021q: adding VLAN 0 to HW filter on device bond4 [ 658.997151][T23859] IPVS: using max 34 ests per chain, 81600 per kthread [ 659.010176][T23861] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4491'. [ 659.019929][T23861] ksmbd: Unknown IPC event: 1, ignore. [ 659.327373][T23874] netlink: 'syz.0.4496': attribute type 1 has an invalid length. [ 659.336967][T23874] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4496'. [ 659.359452][T23866] x_tables: duplicate entry at hook 2 [ 659.414326][T14303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 659.483605][T23884] macsec0: entered promiscuous mode [ 659.540640][T23886] netlink: 'syz.2.4500': attribute type 10 has an invalid length. [ 659.568875][T23876] macsec0: left promiscuous mode [ 659.691268][T23889] netlink: 'syz.0.4501': attribute type 1 has an invalid length. [ 659.734002][T23889] 8021q: adding VLAN 0 to HW filter on device bond5 [ 659.746887][T23892] veth0_macvtap: Caught tx_queue_len zero misconfig [ 659.783470][T23889] bond5 (unregistering): Released all slaves [ 660.000769][T23908] macvtap0: entered promiscuous mode [ 660.006648][T23908] syz_tun: entered promiscuous mode [ 660.016949][T23908] syz_tun: left promiscuous mode [ 660.079794][T23916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4508'. [ 660.290055][T23929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4513'. [ 660.305525][T23929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4513'. [ 660.337758][T23929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4513'. [ 660.402898][T23933] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20002 [ 660.651929][T23945] net_ratelimit: 102 callbacks suppressed [ 660.651946][T23945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 660.751375][T23948] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 660.931150][T23961] netlink: 'syz.2.4524': attribute type 13 has an invalid length. [ 660.953589][T23961] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 661.305033][T23982] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 661.698450][T24003] netlink: 'syz.2.4534': attribute type 4 has an invalid length. [ 661.720212][T24004] netlink: 'syz.2.4534': attribute type 4 has an invalid length. [ 661.741122][T24003] netlink: 'syz.2.4534': attribute type 4 has an invalid length. [ 661.751982][T24005] netlink: 'syz.3.4536': attribute type 13 has an invalid length. [ 661.869004][T24020] netlink: 'syz.0.4537': attribute type 5 has an invalid length. [ 661.881766][T24021] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 662.003328][T24020] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 662.029224][T24020] bond5 (unregistering): Released all slaves [ 662.053036][T24028] veth0_macvtap: Caught tx_queue_len zero misconfig [ 662.352865][T24033] team0: left promiscuous mode [ 662.358714][T24033] team_slave_0: left promiscuous mode [ 662.370996][T24033] team_slave_1: left promiscuous mode [ 662.377770][T24033] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.492255][T24033] bridge9: entered promiscuous mode [ 662.509420][T24033] bridge9: entered allmulticast mode [ 662.531155][T24033] team0: Port device bridge9 added [ 662.553118][T24052] bridge0: port 3(team0) entered blocking state [ 662.563515][T24052] bridge0: port 3(team0) entered disabled state [ 662.571396][T24052] team0: entered allmulticast mode [ 662.577032][T24052] team_slave_0: entered allmulticast mode [ 662.583027][T24052] team_slave_1: entered allmulticast mode [ 662.591508][T24052] team0: entered promiscuous mode [ 662.601462][T24052] team_slave_0: entered promiscuous mode [ 662.614221][T24052] team_slave_1: entered promiscuous mode [ 662.627366][T24052] bridge0: port 3(team0) entered blocking state [ 662.633800][T24052] bridge0: port 3(team0) entered forwarding state [ 662.687707][T24033] sit1: entered promiscuous mode [ 662.909403][T24072] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 663.022939][T24076] mac80211_hwsim hwsim56 wlan0: entered promiscuous mode [ 663.048502][T24076] mac80211_hwsim hwsim56 wlan0: entered allmulticast mode [ 663.057167][T24076] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 663.249623][T24092] __nla_validate_parse: 9 callbacks suppressed [ 663.249640][T24092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4556'. [ 663.300615][T24096] tipc: Enabled bearer , priority 10 [ 663.447148][T24105] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4560'. [ 663.901417][T24132] bridge0: port 3(syz_tun) entered blocking state [ 663.907988][T24132] bridge0: port 3(syz_tun) entered forwarding state [ 663.916572][T24132] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.923703][T24132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.931032][T24132] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.938163][T24132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.975583][T24133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4566'. [ 663.998554][T24132] bond0: left promiscuous mode [ 664.018747][T24132] bond_slave_0: left promiscuous mode [ 664.025247][T24132] bond_slave_1: left promiscuous mode [ 664.031612][T24132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.065487][T24132] A link change request failed with some changes committed already. Interface 0A may have been left with an inconsistent configuration, please check. [ 664.147299][T24155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4566'. [ 664.176604][T24150] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 664.199808][T24153] validate_nla: 2 callbacks suppressed [ 664.199825][T24153] netlink: 'syz.4.4572': attribute type 4 has an invalid length. [ 664.207179][T24133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4566'. [ 664.603548][T24183] veth0_macvtap: Caught tx_queue_len zero misconfig [ 664.798544][T24138] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 665.022050][T24210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 665.072433][T24212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4586'. [ 665.214229][T24218] netlink: 'syz.4.4587': attribute type 13 has an invalid length. [ 665.314859][T24225] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 665.368218][T24222] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20001 [ 665.717672][T24239] pim6reg: left allmulticast mode [ 666.155999][T24237] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4593'. [ 666.273749][ T30] audit: type=1800 audit(1779118718.905:21): pid=24248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4595" name="memory.events" dev="tmpfs" ino=1348 res=0 errno=0 [ 666.982488][T24282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4605'. [ 666.995003][T24282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4605'. [ 667.007705][T24282] netlink: 'syz.0.4605': attribute type 12 has an invalid length. [ 667.063128][T24280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4603'. [ 667.063483][T24282] netlink: 'syz.0.4605': attribute type 12 has an invalid length. [ 667.089562][T24280] netlink: 'syz.1.4603': attribute type 30 has an invalid length. [ 667.233363][T24291] netlink: 'syz.2.4606': attribute type 13 has an invalid length. [ 667.247152][T24280] netlink: 'syz.1.4603': attribute type 30 has an invalid length. [ 667.285673][T24294] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 667.712842][T24317] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 667.762757][T24317] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 667.827420][T24317] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 667.935036][T24317] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 667.972608][ T5290] veth0_vlan: left promiscuous mode [ 668.019310][ T5290] veth0_vlan: entered promiscuous mode [ 668.215697][T24335] veth0_macvtap: Caught tx_queue_len zero misconfig [ 668.393001][T24343] __nla_validate_parse: 6 callbacks suppressed [ 668.393030][T24343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4618'. [ 668.502977][T24358] netlink: 'syz.4.4619': attribute type 13 has an invalid length. [ 668.555480][T24359] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 668.691839][T24364] netlink: 'syz.3.4622': attribute type 6 has an invalid length. [ 668.708523][T24366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4623'. [ 668.761850][T24361] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.793780][T24361] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.808976][T24370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4623'. [ 668.951859][T24361] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.968768][T24361] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.067306][T24361] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.100737][T24361] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.230491][T24361] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.285311][T24361] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.729011][T24409] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 669.763568][T24409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4633'. [ 669.781980][T24409] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4633'. [ 669.962338][T24410] netlink: 'syz.1.4634': attribute type 13 has an invalid length. [ 670.202899][T24431] netlink: 'syz.0.4640': attribute type 13 has an invalid length. [ 670.267784][T24432] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 670.332774][T24436] netlink: 'syz.2.4642': attribute type 1 has an invalid length. [ 670.371158][T24439] veth0_macvtap: Caught tx_queue_len zero misconfig [ 670.419409][T24444] netlink: 'syz.2.4645': attribute type 2 has an invalid length. [ 670.428397][T24443] batadv_slave_0: entered promiscuous mode [ 670.436215][T24440] batadv_slave_0: left promiscuous mode [ 670.535819][T24447] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4646'. [ 670.592034][T24447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 670.603374][T24447] bond_slave_0: left allmulticast mode [ 670.629968][T24456] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4646'. [ 670.644970][T24447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 670.661131][T24447] bond_slave_1: left allmulticast mode [ 670.669091][T24447] bond0 (unregistering): Released all slaves [ 670.721026][T24463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4649'. [ 670.747005][T24456] netlink: 324 bytes leftover after parsing attributes in process `syz.1.4646'. [ 670.876683][T24468] bond0: Caught tx_queue_len zero misconfig [ 671.026231][T24479] netlink: 'syz.2.4654': attribute type 13 has an invalid length. [ 671.039526][T24479] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 671.052586][T24472] netlink: 'syz.1.4653': attribute type 1 has an invalid length. [ 671.112854][T24481] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4655'. [ 671.210608][T24484] veth0_macvtap: Caught tx_queue_len zero misconfig [ 671.401581][T24488] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 671.479426][T24500] netlink: 'syz.4.4661': attribute type 21 has an invalid length. [ 671.490053][T24500] IPv6: NLM_F_CREATE should be specified when creating new route [ 671.497965][T24500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 671.505237][T24500] IPv6: NLM_F_CREATE should be set when creating new route [ 671.512485][T24500] IPv6: NLM_F_CREATE should be set when creating new route [ 671.519730][T24500] IPv6: NLM_F_CREATE should be set when creating new route [ 671.810927][T24516] netlink: 'syz.4.4664': attribute type 3 has an invalid length. [ 671.841092][T24515] netlink: 'syz.2.4665': attribute type 13 has an invalid length. [ 671.866989][T24515] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 671.872863][T24518] netlink: 'syz.1.4666': attribute type 21 has an invalid length. [ 671.902662][T24516] nbd: nbd4 already in use [ 671.914178][T24516] block nbd4: NBD_DISCONNECT [ 671.927621][T24516] block nbd4: Send disconnect failed -32 [ 671.945620][T24516] block nbd4: shutting down sockets [ 672.045788][T24525] veth0_macvtap: Caught tx_queue_len zero misconfig [ 672.286840][T24536] sctp: [Deprecated]: syz.2.4672 (pid 24536) Use of int in maxseg socket option. [ 672.286840][T24536] Use struct sctp_assoc_value instead [ 672.675848][T24558] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 672.751474][T24562] syzkaller0: entered promiscuous mode [ 672.780124][T24562] syzkaller0: entered allmulticast mode [ 673.007770][T24577] nbd: nbd1 already in use [ 673.137402][T24582] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 673.400267][T24588] __nla_validate_parse: 10 callbacks suppressed [ 673.400286][T24588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4687'. [ 673.505416][T24562] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 673.647351][T24603] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 673.659977][T24593] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 673.933449][T24610] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 673.976276][T24605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4691'. [ 674.206786][T24626] mac80211_hwsim hwsim46 syzkaller0: Caught tx_queue_len zero misconfig [ 674.512329][T24637] syzkaller0: entered promiscuous mode [ 674.590257][T24637] syzkaller0: entered allmulticast mode [ 674.825534][T24670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4701'. [ 674.842714][T24673] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4699'. [ 675.027156][T24677] validate_nla: 5 callbacks suppressed [ 675.027173][T24677] netlink: 'syz.0.4702': attribute