last executing test programs: 5.868047867s ago: executing program 0 (id=2547): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=ANY=[@ANYBLOB="700800001000040000000000000000000000000a20"], 0x870}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001400)={'ip6gre0\x00', &(0x7f0000001440)=@ethtool_perm_addr={0x4b, 0x4e, "26270000000000000000e253c04105a4b6d6932fc15210e1599b0586fc14c4b2011542dee38b564a16c62b52e7e86509aebf5aa79bac1d65a4ab22fbd38e3871cf35650700000000000094cb1d6c"}}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) socket$nl_rdma(0x10, 0x3, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000000efff85000000630000001500020000000000bf010000000000008500000056000000b70000000200100095"], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r8, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000140)={0x0, 0x41, &(0x7f0000000180)={&(0x7f00000001c0)={0x3c, r1, 0x8de13c6b70ae92c3, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x11, 0x3, &(0x7f0000001600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000001640)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[{0x5, 0x2, 0x3, 0x2}], 0x10, 0xe840}, 0x94) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000001280)={'wg1\x00', @random="858fad948f17"}) r10 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000012c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000001380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r10}, 0x94) openat$cgroup_ro(r10, &(0x7f00000013c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) 3.711757735s ago: executing program 0 (id=2551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'geneve1\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x240040c1}, 0x20004040) (async, rerun: 32) r2 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000400)=0x6, 0xa) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x8000000, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000880)=0x400000d2, 0x4) (async) shutdown(r3, 0x0) (async) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0x4, 0x0, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0xd, 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf81"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000009c0)={'bridge_slave_0\x00', 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) (async, rerun: 64) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000480)=0x6, 0xa) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a300000000009000300730f003100000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800500030000000000080001400000000c08000240000000020900010073797a30000000001400000011000100"], 0xe0}}, 0x0) (rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000b00)={'vcan0\x00', 0x0}) bind$can_raw(r8, &(0x7f0000000b40)={0x1d, r9}, 0x10) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f0000000b80)=0x1, 0x4) (async, rerun: 32) sendmsg$can_raw(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@can={{0x4, 0x0, 0x0, 0x1}, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040) (rerun: 32) recvmmsg(r8, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}, 0x5c2b8000}], 0x1, 0x40000043, 0x0) (async, rerun: 32) read(r8, &(0x7f0000000cc0)=""/50, 0x32) (async, rerun: 32) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000050900010073797a30000000000900030073797a320000000008000a400000000328000480080002400000000c0800014000000000140003006e657464657673696d300000000000001c0008800c0002400000000000007fff0c0001"], 0xc0}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (rerun: 32) 2.981553017s ago: executing program 2 (id=2557): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) socket(0x400000000010, 0x0, 0x0) (async) r1 = socket(0x400000000010, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x7, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x9}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004805d}, 0x40) socket$unix(0x1, 0x5, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480fe400", @ANYRES32=r8, @ANYBLOB="553900000000200300000024001e0480050003000100000005000300000000000500030000000000050003000200d20008000200030000"], 0x48}}, 0x4040) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480fe400", @ANYRES32=r8, @ANYBLOB="553900000000200300000024001e0480050003000100000005000300000000000500030000000000050003000200d20008000200030000"], 0x48}}, 0x4040) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="4c150000410007012cbd7000fadbdf25037c00000400c280341501802d15108004000b8014000c"], 0x154c}, 0x1, 0x0, 0x0, 0x4c084}, 0x2000c000) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0x4}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0x4}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) setsockopt$SO_J1939_PROMISC(r11, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) bind$can_j1939(r11, &(0x7f0000000340)={0x1d, r12, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) (async) bind$can_j1939(r11, &(0x7f0000000340)={0x1d, r12, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r11, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r11, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$SO_J1939_FILTER(r11, 0x6b, 0x1, &(0x7f0000000740)=[{0x1, 0x3, {0x0, 0x1}, {0x1, 0x1}, 0x2, 0x2}, {0x6, 0x3, {0x2, 0xf0}, {0x0, 0xf0}, 0xfe, 0x2}], 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="06000000040000000b0000000500"], 0x50) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="06000000040000000b0000000500"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900), &(0x7f0000000940), 0x1000fff, r13, 0x0, 0xa0028000}, 0x86) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900), &(0x7f0000000940), 0x1000fff, r13, 0x0, 0xa0028000}, 0x86) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000900)=0x1, 0x4) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r12, {0xffff, 0xe}, {0xf, 0xffff}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x20000050) 2.603864345s ago: executing program 1 (id=2560): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x14, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/net\x00') r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000540)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010000104001400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300627269646765300000000000000000001c0012800b00010062726964676500000c0002800800050001"], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800000013001300"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) unshare(0x60600) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r7, 0x1, 0x47, 0x0, &(0x7f0000000800)) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x3c, 0x3b, 0x1, 0x0, 0x0, {0xb}, [@typed={0x25, 0x1, 0x0, 0x0, @str='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\x00'}]}, 0x3c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'netdevsim0\x00', 0x8000}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0xffffffff, 0x1, 0x1, 0x100}, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000041000701fafffffffedbdf25017c0000040042802800018010000400cab1893a20b8d2a93521800a1400ff070000000000000000000000000000000104000280"], 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r9, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000fddbdf2501000000000000000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) socket(0x10, 0x3, 0x9) syz_emit_ethernet(0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c20000000200000000010027424203"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.255880924s ago: executing program 0 (id=2562): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r3, 0x215eb000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6174001e0005371978d6321e6300000000000000000000000000000000000000000000002b896ac547aa40ff23d4ea8e31ae3b17f58c1bca546e717419ca4bc91c219a90853030c5efb9939cf85cb30e9870fcd25af2317b01a60111de38e211446d1e0587645db7f031e541c79e61b78c6ede4a4e371b97aa3986d449d8e4b5223b9a00eb3baeb21b952bad5e061fc42728c99f63a0510cc85ac1df1e7c59ae1e9fdc7202a065ba5564dfcbefcf1d3b5642d454489d5a56d559f8c22ba59739ec2655c21eb6176d5260a9c34d8d5b60427a7365fef94cd62a162451241c264bfa040958d74c839d9984ddf7196af415b992e2"], &(0x7f0000000140)=0x2c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x3, 0x4, 0x20c3c590, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r5, 0x0, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x200c4094) socket$netlink(0x10, 0x3, 0x12) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000180)="3638412c0107cc651c69315bb104e4f1", 0x10) recvmmsg(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000000300)={0x77359400}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) accept(r1, 0x0, 0x0) 2.104035275s ago: executing program 2 (id=2563): syz_emit_ethernet(0x96, &(0x7f0000000040)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e4d700", 0x60, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @empty, @mcast2, [@srh={0x3a, 0x4, 0x4, 0x2, 0x7e, 0x10, 0x28a5, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], "ef9edaaa64947bfe"}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000003b00010000000000000000000a00000025000100660fe5834e865826684214202020202020202020202020202020202020202020"], 0x3c}}, 0x0) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd, 0x10}, 0xc) syz_emit_ethernet(0x96, &(0x7f0000000040)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e4d700", 0x60, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @empty, @mcast2, [@srh={0x3a, 0x4, 0x4, 0x2, 0x7e, 0x10, 0x28a5, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], "ef9edaaa64947bfe"}}}}}}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000003b00010000000000000000000a00000025000100660fe5834e865826684214202020202020202020202020202020202020202020"], 0x3c}}, 0x0) (async) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd, 0x10}, 0xc) (async) 2.069874433s ago: executing program 4 (id=2565): r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) close(r0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0)=0x3, 0x4) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x4, [@var={0xc, 0x0, 0x0, 0xe, 0x5, 0x1}, @float={0x9, 0x0, 0x0, 0x10, 0xc}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}, @struct={0x10, 0x6, 0x0, 0x4, 0x1, 0xb815, [{0xd, 0x1, 0x9}, {0x2, 0x4, 0x33e}, {0xa, 0x5, 0x2}, {0x2, 0x2, 0x8}, {0xf, 0x4, 0x7}, {0xa, 0x0, 0x1}]}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x1c, 0x0, 0x2, 0x7}, @func={0x9, 0x0, 0x0, 0xc, 0x5}, @int={0xc, 0x0, 0x0, 0x1, 0x2, 0x44, 0x0, 0x4, 0x7}, @volatile={0x2, 0x0, 0x0, 0x9, 0x1}, @union={0x6, 0x1, 0x0, 0x5, 0x1, 0x9, [{0x7, 0x0, 0x653}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000200)=""/92, 0xe8, 0x5c, 0x1, 0x9, 0x10000, @value=r1}, 0x28) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb4, r4, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "03fa848e2855b231c59d2c7e28"}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "87e686790829d4b39578ed1bff"}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4627723aaa198919ce6d61f96b"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "18884e6efe"}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x6, 0x4, "2d03"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20040814}, 0x20044881) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x40010, r2, 0x82131000) sendmsg$NFT_BATCH(r1, &(0x7f00000020c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002080)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0xd4, 0x5, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_USERDATA={0xaa, 0xc, "1b1e0e4e4a5a128c46adf8a62bee146a9aefbe3ea22540bfd606966b4ff1a206da85b2b3d743259be37d177c065be65d75c92de599d9412cc26390abd5b559a23e7906f80e9e2f0fa972b075b30b43a855a3beebeb5fab135424f47279d816c000813e937fc1f5c6b3378bbdd6f2a7df799c97e3428b5e8b9217ee56eff0fef256eef5abc64b1c39b3f324e77e9945e30b2bae74332d33ff9ce6d21c30d5e445a516128de17a"}]}, @NFT_MSG_DELOBJ={0x44, 0x14, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x175c, 0xe, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1734, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xffffffffffffff81}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xdf85}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x218, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4f, 0x6, 0x1, 0x0, "5c070472c2770696cf52fdb6ae5bd24ef195aedd1a33da0fab1941129deb55c23c5191f04c7a3ee929240080003772e2a4225fcc75715b4f3100cdfddf2c2a6934f8ad98dd873cbd8e3367"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_SET_ELEM_USERDATA={0x17, 0x6, 0x1, 0x0, "955d68c6489d0beeec156ebc44537f0b8916d0"}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @bitwise={{0xc}, @void}}, @NFTA_SET_ELEM_DATA={0x188, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x59, 0x1, "f9ea4d8151725a24b9a8bef2631a19a9d9fcd86e163aec2ef5d629ba083990d9c92cdf07facc0bda40c242059d14890be8e8bb20cc2e3475f9a730471cb2cb2201b8f3834f31b1c637928ac4209e1b91e8d8af9458"}, @NFTA_DATA_VALUE={0x9f, 0x1, "432529a4e852f02b7cf8ca8be3230012eccaca422e3e6f408f3c303461e931fb2f88ad8badf271260c7c37c1fa3577f3112484c599b300c454a13209fc1ee140015a0838734ada13c4b9909dc88bba89dcf53ff03e6f2220ec016fca63fc89808d164341e73f81c961cbe618da5870bd02d5d106cb12c49dcffb07715675f21e905ae2ce98003431e97aff43ec63a1a1111ceb5cf6d94cc1821068"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1a, 0x1, "ed635bb994c46d9989ba9c19ef9fa450f1ed46b6c8db"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x14c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xa4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x1094, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x1fc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xbc, 0x1, "0c227385ad4fdf747aa2ca555b9984127d7e9ab57c2ff01147b0f735ccb16c2250584e1d4634f26a784830dfb171bc5bcfcc47f5695262ea59002e73311cbfec0d145940ecbce08054a4b8459b2c7845807ae5883720a053e893401c329d21c6ff7bc0d5e0f93a9e2fa5908c54d6b0ab1aa08f4a3590501286b55ec4f6b85f9b4dc21919d7bfcf8d3ca31d450897eacebafcd43565529066edd8969d0e5f4d7efbcd455ecd6fccecbb17056437d44aceb5ee91393fe18a3b"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xde, 0x1, "3bb42b2f5fdfa5cb2fbe931a0fd9527dc97b03952caf5a58bb2432c9563d2d1fceaf08a55ee955cee34af5d7460610f4a4a6d4c1899d6e2309ad5736cb5c281c9341ed08e108c06a3bc9a944fe68f5b3664587106cfe0dccece2fd40ea6c560fd0489f2e9afd313233b53642e1f29bc3768f42f8c9f0bf295288de0d1f1496507bd5ec5b20d8711e1ee0591ed6f70414fc0ebf3c6f535d9bc33e8ab150f065db2905664e1a68da7db37d6e163cdf85f3ffdd8505d2e1078f72b791955a1b92377a52b4a76959aee87fdd8e4ecaca34f1939e2aa1868b659cae69"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x16c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xea, 0x1, "eb33519c640bde2cb3cccb0a1b9a99c04595f0e24d294d95354697c8e98ee6ccbda55a83ab7d926d4a38ac613a036eeea7e58f73fbcf6a38977eabcc0b45f567102386b8790a64dc6e881ad52ab13beb84e4a86a68382aef73a980261848ad2b53dd56a8bce4c2322e296659b54d0ddfdbbd202714a93dc8868ecd3a49bf5f8d5140a67f533f7ae8f5f604f5005e7863b397afc756d4680851cf8f9db4eea23ef97d4e71a9957082d1ccdffd76bf6449a5c8e5e6e7a3be212019e0f6b496b7c50d2b207dd8ee662224c210d95794d6db6818738d52d60eea3b3c568e39696b5a7e2724ee3c27"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x214, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1d4, 0x3, 0x0, 0x1, [{0x1d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xd4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x68, 0x1, "306d7f568de7605e9085d7ac671d18190504445b33ef4d5c6dad337a9d7bfed00dc6e802375cb5dc7e9e7603f878305b5df70bbb976d4a87e2ce0b636e79efe0a4047abf98ae1701a9611faa9ccbd60583e1a366325b9c942c2cd7c5ac59ba677877fdd5"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x401}, @NFTA_SET_ELEM_USERDATA={0x3c, 0x6, 0x1, 0x0, "326088c6559093b9e7eb98ab181c5c0118dd133bb6fa272a1cbe58d04f528c6968d9885299b497331ee122123dfec194f036968a579d8fea"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x3c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, "806df5c2f1313a157cbdbead5b"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_DATA={0x54, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4e, 0x1, "62066f67fda4fe91f6ce1256a38c6593d87e4fa90c4119d7f11a8ecd4d5b932f9488d2d41423b435a442a0c23913d2d0c4313860232f25bf2195cd0a47b9fcb3594bfe83a1e386eb3f3c"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x54, 0xe, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1b04}, 0x1, 0x0, 0x0, 0x800}, 0x8880) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000002100)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000022c0)={&(0x7f0000002140)="3bba607683b8743e0515e8bd2d80bbc725c205bc73e821707df8ff9b7bbdcb592c02c690eab28b657bd04a25b3065ea245d2b462ff0304c7d443bfafba3ae978b3756c5468465d14a50203dd3a990b810a6eac4d76edf2689775559abcc50be2a39d7d6bd6c7030e71823cfcfe", &(0x7f00000021c0)=""/21, &(0x7f0000002200)="ca3def588f9e28ffd2eb69c2d526dd2e60e3c6cb54108943e57cc4133ff2d0297fe679b211421cb3d1cd1c7e6ee95fab11", &(0x7f0000002240)="7d08323b991061dd15345bdc1c1345777702800cd44108fa7a60ed574c0d69bcd27dcb3994e4baa3bfad31981ce7d5c0aab2987364000d14a38adb41707761bd6ccdd6c0", 0x7, r1, 0x4}, 0x38) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000023c0)={&(0x7f0000002300)=""/136, 0x100000, 0x800, 0xfffffffd, 0x3}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002400)={'wlan1\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r5, 0x8914, &(0x7f0000002440)={'ip6tnl0\x00', @ifru_names='vlan1\x00'}) r6 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002500)={r1, 0x58, &(0x7f0000002480)}, 0x10) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002580)=@generic={&(0x7f0000002540)='./file0\x00', 0x0, 0x14}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000026c0)={@map=r1, 0x22, 0x0, 0xd, &(0x7f00000025c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000002600)=[0x0], &(0x7f0000002640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000002840)={r0, &(0x7f0000002740)='syz2\x00', 0x200000, &(0x7f0000002780)={@_ha_fsid={[0x4, 0xd95f]}, {0x6, 0x5, 0xfffffffc, 0xfffffffffffffff9}}, 0x4, &(0x7f00000027c0)={@_ha_fsid}, &(0x7f0000002800)=0x7}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002700)={@cgroup=r10, r7, 0x17, 0x10, 