last executing test programs: 3.017858349s ago: executing program 1 (id=3730): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000fffffff300000000ffffff80e570020000000000e500fcff000000008500000043000000950025951596923f"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000004006c000500e3ffffffffff07000700ac1414aa08000800ac1434000800020005"], 0x54}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000100)=0xffffffff, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000040000100fcff070007000000000800cb8004000880100001800c00108008000100050000000c000200"/56], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)="f78d9ca38fff48f3be521634d62816caa130ad6c94ca4c3448412ba865540b0732710f3baed7fdf6f6d58368eb4ed9ed9259480a7d9db9a817ec5c23b8d826caf70793b7a921691a58598554cc161e2275e21bba1371d83eb91d190fbc37c9", 0x5f}, {&(0x7f0000000440)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa69", 0x33}], 0x2, &(0x7f0000000940)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x28044854}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000000200)=""/61, 0x3d}], 0x2}, 0x151) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x9c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1041, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r10, 0x400454d8, &(0x7f0000000140)=0x90) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r9, @ANYBLOB="1c005a80180000801400050001fdff1005000000090004000e007a0c14728bd58fe3008330df1595005410fbfecb87e057e885a070aca4c8f07bd5b003804762894d1711054896d91780ab88d4179e83fd21cd24fb5caa3d9c43ff40553071f357b54ab27909b3dd8f38ad59e3ea8ff9ecee8a0050949e43e160ca234bfe00cbf053fe10a37d50898fcbb6a998396da8c2c1b98ba1fa5a84be86d5000001000000000071b5f97a17f547b09a90b012ddf960b7d406fe536255fd4485886c5bff7dc25fec6cf618be"], 0x38}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x9c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, &(0x7f0000000000)) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}, {}, {0x85, 0x0, 0x0, 0x88}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.219792139s ago: executing program 2 (id=3737): bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x7, 0x80000001, 0x3, 0x7fffffff, 0x20a, 0xffffffffffffffff, 0x5}, 0x48) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff8}, {0xffff, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c044}, 0x40) 1.998425418s ago: executing program 2 (id=3743): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x3e, &(0x7f00000003c0), &(0x7f0000000140)=0x32) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000001500180000000400000f00000000ff0300c15dfef3d6cb4c00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.943082176s ago: executing program 1 (id=3745): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000900), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000019280)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FRA_SRC={0x14, 0x2, @remote}]}, 0x30}}, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x5e, 0x0, 0xff, 0x6, 0xffff, 0xa}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) ioctl$XFS_IOC_AG_GEOMETRY(r5, 0xc080583d, &(0x7f0000000140)={0xb3b7, 0x9, 0x3000, 0x7, 0x8, 0x5, 0x7, 0x9}) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@mcast1={0xff, 0x5}, @remote, @loopback={0xff00000000000000}, 0x0, 0x0, 0x0, 0x0, 0xc, 0x8144008a}) (async) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, 'pim6reg\x00'}}) 1.852032569s ago: executing program 2 (id=3747): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex=r2, 0x2b, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000003c0)={r0, &(0x7f00000002c0)=',\x00', 0x28341, &(0x7f0000000300)={@align=0x80000000, {0x3ff, 0x3, 0x4, 0x80}}, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0xfffffff7}) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000003c0)={r0, &(0x7f00000002c0)=',\x00', 0x28341, &(0x7f0000000300)={@align=0x80000000, {0x3ff, 0x3, 0x4, 0x80}}, 0x0, &(0x7f0000000340), &(0x7f0000000380)=0xfffffff7}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map=r5, r3, 0x2f, 0xc, 0x0, @void, @value=r6, @void, @void, r4}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map=r5, r3, 0x2f, 0xc, 0x0, @void, @value=r6, @void, @void, r4}, 0x20) socket$igmp6(0xa, 0x3, 0x2) (async) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl(r7, 0x2, &(0x7f0000001a80)) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r7, @ANYBLOB="b0000f", @ANYRES32=r2], 0x24}}, 0x0) 1.645912322s ago: executing program 2 (id=3749): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r1, 0x29, 0x4a, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {0x0, 0x9}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}}, 0x0) close(r4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="3ac18b16b3b99a97452af2fb3d04992d15a2edede31c32dfcc0a2185e0f8c81198a95bb27ffcbf414e011cf0b9aa41049326d646e05e66a3aa6b1045e009f1ad975a9a3767ec4313ae3dbc4a23d7c00473aaa08e8037e9dca472fa6dc7a0fae3f59c359154c5827dadaa97d0f1b13aad9d7352359cfe3ff0af49540307a071746cf9b1323d97a092c34110d37ff866a3a76307b7cd829f18b0f533a9edbebb659ea1c1f828f049ee374f4de057e3b839f4f4c2d1a0e8d3076074306c6fda866536bbf1472342bced0861a4e3d29a633c64a96d63e458c68823957eb6be63d4ca9beb00", @ANYRESHEX=0x0, @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r5, @ANYRES16=0x0], 0xb8}}, 0x8885) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) setsockopt(r7, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000440)={@val={0x70}, @void, @eth={@local, @remote, @void, {@generic={0x4305}}}}, 0x12) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000002900010000000000000000000500000a14000000060a0104000000000000000001050004140000001100010000000000000000000000000a"], 0x3c}, 0x1, 0x0, 0x0, 0x30004080}, 0x24000840) sendmmsg$inet6(r0, &(0x7f0000006800)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x0, @mcast2, 0x2007}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000640)="c863b1079dccd4e78e59b6d41ecad6149837ffc7418236d295f111cd201ad565c1587e96c6700ffe241eb99fd1af3003bc2f062decdb0287a7c4fd229cbcb05974038659", 0x44}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)}}], 0x3, 0x4048800) 1.645454262s ago: executing program 1 (id=3750): r0 = socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x31, 0x3, 0x51, @remote, @mcast1, 0x20, 0xba8c998b37553636, 0x2, 0xa}}) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000280)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x6, 0x0, r8, 0x8, '\x00', r9, r10, 0x5, 0x4, 0x5}, 0x50) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) 1.64493805s ago: executing program 3 (id=3751): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffffbbbb9bbbbbbb08004500007800000000000190780a010102ac1414aa0304907801000000470000000000000000110000e000000200000000440c0001ac1414bb4e210000443c0001e0000001000000000000000000000000ac1414000000000000000000000000000000000000000000ac1e000100000000ac14140000000000"], 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}, {0x0, 0x2}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x4, 0x4}]}}, 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) close(r3) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x100, 0x70bd28, 0x25dfdbff, {0x1, 0x1, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x44800}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x32}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='GPL\x00', 0xffffff81, 0x0, 0x0, 0x1f00, 0x63, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0x1, r2], 0x0, 0x10, 0x9}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r6, 0x1, 0x9, 0x0, &(0x7f0000000dc0)) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000180)="5ea713e745705198c016ae8085b42ebf65171c5f3ff0dc7b85a5b3c18a6dcd359f2169fe178602b59509fbacf00c2e6114fe95363aa9e32e79f0ebe05029b069a88fe5c81dce3c7b4fcc224f9f703b05ceae2025a380182aeff9739fde15d46946f929f5c2b36a36cbd0df820d8c55ed671e1c298b3f82474d35a64bce2b5a46be04e726fd8bb78f21f3a572b3179ea211a8f724f19f65db2c3ca1491ae60976c4d6c1fb795e013f1e5446cabbed90fe7048", 0xb2}, {&(0x7f0000000280)="fb97d29e5878b960294cad2c81ea599ccbba7d44f07edf316688a0f2aac83bfaeff323271f5a3ae1bff9c9273db5b17f0acfee35c3d412dc1983edd5052db132754cfe9bf1436c10e7f70dd0a449bf01e69a0f", 0x53}, {&(0x7f0000000400)="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", 0xfc}, {&(0x7f0000000500)="1f9aba55f3c2b2a001f13a6d710e99d6b309319301bff09f07b6ec6c302639282d71e791679953ca23fdc599cfb778a6eaa101ab6459669f45f68d118c953be1464d595bfce24886ea51393ea6f34c38a63c02a6a41505c0ea578e24e2f9022ca8acc87a2c2af34cfd238f649c407f76ec94139dc5f97fdccfc472dd7afc70b52f46b78afb7bbb479fe39036d46591c9bfd3251c87e36963daf3bc7d87f616d34885b17e1cb2f7afde8e02f9fc1288cc907097d2454afbb40502d83734f056803cc78375db87c8317fcaac63f816d260ce180dc367", 0xd5}, {&(0x7f0000000600)="f7decfbc671fb664288faa895a07c235d7b1c4b4bcd3798f93e51430c8b861cc197b40c0eaa2f6f3d2deb50beb333992fe51008228b6b1498f80c4060320439df99dbcf5ebb5ff17b5e570b933f369b9db02a6e090574593630f30e15b8fd6097ba2079487057b4cb9c7ba8599395e9450786bda0f28877e4d57355069cc879145ec37d34d", 0x85}, {&(0x7f00000006c0)="77de2126f1e8f1ca7fcdb28144eca1cc629de42acfc4c8a59ca9f8e93825c9eeb8afad32da0a5880467663145557548af60e019a03e3d0cd0c31e8603b7c1f88723bc5dc7a34e67b", 0x48}], 0x6) recvmsg$can_raw(r0, &(0x7f0000001980)={&(0x7f00000009c0)=@nfc, 0x80, &(0x7f0000001840)=[{&(0x7f0000000a40)=""/52, 0x34}, {&(0x7f0000000a80)=""/8, 0x8}, {&(0x7f0000000b00)=""/227, 0xe3}, {&(0x7f0000000c00)=""/206, 0xce}, {&(0x7f0000000e00)=""/208, 0xd0}, {&(0x7f0000000f00)}, {&(0x7f0000000f40)=""/183, 0xb7}, {&(0x7f0000001000)=""/98, 0x62}, {&(0x7f0000001080)=""/58, 0x3a}, {&(0x7f0000001740)=""/63, 0x3f}], 0xa, &(0x7f0000001900)=""/103, 0x67}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000071102600000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_pressure(r8, &(0x7f0000000ac0)='memory.pressure\x00', 0x2, 0x0) preadv(r9, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r7, 0x0, 0xe, 0x0, &(0x7f0000000240)="ffffffff75664a0a90f73e9eb3cf", 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.2338342s ago: executing program 1 (id=3754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="02000000751acbc37e3f3c975ca42ff9eaca612497c4490d2f6f5c815bfdd938e5474531a3210bcf0d99b96375692e0ce6bfb89eb2a07d3645c05c1adb1ca4688feee47ca8b22b354ccf7cfae7", 0x4d}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x12}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}}, 0x8040) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000480)='htcp', 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket(0x840000000002, 0x3, 0xff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r5) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x8, 0x20, 0x6, 0xf8f}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000400)={r13, 0x20, 0x3ff}, &(0x7f0000000440)=0x8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000001900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000018c0)={&(0x7f00000007c0)={0x10d0, r12, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x6}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7f}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x3}, @ETHTOOL_A_LINKMODES_OURS={0x38, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2b8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_OURS={0x106c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x5a, 0x4, "8741931e9101ac56e0261b72369c67543ce837ff1acdfe9d16eb2996b152826668fb75d25f55506a19bd85aae87f8eff2935c8a24e9d8499e5313000efb4adf20cd9695f852dcbcbce61c09ee5b3dfe8ccbe9640ca5a"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x10d0}, 0x1, 0x0, 0x0, 0x14}, 0x4040400) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x30, r11, 0x79964d8cba2f455d, 0xa070bd24, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 1.186887645s ago: executing program 4 (id=3755): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f00000000c0)="0232e600", 0x4}, {&(0x7f0000000140)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d671416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cdeae62faa71a5f2383e963aba417592d7a84958b0378e15fa25bca4ceabb5", 0x7e}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x401c5820, &(0x7f0000000080)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000181a0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 1.034170989s ago: executing program 4 (id=3757): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2, 0x3, 0x4, 0x8, 0xf}, 0x20) 1.026714925s ago: executing program 0 (id=3758): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x80}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 994.260717ms ago: executing program 4 (id=3759): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1ff}, @CTA_FILTER={0x4c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x100}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x404}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x45}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x101}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x600}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5a1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa00}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x34}}, 0x0) 905.725653ms ago: executing program 0 (id=3760): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f, 0x10}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000020000003f00000040"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001340)={{r2, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000001300)='%pB \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r3, &(0x7f00000004c0), &(0x7f00000001c0)=""/13}, 0x20) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r1, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000180)=r4, 0x4) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r1, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x10) 893.523676ms ago: executing program 4 (id=3761): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000006c80), &(0x7f0000006cc0)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000171102a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r6}, 0xc) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x5, r6, 0xffffff8f}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0xd, @remote}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x7b3, 0x0, 0xd]}}, 0x5c) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4a}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 886.593677ms ago: executing program 0 (id=3762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES8], 0xa0}}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0800080003000400fdff140000004589001c006900006002907800000000ffffffff14f330520300000077778dc4342271db3a7d1bc36b43a0ef44ea32781f3d203f401252014b2883cf41be17dfd7150ae006bfcbf539da41dcce45c7b65933e820ac827eaa1b1e3ea2"], 0xfdef) 649.696331ms ago: executing program 3 (id=3763): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x20000, &(0x7f0000000200)={@align=0xb, {0xabb5, 0xfffc, 0x3}}, 0x219c, &(0x7f0000000340), &(0x7f0000000380)=0x59}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000d1000000350000000100000081000000070000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000240)=""/153}, 0x94) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x8, 0x32}, 0x9c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000005c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x1f}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000ecf251634d8679bd0c674268a772525ab4550f68545244ec19cbbacfe5f52c2608bfbc81547787c4eb0ae442b3eb644b458ef6d1085afc56df56b80885e9b4773745355c189d55707837624b94e615a0ddf42971f58c2edd42a855cf4549ce2e199a1456b83728cf5a6f4088706a3e6235c6d7925376ae2598056669397b743ed0d308", 0xdb}], 0x1) (rerun: 32) 599.550724ms ago: executing program 0 (id=3764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4080) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000003c0)={{r0, &(0x7f0000000140)='$\xe0,\x00', 0x20502, &(0x7f0000000180)={@_ha_fsid={[0x3, 0x9]}, {0xf80, 0x8, 0x37c13607, 0x7}}, 0xffffffff, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x2}, 0x1, &(0x7f0000000380)=[{0x1, 0x7, &(0x7f0000000240)='^&\x9a{\'+),#-\x00', &(0x7f0000000280)="a4cc270864821a404504cdaaea0599524d86e7f5509eba568c8d3ee61cd107b526ba3b2b806cc7c40060241d8c606ed216aafa8cbb13d64434f06a1d77c5efe2faddce76ed8155e58b456deaf87a2d22a2bb48ddb7dfb6813b8aadb2a0ad7cb5ae3ce51703c6dfebd2a4f1991c91e79f2b20cd187766f51f4380ac28d74911f54d42ad4d5ad891351f8ddc0bc47df3558558b30710b913c035236645738c408cf330d2f974bebeafdccff2771728a8cbd44b7a0cbbf67b7a0d49cabad71f4a8215439cfdcb89503f", 0xc8, 0x8}]}) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1f4, r1, 0xf82, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x18f9575508d90925}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x80d5}, 0x20) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r2, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000840)={@local, 0x0}, &(0x7f0000000880)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000940)={'erspan0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x8, 0x7, 0xffff, 0x0, {{0xf, 0x4, 0x2, 0x8, 0x3c, 0x64, 0x0, 0x30, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @private=0xa010101, {[@ssrr={0x89, 0xb, 0x9f, [@rand_addr=0x64010102, @broadcast]}, @timestamp_addr={0x44, 0x1c, 0x86, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0xd}, 0x4}, {@loopback, 0x4}, {@multicast2, 0x9}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000a00)={'ip6tnl0\x00', &(0x7f0000000980)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x1, 0x9, 0x20, @empty, @mcast1, 0x48, 0x7, 0x6, 0xfffffff8}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a40)={'gre0\x00', 0x0, 0x7800, 0x10, 0x3, 0x800, {{0x24, 0x4, 0x1, 0x33, 0x90, 0x68, 0x0, 0x8, 0x4, 0x0, @broadcast, @loopback, {[@timestamp_prespec={0x44, 0x1c, 0x96, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x889}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@multicast2, 0x1}]}, @cipso={0x86, 0x42, 0x3, [{0x5, 0xe, "e1d63cac728a57a08dc73591"}, {0x0, 0xd, "a1cc3cd278ab580b2c1dc0"}, {0x0, 0x6, "b9b65cb9"}, {0x2, 0xe, "0bf24ea2593fb7e27b6c073c"}, {0x5, 0xd, "4868b51a2287e3631da47e"}]}, @lsrr={0x83, 0x1b, 0xd1, [@loopback, @multicast2, @local, @multicast2, @multicast1, @multicast1]}, @noop, @end]}}}}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000b40)={'sit0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000d00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x13c, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x2000}, 0x4000080) r10 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r10, &(0x7f0000000d40)={0x11, 0x0, 0x0}, &(0x7f0000000d80)=0x14) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e00), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e40)={0xd4, r12, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x11}, 0x20048000) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0xa, &(0x7f0000000fc0)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbb9}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000001040)='syzkaller\x00', 0x2b, 0xc7, &(0x7f0000001080)=""/199, 0x41000, 0x40, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001180)={0x2, 0x0, 0xdb0}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000011c0)=[r2, r2], &(0x7f0000001200)=[{0x3, 0x1, 0x7, 0xb}, {0x3, 0x1, 0x3, 0xb}, {0x2, 0x5, 0xa}, {0x4, 0x3, 0x9, 0x1}, {0x3, 0x3, 0x6, 0x9}, {0x2, 0x3, 0x10}, {0x0, 0x1, 0x6, 0x6}], 0x10, 0x9}, 0x94) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x14, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}}, 0x4000080) sendto$packet(0xffffffffffffffff, &(0x7f0000001440)="3073d0e4bc8c71a0b338c1c9167b93256cd6de7c110ed4910affc9e8dca5ef7e4942c3f6e64a6cec24868e0a6b90de634def72fd610a9709d1e925d20c739b683488f237bfa6558dcc4ceecdcb36d287c92cace9e0d782ff094b29751cdcb183b9bc36aef7ae1ea0f33f1eabc86b56d43f", 0x71, 0x20000000, &(0x7f00000014c0)={0x11, 0xf8, r9, 0x1, 0x4, 0x6, @multicast}, 0x14) r14 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_START_SYNC(r13, 0x80089418, &(0x7f0000001500)=0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f00000015c0)={0x0, 0xfffffffffffffff8, 0x5}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r14, 0x50009418, &(0x7f00000019c0)={{r0}, r15, 0x18, @inherit={0x58, &(0x7f0000001540)={0x1, 0x2, 0x4, 0x2, {0x15, 0x8000000000000001, 0x100, 0xfff, 0x1a}, [0x814, 0xed6c]}}, @devid=r16}) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000029c0), &(0x7f0000002a00)=0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r14, 0x8982, &(0x7f0000002a40)={0x0, 'bond0\x00', {0x100}, 0xf}) ioctl$XFS_IOC_ERROR_INJECTION(r14, 0x40085874, &(0x7f0000002a80)={r0, 0x2}) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002c00)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x1, '\x00', r4, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) r18 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002c80)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x18af, '\x00', r6, r2, 0x3, 0x2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002dc0)={0x10, 