type 13 has an invalid length. [ 675.079019][T24680] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 675.423450][T24684] bond0: Caught tx_queue_len zero misconfig [ 675.461137][T24684] netlink: 'syz.0.4703': attribute type 1 has an invalid length. [ 675.648004][T24688] batadv0: entered promiscuous mode [ 675.653555][T24688] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 675.807906][T24690] veth0_macvtap: Caught tx_queue_len zero misconfig [ 676.062768][T24692] mac80211_hwsim hwsim46 syzkaller0: Caught tx_queue_len zero misconfig [ 676.416209][T24713] netlink: 'syz.2.4712': attribute type 1 has an invalid length. [ 676.537271][T24713] bond5: entered promiscuous mode [ 676.555026][T24713] 8021q: adding VLAN 0 to HW filter on device bond5 [ 676.565863][T24722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4710'. [ 676.570198][T24723] netlink: 'syz.1.4713': attribute type 13 has an invalid length. [ 676.629931][T24719] 8021q: adding VLAN 0 to HW filter on device bond5 [ 676.640962][T24719] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 676.651626][T24719] bond5: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 676.665293][T24719] bond5: (slave vcan1): making interface the new active one [ 676.672864][T24719] vcan1: entered promiscuous mode [ 676.687409][T24719] bond5: (slave vcan1): Enslaving as an active interface with an up link [ 676.845271][T24726] tipc: Enabling of bearer rejected, failed to enable media [ 676.970538][T24737] xt_hashlimit: size too large, truncated to 1048576 [ 677.021392][T24741] netlink: 'syz.0.4719': attribute type 1 has an invalid length. [ 677.049501][T24741] nbd: illegal input index 871591272 [ 677.162859][T24751] mac80211_hwsim hwsim38 syzkaller0: Caught tx_queue_len zero misconfig [ 677.299696][T24746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4720'. [ 677.403509][T24754] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4721'. [ 677.428829][T24754] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4721'. [ 677.482386][T24757] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4722'. [ 677.727887][T24768] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4727'. [ 677.740442][T24770] netlink: 'syz.1.4726': attribute type 10 has an invalid length. [ 678.021348][T24774] bridge9: port 1(gretap1) entered blocking state [ 678.052272][T24774] bridge9: port 1(gretap1) entered disabled state [ 678.066380][T24774] gretap1: entered allmulticast mode [ 678.086547][T24774] gretap1: entered promiscuous mode [ 678.095803][T24781] netlink: 'syz.1.4729': attribute type 5 has an invalid length. [ 678.122165][T24785] netlink: 'syz.3.4732': attribute type 11 has an invalid length. [ 678.122499][T24783] sit0: Caught tx_queue_len zero misconfig [ 678.131313][T24785] netlink: 'syz.3.4732': attribute type 4 has an invalid length. [ 678.145411][T24785] netlink: 'syz.3.4732': attribute type 6 has an invalid length. [ 678.162627][T24783] sch_tbf: burst 0 is lower than device sit0 mtu (1480) ! [ 678.217643][T24786] tipc: Enabling of bearer rejected, media not registered [ 678.235482][T24787] dummy0: Caught tx_queue_len zero misconfig [ 678.465245][T24800] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 678.531630][T24809] __nla_validate_parse: 9 callbacks suppressed [ 678.531646][T24809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4739'. [ 678.574391][T24811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4740'. [ 678.634699][T24811] macvlan2: entered allmulticast mode [ 678.653640][T24819] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4738'. [ 678.664971][T24811] erspan0: entered allmulticast mode [ 679.017104][T24836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4746'. [ 679.078346][T24836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4746'. [ 679.088081][T24836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4746'. [ 679.110226][T24836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4746'. [ 679.121379][T24836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4746'. [ 679.146850][T24836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4746'. [ 679.174755][T24836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4746'. [ 679.618548][T24867] netlink: 'syz.1.4753': attribute type 1 has an invalid length. [ 679.676319][T24867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.961599][T24894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.017951][T24897] x_tables: duplicate underflow at hook 1 [ 680.357044][T24923] nbd: device at index 64 is going down [ 680.592050][T23153] udevd[23153]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 680.659144][T24287] udevd[24287]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 680.692166][T24944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 681.092740][ T30] audit: type=1800 audit(1779118733.725:22): pid=24960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4775" name="r" dev="tmpfs" ino=1499 res=0 errno=0 [ 681.147272][T24964] FAULT_INJECTION: forcing a failure. [ 681.147272][T24964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.147626][T24962] netlink: 'syz.3.4777': attribute type 5 has an invalid length. [ 681.172783][T24964] CPU: 1 UID: 0 PID: 24964 Comm: syz.1.4778 Not tainted syzkaller #0 PREEMPT(full) [ 681.172805][T24964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 681.172815][T24964] Call Trace: [ 681.172821][T24964] [ 681.172828][T24964] dump_stack_lvl+0xe8/0x150 [ 681.172853][T24964] should_fail_ex+0x412/0x560 [ 681.172878][T24964] _copy_from_iter+0x1d3/0x1670 [ 681.172902][T24964] ? rcu_is_watching+0x15/0xb0 [ 681.172927][T24964] ? __pfx__copy_from_iter+0x10/0x10 [ 681.172954][T24964] ? netlink_sendmsg+0x650/0xb40 [ 681.172970][T24964] ? skb_put+0x11b/0x210 [ 681.172995][T24964] netlink_sendmsg+0x6c0/0xb40 [ 681.173019][T24964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.173039][T24964] ? aa_sock_msg_perm+0xf1/0x1b0 [ 681.173061][T24964] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 681.173085][T24964] ____sys_sendmsg+0x972/0x9f0 [ 681.173100][T24964] ? __might_fault+0xaf/0x130 [ 681.173126][T24964] ? __pfx_____sys_sendmsg+0x10/0x10 [ 681.173150][T24964] ? import_iovec+0x73/0xa0 [ 681.173175][T24964] ___sys_sendmsg+0x2a5/0x360 [ 681.173190][T24964] ? __lock_acquire+0x6b5/0x2cf0 [ 681.173211][T24964] ? __pfx____sys_sendmsg+0x10/0x10 [ 681.173260][T24964] ? __fget_files+0x2a/0x420 [ 681.173277][T24964] ? __fget_files+0x3a0/0x420 [ 681.173308][T24964] __x64_sys_sendmsg+0x1bd/0x2a0 [ 681.173325][T24964] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 681.173357][T24964] ? __pfx_ksys_write+0x10/0x10 [ 681.173385][T24964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.173402][T24964] do_syscall_64+0x15f/0xf80 [ 681.173422][T24964] ? trace_irq_disable+0x3b/0x140 [ 681.173442][T24964] ? clear_bhb_loop+0x40/0x90 [ 681.173461][T24964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.173476][T24964] RIP: 0033:0x7f2d6319ce59 [ 681.173492][T24964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.173505][T24964] RSP: 002b:00007f2d64018028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.173522][T24964] RAX: ffffffffffffffda RBX: 00007f2d63415fa0 RCX: 00007f2d6319ce59 [ 681.173533][T24964] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000004 [ 681.173542][T24964] RBP: 00007f2d64018090 R08: 0000000000000000 R09: 0000000000000000 [ 681.173552][T24964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.173561][T24964] R13: 00007f2d63416038 R14: 00007f2d63415fa0 R15: 00007ffc362227c8 [ 681.173587][T24964] [ 681.908639][T24986] tipc: Started in network mode [ 681.927709][T24986] tipc: Node identity 080211000001, cluster identity 4711 [ 681.948964][T24986] tipc: Enabled bearer , priority 0 [ 682.019825][T24992] netlink: 'syz.3.4787': attribute type 4 has an invalid length. [ 682.061564][T24996] netlink: 'syz.0.4788': attribute type 1 has an invalid length. [ 682.142337][T24996] 8021q: adding VLAN 0 to HW filter on device bond5 [ 682.219575][T24996] bond5: (slave ip6gretap1): making interface the new active one [ 682.229335][T24996] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 682.250113][T25002] syzkaller1: entered promiscuous mode [ 682.255942][T25002] syzkaller1: entered allmulticast mode [ 682.298706][T24842] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 682.630923][T25013] tipc: Enabled bearer , priority 0 [ 682.710773][T25020] tipc: Resetting bearer [ 682.728458][T25022] FAULT_INJECTION: forcing a failure. [ 682.728458][T25022] name failslab, interval 1, probability 0, space 0, times 0 [ 682.741985][T25022] CPU: 1 UID: 0 PID: 25022 Comm: syz.1.4792 Not tainted syzkaller #0 PREEMPT(full) [ 682.742008][T25022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 682.742018][T25022] Call Trace: [ 682.742025][T25022] [ 682.742032][T25022] dump_stack_lvl+0xe8/0x150 [ 682.742057][T25022] should_fail_ex+0x412/0x560 [ 682.742083][T25022] should_failslab+0xa8/0x100 [ 682.742108][T25022] __kmalloc_node_noprof+0xf0/0x7c0 [ 682.742128][T25022] ? lock_acquire+0x106/0x350 [ 682.742145][T25022] ? qdisc_alloc+0x92/0x9e0 [ 682.742173][T25022] qdisc_alloc+0x92/0x9e0 [ 682.742234][T25022] qdisc_create+0x12c/0xf20 [ 682.742257][T25022] ? lockdep_rtnl_is_held+0x26/0x40 [ 682.742275][T25022] ? qdisc_lookup+0x36d/0x6d0 [ 682.742295][T25022] tc_modify_qdisc+0x16f0/0x2290 [ 682.742319][T25022] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 682.742354][T25022] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 682.742403][T25022] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 682.742420][T25022] rtnetlink_rcv_msg+0x77e/0xbe0 [ 682.742443][T25022] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 682.742463][T25022] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 682.742482][T25022] ? ref_tracker_free+0x693/0x840 [ 682.742507][T25022] ? __pfx_ref_tracker_free+0x10/0x10 [ 682.742538][T25022] netlink_rcv_skb+0x232/0x4b0 [ 682.742555][T25022] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 682.742579][T25022] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 682.742607][T25022] ? netlink_deliver_tap+0x2e/0x1b0 [ 682.742622][T25022] ? netlink_deliver_tap+0x2e/0x1b0 [ 682.742644][T25022] netlink_unicast+0x75c/0x8e0 [ 682.742677][T25022] netlink_sendmsg+0x813/0xb40 [ 682.742703][T25022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.742723][T25022] ? aa_sock_msg_perm+0xf1/0x1b0 [ 682.742743][T25022] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 682.742766][T25022] ____sys_sendmsg+0x972/0x9f0 [ 682.742782][T25022] ? __might_fault+0xaf/0x130 [ 682.742804][T25022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 682.742826][T25022] ? import_iovec+0x73/0xa0 [ 682.742851][T25022] ___sys_sendmsg+0x2a5/0x360 [ 682.742865][T25022] ? __lock_acquire+0x6b5/0x2cf0 [ 682.742885][T25022] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.742937][T25022] ? __fget_files+0x2a/0x420 [ 682.742954][T25022] ? __fget_files+0x3a0/0x420 [ 682.742983][T25022] __x64_sys_sendmsg+0x1bd/0x2a0 [ 682.743002][T25022] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 682.743028][T25022] ? __pfx_ksys_write+0x10/0x10 [ 682.743058][T25022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.743075][T25022] do_syscall_64+0x15f/0xf80 [ 682.743096][T25022] ? trace_irq_disable+0x3b/0x140 [ 682.743118][T25022] ? clear_bhb_loop+0x40/0x90 [ 682.743138][T25022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.743153][T25022] RIP: 0033:0x7f2d6319ce59 [ 682.743169][T25022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.743182][T25022] RSP: 002b:00007f2d64018028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.743207][T25022] RAX: ffffffffffffffda RBX: 00007f2d63415fa0 RCX: 00007f2d6319ce59 [ 682.743219][T25022] RDX: 0000000000000010 RSI: 00002000000012c0 RDI: 0000000000000004 [ 682.743228][T25022] RBP: 00007f2d64018090 R08: 0000000000000000 R09: 0000000000000000 [ 682.743238][T25022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.743247][T25022] R13: 00007f2d63416038 R14: 00007f2d63415fa0 R15: 00007ffc362227c8 [ 682.743274][T25022] [ 683.276747][ T6921] tipc: Node number set to 134418688 [ 683.284683][T25012] tipc: Disabling bearer [ 683.484228][T21407] Bluetooth: hci3: command 0x0405 tx timeout [ 683.563220][T25044] __nla_validate_parse: 37 callbacks suppressed [ 683.563237][T25044] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4802'. [ 683.887837][T25055] lo: Caught tx_queue_len zero misconfig [ 684.068525][T25069] Bluetooth: MGMT ver 1.23 [ 684.110637][T25072] netlink: 'syz.4.4811': attribute type 1 has an invalid length. [ 684.166450][T25072] 8021q: adding VLAN 0 to HW filter on device bond7 [ 684.217407][T25077] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 684.264969][T25072] sctp: [Deprecated]: syz.4.4811 (pid 25072) Use of struct sctp_assoc_value in delayed_ack socket option. [ 684.264969][T25072] Use struct sctp_sack_info instead [ 684.317811][T25072] macvlan2: entered promiscuous mode [ 684.330028][T25072] macvlan2: entered allmulticast mode [ 684.336492][T25072] bond7: entered promiscuous mode [ 684.342993][T25072] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 684.352690][T25072] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 684.372656][T25072] bond7: left promiscuous mode [ 684.399853][T25070] infiniband syz0: set down [ 684.404513][T25070] infiniband syz0: added bridge_slave_1 [ 684.420723][T25070] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 684.436011][T25070] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 