0x0, @void, @value=r1, @void, @void, r9}, 0x20) sendto$inet(r5, &(0x7f0000002880), 0x0, 0x40800, &(0x7f00000028c0)={0x2, 0x4e23, @private=0xa010102}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x4000010, r6, 0x1) clock_gettime(0x7, &(0x7f0000002900)) r11 = accept4$packet(r10, &(0x7f0000002940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002980)=0x14, 0x800) ioctl$BTRFS_IOC_SEND(r8, 0x40489426, &(0x7f0000002a00)={{r11}, 0x6, &(0x7f00000029c0)=[0x5, 0x1, 0xb9fb, 0x4, 0x9, 0xc], 0x2, 0x2}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)={0x48, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x40488c1) 1.829826644s ago: executing program 2 (id=2566): syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x1, 0x8, 0x120, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb7040000040f0000850000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x20000804) (async) recvmmsg(r4, &(0x7f00000003c0), 0x4000267, 0xfc0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x0, @empty, 'bridge0\x00'}}, 0x1e) bind$xdp(r0, &(0x7f0000001240)={0x2c, 0x6, 0x0, 0x8}, 0x10) 1.723763113s ago: executing program 3 (id=2567): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000340)='syz0\x00', 0x1ff) r3 = socket(0x2d, 0x2, 0x0) bind(r3, &(0x7f0000000540)=@generic={0x2d, "00000100000008010800"}, 0x80) sendto(r3, &(0x7f00000005c0)="01010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101010101", 0x7f, 0x0, &(0x7f0000000640)=@generic={0x2d, "00000100000008010800"}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x24, r5, 0x300, 0x1070bc2d, 0x21dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xc}, @NL80211_ATTR_TXQ_QUANTUM={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480c1}, 0x40000) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000840)={0x0, 0xffffffffffffff8c, &(0x7f0000000880)={&(0x7f00000008c0)={0x28, r5, 0x1, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r5, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) r7 = openat$cgroup_devices(r2, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f00000001c0)=ANY=[], 0x9) r8 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r8, &(0x7f0000000200)=[{&(0x7f00000003c0)='?', 0x1}], 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newtaction={0x11c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x108, 0x1, [@m_skbmod={0x104, 0x12, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xb, 0x0, 0x6, 0x986, 0x101}, 0x7}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x895}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local}]}, {0x8a, 0x6, "f5f8484518e72f51928d7eb822ff20b25999927afa9a499dc7ffc430d8250c99b39128db2bae0013b4a9eb87a6c51514d00f1b5c4278a874e2130f7b72a50b8a1f9bd746aef0ae9e177a4ee0d3f93933af7e3cfc63dfc4c49420436c801cbe80baa050eb429c7045e90bb7c122f73f0185bc6505c9f00ae6f6950a83cc07856235e8d10e020b"}, {0xc}, {0xc, 0x8, {0x2, 0xffdf4ff7890cc6eb}}}}]}]}, 0x11c}}, 0x4000801) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xa) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x10) r10 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x4924b68, 0x0) socket$netlink(0x10, 0x3, 0x10) 1.723214922s ago: executing program 1 (id=2568): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000140)={0x2d, 0x0, 0x1f, 0x80000000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x8041) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0xec5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffffff}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xa0000000}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0xffffffff}}}, &(0x7f0000000300)='GPL\x00', 0xf, 0x1002, &(0x7f0000000840)=""/4098, 0x41000, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) 1.707116163s ago: executing program 4 (id=2569): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, 0x2f, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c010) r1 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000020)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001900250000000000000000002df00000000004000000000005000100110000000c000500000000000a"], 0xe1c}}, 0x20000050) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0xffff, 0x1, 0xfffff000, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x7, 0x30000000, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x100007}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x70}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.607973979s ago: executing program 2 (id=2570): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c0000f7321dd62e1cbf51973f573709db80715fd11f95f662322da20f2d01bd70", @ANYRES32=0x0, @ANYBLOB="0c0000000800020006000000080002000100000014000100fc0200000000000000000000000000210800020000000000080002000700000014000100fe88000000000000000000000000010100000100fc0200000000000000000000000000010800020005000000140001000000000000000000000000000000000014000100ff020000000000000000000000000001"], 0xf0}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c0000f7321dd62e1cbf51973f573709db80715fd11f95f662322da20f2d01bd70", @ANYRES32=0x0, @ANYBLOB="0c0000000800020006000000080002000100000014000100fc0200000000000000000000000000210800020000000000080002000700000014000100fe88000000000000000000000000010100000100fc0200000000000000000000000000010800020005000000140001000000000000000000000000000000000014000100ff020000000000000000000000000001"], 0xf0}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 1.443869233s ago: executing program 4 (id=2571): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0xfcf3, &(0x7f0000001800)=[{&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x18}, {&(0x7f0000000780)={0x0, 0x2f, 0x8, 0x70bd25, 0x25dfdbff, "", [@nested={0x0, 0x57, 0x0, 0x1, [@generic="8904d7e7752c42199c43826ff1b49b639f9bedde74b1477f08ff4a709a032ee2", @generic="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", @typed={0x0, 0x137, 0x0, 0x0, @u64=0x8}]}, @nested={0x0, 0x140, 0x0, 0x1, [@typed={0x0, 0x18}]}]}}], 0x1, 0x0, 0x0, 0x2400c814}, 0x81) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x2710}, 0x10) r4 = accept(r2, 0x0, 0x0) shutdown(r4, 0x0) connect$vsock_stream(r4, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0xffae, 0x0}, 0x24000000) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @empty, 0x2000000b}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r5}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x2, 0x7, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x98ab}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x10008000}, 0x10) 1.40420558s ago: executing program 1 (id=2572): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x2, 0x5, 0x508, 0x368, 0x220, 0xffffffff, 0xf0, 0x0, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0xff0000ff]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @port=0x4e21, @gre_key=0xa2}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x9, 0xe], 0x3166, 0x1e, 0x1}}, @common=@unspec=@cgroup0={{0x28}, {0xff}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @port=0x4e22}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffffc, 0xa60}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 1.386845962s ago: executing program 3 (id=2573): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000400)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f00000004c0)='\t', 0x1}], 0x1, 0x0, 0x0, 0x400}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000500)=[{&(0x7f0000000540)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0xa0, 0x21, 0x1, 0x70bd25, 0x25dfdbfb, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x4e22, 0x7, 0x4e20, 0x0, 0x2, 0x40, 0x80, 0xff}, 0x0, 0x1}, [@migrate={0x50, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0x1e}, @in6=@private0, @in6=@loopback, @in=@local, 0x3c, 0x1, 0x0, 0x3500, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040010}, 0x8000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000008, 0x30012, r2, 0xffffa000) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x5, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r4, 0x0, 0xe, 0x0, &(0x7f00000009c0)="4d653ddeda27807c0a5fa7cddcc9", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r2, 0x84, 0x7a, &(0x7f00000005c0)={0x2, 0xffffffffffffffff, 0x80000}, &(0x7f0000000600)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000700)={@local, 0x1, 0x0, 0x60, 0x0, [{@empty}, {@private}, {@loopback}, {@initdev}, {}, {@private}]}}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000640)={0x401, 0x208, 0x9, 0x6, 0x2}, &(0x7f0000000680)=0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000006c0)={r6, 0xe, 0x385, 0x6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000003000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001000"/28], 0x50) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r7}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x16, 0x18, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000d1000c0000000000010000b7080000000000007b8af8ff00000000b70800000b0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xd, &(0x7f0000000d40)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0xe, 0x0, &(0x7f00000003c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) unshare(0x20000400) (async) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000bc0)={'broute\x00', 0x0, 0x0, 0x0, [0xfef, 0xc25a, 0x100000001, 0x5, 0x80000000000000, 0x7fffffff], 0x0, 0x0}, 0x78) 1.311898618s ago: executing program 2 (id=2574): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0xb00000000065808, 0x0) preadv(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, 0x1, 0x7) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="0400000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x5, 0x8, &(0x7f0000001580)=ANY=[@ANYBLOB="18120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000008000023bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f00000015c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0x1c, 0x3e, 0x8, 0x80, 0x41082, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001680)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00x\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03006104a380006fca9e7f0093aa407c45f9b4897cd349b6100d4a6ce3971b5ee8f639f95ba9e8f47daaf680fd566fed79fadb7a40017d3063361fbfff0fb67c3959cd97929521806170319c1a"], 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) socketpair(0x1e, 0x80005, 0x0, &(0x7f00000018c0)={0x0, 0x0}) close(r8) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000001900)={0x0, 0x10, &(0x7f0000001940)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000001980)=0x10) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f00000019c0), 0x4) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000001a00)={0x1, [0x0]}, &(0x7f0000001a40)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000001a80)={r10, 0x3, 0xfffffff8, 0x4, 0x101, 0x97c5, 0x0, 0x57a0, {0x0, @in6={{0xa, 0x4e23, 0x9b, @mcast1, 0x7}}, 0x0, 0x4, 0x30c458e9, 0x1, 0xb}}, &(0x7f0000001b40)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000001b80)={r11}, &(0x7f0000001bc0)=0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x18, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffd}, @alu={0x7, 0x1, 0x0, 0x7, 0x9, 0x50, 0x8}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000140)='GPL\x00', 0x8, 0xb7, &(0x7f0000000280)=""/183, 0x41100, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000013c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001400)={0x5, 0xa, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[0x1, r3, 0xffffffffffffffff, r4, r5, r6, 0x1, r7], 0x0, 0x10, 0x6}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r12, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4f, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001100810809309becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bff8ff05001201f6305e331b91fa20f34e2e348644a78b1c5f6e3ae607360c2e4a428a019e07cb069bf940303c568a63db73f7ad30a7c55654c71c634793871c67ace33fe1e168a3b94d586904c8af1a8ce3eb148e221745bb2b09f544dc328baf95fafb760d20ba0f3c3861cc5310cd5794800317f5246c718f3be6364638fc64c1cdb78562c8", 0x2e}], 0x10000000000001fd, 0x0, 0xffce}, 0x0) 876.166344ms ago: executing program 4 (id=2575): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(0xca, 0x0, 0x45) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000300)="390000001300037ae7b4465fc20d64ff01000000010000005600000025000000190044000400000007fdd411efc4080004001a000000000002", 0x39}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x1b, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001000000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b70300002000000085000000d4000000bf09000000000000550901000000000e950000000000000018440000030000000000000000000000850000000100000895000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff8500000006000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x6, 0x1001, &(0x7f0000000540)=""/4097, 0x40f00, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000001580)={0x2, &(0x7f00000015c0)=[{0x2, 0x8, 0x0, 0x3}, {0x6, 0x1, 0x1}]}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtaction={0x110, 0x30, 0xffff, 0x0, 0x0, {}, [{0xfc, 0x1, [@m_ife={0xf8, 0x1, 0x0, 0x0, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x28, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}, 0x1}}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xfff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x80000000}, @IFE_META_TCINDEX={0x6}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x2000000e, 0x8, 0xd36c}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x110}}, 0x0) 875.446065ms ago: executing program 1 (id=2576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) unshare(0x2c020400) r2 = socket(0x2d, 0x2, 0x0) connect$netlink(r2, &(0x7f0000000080)=@proc={0x2d, 0x0, 0x25dfdbfd, 0x8000000}, 0xc) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000140)={0xffffffaa, [0x7fffffff, 0x1c7], 0xc5}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x7439) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r7, 0x0, 0x21, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5, @ANYBLOB="0a0601000000000000000000"], 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x78, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x9, '\x00', 0x1, 0x0, 0x9, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0xfffffffa, 0x10, 0xfffffffc}}, @TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x7, 0x2, 0x9ac, 0x9}}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8080}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYRES8], 0x78}, 0x1, 0x0, 0x0, 0xb0}, 0x20048805) 874.817399ms ago: executing program 0 (id=2577): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000040)="01154e000100001122334455885d", 0xe, 0x44011, &(0x7f0000000080)={0x11, 0x0, r1, 0x0, 0x0, 0x0}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x30, 0x19, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @str='$-@\x00'}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x800) 873.03163ms ago: executing program 3 (id=2578): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000003c0)) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) poll(&(0x7f00000001c0)=[{r3, 0x290}], 0x1, 0xb) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000bc0)={0x1d8, 0x10, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x184, 0xd9, 0x0, 0x1, [@nested={0xc, 0xe6, 0x0, 0x1, [@typed={0x8, 0x66, 0x0, 0x0, @u32=0x2}]}, @typed={0x4, 0xfe}, @nested={0x16e, 0x140, 0x0, 0x1, [@generic="9d00f78c2402c20cfb584b33666a869ac2af1b95584ec48885ce41d4b4208faf262545cc701b9618a3072247096ed6f55fa448adc8f700bb3dad6f6ee4ff21143a1e918eeacb8093b7", @generic="78eb088b7f56a6d18ddf121d0b833d210a23e551cbb8ed7b8bb13bc3c5bfb541d4f00cbfb11626138a0c933616d130954f4acface212a5c6a590e8245ec1e0f0", @generic="decca767c2f51779a6461a59dc5af9f6336cceea5269d3cb1a6566bd0d8f49698fe996fcbe15f8fc8d705c907785c1ac29189748769ec5cf96aba7bdfd448f7c58bfcd2a4cab8957262b5ef49bf3ac697e0e18e31825a70f31968b61dd553da315f6c80bc4", @generic="adcb10c7319df52475b6c7339b02739054a0ecb3e51c39622fb63888c84e72f19f974fd0e0aedcac354dbfa2675181e02799887472e390f47e9ce5c7205d4905c6ce6fa0689c671ec70766f3007be2cd3adaa37ca3cf23f54ccc10c6d9c0e638f55ed394b33c8c14ae555037d1bb3e9d77e99b2cef88331f745b4af3"]}]}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x38, 0x1a, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x3}, @typed={0x27, 0x0, 0x0, 0x0, @binary="13a82b510f0dae62f425060000000000000081e6a40038ab31f0c8ab9a1adf1274d9f9"}]}, @nested={0x4, 0x37}]}, 0x1d8}], 0x1}, 0x4040010) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={r3, r3, 0x4, r3}, 0x10) sendto(r3, &(0x7f0000000040)="8e5412bccdc62ebcc2bd3f011e2ce5e5a2347eab2c934b6fc51280c511fc3ec31485fde5104c1d364c1a97d80a", 0x2d, 0x50, &(0x7f0000000140)=@l2={0x1f, 0x0, @any, 0x6, 0x1}, 0x80) (async) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0xf3a, 0x0) (async) close(r5) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x28, 0xe, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r8) (async) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0xfc, r11, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xa8, 0x8, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_FLAGS={0x8}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4004840}, 0x40082) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRES16=r9, @ANYRES64=r11, @ANYRESHEX=r11], 0x50) (async) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000880)=r5, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x0, 0x0, 0x0, 0xffffff5d, 0x94, &(0x7f0000000980)=""/148, 0x0, 0x1e, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[r6, r6, r5, r6, r6, r6], 0x0, 0x10, 0x200}, 0x94) (async) r12 = socket(0x10, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000ac0)=0x9) sendmsg$nl_route(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r13, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000000e40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e00)={&(0x7f0000000e80)=ANY=[@ANYBLOB="18020000", @ANYRES16=0x0, @ANYBLOB="02002bbd7000fedbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="f8000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=r9, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400f80a000008000600", @ANYRES32=r13, @ANYBLOB="74000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000004400040008000340070000000400ec0309000000810006f881000000000053fc0300000008000807088700008100cd7f03000000030005011de40f01018009fc0300000008000100", @ANYRES32=0x0, @ANYBLOB="b80002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000200000008000100", @ANYRES32=0x0, @ANYBLOB="3c00026b5c741a668038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004007f0000e5"], 0x218}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 872.540185ms ago: executing program 0 (id=2579): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r0, r1, r2}}}], 0x20, 0x40800}}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000240)=[{r3, 0x8040}, {r3, 0x400}], 0x2, &(0x7f00000002c0)={r4, r5+10000000}, &(0x7f0000000300)={[0xff]}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@bridge_newneigh={0x40, 0x1c, 0x401, 0x70bd28, 0x25dfdc02, {0x7, 0x0, 0x0, r7, 0x2, 0x0, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_FDB_EXT_ATTRS={0x18, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x81}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44801}, 0x840) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)={0x44, 0x41, 0x107, 0xfffffffa, 0x25dfdbfe, {0x1, 0x7c}, [@typed={0x0, 0xdb, 0x0, 0x0, @str='\x00'}, @nested={0x28, 0x1, 0x0, 0x1, [@typed={0x1a, 0x4, 0x0, 0x0, @pid=r0}, @typed={0x14, 0x1a}]}, @nested={0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c0}, 0xc000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r0, r1, r2}}}], 0x20, 0x40800}}], 0x1, 0x0) (async) clock_gettime(0x0, &(0x7f0000000280)) (async) ppoll(&(0x7f0000000240)=[{r3, 0x8040}, {r3, 0x400}], 0x2, &(0x7f00000002c0)={r4, r5+10000000}, &(0x7f0000000300)={[0xff]}, 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@bridge_newneigh={0x40, 0x1c, 0x401, 0x70bd28, 0x25dfdc02, {0x7, 0x0, 0x0, r7, 0x2, 0x0, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_FDB_EXT_ATTRS={0x18, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x81}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44801}, 0x840) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)={0x44, 0x41, 0x107, 0xfffffffa, 0x25dfdbfe, {0x1, 0x7c}, [@typed={0x0, 0xdb, 0x0, 0x0, @str='\x00'}, @nested={0x28, 0x1, 0x0, 0x1, [@typed={0x1a, 0x4, 0x0, 0x0, @pid=r0}, @typed={0x14, 0x1a}]}, @nested={0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c0}, 0xc000) (async) 788.254601ms ago: executing program 4 (id=2580): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 767.846666ms ago: executing program 3 (id=2581): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000079000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095", @ANYRES64], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x31}, 0x94) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="73000136008eacc2"], 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004800) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000000)={@empty, @loopback}, &(0x7f0000000100)=0xc) 655.742514ms ago: executing program 4 (id=2582): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x138, 0x5c, 0x160, 0x138, 0x3e0, 0x248, 0x228, 0x25a, 0x248, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0x0, 0x0, 0xffffff00], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x138, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7fffffff, 0x9, 0x1000, 0x0, 0xe691, 0x4, 0xa, 0x2]}}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x24, 0x4}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x4}, {0xfff1, 0xffff}, {0x3, 0x1}}}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c010000", @ANYRES16=r4, @ANYBLOB="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"], 0x15c}}, 0x24008050) syz_emit_ethernet(0x6e, &(0x7f0000000500)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x6c3, {[@md5sig={0x13, 0x12, "345f8cf949a01b515682f44cecac91ba"}, @md5sig={0x1d, 0x12, "d2b653e0c9d32072c19dd6ca814b7d7b"}]}}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00', 0x0, 0x18}, 0x18) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000780)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000bc0)=[{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f0000000cc0)="66f7", 0x4}, {&(0x7f0000000d00)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x14, 0x17, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10) sendmsg$GTP_CMD_GETPDP(r9, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={0x0}, 0x1, 0x0, 0x0, 0x20044840}, 0x4080) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000580)=[@in6={0xa, 0x4e22, 0x2, @local, 0x80}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f00000005c0)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000600)=@assoc_value, &(0x7f0000000680)=0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map=r6, 0x15, 0x0, 0xd734, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0]}, 0x40) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0xd, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x8000) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@hopopts={{0x18, 0x29, 0x36, {0x71}}}, @hopopts={{0x18, 0x29, 0x3e}}], 0x30}, 0x240040d0) 634.380702ms ago: executing program 3 (id=2583): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x4, &(0x7f0000000080)=[{0x20, 0x0, 0x2, 0x6}, {0x6, 0x0, 0xfe}, {0xfff, 0x43, 0x9, 0x9}, {0x4, 0x6, 0x0, 0x1}]}, 0x10) 525.368783ms ago: executing program 3 (id=2584): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x24, 0x0, @void}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000008c0)={{0x0, 0x3d, 0x7, 0x14000000, 0x1, 0x4, 0x1e, 0xd, 0x80000000, 0x6fd, 0x3, 0x81, 0xfffffffffffffffb, 0x401, 0x16}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$kcm(0x1e, 0x4, 0x0) (async) socket$kcm(0x1e, 0x4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) socket$pppl2tp(0x18, 0x1, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b2800633018024", @ANYRES8=r2, @ANYRES64=r2], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) (async, rerun: 32) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000018c0)={{r1, 0x4, 0x8, 0x5, 0x2, 0x80000000, 0xe, 0x7, 0x10001, 0x9, 0x4, 0x80000000, 0x4, 0x0, 0xb82}, 0x20, [0x0, 0x0, 0x0, 0x0]}) (rerun: 32) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, 0x8) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000300)={0x0, 0xaf1}, 0x8) (rerun: 64) 463.944912ms ago: executing program 1 (id=2585): socket$inet6(0xa, 0x3, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="6000000054000500010000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYBLOB="01000000ef01010100000000000000000ffe00000800000028"], 0x60}}, 0x0) sendmmsg(r1, &(0x7f0000000640), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000000202010400000000000000000a0000003c0002800c00028005000100000000002c00018014000300fe"], 0x50}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 366.16446ms ago: executing program 2 (id=2586): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000800)={r1, &(0x7f0000000840), &(0x7f0000000880)=@udp=r0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f00000008c0)={'gre0\x00', 0x0}) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)=""/103, 0x67}], 0x1}, 0x0) sendmmsg$unix(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x12, 0x4, &(0x7f0000000640)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xc}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f0000000680)={r3, &(0x7f00000006c0), &(0x7f0000000700)=""/73}, 0x70) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x100}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x4004004) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x30, r4, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0x30}}, 0x10) sendto(r7, &(0x7f0000000600)="595af9", 0x3, 0x804, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f00000006c0)={0x1f, 0x0, 0x4}, 0x6) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r8, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8080) 55.552244ms ago: executing program 1 (id=2587): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)=@delsa={0x338, 0x11, 0x2, 0x70bd29, 0x25dfdbfc, {@in6=@local, 0x4d4, 0x2, 0x6c}, [@proto={0x5, 0x19, 0x3c}, @algo_comp={0x106, 0x3, {{'lzjh\x00'}, 0x5f0, "036b8bf73e99906f2585a73d97b0870c03df5e4d4db350eb367f163d2326cf089bbf33bbcd4ef8329a46df3b2c3adfc7b5e6603be1851dd448333132882562c7b12e5e5d73beab7a13f8a193071d0eb2e180c160b05daec969483173ee04c4b8a154edddc5111398fc9d4970f072cf08c9292ae777e113ca5978d07b92083661d16239637c61b3db196bffa9a4b0df99976db5c28eff0b5b5f67c754640cd5600a3fd1e992cbb1ad01fbe385576a4a863e6f9c49b4eaa29414bf206ca6bc"}}, @algo_auth={0x8a, 0x1, {{'sha224\x00'}, 0x210, "1c115a68fb958a86c9dc94fadca7239e5e91704e29f72da97fb5b3c01a6baaa37d6f05b342d8b0428f91ec989932293c42efc6cd7590eed6f01034c650d5646fd50f"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @algo_auth_trunc={0x147, 0x14, {{'sha3-512-ce\x00'}, 0x7d8, 0xa0, "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"}}, @iptfs_reorder_window={0x6, 0x25, 0x1}, @srcaddr={0x14, 0xd, @in=@empty}, @iptfs_drop_time={0x8, 0x24, 0x9}]}, 0x338}, 0x1, 0x0, 0x0, 0x44000800}, 0x8004) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x1c) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r1, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xec}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x30004014}, 0x4000) r2 = epoll_create(0x3) epoll_wait(r2, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x6, 0x2) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000ec0)={{{@in=@multicast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000fc0)=0xe8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001000)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000010c0)={{{@in6, @in6=@ipv4={""/10, ""/2, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f00000011c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002280)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000002380)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000025c0)={0x0}, &(0x7f0000002600)=0xc) r10 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002640)={0x0, 0x0, 0x0}, &(0x7f0000002680)=0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000026c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r14 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$netlink(r3, &(0x7f00000027c0)={&(0x7f0000000600)=@kern={0x10, 0x0, 0x0, 0x2000404}, 0xc, &(0x7f0000002540)=[{&(0x7f0000000640)={0x19c, 0x19, 0xda1, 0x70bd26, 0x25dfdbff, "", [@typed={0x14, 0x13a, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="ffb018020c3f3000b0fd69550de33e562c7fe7ccb12c5b18265405c7c83d60fe30039f3ba67ce02927dd32084db1617e3b147b0aa9fbdacff1db6450aa630e9d77653269b34a15eb2bdced65", @generic="153c9298998033fff4b62e79a32e0e6c74016a01468d165b6ee4ec9130682993958160a8b446ce", @typed={0xc, 0x76, 0x0, 0x0, @u64=0x4}, @typed={0x4, 0xd4}, @typed={0xf1, 0xb2, 0x0, 0x0, @binary="e033aedae69e11beba371d1ad94fec75c3f40e9363bd1733c0587572cfece6b86ddb18a69c46bf39d3943ff7929c64fbab120ea20f9e1f8d480baf18bce66210ee5265b4727307dbd9c2b2f7da6f7a32908c3e08e019f5d4a85048421b3e237bec2db5e1867d9391b58421e8ea0b4bb3fbf1e8f67e0d7e4be3d1055178f216484b375f803008c6d02748a9620dd3c8b501dab8f0f60576a1386096a5f0e9e189b0df7ab89e64d7a571672f23c3645fc24474815a9efe0b288f111239a6768aed4adab4495f4f5ad2a83ad1d67613a0be0622d06931a143ef8899276bb338753b5354791a5cb46468b06178d774"}]}, 0x19c}, {&(0x7f0000000800)={0x338, 0x2b, 0x200, 0x70bd29, 0x25dfdbfb, "", [@generic="96c6a8144a9e3903d8", @generic="c4392bb327293993226d967bb66401ea2cb40bf6f4e152d3cba344c07eca073704bef29b814d64a37f58d8e6d38dcd9a94cfea", @nested={0x1c, 0x5a, 0x0, 0x1, [@typed={0x8, 0x85, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x4, 0x97}, @nested={0x4, 0x13b}, @typed={0x8, 0x8d, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @nested={0x1d2, 0x8e, 0x0, 0x1, [@typed={0x4, 0xa7}, @typed={0x10, 0x130, 0x0, 0x0, @str='sha3-512-ce\x00'}, @generic="9b676135734f6965265e", @nested={0x4, 0x4d}, @generic="077ab3dc648202fa900fd44c3c39fba6a7c8b37fe54e2e480c3718b5121370164ed998aa21545a6817163cb953fed98e5e12036657534536aa9672f0435f9161c9090da796ac2216f9372f696b02f3f0b424e2dffaf6db064e3ef5f7e06720bfc1b1a4644c49d70583377f37498eedbda2f402658794dc1ab26f1cbbc10cd9fcc89dbcca1e2e5d4e7ec6e90fab773490071449f0f02d61ac5d3478d216b4d1b6a5b12f3ffa5ecb22d35fbf88a8815fd268863021297b33af7d3a0406d5b97abc27f973bfe10950ad1b0d090f6aef0870", @generic="0fdcb7a020352f45f8ebbcccc607bbf81fdef95d10dcbca28d75670020876e287852b87a239088e64a333ac4c85b7b6eaa8efef766d436847b6a4447a8a3d030b5b61d73f9ff07b00dacd3dfec8f8952635f6007cdade3dc891d4236337bae9cdd1fa3aef866233ecccb66378005e9ff4d410b9da58604691a2a1536077569c713c9671553b83d26b703936ea6292a603633731138bab2a6a558593e9426031faea8c9351155d84adee9c3b06e286fcb23aac9884313ff856de0aed3780829a75291c743a8edb8c9c16e06aaf9c932c7711929c0831af3b02f37189f"]}, @typed={0xc, 0x147, 0x0, 0x0, @u64=0x7d8}, @nested={0xe8, 0x55, 0x0, 0x1, [@generic="f4434aea06d76f81632921a72f449d8dfbdd2556bc6647ed8458d176963dd9da3e436486fd9790d0e4f5b4332355fd859409f297959a4e52f0ad337b5b2c2d0b1346c9a5fc940adec18b00455f512220a94df63aad6a4fa12596579c7669c23a96dfe9bf30de84d322a152be59a7f80f6c60c425b893ce85743f1acf9ca663409ec477d70d59da2604ffc5e53e8229452c96cc61a6638d8963f1fe3a156fdca9458462bb1d6fd268b9b8c8708d6ebfae410203324d2792929dddc3510f812cd62277f00032da85f0c9cc710f9c8116d03dfeb3de3de01c2234c461f75f1dac12c168f52f"]}, @typed={0x8, 0x99, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x35}}]}, 0x338}, {&(0x7f0000000b40)={0x50, 0x22, 0x10, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x16, 0x2, 0x0, 0x1, [@nested={0x4, 0x41}, @generic="86595c5619796554879caa851eae"]}, @typed={0x8, 0x45, 0x0, 0x0, @ipv4=@loopback}, @nested={0x18, 0xb0, 0x0, 0x1, [@typed={0x8, 0xd1, 0x0, 0x0, @u32=0xfffffff7}, @typed={0x8, 0x29, 0x0, 0x0, @uid=r4}, @nested={0x4, 0x146}]}, @typed={0x4, 0x13d}, @typed={0x4, 0x1c}, @generic]}, 0x50}, {&(0x7f0000000bc0)={0x2fc, 0x1a, 0x400, 0x70bd29, 0x25dfdbff, "", [@nested={0xef, 0x138, 0x0, 0x1, [@nested={0x4, 0x74}, @nested={0x4, 0xad}, @generic="43ead4ebfe64cfbdbebca209a78e1824382d7daf95ca24b66b74ce8ebcd0a891f290b7e5a845549a6ec9664a86219582ed3386577be20bffa7a7e9c3eca7a10e501cd828f2ccef913a21d0a54c707d956c291eb917f8cc378d3c2ff0a96bef76e8cbfd377ab338933037079d4f2f8b01446a59c3b5537e290f22b7aa7db6c934a05f58f95b7d0ba0247c163a912cbd6507fdbcc5c8434d647a54bc6f8304936bc6eb2a5f0f582328549941b872b722a0e2908ea6", @generic="5b2bf384b730b14f38328dd347548cd95820f365bc0eedd46dfdd7ba49a4e44a76fc920a6a8e67f6da9e78d2b0e9ba"]}, @generic="ef615d47a0e0c541fbad4c76c16506ba6b25046ac524024778fd33c367a8f0969cbd", @typed={0x14, 0x29, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x1c1, 0x123, 0x0, 0x1, [@typed={0x46, 0x108, 0x0, 0x0, @binary="c0715e639f5367be15929821a8a32aa344ca464f2be57527f4cd679cd7f785fc9232a4a7f439d700e2e3fe3273867391c0e761ad967911aab8777dd9e50013ce7dd2"}, @generic="903bb6d2d0706910aeb8dca21c090744e0fc514ef46b9b5dd0cd6ecae77341c896e03e33037097e84537cb5c84586f4e62fc75b8f6d23e2159bb15eedaccb4af461045eb1101c310d16c5176014497eedd2cbc190af494dff9dd1a95ab7779b66df1e85ded00a98f001df6a04b00117454ac9bd67ac0ac0981ae89a35bfdc8fec809bcfb6cb266ceb8ee90e74e4e4fae8c48c0cb2a68677ec03aa2960fcce6393e3d69f3d85997e819ae1f5d09459d6459e0f571bc886096987db8153fd585b13d", @nested={0x4, 0x47}, @generic="e8ae37ac293f1d31776a9279584b6ff30a3a02e1cac1b9efb1d51c7993f29da6bea0a0a13b1b148cb5f914df5d2c44366024eb4c67a1d1bb5f6f62123b1260395bfe041c1c5792ff939cec62fa97eb124387a33a11e1123d6b20e946f2da40305ad0010fd94fe1147db161e9159c503c85ef38a5a89f3d2e98418613265480ed4277484c8860314e1115d7ab3ab7971517ed4f74c388aa5d14993c728e06f48557926eff987f2c66f4071ab36614435e"]}]}, 0x2fc}, {&(0x7f0000001040)={0x50, 0x1e, 0x130, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x8, 0xd2, 0x0, 0x0, @fd=r2}, @nested={0x18, 0x6b, 0x0, 0x1, [@typed={0x8, 0x125, 0x0, 0x0, @uid=r5}, @typed={0x4, 0xbb}, @typed={0x8, 0xa9, 0x0, 0x0, @pid=r6}]}, @generic="adc046fad7cadaeb17486fbedfdfab247a3297dda56f0fc8dd80cada22145803"]}, 0x50}, {&(0x7f0000001200)={0x1068, 0x41, 0x200, 0x70bd29, 0x25dfdbfc, "", [@typed={0x8, 0x95, 0x0, 0x0, @str=':%:\x00'}, @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0xc, 0x1f, 0x0, 0x1, [@nested={0x4, 0x8c}, @nested={0x4, 0x61}]}, @typed={0x8, 0x8c, 0x0, 0x0, @fd=r0}, @nested={0x1020, 0x6e, 0x0, 0x1, [@typed={0x8, 0x9c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x10}}, @nested={0x4, 0xe7}, @nested={0x4, 0xd4}, @nested={0x4, 0xdc}, @typed={0x8, 0x7d, 0x0, 0x0, @fd=r0}, @generic="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"]}, @typed={0xc, 0x156, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x15a, 0x0, 0x0, @uid=r7}]}, 0x1068}, {&(0x7f00000023c0)={0x164, 0x3f, 0x300, 0x70bd28, 0x25dfdbfc, "", [@nested={0x154, 0x12d, 0x0, 0x1, [@generic="285cbade57e932f7ac6713eb51f45fc2ea15a7974f09a74424b93a604cf2d5b2d992ed5f59f3e6868e803f253c1f93184db090bbfcbac4a507583b2f5b4ef25703972e8b779311b5dcb3b3449e34e043d3ec4ab8d2be2101d4abfd640903f8d3cfbd751b0865b88c0339dd57273ebd4f4841841f5b18501a45137db1a0db012b91e47d18162966cee72787f21ca745fad4d81a526a595403008916c525a3b7b42b2e1a45dde45963c29083", @generic="b2c3b117a31a8ca7fdfab2348ecf243e50b09b44120967f7db70e22239372be81b30831567bff4ae4453c31fe9d4b8e8fb8110895fa498c85b5784fe22ac05de56a0a8ca07db3ee5392b093d7d6f3f59a82250cd836c1d195fcdec496c90daf34e060ec6b2468e9af3db28250e7bd2c7bbb449f47a0b42ec06951c6297b5668c8982f950ca72eaebb857571010dfd85378c77cedea2266108f", @nested={0x4, 0x144}, @typed={0x8, 0x111, 0x0, 0x0, @uid=r8}]}]}, 0x164}], 0x7, &(0x7f0000002700)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x1c, 0x1, 0x1, [r0, r12, r0]}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r13, r0, r2, r14]}}], 0x88, 0x24000004}, 0x4000005) r15 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r15, 0x8040942d, &(0x7f0000002800)) r16 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r16, 0x11b, 0x5, &(0x7f0000002840)=0x2008, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)={0x58, 0x3, 0x3, 