0xb, &(0x7f0000002ac0)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x4}, @alu={0x7, 0x1, 0xd, 0x2, 0x1, 0xfffffffffffffffe, 0xfffffffffffffffc}, @exit, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ldst={0x1, 0x3, 0x1, 0x2, 0x9, 0x50, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x5}, @jmp={0x5, 0x0, 0x0, 0x5, 0xa, 0x50, 0xfffffffffffffff0}], &(0x7f0000002b40)='GPL\x00', 0xffff, 0x0, 0x0, 0x40f00, 0x40, '\x00', r11, @sk_msg, r2, 0x8, &(0x7f0000002b80)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000002bc0)={0x0, 0x2, 0x5, 0x6}, 0x10, 0xffffffffffffffff, r2, 0x8, &(0x7f0000002d00)=[r17, r18, r2, r2, r2], &(0x7f0000002d40)=[{0x4, 0x1, 0xe, 0x5}, {0x0, 0x4, 0x7, 0xa}, {0x3, 0x1, 0xb, 0x8}, {0x5, 0x1, 0xf, 0xb}, {0x5, 0x1, 0x10, 0x3}, {0x5, 0x3, 0x3, 0x5}, {0x0, 0x2, 0x2, 0x7}, {0x0, 0x3, 0x0, 0xc}], 0x10, 0x800}, 0x94) 575.163886ms ago: executing program 3 (id=3765): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) listen(r0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000002e80)={'gre0\x00', &(0x7f0000002e40)=@ethtool_wolinfo={0x7, 0x1, 0x1ff, "729d3031f960"}}) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x6c, 0x0, 0x168, 0x0, 0x260, 0x258, 0x258, 0x260, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x6}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xff], 'netdevsim0\x00', 'lo\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x390) sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 513.089827ms ago: executing program 4 (id=3766): socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010140000080001000000000008004b001300000008004a000000000008004f0001200000"], 0x38}, 0x1, 0x0, 0x0, 0x24004085}, 0x810) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010140000080001000000000008004b001300000008004a000000000008004f0001200000"], 0x38}, 0x1, 0x0, 0x0, 0x24004085}, 0x810) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000017c0)=@bpf_ext={0x1c, 0x1d, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x28, 0x1000, &(0x7f0000000680)=""/4096, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000016c0)={0x2, 0x6, 0xe}, 0x10, 0xa32a, 0xffffffffffffffff, 0x7, &(0x7f0000001700)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000001740)=[{0x0, 0x3, 0xf, 0x2}, {0x1, 0x4, 0x9, 0xb}, {0x2, 0x4, 0x1, 0x1}, {0x1, 0x5, 0xb, 0xc}, {0x3, 0x5, 0x5, 0x4}, {0x3, 0x5, 0xb}, {0x0, 0x5, 0x10, 0x1}], 0x10, 0x40}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000001880)={r2, 0x4, 0x21a, 0x70}) sendmsg$inet(r0, &(0x7f0000002a80)={&(0x7f00000000c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f00000028c0)=[{&(0x7f0000000500)="68420cf13cb8e815a1c73ae31754d870740219f04632f70fe8bb0c8d1cc475cc04cf861c62272726a9ccca0d39e4cd50f5e57207c01372900f9e4383515075a19556ff0af91fde5413d796fa2a2c40b42256ae2a1bca593174c9d03762ed84a40174a31cfbbf966aed3b68f313612f744d873da109319c0b590bcf61c68a7ab0c9bea623dc2b87b5ce36ec9d1161d8fe93f884c6d19bc3a5ab6156c4dbfdddc775b7fbf08060b6479a3657415bd5be8b199ca561f880007346951b34e14c3f40da39715c34ffdb0b947414f7aa829e2bb756989217c11a770381143314cfc6009c0518b0d804e54c3b2fb42c1518ea0f590373a18c72", 0xf6}, {&(0x7f00000018c0)="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", 0x1000}], 0x2, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"], 0x148}, 0x40) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3}, 0x8) ioctl$XFS_IOC_GETBMAPX(0xffffffffffffffff, 0xc0205838, &(0x7f0000000100)={0x6, 0x5, 0x7fff, 0x9, 0x8, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8884}, 0x20000084) 512.164961ms ago: executing program 2 (id=3767): socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x19, 0x0, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') socket$inet6(0xa, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_tcp_int(r1, 0x6, 0x19, 0x0, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') (async) 305.758537ms ago: executing program 0 (id=3768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x24, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002803e3303009ac420002e61afb9fdd672bad09dfb78c769b974e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32000000001c0000001100010000000000000000000100000ae947c77d6f55094a45d4725fb731d39e7da2ff6d5c5a2a5d"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 304.686899ms ago: executing program 3 (id=3769): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', r1, 0xffffffffffffffff, 0x1, 0xfffffff9, 0x3}, 0x50) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001a00)={{r0, &(0x7f0000000340)='\'%\x00', 0x0, &(0x7f0000000380)={@align=0x49, {0x8, 0x0, 0x80000001, 0x9307}}, 0x4, &(0x7f00000003c0), &(0x7f0000000400)}, 0x4, &(0x7f0000001980)=[{0x3, 0x6, &(0x7f0000000440)='\x00', &(0x7f0000000700)="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", 0x1000, 0x38}, {0x3, 0x10, &(0x7f0000001700)='GPL\x00', &(0x7f0000001740)="9caf0c79ba760b7b79a9fc32674871895fe8ebb784ab0fc2d3d706c49064a3eefafabe0a66c0505800e5bf75fa195ccb86ddd9b9b47079afc9603eab42db6af3e8753c5824c633a300ae0ff26510b0b798d1bb024ff54ae805fe95522b67d0576dcfd745d45e4db9182f0a0f19f764921f06739ef2d18902d5ec75951aae79a7d080f2e2fd7dc3306e4846", 0x8b, 0x8}, {0x3, 0x6, &(0x7f0000001800)='syzkaller\x00', &(0x7f0000001840)="5e49bef7685868fbd0434f7704eb8153ae8cd22abee7ef91b54dcd5ce22247dc63a6c76b9f0769c7a5077cd206aa8227c100bdfc91cb7ea0a06a242e9b177a299ad20ea4c6721108f6b9b4b08a0b554d497139397481d90fd250189c635756e0170b2f2d26081b741a765d395a03fd7f818d75d93bd7", 0x76, 0x10}, {0x1, 0x1, &(0x7f00000018c0)='.\x00', &(0x7f0000001900)="826795f8efa5763889bf4fca06313d2b39777e0aa3d0092236b0cde727c19cb5c672756cf2b17d8319f1a7fd2510a5a3415d969708bf64e10d64050928040ffc0e39d69abe874b3e9b568a4553ea77079b1c20f2899b2e213c56082101a84a4e57c30c013c92baf1b185b59638ee223c7443a02bd94a", 0x76, 0x18}]}) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000001c80)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001dc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001d40), &(0x7f0000001d80)=r0}, 0x20) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001e00)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ec0)={0x11, 0x1a, &(0x7f0000001a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}, @generic={0x41, 0x8, 0xe, 0x0, 0xae}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x71d30790}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001b80)='syzkaller\x00', 0x6, 0x48, &(0x7f0000001bc0)=""/72, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001c40)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)=[0x1, r6, r7, r8, r9, r10], 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="186e0cf74e24078c27963000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x24}, 0x94) 303.626066ms ago: executing program 4 (id=3770): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000100)=[{r0, 0x1113}], 0x1, 0x8001) close(r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f0000000700)=[{&(0x7f00000000c0)="02ef667db5e53f90ddf725d589e79497ed32000192c55934a92b7b6285d5b1fb065ae78c91902eb69b165687a415b833508dc85680407417b65a83592a4e597178233649c148ab68571c3390210cbe7ea8194c25e9b37c83bb8055e08218fa6a47d9401cdffa24dd9b984cec90c7c1508f05453927e13e43ffc2f4482bd0fc", 0x4}, {&(0x7f0000000140)="1a36c585040053c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d661416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cd665a14bd1b7ad319101e9beae62faa71a5f2383e963aba417592d7a84958", 0x7e}], 0x62) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x401c5820, &(0x7f0000000080)) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @remote}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20084084) write$cgroup_subtree(r1, 0x0, 0xfffffc3f) 296.066784ms ago: executing program 1 (id=3771): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = socket$inet(0x2, 0x802, 0x1) write(r2, &(0x7f0000000080)="08008edf773c8000", 0xfd) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x16, 0x0, &(0x7f00000000c0)=0x55) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x34, 0x0, 0x0, 0x2}, 0x28) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = socket(0x1e, 0x1, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x25c, r6, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x64}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf4b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x21}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x50}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffa41a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x44050}, 0x800) sendto(r5, 0x0, 0x0, 0x40000, &(0x7f0000000000)=@generic={0x1e, "ce33be0d44c60b14d87167d49396208e01367b3d90e5a933e1b2aee80d2c71d4e268223ed7dac20eccf4a0847aae138d9155f11f9f8fa070942cefc3a2910c9acb202d7f68a62b9aa78bb1327d24a0c44f4b9640cdcb14560949aa7a1fc3a33c332a4c409d1ddb96443400bd5f7f533e1de8c9663df1912afbe896cdad4f"}, 0x80) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x2}}]}, 0x13c}}, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x88}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x0) sendmmsg$inet6(r8, &(0x7f0000003d40)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x752}, 0x1c, 0x0}}], 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES8=r3, @ANYBLOB="010026bd7000ffdbdf250300000008000300", @ANYRES32=r4], 0x28}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r10, 0x25, 0x4, @val=@perf_event={0x9}}, 0x18) 182.077737ms ago: executing program 2 (id=3772): r0 = socket(0x40000000015, 0x805, 0x0) r1 = accept(r0, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000100)=0x80) socket$kcm(0x1e, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xffffff16, &(0x7f0000000240)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000300)={r3, 0xb4, "892afcdcfe457e9e836b21a2fc6dafa38261471f9ef8dd9cc53a2b7c6ab1c0feb2628a66c7417b4104db0ab57b772a91be13feb9d29eeccc38e4d25665bb38011b435caf2b29e81e10dc4910b2b28b32ae68e401fac89f9489d54f5cdede1df11683ff4caaf92d969634711a433898cc25b141524594a864f6cc9b718d5419f9d970514cd9c7880adc7b1dbca37ce8d09b2cce8aeff0688d69c5fabe7810128f0d27b22621a447bcd6ef8df3cc62ab52901558bb"}, &(0x7f00000003c0)=0xbc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r3}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x2c8, 0x370, 0xffffffff, 0x0, 0x2c8, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x0, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000500)={0x30, 0x1410, 0xd00, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000000) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028007e0000040290bdff567f06cde09b93ed9d24d9d2780400ea58e8b8f7dd19361602000000020000000400001448bbba9e116d370f7788a7bc729bc87744306dad394d2ff28c10bd49fa788968a11e53250d811cafb4a26a2d0c83960990c7a20a2e6a66c8fb494ba11e7dd45bdb8c8a642f6c070b1107dd7739df020e86d6ad9e04d41eb396927762cf7ad16de3a8ef5f6a1b5c4fc7e0e40f259411888a514306b7ea9bc46ca9dc48c64068e295272f2c8117f2ea0492d45b5906bee05f8ed07f28caf9d3a77be2ef0d626cc084aac0a9e28268e115"], 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r5, 0x1, 0x60bd2c, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) 179.033922ms ago: executing program 3 (id=3773): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x50) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080), 0x14) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) 178.626376ms ago: executing program 0 (id=3774): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) poll(&(0x7f0000000200)=[{r1, 0x1148}], 0x1, 0x3ff) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 54.245422ms ago: executing program 1 (id=3775): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x82}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8931, &(0x7f0000000100)={'wlan1\x00', @broadcast}) ioctl$PPPIOCSMRU(r1, 0x40047452, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, {0x2, 0x4e21, @broadcast}, 0xd2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x100009, 0x6}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) sendmmsg$inet(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000300)="98a1e26e0f098985088298a903942c88df59b01a74f9a97929e2dd0c308c57955a422a91e7b184f20df5c4b0d82ae8a8787e017d84177066dc4feb2e1f8dca5aaf148b8deea83cd4e8482ea39901a1dd7531b0b170d79055d9c83ae200f78127db6baedd7f9e6d557101a157bbbebed1d2b1ba5a06eb6e71344f553a5b286a71f0ef3ff375a173c00e4e795fd9e9441aec085db6a86ee8032f2f8aa5eac63491ec037fac2cbbae0c7d4ec9f1abef293490747df58953fe4b7d0f9f7435f6731e4e9f0873366919eaf3cbd99bfecb24eac750420d9b4c43f9cad5f022a0e799282efe870b8b69b4", 0xe7}, {&(0x7f0000000440)="136b31d3657cffc7dd7f05b6714271e4408314366239419f272f15cb1e78dd1dc3096762abd4f6425410cc5ff2cb9af718", 0x31}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="874fc7f3a39cae6708773057865a25c429a48ed12852e07e571afdec8332c8741b7bde3890f21ae8017fe938643831750c7521d57e2e4977eab8323230b1f249629a84238c6bc0e7417a9370d0aa1ba2831830e458d861855962b0db9c399b37262d2940717abd6a0db8de4c6a63b58ce815d4ebc845208223127def00e487de0102da82fd94ae9ae706e84f832bcd0f75e60d3e0735444f20c63a7f0a5fdf12038e4571af750fd91f89d1f3adcb6436875875d17b32b5c25c74f0263b33b3203bb5c93eed15773e57ee7d389e6fc55f5453484fd90e0da959d0e785a9bd62e6a1aca595568236670563c881bc4b497d5d3b4bbb45dbb9", 0xf7}, {&(0x7f00000023c0)="f70e58b1c8275fd12c0f7643783cc1a0d1ead0e09cfabb3416c040fda422306cf2771c39c976afc449d490607efec3df99287a380e83d2ce75eb71e13d6b35a0e1fa226881cd1eb4f3c89f1c955e5f623db821d2f8c648bd7dbfe3a08726cba4d0b618680e44ada7db6c17d8c39ca46be8bf45c69fdfc6cebb392deb98b12a6cc6aceebd8134f7f796b1e039e5674c0d7e4a7fc354f849b5049c200c308f49cc81542ad72a4352543cccd53cd365bf6b", 0xb0}, {&(0x7f0000002480)="de0b0fc12ea3257e2d9546ab90239f001844920fcf0b959069fbf4679fe0e12bbb2df2cedf4285d8c48c66b85046b327038019aa0d25e15aa4752a90ffed8c0674ef2be9c8c2abc127808288c989ac68c66a00db9b546fcb6e07191ac7f3cdf715801fc075ed57949485f8bd62fe6a57e3de7b91abe86cd35431557e7acc99dcf9a0a959609ac1f1af0e91afd2a5febb23dfc8d9612a16e93d3967ee8fa17e09c00ec02ddc966f203483e720c06f2eef61c9801510b1215b9207909dfbfb56103d2c37e83c7903bff8571ab6a2586bf10d3bbb5aa5074c2c47d49a3114a52ae520338ea918cc14", 0xe7}], 0x6, &(0x7f0000002600)=[@ip_ttl={{0x14}}, @ip_retopts={{0x44, 0x0, 0x7, {[@end, @generic={0x44, 0x11, "7209dd3c51ff457aad5b823994a437"}, @cipso={0x86, 0x20, 0xffffffffffffffff, [{0x0, 0x11, "2ff5a8613f19865f736ca09fc9def5"}, {0x5, 0x9, "9ff495f0ca7ff7"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x83, 0x3, 0x0, [{@remote, 0xffff889b}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xefe9}, {@rand_addr=0x64010100, 0x2}, {@remote, 0x8}, {@private=0xa010100}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x84, 0x0, 0x7, {[@timestamp_addr={0x44, 0x44, 0xc6, 0x1, 0x8, [{@remote, 0xfffffff9}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@empty, 0x4}, {@local, 0x4}, {@loopback, 0x5}, {@broadcast, 0xe}, {@empty, 0xbd6e}]}, @ssrr={0x89, 0x7, 0xf0, [@rand_addr=0x64010100]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_prespec={0x44, 0x1c, 0x2c, 0x3, 0x2, [{@rand_addr=0x64010102, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast1, 0x8}]}]}}}], 0x160}}, {{&(0x7f0000002780)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000002840)=[{&(0x7f00000027c0)="54b89fb617ac2f30f9bc4ebb5e0dc165e5fe399c7598046eec19ea2e9d039b160f8c9ff9728b2e2dedc2a05a36ed3ff4bb5567f00c8e8a13f206ea466ac90a17a9b818c4ab9edd7e23bc29b4057cd95993e8def9bbacda0bb3950fb0f1", 0x5d}], 0x1}}, {{&(0x7f0000000780)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000002bc0)=[{&(0x7f00000028c0)="07ed319d98a446505533b2c9294f1230830d3c96f402b973d0a6eda04e85f683c96a6eb4e679b667d1a198dc911888a1261b2eda0c01a0b55ca8d1a18a26c24b744d662631e84f391fa5ba1130a492e6457263cf3aaf49c4838909f11b209a4de8bd82064451e3d4d21ed6b5ef1bec7e1493b5f15275c4bf8e38b66c342980b1d03eb1be8a4c6340bc20867c3ff40f1bb693e884d228572c17cc2248eaabeaed2831339072f4f4375915360cbefd72f3e706f17c39bfaf26bb7c7c924eb2cc845d92acfd562813ff6dde2ccef7ccb7b35037a58b21d2f45b85fc59090bdeec713a24f84489ca891964b7f899b5", 0xed}, {&(0x7f00000029c0)="a65ecd46283568105e49b7c83ab53f446cc632985a1f8c741778684223351e6720d6c72c5f13", 0x26}, {&(0x7f0000002a00)="7b99b23e7f8ef173d90b3287382acf86c61e4102978997c0cd8f8b24d71b487ae98737d6c1eb700fb8761ae8c09a11f9e3997ce199b21ed1297a361850e904711c352d29c07e46c142a574d99eee3fdf7dd9d3c4be202b5b728d137f72bb96dd0d31e57d8281dad05830965d84ea4dd1c095eeceb61eb807454e3d7bbcdc6bffd2fa1ad1f90299420ccad7d53f912b93af7c51d4fdd84cca272a582c732de2fa69da6cd709835d900c448618487fc85ee801aaa1f3cc7867428bf180a27229a8accc219898d5f0199b7429ab8bbdf90f869c7870e1d5e0b95c82", 0xda}, {&(0x7f0000002b00)="80a0c693e8f2560456e73368c4b24562d2dea862b7a3e225e3dc4808dd4125f918feff45a65604c38f", 0x29}, {&(0x7f0000002b40)="cb8281c60492d4658f8cb929c6f8bb7ef1b5eb9ffdd56e634541fe2b4b8e149a26237303d1d6f454f43bcde671dd18f338289b8afa2c3fa06af47e0586b90c03c612db5fa03f3724e65f7d3bf00253fed899769211bee5cc1d2758bb41ea96c9", 0x60}], 0x5, &(0x7f0000002c40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x38}}], 0x3, 0x20000020) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x4020940d, &(0x7f0000000000)={'vcan0\x00'}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r6, &(0x7f0000000200)={0x2, 0xce20, @remote}, 0x2) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x10, 0x1402, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008044}, 0x20008080) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000041c0)={0x14, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r8, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00{', @ANYRES16=r10, @ANYBLOB="08002cbd7000ffdbdf2518000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000900000006001600014f00000500120000000000060011000100000008000b00feffffff"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r10, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) writev(r5, &(0x7f0000000bc0)=[{&(0x7f0000000b00)="4b8ff017669b0499ff018d078f5f41ffd9e393df335a7271c66d4745a54a94386d86f767559175dfd52e284eab67b69ec770448e6fbfbf5057615c88f3a98d7ebabbd3b07b68868168642258f98657ef712209160d6dd71852d6f954b8d66c2b185f502cb16ddf4877109c211d746422f12e11e24b52b266e97ecb35e40925d45af032073a6d644474de2b14e68e7131926c13bce280a8f1bf066b77822c73e85a8a3c14a42abcf2bd43ee5d5c0d36fbe7c0a948f6a21ebf67da3625f1edde", 0xbf}], 0x1) 0s ago: executing program 3 (id=3776): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$XFS_IOC_INUMBERS(r1, 0x80405880, &(0x7f0000000240)={{0xd28, 0x4, 0x6, 0xd}, [{0xfffffffe, 0x3, 0x9, 0xfd}, {0x2, 0x8, 0xa, 0x10}]}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async, rerun: 64) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x8, 0x2, 0x8, 0x4, 0x401, 0x76965ecb, 0x7}, 0x20) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000500)={0x0, 0x6}, 0x8) (async) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000006050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac0000000800014000000009080002400000000109"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000200)) sendto$inet6(r2, 0x0, 0x0, 0x2000c851, &(0x7f0000000300)={0xa, 0x4e23, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r5 = socket$nl_audit(0x10, 0x3, 0x9) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={0xffffffffffffffff, r6, 0xa, 0x0, @void}, 0xffffffffffffff92) socket$kcm(0x1e, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000007e"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) kernel console output (not intermixed with test programs): ce bond6 [ 346.939142][T14349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2219'. [ 346.993588][T14350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2219'. [ 347.433104][T14376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2225'. [ 347.481745][T14383] netlink: 'syz.3.2226': attribute type 178 has an invalid length. [ 347.520159][T14383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2226'. [ 347.994289][T14406] x_tables: unsorted entry at hook 2 [ 348.012096][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2231'. [ 348.021534][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2231'. [ 348.036527][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2231'. [ 348.125793][T14408] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2233'. [ 348.404507][T14422] netlink: 'syz.4.2237': attribute type 1 has an invalid length. [ 348.594575][T14432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2240'. [ 348.609637][T14435] veth1_macvtap: entered allmulticast mode [ 348.620254][T14434] veth1_macvtap: left allmulticast mode [ 348.749539][T14441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2244'. [ 349.013494][T14449] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 349.040453][T14449] bond6 (unregistering): Released all slaves [ 349.215311][T14464] SET target dimension over the limit! [ 349.779313][T14490] netlink: 'syz.2.2262': attribute type 1 has an invalid length. [ 349.913498][T14490] bond6: entered promiscuous mode [ 349.921387][T14490] 8021q: adding VLAN 0 to HW filter on device bond6 [ 349.943842][T14492] bond6: (slave bridge6): making interface the new active one [ 349.951903][T14492] bridge6: entered promiscuous mode [ 349.958546][T14492] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 350.039638][T14505] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 350.090612][T14490] bond6: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 350.136322][T14490] bond6: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 350.332977][T14514] xt_hashlimit: size too large, truncated to 1048576 [ 350.845216][T14539] bond5: option min_links: invalid value (18446744073709551614) [ 350.873545][T14539] bond5: option min_links: allowed values 0 - 2147483647 [ 350.892859][T14539] bond5 (unregistering): Released all slaves [ 351.376824][T14577] macvtap1: entered allmulticast mode [ 351.433461][T14577] veth0_macvtap: entered allmulticast mode [ 351.534540][T14580] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 351.675886][T14593] tipc: Enabled bearer , priority 0 [ 351.834436][T14593] syzkaller0: entered promiscuous mode [ 351.843520][T14593] syzkaller0: entered allmulticast mode [ 351.853467][T14593] tipc: Resetting bearer [ 352.146287][ T12] tipc: Resetting bearer [ 352.179260][T14592] tipc: Resetting bearer [ 353.750909][T14592] tipc: Disabling bearer [ 353.955459][T14633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.049355][T14641] netlink: 'syz.3.2298': attribute type 2 has an invalid length. [ 354.062812][T14641] __nla_validate_parse: 10 callbacks suppressed [ 354.062830][T14641] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2298'. [ 354.117459][T14643] sctp: [Deprecated]: syz.1.2302 (pid 14643) Use of int in max_burst socket option. [ 354.117459][T14643] Use struct sctp_assoc_value instead [ 354.138985][T14646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2304'. [ 354.213044][T14643] : renamed from virt_wifi0 [ 354.260295][T14646] bond7: (slave macvlan3): Opening slave failed [ 354.381454][T14655] ip6tnl4: entered promiscuous mode [ 354.492329][T14657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2306'. [ 354.551302][T14668] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2309'. [ 354.726261][T14673] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2311'. [ 355.121909][T14705] lo: entered allmulticast mode [ 355.422491][T14722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2323'. [ 355.453792][T14726] bridge_slave_0: invalid flags given to default FDB implementation [ 355.523386][T14727] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2326'. [ 355.542387][T14727] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2326'. [ 355.561432][T14727] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2326'. [ 355.666308][T14722] bond15 (unregistering): Released all slaves [ 355.669433][T14735] netlink: 'syz.4.2327': attribute type 1 has an invalid length. [ 355.760169][T14733] bond15: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 355.777040][T14733] bond15 (unregistering): Released all slaves [ 355.892914][T14735] 8021q: adding VLAN 0 to HW filter on device bond8 [ 355.946161][T14741] netlink: 'syz.3.2328': attribute type 5 has an invalid length. [ 355.968439][T14737] bond8: (slave geneve2): making interface the new active one [ 355.982864][T14737] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 355.993710][ T9600] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.020736][ T9600] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.062476][ T9600] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.093785][ T9600] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.426775][T14755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2330'. [ 356.581637][T14768] netlink: 'syz.0.2334': attribute type 1 has an invalid length. [ 357.013166][T14779] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 357.551586][T14795] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 358.210529][T14836] nftables ruleset with unbound chain [ 358.274380][T14842] 8021q: VLANs not supported on gre0 [ 358.614218][T14866] netlink: 'syz.1.2366': attribute type 1 has an invalid length. [ 359.147166][T14895] __nla_validate_parse: 8 callbacks suppressed [ 359.147188][T14895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2372'. [ 359.165876][T14895] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2372'. [ 359.457706][T14907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2374'. [ 359.493780][T14913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2374'. [ 359.519142][T14908] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 359.599315][T14916] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 359.653497][T14921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2378'. [ 359.923224][T14937] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2382'. [ 360.002573][T14943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2385'. [ 360.080451][T14943] netlink: 'syz.2.2385': attribute type 1 has an invalid length. [ 360.112738][T14943] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2385'. [ 360.136512][T14943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2385'. [ 360.227593][T14951] netlink: 'syz.1.2387': attribute type 25 has an invalid length. [ 360.583432][T14968] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2391'. [ 360.922595][T14986] netlink: 'syz.0.2400': attribute type 13 has an invalid length. [ 360.940721][T14986] macsec0: left promiscuous mode [ 360.951311][T14986] macsec0: entered allmulticast mode [ 361.094167][T14993] netlink: 'syz.0.2402': attribute type 1 has an invalid length. [ 361.163501][T15001] vcan0: tx drop: invalid da for name 0x0000800000000015 [ 361.321440][T15008] netlink: 'syz.1.2408': attribute type 1 has an invalid length. [ 361.424926][T15013] xt_CT: You must specify a L4 protocol and not use inversions on it [ 361.459345][T15008] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 361.492317][T15021] netlink: 'syz.2.2410': attribute type 1 has an invalid length. [ 361.501864][T15008] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 361.551487][T15024] netlink: 'syz.2.2410': attribute type 7 has an invalid length. [ 361.641866][T15014] bond5: (slave gretap2): making interface the new active one [ 361.650368][T15014] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 361.676057][T15008] macvlan3: entered promiscuous mode [ 361.682149][T15008] macvlan3: entered allmulticast mode [ 361.690776][T15008] bond5: entered promiscuous mode [ 361.696064][T15008] gretap2: entered promiscuous mode [ 361.704973][T15008] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 361.715972][T15008] bond5: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 361.729709][T15008] bond5: left promiscuous mode [ 361.734601][T15008] gretap2: left promiscuous mode [ 361.779251][T15022] bond5: (slave bridge6): Enslaving as an active interface with a down link [ 362.244393][T15052] netlink: 'syz.0.2416': attribute type 16 has an invalid length. [ 362.261077][T15052] netlink: 'syz.0.2416': attribute type 17 has an invalid length. [ 362.273233][T15052] lo: left promiscuous mode [ 362.286444][T15052] tunl0: left promiscuous mode [ 362.303260][T15052] gre0: left promiscuous mode [ 362.319820][T15052] gretap0: left promiscuous mode [ 362.370998][T15052] erspan0: left promiscuous mode [ 362.393723][T15052] ip_vti0: left promiscuous mode [ 362.406241][T15052] ip6_vti0: left promiscuous mode [ 362.424199][T15052] sit0: left promiscuous mode [ 362.466563][T15052] ip6tnl0: left promiscuous mode [ 362.486069][T15052] ip6gre0: left promiscuous mode [ 362.510324][T15052] ip6gretap0: left promiscuous mode [ 362.549310][T15052] bridge0: left promiscuous mode [ 362.555801][T15052] : left promiscuous mode [ 362.563246][T15052] 8021q: adding VLAN 0 to HW filter on device  [ 362.587139][T15052] bridge0: port 3(dummy0) entered blocking state [ 362.594305][T15052] bridge0: port 3(dummy0) entered listening state [ 362.604561][T15052] nlmon0: left promiscuous mode [ 362.612838][T15052] veth0: left promiscuous mode [ 362.620121][T15052] veth1: left promiscuous mode [ 362.629719][T15052] wg0: left promiscuous mode [ 362.641833][T15052] wg2: left promiscuous mode [ 362.660128][T15052] veth1_to_bridge: left promiscuous mode [ 362.672328][T15073] openvswitch: netlink: Missing key (keys=40, expected=80) [ 362.682357][T15052] veth0_to_bond: left promiscuous mode [ 362.692492][T15073] netlink: 'syz.2.2420': attribute type 10 has an invalid length. [ 362.704267][T15052] bond_slave_0: left promiscuous mode [ 362.716030][T15052] veth1_to_bond: left promiscuous mode [ 362.724649][T15052] bond_slave_1: left promiscuous mode [ 362.741014][T15052] veth1_to_team: left promiscuous mode [ 362.748725][T15052] team_slave_1: left promiscuous mode [ 362.755324][T15052] veth0_to_batadv: left promiscuous mode [ 362.763434][T15052] batadv_slave_0: left promiscuous mode [ 362.771896][T15052] veth1_to_batadv: left promiscuous mode [ 362.779381][T15052] batadv_slave_1: left promiscuous mode [ 362.788777][T15052] xfrm0: left promiscuous mode [ 362.795663][T15052] veth0_to_hsr: left promiscuous mode [ 362.803532][T15052] veth1_to_hsr: left promiscuous mode [ 362.814660][T15052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 362.825449][T15052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 362.838873][T15052] veth1_virt_wifi: left promiscuous mode [ 362.845728][T15052] veth0_virt_wifi: left promiscuous mode [ 362.854209][T15052] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 362.862715][T15052] virt_wifi0: left promiscuous mode [ 362.870254][T15052] veth1_vlan: left promiscuous mode [ 362.880965][T15052] vlan0: left promiscuous mode [ 362.886591][T15052] veth1_vlan: entered promiscuous mode [ 362.892919][T15052] macvlan0: left promiscuous mode [ 362.900051][T15052] macvlan1: left promiscuous mode [ 362.907889][T15052] ipvlan0: left promiscuous mode [ 362.915414][T15052] veth1_macvtap: left promiscuous mode [ 362.923487][T15052] veth0_macvtap: left promiscuous mode [ 362.930740][T15052] veth0_macvtap: entered promiscuous mode [ 362.936828][T15052] macvtap0: left promiscuous mode [ 362.944161][T15052] veth1_macvtap: entered promiscuous mode [ 362.950517][T15052] veth1_macvtap: entered allmulticast mode [ 362.956494][T15052] macsec0: left allmulticast mode [ 362.966291][T15052] veth1_macvtap: left allmulticast mode [ 362.974046][T15052] geneve0: left promiscuous mode [ 362.982512][T15052] geneve1: left promiscuous mode [ 362.991610][T15052] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 363.000203][T15052] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.009000][T15052] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 363.016577][T15052] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 363.026103][T15052] netdevsim netdevsim0 netdevsim2: left promiscuous mode [ 363.039963][T15052] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 363.049324][T15052] netdevsim netdevsim0 netdevsim3: left promiscuous mode [ 363.057410][T15052] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 363.065681][T15052] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 363.076104][T15052] geneve2: left promiscuous mode [ 363.084611][T15052] gre1: left promiscuous mode [ 363.091358][T15052] bond1: left promiscuous mode [ 363.096599][T15052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 363.105660][T15052] ip6tnl1: left promiscuous mode [ 363.112495][T15052] macvlan2: left promiscuous mode [ 363.119280][T15052] mac80211_hwsim hwsim15 wlan2: left promiscuous mode [ 363.131718][T15052] gtp0: left promiscuous mode [ 363.137187][T15052] gtp0: left allmulticast mode [ 363.143912][T15052] gretap1: left promiscuous mode [ 363.151083][T15052] veth2: left promiscuous mode [ 363.157583][T15052] veth3: left promiscuous mode [ 363.163638][T15052] : left promiscuous mode [ 363.170418][T15052] gretap2: left promiscuous mode [ 363.178154][T15052] gretap3: left promiscuous mode [ 363.188597][T15052] mac80211_hwsim hwsim16 wlan3: left promiscuous mode [ 363.197471][T15052] vlan2: left promiscuous mode [ 363.202366][T15052] hsr0: left promiscuous mode [ 363.208297][T15052] vlan2: left allmulticast mode [ 363.213363][T15052] hsr0: left allmulticast mode [ 363.218800][T15052] hsr_slave_0: left allmulticast mode [ 363.224285][T15052] hsr_slave_1: left allmulticast mode [ 363.231477][T15052] gre2: left promiscuous mode [ 363.261811][T15052] bond2: left promiscuous mode [ 363.267222][T15052] 8021q: adding VLAN 0 to HW filter on device bond2 [ 363.274721][T15052] sit1: left promiscuous mode [ 363.282381][T15052] bond3: left promiscuous mode [ 363.289516][T15052] 8021q: adding VLAN 0 to HW filter on device bond3 [ 363.297509][T15052] gtp1: left promiscuous mode [ 363.304297][T15052] geneve3: left promiscuous mode [ 363.309428][T15052] geneve3: left allmulticast mode [ 363.316597][T15052] bridge1: left promiscuous mode [ 363.322808][T15052] ip6tnl2: left promiscuous mode [ 363.329529][T15052] gre3: left promiscuous mode [ 363.336329][T15052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.344238][T15052] ip6tnl3: left promiscuous mode [ 363.351622][T15052] bond4: left promiscuous mode [ 363.356407][T15052] bond4: left allmulticast mode [ 363.365516][T15052] ip6tnl4: left promiscuous mode [ 363.375948][ T5816] lo speed is unknown, defaulting to 1000 [ 363.382993][ T5816] syz0: Port: 1 Link ACTIVE [ 363.391792][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.399199][ T12] bridge0: port 2(bridge_slave_1) entered listening state [ 363.500513][ T9605] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.531154][ T9605] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.559288][ T9605] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 34275 - 0 [ 363.571095][ T9605] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 363.580825][ T9605] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.590147][ T9605] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.637272][ T9605] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 34275 - 0 [ 363.664648][ T9605] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 363.698030][ T1229] lo speed is unknown, defaulting to 1000 [ 363.718525][ T9605] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.753216][ T9605] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.800538][ T9605] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 34275 - 0 [ 363.837222][ T9605] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 363.876863][ T9605] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.912631][ T9605] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.951177][ T9605] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 34275 - 0 [ 363.988508][ T9605] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 364.033257][T15101] netlink: 'syz.1.2430': attribute type 11 has an invalid length. [ 364.088202][T15107] tipc: Enabled bearer , priority 0 [ 364.118443][T15108] syzkaller0: MTU too low for tipc bearer [ 364.151127][T15108] tipc: Disabling bearer [ 364.275038][T15113] __nla_validate_parse: 12 callbacks suppressed [ 364.275058][T15113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2433'. [ 364.348560][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 364.356600][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 364.378918][ T5742] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 364.404929][ T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 364.442330][ T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 364.452005][ T5729] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 364.605701][T15132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2439'. [ 364.823830][ T5729] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 364.864992][T15150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2443'. [ 364.897322][ T5729] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 364.990803][T15151] wireguard1: entered promiscuous mode [ 364.997177][T15151] wireguard1: entered allmulticast mode [ 365.290491][ T5729] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 365.295859][T15170] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 365.374014][ T5729] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 365.658492][T15193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2453'. [ 366.057368][T15216] tipc: Enabling of bearer rejected, failed to enable media [ 366.330722][T15228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2467'. [ 366.354714][T15227] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2464'. [ 366.375927][T15227] bridge: RTM_NEWNEIGH with invalid ether address [ 366.409478][T15227] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2464'. [ 366.441903][T15227] bridge: RTM_NEWNEIGH with invalid ether address [ 366.549480][T15238] veth1: entered allmulticast mode [ 366.585533][T15247] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2468'. [ 366.606785][T15243] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2468'. [ 366.622760][T15247] netlink: 'syz.3.2468': attribute type 21 has an invalid length. [ 366.640866][T15246] ipvlan1: entered promiscuous mode [ 366.652642][T15246] ipvlan1: entered allmulticast mode [ 366.691965][T15247] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2468'. [ 367.144459][T15268] Unsupported ieee802154 address type: 0 [ 367.739660][T15301] bond6: option xmit_hash_policy: invalid value (64) [ 367.753825][T15301] bond6 (unregistering): Released all slaves [ 367.973897][T15312] netlink: 'syz.0.2483': attribute type 1 has an invalid length. [ 367.989305][T15310] veth9: entered promiscuous mode [ 368.003020][T15310] veth9: entered allmulticast mode [ 368.680533][T15359] erspan0: entered allmulticast mode [ 368.870344][T15365] netlink: 'syz.2.2499': attribute type 10 has an invalid length. [ 369.083853][T15374] netlink: 'syz.2.2503': attribute type 63 has an invalid length. [ 369.093742][T15374] netlink: 'syz.2.2503': attribute type 63 has an invalid length. [ 369.116527][T15374] netlink: 'syz.2.2503': attribute type 63 has an invalid length. [ 369.149297][T15354] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 371.294849][T15334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.516094][T15405] __nla_validate_parse: 1 callbacks suppressed [ 371.516112][T15405] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2508'. [ 371.543702][T15406] netlink: 'syz.0.2507': attribute type 3 has an invalid length. [ 371.567569][T15409] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2508'. [ 371.593345][T15405] macsec0: entered promiscuous mode [ 371.619599][T15405] macsec0: entered allmulticast mode [ 371.643578][T15405] veth1_macvtap: entered allmulticast mode [ 371.673562][T15405] macsec0: left promiscuous mode [ 371.742231][T15405] macsec0: left allmulticast mode [ 371.752764][T15405] veth1_macvtap: left allmulticast mode [ 372.005302][T15433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2517'. [ 372.222323][T15439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2519'. [ 372.503214][T15450] syzkaller0: left promiscuous mode [ 372.522724][T15450] syzkaller0: left allmulticast mode [ 372.537756][T15448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2521'. [ 372.773772][T15455] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 373.104935][T15473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2529'. [ 373.133245][T15473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2529'. [ 373.215147][T15477] ipt_REJECT: TCP_RESET invalid for non-tcp [ 373.642185][T15498] netlink: 'syz.4.2536': attribute type 1 has an invalid length. [ 373.681739][T15498] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2536'. [ 373.888627][T15505] block nbd2: Unsupported socket: should be TCP or UNIX. [ 373.903279][ T50] block nbd1: Receive control failed (result -32) [ 374.376616][T15529] syzkaller1: entered promiscuous mode [ 374.391292][T15529] syzkaller1: entered allmulticast mode [ 374.563948][T15539] tipc: Enabled bearer , priority 0 [ 374.586601][T15539] syzkaller0: entered promiscuous mode [ 374.605151][T15539] syzkaller0: entered allmulticast mode [ 374.643396][T15541] netlink: 'syz.2.2548': attribute type 83 has an invalid length. [ 374.712154][T15544] tipc: Resetting bearer [ 374.793085][T15544] tipc: Resetting bearer [ 374.861263][T15549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2550'. [ 374.906002][T15549] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 374.932020][T15553] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2550'. [ 374.951860][T15544] tipc: Disabling bearer [ 374.958740][T15553] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 375.318580][T15561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.328273][T15563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.839251][ T30] audit: type=1804 audit(1778023983.412:4): pid=15587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2562" name="/newroot/495/cgroup.controllers" dev="tmpfs" ino=2537 res=1 errno=0 [ 375.870248][ T30] audit: type=1800 audit(1778023983.442:5): pid=15587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2562" name="cgroup.controllers" dev="tmpfs" ino=2537 