684.454623][T25070] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 684.528026][T25070] RDS/IB: syz0: added [ 684.535416][T25070] smc: adding ib device syz0 with port count 1 [ 684.541618][T25070] smc: ib device syz0 port 1 has no pnetid [ 685.727253][T25024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 686.036656][T25097] sit0: entered promiscuous mode [ 686.055470][T25097] sit0: entered allmulticast mode [ 686.320793][T25119] ip6tnl0: Caught tx_queue_len zero misconfig [ 686.350603][T25124] atomic_op ffff88809a228998 conn xmit_atomic 0000000000000000 [ 686.382078][T25122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4821'. [ 686.412400][T25126] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4823'. [ 686.437719][T25126] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4823'. [ 686.488350][T25126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4823'. [ 686.512624][T25128] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4821'. [ 686.522497][T25126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4823'. [ 686.533998][T25128] nbd: device at index 64 is going down [ 686.561997][T25133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4825'. [ 686.585777][T25136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4826'. [ 686.671526][T25139] xt_CONNSECMARK: invalid mode: 0 [ 686.672197][T25140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4827'. [ 686.757958][T25150] netlink: 'syz.2.4829': attribute type 11 has an invalid length. [ 686.844715][T24278] udevd[24278]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 687.036113][T25163] netlink: 'syz.3.4830': attribute type 8 has an invalid length. [ 687.751105][T25193] netlink: 'syz.4.4833': attribute type 13 has an invalid length. [ 687.766993][T25193] netlink: 'syz.4.4833': attribute type 17 has an invalid length. [ 687.861586][T25193] sit0: left promiscuous mode [ 687.867592][T25193] sit0: left allmulticast mode [ 687.875546][ T30] audit: type=1800 audit(1779118740.515:23): pid=25178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4832" name="memory.events" dev="tmpfs" ino=2078 res=0 errno=0 [ 688.342337][T25193] 8021q: adding VLAN 0 to HW filter on device bond1 [ 688.360282][T25211] netlink: 'syz.3.4835': attribute type 13 has an invalid length. [ 688.367911][T25213] netlink: 'syz.0.4836': attribute type 13 has an invalid length. [ 688.417907][T25193] hsr1: left promiscuous mode [ 688.425927][T25214] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 688.441186][T25193] gre1: left promiscuous mode [ 688.468676][T25193] bridge4: left allmulticast mode [ 688.482628][T25193] bridge5: left allmulticast mode [ 688.492488][T25218] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 688.530839][T25193] vlan3: left allmulticast mode [ 688.553205][T25193] bond2: left allmulticast mode [ 688.563032][T25193] geneve2: left allmulticast mode [ 688.579035][T25193] bond3: left allmulticast mode [ 688.584511][T25193] 8021q: adding VLAN 0 to HW filter on device bond3 [ 688.595366][T25193] 8021q: adding VLAN 0 to HW filter on device bond4 [ 688.603630][T25193] bridge13: left promiscuous mode [ 688.614790][T25193] veth7: left promiscuous mode [ 688.621754][T25193] 8021q: adding VLAN 0 to HW filter on device bond5 [ 688.632253][T25193] veth9: left allmulticast mode [ 688.750907][T24661] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.783212][T24661] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.815005][T24661] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.833853][T24661] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.934538][ T48] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 689.101137][T25236] __nla_validate_parse: 5 callbacks suppressed [ 689.101154][T25236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4842'. [ 689.123476][T25236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4842'. [ 689.145196][T25236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4842'. [ 689.177472][T25236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4842'. [ 689.190335][T25241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4843'. [ 689.204159][T25236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4842'. [ 689.219713][T25236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4842'. [ 689.375513][T25254] netlink: 'syz.2.4845': attribute type 13 has an invalid length. [ 689.431794][T25255] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 689.471153][T25258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 689.621084][T25261] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20000 [ 689.769043][T25269] netlink: 'syz.4.4850': attribute type 13 has an invalid length. [ 689.821913][T25274] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 689.973272][T25281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4854'. [ 690.768421][T25312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4862'. [ 690.793340][T25312] tunl0: Caught tx_queue_len zero misconfig [ 690.990827][T25326] netlink: 10356 bytes leftover after parsing attributes in process `syz.4.4864'. [ 691.299100][T25345] ip6tnl2: entered promiscuous mode [ 691.364684][T25348] ipt_ECN: cannot use operation on non-tcp rule [ 692.628915][T25374] veth0: entered promiscuous mode [ 692.635521][T25374] bond0: entered promiscuous mode [ 692.645041][T25373] bond0: left promiscuous mode [ 692.650035][T25373] veth0: left promiscuous mode [ 692.688303][T25378] netlink: 'syz.2.4879': attribute type 1 has an invalid length. [ 692.708703][T25378] 8021q: adding VLAN 0 to HW filter on device bond6 [ 692.760339][T25381] macsec0: entered promiscuous mode [ 692.769812][T25380] macsec0: left promiscuous mode [ 693.246422][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 693.936445][T25324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 694.127500][T25392] __nla_validate_parse: 6 callbacks suppressed [ 694.127514][T25392] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4884'. [ 694.148318][T25390] ip6gre2: entered promiscuous mode [ 694.163832][T25390] ip6gre2: entered allmulticast mode [ 694.326572][T25396] bond7: option all_slaves_active: invalid value (127) [ 694.337753][T25396] bond7 (unregistering): Released all slaves [ 694.369057][T25409] netlink: 'syz.4.4890': attribute type 3 has an invalid length. [ 694.461964][T25416] netlink: 'syz.4.4893': attribute type 1 has an invalid length. [ 694.562242][T25422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4893'. [ 694.593324][T25425] netlink: 'syz.0.4892': attribute type 10 has an invalid length. [ 694.662131][T25416] bond8: entered promiscuous mode [ 694.677889][T25416] 8021q: adding VLAN 0 to HW filter on device bond8 [ 694.710913][T25416] bond8: (slave bridge16): making interface the new active one [ 694.718653][T25416] bridge16: entered promiscuous mode [ 694.725168][T25416] bond8: (slave bridge16): Enslaving as an active interface with an up link [ 694.734434][T25422] bond8: entered allmulticast mode [ 694.750290][T25422] bridge16: entered allmulticast mode [ 694.891419][T25430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4894'. [ 694.947798][T25437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4897'. [ 694.968299][T25430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4894'. [ 695.121853][T25446] netlink: 'syz.1.4899': attribute type 1 has an invalid length. [ 695.139127][T25442] veth0_vlan: left promiscuous mode [ 695.272889][T25442] erspan0: left allmulticast mode [ 695.333318][T25455] mac80211_hwsim hwsim46 syzkaller0: Caught tx_queue_len zero misconfig [ 695.365652][T25449] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4900'. [ 695.386912][T25457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4902'. [ 695.817960][T25473] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4908'. [ 696.167109][T25493] netlink: 'syz.1.4914': attribute type 32 has an invalid length. [ 696.226621][T25493] veth0_macvtap: Caught tx_queue_len zero misconfig [ 696.317025][T25493] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4914'. [ 696.735578][T25517] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4916'. [ 697.166260][T25535] erspan0: left promiscuous mode [ 697.171424][T25535] erspan0: left allmulticast mode [ 697.209924][T25535] bridge0: port 3(team0) entered disabled state [ 697.216454][T25535] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.224161][T25535] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.275416][T25535] wg1: left promiscuous mode [ 697.283299][T25535] wg1: left allmulticast mode [ 697.340102][T25535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 697.367245][T25535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.387878][T25535] 0: left allmulticast mode [ 697.392499][T25535] hsr_slave_0: left allmulticast mode [ 697.399117][T25535] hsr_slave_1: left allmulticast mode [ 697.439872][T25535] bond3: left promiscuous mode [ 697.444911][T25535] bridge3: left promiscuous mode [ 697.450051][T25535] bond3: left allmulticast mode [ 697.456331][T25535] bridge3: left allmulticast mode [ 697.474758][T25535] geneve2: left promiscuous mode [ 697.482009][T25535] mac80211_hwsim hwsim56 wlan0: left promiscuous mode [ 697.489138][T25535] mac80211_hwsim hwsim56 wlan0: left allmulticast mode [ 697.496409][T25535] veth5: left allmulticast mode [ 697.502583][T25535] sit1: left promiscuous mode [ 697.512268][T25535] ip6tnl2: left promiscuous mode [ 697.553321][T24661] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.586214][T24661] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.627770][T25549] netlink: 'syz.3.4928': attribute type 10 has an invalid length. [ 697.710512][T25547] veth7: entered promiscuous mode [ 697.716600][T24661] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.727157][T24661] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.744317][T24661] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.753064][T24661] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.817848][T25549] bond1: (slave dummy0): Releasing active interface [ 697.822953][T25552] netlink: 'syz.3.4928': attribute type 10 has an invalid length. [ 697.833320][T25549] dummy0: left allmulticast mode [ 697.879642][T25549] team0: Port device dummy0 added [ 698.044890][T24661] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.070903][T24661] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.084793][T25556] nbd4: detected capacity change from 0 to 63 [ 698.121304][T25552] team0: Port device dummy0 removed [ 698.131107][T25552] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 698.149880][T25576] ip6tnl1: entered allmulticast mode [ 698.159754][ T5633] block nbd4: Receive control failed (result -104) [ 698.162055][T21407] block nbd4: Receive control failed (result -32) [ 698.181874][T25586] macsec0: entered promiscuous mode [ 698.237753][T25585] macsec0: left promiscuous mode [ 698.427538][T25599] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode [ 698.433962][T24657] bond0: (slave dummy0): interface is now down [ 698.456648][T25602] netlink: 'syz.2.4941': attribute type 13 has an invalid length. [ 698.467595][T25606] netlink: 'syz.4.4942': attribute type 3 has an invalid length. [ 698.494181][T25606] netlink: 'syz.4.4942': attribute type 3 has an invalid length. [ 698.513525][T25610] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001 [ 698.584303][ T48] bond0: (slave dummy0): interface is now down [ 698.602059][ T48] bond0: now running without any active interface! [ 698.679777][T25620] ip6tnl0: Caught tx_queue_len zero misconfig [ 698.751425][T25627] netlink: 'syz.3.4948': attribute type 1 has an invalid length. [ 698.760857][T25622] macsec2: entered promiscuous mode [ 698.771402][T25622] virt_wifi0: entered promiscuous mode [ 698.854835][T25627] bond6: entered promiscuous mode [ 698.868330][T25627] 8021q: adding VLAN 0 to HW filter on device bond6 [ 698.881713][T25620] veth0_macvtap: entered allmulticast mode [ 698.888668][T25620] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 698.917451][T25639] macsec0: entered promiscuous mode [ 698.946986][T25638] macsec0: left promiscuous mode [ 699.068247][T25646] syzkaller1: entered promiscuous mode [ 699.094384][T25646] syzkaller1: entered allmulticast mode [ 699.256799][T25658] __nla_validate_parse: 12 callbacks suppressed [ 699.256817][T25658] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4957'. [ 699.347868][T25659] netlink: 1544 bytes leftover after parsing attributes in process `syz.0.4956'. [ 699.814156][T25682] macsec0: entered promiscuous mode [ 699.836388][T25681] macsec0: left promiscuous mode [ 700.243323][T25700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4968'. [ 700.275313][T25700] ipvlan0: entered allmulticast mode [ 700.280835][T25700] gretap0: entered allmulticast mode [ 700.507039][T25706] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4970'. [ 700.789219][T25717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4972'. [ 700.827401][T25717] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4972'. [ 700.982151][T25718] bond9: entered allmulticast mode [ 701.050002][T25723] macvlan2: entered promiscuous mode [ 701.056583][T25723] macvlan2: entered allmulticast mode [ 701.064503][T25723] bond9: (slave macvlan2): Opening slave failed [ 701.103538][T25728] syz_tun: left promiscuous mode [ 701.109015][T25728] bridge0: port 3(syz_tun) entered disabled state [ 701.136293][T25728] bond0: (slave dummy0): Releasing backup interface [ 701.151878][T25728] bridge_slave_0: left allmulticast mode [ 701.152031][T25729] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4975'. [ 701.160314][T25728] bridge_slave_0: left promiscuous mode [ 701.176774][T25728] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.186539][T25728] bridge_slave_1: left allmulticast mode [ 701.192297][T25728] bridge_slave_1: left promiscuous mode [ 701.198316][T25728] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.208964][T25728] bond0: (slave bond_slave_0): Releasing backup interface [ 701.219439][T25728] bond0: (slave bond_slave_1): Releasing backup interface [ 701.231436][T25728] team0: Port device team_slave_0 removed [ 701.242264][T25728] team0: Port device team_slave_1 removed [ 701.255422][T25728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.262833][T25728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 701.271851][T25728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.279636][T25728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.288681][T25728] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 701.315170][ T6934] syz1: Port: 1 Link DOWN [ 701.362258][T25731] macsec0: entered promiscuous mode [ 701.371541][T25730] macsec0: left promiscuous mode [ 701.409891][T25733] netlink: 'syz.3.4977': attribute type 4 has an invalid length. [ 701.417833][T25733] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4977'. [ 701.977936][T25758] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 701.989330][T25758] bond5 (unregistering): Released all slaves [ 702.286683][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 702.973996][T25768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 702.981433][T25688] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 703.076960][T25771] macsec0: entered promiscuous mode [ 703.092172][T25770] macsec0: left promiscuous mode [ 703.277908][T25790] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4989'. [ 703.282925][T25782] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4990'. [ 703.313884][T25790] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 703.375625][T25795] tunl0: Caught tx_queue_len zero misconfig [ 703.452571][T25799] mac80211_hwsim hwsim38 syzkaller0: Caught tx_queue_len zero misconfig [ 703.641954][T25810] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 703.796953][T25825] netlink: 'syz.2.5002': attribute type 1 has an invalid length. [ 703.901544][T25825] bond7: entered promiscuous mode [ 703.945993][T25825] 8021q: adding VLAN 0 to HW filter on device bond7 [ 703.975194][T25829] ipvlan2: entered allmulticast mode [ 703.987613][T25829] bond7: entered allmulticast mode [ 704.037300][T25833] bond7: (slave bridge10): making interface the new active one [ 704.058836][T25846] netlink: 'syz.1.5005': attribute type 4 has an invalid length. [ 704.081928][T25833] bridge10: entered promiscuous mode [ 704.102673][T25833] bridge10: entered allmulticast mode [ 704.114636][T25833] bond7: (slave bridge10): Enslaving as an active interface with an up link [ 704.182982][T25854] IPVS: stopping backup sync thread 20539 ... [ 718.923866][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 721.085858][T25863] __nla_validate_parse: 2 callbacks suppressed [ 721.085875][T25863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5009'. [ 721.132449][T25868] netlink: 'syz.1.5010': attribute type 1 has an invalid length. [ 721.133542][T25864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5009'. [ 721.172543][T25868] 8021q: adding VLAN 0 to HW filter on device bond5 [ 721.234381][T25868] vlan3: entered promiscuous mode [ 721.245616][T25868] bond5: entered promiscuous mode [ 721.271823][T25868] vlan3: entered allmulticast mode [ 721.310770][T25868] bond5: entered allmulticast mode [ 721.470037][T25868] bond5: (slave bridge12): making interface the new active one [ 721.492940][T25868] bridge12: entered promiscuous mode [ 721.508086][T25868] bridge12: entered allmulticast mode [ 721.528665][T25868] bond5: (slave bridge12): Enslaving as an active interface with an up link [ 721.566534][T25882] bridge0: port 4(erspan0) entered blocking state [ 721.586721][T25882] bridge0: port 4(erspan0) entered disabled state [ 721.597557][T25882] erspan0: entered allmulticast mode [ 721.615472][T25882] erspan0: entered promiscuous mode [ 721.633342][T25889] erspan0: left allmulticast mode [ 721.662045][T25889] erspan0: left promiscuous mode [ 721.678487][T25889] bridge0: port 4(erspan0) entered disabled state [ 722.129006][T25914] netlink: 'syz.0.5020': attribute type 1 has an invalid length. [ 722.163423][T25916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5021'. [ 722.247439][T25920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5020'. [ 722.384609][T25919] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 722.398356][T25919] bond6: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 722.413890][T25919] bond6: (slave vxcan3): making interface the new active one [ 722.422173][T25919] bond6: (slave vxcan3): Enslaving as an active interface with an up link [ 722.438117][T25920] bond6 (unregistering): (slave vxcan3): Releasing backup interface [ 722.467709][T25920] bond6 (unregistering): Released all slaves [ 722.514254][T25930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5025'. [ 722.860767][T25951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5032'. [ 722.906453][T25951] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 722.926227][T25958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5035'. [ 722.941558][T25951] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5032'. [ 722.965676][T25951] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 722.984181][T25962] macsec0: entered promiscuous mode [ 723.098887][T25967] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5037'. [ 723.121370][T25952] macsec0: left promiscuous mode [ 723.138929][T25967] wg2: Caught tx_queue_len zero misconfig [ 723.160384][T25967] netlink: 'syz.2.5037': attribute type 49 has an invalid length. [ 723.193022][T25967] vlan0: Caught tx_queue_len zero misconfig [ 723.291482][T25976] tunl0: Caught tx_queue_len zero misconfig [ 723.320326][T25976] xfrm0: Caught tx_queue_len zero misconfig [ 723.372007][T25980] tipc: Enabled bearer , priority 0 [ 723.398875][T25980] syzkaller0: entered promiscuous mode [ 723.405521][T25980] syzkaller0: entered allmulticast mode [ 723.422720][T25982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.459086][T25982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.486064][T25983] tipc: Resetting bearer [ 723.500948][T25979] tipc: Resetting bearer [ 723.529956][T25979] tipc: Disabling bearer [ 723.655207][T25974] Cannot find del_set index 1 as target [ 723.685244][T25995] netlink: 'syz.2.5047': attribute type 7 has an invalid length. [ 723.771111][T25998] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5047'. [ 724.088300][T26013] block nbd5: server does not support multiple connections per device. [ 724.136153][T26013] block nbd5: shutting down sockets [ 724.284981][T26022] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 724.706842][T26050] syzkaller0: entered promiscuous mode [ 724.715744][T26050] syzkaller0: entered allmulticast mode [ 724.761866][T26050] tipc: Enabled bearer , priority 0 [ 724.812167][T26050] tipc: Resetting bearer [ 724.825889][T26050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.836096][T26050] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.853488][T26049] tipc: Resetting bearer [ 724.896906][T26049] tipc: Disabling bearer [ 725.445880][T26078] bond11: option lp_interval: invalid value (0) [ 725.454099][T26078] bond11: option lp_interval: allowed values 1 - 2147483647 [ 725.486935][T26078] bond11 (unregistering): Released all slaves [ 726.181305][T26110] __nla_validate_parse: 5 callbacks suppressed [ 726.181321][T26110] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5078'. [ 726.206599][T26110] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5078'. [ 726.235985][T26112] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5076'. [ 726.354654][T26120] batman_adv: batadv0: Interface deactivated: vlan2 [ 726.507192][T26120] bridge0: port 3(dummy0) entered disabled state [ 726.513848][T26120] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.521337][T26120] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.758535][T26120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.792661][T26120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.973183][T26120] veth0_macvtap: left allmulticast mode [ 727.385350][T26120] bond8: left promiscuous mode [ 727.394094][T26120] bridge16: left promiscuous mode [ 727.399451][T26120] bond8: left allmulticast mode [ 727.404975][T26120] bridge16: left allmulticast mode [ 727.454974][T26120] bond9: left allmulticast mode [ 727.488640][T24657] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.498174][T24657] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.564046][T24657] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.584623][T24657] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.655805][T24657] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.668725][T24657] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.735380][T26157] netlink: 216 bytes leftover after parsing attributes in process `syz.4.5085'. [ 727.745158][T26157] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5085'. [ 727.755767][T26157] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5085'. [ 727.769740][T24657] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 727.779567][T24657] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.847044][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.859004][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.870827][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.882102][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.903578][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.915641][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.927113][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.939788][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.951036][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.969097][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.981534][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 727.993047][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.006983][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.028427][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.041333][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.053624][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.077931][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.101043][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.114093][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.129461][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.142650][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.165671][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.177171][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.190075][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.206382][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.230376][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.246159][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.258193][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.269565][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.287236][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.305593][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.317737][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.330411][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.342098][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.354151][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.366970][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.381069][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.394360][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.410240][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.422925][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.441549][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.459019][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.474979][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.486609][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.504690][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.516109][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.526732][ T2623] block nbd4: Connection timed out, retrying (0/2 alive) [ 728.538865][ T2623] block nbd4: Connection timed out, retrying (0/2 alive) [ 728.546413][ T2623] block nbd4: Connection timed out, retrying (0/2 alive) [ 728.549558][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.554043][ T2623] block nbd4: Connection timed out, retrying (0/2 alive) [ 728.571782][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.580340][ T39] block nbd4: Dead connection, failed to find a fallback [ 728.592056][ T39] block nbd4: shutting down sockets [ 728.599897][ T39] blk_print_req_error: 138 callbacks suppressed [ 728.599912][ T39] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.616450][ T39] buffer_io_error: 138 callbacks suppressed [ 728.616463][ T39] Buffer I/O error on dev nbd4, logical block 2, async page read [ 728.627675][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.630331][ T39] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.649246][ T39] Buffer I/O error on dev nbd4, logical block 