0x703, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x80}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x10}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa0}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x100}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x100}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x400}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000002a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r17, &(0x7f0000002b00)={&(0x7f00000029c0), 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x28, r18, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r19}, @val={0xc, 0x99, {0x8, 0x10}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004090}, 0x8000000) 0s ago: executing program 0 (id=2588): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000020000000c0000000810"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r3, r2}, 0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x82, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES16=r5, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) kernel console output (not intermixed with test programs): 9][T10350] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 322.720764][T10351] bond2: entered promiscuous mode [ 322.720785][T10351] bridge3: entered promiscuous mode [ 322.721066][T10351] bond2: entered allmulticast mode [ 322.721081][T10351] bridge3: entered allmulticast mode [ 322.722315][T10351] 8021q: adding VLAN 0 to HW filter on device bond2 [ 322.890690][T10356] bridge5: entered promiscuous mode [ 322.938463][T10359] ip_tables: iptables: counters copy to user failed while replacing table [ 322.974592][T10356] Unsupported ieee802154 address type: 0 [ 323.122299][T10372] netlink: 'syz.0.1064': attribute type 16 has an invalid length. [ 323.145731][ T9592] udevd[9592]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 323.508447][T10396] syzkaller0: entered promiscuous mode [ 323.508475][T10396] syzkaller0: entered allmulticast mode [ 323.577858][T10400] vxlan: RTM_NEWNEIGH with invalid state 0x9 [ 324.006360][T10424] __nla_validate_parse: 8 callbacks suppressed [ 324.006384][T10424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1078'. [ 324.102430][T10427] bond4: option mode: unable to set because the bond device has slaves [ 324.189517][T10421] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 324.338695][T10427] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1081'. [ 324.496314][T10439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.564023][T10442] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 324.790564][T10450] xt_TCPMSS: Only works on TCP SYN packets [ 324.810966][T10448] ip6gretap3: entered allmulticast mode [ 324.838909][T10448] batman_adv: batadv0: Adding interface: ip6gretap3 [ 324.838930][T10448] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.838965][T10448] batman_adv: batadv0: Interface activated: ip6gretap3 [ 325.150564][T10470] bond4: (slave lo): Releasing backup interface [ 325.152971][T10470] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 325.189083][T10470] team0: Port device veth0 removed [ 325.189595][T10470] bridge_slave_0: left allmulticast mode [ 325.189826][T10470] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.215760][T10470] bridge_slave_1: left allmulticast mode [ 325.218729][T10470] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.248243][T10470] bond8: (slave veth0_to_bond): Releasing backup interface [ 325.248278][T10470] bond8: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 325.281396][T10470] bond0: (slave bond_slave_0): Releasing backup interface [ 325.300044][T10470] bond0: (slave bond_slave_1): Releasing backup interface [ 325.327293][T10470] team0: Port device team_slave_0 removed [ 325.331888][T10470] team0: Port device team_slave_1 removed [ 325.356669][T10470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.358021][T10470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.359013][T10470] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 325.381810][T10471] team0: Mode changed to "activebackup" [ 325.466001][T10479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.466033][T10479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.467980][T10479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.468005][T10479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.470721][T10479] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 325.470743][T10479] batman_adv: batadv0: Removing interface: ipvlan2 [ 325.471852][T10479] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 325.471917][T10479] batman_adv: batadv0: Removing interface: ipvlan3 [ 325.751042][T10495] netlink: 'syz.1.1097': attribute type 83 has an invalid length. [ 325.808158][T10495] bond9: option resend_igmp: invalid value (2878) [ 325.808186][T10495] bond9: option resend_igmp: allowed values 0 - 255 [ 325.827729][T10500] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.889311][T10503] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1100'. [ 325.996872][T10495] bond9 (unregistering): Released all slaves [ 326.164648][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1104'. [ 326.631484][T10533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1109'. [ 326.758065][T10536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1110'. [ 326.758129][T10536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1110'. [ 326.942953][T10542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1111'. [ 326.943220][T10542] unsupported nlmsg_type 40 [ 327.091733][T10548] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1112'. [ 327.091769][T10548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1112'. [ 327.402925][T10560] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 327.622203][T10560] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 327.804665][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 327.828124][T10570] netlink: 'syz.0.1116': attribute type 32 has an invalid length. [ 327.890155][T10570] bond1: option coupled_control: invalid value (15) [ 327.904447][T10570] bond1 (unregistering): Released all slaves [ 328.162057][T10591] IPVS: set_ctl: invalid protocol: 4 10.1.1.0:20001 [ 328.280128][T10594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.405701][T10594] pim6reg: entered allmulticast mode [ 328.959448][T10626] SET target dimension over the limit! [ 328.966925][T10626] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 329.297596][T10642] batman_adv: batadv0: Adding interface: syzkaller0 [ 329.297621][T10642] batman_adv: batadv0: Interface activated: syzkaller0 [ 329.788946][T10675] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 329.882893][T10679] netlink: 'syz.3.1147': attribute type 2 has an invalid length. [ 329.924510][T10679] : entered promiscuous mode [ 329.964491][T10683] syzkaller1: entered promiscuous mode [ 329.964517][T10683] syzkaller1: entered allmulticast mode [ 330.002698][T10681] __nla_validate_parse: 3 callbacks suppressed [ 330.002723][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1148'. [ 330.002739][T10681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1148'. [ 330.002910][T10681] netlink: 'syz.4.1148': attribute type 18 has an invalid length. [ 330.336025][T10698] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 330.640376][T10711] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1158'. [ 330.710964][T10715] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1158'. [ 330.711004][T10715] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1158'. [ 330.826706][T10718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1159'. [ 330.885072][T10719] openvswitch: netlink: Message has 4 unknown bytes. [ 331.219105][T10739] xfrm2: entered promiscuous mode [ 331.236731][T10739] netlink: 'syz.1.1162': attribute type 30 has an invalid length. [ 331.469287][T10751] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 331.469330][T10751] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 331.469375][T10751] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 331.696551][T10764] netlink: 'syz.3.1166': attribute type 4 has an invalid length. [ 332.222008][T10782] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1169'. [ 332.298164][T10790] Set syz0 is full, maxelem 2 reached [ 332.466787][T10799] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 332.568414][T10808] netlink: 'syz.4.1174': attribute type 7 has an invalid length. [ 332.616179][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'. [ 332.709436][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'. [ 332.709465][T10809] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1173'. [ 332.709495][T10809] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 332.776495][T10813] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 333.104591][T10830] netlink: 'syz.3.1178': attribute type 10 has an invalid length. [ 333.594464][T10844] syzkaller0: entered promiscuous mode [ 333.594489][T10844] syzkaller0: entered allmulticast mode [ 333.936103][T10857] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 334.006987][T10862] netlink: 'syz.3.1189': attribute type 2 has an invalid length. [ 334.553417][T10883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.565099][T10883] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.572592][T10883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.625586][T10883] bridge_slave_1: entered promiscuous mode [ 334.652684][T10883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.662448][T10883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.681279][T10883] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 334.681729][ T5911] syz1: Port: 1 Link ACTIVE [ 335.113137][T10896] netlink: 'syz.4.1194': attribute type 2 has an invalid length. [ 335.468514][T10914] __nla_validate_parse: 7 callbacks suppressed [ 335.468539][T10914] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1200'. [ 335.468563][T10914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1200'. [ 335.468580][T10914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1200'. [ 335.671549][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1201'. [ 335.685682][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1201'. [ 335.737774][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1201'. [ 335.737813][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1201'. [ 336.041960][T10926] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1203'. [ 336.502590][T10944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.520016][T10944] netlink: 'syz.0.1208': attribute type 16 has an invalid length. [ 336.520041][T10944] netlink: 'syz.0.1208': attribute type 17 has an invalid length. [ 336.538449][T10944] 0ªX¹¦Dö»: left allmulticast mode [ 336.577978][T10949] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1208'. [ 336.616813][T10944] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 336.849570][T10955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1212'. [ 339.228876][T10936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 339.371489][T10978] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 339.372356][T10977] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 339.619379][T10994] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 339.662419][T10996] syzkaller0: entered promiscuous mode [ 339.662446][T10996] syzkaller0: entered allmulticast mode [ 339.931779][T11009] rxe_eth0 speed is unknown, defaulting to 1000 [ 339.947801][T11017] xt_hashlimit: size too large, truncated to 1048576 [ 340.228291][T11019] 8021q: adding VLAN 0 to HW filter on device bond1 [ 340.303436][T11025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.315250][T11025] bond1: (slave bond0): Enslaving as an active interface with a down link [ 340.476098][T11019] bond1 (unregistering): (slave bond0): Releasing active interface [ 340.502374][T11019] bond1 (unregistering): Released all slaves [ 340.558703][T11035] __nla_validate_parse: 7 callbacks suppressed [ 340.558725][T11035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1232'. [ 340.646166][T11013] xt_hashlimit: size too large, truncated to 1048576 [ 340.823757][T11009] wg2 speed is unknown, defaulting to 1000 [ 341.052600][T11049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1235'. [ 341.065190][T11053] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 341.070493][T11049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1235'. [ 341.070808][T11048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1235'. [ 341.071750][T11048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1235'. [ 342.049727][T11086] ip_tables: iptables: counters copy to user failed while replacing table [ 342.079397][T11086] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 342.182195][T11090] netlink: 'syz.0.1249': attribute type 10 has an invalid length. [ 342.251634][T11093] nbd: socks must be embedded in a SOCK_ITEM attr [ 342.315312][T11104] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 342.379387][T11093] block nbd2: shutting down sockets [ 342.486056][T11105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.494289][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.515661][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.518354][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.521387][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.591707][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.614424][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.621806][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.663342][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.686658][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.693265][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.710165][T11119] ip_tables: iptables: counters copy to user failed while replacing table [ 342.731969][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.750472][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.772648][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.790683][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.806982][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.836566][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.838550][T11105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.876256][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.883259][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.907722][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.933334][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.960481][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.975289][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.991701][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.017316][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.040582][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.056360][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.062232][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.084651][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.089710][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.091838][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.102302][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.121380][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.144307][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.154292][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.174340][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.188412][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.202081][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.212364][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.225070][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.228171][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.230407][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.232277][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.248202][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.253024][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.273287][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.292118][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.313888][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.315415][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.317124][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.318873][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.320369][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.321819][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.338344][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.343166][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.349271][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.355335][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.362669][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.369610][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.377748][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.384832][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.390742][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.398030][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.406398][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.614595][T11128] gre2: entered promiscuous mode [ 345.902175][T11132] bond7: Removing last ns target with arp_interval on [ 345.934819][T11139] xt_TPROXY: Can be used only with -p tcp or -p udp [ 346.110051][T11151] ip_tables: iptables: counters copy to user failed while replacing table [ 346.394563][T11163] netlink: 'syz.1.1270': attribute type 1 has an invalid length. [ 346.395225][T11163] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1270'. [ 346.640237][T11178] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1275'. [ 346.640292][T11178] macvlan0: entered promiscuous mode [ 346.640490][T11178] netlink: 'syz.3.1275': attribute type 1 has an invalid length. [ 346.640506][T11178] netlink: 'syz.3.1275': attribute type 2 has an invalid length. [ 346.640651][T11179] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1275'. [ 346.640683][T11179] netlink: 