res=0 errno=0 [ 375.927075][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 375.927099][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 376.166457][T15604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.425578][T15616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.562183][T15625] __nla_validate_parse: 5 callbacks suppressed [ 376.562203][T15625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2576'. [ 376.621032][T15625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2576'. [ 376.748124][T15637] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2580'. [ 377.119649][T15649] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2582'. [ 377.168082][T15653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2584'. [ 377.201413][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2584'. [ 377.225315][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2584'. [ 377.496736][T15671] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2588'. [ 377.522375][T15674] netlink: 'syz.3.2589': attribute type 1 has an invalid length. [ 377.531274][T15674] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2589'. [ 377.847859][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 377.952665][T15701] netlink: 'syz.3.2595': attribute type 64 has an invalid length. [ 378.190087][T15708] erspan0: entered allmulticast mode [ 378.232335][T15711] netlink: 'syz.2.2600': attribute type 4 has an invalid length. [ 378.241602][T15706] netlink: 'syz.4.2598': attribute type 1 has an invalid length. [ 378.549491][T15727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.653258][T15733] netlink: 'syz.1.2607': attribute type 15 has an invalid length. [ 378.735842][T15739] netlink: get zone limit has 4 unknown bytes [ 378.830248][T15735] block nbd2: server does not support multiple connections per device. [ 378.847784][T15735] block nbd2: shutting down sockets [ 378.883141][T15742] netlink: 'syz.2.2609': attribute type 1 has an invalid length. [ 378.932974][T15742] 8021q: adding VLAN 0 to HW filter on device bond7 [ 379.101137][T15753] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2612'. [ 379.710344][T15776] netlink: 'syz.2.2617': attribute type 13 has an invalid length. [ 380.687506][T15827] bridge0: port 1(ipvlan2) entered blocking state [ 380.711832][T15827] bridge0: port 1(ipvlan2) entered disabled state [ 380.724785][T15827] ipvlan2: entered allmulticast mode [ 380.735104][T15827] bridge0: entered allmulticast mode [ 380.747263][T15827] ipvlan2: left allmulticast mode [ 380.752399][T15827] bridge0: left allmulticast mode [ 381.505355][T15864] bridge0: port 3(dummy0) entered disabled state [ 381.512048][T15864] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.614030][T15875] __nla_validate_parse: 5 callbacks suppressed [ 381.614050][T15875] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2642'. [ 381.907451][T15891] veth0_macvtap: Caught tx_queue_len zero misconfig [ 381.939653][T15891] lo: Caught tx_queue_len zero misconfig [ 381.999811][T15896] netlink: 'syz.3.2647': attribute type 1 has an invalid length. [ 382.075824][T15896] 8021q: adding VLAN 0 to HW filter on device bond15 [ 382.115502][T15905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2649'. [ 382.129872][T15896] bond15: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 382.140867][T15905] macvlan0: left promiscuous mode [ 382.146166][T15905] netlink: 'syz.4.2649': attribute type 2 has an invalid length. [ 382.165700][T15896] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2647'. [ 382.292692][T15914] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2651'. [ 383.008756][T15933] veth1_to_bond: entered allmulticast mode [ 383.041975][T15933] veth1_to_bond: left allmulticast mode [ 385.127241][ T50] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 391.927131][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 395.127418][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 405.092423][T15985] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2675'. [ 405.452790][T16008] xt_hashlimit: size too large, truncated to 1048576 [ 406.064120][T16042] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2692'. [ 406.463292][T16060] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2701'. [ 406.473166][T16060] netlink: Conntrack attr has 4 unknown bytes [ 406.475318][T16062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2702'. [ 406.612153][T16074] xt_TPROXY: Can be used only with -p tcp or -p udp [ 406.951254][T16089] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 407.004155][T16092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2707'. [ 407.045765][T16092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2707'. [ 407.092056][T16098] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2710'. [ 407.142615][T16100] netlink: 'syz.0.2711': attribute type 32 has an invalid length. [ 407.177185][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2711'. [ 407.256360][T16111] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2715'. [ 407.314051][T16100] bond7: option coupled_control: invalid value (192) [ 407.369147][T16100] bond7 (unregistering): Released all slaves [ 407.420568][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2713'. [ 407.591050][ T30] audit: type=1800 audit(1778024015.152:6): pid=16124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2717" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2845 res=0 errno=0 [ 408.010817][T16153] syz_tun: refused to change device tx_queue_len [ 408.032745][T16155] ipt_ECN: cannot use operation on non-tcp rule [ 408.255409][T16171] netlink: 'syz.3.2731': attribute type 83 has an invalid length. [ 409.338770][T16213] atomic_op ffff8880362bc998 conn xmit_atomic 0000000000000000 [ 409.360636][T16212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.810809][T16243] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 409.819724][T16243] IPv6: NLM_F_CREATE should be set when creating new route [ 410.161139][T16260] bridge0: port 4(batadv1) entered blocking state [ 410.190468][T16260] bridge0: port 4(batadv1) entered disabled state [ 410.233832][T16260] batadv1: entered allmulticast mode [ 410.276322][T16260] batadv1: entered promiscuous mode [ 410.602079][T16288] __nla_validate_parse: 13 callbacks suppressed [ 410.602099][T16288] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2763'. [ 410.645590][T16286] netem: change failed [ 410.651597][ T8500] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 410.661060][ T8500] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 410.739561][T16293] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2764'. [ 411.240938][T16313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2769'. [ 411.369598][T16316] syzkaller0: entered promiscuous mode [ 411.380933][T16319] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2770'. [ 411.400355][T16316] syzkaller0: entered allmulticast mode [ 411.418998][T16319] netlink: 'syz.4.2770': attribute type 17 has an invalid length. [ 411.434892][T16319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2770'. [ 411.461797][T16319] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2770'. [ 411.842718][T16344] sctp: [Deprecated]: syz.4.2776 (pid 16344) Use of int in max_burst socket option. [ 411.842718][T16344] Use struct sctp_assoc_value instead [ 412.141146][T16356] netlink: 'syz.0.2780': attribute type 1 has an invalid length. [ 412.179814][T16356] netlink: 16179 bytes leftover after parsing attributes in process `syz.0.2780'. [ 412.393318][ T5629] hsr0: entered promiscuous mode [ 412.443243][T16358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2782'. [ 412.541935][T16366] netlink: 'syz.4.2783': attribute type 1 has an invalid length. [ 412.628226][T16374] syzkaller0: entered promiscuous mode [ 412.641334][T16374] syzkaller0: entered allmulticast mode [ 412.730632][ T9608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.740792][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.754643][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.780882][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.920709][T16386] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2788'. [ 412.942324][T16387] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2788'. [ 413.043926][T16386] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 413.054388][ T9600] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.066426][ T1229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.077926][T16387] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 413.089951][ T5629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.100856][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.424867][T16407] netlink: 'syz.2.2795': attribute type 1 has an invalid length. [ 413.469687][T16407] netlink: 'syz.2.2795': attribute type 1 has an invalid length. [ 413.485895][T16407] netlink: 'syz.2.2795': attribute type 4 has an invalid length. [ 413.510922][T16408] netlink: 'syz.2.2795': attribute type 1 has an invalid length. [ 413.994250][T16433] netlink: 'syz.4.2802': attribute type 1 has an invalid length. [ 414.115511][T16444] netlink: 'syz.1.2805': attribute type 1 has an invalid length. [ 414.404410][T16438] bond10: (slave geneve3): making interface the new active one [ 414.428051][T16438] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 414.519291][T16460] netlink: 'syz.3.2807': attribute type 1 has an invalid length. [ 414.548707][T16449] bond6: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 414.559836][T16449] bond6: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 414.574807][T16449] bond6: (slave ip6gre3): making interface the new active one [ 414.585423][T16449] bond6: (slave ip6gre3): Enslaving as an active interface with an up link [ 414.600856][ T9608] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 414.635152][ T9608] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 414.647859][ T9608] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 414.670610][ T9608] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 415.381024][T16505] netlink: 'syz.1.2818': attribute type 1 has an invalid length. [ 415.489570][T16505] bond7: entered promiscuous mode [ 415.495119][T16505] 8021q: adding VLAN 0 to HW filter on device bond7 [ 415.504961][T16514] netlink: 'syz.4.2820': attribute type 8 has an invalid length. [ 415.520504][T16506] bond7: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 415.534626][T16506] bond7: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 415.545404][T16506] bond7: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 415.582259][T16511] veth1_macvtap: entered allmulticast mode [ 415.720702][T16512] veth1_macvtap (unregistering): left allmulticast mode [ 416.466542][T16561] xt_CT: You must specify a L4 protocol and not use inversions on it [ 417.012024][T16580] bond8: entered allmulticast mode [ 417.104641][T16590] veth13: entered allmulticast mode [ 417.114337][T16590] bond8: (slave veth13): Enslaving as an active interface with an up link [ 417.151509][T16593] bond8 (unregistering): (slave veth13): Releasing backup interface [ 417.184241][T16593] bond8 (unregistering): Released all slaves [ 417.212659][T16597] __nla_validate_parse: 9 callbacks suppressed [ 417.212680][T16597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2840'. [ 417.229875][T16596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2840'. [ 417.473702][T16615] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.2846'. [ 417.607245][T16622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2848'. [ 418.487789][T16667] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2860'. [ 418.742209][T16678] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 418.899244][T16693] netlink: 'syz.1.2867': attribute type 11 has an invalid length. [ 418.921421][T16694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2867'. [ 418.943489][T16693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2867'. [ 418.969046][T16694] netlink: 'syz.1.2867': attribute type 1 has an invalid length. [ 418.985255][T16694] netlink: 'syz.1.2867': attribute type 2 has an invalid length. [ 419.024354][T16693] netlink: 'syz.1.2867': attribute type 11 has an invalid length. [ 419.048863][T16703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2869'. [ 419.073265][T16702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2869'. [ 419.089391][T16706] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2871'. [ 419.104713][T16707] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 419.659239][T16729] : entered promiscuous mode [ 420.052978][T16752] netlink: 'syz.3.2885': attribute type 3 has an invalid length. [ 420.073491][T16752] netlink: 'syz.3.2885': attribute type 1 has an invalid length. [ 420.074825][T16751] netlink: 'syz.0.2884': attribute type 11 has an invalid length. [ 420.117850][T16751] netlink: 'syz.0.2884': attribute type 11 has an invalid length. [ 420.362484][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 420.380613][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 420.389583][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 420.400315][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 420.410739][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 420.450833][T16770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.481959][T16769] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.102117][ T5889] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.149911][ T5889] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.204329][T16803] netlink: 'syz.0.2897': attribute type 10 has an invalid length. [ 421.280522][T16803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.320370][T16803] : (slave netdevsim1): Enslaving as an active interface with an up link [ 421.428621][ T5889] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.439940][ T5889] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.556582][ T5889] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.568681][ T5889] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.604271][T16766] lo speed is unknown, defaulting to 1000 [ 421.763545][T16822] netlink: zone id is out of range [ 421.764412][T16820] netlink: set zone limit has 4 unknown bytes [ 421.781104][T16822] netlink: zone id is out of range [ 422.487087][ T5634] Bluetooth: hci5: command tx timeout [ 423.705259][ T5889] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.782528][ T5889] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.927529][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 424.026567][T16842] __nla_validate_parse: 6 callbacks suppressed [ 424.026609][T16842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2905'. [ 424.068589][T16842] netlink: 'syz.4.2905': attribute type 8 has an invalid length. [ 424.108805][T16766] vxcan1 speed is unknown, defaulting to 1000 [ 424.115215][T16842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2905'. [ 424.543634][T16858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2908'. [ 424.571622][ T5634] Bluetooth: hci5: command tx timeout [ 424.595857][T16860] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2910'. [ 424.704994][T16863] netlink: 'syz.0.2911': attribute type 8 has an invalid length. [ 424.874798][ T5889] bridge_slave_0: left allmulticast mode [ 424.894333][ T5889] bridge_slave_0: left promiscuous mode [ 424.910826][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.005243][ T5889] tipc: Resetting bearer [ 425.519902][ T5889] bond6 (unregistering): (slave ip6gre3): Releasing backup interface [ 425.563098][T16896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2916'. [ 425.700703][T16901] netlink: 'syz.3.2915': attribute type 3 has an invalid length. [ 425.783716][ T5889] bond5 (unregistering): (slave gretap2): Releasing active interface [ 426.024916][ T5889] tipc: Disabling bearer [ 426.263572][ T5889] bond5 (unregistering): (slave bridge6): Releasing active interface [ 426.323086][ T5889] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.332310][ T5889] bond_slave_0: left promiscuous mode [ 426.341392][ T5889] .` (unregistering): Released all slaves [ 426.355975][ T5889] bond1 (unregistering): (slave veth3): Releasing active interface [ 426.366621][ T5889] bond1 (unregistering): (slave veth5): Releasing active interface [ 426.376531][ T5889] bond1 (unregistering): Released all slaves [ 426.393958][ T5889] bond2 (unregistering): (slave bond3): Releasing backup interface [ 426.408025][ T5889] bond2 (unregistering): Released all slaves [ 426.425763][ T5889] bond3 (unregistering): Released all slaves [ 426.442121][ T5889] bond0 (unregistering): left promiscuous mode [ 426.449131][ T5889] bond0 (unregistering): Released all slaves [ 426.479868][ T5889] bond4 (unregistering): Released all slaves [ 426.497145][ T5889] bond5 (unregistering): Released all slaves [ 426.512878][ T5889] bond6 (unregistering): Released all slaves [ 426.529104][ T5889] bond7 (unregistering): Released all slaves [ 426.576031][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 426.647170][ T5634] Bluetooth: hci5: command tx timeout [ 426.848369][T16918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2921'. [ 426.905635][T16920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 426.944967][T16919] netem: change failed [ 427.020855][T16919] netlink: 412 bytes leftover after parsing attributes in process `syz.0.2922'. [ 427.041231][T16919] netlink: get zone limit has 4 unknown bytes [ 427.061922][ T5889] : left promiscuous mode [ 427.265739][ T5889] tipc: Disabling bearer [ 427.299504][ T5889] tipc: Left network mode [ 427.397208][T16935] bond5: option mode: unable to set because the bond device has slaves [ 427.409786][T16935] 8021q: VLANs not supported on ip6tnl0 [ 427.521585][T16935] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 427.631352][T16945] netlink: 'syz.2.2927': attribute type 1 has an invalid length. [ 427.748501][T16945] 8021q: adding VLAN 0 to HW filter on device bond8 [ 427.846699][ T5889] IPVS: stopping master sync thread 9837 ... [ 427.857154][T16947] vlan4: entered allmulticast mode [ 427.879459][T16947] bond8: entered allmulticast mode [ 428.103150][T16964] netlink: 'syz.0.2930': attribute type 1 has an invalid length. [ 428.208074][T16970] netlink: 'syz.4.2931': attribute type 1 has an invalid length. [ 428.224789][T16972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2930'. [ 428.265704][T16964] 8021q: adding VLAN 0 to HW filter on device bond7 [ 428.288017][T16972] block nbd2: Unsupported socket: should be TCP or UNIX. [ 428.407665][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 428.421627][T16968] bond7: (slave geneve4): making interface the new active one [ 428.460583][T16968] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 428.602354][T16970] bond11: entered promiscuous mode [ 428.608083][T16970] 8021q: adding VLAN 0 to HW filter on device bond11 [ 428.631794][T16970] netlink: 'syz.4.2931': attribute type 1 has an invalid length. [ 428.652754][T16970] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2931'. [ 428.693587][T16964] bridge0: port 3(dummy0) entered blocking state [ 428.700308][T16964] bridge0: port 3(dummy0) entered listening state [ 428.707149][T16964] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.714363][T16964] bridge0: port 2(bridge_slave_1) entered listening state [ 428.727427][ T5634] Bluetooth: hci5: command tx timeout [ 428.763144][T16964] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 428.800635][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 428.876385][T16965] 8021q: adding VLAN 0 to HW filter on device bond11 [ 428.900924][T16965] bond11: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 428.926444][T16965] bond11: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 428.944646][T16992] netlink: 'syz.3.2936': attribute type 1 has an invalid length. [ 428.952576][T16965] bond11: (slave ip6gre1): making interface the new active one [ 428.952602][T16965] ip6gre1: entered promiscuous mode [ 428.965733][T16965] bond11: (slave ip6gre1): Enslaving as an active interface with an up link [ 429.016388][T16986] bond9 (unregistering): Released all slaves [ 429.086736][T16992] 8021q: adding VLAN 0 to HW filter on device bond16 [ 429.122952][T16992] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 429.151308][T16995] bond16: (slave geneve3): making interface the new active one [ 429.184835][T16995] bond16: (slave geneve3): Enslaving as an active interface with an up link [ 429.256635][T16998] bond15: (slave veth0_to_bond): Releasing active interface [ 429.325425][T16998] bond2: (slave gretap1): Releasing active interface [ 429.365595][T16998] bond5: (slave bridge2): Releasing backup interface [ 429.375538][T16998] bridge2: left promiscuous mode [ 429.395464][T16998] bond6: (slave bond7): Releasing backup interface [ 429.405946][T17011] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2941'. [ 