1, async page read [ 728.657145][ T39] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.658715][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.668313][ T39] Buffer I/O error on dev nbd4, logical block 0, async page read [ 728.685233][ T39] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.694469][ T39] Buffer I/O error on dev nbd4, logical block 3, async page read [ 728.702522][T24278] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.707770][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.714055][T24278] Buffer I/O error on dev nbd4, logical block 0, async page read [ 728.729328][T24278] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.739661][T24278] Buffer I/O error on dev nbd4, logical block 1, async page read [ 728.741910][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.749024][T24278] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.767116][T24278] Buffer I/O error on dev nbd4, logical block 2, async page read [ 728.776461][T24278] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.786408][T24278] Buffer I/O error on dev nbd4, logical block 3, async page read [ 728.790211][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.794534][T24278] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.813458][T24278] Buffer I/O error on dev nbd4, logical block 0, async page read [ 728.821497][T24278] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 728.830936][T24278] Buffer I/O error on dev nbd4, logical block 1, async page read [ 728.838594][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.841794][T24278] ldm_validate_partition_table(): Disk read failed. [ 728.859354][T24278] Dev nbd4: unable to read RDB block 0 [ 728.866798][T24278] nbd4: unable to read partition table [ 728.875141][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.890437][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.901667][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.932657][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.938251][T24278] ldm_validate_partition_table(): Disk read failed. [ 728.945073][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.963709][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.977307][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.979178][T24278] Dev nbd4: unable to read RDB block 0 [ 728.989097][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.015226][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.026248][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.032039][T24278] nbd4: unable to read partition table [ 729.076977][T26161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.347463][T26167] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 729.357568][T26167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5088'. [ 729.940705][T26205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5097'. [ 729.961757][T26208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5100'. [ 729.973179][T26208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5100'. [ 730.003357][T26210] geneve0: Caught tx_queue_len zero misconfig [ 730.137870][T26218] batadv_slave_0: Caught tx_queue_len zero misconfig [ 730.417988][T26235] syzkaller0: entered promiscuous mode [ 730.449572][T26235] syzkaller0: entered allmulticast mode [ 732.897566][T26194] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 733.139755][T26269] __nla_validate_parse: 66 callbacks suppressed [ 733.139771][T26269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5118'. [ 733.261668][T26280] netlink: 'syz.3.5118': attribute type 5 has an invalid length. [ 733.296918][T26280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5118'. [ 733.347201][T26283] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5120'. [ 733.434429][T26283] batman_adv: batadv0: Interface activated: vlan0 [ 733.463259][T26285] xfrm1: entered allmulticast mode [ 733.519586][T26291] bond7: invalid ARP target 0.0.0.0 specified for addition [ 733.541358][T26291] bond7: option arp_ip_target: invalid value (0) [ 733.562330][T26291] bond7 (unregistering): Released all slaves [ 733.730851][T26294] bond7: invalid ARP target 0.0.0.0 specified for addition [ 733.755480][T26294] bond7: option arp_ip_target: invalid value (0) [ 733.790482][T26294] bond7 (unregistering): Released all slaves [ 733.851594][T26310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5127'. [ 733.947851][T26312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5128'. [ 733.968459][T26312] sit2: entered allmulticast mode [ 734.015897][T26319] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5129'. [ 734.146945][T26324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5129'. [ 734.320707][T26329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5133'. [ 734.404980][T26337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5135'. [ 734.413244][T26334] veth9: entered promiscuous mode [ 734.427119][T26337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5135'. [ 734.447913][T26337] netlink: 'syz.0.5135': attribute type 14 has an invalid length. [ 734.508911][T26343] syzkaller1: entered promiscuous mode [ 734.542384][T26343] syzkaller1: entered allmulticast mode [ 734.681600][T26351] netlink: 'syz.0.5138': attribute type 1 has an invalid length. [ 734.743387][T26351] bond6: entered promiscuous mode [ 734.754080][T26351] 8021q: adding VLAN 0 to HW filter on device bond6 [ 734.793301][T26353] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 734.812436][T26353] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 734.820941][T26353] veth0_virt_wifi: entered allmulticast mode [ 734.828964][T26353] veth0_virt_wifi: entered promiscuous mode [ 734.863790][T26351] 8021q: adding VLAN 0 to HW filter on device bond6 [ 734.892330][T26351] bond6: (slave ipip0): The slave device specified does not support setting the MAC address [ 734.914553][T26351] bond6: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 734.929638][T26351] bond6: (slave ipip0): making interface the new active one [ 734.937240][T26351] ipip0: entered promiscuous mode [ 734.945086][T26351] bond6: (slave ipip0): Enslaving as an active interface with an up link [ 735.159869][T26382] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 735.326174][T26393] netlink: 'syz.3.5151': attribute type 1 has an invalid length. [ 735.336917][T26396] netlink: 'syz.0.5152': attribute type 3 has an invalid length. [ 735.488709][T26409] netlink: 'syz.2.5155': attribute type 1 has an invalid length. [ 735.526535][T26409] netlink: 'syz.2.5155': attribute type 1 has an invalid length. [ 735.626113][T26409] bond9: entered promiscuous mode [ 735.631829][T26409] 8021q: adding VLAN 0 to HW filter on device bond9 [ 735.672125][T26414] bond9: (slave bridge11): making interface the new active one [ 735.679933][T26414] bridge11: entered promiscuous mode [ 735.691362][T26414] bond9: (slave bridge11): Enslaving as an active interface with an up link [ 735.788470][T26409] bond9: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 735.825825][T26409] bond9: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 736.052802][T26433] x_tables: ip_tables: osf match: only valid for protocol 6 [ 736.099233][T26431] ip6_vti0: mtu less than device minimum [ 736.426270][T26447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 736.485766][T26454] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 736.843785][ T5633] Bluetooth: hci3: command 0x0405 tx timeout [ 737.009143][T26466] tipc: Enabled bearer , priority 0 [ 737.017307][T26478] syzkaller0: entered promiscuous mode [ 737.024746][T26478] syzkaller0: entered allmulticast mode [ 737.050182][T26466] tipc: Resetting bearer [ 737.096552][T26465] tipc: Resetting bearer [ 737.258298][T26489] netlink: 'syz.2.5175': attribute type 13 has an invalid length. [ 737.267355][T26489] netlink: 'syz.2.5175': attribute type 17 has an invalid length. [ 737.299070][T26465] tipc: Disabling bearer [ 737.552532][T26489] bond3: left promiscuous mode [ 737.568464][T26489] bridge8: left promiscuous mode [ 737.585944][T26489] bond5: left promiscuous mode [ 737.596686][T26489] vcan1: left promiscuous mode [ 737.611990][T26489] macvlan2: left allmulticast mode [ 737.626132][T26489] bond7: left promiscuous mode [ 737.637449][T26489] bridge10: left promiscuous mode [ 737.645684][T26502] netlink: 'syz.4.5179': attribute type 1 has an invalid length. [ 737.654880][T26489] ipvlan2: left allmulticast mode [ 737.660107][T26489] bond7: left allmulticast mode [ 737.665110][T26489] bridge10: left allmulticast mode [ 737.671856][T26489] bond9: left promiscuous mode [ 737.676878][T26489] bridge11: left promiscuous mode [ 737.682851][T26487] syzkaller1: entered promiscuous mode [ 737.688627][T26487] syzkaller1: entered allmulticast mode [ 737.755790][T26504] dummy0: left allmulticast mode [ 737.760893][T26504] dummy0: left promiscuous mode [ 737.766334][T26504] bridge0: port 3(dummy0) entered disabled state [ 737.781116][T26504] bond11: (slave dummy0): making interface the new active one [ 737.795463][T26504] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 737.833424][T26502] bond11: entered promiscuous mode [ 737.848385][T26502] dummy0: entered promiscuous mode [ 737.870038][T26501] bond11: left promiscuous mode [ 737.876023][T26501] dummy0: left promiscuous mode [ 738.260812][T26522] xt_ecn: cannot match TCP bits for non-tcp packets [ 738.296980][T26520] __nla_validate_parse: 19 callbacks suppressed [ 738.297018][T26520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5182'. [ 738.297114][T26527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5188'. [ 738.446575][T26512] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 738.521593][ T6924] syz1: Port: 1 Link ACTIVE [ 738.735829][T26548] lo: Caught tx_queue_len zero misconfig [ 738.838952][T26551] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5194'. [ 738.961632][T26558] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5196'. [ 738.990703][T26561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5197'. [ 739.018474][T26561] lo: Caught tx_queue_len zero misconfig [ 740.079884][T26587] validate_nla: 3 callbacks suppressed [ 740.079901][T26587] netlink: 'syz.3.5204': attribute type 1 has an invalid length. [ 740.139977][T26587] netlink: 'syz.3.5204': attribute type 61 has an invalid length. [ 740.921257][T26606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5210'. [ 740.940444][T26605] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 740.979183][T26606] netlink: 'syz.3.5210': attribute type 5 has an invalid length. [ 741.004345][T26606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5210'. [ 741.119368][T26616] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5215'. [ 741.826280][T26671] netlink: 'syz.1.5223': attribute type 27 has an invalid length. [ 742.222572][T26682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5225'. [ 742.241042][T26684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.416862][T26693] netlink: 'syz.2.5225': attribute type 5 has an invalid length. [ 742.446954][T26693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5225'. [ 742.701217][T26703] Cannot find del_set index 1 as target [ 742.953378][T26724] IPv6: addrconf: prefix option has invalid lifetime [ 743.308090][T26724] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 743.371200][T26738] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 743.390060][T26724] __nla_validate_parse: 3 callbacks suppressed [ 743.390075][T26724] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5235'. [ 743.409134][ T6924] geneve1: entered promiscuous mode [ 744.065346][T26770] netlink: 'syz.4.5246': attribute type 27 has an invalid length. [ 744.111768][T26771] netlink: 'syz.4.5246': attribute type 10 has an invalid length. [ 744.169766][T26774] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5247'. [ 744.682754][T26789] netlink: 'syz.2.5253': attribute type 1 has an invalid length. [ 744.698520][T26789] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5253'. [ 744.822688][T26791] netlink: 'syz.4.5254': attribute type 3 has an invalid length. [ 744.871841][T26791] nbd: nbd4 already in use [ 744.897487][T26791] block nbd4: NBD_DISCONNECT [ 744.913509][T26791] block nbd4: Send disconnect failed -32 [ 744.926735][T26791] block nbd4: Send disconnect failed -32 [ 745.293583][T26804] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5258'. [ 745.345308][T26808] netlink: 'syz.1.5258': attribute type 1 has an invalid length. [ 745.829422][T26829] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5266'. [ 745.829427][T26826] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5266'. [ 746.377970][T26849] dvmrp0: entered allmulticast mode [ 746.842792][T26870] netlink: 'syz.2.5274': attribute type 1 has an invalid length. [ 747.348264][T26870] 8021q: adding VLAN 0 to HW filter on device bond10 [ 747.408120][T26871] bond10: option tlb_dynamic_lb: unable to set because the bond device is up [ 747.452476][T26873] bridge0: entered allmulticast mode [ 747.702250][T26891] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5280'. [ 747.795963][T26890] syzkaller0: entered promiscuous mode [ 747.820188][T26890] syzkaller0: entered allmulticast mode [ 747.829586][T26902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5282'. [ 747.851117][T26902] netlink: 261 bytes leftover after parsing attributes in process `syz.1.5282'. [ 747.958872][T26903] ip6tnl3: entered promiscuous mode [ 747.971323][T26903] ip6tnl3: entered allmulticast mode [ 