'syz.3.1275': attribute type 1 has an invalid length. [ 346.640697][T11179] netlink: 'syz.3.1275': attribute type 2 has an invalid length. [ 346.744836][T11181] ip_tables: iptables: counters copy to user failed while replacing table [ 346.830716][T11181] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.831403][T11181] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.866445][T11191] ip_tables: iptables: counters copy to user failed while replacing table [ 347.230330][T11207] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 347.318645][ T6463] wg2 speed is unknown, defaulting to 1000 [ 347.318766][ T6463] syz2: Port: 1 Link DOWN [ 347.377346][T11193] gre1: entered promiscuous mode [ 347.377372][T11193] gre1: entered allmulticast mode [ 347.403950][ T13] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.404337][ T12] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.404438][ T12] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.404490][ T12] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.092115][T11232] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1288'. [ 348.380516][T11247] bond4: left promiscuous mode [ 348.388717][T11247] 8021q: adding VLAN 0 to HW filter on device bond4 [ 348.408820][T11247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1290'. [ 348.408851][T11247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1290'. [ 348.408892][T11247] bond0: left promiscuous mode [ 348.480837][T11247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.557636][T11247] bond4: (slave bond0): Enslaving as an active interface with a down link [ 348.625344][T11247] netlink: 'syz.1.1290': attribute type 2 has an invalid length. [ 348.625373][T11247] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1290'. [ 348.682916][T11251] bond4 (unregistering): (slave bond0): Releasing active interface [ 348.721153][T11251] bond4 (unregistering): Released all slaves [ 348.819785][T11258] ip_tables: iptables: counters copy to user failed while replacing table [ 348.888344][T11247] : entered promiscuous mode [ 349.100959][T11266] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 349.100986][T11266] syzkaller1: Linktype set failed because interface is up [ 349.102040][T11266] syzkaller1: tun_chr_ioctl cmd 1074025694 [ 349.123942][ T8142] syzkaller1: tun_net_xmit 90 [ 349.187892][T11278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1293'. [ 349.187939][T11278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1293'. [ 349.225812][ T8126] syzkaller1: tun_net_xmit 90 [ 349.300468][T11283] tipc: Started in network mode [ 349.300504][T11283] tipc: Node identity ae1ce2d9162b, cluster identity 4711 [ 349.300798][T11283] tipc: Enabled bearer , priority 0 [ 349.409018][T11289] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1298'. [ 349.575488][T11300] netlink: 'syz.0.1301': attribute type 1 has an invalid length. [ 349.575488][T11299] netlink: 'syz.0.1301': attribute type 1 has an invalid length. [ 349.622119][T11300] 8021q: adding VLAN 0 to HW filter on device bond1 [ 349.701936][T11299] bond1: (slave bridge6): making interface the new active one [ 349.711837][T11299] bond1: (slave bridge6): Enslaving as an active interface with an up link [ 349.830437][T11308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.831932][T11310] openvswitch: netlink: IP tunnel TTL not specified. [ 349.831968][T11310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.871070][T11310] netlink: 'syz.1.1302': attribute type 10 has an invalid length. [ 349.871114][T11310] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 349.871137][T11310] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 349.971880][T11319] netlink: 'syz.0.1305': attribute type 11 has an invalid length. [ 349.987770][T11321] ip_tables: iptables: counters copy to user failed while replacing table [ 350.418560][ T8141] tipc: Node number set to 3090670297 [ 350.969934][T11363] ip_tables: iptables: counters copy to user failed while replacing table [ 350.976215][T11363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 351.312062][T11379] x_tables: ip6_tables: DNAT target: only valid in nat table, not syz1 [ 351.673142][T11392] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 351.689288][T11392] bond3: (slave macvlan5): making interface the new active one [ 351.710054][T11392] bond3: (slave macvlan5): Enslaving as an active interface with an up link [ 352.075071][T11411] __nla_validate_parse: 9 callbacks suppressed [ 352.075095][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1325'. [ 352.180696][T11411] ip6gre2: entered promiscuous mode [ 352.180722][T11411] ip6gre2: entered allmulticast mode [ 352.182693][T11419] netlink: 'syz.0.1329': attribute type 13 has an invalid length. [ 352.182732][T11419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1329'. [ 352.212741][ T8142] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 352.220743][ T62] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 352.220986][ T62] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 352.588320][T11439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1335'. [ 352.604871][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1337'. [ 352.666062][ T8142] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 352.683228][T11451] ip_tables: iptables: counters copy to user failed while replacing table [ 352.792332][T11446] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 352.891586][T11458] batman_adv: batadv0: Adding interface: syzkaller0 [ 352.891609][T11458] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.891643][T11458] batman_adv: batadv0: Interface activated: syzkaller0 [ 353.048905][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1343'. [ 353.243856][ T8141] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 353.692884][T11457] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 353.777734][T11457] batman_adv: batadv0: Removing interface: syzkaller0 [ 353.854359][T11482] dvmrp1: entered allmulticast mode [ 353.857662][T11480] dvmrp1: left allmulticast mode [ 353.926837][T11485] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1347'. [ 353.954279][T11484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1348'. [ 354.315220][T11510] xt_nfacct: accounting object `syz' does not exist [ 354.424803][T11521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1357'. [ 354.482405][T11521] netlink: 396 bytes leftover after parsing attributes in process `syz.3.1357'. [ 354.494236][T11521] xt_CT: You must specify a L4 protocol and not use inversions on it [ 354.569501][T11523] team0: entered allmulticast mode [ 354.574931][T11523] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.581290][T11523] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 354.751429][T11535] sctp: [Deprecated]: syz.4.1362 (pid 11535) Use of int in max_burst socket option deprecated. [ 354.751429][T11535] Use struct sctp_assoc_value instead [ 354.931422][T11530] smbdirect: ib_dev[rxe0] renamed to [sy] [ 355.020381][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1367'. [ 355.021122][T11556] sctp: [Deprecated]: syz.0.1366 (pid 11556) Use of int in max_burst socket option. [ 355.021122][T11556] Use struct sctp_assoc_value instead [ 355.671724][T11576] netlink: 'syz.4.1372': attribute type 10 has an invalid length. [ 355.934898][T11581] netlink: 'syz.0.1374': attribute type 1 has an invalid length. [ 355.964050][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 355.983794][T11581] bond2: entered promiscuous mode [ 355.984266][T11581] 8021q: adding VLAN 0 to HW filter on device bond2 [ 356.186564][T11585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.943355][T11621] syzkaller0: left promiscuous mode [ 356.943382][T11621] syzkaller0: left allmulticast mode [ 356.945728][T11621] batman_adv: batadv0: Interface activated: syzkaller0 [ 357.117684][T11622] rxe_eth0 speed is unknown, defaulting to 1000 [ 357.603698][T11658] netlink: 'syz.1.1393': attribute type 1 has an invalid length. [ 357.665639][T11660] __nla_validate_parse: 36 callbacks suppressed [ 357.665660][T11660] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1393'. [ 357.759995][T11658] 8021q: adding VLAN 0 to HW filter on device bond4 [ 357.891432][T11658] 8021q: adding VLAN 0 to HW filter on device bond10 [ 357.907382][T11658] bond4: (slave bond10): Enslaving as an active interface with a down link [ 357.956624][T11660] bond4 (unregistering): (slave bond10): Releasing active interface [ 357.976344][T11660] bond4 (unregistering): Released all slaves [ 358.082995][T11622] wg2 speed is unknown, defaulting to 1000 [ 358.152354][T11671] netlink: 'syz.3.1398': attribute type 7 has an invalid length. [ 358.152383][T11671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1398'. [ 358.181592][T11671] netlink: 'syz.3.1398': attribute type 7 has an invalid length. [ 358.181617][T11671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1398'. [ 358.353302][T11676] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1400'. [ 358.425538][T11678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.448303][T11682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.590036][T11686] batadv_slave_1: entered promiscuous mode [ 358.759566][T11667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1396'. [ 358.838654][T11691] netlink: 'syz.1.1404': attribute type 9 has an invalid length. [ 359.119227][T11684] batadv_slave_1: left promiscuous mode [ 359.224543][ T8126] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 359.347178][T11710] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1408'. [ 359.372613][T11711] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1409'. [ 359.388908][ T278] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 359.393335][T11713] netlink: 8852 bytes leftover after parsing attributes in process `syz.1.1410'. [ 359.412988][T11710] netlink: 'syz.0.1408': attribute type 1 has an invalid length. [ 359.415841][T11713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1410'. [ 359.492002][T11710] bond3 (unregistering): Released all slaves [ 359.686678][T11722] 8021q: VLANs not supported on ip6_vti0 [ 360.203871][ T6463] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 360.473034][ T45] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 360.492808][ T45] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 360.673891][ T6463] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 360.855763][T11747] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 361.083022][T11775] vlan4: entered promiscuous mode [ 361.083048][T11775] macvlan0: entered promiscuous mode [ 361.137398][T11774] syzkaller0: entered promiscuous mode [ 361.137422][T11774] syzkaller0: entered allmulticast mode [ 361.180241][T11778] tipc: Started in network mode [ 361.180268][T11778] tipc: Node identity 4246, cluster identity 4711 [ 361.180284][T11778] tipc: Node number set to 16966 [ 362.006023][T11844] netlink: 'syz.3.1437': attribute type 8 has an invalid length. [ 362.108472][T11848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1438'. [ 363.643932][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 364.553045][T11824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.763769][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 364.801825][T11876] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1446'. [ 364.813183][T11878] ip_tables: iptables: counters copy to user failed while replacing table [ 364.825223][T11878] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 364.875658][T11873] macvtap1: entered allmulticast mode [ 364.875686][T11873] veth0_to_bridge: entered allmulticast mode [ 364.882207][T11873] veth0_to_bridge: left allmulticast mode [ 365.000346][T11883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1449'. [ 365.000410][T11883] block nbd2: Unsupported socket: should be TCP or UNIX. [ 365.160401][T11887] gretap1: entered allmulticast mode [ 365.222583][T11892] syzkaller0: entered promiscuous mode [ 365.222611][T11892] syzkaller0: entered allmulticast mode [ 365.617032][T11930] tipc: Enabling of bearer rejected, already enabled [ 365.619965][ T30] audit: type=1800 audit(1792361286.285:5): pid=11927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1458" name="memory.events" dev="tmpfs" ino=1464 res=0 errno=0 [ 365.873746][T11938] netlink: 'syz.1.1459': attribute type 11 has an invalid length. [ 365.873772][T11938] netlink: 'syz.1.1459': attribute type 11 has an invalid length. [ 365.873785][T11938] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1459'. [ 366.360895][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1463'. [ 366.531755][T11964] 8021q: adding VLAN 0 to HW filter on device bond3 [ 366.762471][T11981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1470'. [ 366.985063][T11996] ip_tables: iptables: counters copy to user failed while replacing table [ 367.019319][T12000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1476'. [ 367.068753][T12004] syzkaller0: Caught tx_queue_len zero misconfig [ 367.260299][T12005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1474'. [ 367.260335][T12005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1474'. [ 367.292691][T12014] netlink: 'syz.3.1479': attribute type 4 has an invalid length. [ 367.423150][T12022] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1478'. [ 367.566172][T12027] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 367.602319][T12027] syzkaller0: entered promiscuous mode [ 367.602345][T12027] syzkaller0: entered allmulticast mode [ 367.735897][T12035] xt_policy: too many policy elements [ 367.779535][T12037] xt_hashlimit: size too large, truncated to 1048576 [ 367.780687][T12041] siw: device registration error -23 [ 367.832021][T12041] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1483'. [ 368.172627][T12053] openvswitch: netlink: Multiple metadata blocks provided [ 368.214296][T12056] netlink: 'syz.0.1488': attribute type 1 has an invalid length. [ 368.221686][T12056] netlink: 'syz.0.1488': attribute type 1 has an invalid length. [ 368.410497][T12062] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 370.719486][T12042] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 370.936770][T12082] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 371.007079][T12088] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1497'. [ 371.512177][T12117] ip_tables: iptables: counters copy to user failed while replacing table [ 372.154382][T12142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1514'. [ 372.569924][T12167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1522'. [ 372.570548][T12169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1522'. [ 372.702332][T12165] bridge0: port 3(bond0) entered blocking state [ 372.702431][T12165] bridge0: port 3(bond0) entered disabled state [ 372.718953][T12182] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1520'. [ 372.743086][T12165] bond0: entered allmulticast mode [ 372.743113][T12165] bond_slave_0: entered allmulticast mode [ 372.743156][T12165] bond_slave_1: entered allmulticast mode [ 372.743171][T12165] bridge0: entered allmulticast mode [ 372.743202][T12165] veth0_to_bond: entered allmulticast mode [ 372.780483][T12165] bond0: left allmulticast mode [ 372.780509][T12165] bond_slave_0: left allmulticast mode [ 372.780528][T12165] bond_slave_1: left allmulticast mode [ 372.780544][T12165] bridge0: left allmulticast mode [ 372.780560][T12165] veth0_to_bond: left allmulticast mode [ 372.781164][T12173] bridge0: port 3(bond0) entered blocking state [ 372.781390][T12173] bridge0: port 3(bond0) entered disabled state [ 372.781543][T12173] bond0: entered allmulticast mode [ 372.781556][T12173] bond_slave_0: entered allmulticast mode [ 372.781571][T12173] bond_slave_1: entered allmulticast mode [ 372.781584][T12173] bridge0: entered allmulticast mode [ 372.781597][T12173] veth0_to_bond: entered allmulticast mode [ 372.853393][T12173] bond0: left allmulticast mode [ 372.853433][T12173] bond_slave_0: left allmulticast mode [ 372.853451][T12173] bond_slave_1: left allmulticast mode [ 372.869792][T12173] bridge0: left allmulticast mode [ 372.869815][T12173] veth0_to_bond: left allmulticast mode [ 372.872845][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1523'. [ 372.872872][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1523'. [ 372.872947][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1523'. [ 372.916899][T12182] hsr_slave_1 (unregistering): left promiscuous mode [ 373.095435][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1525'. [ 373.116769][T12194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1525'. [ 373.426440][T12202] syzkaller0: entered promiscuous mode [ 373.426470][T12202] syzkaller0: entered allmulticast mode [ 373.514640][T12215] pimreg9: entered allmulticast mode [ 373.721814][T12229] 8021q: VLANs not supported on vxcan0 [ 373.838653][T12237] pim6reg: entered allmulticast mode [ 373.883845][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 373.985063][T12233] syzkaller0: entered promiscuous mode [ 373.985092][T12233] syzkaller0: entered allmulticast mode [ 374.066191][ T30] audit: type=1800 audit(1792361294.735:6): pid=12239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1538" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1646 res=0 errno=0 [ 374.224996][T12247] ip_tables: iptables: counters copy to user failed while replacing table [ 374.238122][T12248] ip_tables: iptables: counters copy to user failed while replacing table [ 376.451565][T12234] pim6reg: left allmulticast mode [ 377.733699][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 379.011448][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.011503][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.039655][T12273] __nla_validate_parse: 2 callbacks suppressed [ 379.039678][T12273] netlink: 65 bytes leftover after parsing attributes in process `syz.3.1543'. [ 379.173805][T12278] netlink: 'syz.0.1547': attribute type 4 has an invalid length. [ 379.298378][T12277] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 