429.406259][T16998] bond6: (slave bond7): the permanent HWaddr of slave - 9a:32:fd:f3:59:34 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 429.434960][T16998] bond6: (slave gretap2): making interface the new active one [ 429.472281][T16998] bond6: (slave gretap2): Releasing backup interface [ 429.501814][T16998] bond9: (slave bridge4): Releasing backup interface [ 429.525546][T16998] bond11: (slave bridge5): Releasing active interface [ 429.541682][T16998] bond12: (slave geneve2): Releasing active interface [ 429.564380][T16998] bond14: (slave bridge6): Releasing backup interface [ 429.582304][T16998] bond16: (slave geneve3): Releasing active interface [ 429.614404][T16995] syz.3.2936 (16995) used greatest stack depth: 16896 bytes left [ 429.869400][T16766] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.895864][T16766] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.919965][T16766] bridge_slave_0: entered allmulticast mode [ 429.942102][T16766] bridge_slave_0: entered promiscuous mode [ 430.030227][T16766] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.054102][T16766] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.086536][T16766] bridge_slave_1: entered allmulticast mode [ 430.106669][T16766] bridge_slave_1: entered promiscuous mode [ 430.143338][T17036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2948'. [ 430.166117][T17036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2948'. [ 430.448842][T16766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.516162][T16766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.756998][T16766] team0: Port device team_slave_0 added [ 430.778938][T16766] team0: Port device team_slave_1 added [ 431.070150][T17068] netlink: 'syz.4.2952': attribute type 1 has an invalid length. [ 431.110139][T17068] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2952'. [ 431.153609][T16766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.170048][T16766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.258883][T16766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.349515][T16766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.370548][T16766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.485288][T16766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.499783][T17096] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 431.549104][T17099] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2958'. [ 431.654282][ T5889] veth0_to_hsr: left promiscuous mode [ 431.661271][T17099] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2958'. [ 431.682783][ T5889] hsr_slave_0: left promiscuous mode [ 431.691907][ T5889] hsr_slave_1: left promiscuous mode [ 431.702660][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.710969][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.720901][ T5889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.730511][ T5889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.760011][ T5889] veth1_vlan: left allmulticast mode [ 431.765688][ T5889] veth1_macvtap: left promiscuous mode [ 431.773169][ T5889] veth0_macvtap: left promiscuous mode [ 431.780840][ T5889] veth1_vlan: left promiscuous mode [ 431.786205][ T5889] veth0_vlan: left promiscuous mode [ 432.202441][ T5889] team0 (unregistering): Port device team_slave_1 removed [ 432.227464][ T5889] team0 (unregistering): Port device team_slave_0 removed [ 432.325255][ T76] smc: removing ib device syz2 [ 432.412930][ T76] smbdirect: ib_dev[syz2] removed [ 432.433086][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 432.505853][ T5729] vxcan1 speed is unknown, defaulting to 1000 [ 432.550152][ T5729] syz2: Port: 1 Link DOWN [ 432.742166][T17117] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 432.911275][T16766] hsr_slave_0: entered promiscuous mode [ 432.983968][T16766] hsr_slave_1: entered promiscuous mode [ 433.047876][T17132] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2967'. [ 433.404567][T17137] tipc: Enabled bearer , priority 0 [ 433.421802][T17152] netlink: 'syz.3.2972': attribute type 1 has an invalid length. [ 433.479306][T17152] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2972'. [ 433.505388][T17142] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 433.798152][T17135] tipc: Resetting bearer [ 433.818538][T17143] syzkaller0: entered promiscuous mode [ 433.846548][T17143] syzkaller0: entered allmulticast mode [ 433.872713][T17142] syzkaller1: entered promiscuous mode [ 433.897131][T17142] syzkaller1: entered allmulticast mode [ 434.004071][T17133] tipc: Resetting bearer [ 434.035241][T17133] tipc: Disabling bearer [ 434.060194][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2975'. [ 434.211532][T17178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2976'. [ 434.379625][T17184] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 434.410520][T17184] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 434.421863][T17185] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2978'. [ 434.433850][T17185] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2978'. [ 434.449625][T17184] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 434.450937][T17185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2978'. [ 434.510887][T17185] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2978'. [ 435.103247][T17205] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 435.140605][T17205] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 435.182682][T17221] netlink: 'syz.3.2985': attribute type 23 has an invalid length. [ 435.469860][T17225] netlink: 'syz.3.2985': attribute type 3 has an invalid length. [ 436.466213][T16766] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 436.497677][T16766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 436.522966][T16766] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 436.530435][ T5889] IPVS: stop unused estimator thread 0... [ 436.589294][T16766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 436.620599][T17267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2995'. [ 436.671390][T16766] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 436.727627][T16766] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 436.754553][T16766] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 436.821056][T16766] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 436.845810][T17248] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 436.882721][T17277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2997'. [ 436.917313][T17277] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 436.941704][T17277] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2997'. [ 436.985110][T17277] bridge0: port 3(dummy0) entered disabled state [ 437.071637][T17277] dummy0 (unregistering): left allmulticast mode [ 437.092444][T17277] dummy0 (unregistering): left promiscuous mode [ 437.108740][T17277] bridge0: port 3(dummy0) entered disabled state [ 437.346689][T16766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.416496][T17304] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3003'. [ 437.487857][T16766] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.532637][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.539960][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.581128][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.588344][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.925913][T17332] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3005'. [ 438.143279][T17346] pim6reg1: entered promiscuous mode [ 438.155921][T17346] pim6reg1: entered allmulticast mode [ 438.619539][T16766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.681785][T16766] veth0_vlan: entered promiscuous mode [ 438.699915][T16766] veth1_vlan: entered promiscuous mode [ 438.744073][T16766] veth0_macvtap: entered promiscuous mode [ 438.755242][T16766] veth1_macvtap: entered promiscuous mode [ 438.782735][T16766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.805177][T16766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.824085][ T136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.844730][ T136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.864474][ T136] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.886038][ T136] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.319981][T17316] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 440.330446][T17305] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3001'. [ 440.413621][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.425260][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.455589][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.463615][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.528003][T17394] netlink: 'syz.1.2883': attribute type 1 has an invalid length. [ 458.703930][T17399] netlink: 'syz.0.3010': attribute type 10 has an invalid length. [ 458.711937][T17399] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3010'. [ 458.812584][T17405] netlink: 'syz.3.3013': attribute type 2 has an invalid length. [ 459.032086][T17418] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 459.095177][T17418] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 459.129176][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 459.140974][T17418] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 459.187933][T17418] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 459.199971][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 459.211533][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 459.224762][T17418] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 459.226222][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 459.241526][T17418] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 459.253189][T17418] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 459.262692][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 459.270504][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 459.283886][T17418] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 459.293551][T17418] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 459.319948][T17418] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 459.527224][T17435] netlink: 'syz.4.3019': attribute type 11 has an invalid length. [ 459.707708][T17446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3022'. [ 459.731046][T17446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3022'. [ 460.014144][T17462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3026'. [ 460.211491][T17475] lo speed is unknown, defaulting to 1000 [ 460.302047][ T5824] IPVS: starting estimator thread 0... [ 460.408515][T17482] IPVS: using max 27 ests per chain, 64800 per kthread [ 460.572932][T17495] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3034'. [ 460.791964][T17501] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3036'. [ 460.838430][T17501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3036'. [ 460.975822][T17512] sctp: [Deprecated]: syz.3.3040 (pid 17512) Use of int in maxseg socket option. [ 460.975822][T17512] Use struct sctp_assoc_value instead [ 461.096050][T17514] bond12: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 461.116058][T17514] bond12 (unregistering): Released all slaves [ 461.147537][T17425] lo speed is unknown, defaulting to 1000 [ 461.337672][T17524] netlink: 'syz.1.3044': attribute type 1 has an invalid length. [ 461.372555][ T50] Bluetooth: hci3: command tx timeout [ 461.584021][T17532] can: request_module (can-proto-0) failed. [ 462.051418][T17557] veth0: entered promiscuous mode [ 462.162633][T17556] veth0: left promiscuous mode [ 462.903592][T17425] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.911013][T17425] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.918593][T17425] bridge_slave_0: entered allmulticast mode [ 462.926673][T17425] bridge_slave_0: entered promiscuous mode [ 462.939057][T17425] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.949011][T17425] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.956441][T17425] bridge_slave_1: entered allmulticast mode [ 462.965037][T17425] bridge_slave_1: entered promiscuous mode [ 463.006295][T17425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.019058][T17425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.096514][T17425] team0: Port device team_slave_0 added [ 463.110186][T17425] team0: Port device team_slave_1 added [ 463.128078][T17597] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3061'. [ 463.204055][T17425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.224744][T17425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.262415][T17425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.276279][T17608] netlink: 592 bytes leftover after parsing attributes in process `syz.0.3062'. [ 463.303245][T17425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.312531][T17425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.339782][T17425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.425290][T17425] hsr_slave_0: entered promiscuous mode [ 463.432701][T17425] hsr_slave_1: entered promiscuous mode [ 463.440544][T17425] debugfs: 'hsr0' already exists in 'hsr' [ 463.446582][T17425] Cannot create hsr debugfs directory [ 463.457237][ T5634] Bluetooth: hci3: command tx timeout [ 463.487804][T17611] netlink: 'syz.3.3063': attribute type 1 has an invalid length. [ 463.675938][T17613] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 463.757415][T17425] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.941610][T17425] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.074545][T17425] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.112191][T17624] net_ratelimit: 25 callbacks suppressed [ 464.112209][T17624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.131843][T17624] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 464.470011][T17532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 464.529175][T17425] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 464.570792][T17425] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 464.615425][T17425] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 464.628251][T17640] sctp: [Deprecated]: syz.0.3073 (pid 17640) Use of int in max_burst socket option. [ 464.628251][T17640] Use struct sctp_assoc_value instead [ 464.645670][T17638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.699165][T17425] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 464.713946][T17425] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 464.734445][T17425] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 464.744068][T17425] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 464.765062][T17425] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 464.843475][T17654] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3077'. [ 465.016067][T17667] Bluetooth: MGMT ver 1.23 [ 465.021923][T17667] Bluetooth: hci1: too big key_count value 32778 [ 465.196427][T17425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.250553][T17425] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.292499][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.299766][ T5889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.345921][T17678] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3081'. [ 465.378781][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.385962][ T5889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.397221][T17678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3081'. [ 465.528108][ T5634] Bluetooth: hci3: command 0x040f tx timeout [ 465.643500][T17689] netlink: 'syz.0.3084': attribute type 4 has an invalid length. [ 465.760502][T17695] netlink: 'syz.3.3086': attribute type 13 has an invalid length. [ 465.769980][T17696] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3085'. [ 465.900264][T17705] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3087'. [ 466.540585][T17741] netlink: 'syz.1.3095': attribute type 1 has an invalid length. [ 466.576132][T17738] bond17: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 466.590662][T17741] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3095'. [ 466.595607][T17747] netlink: 163184 bytes leftover after parsing attributes in process `syz.1.3095'. [ 466.626386][T17738] bond17: (slave lo): Enslaving as an active interface with an up link [ 466.653245][T17738] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 466.763781][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.828979][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.888011][T17746] netlink: 'syz.0.3096': attribute type 1 has an invalid length. [ 466.898255][T17746] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3096'. [ 466.921994][T17756] wireguard0: entered promiscuous mode [ 466.927727][T17756] wireguard0: entered allmulticast mode [ 467.103141][T17425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.123011][T17763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3101'. [ 467.202407][T17425] veth0_vlan: entered promiscuous mode [ 467.223201][T17425] veth1_vlan: entered promiscuous mode [ 467.303058][T17765] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3102'. [ 467.305899][T17425] veth0_macvtap: entered promiscuous mode [ 467.343123][T17425] veth1_macvtap: entered promiscuous mode [ 467.464076][T17425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.542694][T17425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.588154][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.609280][ T4942] Bluetooth: hci3: command 0x040f tx timeout [ 467.623239][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.656238][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.667684][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.932243][T17788] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 467.949779][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.988075][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.045471][T17790] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 468.052790][T17790] IPv6: NLM_F_CREATE should be set when creating new route [ 468.122073][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.155900][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.252324][T17792] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 468.400352][T17806] netlink: 'syz.3.3114': attribute type 24 has an invalid length. [ 468.837576][T17820] syzkaller0: entered promiscuous mode [ 468.867700][T17820] syzkaller0: entered allmulticast mode [ 468.933366][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 468.946106][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 468.961846][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 468.975906][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 468.985176][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 469.381653][ T30] audit: type=1804 audit(1778024076.932:7): pid=17838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3119" name="/newroot/621/cgroup.controllers" dev="tmpfs" ino=3181 res=1 errno=0 [ 469.478638][ T30] audit: type=1800 audit(1778024076.952:8): pid=17838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3119" name="cgroup.controllers" dev="tmpfs" ino=3181 res=0 errno=0 [ 469.681519][T17844] netlink: 'syz.0.3120': attribute type 1 has an invalid length. [ 469.702051][ T4942] Bluetooth: hci3: command 0x040f tx timeout [ 469.941233][T17824] lo speed is unknown, defaulting to 1000 [ 469.999871][T17859] netlink: 'syz.2.3124': attribute type 1 has an invalid length. [ 470.386086][T17867] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 470.479771][T17881] macsec3: entered promiscuous mode [ 470.491749][T17881] bridge0: entered promiscuous mode [ 470.501617][T17881] macsec3: entered allmulticast mode [ 470.530852][T17881] bridge0: entered allmulticast mode [ 470.569129][T17870] netlink: 'syz.3.3128': attribute type 1 has an invalid length. [ 470.643366][T17870] ip_vti0: entered promiscuous mode [ 470.791404][T17900] netlink: 'syz.0.3134': attribute type 1 has an invalid length. [ 470.819045][T17903] __nla_validate_parse: 5 callbacks suppressed [ 470.819064][T17903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3135'. [ 470.892741][T17903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3135'. [ 470.943453][T17909] lo speed is unknown, defaulting to 1000 [ 471.047720][ T4942] Bluetooth: hci4: command tx timeout [ 471.181473][T17922] netlink: 'syz.0.3142': attribute type 4 has an invalid length. [ 471.312195][T17925] netlink: 'syz.1.3143': attribute type 1 has an invalid length. [ 471.386008][T17929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 471.541603][T17925] bond1: (slave geneve2): making interface the new active one [ 471.568371][T17925] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 471.615403][ T36] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 471.629703][T17824] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.638353][T17824] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.645862][T17824] bridge_slave_0: entered allmulticast mode [ 471.660336][T17824] bridge_slave_0: entered promiscuous mode [ 471.680695][ T36] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 471.698031][T17824] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.710568][T17824] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.725638][T17824] bridge_slave_1: entered allmulticast mode [ 471.745797][T17824] bridge_slave_1: entered promiscuous mode [ 471.766112][ T36] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 471.777522][ T4942] Bluetooth: hci3: command 0x040f tx timeout [ 471.793612][ T36] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 471.822568][T17948] netlink: 'syz.2.3147': attribute type 4 has an invalid length. [ 471.834059][T17951] openvswitch: netlink: IP tunnel TTL not specified. [ 471.870416][T17951] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 471.877750][T17951] IPv6: NLM_F_CREATE should be set when creating new route [ 471.885145][T17951] IPv6: NLM_F_CREATE should be set when creating new route [ 471.952633][T17956] netlink: 'syz.0.3149': attribute type 10 has an invalid length. [ 471.962250][T17956] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3149'. [ 471.998165][T17824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.029257][T17824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.042716][T17951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3148'. [ 472.086721][T17960] netlink: 'syz.2.3150': attribute type 21 has an invalid length. [ 472.146417][T17824] team0: Port device team_slave_0 added [ 472.158168][T17960] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3150'. [ 472.191277][T17824] team0: Port device team_slave_1 added [ 472.215949][T17960] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3150'. [ 472.265813][T17968] xt_hashlimit: size too large, truncated to 1048576 [ 472.271398][T17971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3154'. [ 472.350516][T17824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.370187][T17824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.430128][T17824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.461978][T17824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.479441][T17824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.552327][T17824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.565833][T17982] netlink: 'syz.3.3158': attribute type 1 has an invalid length. [ 472.673150][T17982] 8021q: adding VLAN 0 to HW filter on device bond18 [ 472.734322][T17984] bond18: (slave syz_tun): Enslaving as a backup interface with an up link [ 472.940289][T17824] hsr_slave_0: entered promiscuous mode [ 472.968126][T17824] hsr_slave_1: entered promiscuous mode [ 472.993826][T17824] debugfs: 'hsr0' already exists in 'hsr' [ 473.003848][T17824] Cannot create hsr debugfs directory [ 473.100221][T18008] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3166'. [ 473.111100][T18008] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3166'. [ 473.129260][ T4942] Bluetooth: hci4: command tx timeout [ 473.168171][T18005] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3167'. [ 473.254676][T18011] netlink: 'syz.0.3166': attribute type 21 has an invalid length. [ 473.417441][T18008] vlan1: entered promiscuous mode [ 473.436685][T18008] bridge0: entered promiscuous mode [ 473.613505][T18028] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 473.630620][T18028] bond1: (slave lo): Enslaving as an active interface with an up link [ 473.641931][T18028] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 473.861011][T18044] openvswitch: netlink: Flow key attr not present in new flow. [ 473.939198][T17824] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.959405][T17824] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 474.011453][T18046] netlink: 'syz.2.3177': attribute type 1 has an invalid length. [ 474.125740][T17824] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.139367][T17824] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 474.242908][T17824] bond0: (slave netdevsim1): Releasing backup interface [ 474.273947][T17824] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.295731][T17824] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 474.413641][T17824] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.430649][T17824] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 474.763188][T17824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 474.796309][T17824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 474.819095][T17824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 474.840681][T17824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 474.871762][T17824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 474.884294][T17824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 474.894827][T17824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 474.895891][T18071] Cannot find add_set index 0 as target [ 474.916331][T17824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 475.179106][T17824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.197501][T18090] netlink: 'syz.3.3190': attribute type 1 has an invalid length. [ 475.217617][ T4942] Bluetooth: hci4: command tx timeout [ 475.229605][T18090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 475.236983][T18090] IPv6: NLM_F_CREATE should be set when creating new route [ 475.256114][T18090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 475.264644][T18090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 475.274707][T18090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 475.294252][T17824] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.322624][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.329835][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.381208][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.388517][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.431689][T18100] syzkaller0: entered promiscuous mode [ 475.439015][T18100] syzkaller0: entered allmulticast mode [ 475.495317][T18100] ip6tnl0: Caught tx_queue_len zero misconfig [ 476.131113][T18137] syz_tun: mtu less than device minimum [ 476.418635][T17824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.655386][T18167] validate_nla: 4 callbacks suppressed [ 476.655404][T18167] netlink: 'syz.1.3208': attribute type 64 has an invalid length. [ 476.776675][T18174] __nla_validate_parse: 12 callbacks suppressed [ 476.776697][T18174] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3210'. [ 476.798847][T18174] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3210'. [ 476.864729][T18176] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3211'. [ 477.021820][T17824] veth0_vlan: entered promiscuous mode [ 477.038788][T17824] veth1_vlan: entered promiscuous mode [ 477.117314][T17824] veth0_macvtap: entered promiscuous mode [ 477.171127][T17824] veth1_macvtap: entered promiscuous mode [ 477.211563][T17824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.253193][T17824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.281135][ T76] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.291875][ T4942] Bluetooth: hci4: command tx timeout [ 477.303998][ T76] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.360436][ T76] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.390383][ T76] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.650266][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.679681][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.783704][ T5889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.804099][ T5889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.835049][T18217] netlink: 'syz.1.3223': attribute type 1 has an invalid length. [ 477.843861][T18217] netlink: 'syz.1.3223': attribute type 2 has an invalid length. [ 477.890344][T18214] syzkaller0: entered promiscuous mode [ 477.896090][T18214] syzkaller0: entered allmulticast mode [ 478.068668][T18232] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3115'. [ 478.142806][T18229] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 478.443411][T18239] syzkaller1: entered promiscuous mode [ 478.461620][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 478.476694][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 478.484615][T18239] syzkaller1: entered allmulticast mode [ 478.494933][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 478.511963][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 478.524088][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 478.851968][ T5626] bond18: (slave syz_tun): Removing an active aggregator [ 478.869045][ T158] bond18: Warning: Found an uninitialized port [ 478.876294][T18255] x_tables: duplicate underflow at hook 2 [ 478.892469][ T5626] bond18: (slave syz_tun): Releasing backup interface [ 478.988309][T18263] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3235'. [ 479.242598][T18272] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3237'. [ 479.600872][T18242] lo speed is unknown, defaulting to 1000 [ 479.638811][ T4942] block nbd2: Receive control failed (result -32) [ 479.798171][T18290] netlink: 'syz.2.3244': attribute type 61 has an invalid length. [ 479.830575][T18290] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3244'. [ 480.014362][T18303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3248'. [ 480.088139][T18303] team0: Port device team_slave_0 removed [ 480.189533][T18311] netlink: 1068 bytes leftover after parsing attributes in process `syz.2.3249'. [ 480.207242][T18311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3249'. [ 480.244440][T18311] 0: renamed from hsr0 (while UP) [ 480.258107][T18311] 0: entered allmulticast mode [ 480.263324][T18311] hsr_slave_0: entered allmulticast mode [ 480.270169][T18311] hsr_slave_1: entered allmulticast mode [ 480.279152][T18311] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 480.569440][ T4942] Bluetooth: hci2: command tx timeout [ 480.949735][T18340] : renamed from team_slave_1 (while UP) [ 481.063084][T18342] bridge6: port 1(vlan3) entered blocking state [ 481.075125][T18342] bridge6: port 1(vlan3) entered disabled state [ 481.085766][T18342] vlan3: entered allmulticast mode [ 481.091405][T18342] bridge6: entered allmulticast mode [ 481.114664][T18342] vlan3: left allmulticast mode [ 481.132502][T18342] bridge6: left allmulticast mode [ 481.506799][T18242] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.531392][T18242] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.550949][T18242] bridge_slave_0: entered allmulticast mode [ 481.584487][T18242] bridge_slave_0: entered promiscuous mode [ 481.616579][T18242] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.631151][T18242] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.651509][T18242] bridge_slave_1: entered allmulticast mode [ 481.666713][T18242] bridge_slave_1: entered promiscuous mode [ 481.749357][T18242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.771091][T18242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.833734][T18242] team0: Port device team_slave_0 added [ 481.865110][T18242] team0: Port device team_slave_1 added [ 481.937818][T18242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.958382][T18242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.996606][T18242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.022501][T18242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.029973][T18242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.056752][T18242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.068133][ T5816] IPVS: starting estimator thread 0... [ 482.073829][T18377] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 482.140313][T18242] hsr_slave_0: entered promiscuous mode [ 482.148044][T18242] hsr_slave_1: entered promiscuous mode [ 482.156518][T18242] debugfs: 'hsr0' already exists in 'hsr' [ 482.163214][T18242] Cannot create hsr debugfs directory [ 482.180814][T18383] IPVS: using max 25 ests per chain, 60000 per kthread [ 482.260643][T18385] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.398247][T18385] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.511608][T18242] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.522853][T18242] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.591605][T18385] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.653601][ T4942] Bluetooth: hci2: command tx timeout [ 482.682958][T18242] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.695014][T18242] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.781357][T18385] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.876818][T18242] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.891542][T18242] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.124901][T18242] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.150545][T18403] netlink: 'syz.1.3275': attribute type 10 has an invalid length. [ 483.160459][T18242] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.210990][T18402] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 483.225067][T18402] bond1 (unregistering): Released all slaves [ 483.251018][T18403] syz_tun: entered promiscuous mode [ 483.468857][ T8500] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.496496][ T8500] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.585115][ T158] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.708449][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.101619][T18242] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 484.110145][T18440] netlink: 'syz.1.3284': attribute type 1 has an invalid length. [ 484.131573][T18242] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 484.163412][T18242] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 484.235044][T18242] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 484.248404][T18242] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 484.286175][T18242] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 484.314418][T18242] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 484.318435][T18450] __nla_validate_parse: 4 callbacks suppressed [ 484.318483][T18450] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3286'. [ 484.351960][T18242] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 484.614291][T18462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3289'. [ 484.703531][T18462] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3289'. [ 484.731259][ T50] Bluetooth: hci2: command tx timeout [ 484.773169][T18242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.803709][T18242] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.824840][ T9608] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.832149][ T9608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.863087][ T9608] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.870343][ T9608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.189712][T18484] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3294'. [ 485.227144][T18487] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3294'. [ 485.267860][T18484] openvswitch: netlink: Flow key attr not present in new flow. [ 485.287975][T18487] openvswitch: netlink: Flow key attr not present in new flow. [ 485.996635][T18514] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3298'. [ 486.007627][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 486.133888][ T8500] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x5 [ 486.393677][T18521] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3300'. [ 486.443899][T18525] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3300'. [ 486.469643][T18524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3301'. [ 486.488759][T18242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.630490][T18524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 486.807251][ T50] Bluetooth: hci2: command tx timeout [ 486.911207][T18242] veth0_vlan: entered promiscuous mode [ 487.026794][T18242] veth1_vlan: entered promiscuous mode [ 487.175037][T18242] veth0_macvtap: entered promiscuous mode [ 487.216814][T18242] veth1_macvtap: entered promiscuous mode [ 487.309764][T18242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.351094][T18242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.396744][ T9608] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.441588][ T9608] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.464570][ T9608] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.493011][ T9608] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.540757][T18550] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3308'. [ 487.762544][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.791269][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.924249][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.961988][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.683360][ T4942] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 488.695234][ T4942] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 488.705833][ T4942] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 488.714987][ T4942] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 488.722714][ T4942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 488.830940][T18595] netlink: 'syz.2.3320': attribute type 4 has an invalid length. [ 489.208990][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.216385][ C1] bridge0: topology change detected, propagating [ 489.359268][T18615] __nla_validate_parse: 4 callbacks suppressed [ 489.359286][T18615] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3322'. [ 489.426376][T18615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3322'. [ 489.471193][T18615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3322'. [ 489.593271][ T76] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.640143][ T76] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.680039][ T76] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 34275 - 0 [ 489.722116][ T76] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 489.961973][ T76] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.992616][T18645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3331'. [ 490.017351][ T76] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.046515][ T76] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 34275 - 0 [ 490.089071][ T76] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 490.206772][ T136] bond0: (slave bond_slave_0): interface is now down [ 490.249669][ T136] bond0: (slave bond_slave_1): interface is now down [ 490.336263][ T76] : (slave netdevsim1): Releasing backup interface [ 490.418982][ T8500] bond0: (slave bond_slave_0): interface is now down [ 490.439413][ T8500] bond0: (slave bond_slave_1): interface is now down [ 490.444330][ T76] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.509548][ T76] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.530937][T18662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3334'. [ 490.557001][ T76] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 34275 - 0 [ 490.598887][ T76] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 490.609541][ T158] bond0: (slave bond_slave_0): interface is now down [ 490.609580][ T158] bond0: (slave bond_slave_1): interface is now down [ 490.759685][ T158] bond0: (slave bond_slave_0): interface is now down [ 490.780636][ T158] bond0: (slave bond_slave_1): interface is now down [ 490.787433][T18590] lo speed is unknown, defaulting to 1000 [ 490.807542][T18675] netlink: 'syz.1.3339': attribute type 1 has an invalid length. [ 490.827481][ T50] Bluetooth: hci0: command tx timeout [ 490.839416][T18675] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3339'. [ 490.917478][ T76] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.937538][ T76] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.960733][ T76] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 34275 - 0 [ 490.973722][ T136] bond0: (slave bond_slave_0): interface is now down [ 490.990651][ T136] bond0: (slave bond_slave_1): interface is now down [ 490.999932][ T76] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 491.158196][ T136] bond0: (slave bond_slave_0): interface is now down [ 491.183974][ T136] bond0: (slave bond_slave_1): interface is now down [ 491.250526][ T136] bond0: now running without any active interface! [ 491.338090][T18686] netlink: 'syz.3.3344': attribute type 2 has an invalid length. [ 491.352742][T18686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3344'. [ 491.376236][T18686] netlink: 'syz.3.3344': attribute type 1 has an invalid length. [ 491.389721][T18686] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3344'. [ 491.824822][T18705] Cannot find add_set index 0 as target [ 491.858232][T18706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3346'. [ 491.965332][T18707] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 492.150322][ T76] bridge_slave_1: left allmulticast mode [ 492.161399][ T76] bridge_slave_1: left promiscuous mode [ 492.180218][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.226639][ T76] lo: left allmulticast mode [ 492.778807][ T76] bond7 (unregistering): (slave geneve4): Releasing active interface [ 492.887584][ T50] Bluetooth: hci0: command tx timeout [ 493.093318][ T76]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.104663][ T76]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.115370][ T76]  (unregistering): Released all slaves [ 493.126608][ T76] bond1 (unregistering): Released all slaves [ 493.147495][ T76] bond2 (unregistering): Released all slaves [ 493.162860][ T76] bond3 (unregistering): Released all slaves [ 493.179964][ T76] bond0 (unregistering): Released all slaves [ 493.196459][ T76] bond4 (unregistering): Released all slaves [ 493.218298][ T76] bond5 (unregistering): Released all slaves [ 493.241748][ T76] bond6 (unregistering): Released all slaves [ 493.257890][ T76] bond7 (unregistering): Released all slaves [ 493.335834][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 493.574618][ T76] tipc: Left network mode [ 493.703618][T18750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3353'. [ 493.955574][T18761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.283996][T18768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 494.975115][ T50] Bluetooth: hci0: command tx timeout [ 495.417439][T18590] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.440231][T18590] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.460576][T18590] bridge_slave_0: entered allmulticast mode [ 495.481057][T18590] bridge_slave_0: entered promiscuous mode [ 495.490630][T18833] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3369'. [ 495.504100][T18833] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3369'. [ 495.515007][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 495.541394][T18590] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.567845][T18590] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.594625][T18590] bridge_slave_1: entered allmulticast mode [ 495.619497][T18590] bridge_slave_1: entered promiscuous mode [ 495.804991][T18841] x_tables: duplicate underflow at hook 4 [ 495.851915][T18590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.875031][T18590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.886653][T18845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3373'. [ 496.054192][T18852] netlink: 'syz.1.3375': attribute type 1 has an invalid length. [ 496.107973][T18852] netlink: 'syz.1.3375': attribute type 2 has an invalid length. [ 496.127066][T18852] netlink: 'syz.1.3375': attribute type 1 has an invalid length. [ 496.153043][T18852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3375'. [ 496.179885][T18590] team0: Port device team_slave_0 added [ 496.201717][T18590] team0: Port device team_slave_1 added [ 496.311099][T18857] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3376'. [ 496.536727][T18590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.581145][T18590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.662010][T18590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.802482][T18590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.812917][T18590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.930346][T18590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.977202][T18882] tipc: Enabling of bearer rejected, failed to enable media [ 497.050570][ T50] Bluetooth: hci0: command tx timeout [ 497.089695][ T76] hsr_slave_0: left promiscuous mode [ 497.105007][ T76] hsr_slave_1: left promiscuous mode [ 497.131626][ T76] veth1_vlan: left promiscuous mode [ 497.142318][ T76] veth0_vlan: left promiscuous mode [ 497.199077][T18901] netlink: 'syz.1.3387': attribute type 1 has an invalid length. [ 497.228013][T18901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3387'. [ 497.320478][T18901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3387'. [ 497.333717][T18901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3387'. [ 497.578664][ T8499] smc: removing ib device syz0 [ 497.630791][ T8499] smbdirect: ib_dev[syz0] removed [ 497.650287][ T5816] lo speed is unknown, defaulting to 1000 [ 497.667590][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 497.675004][ T5816] syz0: Port: 1 Link DOWN [ 497.943006][T18590] hsr_slave_0: entered promiscuous mode [ 497.964600][T18590] hsr_slave_1: entered promiscuous mode [ 498.010442][T18590] debugfs: 'hsr0' already exists in 'hsr' [ 498.024358][T18590] Cannot create hsr debugfs directory [ 498.306968][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3391'. [ 498.330773][T18934] xt_socket: unknown flags 0x8 [ 498.412556][T18927] bond1 (unregistering): Released all slaves [ 498.558905][T18930] syzkaller1: entered promiscuous mode [ 498.569723][T18930] syzkaller1: entered allmulticast mode [ 498.904620][T18947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3397'. [ 500.170401][T18903] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 500.253068][T18590] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 500.316462][T18590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 500.384233][T18590] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 500.445301][T18590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 500.491355][T18590] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 500.538286][T18590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 500.582104][T18590] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 500.614884][T18590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 500.753332][T18986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3407'. [ 500.863195][T18992] veth1_macvtap: left promiscuous mode [ 500.877942][T18992] macsec0: entered promiscuous mode [ 500.898199][T18992] macsec0: entered allmulticast mode [ 500.922536][T18996] veth1_macvtap: entered promiscuous mode [ 500.940275][T18996] veth1_macvtap: entered allmulticast mode [ 500.958320][T18996] macsec0: left promiscuous mode [ 500.974227][T18996] macsec0: left allmulticast mode [ 500.986282][T18996] veth1_macvtap: left allmulticast mode [ 501.041128][T19002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3410'. [ 501.078312][ T76] IPVS: stop unused estimator thread 0... [ 501.121603][T18590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.301762][T18590] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.342426][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.349646][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.428893][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.436306][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.512096][T19030] xt_hashlimit: size too large, truncated to 1048576 [ 502.123328][T19030] xt_hashlimit: size too large, truncated to 1048576 [ 502.198185][T19060] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 502.205485][T19060] IPv6: NLM_F_CREATE should be set when creating new route [ 502.212808][T19060] IPv6: NLM_F_CREATE should be set when creating new route [ 502.220181][T19060] IPv6: NLM_F_CREATE should be set when creating new route [ 502.338030][T19060] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 502.787362][T19081] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3424'. [ 502.944028][T19092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3426'. [ 502.996044][T18590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.310002][T18590] veth0_vlan: entered promiscuous mode [ 503.334778][T19105] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3430'. [ 503.360367][T19105] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.367859][T19105] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.482049][T18590] veth1_vlan: entered promiscuous mode [ 503.671394][T18590] veth0_macvtap: entered promiscuous mode [ 503.724382][T18590] veth1_macvtap: entered promiscuous mode [ 503.822709][T18590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.887454][T18590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.982819][ T76] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.016574][ T76] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.040124][ T76] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.064003][ T76] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.373697][T19138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3439'. [ 504.462581][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.494407][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.622055][ T9608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.671685][ T9608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.045967][T19168] bond2: (slave bond_slave_1): Device is not our slave [ 505.053993][T19168] bond2: option active_slave: invalid value (bond_slave_1) [ 505.082538][T19168] bond2 (unregistering): Released all slaves [ 505.191180][T19183] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3449'. [ 505.339064][T19187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3450'. [ 505.553824][T19195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3451'. [ 505.744639][T19211] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 506.522426][T19258] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3467'. [ 506.565266][T19258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3467'. [ 506.648580][T19272] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3469'. [ 506.804456][T19280] netlink: 'syz.0.3471': attribute type 9 has an invalid length. [ 506.997193][T19284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.164797][T19288] netlink: 'syz.0.3473': attribute type 4 has an invalid length. [ 507.321708][T19295] netlink: 'syz.0.3474': attribute type 4 has an invalid length. [ 507.352494][T19295] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3474'. [ 507.375899][T19296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3474'. [ 507.430771][T19295] .`: renamed from bond0 (while UP) [ 509.682776][T19328] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3477'. [ 509.730589][T19322] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3477'. [ 509.765000][T19322] openvswitch: netlink: Flow actions attr not present in new flow. [ 509.864776][T19339] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3481'. [ 509.899320][T19339] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3481'. [ 509.921610][T19339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3481'. [ 510.223198][T19356] syz.4.3486 (19356) used obsolete PPPIOCDETACH ioctl [ 511.164577][T19380] syzkaller0: entered promiscuous mode [ 511.186589][T19380] syzkaller0: entered allmulticast mode [ 511.220265][ T30] audit: type=1800 audit(1778024118.792:9): pid=19380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3495" name="memory.events" dev="tmpfs" ino=86 res=0 errno=0 [ 511.298721][ T30] audit: type=1804 audit(1778024118.792:10): pid=19380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3495" name="/newroot/13/memory.events" dev="tmpfs" ino=86 res=1 errno=0 [ 511.349885][T19399] syzkaller0: entered promiscuous mode [ 511.365675][T19399] syzkaller0: entered allmulticast mode [ 511.553430][T19412] syzkaller1: entered promiscuous mode [ 511.587745][T19412] syzkaller1: entered allmulticast mode [ 511.624143][T19412] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.631834][T19412] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.697630][T19412] __nla_validate_parse: 1 callbacks suppressed [ 511.697652][T19412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3504'. [ 511.746339][T19412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3504'. [ 511.776152][T19418] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3504'. [ 511.807524][T19418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3504'. [ 511.968367][T19432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3509'. [ 513.780398][T19438] netlink: 'syz.3.3509': attribute type 5 has an invalid length. [ 513.789485][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3509'. [ 513.952535][T19445] syzkaller0: entered promiscuous mode [ 513.958505][T19445] syzkaller0: entered allmulticast mode [ 514.012298][T19447] netlink: 'syz.0.3514': attribute type 9 has an invalid length. [ 514.027307][T19445] tipc: Started in network mode [ 514.035956][T19447] netlink: 'syz.0.3514': attribute type 6 has an invalid length. [ 514.046250][T19445] tipc: Node identity 5a39758d4c4d, cluster identity 4711 [ 514.072193][T19445] tipc: Enabled bearer , priority 0 [ 514.157512][T19445] tipc: Resetting bearer [ 514.211460][T19460] netlink: 'syz.4.3515': attribute type 21 has an invalid length. [ 514.231428][T19445] tipc: Disabling bearer [ 514.258051][T19460] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3515'. [ 514.288471][T19461] Bluetooth: MGMT ver 1.23 [ 514.496458][T19474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3521'. [ 514.512106][T19481] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3524'. [ 514.521804][T19474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3521'. [ 514.544658][T19477] : entered promiscuous mode [ 514.641084][T19491] Cannot find add_set index 0 as target [ 515.212515][T19503] nbd3: detected capacity change from 0 to 63 [ 515.276753][ T50] block nbd3: Receive control failed (result -104) [ 515.277661][ T4942] block nbd3: Receive control failed (result -32) [ 515.568111][T19552] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 515.607059][T19552] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 515.678130][T19562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.844740][T19573] netlink: 'syz.3.3552': attribute type 8 has an invalid length. [ 515.855041][T19573] sch_fq: defrate 0 ignored. [ 515.923187][T19572] 8021q: adding VLAN 0 to HW filter on device .` [ 518.636061][T19560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 519.064686][T19618] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 519.181659][T19614] __nla_validate_parse: 6 callbacks suppressed [ 519.181680][T19614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3563'. [ 519.552106][T19637] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3567'. [ 519.569554][T19267] tipc: Subscription rejected, illegal request [ 519.874832][T19661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3576'. [ 519.914997][T19656] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 520.074785][T19669] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3577'. [ 520.096694][T19670] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3578'. [ 520.118444][T19669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3577'. [ 520.310410][T19685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3582'. [ 520.378599][T19678] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3581'. [ 520.391348][T19685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.410823][T19685] batadv_slave_0: entered promiscuous mode [ 521.382067][T19746] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3597'. [ 521.487527][T19752] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.601835][T19756] tipc: Started in network mode [ 521.612897][T19756] tipc: Node identity ca6fe06b9bc9, cluster identity 4711 [ 521.631046][T19756] tipc: Enabled bearer , priority 0 [ 521.689120][T19770] netlink: 4432 bytes leftover after parsing attributes in process `syz.1.3602'. [ 521.800925][T19756] syzkaller0: entered promiscuous mode [ 521.806936][T19756] syzkaller0: entered allmulticast mode [ 521.813410][T19756] tipc: Resetting bearer [ 521.874203][T19755] tipc: Resetting bearer [ 523.885454][T19755] tipc: Disabling bearer [ 523.905901][T19784] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.913237][T19784] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.954187][T17371] tipc: Node number set to 1369890923 [ 524.192464][T19271] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.217775][T19271] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.246310][T19271] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.275024][T19271] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.423522][T19818] netlink: 'syz.1.3614': attribute type 1 has an invalid length. [ 524.458933][T19818] __nla_validate_parse: 4 callbacks suppressed [ 524.458951][T19818] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3614'. [ 524.655738][T19815] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3616'. [ 524.818340][T19842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3623'. [ 524.829691][T19842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3623'. [ 524.881947][T19831] syzkaller1: entered promiscuous mode [ 524.887638][T19831] syzkaller1: entered allmulticast mode [ 525.216226][T19851] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.3624'. [ 525.391910][T19872] netlink: zone id is out of range [ 525.408759][T19872] netlink: zone id is out of range [ 525.421084][T19872] netlink: zone id is out of range [ 525.428700][T19872] netlink: zone id is out of range [ 525.442282][T19875] syzkaller0: entered promiscuous mode [ 525.448396][T19872] netlink: zone id is out of range [ 525.453623][T19875] syzkaller0: entered allmulticast mode [ 525.460823][T19872] netlink: zone id is out of range [ 525.469566][T19872] netlink: zone id is out of range [ 525.474819][T19872] netlink: zone id is out of range [ 525.482952][T19875] tc action pedit offset 64 out of bounds [ 525.489915][T19875] tc action pedit offset 64 out of bounds [ 525.495715][T19875] tc action pedit offset 64 out of bounds [ 525.501509][T19875] tc action pedit offset 64 out of bounds [ 525.507289][T19875] tc action pedit offset 64 out of bounds [ 525.513038][T19875] tc action pedit offset 64 out of bounds [ 525.518813][T19875] tc action pedit offset 64 out of bounds [ 525.524570][T19875] tc action pedit offset 64 out of bounds [ 525.530364][T19875] tc action pedit offset 64 out of bounds [ 525.536117][T19875] tc action pedit offset 64 out of bounds [ 525.541908][T19875] 0: reclassify loop, rule prio 0, protocol 800 [ 525.591731][T19879] syzkaller0: entered promiscuous mode [ 525.612869][T19879] syzkaller0: entered allmulticast mode [ 525.733899][T16305] hsr0: entered promiscuous mode [ 525.800303][T19879] tipc: Enabled bearer , priority 0 [ 525.900840][T19890] netlink: 'syz.3.3635': attribute type 11 has an invalid length. [ 525.919753][T19878] tipc: Resetting bearer [ 525.984568][T19878] tipc: Disabling bearer [ 526.167701][T19908] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3641'. [ 526.178016][T19906] netlink: 'syz.0.3639': attribute type 25 has an invalid length. [ 526.534380][T19930] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 526.575243][T19934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3646'. [ 526.673075][ T50] block nbd4: Receive control failed (result -1) [ 526.760332][T19934] netlink: 'syz.0.3646': attribute type 1 has an invalid length. [ 526.833533][T19941] sctp: [Deprecated]: syz.1.3647 (pid 19941) Use of struct sctp_assoc_value in delayed_ack socket option. [ 526.833533][T19941] Use struct sctp_sack_info instead [ 527.111066][T19943] bond2: Unable to set down delay as MII monitoring is disabled [ 527.123298][T19943] bond2 (unregistering): Released all slaves [ 527.190550][T19959] erspan0: entered allmulticast mode [ 527.203177][T19950] tipc: Started in network mode [ 527.222318][T19950] tipc: Node identity 9a4acfbb04f, cluster identity 4711 [ 527.243384][T19950] tipc: Enabled bearer , priority 0 [ 527.344715][T19950] tipc: Disabling bearer [ 527.601301][T19974] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3655'. [ 527.874245][T19988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3659'. [ 527.875749][T19990] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3656'. [ 527.944437][T19994] x_tables: duplicate underflow at hook 1 [ 528.211649][T20011] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20001 [ 528.308891][T20015] IPVS: set_ctl: invalid protocol: 208 127.0.0.1:20000 [ 528.892660][T20044] netlink: 'syz.2.3674': attribute type 5 has an invalid length. [ 529.049535][T20047] netlink: 'syz.3.3675': attribute type 19 has an invalid length. [ 529.351600][T20075] netlink: 'syz.0.3681': attribute type 1 has an invalid length. [ 529.570452][T20075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.679793][T20078] bond0: (slave geneve2): making interface the new active one [ 529.719189][T20078] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 529.775441][ T13] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 529.808572][ T76] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 529.830012][T20095] __nla_validate_parse: 4 callbacks suppressed [ 529.830032][T20095] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3686'. [ 529.859066][ T76] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 529.873915][ T76] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 531.800824][T20172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3699'. [ 532.812767][ T50] Bluetooth: hci0: command tx timeout [ 534.384431][T20186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3705'. [ 