747.996774][T26898] netlink: 'syz.3.5281': attribute type 1 has an invalid length. [ 748.091118][T26912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5284'. [ 749.152532][T26912] batadv_slave_0: Caught tx_queue_len zero misconfig [ 749.250857][T26942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5288'. [ 749.269461][T26941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5287'. [ 749.352316][T26947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5290'. [ 749.543128][T26959] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 749.595538][T26962] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 749.612571][T26966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5295'. [ 749.617057][T26962] netlink: 300 bytes leftover after parsing attributes in process `syz.4.5293'. [ 749.767415][T26974] batman_adv: batadv0: Interface activated: vlan2 [ 749.767986][T26962] netlink: 'syz.4.5293': attribute type 21 has an invalid length. [ 749.800241][T26974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.821758][T26974] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.900159][T26977] bond11 (unregistering): Released all slaves [ 749.991903][T26962] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5293'. [ 750.157048][T26984] netlink: 'syz.1.5297': attribute type 10 has an invalid length. [ 750.178279][T26984] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5297'. [ 750.249233][T26988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5299'. [ 750.282902][T26984] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 750.432783][T26997] netlink: 'syz.4.5299': attribute type 5 has an invalid length. [ 750.464182][T26997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5299'. [ 750.925890][T27017] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5301'. [ 751.821683][T14297] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.859383][T14297] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.911547][T14297] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.925258][T14297] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.944660][T27051] netlink: 'syz.1.5311': attribute type 5 has an invalid length. [ 752.513067][T27084] netlink: 'syz.1.5316': attribute type 3 has an invalid length. [ 752.569753][T27084] netlink: 'syz.1.5316': attribute type 3 has an invalid length. [ 752.776991][T27084] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 752.954094][T27109] netlink: 'syz.2.5320': attribute type 3 has an invalid length. [ 752.980187][T27110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 752.996204][T27109] netlink: 'syz.2.5320': attribute type 3 has an invalid length. [ 753.030792][T27112] netlink: 'syz.3.5318': attribute type 11 has an invalid length. [ 772.518877][T27172] xt_hashlimit: size too large, truncated to 1048576 [ 772.548688][T27170] __nla_validate_parse: 8 callbacks suppressed [ 772.548703][T27170] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5332'. [ 772.584720][T27174] bridge_slave_0 (unregistering): left allmulticast mode [ 772.598093][T27174] bridge_slave_0 (unregistering): left promiscuous mode [ 772.623845][T27174] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.637779][T27177] netlink: 'syz.4.5333': attribute type 1 has an invalid length. [ 772.646022][T27177] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5333'. [ 772.674479][T27177] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5333'. [ 772.726207][ T6943] hid-generic 0005:10CF:7FFF.0001: item fetching failed at offset 0/1 [ 772.740649][ T6943] hid-generic 0005:10CF:7FFF.0001: probe with driver hid-generic failed with error -22 [ 772.997226][T27197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5336'. [ 773.027833][T27197] netlink: 'syz.3.5336': attribute type 1 has an invalid length. [ 773.255027][T27209] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5338'. [ 773.456791][T27215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5340'. [ 773.752762][T27233] netlink: 'syz.1.5342': attribute type 1 has an invalid length. [ 773.761792][T27233] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5342'. [ 774.021989][T27241] syzkaller0: entered promiscuous mode [ 774.027986][T27241] syzkaller0: entered allmulticast mode [ 774.051436][T27242] IPVS: length: 186 != 8 [ 774.313993][T27256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5350'. [ 774.336248][T27255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5350'. [ 774.411954][T27250] geneve1: left promiscuous mode [ 774.630618][T27250] batadv0: left allmulticast mode [ 774.702718][T27250] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 774.905565][ T6951] syz1: Port: 1 Link DOWN [ 775.097633][T27272] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5357'. [ 775.118530][T27272] lo: Caught tx_queue_len zero misconfig [ 775.775039][T27266] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 776.001934][T27327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 776.983159][T27374] pimreg: entered allmulticast mode [ 777.437989][T27407] sock: sock_set_timeout: `syz.0.5393' (pid 27407) tries to set negative timeout [ 777.503523][T27411] pim6reg: entered allmulticast mode [ 777.519077][T27411] pim6reg: left allmulticast mode [ 777.577238][T27416] Cannot find add_set index 2 as target [ 778.405715][T27441] tipc: Resetting bearer [ 778.477991][T27445] __nla_validate_parse: 7 callbacks suppressed [ 778.478009][T27445] netlink: 5000 bytes leftover after parsing attributes in process `syz.0.5402'. [ 778.529215][T27445] openvswitch: netlink: Flow key attr not present in new flow. [ 779.021022][T27465] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 779.081623][T27469] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 779.363201][T27502] tunl0: Caught tx_queue_len zero misconfig [ 780.384980][T27546] netlink: 592 bytes leftover after parsing attributes in process `syz.3.5421'. [ 780.489189][T27549] netlink: 'syz.3.5422': attribute type 7 has an invalid length. [ 780.500856][T27549] : entered promiscuous mode [ 781.997897][T27477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 782.009554][T27486] netlink: 'syz.0.5411': attribute type 2 has an invalid length. [ 782.216464][T27557] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5425'. [ 782.579795][T27584] xt_CT: You must specify a L4 protocol and not use inversions on it [ 782.762060][T27600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5437'. [ 782.779248][T27600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5437'. [ 782.850734][T27603] netlink: 774 bytes leftover after parsing attributes in process `syz.0.5438'. [ 782.862076][T27603] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5438'. [ 782.977900][T27606] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 783.078556][T27612] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5440'. [ 783.090728][T27612] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5440'. [ 783.107150][T27613] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5440'. [ 783.760085][T27650] netlink: 'syz.0.5452': attribute type 10 has an invalid length. [ 783.770270][T27651] netlink: 'syz.4.5451': attribute type 15 has an invalid length. [ 783.941022][T27650] team0 (unregistering): Port device team_slave_0 removed [ 783.983148][T27650] team0 (unregistering): Port device team_slave_1 removed [ 784.014821][T27660] __nla_validate_parse: 5 callbacks suppressed [ 784.014838][T27660] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5456'. [ 784.047470][T27660] siw: device registration error -23 [ 784.571163][T27702] siw: device registration error -23 [ 784.688251][T27708] xt_bpf: check failed: parse error [ 784.882770][T27716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5473'. [ 785.067556][T27725] netlink: 'syz.0.5476': attribute type 1 has an invalid length. [ 785.124394][T27728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5477'. [ 785.134765][T27730] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5476'. [ 785.374537][T27741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5480'. [ 785.404062][T27741] batman_adv: batadv0: Removing interface: macsec1 [ 785.446927][T27741] batman_adv: batadv0: Removing interface: vlan2 [ 785.795866][T27759] xt_TCPMSS: Only works on TCP SYN packets [ 785.965541][T27779] netlink: 'syz.2.5490': attribute type 3 has an invalid length. [ 786.024412][T27779] netlink: 'syz.2.5490': attribute type 3 has an invalid length. [ 786.074603][T27781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5491'. [ 786.160706][T27796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5493'. [ 786.223820][T27797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5493'. [ 786.246798][T27796] xfrm1: entered promiscuous mode [ 786.273839][T27796] xfrm1: entered allmulticast mode [ 786.373924][T27805] sctp: [Deprecated]: syz.4.5495 (pid 27805) Use of int in maxseg socket option. [ 786.373924][T27805] Use struct sctp_assoc_value instead [ 786.401731][T27797] bond7: entered promiscuous mode [ 786.431205][T27797] 8021q: adding VLAN 0 to HW filter on device bond7 [ 786.686724][T27817] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5496'. [ 786.849067][T27825] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.5500'. [ 786.974932][T27827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 787.054265][T27829] 7d2: renamed from lo (while UP) [ 787.577265][T27849] batman_adv: batadv0: Interface deactivated: vlan0 [ 787.601412][T27850] netlink: 'syz.1.5510': attribute type 13 has an invalid length. [ 787.612278][T27850] netlink: 'syz.1.5510': attribute type 17 has an invalid length. [ 787.793010][T27850] batman_adv: batadv0: Interface activated: vlan0 [ 787.944086][T27850] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.967887][T27850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.033277][T27850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.047726][T27850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.078963][T27850] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 788.103383][T27850] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 788.119562][T27850] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 788.138530][T24655] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.145719][T24655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.158561][T24655] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.165788][T24655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.197512][T24655] bridge0: port 3(team0) entered blocking state [ 788.203917][T24655] bridge0: port 3(team0) entered forwarding state [ 788.230667][T27867] tipc: Enabling of bearer rejected, failed to enable media [ 788.456910][T27878] netlink: 'syz.0.5517': attribute type 1 has an invalid length. [ 788.518151][T27883] netlink: 'syz.2.5521': attribute type 18 has an invalid length. [ 788.608126][T27878] bond8: (slave geneve2): Opening slave failed [ 788.679366][T27891] 8021q: adding VLAN 0 to HW filter on device bond8 [ 788.878070][T27907] netlink: 'syz.0.5528': attribute type 9 has an invalid length. [ 789.046406][T27918] __nla_validate_parse: 14 callbacks suppressed [ 789.046449][T27918] netlink: 732 bytes leftover after parsing attributes in process `syz.1.5529'. [ 789.086700][T27918] netlink: 732 bytes leftover after parsing attributes in process `syz.1.5529'. [ 789.124265][T27921] hma(kX: entered promiscuous mode [ 789.192951][T27924] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5531'. [ 789.502549][T27938] batman_adv: batadv0: Adding interface: dummy0 [ 789.509392][T27938] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 790.020908][T27944] syzkaller0: entered promiscuous mode [ 790.030322][T27944] syzkaller0: entered allmulticast mode [ 790.082416][T27944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5537'. [ 790.104917][T27947] geneve3: entered promiscuous mode [ 790.227834][T27957] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5544'. [ 790.264465][T27957] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 790.391538][T27969] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5547'. [ 790.528353][T27982] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 790.572351][T27980] gretap2: entered promiscuous mode [ 790.588578][T27980] gretap2: entered allmulticast mode [ 790.605487][T27982] pim6reg: entered allmulticast mode [ 790.731196][T27997] netlink: 'syz.4.5554': attribute type 4 has an invalid length. [ 790.739346][T27997] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5554'. [ 790.866832][T28001] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5556'. [ 790.902478][T28000] netlink: 'syz.4.5556': attribute type 1 has an invalid length. [ 791.100509][T28023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5562'. [ 791.143237][T28023] ip6gre1: entered promiscuous mode [ 791.150056][T28023] ip6gre1: entered allmulticast mode [ 791.164763][T28026] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 791.590228][T28046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5569'. [ 791.846837][ T30] audit: type=1804 audit(1779118844.485:24): pid=28055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5572" name="/newroot/534/cgroup.controllers" dev="tmpfs" ino=2750 res=1 errno=0 [ 791.908157][ T30] audit: type=1800 audit(1779118844.485:25): pid=28055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5572" name="cgroup.controllers" dev="tmpfs" ino=2750 res=0 errno=0 [ 792.224579][T28080] netlink: 'syz.4.5580': attribute type 1 has an invalid length. [ 