379.302922][T12290] 8021q: VLANs not supported on ip6tnl0 [ 379.952391][T12327] tipc: Failed to remove unknown binding: 66,0,0/0:482586410/482586412 [ 379.952427][T12327] tipc: Failed to remove unknown binding: 66,0,0/0:482586410/482586411 [ 379.952742][T12327] tipc: Failed to remove unknown binding: 66,0,0/0:482586410/482586412 [ 379.952769][T12327] tipc: Failed to remove unknown binding: 66,0,0/0:482586410/482586411 [ 380.131353][T12334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1558'. [ 380.162800][T12334] ip_tables: iptables: counters copy to user failed while replacing table [ 380.165307][T12335] ip_tables: iptables: counters copy to user failed while replacing table [ 380.182207][T12334] x_tables: duplicate underflow at hook 1 [ 380.210909][T12339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1559'. [ 380.223078][T12338] IPVS: lblc: TCP 172.20.20.170:20000 - no destination available [ 380.417379][T12348] 8021q: adding VLAN 0 to HW filter on device bond3 [ 380.494381][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1562'. [ 380.494401][T12348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1562'. [ 380.517677][T12348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.535624][T12348] bond3: (slave bond0): making interface the new active one [ 380.537398][T12348] bond3: (slave bond0): Enslaving as an active interface with an up link [ 380.571574][T12353] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1564'. [ 380.591053][T12348] bond3 (unregistering): (slave bond0): Releasing active interface [ 380.604407][T12348] bond3 (unregistering): Released all slaves [ 380.626033][T12356] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1562'. [ 380.660880][T12353] ip6tnl1: entered allmulticast mode [ 380.676751][T12358] netlink: 'syz.0.1565': attribute type 21 has an invalid length. [ 380.676793][T12358] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1565'. [ 380.678676][T12358] netlink: 'syz.0.1565': attribute type 4 has an invalid length. [ 380.678698][T12358] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1565'. [ 380.807695][T12360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1568'. [ 380.829906][T12364] syzkaller0: left promiscuous mode [ 380.829931][T12364] syzkaller0: left allmulticast mode [ 380.919932][T12373] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 381.130880][T12382] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 381.162792][T12384] netlink: 'syz.2.1570': attribute type 2 has an invalid length. [ 381.162822][T12384] netlink: 'syz.2.1570': attribute type 2 has an invalid length. [ 381.427751][T12403] netlink: NAT attribute has 4 unknown bytes [ 381.427789][T12403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.709938][T12401] syzkaller0: renamed from gre3 [ 382.137655][T12437] gre0: entered promiscuous mode [ 382.165769][T12436] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 382.303954][T12434] netlink: 'syz.2.1586': attribute type 7 has an invalid length. [ 382.343617][T12434] netlink: 'syz.2.1586': attribute type 7 has an invalid length. [ 382.597122][T12453] netlink: 'syz.2.1590': attribute type 16 has an invalid length. [ 382.710817][T12458] vti0: entered promiscuous mode [ 382.815923][T12461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.217533][T12498] ip_tables: iptables: counters copy to user failed while replacing table [ 383.446897][T12509] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 383.447762][T12509] block nbd4: not configured, cannot reconfigure [ 383.978065][T12533] bond8: option updelay: invalid value (18446744073709518847) [ 383.978097][T12533] bond8: option updelay: allowed values 0 - 2147483647 [ 383.981204][T12533] bond8 (unregistering): Released all slaves [ 386.780424][T12525] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 386.960366][T12586] netlink: 'syz.2.1623': attribute type 1 has an invalid length. [ 387.059181][T12594] xt_hashlimit: size too large, truncated to 1048576 [ 387.105164][T12586] bond3: entered promiscuous mode [ 387.105688][T12586] 8021q: adding VLAN 0 to HW filter on device bond3 [ 387.200456][T12607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.202748][T12606] veth1_vlan: entered allmulticast mode [ 387.202836][T12606] macvlan1: entered promiscuous mode [ 387.773080][T12620] __nla_validate_parse: 18 callbacks suppressed [ 387.773098][T12620] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1629'. [ 387.773109][T12620] openvswitch: netlink: Flow actions attr not present in new flow. [ 387.958905][T12627] syzkaller0: left promiscuous mode [ 387.958931][T12627] syzkaller0: left allmulticast mode [ 387.960995][T12627] syzkaller0: Caught tx_queue_len zero misconfig [ 388.237592][ T30] audit: type=1800 audit(1792361308.905:7): pid=12645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1635" name="memory.events" dev="tmpfs" ino=1760 res=0 errno=0 [ 388.243772][ T30] audit: type=1804 audit(1792361308.905:8): pid=12645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1635" name="/newroot/339/memory.events" dev="tmpfs" ino=1760 res=1 errno=0 [ 388.501229][T12654] xt_socket: unknown flags 0x4 [ 389.083130][T12646] syz.2.1636 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 389.083185][T12646] CPU: 0 UID: 0 PID: 12646 Comm: syz.2.1636 Not tainted syzkaller #0 PREEMPT(full) [ 389.083208][T12646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.083226][T12646] Call Trace: [ 389.083235][T12646] [ 389.083245][T12646] dump_stack_lvl+0xe8/0x150 [ 389.083281][T12646] dump_header+0xd3/0x4b0 [ 389.083317][T12646] oom_kill_process+0x3ab/0x9e0 [ 389.083352][T12646] out_of_memory+0x1064/0x1480 [ 389.083380][T12646] ? try_charge_memcg+0xc32/0x15e0 [ 389.083422][T12646] ? __pfx_out_of_memory+0x10/0x10 [ 389.083448][T12646] ? do_raw_spin_unlock+0xf5/0x200 [ 389.083492][T12646] try_charge_memcg+0xcdf/0x15e0 [ 389.083543][T12646] ? __pfx_try_charge_memcg+0x10/0x10 [ 389.083599][T12646] ? charge_memcg+0x47/0x310 [ 389.083632][T12646] charge_memcg+0x1dd/0x310 [ 389.083660][T12646] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 389.083699][T12646] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 389.083734][T12646] swap_cache_alloc_folio+0x4de/0x990 [ 389.083787][T12646] swap_cache_read_folio+0x44/0x120 [ 389.083813][T12646] swap_cluster_readahead+0x392/0x630 [ 389.083844][T12646] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 389.083890][T12646] swapin_readahead+0x1a3/0xc50 [ 389.083926][T12646] ? __pfx_swapin_readahead+0x10/0x10 [ 389.083955][T12646] ? swap_table_get+0x1e/0x260 [ 389.083988][T12646] ? swap_table_get+0x1e/0x260 [ 389.084019][T12646] ? swap_table_get+0x1e/0x260 [ 389.084053][T12646] ? swap_table_get+0x216/0x260 [ 389.084089][T12646] ? swap_cache_get_folio+0x2e7/0x2f0 [ 389.084131][T12646] do_swap_page+0x3fb/0x4c10 [ 389.084185][T12646] ? __lock_acquire+0x747/0x2de0 [ 389.084208][T12646] ? do_swap_page+0x126/0x4c10 [ 389.084242][T12646] ? __pfx_do_swap_page+0x10/0x10 [ 389.084271][T12646] ? __pte_offset_map+0x1ae/0x240 [ 389.084309][T12646] ? pte_offset_map_rw_nolock+0xea/0x160 [ 389.084348][T12646] handle_mm_fault+0x1398/0x3750 [ 389.084395][T12646] ? handle_mm_fault+0xf1/0x3750 [ 389.084440][T12646] ? __pfx_handle_mm_fault+0x10/0x10 [ 389.084471][T12646] ? lock_vma_under_rcu+0x45a/0x500 [ 389.084526][T12646] do_user_addr_fault+0xa4f/0x1340 [ 389.084562][T12646] ? trace_page_fault_user+0x84/0x1e0 [ 389.084588][T12646] exc_page_fault+0x6a/0xc0 [ 389.084619][T12646] asm_exc_page_fault+0x26/0x30 [ 389.084642][T12646] RIP: 0033:0x7f65d9b596b8 [ 389.084664][T12646] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 389.084692][T12646] RSP: 002b:00007fffc1f2ea20 EFLAGS: 00010246 [ 389.084713][T12646] RAX: 0000000000000000 RBX: 000055555da72500 RCX: 00007f65d9b5ed8e [ 389.084729][T12646] RDX: 00007fffc1f2ea70 RSI: 0000000000000000 RDI: 0000000000000000 [ 389.084743][T12646] RBP: 00007f65d9e27da0 R08: 0000000000000000 R09: 0000000000000000 [ 389.084757][T12646] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000005efa7 [ 389.084771][T12646] R13: 00007f65d9e2609c R14: 000000000005ed21 R15: 00007f65d9e26090 [ 389.084809][T12646] [ 389.101206][T12646] memory: usage 307200kB, limit 307200kB, failcnt 556 [ 389.101270][T12646] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 389.101313][T12646] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 389.101348][T12646] Memory cgroup stats for /syz2: [ 389.109889][T12646] cache 0 [ 389.109940][T12646] rss 0 [ 389.109966][T12646] rss_huge 0 [ 389.109987][T12646] shmem 0 [ 389.110001][T12646] mapped_file 0 [ 389.110023][T12646] dirty 0 [ 389.110044][T12646] writeback 0 [ 389.110065][T12646] workingset_refault_anon 2 [ 389.110087][T12646] workingset_refault_file 2 [ 389.110108][T12646] swap 188416 [ 389.110193][T12646] swapcached 200704 [ 389.110215][T12646] pgpgin 43660 [ 389.110305][T12646] pgpgout 43659 [ 389.110326][T12646] pgfault 76852 [ 389.110347][T12646] pgmajfault 4 [ 389.110361][T12646] inactive_anon 0 [ 389.110383][T12646] active_anon 0 [ 389.110405][T12646] inactive_file 0 [ 389.110427][T12646] active_file 0 [ 389.110448][T12646] unevictable 0 [ 389.110470][T12646] hierarchical_memory_limit 314572800 [ 389.110492][T12646] hierarchical_memsw_limit 9223372036854771712 [ 389.110514][T12646] total_cache 0 [ 389.110536][T12646] total_rss 0 [ 389.110557][T12646] total_rss_huge 0 [ 389.110581][T12646] total_shmem 0 [ 389.110690][T12646] total_mapped_file 0 [ 389.110711][T12646] total_dirty 0 [ 389.110732][T12646] total_writeback 0 [ 389.110753][T12646] total_workingset_refault_anon 2 [ 389.110775][T12646] total_workingset_refault_file 2 [ 389.110796][T12646] total_swap 188416 [ 389.110817][T12646] total_swapcached 200704 [ 389.110839][T12646] total_pgpgin 43660 [ 389.110860][T12646] total_pgpgout 43659 [ 389.110882][T12646] total_pgfault 76852 [ 389.110903][T12646] total_pgmajfault 4 [ 389.110925][T12646] total_inactive_anon 0 [ 389.110953][T12646] total_active_anon 0 [ 389.110974][T12646] total_inactive_file 0 [ 389.111002][T12646] total_active_file 0 [ 389.111030][T12646] total_unevictable 0 [ 389.111051][T12646] anon_cost 0 [ 389.111072][T12646] file_cost 0 [ 389.111094][T12646] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1636,pid=12646,uid=0 [ 389.210118][T12646] Memory cgroup out of memory: Killed process 12646 (syz.2.1636) total-vm:102328kB, anon-rss:1268kB, file-rss:23364kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 389.762413][T12660] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 389.776708][T12660] netlink: Conntrack attr has 8 unknown bytes [ 389.776746][T12660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.523759][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 390.931243][T12626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.983433][T12678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.176547][T12688] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1650'. [ 391.285967][T12700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1651'. [ 391.419333][T12706] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 391.654225][T12709] geneve3: entered promiscuous mode [ 391.673776][ T1404] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.673829][ T1404] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.673866][ T1404] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.673902][ T1404] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.940154][T12722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1660'. [ 391.940204][T12722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1660'. [ 392.141094][T12733] netlink: 'syz.3.1663': attribute type 1 has an invalid length. [ 392.335577][T12745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1666'. [ 392.423162][T12747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.476949][T12756] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1669'. [ 392.925379][T12784] netlink: 'syz.2.1673': attribute type 10 has an invalid length. [ 393.022998][T12786] netlink: 'syz.1.1677': attribute type 1 has an invalid length. [ 393.077250][T12794] netlink: 'syz.2.1678': attribute type 1 has an invalid length. [ 393.204138][T12798] 8021q: adding VLAN 0 to HW filter on device bond5 [ 393.207015][T12798] bond4: (slave bond5): making interface the new active one [ 393.209263][T12798] bond4: (slave bond5): Enslaving as an active interface with an up link [ 393.250623][T12798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1678'. [ 393.268096][T12794] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 393.317920][T12805] netlink: 'syz.1.1681': attribute type 4 has an invalid length. [ 393.358098][T12808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1682'. [ 393.400928][T12808] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1682'. [ 393.513802][T12816] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 393.562400][T12816] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1684'. [ 393.701140][T12789] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 393.701728][T12790] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 393.876249][T12832] netlink: 'syz.2.1689': attribute type 1 has an invalid length. [ 393.970234][T12832] 8021q: adding VLAN 0 to HW filter on device bond6 [ 393.985887][T12839] syzkaller0: entered promiscuous mode [ 393.985912][T12839] syzkaller0: entered allmulticast mode [ 394.062525][T12842] bond6: (slave veth3): Enslaving as an active interface with a down link [ 394.134971][T12832] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 394.159689][T12832] bond6: (slave batadv1): making interface the new active one [ 394.176224][T12832] batadv1: entered promiscuous mode [ 394.176770][T12832] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 394.392987][T12854] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1693'. [ 396.286812][T12842] tipc: Started in network mode [ 396.286851][T12842] tipc: Node identity d66a014dcd8f, cluster identity 4711 [ 396.287037][T12842] tipc: Enabled bearer , priority 0 [ 396.290748][T12851] syzkaller0: entered promiscuous mode [ 396.290777][T12851] syzkaller0: entered allmulticast mode [ 396.492395][T12871] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1697'. [ 396.492425][T12871] openvswitch: netlink: Flow actions attr not present in new flow. [ 397.116107][T12830] tipc: Resetting bearer [ 397.138056][T12830] tipc: Disabling bearer [ 397.185120][T12874] erspan0: left promiscuous mode [ 397.270805][T12874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.292351][T12888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1699'. [ 397.301988][T12874] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.316770][T12886] netlink: 'syz.0.1699': attribute type 25 has an invalid length. [ 397.316797][T12886] netlink: 'syz.0.1699': attribute type 3 has an invalid length. [ 397.316811][T12886] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1699'. [ 397.428024][T12874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.508498][T12874] bond_slave_0: entered promiscuous mode [ 397.518483][T12874] bond_slave_1: entered promiscuous mode [ 397.549240][T12874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.551596][T12874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.578294][T12874] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 397.693668][T12903] netlink: 'syz.1.1703': attribute type 1 has an invalid length. [ 397.888939][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1705'. [ 398.968679][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.968819][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.973075][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.973190][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.075183][ T6463] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 399.494964][T12945] erspan0: entered promiscuous mode [ 399.518658][T12945] macsec1: entered allmulticast mode [ 399.518684][T12945] erspan0: entered allmulticast mode [ 399.560344][T12945] erspan0: left allmulticast mode [ 399.560377][T12945] erspan0: left promiscuous mode [ 399.625066][ T1404] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 399.625260][T12949] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1715'. [ 399.625279][T12949] tc_dump_action: action bad kind [ 399.946600][T12957] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1720'. [ 400.124532][ T5727] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 400.180504][T12974] syzkaller0: left promiscuous mode [ 400.180530][T12974] syzkaller0: left allmulticast mode [ 400.183283][T12965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1721'. [ 400.183314][T12965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1721'. [ 400.183332][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1721'. [ 400.205636][T12966] tipc: Enabled bearer , priority 0 [ 400.277097][T12964] tipc: Disabling bearer [ 400.557681][T12977] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1723'. [ 400.703397][ T45] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 400.710738][ T45] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 400.738563][T12985] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1725'. [ 400.739020][T12986] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1725'. [ 400.741341][T12985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1725'. [ 400.748157][T12985] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1725'. [ 400.821592][T10049] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 400.965225][T12988] syzkaller1: entered promiscuous mode [ 400.965253][T12988] syzkaller1: entered allmulticast mode [ 401.036195][T12994] netlink: 'syz.1.1727': attribute type 1 has an invalid length. [ 401.112838][T12999] netlink: 'syz.3.1729': attribute type 12 has an invalid length. [ 401.179432][T12994] 8021q: adding VLAN 0 to HW filter on device bond4 [ 401.473997][T13011] bond_slave_0: left promiscuous mode [ 401.474995][T13011] bond_slave_1: left promiscuous mode [ 401.595302][T13011] bond3: (slave macvlan5): Releasing active interface [ 401.643780][T13020] xt_CT: You