534.399792][T20186] net_ratelimit: 46 callbacks suppressed [ 534.399811][T20186] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 534.424390][T20186] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3705'. [ 534.435437][T20186] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3705'. [ 534.556994][T20195] openvswitch: netlink: Missing valid actions attribute. [ 534.584072][T20195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.704756][T20203] netlink: 'syz.0.3711': attribute type 9 has an invalid length. [ 534.712591][T20201] tipc: Enabled bearer , priority 0 [ 534.921369][T20201] syzkaller0: entered promiscuous mode [ 534.931991][T20201] syzkaller0: entered allmulticast mode [ 534.942506][T20209] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3710'. [ 534.985057][T20218] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 534.996615][T20218] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 535.005815][T20218] gretap1: entered promiscuous mode [ 535.012131][T20218] gretap1: entered allmulticast mode [ 535.021794][T20200] tipc: Resetting bearer [ 537.120584][T20200] tipc: Disabling bearer [ 537.135455][T16037] tipc: Node number set to 376731021 [ 537.492403][T20252] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3724'. [ 537.770199][T20267] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3728'. [ 537.891630][T20273] syzkaller0: entered promiscuous mode [ 537.908898][T20273] syzkaller0: entered allmulticast mode [ 537.919765][T20276] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3730'. [ 538.013192][T20282] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3732'. [ 538.153911][T20243] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 538.183011][T20243] bond1 (unregistering): Released all slaves [ 538.920470][T20328] sctp: [Deprecated]: syz.0.3742 (pid 20328) Use of struct sctp_assoc_value in delayed_ack socket option. [ 538.920470][T20328] Use struct sctp_sack_info instead [ 539.010150][T20335] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 539.084184][T20342] C: renamed from lo (while UP) [ 539.107577][T20342] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 539.404249][T20366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3753'. [ 539.691162][T20375] block nbd5: Unsupported socket: should be TCP or UNIX. [ 539.979451][T20391] syzkaller1: entered promiscuous mode [ 539.985136][T20391] syzkaller1: entered allmulticast mode [ 540.146413][T20393] bridge0: entered allmulticast mode [ 540.153377][T20393] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3761'. [ 540.177568][T20393] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3761'. [ 540.335139][T20402] xt_CT: You must specify a L4 protocol and not use inversions on it [ 540.364604][T20405] bridge3: entered promiscuous mode [ 540.371068][T20405] bridge3: entered allmulticast mode [ 540.381906][T20405] team0: Port device bridge3 added [ 540.391537][T20405] bridge0: port 3(team0) entered blocking state [ 540.398623][T20405] bridge0: port 3(team0) entered disabled state [ 540.405928][T20405] team0: entered allmulticast mode [ 540.412616][T20405] team_slave_0: entered allmulticast mode [ 540.420754][T20405] team_slave_1: entered allmulticast mode [ 540.434248][T20405] team0: entered promiscuous mode [ 540.440594][T20405] team_slave_0: entered promiscuous mode [ 540.447709][T20405] team_slave_1: entered promiscuous mode [ 540.536171][T20413] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3768'. [ 540.662015][T20421] sctp: [Deprecated]: syz.2.3772 (pid 20421) Use of struct sctp_assoc_value in delayed_ack socket option. [ 540.662015][T20421] Use struct sctp_sack_info instead [ 540.704450][T20421] Cannot find add_set index 65532 as target [ 540.853707][T20434] [ 540.856105][T20434] ====================================================== [ 540.863147][T20434] WARNING: possible circular locking dependency detected [ 540.870193][T20434] syzkaller #0 Not tainted [ 540.874652][T20434] ------------------------------------------------------ [ 540.881687][T20434] syz.1.3775/20434 is trying to acquire lock: [ 540.887774][T20434] ffff88801be8d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4ed/0x5c0 [ 540.898266][T20434] [ 540.898266][T20434] but task is already holding lock: [ 540.905646][T20434] ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0 [ 540.915112][T20434] [ 540.915112][T20434] which lock already depends on the new lock. [ 540.915112][T20434] [ 540.925531][T20434] [ 540.925531][T20434] the existing dependency chain (in reverse order) is: [ 540.934563][T20434] [ 540.934563][T20434] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 540.942685][T20434] down_write+0x96/0x200 [ 540.947507][T20434] kernfs_add_one+0x41/0x5c0 [ 540.952641][T20434] kernfs_create_dir_ns+0xde/0x130 [ 540.958296][T20434] internal_create_group+0x425/0x1180 [ 540.964223][T20434] cpuhp_invoke_callback+0x445/0x860 [ 540.970052][T20434] cpuhp_issue_call+0x430/0x7a0 [ 540.975448][T20434] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 540.982056][T20434] __cpuhp_setup_state+0x3f/0x60 [ 540.987532][T20434] do_one_initcall+0x250/0x870 [ 540.992853][T20434] do_initcall_level+0x104/0x190 [ 540.998418][T20434] do_initcalls+0x59/0xa0 [ 541.003299][T20434] kernel_init_freeable+0x2a6/0x3e0 [ 541.009035][T20434] kernel_init+0x1d/0x1d0 [ 541.013908][T20434] ret_from_fork+0x514/0xb70 [ 541.019032][T20434] ret_from_fork_asm+0x1a/0x30 [ 541.024339][T20434] [ 541.024339][T20434] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 541.032193][T20434] [ 541.032193][T20434] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 541.039946][T20434] cpus_read_lock+0x42/0x160 [ 541.045069][T20434] static_key_slow_inc+0x12/0x30 [ 541.050538][T20434] setup_udp_tunnel_sock+0x2fd/0x510 [ 541.057681][T20434] l2tp_tunnel_register+0xde2/0x1490 [ 541.063521][T20434] pppol2tp_connect+0x8b7/0x17c0 [ 541.068989][T20434] __sys_connect+0x312/0x450 [ 541.074124][T20434] __x64_sys_connect+0x7a/0x90 [ 541.079417][T20434] do_syscall_64+0x15f/0xf80 [ 541.084547][T20434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.090988][T20434] [ 541.090988][T20434] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 541.098766][T20434] lock_sock_nested+0x41/0x100 [ 541.104060][T20434] inet_shutdown+0x6a/0x390 [ 541.109112][T20434] nbd_mark_nsock_dead+0x2e9/0x560 [ 541.114768][T20434] recv_work+0x1c2e/0x1d40 [ 541.119718][T20434] process_scheduled_works+0xb5d/0x1860 [ 541.125800][T20434] worker_thread+0xa53/0xfc0 [ 541.130922][T20434] kthread+0x388/0x470 [ 541.135539][T20434] ret_from_fork+0x514/0xb70 [ 541.140667][T20434] ret_from_fork_asm+0x1a/0x30 [ 541.145964][T20434] [ 541.145964][T20434] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 541.153622][T20434] __mutex_lock+0x1a3/0x1550 [ 541.158763][T20434] nbd_queue_rq+0x37b/0x1100 [ 541.163910][T20434] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 541.170009][T20434] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 541.176885][T20434] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 541.183411][T20434] blk_mq_run_hw_queue+0x348/0x4f0 [ 541.189066][T20434] blk_mq_dispatch_list+0xd16/0xe10 [ 541.194806][T20434] blk_mq_flush_plug_list+0x48d/0x570 [ 541.200722][T20434] __blk_flush_plug+0x3ed/0x4d0 [ 541.206118][T20434] __submit_bio+0x28d/0x580 [ 541.211165][T20434] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 541.217348][T20434] block_read_full_folio+0x7b7/0x830 [ 541.223171][T20434] filemap_read_folio+0x137/0x3b0 [ 541.228734][T20434] do_read_cache_folio+0x358/0x590 [ 541.234384][T20434] read_part_sector+0xb6/0x2b0 [ 541.239686][T20434] adfspart_check_ICS+0xb1/0x960 [ 541.245165][T20434] bdev_disk_changed+0x817/0x1770 [ 541.250723][T20434] blkdev_get_whole+0x380/0x510 [ 541.256129][T20434] bdev_open+0x31e/0xd30 [ 541.260908][T20434] blkdev_open+0x470/0x610 [ 541.265858][T20434] do_dentry_open+0x785/0x14e0 [ 541.271158][T20434] vfs_open+0x3b/0x340 [ 541.275774][T20434] path_openat+0x2e08/0x3860 [ 541.280904][T20434] do_file_open+0x23e/0x4a0 [ 541.285937][T20434] do_sys_openat2+0x113/0x200 [ 541.291145][T20434] __x64_sys_openat+0x138/0x170 [ 541.296525][T20434] do_syscall_64+0x15f/0xf80 [ 541.301675][T20434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.308110][T20434] [ 541.308110][T20434] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 541.315353][T20434] __mutex_lock+0x1a3/0x1550 [ 541.320493][T20434] nbd_queue_rq+0xc6/0x1100 [ 541.325530][T20434] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 541.331617][T20434] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 541.338483][T20434] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 541.345020][T20434] blk_mq_run_hw_queue+0x348/0x4f0 [ 541.350665][T20434] blk_mq_dispatch_list+0xd16/0xe10 [ 541.356406][T20434] blk_mq_flush_plug_list+0x48d/0x570 [ 541.362320][T20434] __blk_flush_plug+0x3ed/0x4d0 [ 541.367710][T20434] __submit_bio+0x28d/0x580 [ 541.372770][T20434] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 541.378946][T20434] block_read_full_folio+0x7b7/0x830 [ 541.384769][T20434] filemap_read_folio+0x137/0x3b0 [ 541.390361][T20434] do_read_cache_folio+0x358/0x590 [ 541.396004][T20434] read_part_sector+0xb6/0x2b0 [ 541.401319][T20434] adfspart_check_ICS+0xb1/0x960 [ 541.406801][T20434] bdev_disk_changed+0x817/0x1770 [ 541.412375][T20434] blkdev_get_whole+0x380/0x510 [ 541.417780][T20434] bdev_open+0x31e/0xd30 [ 541.422569][T20434] blkdev_open+0x470/0x610 [ 541.427508][T20434] do_dentry_open+0x785/0x14e0 [ 541.432818][T20434] vfs_open+0x3b/0x340 [ 541.437419][T20434] path_openat+0x2e08/0x3860 [ 541.442554][T20434] do_file_open+0x23e/0x4a0 [ 541.447606][T20434] do_sys_openat2+0x113/0x200 [ 541.452851][T20434] __x64_sys_openat+0x138/0x170 [ 541.458236][T20434] do_syscall_64+0x15f/0xf80 [ 541.463370][T20434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.469808][T20434] [ 541.469808][T20434] -> #4 (set->srcu){.+.+}-{0:0}: [ 541.476944][T20434] __synchronize_srcu+0xca/0x300 [ 541.482423][T20434] elevator_switch+0x1e8/0x7a0 [ 541.487743][T20434] elevator_change+0x2cc/0x450 [ 541.493058][T20434] elevator_set_default+0x36c/0x430 [ 541.498793][T20434] blk_register_queue+0x3e9/0x4e0 [ 541.504351][T20434] __add_disk+0x677/0xd50 [ 541.509218][T20434] add_disk_fwnode+0xfb/0x480 [ 541.514439][T20434] nbd_dev_add+0x72c/0xb50 [ 541.519408][T20434] nbd_init+0x168/0x1f0 [ 541.524086][T20434] do_one_initcall+0x250/0x870 [ 541.529393][T20434] do_initcall_level+0x104/0x190 [ 541.534888][T20434] do_initcalls+0x59/0xa0 [ 541.539761][T20434] kernel_init_freeable+0x2a6/0x3e0 [ 541.545506][T20434] kernel_init+0x1d/0x1d0 [ 541.550387][T20434] ret_from_fork+0x514/0xb70 [ 541.555510][T20434] ret_from_fork_asm+0x1a/0x30 [ 541.560809][T20434] [ 541.560809][T20434] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 541.568648][T20434] __mutex_lock+0x1a3/0x1550 [ 541.573780][T20434] elevator_change+0x1b3/0x450 [ 541.579090][T20434] elevator_set_none+0xb5/0x140 [ 541.584475][T20434] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 541.590808][T20434] nbd_start_device+0x17f/0xb10 [ 541.596187][T20434] nbd_genl_connect+0x165b/0x1cf0 [ 541.601759][T20434] genl_family_rcv_msg_doit+0x22a/0x330 [ 541.607882][T20434] genl_rcv_msg+0x61c/0x7a0 [ 541.612941][T20434] netlink_rcv_skb+0x232/0x4b0 [ 541.618262][T20434] genl_rcv+0x28/0x40 [ 541.622793][T20434] netlink_unicast+0x75c/0x8e0 [ 541.628085][T20434] netlink_sendmsg+0x813/0xb40 [ 541.633391][T20434] ____sys_sendmsg+0x972/0x9f0 [ 541.638696][T20434] ___sys_sendmsg+0x2a5/0x360 [ 541.643916][T20434] __x64_sys_sendmsg+0x1bd/0x2a0 [ 541.649403][T20434] do_syscall_64+0x15f/0xf80 [ 541.654539][T20434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.660968][T20434] [ 541.660968][T20434] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 541.669596][T20434] blk_alloc_queue+0x546/0x680 [ 541.674906][T20434] __blk_mq_alloc_disk+0x197/0x390 [ 541.680590][T20434] nbd_dev_add+0x499/0xb50 [ 541.685551][T20434] nbd_init+0x168/0x1f0 [ 541.690254][T20434] do_one_initcall+0x250/0x870 [ 541.695559][T20434] do_initcall_level+0x104/0x190 [ 541.701035][T20434] do_initcalls+0x59/0xa0 [ 541.705907][T20434] kernel_init_freeable+0x2a6/0x3e0 [ 541.711655][T20434] kernel_init+0x1d/0x1d0 [ 541.716561][T20434] ret_from_fork+0x514/0xb70 [ 541.721697][T20434] ret_from_fork_asm+0x1a/0x30 [ 541.726998][T20434] [ 541.726998][T20434] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 541.734231][T20434] fs_reclaim_acquire+0x71/0x100 [ 541.739713][T20434] kmem_cache_alloc_noprof+0x40/0x650 [ 541.745614][T20434] __kernfs_iattrs+0xdf/0x320 [ 541.750820][T20434] kernfs_iop_setattr+0xea/0x3f0 [ 541.756295][T20434] notify_change+0xc1a/0xf40 [ 541.761415][T20434] do_truncate+0x1c2/0x250 [ 541.766370][T20434] path_openat+0x2f89/0x3860 [ 541.771495][T20434] do_file_open+0x23e/0x4a0 [ 541.776555][T20434] do_sys_openat2+0x113/0x200 [ 541.781775][T20434] __x64_sys_openat+0x138/0x170 [ 541.787157][T20434] do_syscall_64+0x15f/0xf80 [ 541.792290][T20434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.798716][T20434] [ 541.798716][T20434] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 541.807244][T20434] __lock_acquire+0x15a5/0x2cf0 [ 541.812647][T20434] lock_acquire+0x106/0x350 [ 541.817707][T20434] down_write+0x96/0x200 [ 541.822520][T20434] kernfs_link_sibling+0x4ed/0x5c0 [ 541.828183][T20434] kernfs_add_one+0x1ca/0x5c0 [ 541.833514][T20434] __kernfs_create_file+0x22b/0x2e0 [ 541.839242][T20434] sysfs_add_file_mode_ns+0x238/0x300 [ 541.845139][T20434] sysfs_create_file_ns+0x12b/0x1b0 [ 541.850872][T20434] idletimer_tg_checkentry+0x41b/0xa70 [ 541.856876][T20434] xt_check_target+0x61a/0xca0 [ 541.862193][T20434] translate_table+0x184f/0x20b0 [ 541.867667][T20434] do_ip6t_set_ctl+0x9fe/0xe10 [ 541.872978][T20434] nf_setsockopt+0x26f/0x290 [ 541.878098][T20434] do_sock_setsockopt+0x17c/0x1b0 [ 541.883667][T20434] __x64_sys_setsockopt+0x13d/0x1b0 [ 541.889395][T20434] do_syscall_64+0x15f/0xf80 [ 541.894550][T20434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.900975][T20434] [ 541.900975][T20434] other info that might help us debug this: [ 541.900975][T20434] [ 541.911295][T20434] Chain exists of: [ 541.911295][T20434] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 541.911295][T20434] [ 541.925737][T20434] Possible unsafe locking scenario: [ 541.925737][T20434] [ 541.933198][T20434] CPU0 CPU1 [ 541.938580][T20434] ---- ---- [ 541.943957][T20434] lock(&root->kernfs_rwsem); [ 541.948761][T20434] lock(cpuhp_state_mutex); [ 541.955917][T20434] lock(&root->kernfs_rwsem); [ 541.963228][T20434] lock(&root->kernfs_iattr_rwsem); [ 541.968532][T20434] [ 541.968532][T20434] *** DEADLOCK *** [ 541.968532][T20434] [ 541.976683][T20434] 2 locks held by syz.1.3775/20434: [ 541.981885][T20434] #0: ffffffff8fe7a140 (list_mutex){+.+.}-{4:4}, at: idletimer_tg_checkentry+0x70/0xa70 [ 541.991761][T20434] #1: ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0 [ 542.001620][T20434] [ 542.001620][T20434] stack backtrace: [ 542.007544][T20434] CPU: 1 UID: 0 PID: 20434 Comm: syz.1.3775 Not tainted syzkaller #0 PREEMPT(full) [ 542.007579][T20434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 542.007602][T20434] Call Trace: [ 542.007616][T20434] [ 542.007628][T20434] dump_stack_lvl+0xe8/0x150 [ 542.007655][T20434] print_circular_bug+0x2e1/0x300 [ 542.007687][T20434] check_noncircular+0x12e/0x150 [ 542.007719][T20434] __lock_acquire+0x15a5/0x2cf0 [ 542.007757][T20434] ? __lock_acquire+0x6b5/0x2cf0 [ 542.007785][T20434] ? kernfs_link_sibling+0x4ed/0x5c0 [ 542.007812][T20434] lock_acquire+0x106/0x350 [ 542.007831][T20434] ? kernfs_link_sibling+0x4ed/0x5c0 [ 542.007867][T20434] down_write+0x96/0x200 [ 542.007905][T20434] ? kernfs_link_sibling+0x4ed/0x5c0 [ 542.007933][T20434] ? __pfx_down_write+0x10/0x10 [ 542.007962][T20434] ? kernfs_root+0x1c/0x230 [ 542.007987][T20434] ? kernfs_root+0x1c/0x230 [ 542.008012][T20434] ? kernfs_root+0x1c/0x230 [ 542.008038][T20434] ? kernfs_root+0x1ea/0x230 [ 542.008065][T20434] kernfs_link_sibling+0x4ed/0x5c0 [ 542.008101][T20434] kernfs_add_one+0x1ca/0x5c0 [ 542.008133][T20434] __kernfs_create_file+0x22b/0x2e0 [ 542.008155][T20434] sysfs_add_file_mode_ns+0x238/0x300 [ 542.008183][T20434] sysfs_create_file_ns+0x12b/0x1b0 [ 542.008225][T20434] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 542.008248][T20434] ? __asan_memcpy+0x40/0x70 [ 542.008274][T20434] idletimer_tg_checkentry+0x41b/0xa70 [ 542.008300][T20434] xt_check_target+0x61a/0xca0 [ 542.008327][T20434] ? xt_find_target+0x83/0x260 [ 542.008354][T20434] ? __pfx_xt_check_target+0x10/0x10 [ 542.008387][T20434] ? xt_find_target+0x208/0x260 [ 542.008415][T20434] translate_table+0x184f/0x20b0 [ 542.008445][T20434] ? __pfx_translate_table+0x10/0x10 [ 542.008463][T20434] ? __might_fault+0xaf/0x130 [ 542.008486][T20434] ? __might_fault+0xaf/0x130 [ 542.008516][T20434] ? _copy_from_user+0x94/0xb0 [ 542.008545][T20434] do_ip6t_set_ctl+0x9fe/0xe10 [ 542.008566][T20434] ? rcu_is_watching+0x15/0xb0 [ 542.008588][T20434] ? trace_contention_end+0x3d/0x140 [ 542.008613][T20434] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 542.008641][T20434] ? __pfx___mutex_lock+0x10/0x10 [ 542.008666][T20434] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 542.008693][T20434] ? __pfx_aa_sk_perm+0x10/0x10 [ 542.008717][T20434] nf_setsockopt+0x26f/0x290 [ 542.008735][T20434] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 542.008755][T20434] do_sock_setsockopt+0x17c/0x1b0 [ 542.008779][T20434] __x64_sys_setsockopt+0x13d/0x1b0 [ 542.008803][T20434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.008821][T20434] do_syscall_64+0x15f/0xf80 [ 542.008844][T20434] ? trace_irq_disable+0x3b/0x140 [ 542.008870][T20434] ? clear_bhb_loop+0x40/0x90 [ 542.008896][T20434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.008914][T20434] RIP: 0033:0x7fc9d979cdd9 [ 542.008936][T20434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.008953][T20434] RSP: 002b:00007fc9da5c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 542.008974][T20434] RAX: ffffffffffffffda RBX: 00007fc9d9a15fa0 RCX: 00007fc9d979cdd9 [ 542.008987][T20434] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 542.008999][T20434] RBP: 00007fc9d9832d69 R08: 0000000000000540 R09: 0000000000000000 [ 542.009010][T20434] R10: 0000200000000c00 R11: 0000000000000246 R12: 0000000000000000 [ 542.009022][T20434] R13: 00007fc9d9a16038 R14: 00007fc9d9a15fa0 R15: 00007ffdf3772498 [ 542.009044][T20434] [ 545.531163][ T4957] block nbd3: Connection timed out, retrying (0/2 alive) [ 545.538469][ T4957] block nbd3: Connection timed out, retrying (0/2 alive) [ 545.545543][ T4957] block nbd3: Connection timed out, retrying (0/2 alive) [ 545.552688][ T4957] block nbd3: Connection timed out, retrying (0/2 alive) [ 545.560201][ T4957] block nbd3: Dead connection, failed to find a fallback [ 545.567640][ T4957] block nbd3: shutting down sockets [ 545.572936][ T4957] blk_print_req_error: 24 callbacks suppressed [ 545.572956][ T4957] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.588912][ T4957] buffer_io_error: 23 callbacks suppressed [ 545.588922][ T4957] Buffer I/O error on dev nbd3, logical block 3, async page read [ 545.602538][ T4957] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.612153][ T4957] Buffer I/O error on dev nbd3, logical block 2, async page read [ 545.620710][ T4957] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.629902][ T4957] Buffer I/O error on dev nbd3, logical block 1, async page read [ 545.637794][ T4957] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.647274][ T4957] Buffer I/O error on dev nbd3, logical block 0, async page read [ 545.655180][T17413] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.664417][T17413] Buffer I/O error on dev nbd3, logical block 0, async page read [ 545.672698][T17413] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.682052][T17413] Buffer I/O error on dev nbd3, logical block 1, async page read [ 545.690475][T17413] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.700687][T17413] Buffer I/O error on dev nbd3, logical block 2, async page read [ 545.708641][T17413] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.718194][T17413] Buffer I/O error on dev nbd3, logical block 3, async page read [ 545.726035][T17413] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.735473][T17413] Buffer I/O error on dev nbd3, logical block 0, async page read [ 545.743365][T17413] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.752468][T17413] Buffer I/O error on dev nbd3, logical block 1, async page read [ 545.761922][T17413] ldm_validate_partition_table(): Disk read failed. [ 545.769660][T17413] Dev nbd3: unable to read RDB block 0 [ 545.776056][T17413] nbd3: unable to read partition table [ 545.785862][T17413] ldm_validate_partition_table(): Disk read failed. [ 545.793547][T17413] Dev nbd3: unable to read RDB block 0 [ 545.800214][T17413] nbd3: unable to read partition table