792.461894][T28092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 792.490625][T28094] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 793.907308][T28147] tipc: Enabled bearer , priority 0 [ 793.923575][T28147] syzkaller0: entered promiscuous mode [ 793.930978][T28147] syzkaller0: entered allmulticast mode [ 793.989506][T28147] tipc: Resetting bearer [ 794.021713][T28146] tipc: Resetting bearer [ 794.072140][T28146] tipc: Disabling bearer [ 794.430555][T28173] netlink: 'syz.1.5601': attribute type 1 has an invalid length. [ 794.434249][T28170] __nla_validate_parse: 5 callbacks suppressed [ 794.434264][T28170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5601'. [ 794.538650][T28173] 8021q: adding VLAN 0 to HW filter on device bond6 [ 794.579369][T28182] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5603'. [ 794.607405][T28182] nbd: couldn't find a device at index 0 [ 794.637135][T28181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5603'. [ 794.654105][T28181] nbd: couldn't find a device at index 0 [ 794.996270][T28206] netlink: 'syz.0.5611': attribute type 1 has an invalid length. [ 795.061663][T28216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5613'. [ 795.139247][T28206] gretap1: entered allmulticast mode [ 795.167819][T28206] bond9: (slave gretap1): making interface the new active one [ 795.177054][T28206] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 795.260412][T28223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5613'. [ 795.271489][T28216] 8021q: adding VLAN 0 to HW filter on device bond11 [ 795.282542][T28223] bond11 (unregistering): Released all slaves [ 795.516602][T28220] bond11 (unregistering): Released all slaves [ 795.630477][T28218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5611'. [ 795.662754][T28218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5611'. [ 795.889647][T28254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5617'. [ 795.970834][T28253] netlink: 'syz.3.5619': attribute type 16 has an invalid length. [ 796.052253][T28258] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5620'. [ 796.272082][T28256] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 796.797057][T28292] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5629'. [ 797.065360][T28301] netlink: 'syz.4.5631': attribute type 1 has an invalid length. [ 797.084785][T28301] netlink: 'syz.4.5631': attribute type 2 has an invalid length. [ 797.146780][T28301] netlink: 'syz.4.5631': attribute type 1 has an invalid length. [ 797.335832][T28308] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 797.391872][T28310] netlink: 'syz.0.5634': attribute type 8 has an invalid length. [ 797.610151][T28321] netlink: 'syz.1.5637': attribute type 21 has an invalid length. [ 797.906076][T28335] netlink: 'syz.4.5641': attribute type 1 has an invalid length. [ 797.985796][T28335] bond12: entered promiscuous mode [ 797.991344][T28335] 8021q: adding VLAN 0 to HW filter on device bond12 [ 798.012359][T28339] bond12: entered allmulticast mode [ 798.029755][T28338] syzkaller1: entered promiscuous mode [ 798.036051][T28338] syzkaller1: entered allmulticast mode [ 798.136703][T28335] bond12: (slave bridge21): making interface the new active one [ 798.158104][T28335] bridge21: entered promiscuous mode [ 798.167608][T28335] bridge21: entered allmulticast mode [ 798.179197][T28335] bond12: (slave bridge21): Enslaving as an active interface with an up link [ 798.282007][T28347] netlink: 'syz.1.5644': attribute type 4 has an invalid length. [ 798.326768][T28347] netlink: 'syz.1.5644': attribute type 4 has an invalid length. [ 798.346999][T28351] netlink: 'syz.3.5646': attribute type 32 has an invalid length. [ 798.449853][T24655] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.467697][T28354] netlink: 'syz.4.5647': attribute type 1 has an invalid length. [ 798.507997][T14298] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.634944][T24652] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.677861][T24655] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.700204][T28363] nbd: must specify a device to reconfigure [ 799.265837][T28382] bridge22: entered promiscuous mode [ 799.275604][T28382] bridge22: entered allmulticast mode [ 799.550594][T28391] IPVS: set_ctl: invalid protocol: 320 0.32.0.0:5120 [ 799.598142][T28395] __nla_validate_parse: 4 callbacks suppressed [ 799.598159][T28395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5661'. [ 799.991312][T28408] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5665'. [ 800.089201][T28421] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5669'. [ 800.110511][T28421] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5669'. [ 800.132064][T28422] ip6t_rpfilter: unknown options [ 800.136651][T28423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5668'. [ 800.150791][T28423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5668'. [ 800.260525][T28429] netlink: 'syz.0.5671': attribute type 1 has an invalid length. [ 800.353315][T28433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5671'. [ 800.463048][T28429] bond10: entered promiscuous mode [ 800.493241][T28429] 8021q: adding VLAN 0 to HW filter on device bond10 [ 800.510920][T28446] ip6t_srh: unknown srh match flags 4000 [ 800.567261][T28433] bond10: entered allmulticast mode [ 800.670894][T28429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5671'. [ 800.783513][T28456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5677'. [ 801.169926][T28466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5680'. [ 801.199674][T28466] openvswitch: netlink: Missing key (keys=40, expected=100) [ 801.852679][T28487] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 802.072588][T28490] xt_CT: No such helper "syz1" [ 802.112393][T28493] netlink: zone id is out of range [ 802.614587][T28518] netlink: 'syz.4.5696': attribute type 1 has an invalid length. [ 802.660031][T28520] netlink: 'syz.0.5697': attribute type 1 has an invalid length. [ 802.714144][T28520] bond11: entered promiscuous mode [ 802.724103][T28520] bond11: entered allmulticast mode [ 802.744187][T28520] 8021q: adding VLAN 0 to HW filter on device bond11 [ 802.820796][T28524] erspan1: entered allmulticast mode [ 802.836734][T28524] bond11: (slave erspan1): making interface the new active one [ 802.846369][T28524] erspan1: entered promiscuous mode [ 802.854324][T28524] [ 802.856658][T28524] ============================================ [ 802.862811][T28524] WARNING: possible recursive locking detected [ 802.868974][T28524] syzkaller #0 Not tainted [ 802.873388][T28524] -------------------------------------------- [ 802.879533][T28524] syz.0.5697/28524 is trying to acquire lock: [ 802.885593][T28524] ffff88806474c958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 802.895458][T28524] [ 802.895458][T28524] but task is already holding lock: [ 802.902818][T28524] ffff88807a5b3958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 802.912670][T28524] [ 802.912670][T28524] other info that might help us debug this: [ 802.920710][T28524] Possible unsafe locking scenario: [ 802.920710][T28524] [ 802.928143][T28524] CPU0 [ 802.931409][T28524] ---- [ 802.934669][T28524] lock(&qdisc_xmit_lock_key#4); [ 802.939689][T28524] lock(&qdisc_xmit_lock_key#4); [ 802.944705][T28524] [ 802.944705][T28524] *** DEADLOCK *** [ 802.944705][T28524] [ 802.952827][T28524] May be due to missing lock nesting notation [ 802.952827][T28524] [ 802.961126][T28524] 10 locks held by syz.0.5697/28524: [ 802.966390][T28524] #0: ffffffff9032cb58 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 802.975873][T28524] #1: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 802.984905][T28524] #2: ffffffff8e95ce00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 802.994805][T28524] #3: ffff888035dc1228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 803.007408][T28524] #4: ffff88807a5b3958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 803.017661][T28524] #5: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 803.026520][T28524] #6: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 803.036247][T28524] #7: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 803.045016][T28524] #8: ffffffff8e95ce00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 803.054921][T28524] #9: ffff888036312228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 803.067515][T28524] [ 803.067515][T28524] stack backtrace: [ 803.073393][T28524] CPU: 1 UID: 0 PID: 28524 Comm: syz.0.5697 Not tainted syzkaller #0 PREEMPT(full) [ 803.073410][T28524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 803.073419][T28524] Call Trace: [ 803.073427][T28524] [ 803.073434][T28524] dump_stack_lvl+0xe8/0x150 [ 803.073452][T28524] print_deadlock_bug+0x279/0x290 [ 803.073468][T28524] __lock_acquire+0x253f/0x2cf0 [ 803.073490][T28524] ? sch_direct_xmit+0x15f/0x4c0 [ 803.073506][T28524] lock_acquire+0x106/0x350 [ 803.073518][T28524] ? sch_direct_xmit+0x15f/0x4c0 [ 803.073537][T28524] _raw_spin_lock+0x2e/0x40 [ 803.073552][T28524] ? sch_direct_xmit+0x15f/0x4c0 [ 803.073566][T28524] sch_direct_xmit+0x15f/0x4c0 [ 803.073582][T28524] ? __pfx_sch_direct_xmit+0x10/0x10 [ 803.073597][T28524] ? arp_create+0x100/0x980 [ 803.073619][T28524] __dev_queue_xmit+0x180f/0x3950 [ 803.073639][T28524] ? __dev_queue_xmit+0x2b6/0x3950 [ 803.073655][T28524] ? arpt_do_table+0x256/0x1e30 [ 803.073670][T28524] ? __pfx___dev_queue_xmit+0x10/0x10 [ 803.073685][T28524] ? __pfx_arpt_do_table+0x10/0x10 [ 803.073697][T28524] ? trace_kmem_cache_alloc+0x29/0xe0 [ 803.073718][T28524] ? NF_HOOK+0xa2/0x3c0 [ 803.073733][T28524] NF_HOOK+0x33a/0x3c0 [ 803.073747][T28524] ? __pfx_arp_xmit_finish+0x10/0x10 [ 803.073762][T28524] ? NF_HOOK+0xa2/0x3c0 [ 803.073775][T28524] ? __pfx_NF_HOOK+0x10/0x10 [ 803.073788][T28524] ? lock_acquire+0x106/0x350 [ 803.073800][T28524] ? __pfx_arp_xmit_finish+0x10/0x10 [ 803.073815][T28524] ? inet_addr_type_dev_table+0x25/0x190 [ 803.073833][T28524] arp_xmit+0x16c/0x270 [ 803.073846][T28524] ? arp_xmit+0x23/0x270 [ 803.073860][T28524] arp_solicit+0xbe0/0xe40 [ 803.073877][T28524] ? arp_solicit+0x119/0xe40 [ 803.073892][T28524] ? __pfx_arp_solicit+0x10/0x10 [ 803.073910][T28524] ? __pfx_arp_solicit+0x10/0x10 [ 803.073924][T28524] __neigh_event_send+0xf05/0x14d0 [ 803.073944][T28524] neigh_resolve_output+0x198/0x750 [ 803.073959][T28524] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 803.073979][T28524] ? ip_finish_output2+0x3c2/0x1070 [ 803.073994][T28524] ip_finish_output2+0xca9/0x1070 [ 803.074009][T28524] ? ip_skb_dst_mtu+0x80b/0xa50 [ 803.074025][T28524] ? ip_finish_output+0x40e/0x530 [ 803.074040][T28524] ip_output+0x29f/0x450 [ 803.074054][T28524] ? ip_output+0x5b/0x450 [ 803.074069][T28524] iptunnel_xmit+0x621/0xd10 [ 803.074090][T28524] ip_tunnel_xmit+0x193a/0x1f20 [ 803.074112][T28524] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 803.074128][T28524] ? __pfx_gre_build_header+0x10/0x10 [ 803.074142][T28524] ? kfree+0x1c5/0x640 [ 803.074155][T28524] ? pskb_expand_head+0x458/0x1390 [ 803.074169][T28524] __gre_xmit+0x19e/0x240 [ 803.074183][T28524] ? __pfx___gre_xmit+0x10/0x10 [ 803.074198][T28524] erspan_xmit+0xa41/0x14d0 [ 803.074216][T28524] ? __pfx_erspan_xmit+0x10/0x10 [ 803.074233][T28524] dev_hard_start_xmit+0x2cd/0x830 [ 803.074251][T28524] sch_direct_xmit+0x251/0x4c0 [ 803.074268][T28524] ? __pfx_sch_direct_xmit+0x10/0x10 [ 803.074283][T28524] ? bond_select_active_slave+0x8a0/0xd40 [ 803.074302][T28524] __dev_queue_xmit+0x180f/0x3950 [ 803.074317][T28524] ? __dev_queue_xmit+0x2b6/0x3950 [ 803.074333][T28524] ? __pfx___dev_queue_xmit+0x10/0x10 [ 803.074346][T28524] ? rcu_is_watching+0x15/0xb0 [ 803.074361][T28524] ? trace_kmem_cache_alloc+0x29/0xe0 [ 803.074376][T28524] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 803.074403][T28524] ? alb_send_lp_vid+0x14e/0x550 [ 803.074421][T28524] alb_send_lp_vid+0x348/0x550 [ 803.074438][T28524] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 803.074455][T28524] ? __pfx_alb_set_slave_mac_addr+0x10/0x10 [ 803.074472][T28524] alb_send_learning_packets+0x12c/0x300 [ 803.074489][T28524] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 803.074507][T28524] ? alb_swap_mac_addr+0x230/0x340 [ 803.074524][T28524] alb_fasten_mac_swap+0x639/0xf60 [ 803.074540][T28524] ? dev_addr_mod+0x1ba/0x350 [ 803.074553][T28524] bond_alb_handle_active_change+0xc6d/0xf30 [ 803.074571][T28524] ? __pfx_bond_alb_handle_active_change+0x10/0x10 [ 803.074587][T28524] ? __hw_addr_add_ex+0x43d/0x520 [ 803.074605][T28524] ? __local_bh_enable_ip+0xd0/0x130 [ 803.074620][T28524] bond_change_active_slave+0x106e/0x35f0 [ 803.074634][T28524] ? __pfx_do_sync_core+0x10/0x10 [ 803.074653][T28524] ? lockdep_hardirqs_on+0x7a/0x110 [ 803.074670][T28524] ? smp_call_function_many_cond+0x1051/0x13d0 [ 803.074683][T28524] ? __pfx_bond_change_active_slave+0x10/0x10 [ 803.074698][T28524] ? __pfx_do_sync_core+0x10/0x10 [ 803.074714][T28524] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 803.074727][T28524] ? bond_start_xmit+0x92/0x1900 [ 803.074737][T28524] ? __pfx___text_poke+0x10/0x10 [ 803.074755][T28524] ? static_key_slow_inc_cpuslocked+0xba/0xf0 [ 803.074772][T28524] bond_select_active_slave+0x909/0xd40 [ 803.074789][T28524] ? __pfx_bond_select_active_slave+0x10/0x10 [ 803.074807][T28524] bond_enslave+0x2299/0x3c10 [ 803.074830][T28524] ? __pfx_bond_enslave+0x10/0x10 [ 803.074848][T28524] ? __pfx___dev_notify_flags+0x10/0x10 [ 803.074864][T28524] ? __dev_change_flags+0x5fe/0x7e0 [ 803.074881][T28524] ? mutex_is_locked+0x17/0x50 [ 803.074897][T28524] do_set_master+0x533/0x6d0 [ 803.074911][T28524] rtnl_newlink_create+0x6af/0xb70 [ 803.074922][T28524] ? __pfx___nla_validate_parse+0x10/0x10 [ 803.074942][T28524] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 803.074954][T28524] ? __pfx___mutex_lock+0x10/0x10 [ 803.074968][T28524] ? ns_capable+0x89/0xe0 [ 803.074981][T28524] rtnl_newlink+0x166a/0x1bb0 [ 803.075002][T28524] ? __pfx_rtnl_newlink+0x10/0x10 [ 803.075019][T28524] ? __lock_acquire+0x6b5/0x2cf0 [ 803.075033][T28524] ? __lock_acquire+0x6b5/0x2cf0 [ 803.075048][T28524] ? unwind_next_frame+0xa6/0x2550 [ 803.075065][T28524] ? unwind_next_frame+0xa6/0x2550 [ 803.075079][T28524] ? is_bpf_text_address+0x26/0x2b0 [ 803.075095][T28524] ? is_bpf_text_address+0x26/0x2b0 [ 803.075109][T28524] ? __lock_acquire+0x6b5/0x2cf0 [ 803.075122][T28524] ? kernel_text_address+0xa5/0xe0 [ 803.075139][T28524] ? __kernel_text_address+0xd/0x30 [ 803.075154][T28524] ? unwind_get_return_address+0x4d/0x90 [ 803.075167][T28524] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 803.075184][T28524] ? arch_stack_walk+0xfb/0x150 [ 803.075202][T28524] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 803.075222][T28524] ? __pfx_rtnl_newlink+0x10/0x10 [ 803.075237][T28524] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 803.075252][T28524] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 803.075267][T28524] ? netlink_sendmsg+0x5d4/0xb40 [ 803.075279][T28524] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 803.075295][T28524] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 803.075311][T28524] ? __lock_acquire+0x6b5/0x2cf0 [ 803.075327][T28524] netlink_rcv_skb+0x232/0x4b0 [ 803.075339][T28524] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 803.075355][T28524] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 803.075370][T28524] ? netlink_deliver_tap+0x2e/0x1b0 [ 803.075381][T28524] ? netlink_deliver_tap+0x2e/0x1b0 [ 803.075399][T28524] netlink_unicast+0x75c/0x8e0 [ 803.075419][T28524] netlink_sendmsg+0x813/0xb40 [ 803.075433][T28524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 803.075446][T28524] ? __se_sys_ioctl+0x47/0x170 [ 803.075462][T28524] ? do_syscall_64+0x15f/0xf80 [ 803.075477][T28524] ? aa_sock_msg_perm+0xf1/0x1b0 [ 803.075493][T28524] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 803.075510][T28524] ____sys_sendmsg+0x972/0x9f0 [ 803.075522][T28524] ? __might_fault+0xaf/0x130 [ 803.075538][T28524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 803.075552][T28524] ? import_iovec+0x73/0xa0 [ 803.075570][T28524] ___sys_sendmsg+0x2a5/0x360 [ 803.075581][T28524] ? __lock_acquire+0x6b5/0x2cf0 [ 803.075594][T28524] ? __pfx____sys_sendmsg+0x10/0x10 [ 803.075608][T28524] ? tomoyo_path_number_perm+0x219/0x630 [ 803.075630][T28524] ? __fget_files+0x2a/0x420 [ 803.075644][T28524] ? __fget_files+0x3a0/0x420 [ 803.075661][T28524] __x64_sys_sendmsg+0x1bd/0x2a0 [ 803.075673][T28524] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 803.075684][T28524] ? rcu_is_watching+0x15/0xb0 [ 803.075701][T28524] ? __pfx_kcov_ioctl+0x10/0x10 [ 803.075719][T28524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.075732][T28524] do_syscall_64+0x15f/0xf80 [ 803.075747][T28524] ? trace_irq_disable+0x3b/0x140 [ 803.075764][T28524] ? clear_bhb_loop+0x40/0x90 [ 803.075777][T28524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.075790][T28524] RIP: 0033:0x7f979699ce59 [ 803.075803][T28524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.075814][T28524] RSP: 002b:00007f979789f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 803.075827][T28524] RAX: ffffffffffffffda RBX: 00007f9796c16090 RCX: 00007f979699ce59 [ 803.075836][T28524] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 803.075844][T28524] RBP: 00007f9796a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 803.075852][T28524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.075859][T28524] R13: 00007f9796c16128 R14: 00007f9796c16090 R15: 00007fffbd7b44d8 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 803.075874][T28524] [ 803.964592][T28524] bond11: (slave erspan1): Enslaving as an active interface with an up link [ 804.091978][T28524] syz.0.5697 (28524) used greatest stack depth: 16680 bytes left [ 804.489511][T28525] syz_tun (unregistering): left allmulticast mode [ 804.671830][T24652] team0: left allmulticast mode [ 804.676799][T24652] team_slave_0: left allmulticast mode [ 804.682283][T24652] team_slave_1: left allmulticast mode [ 804.688372][T24652] bridge9: left allmulticast mode [ 804.693591][T24652] team0: left promiscuous mode [ 804.698787][T24652] team_slave_0: left promiscuous mode [ 804.705750][T24652] team_slave_1: left promiscuous mode [ 804.711222][T24652] bridge9: left promiscuous mode [ 804.744233][T24652] bridge0: port 3(team0) entered disabled state [ 804.755337][T24652] bridge_slave_1: left allmulticast mode [ 804.761014][T24652] bridge_slave_1: left promiscuous mode [ 804.767140][T24652] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.776184][T24652] bridge_slave_0: left allmulticast mode [ 804.781859][T24652] bridge_slave_0: left promiscuous mode [ 804.789179][T24652] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.810020][T24652] pimreg: left allmulticast mode [ 804.826252][T24652] batman_adv: batadv0: Interface deactivated: vlan0 [ 804.993440][T24652] batman_adv: batadv0: Removing interface: vlan0 [ 805.205467][T24652] bond3 (unregistering): (slave bridge3): Releasing active interface [ 805.516089][T24652] team0: Port device bridge9 removed [ 805.667086][T24652] bond5 (unregistering): (slave bridge12): Releasing active interface [ 805.675312][T24652] bridge12 (unregistering): left promiscuous mode [ 805.681707][T24652] bridge12 (unregistering): left allmulticast mode [ 805.775800][T24652] bond1 (unregistering): Released all slaves [ 805.784747][T24652] bond2 (unregistering): Released all slaves [ 805.793407][T24652] bond3 (unregistering): Released all slaves [ 805.802526][T24652] bond4 (unregistering): Released all slaves [ 805.812369][T24652] bond0 (unregistering): Released all slaves [ 805.828833][T24652] bond5 (unregistering): Released all slaves [ 805.837466][T24652] bond6 (unregistering): Released all slaves [ 805.846563][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 805.937386][T24652] tipc: Left network mode [ 806.131981][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 806.261922][T24652] hsr_slave_0: left promiscuous mode [ 806.281708][T24652] hsr_slave_1: left promiscuous mode [ 806.290145][T24652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.297783][T24652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.305579][T24652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 806.313001][T24652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.483228][T24652] team0 (unregistering): Port device team_slave_1 removed [ 806.497428][T24652] team0 (unregistering): Port device team_slave_0 removed [ 806.554783][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 806.745584][T24652] IPVS: stop unused estimator thread 0... [ 806.839005][ T5290] 8021q: adding VLAN 0 to HW filter on device eth4 [ 807.082184][T24652] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.116009][T24652] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.147656][T24652] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.202521][T24652] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.306839][T24652] veth0_virt_wifi: left allmulticast mode [ 807.316432][T24652] veth0_virt_wifi: left promiscuous mode [ 807.322213][T24652] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 807.335382][T24652] gretap1: left allmulticast mode [ 807.340418][T24652] gretap1: left promiscuous mode [ 807.345564][T24652] bridge9: port 1(gretap1) entered disabled state [ 807.362175][T24652] dvmrp0: left allmulticast mode [ 807.906083][T24652] bond3 (unregistering): (slave bridge8): Releasing backup interface [ 807.986885][T24652] bond7 (unregistering): (slave bridge10): Releasing backup interface [ 808.035890][T24652] bond9 (unregistering): (slave bridge11): Releasing backup interface [ 808.245492][T24652] bond1 (unregistering): Released all slaves [ 808.255915][T24652] bond0 (unregistering): Released all slaves [ 808.265334][T24652] bond2 (unregistering): (slave veth3): Releasing backup interface [ 808.273921][T24652] bond2 (unregistering): Released all slaves [ 808.282853][T24652] bond3 (unregistering): Released all slaves [ 808.294418][T24652] bond4 (unregistering): Released all slaves [ 808.305060][T24652] bond5 (unregistering): (slave vcan1): Releasing backup interface [ 808.313247][T24652] bond5 (unregistering): Released all slaves [ 808.323922][T24652] bond6 (unregistering): Released all slaves [ 808.334100][T24652] bond7 (unregistering): Released all slaves [ 808.342564][T24652] bond8 (unregistering): Released all slaves [ 808.351575][T24652] bond9 (unregistering): Released all slaves [ 808.361315][T24652] bond10 (unregistering): Released all slaves [ 808.453135][T24652] bond3 (unregistering): (slave geneve2): Releasing active interface [ 808.463272][T24652] team0: Port device geneve1 removed [ 808.835692][T24652] bond0 (unregistering): Released all slaves [ 808.843316][T24652] bond1 (unregistering): Released all slaves [ 808.852042][T24652] bond2 (unregistering): Released all slaves [ 808.861037][T24652] bond3 (unregistering): Released all slaves [ 808.870064][T24652] bond4 (unregistering): Released all slaves [ 808.880944][T24652] bond5 (unregistering): Released all slaves [ 808.890752][T24652] bond6 (unregistering): Released all slaves [ 808.900597][T24652] bond7 (unregistering): Released all slaves [ 808.912952][ T5290] 8021q: adding VLAN 0 to HW filter on device eth5 [ 809.051986][T24652] 5n: left promiscuous mode [ 809.094970][T24652] : left promiscuous mode [ 809.156444][T24652] tipc: Disabling bearer [ 809.170537][T24652] tipc: Disabling bearer [ 809.176522][T24652] tipc: Left network mode [ 809.190165][T24652] tipc: Left network mode [ 809.318094][ T5290] 8021q: adding VLAN 0 to HW filter on device eth6 [ 809.525282][ T5290] 8021q: adding VLAN 0 to HW filter on device eth7 [ 809.781836][ T5290] 8021q: adding VLAN 0 to HW filter on device eth8 [ 809.901588][T24652] hsr_slave_0: left promiscuous mode [ 809.907504][T24652] hsr_slave_1: left promiscuous mode [ 809.916538][T24652] hsr_slave_0: left promiscuous mode [ 809.922303][T24652] hsr_slave_1: left promiscuous mode [ 809.928923][T24652] batman_adv: batadv0: Removing interface: ipvlan2 [ 810.096880][ T6292] smc: removing ib device syz0 [ 810.250652][T24659] smbdirect: ib_dev[syz1] removed [ 810.316595][ T5290] 8021q: adding VLAN 0 to HW filter on device eth9 [ 810.328739][ T6292] smbdirect: ib_dev[syz0] removed [ 810.813312][ T5290] 8021q: adding VLAN 0 to HW filter on device eth10 [ 810.830176][T24652] IPVS: stop unused estimator thread 0... [ 810.836347][T24652] IPVS: stop unused estimator thread 0... [ 811.029478][ T5290] 8021q: adding VLAN 0 to HW filter on device eth11 [ 811.177902][T24652] bridge_slave_1: left allmulticast mode [ 811.184054][T24652] bridge_slave_1: left promiscuous mode [ 811.189755][T24652] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.200009][T24652] bridge_slave_0: left allmulticast mode [ 811.207353][T24652] bridge_slave_0: left promiscuous mode [ 811.213053][T24652] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.412020][T24652] pimreg: left allmulticast mode [ 811.478748][T24652] bond5 (unregistering): (slave ip6gretap1): Releasing active interface [ 811.517129][T24652] bond11 (unregistering): (slave erspan1): Releasing active interface [ 811.525389][T24652] erspan1 (unregistering): left promiscuous mode [ 811.547658][T24652] bond9 (unregistering): (slave gretap1): Releasing active interface [ 811.580404][T24652] bond6 (unregistering): (slave ipip0): Releasing backup interface [ 811.588586][T24652] ipip0 (unregistering): left promiscuous mode [ 811.728957][T24652] bond2 (unregistering): (slave bridge2): Releasing active interface [ 811.946126][T24652] bond3 (unregistering): (slave bridge6): Releasing backup interface [ 811.954299][T24652] bridge6 (unregistering): left promiscuous mode [ 812.146253][T24652] bond1 (unregistering): (slave 7d2): Releasing backup interface [ 812.155337][T24652] bond1 (unregistering): (slave 7d2): last VLAN challenged slave left bond - VLAN blocking is removed [ 812.168173][T24652] bond1 (unregistering): Released all slaves [ 812.176943][T24652] bond2 (unregistering): Released all slaves [ 812.187795][T24652] bond0 (unregistering): Released all slaves [ 812.198617][T24652] bond3 (unregistering): Released all slaves [ 812.207661][T24652] bond4 (unregistering): Released all slaves [ 812.218372][T24652] bond5 (unregistering): Released all slaves [ 812.232561][T24652] bond6 (unregistering): Released all slaves [ 812.241235][T24652] bond7 (unregistering): Released all slaves [ 812.249920][T24652] bond8 (unregistering): Released all slaves [ 812.261212][T24652] bond9 (unregistering): Released all slaves [ 812.271425][T24652] bond10 (unregistering): Released all slaves [ 812.281335][T24652] bond11 (unregistering): Released all slaves [ 812.291128][ T5290] 8021q: adding VLAN 0 to HW filter on device eth12 [ 812.383068][T24652] : left promiscuous mode [ 812.445342][T24652] hma(kX: left promiscuous mode [ 812.517194][T24652] tipc: Disabling bearer [ 812.543450][T24652] tipc: Left network mode