must specify a L4 protocol and not use inversions on it [ 401.652964][T13019] xt_CT: You must specify a L4 protocol and not use inversions on it [ 402.319794][T13014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.323422][T13011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.356807][T13011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.359885][T13011] bond0 (unregistering): Released all slaves [ 402.528403][ T53] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 402.723356][T13043] netlink: 'syz.1.1742': attribute type 4 has an invalid length. [ 403.220979][T13070] netlink: 'syz.4.1751': attribute type 2 has an invalid length. [ 403.221013][T13070] netlink: 'syz.4.1751': attribute type 2 has an invalid length. [ 403.419780][T13075] ip_tables: iptables: counters copy to user failed while replacing table [ 403.911808][T13106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.106225][T13114] openvswitch: netlink: Message has 8 unknown bytes. [ 404.338555][T13134] ip_tables: iptables: counters copy to user failed while replacing table [ 404.499262][T13138] ip6gre2: entered promiscuous mode [ 404.499282][T13138] ip6gre2: entered allmulticast mode [ 404.615845][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 404.616199][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 404.772668][T13155] netlink: 'syz.0.1776': attribute type 1 has an invalid length. [ 404.790685][T13155] netlink: 'syz.0.1776': attribute type 1 has an invalid length. [ 404.832729][T13155] bond4: entered promiscuous mode [ 404.833224][T13155] 8021q: adding VLAN 0 to HW filter on device bond4 [ 404.875180][T13155] 8021q: adding VLAN 0 to HW filter on device bond4 [ 404.875631][T13155] bond4: (slave gre3): The slave device specified does not support setting the MAC address [ 404.875655][T13155] bond4: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 404.892772][T13155] bond4: (slave gre3): making interface the new active one [ 404.892840][T13155] gre3: entered promiscuous mode [ 404.939166][T13162] x_tables: duplicate underflow at hook 3 [ 404.955908][T13155] bond4: (slave gre3): Enslaving as an active interface with an up link [ 405.166626][T13172] xt_l2tp: invalid flags combination: 0 [ 405.184577][T13172] __nla_validate_parse: 17 callbacks suppressed [ 405.184601][T13172] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1779'. [ 405.184636][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1779'. [ 405.318331][T13168] v: renamed from veth0_vlan [ 405.396231][ T12] batadv1: left promiscuous mode [ 405.501926][T13181] x_tables: duplicate underflow at hook 1 [ 405.604423][T13190] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 405.656145][T13190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1782'. [ 405.984886][T13206] sctp: [Deprecated]: syz.3.1784 (pid 13206) Use of int in max_burst socket option deprecated. [ 405.984886][T13206] Use struct sctp_assoc_value instead [ 406.064749][T13219] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1788'. [ 406.314394][T13228] bridge0: port 1() entered blocking state [ 406.314488][T13228] bridge0: port 1() entered disabled state [ 406.314679][T13228] : entered allmulticast mode [ 406.355580][T13230] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1789'. [ 406.385843][T13228] : entered promiscuous mode [ 406.492605][T13230] hsr_slave_1 (unregistering): left promiscuous mode [ 406.609775][T13233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1791'. [ 406.609826][T13233] netlink: 'syz.2.1791': attribute type 30 has an invalid length. [ 406.609845][T13233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1791'. [ 406.655247][ T5280] v: left promiscuous mode [ 406.701487][ T5727] v: entered promiscuous mode [ 406.958753][T13246] netlink: 'syz.4.1795': attribute type 4 has an invalid length. [ 406.959614][T13253] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1796'. [ 407.220048][ T30] audit: type=1804 audit(1792361327.885:9): pid=13268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1799" name="/newroot/371/cgroup.controllers" dev="tmpfs" ino=1923 res=1 errno=0 [ 407.222810][ T30] audit: type=1800 audit(1792361327.885:10): pid=13268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1799" name="cgroup.controllers" dev="tmpfs" ino=1923 res=0 errno=0 [ 407.303722][T13280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1798'. [ 407.303753][T13280] openvswitch: netlink: Flow actions attr not present in new flow. [ 407.346306][ T30] audit: type=1800 audit(1792361328.015:11): pid=13281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1801" name="blkio.bfq.time" dev="tmpfs" ino=1889 res=0 errno=0 [ 407.471438][ T8122] syz1: Port: 1 Link DOWN [ 407.758014][T13297] xt_hashlimit: size too large, truncated to 1048576 [ 407.821691][T13307] 8021q: VLANs not supported on ip6_vti0 [ 407.884553][T13308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1802'. [ 408.459863][T13327] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 408.507136][T13325] 8021q: adding VLAN 0 to HW filter on device bond8 [ 408.565657][T13330] bridge0: port 1(ip6gretap0) entered blocking state [ 408.565855][T13330] bridge0: port 1(ip6gretap0) entered disabled state [ 408.566024][T13330] ip6gretap0: entered allmulticast mode [ 408.611616][T13322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.622131][T13322] bond8: (slave bond0): making interface the new active one [ 408.650311][T13322] bond8: (slave bond0): Enslaving as an active interface with an up link [ 408.839904][T13340] tipc: Enabling of bearer rejected, failed to enable media [ 409.058446][T13360] bridge10: entered promiscuous mode [ 409.058474][T13360] bridge10: entered allmulticast mode [ 409.086622][T13360] team0: Port device bridge10 added [ 409.163292][T13366] syzkaller1: entered promiscuous mode [ 409.163316][T13366] syzkaller1: entered allmulticast mode [ 409.167257][T13368] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 409.360968][T13379] netlink: 'syz.0.1821': attribute type 1 has an invalid length. [ 409.412876][T13379] 8021q: adding VLAN 0 to HW filter on device bond5 [ 409.665758][T13383] bond5: (slave veth13): Enslaving as an active interface with a down link [ 409.672048][T13379] bond5: (slave macvlan0): Enslaving as an active interface with a down link [ 409.703631][T13388] batman_adv: batadv0: Adding interface: macvlan5 [ 409.703656][T13388] batman_adv: batadv0: Interface activated: macvlan5 [ 409.800978][T13396] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 409.897389][T13397] syzkaller0: entered promiscuous mode [ 409.897414][T13397] syzkaller0: entered allmulticast mode [ 410.287261][T13419] batman_adv: batadv0: Adding interface: syzkaller0 [ 410.287323][T13419] batman_adv: batadv0: Interface activated: syzkaller0 [ 410.352807][T13405] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 410.451305][T13405] batman_adv: batadv0: Removing interface: syzkaller0 [ 410.517937][T13433] __nla_validate_parse: 6 callbacks suppressed [ 410.517963][T13433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1835'. [ 410.670512][T13444] ip_tables: iptables: counters copy to user failed while replacing table [ 411.432393][T13466] tipc: Resetting bearer [ 412.293718][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 414.216516][T13476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 414.239204][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1849'. [ 414.239232][T13517] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1849'. [ 414.239335][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1849'. [ 414.614111][T13534] syzkaller0: left promiscuous mode [ 414.614140][T13534] syzkaller0: left allmulticast mode [ 415.425715][T13554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1858'. [ 416.024594][T13583] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1863'. [ 416.028017][T13581] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1865'. [ 416.083403][T13581] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1865'. [ 416.291857][T13593] ip_tables: iptables: counters copy to user failed while replacing table [ 416.734671][T13615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1873'. [ 416.776458][T13621] ip_tables: iptables: counters copy to user failed while replacing table [ 416.795808][T13621] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1876'. [ 416.806347][T13621] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1876'. [ 417.067656][T13637] ip_tables: iptables: counters copy to user failed while replacing table [ 417.389513][ T53] Bluetooth: hci4: link tx timeout [ 417.389536][ T53] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 417.392639][ T53] Bluetooth: hci4: link tx timeout [ 417.392659][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 417.392890][ T53] Bluetooth: hci4: link tx timeout [ 417.392904][ T53] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 417.392919][ T53] Bluetooth: hci4: link tx timeout [ 417.392931][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 417.473923][T13642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1881'. [ 417.473961][T13642] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 417.516092][T13644] IPVS: ip_vs_edit_dest(): server weight less than zero [ 417.516197][ T278] IPVS: starting estimator thread 0... [ 417.604663][T13647] IPVS: using max 25 ests per chain, 60000 per kthread [ 417.932483][T13654] netlink: 'syz.1.1885': attribute type 4 has an invalid length. [ 418.018065][T13659] IPv6: addrconf: prefix option has invalid lifetime [ 418.137699][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1888'. [ 418.167673][T13665] 0ªX¹¦Dö»: entered promiscuous mode [ 418.167801][T13665] macvlan3: entered allmulticast mode [ 418.167819][T13665] 0ªX¹¦Dö»: entered allmulticast mode [ 418.564635][T13671] ip_tables: iptables: counters copy to user failed while replacing table [ 418.695933][T13674] netlink: Conntrack attr has 8 unknown bytes [ 418.695974][T13674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.078976][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1893'. [ 419.403725][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 419.621719][T13705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1900'. [ 419.655353][T13703] syzkaller0: entered promiscuous mode [ 419.655380][T13703] syzkaller0: entered allmulticast mode [ 419.662082][T13705] SET target dimension over the limit! [ 419.935784][T13717] ip_tables: iptables: counters copy to user failed while replacing table [ 420.148949][T13713] syzkaller0: entered promiscuous mode [ 420.148976][T13713] syzkaller0: entered allmulticast mode [ 420.213425][T13713] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 420.406010][T13737] pim6reg1: entered promiscuous mode [ 420.406037][T13737] pim6reg1: entered allmulticast mode [ 421.191478][T13775] __nla_validate_parse: 1 callbacks suppressed [ 421.191507][T13775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1909'. [ 421.326015][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1915'. [ 421.483812][ T4936] Bluetooth: hci4: command 0x0405 tx timeout [ 421.552726][T13793] ip_tables: iptables: counters copy to user failed while replacing table [ 422.065313][T13810] openvswitch: netlink: EtherType 300 is less than min 600 [ 422.072026][T13813] openvswitch: netlink: EtherType 300 is less than min 600 [ 422.413657][T13832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1924'. [ 422.694111][ T53] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 422.876673][T13846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1927'. [ 422.876716][T13846] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1927'. [ 422.876733][T13846] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1927'. [ 422.933215][T13823] virtio_blk virtio5: 1/0/0 default/read/poll queues [ 422.999580][T13823] virtio_blk virtio5: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 423.163209][ T5280] veth0_macvtap: left promiscuous mode [ 423.465305][T13858] ip_tables: iptables: counters copy to user failed while replacing table [ 423.772402][T13870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1930'. [ 423.785908][T13870] lo: entered promiscuous mode [ 423.786116][T13870] tunl0: entered promiscuous mode [ 423.786293][T13870] gre0: entered promiscuous mode [ 423.786421][T13870] 1ªî{X¹¦: entered promiscuous mode [ 423.786721][T13870] erspan0: entered promiscuous mode [ 423.786877][T13870] ip_vti0: entered promiscuous mode [ 423.787164][T13870] ip6_vti0: entered promiscuous mode [ 423.792542][T13870] sit0: entered promiscuous mode [ 423.792715][T13870] ip6tnl0: entered promiscuous mode [ 423.792846][T13870] ip6gre0: entered promiscuous mode [ 423.792977][T13870] syz_tun: entered promiscuous mode [ 423.793148][T13870] ip6gretap0: entered promiscuous mode [ 423.793274][T13870] bridge0: entered promiscuous mode [ 423.793425][T13870] vcan0: entered promiscuous mode [ 423.804750][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 423.946487][T13870] bond0: entered promiscuous mode [ 423.946515][T13870] bond_slave_0: entered promiscuous mode [ 423.946748][T13870] bond_slave_1: entered promiscuous mode [ 423.947071][T13870] veth0_to_bond: entered promiscuous mode [ 423.980035][T13870] team0: entered promiscuous mode [ 423.980061][T13870] team_slave_0: entered promiscuous mode [ 423.980294][T13870] team_slave_1: entered promiscuous mode [ 423.980721][T13870] dummy0: entered promiscuous mode [ 423.980890][T13870] nlmon0: entered promiscuous mode [ 423.981051][T13870] vxcan0: entered promiscuous mode [ 423.981206][T13870] vxcan1: entered promiscuous mode [ 423.981408][T13870] veth0: entered promiscuous mode [ 424.040151][T13870] veth1: entered promiscuous mode [ 424.040363][T13870] wg0: entered promiscuous mode [ 424.040524][T13870] wg2: entered promiscuous mode [ 424.040688][T13870] veth0_to_bridge: entered promiscuous mode [ 424.041029][T13870] veth1_to_bridge: entered promiscuous mode [ 424.088292][T13870] veth1_to_bond: entered promiscuous mode [ 424.088616][T13870] veth0_to_team: entered promiscuous mode [ 424.090751][T13870] veth1_to_team: entered promiscuous mode [ 424.091062][T13870] veth0_to_batadv: entered promiscuous mode [ 424.091259][T13870] batadv_slave_0: entered promiscuous mode [ 424.129165][T13870] xfrm0: entered promiscuous mode [ 424.129337][T13870] veth0_to_hsr: entered promiscuous mode [ 424.129677][T13870] hsr0: entered promiscuous mode [ 424.129837][T13870] veth1_virt_wifi: entered promiscuous mode [ 424.129997][T13870] veth0_virt_wifi: entered promiscuous mode [ 424.130187][T13870] virt_wifi0: entered promiscuous mode [ 424.169122][T13870] vlan0: entered promiscuous mode [ 424.183493][T13870] vlan1: entered promiscuous mode [ 424.190219][T13870] veth1_vlan: left allmulticast mode [ 424.216646][T13870] ipvlan0: entered promiscuous mode [ 424.218091][T13870] ipvlan1: entered promiscuous mode [ 424.220644][T13870] macsec0: entered promiscuous mode [ 424.220777][T13870] geneve0: entered promiscuous mode [ 424.220936][T13870] geneve1: entered promiscuous mode [ 424.221119][T13870] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 424.261579][T13870] mac80211_hwsim hwsim11 €Â: entered promiscuous mode [ 424.261798][T13870] mac80211_hwsim hwsim10 caif0: entered promiscuous mode [ 424.261992][T13870] bond1: entered promiscuous mode [ 424.262143][T13870] bond2: entered promiscuous mode [ 424.262301][T13870] vlan2: entered promiscuous mode [ 424.268905][T13870] bond3: entered promiscuous mode [ 424.302937][T13870] dummy1: entered promiscuous mode [ 424.303118][T13870] bridge1: entered promiscuous mode [ 424.303265][T13870] geneve2: entered promiscuous mode [ 424.328414][T13870] macvlan2: entered promiscuous mode [ 424.328696][T13870] bond4: entered promiscuous mode [ 424.328841][T13870] ipvlan2: entered promiscuous mode [ 424.329004][T13870] ipvlan3: entered promiscuous mode [ 424.329164][T13870] bond5: entered promiscuous mode [ 424.329180][T13870] bond6: entered promiscuous mode [ 424.329644][T13870] gretap0: entered promiscuous mode [ 424.329968][T13870] bridge3: entered promiscuous mode [ 424.330257][T13870] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 424.330402][T13870] vxlan0: entered promiscuous mode [ 424.330523][T13870] syztnl0: entered promiscuous mode [ 424.330647][T13870] vxlan1: entered promiscuous mode [ 424.330771][T13870] ip6tnl1: entered promiscuous mode [ 424.330893][T13870] bond7: entered promiscuous mode [ 424.331167][T13870] gre1: entered promiscuous mode [ 424.332218][T13870] syztnl1: entered promiscuous mode [ 424.432948][T13870] netdevsim netdevsim4 eth0: entered promiscuous mode [ 424.433156][T13870] netdevsim netdevsim4 eth1: entered promiscuous mode [ 424.433371][T13870] netdevsim netdevsim4 eth2: entered promiscuous mode [ 424.478521][T13870] netdevsim netdevsim4 eth3: entered promiscuous mode [ 424.541475][T13870] bridge4: entered promiscuous mode [ 424.612718][T13870] bond8: entered promiscuous mode [ 424.659320][T13870] bridge5: entered promiscuous mode [ 424.765689][T13873] sctp: [Deprecated]: syz.3.1931 (pid 13873) Use of struct sctp_assoc_value in delayed_ack socket option. [ 424.765689][T13873] Use struct sctp_sack_info instead [ 424.969881][T13875] rxe_eth0 speed is unknown, defaulting to 1000 [ 425.522940][T13906] IPVS: Scheduler module ip_vs_2r not found [ 426.093425][T13935] netlink: 'syz.4.1944': attribute type 1 has an invalid length. [ 426.177403][T13935] 8021q: adding VLAN 0 to HW filter on device bond9 [ 426.179642][T13875] wg2 speed is unknown, defaulting to 1000 [ 426.307878][T13935] macvlan3: entered promiscuous mode [ 426.307906][T13935] macvlan3: entered allmulticast mode [ 426.308286][T13935] bond9: entered allmulticast mode [ 426.308367][T13935] bond9: entered promiscuous mode [ 426.309260][T13935] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 426.312018][T13935] team0: Port device macvlan3 added [ 427.668836][T13939] kthread_run failed with err -4 [ 427.700846][T13937] bond9: (slave ip6gretap1): making interface the new active one [ 427.700876][T13937] ip6gretap1: entered promiscuous mode [ 427.701034][T13937] ip6gretap1: entered allmulticast mode [ 427.765725][T13937] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 427.877903][T13955] netlink: 'syz.3.1948': attribute type 1 has an invalid length. [ 428.012229][T13955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.036199][T13967] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1950'. [ 428.058587][T13966] tun0: tun_chr_ioctl cmd 1074025675 [ 428.058612][T13966] tun0: persist enabled [ 428.095175][T13967] netlink: 'syz.4.1950': attribute type 21 has an invalid length. [ 428.099914][T13966] tun0: tun_chr_ioctl cmd 1074025675 [ 428.099956][T13966] tun0: persist disabled [ 428.116558][T13966] ip_tables: iptables: counters copy to user failed while replacing table [ 428.224035][T13972] IPv6: NLM_F_CREATE should be specified when creating new route [ 428.224130][T13972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 428.224141][T13972] IPv6: NLM_F_CREATE should be set when creating new route [ 428.224182][T13972] IPv6: NLM_F_CREATE should be set when creating new route [ 428.224208][T13972] IPv6: NLM_F_CREATE should be set when creating new route [ 428.227241][T13972] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1949'. [ 428.284386][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 428.919417][T13989] x_tables: duplicate underflow at hook 1 [ 428.971644][T13993] netlink: 'syz.1.1958': attribute type 1 has an invalid length. [ 429.043102][T13997] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1957'. [ 429.129293][T13993] netlink: 'syz.1.1958': attribute type 1 has an invalid length. [ 429.180375][T13993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1958'. [ 429.217283][T13993] bridge4: entered promiscuous mode [ 429.217312][T13993] bridge4: entered allmulticast mode [ 429.236161][T13996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1958'. [ 429.420669][T14009] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1961'. [ 429.721645][T13996] bond11: (slave bridge4): making interface the new active one [ 429.733188][T13996] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 429.768884][T14011] tipc: Enabling of bearer rejected, already enabled [ 429.962072][T14020] tipc: Enabled bearer , priority 0 [ 429.968909][T14017] syzkaller0: entered promiscuous mode [ 429.968934][T14017] syzkaller0: entered allmulticast mode [ 429.994805][T14006] rxe_eth0 speed is unknown, defaulting to 1000 [ 430.026161][T14017] tipc: Resetting bearer [ 430.248684][T14012] tipc: Resetting bearer [ 430.288977][T14012] tipc: Disabling bearer [ 430.497555][T14045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1969'. [ 430.499522][T14045] openvswitch: ovs-dp0: Dropping previously announced user features [ 430.542843][T14006] wg2 speed is unknown, defaulting to 1000 [ 430.982888][T14053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1971'. [ 431.082822][T14058] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 432.104392][T14092] netlink: 'syz.4.1984': attribute type 21 has an invalid length. [ 432.104519][T14092] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1984'. [ 432.105076][T14092] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1984'. [ 432.262116][T14096] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 433.226676][T14121] ip_tables: iptables: counters copy to user failed while replacing table [ 433.584364][T14138] __nla_validate_parse: 1 callbacks suppressed [ 433.584388][T14138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1993'. [ 433.778364][T14141] netlink: 'syz.0.1994': attribute type 83 has an invalid length. [ 434.718489][T14190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2003'. [ 434.786148][T14183] vlan3: entered promiscuous mode [ 434.787825][T14192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2003'. [ 435.311153][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2004'. [ 435.311199][T14186] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2004'. [ 435.400390][T14186] bridge5: entered promiscuous mode [ 435.400416][T14186] bridge5: entered allmulticast mode [ 435.700251][T14222] x_tables: duplicate underflow at hook 1 [ 435.735798][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2010'. [ 435.755092][T14223] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 436.781187][T14255] netlink: 'syz.1.2018': attribute type 2 has an invalid length. [ 436.795639][T14255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2018'. [ 436.800648][T14255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.866507][T14258] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2019'. [ 437.092098][T14266] ip_tables: iptables: counters copy to user failed while replacing table [ 437.162715][T14264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2021'. [ 437.163015][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2021'. [ 438.298524][T14305] netlink: 'syz.4.2029': attribute type 1 has an invalid length. [ 438.298770][T14305] NCSI netlink: No device for ifindex 0 [ 438.388490][T14313] netlink: 'syz.4.2029': attribute type 1 has an invalid length. [ 438.446242][T14309] netlink: 'syz.0.2030': attribute type 1 has an invalid length. [ 438.626974][T14319] __nla_validate_parse: 3 callbacks suppressed [ 438.626999][T14319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2029'. [ 438.701108][T14313] 8021q: adding VLAN 0 to HW filter on device bond10 [ 438.721481][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'. [ 438.721723][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'. [ 438.721919][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'. [ 438.722145][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'. [ 438.722328][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'. [ 438.722539][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'. [ 438.722728][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'. [ 438.755265][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'. [ 438.813388][T14319] bond10: (slave gretap1): making interface the new active one [ 438.826463][T14319] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 439.052028][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'. [ 439.752035][T14363] netlink: 'syz.3.2042': attribute type 2 has an invalid length. [ 440.066870][T14376] netlink: 'syz.0.2046': attribute type 1 has an invalid length. [ 440.239250][T14382] netlink: 'syz.4.2048': attribute type 1 has an invalid length. [ 440.359682][T14382] 8021q: adding VLAN 0 to HW filter on device bond11 [ 440.449720][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.449785][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.488603][T14386] bond5: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 440.506427][T14386] bond5 (unregistering): Released all slaves [ 440.794718][T14396] bond11: (slave bridge6): making interface the new active one [ 440.800409][T14396] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 440.937838][T14404] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 441.729541][T14435] netlink: 'syz.1.2062': attribute type 1 has an invalid length. [ 441.886307][T14441] syzkaller0: Caught tx_queue_len zero misconfig [ 442.175089][T14455] xt_nat: multiple ranges no longer supported [ 442.660185][T14476] openvswitch: netlink: Key type 10246 is out of range max 32 [ 442.879611][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 443.058058][T14490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.497933][T14499] bridge0: port 3(vlan3) entered blocking state [ 443.498065][T14499] bridge0: port 3(vlan3) entered disabled state [ 443.498224][T14499] vlan3: entered allmulticast mode [ 443.498242][T14499] geneve0: entered allmulticast mode [ 443.571090][T14499] vlan3: entered promiscuous mode [ 443.960255][T14508] __nla_validate_parse: 35 callbacks suppressed [ 443.960280][T14508] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2076'. [ 443.960299][T14508] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2076'. [ 443.960317][T14508] netlink: 'syz.2.2076': attribute type 4 has an invalid length. [ 444.002137][T14508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2076'. [ 444.874394][T14518] x_tables: duplicate underflow at hook 2 [ 445.444469][T14480] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 445.451925][T14485] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 445.934945][T14535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2083'. [ 446.446253][T14567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2089'. [ 446.514407][T14568] erspan0: entered promiscuous mode [ 446.533155][T14568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2089'. [ 448.747221][T14533] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.956082][T14577] netlink: 'syz.2.2091': attribute type 6 has an invalid length. [ 448.956395][T14578] netlink: 'syz.2.2091': attribute type 6 has an invalid length. [ 449.393795][T14597] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2097'. [ 449.393823][T14597] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2097'. [ 449.515774][T14597] netlink: 'syz.3.2097': attribute type 3 has an invalid length. [ 449.515805][T14597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2097'. [ 449.702248][T14607] can: request_module (can-proto-0) failed. [ 450.322357][T14628] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 450.368170][T14627] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 450.401234][T14635] bond12: entered allmulticast mode [ 450.446555][T14637] bond12: (slave wireguard0): The slave device specified does not support setting the MAC address [ 450.447211][T14637] bond12: (slave wireguard0): Error -95 calling set_mac_address [ 451.181913][T14672] syzkaller0: entered promiscuous mode [ 451.181938][T14672] syzkaller0: entered allmulticast mode [ 452.549781][T14715] ip_tables: iptables: counters copy to user failed while replacing table [ 452.799584][T14717] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2122'. [ 452.832765][T14719] af_packet: tpacket_rcv: packet too big, clamped from 2916 to 4294967286. macoff=82 [ 453.112054][T14730] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2126'. [ 453.149664][T14733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2124'. [ 453.174379][T14734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.182859][T14732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2127'. [ 453.498713][T14736] bond7: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 453.501334][T14736] bond7: (slave ip6tnl2): Error -95 calling set_mac_address [ 453.540910][T14752] netlink: 'syz.3.2131': attribute type 1 has an invalid length. [ 453.636613][T14752] 8021q: adding VLAN 0 to HW filter on device bond5 [ 453.690969][T14757] bond2: (slave veth0_to_bond): Releasing backup interface [ 453.690997][T14757] bond2: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 453.756101][T14757] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 453.952032][T14765] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2132'. [ 454.378520][T14784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2137'. [ 454.494520][T14787] gretap0: entered promiscuous mode [ 454.881385][T14812] netlink: 'syz.3.2145': attribute type 1 has an invalid length. [ 454.954391][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2144'. [ 454.954619][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2144'. [ 454.954845][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2144'. [ 454.955029][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2144'. [ 454.955210][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2144'. [ 454.955401][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2144'. [ 454.955658][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2144'. [ 454.955842][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2144'. [ 454.956079][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2144'. [ 454.956331][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2144'. [ 455.792065][T14808] 0ªX¹¦Dö»: left allmulticast mode [ 455.843711][ T152] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.843752][ T152] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 39925 - 0 [ 455.843796][ T152] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.843824][ T152] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 39925 - 0 [ 455.843862][ T152] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.843890][ T152] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 39925 - 0 [ 455.845056][T14812] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 455.874815][ T40] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.874915][ T40] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 39925 - 0 [ 456.218657][T14855] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 457.140989][T14903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.221036][T14903] netlink: zone id is out of range [ 457.221056][T14903] netlink: zone id is out of range [ 457.221066][T14903] netlink: zone id is out of range [ 457.221084][T14903] netlink: zone id is out of range [ 457.221093][T14903] netlink: zone id is out of range [ 457.221102][T14903] netlink: zone id is out of range [ 457.221451][T14903] netlink: zone id is out of range [ 457.277657][T14903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.968385][T14958] IPVS: length: 15 != 8 [ 458.502462][T14985] 8021q: adding VLAN 0 to HW filter on device bond14 [ 459.987523][T15061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.091119][T15061] net_ratelimit: 1709 callbacks suppressed [ 460.091146][T15061] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 460.257596][T15062] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 460.258524][ T8142] syz1: Port: 1 Link ACTIVE [ 460.295675][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 460.394945][T15067] tipc: Enabling of bearer rejected, already enabled [ 460.780301][T15084] __nla_validate_parse: 71 callbacks suppressed [ 460.780333][T15084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2188'. [ 460.780370][T15084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2188'. [ 460.963958][T15088] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 460.999077][T15088] bond6 (unregistering): Released all slaves [ 461.965003][T15133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2196'. [ 462.246220][T15141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2197'. [ 462.315756][T15140] syzkaller0: entered promiscuous mode [ 462.315784][T15140] syzkaller0: entered allmulticast mode [ 462.547624][T15152] bond8: option mode: unable to set because the bond device has slaves [ 462.581739][T15156] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2202'. [ 462.586648][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2201'. [ 462.586714][T15152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2201'. [ 462.771877][ T53] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 462.811068][T15154] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2201'. [ 462.827474][T15152] bond8 (unregistering): (slave bond0): Releasing active interface [ 462.827504][T15152] bond0: left promiscuous mode [ 462.830779][T15152] bond8 (unregistering): Released all slaves [ 463.014516][T15176] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2207'. [ 463.014544][T15176] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2207'. [ 463.131731][T15178] ip6gretap0: left allmulticast mode [ 463.132006][T15178] bridge0: port 1(ip6gretap0) entered disabled state [ 463.182984][T15178] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 463.254358][T15179] team0: Mode changed to "broadcast" [ 463.276600][T15178] tipc: Enabled bearer , priority 0 [ 463.331918][T15187] openvswitch: netlink: Duplicate key (type 3). [ 463.790568][T15209] vlan2: entered promiscuous mode [ 463.790595][T15209] veth0: entered promiscuous mode [ 463.908254][T15215] tipc: Enabled bearer , priority 0 [ 463.919293][T15215] syzkaller0: entered promiscuous mode [ 463.919360][T15215] syzkaller0: entered allmulticast mode [ 463.961630][T15215] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 464.037117][T15215] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 464.059542][T15215] tipc: Resetting bearer [ 464.090712][T15212] tipc: Resetting bearer [ 464.126281][T15232] netlink: 'syz.1.2222': attribute type 30 has an invalid length. [ 464.148070][T15212] tipc: Disabling bearer [ 464.359213][T15240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.390502][T15240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.431040][ T8122] tipc: Node number set to 2015415400 [ 464.590274][T15247] xt_IDLETIMER: timeout value is zero [ 464.736643][T15249] netlink: 'syz.3.2228': attribute type 1 has an invalid length. [ 464.813597][T15249] 8021q: adding VLAN 0 to HW filter on device bond6 [ 465.249241][T15277] IPv6: NLM_F_CREATE should be specified when creating new route [ 465.249340][T15277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 465.249352][T15277] IPv6: NLM_F_CREATE should be set when creating new route [ 465.249410][T15277] IPv6: NLM_F_CREATE should be set when creating new route [ 465.249435][T15277] IPv6: NLM_F_CREATE should be set when creating new route [ 465.806725][T15296] __nla_validate_parse: 10 callbacks suppressed [ 465.806749][T15296] netlink: 1260 bytes leftover after parsing attributes in process `syz.4.2239'. [ 465.955751][T15304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2241'. [ 466.310529][T15316] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2245'. [ 466.420391][T15321] netlink: 4612 bytes leftover after parsing attributes in process `syz.3.2247'. [ 466.462550][T15319] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 466.490022][T15319] bond2: entered allmulticast mode [ 466.490568][T15325] netlink: 4612 bytes leftover after parsing attributes in process `syz.3.2247'. [ 466.627583][T15333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2248'. [ 466.627610][T15333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2248'. [ 466.670354][T15323] 8021q: adding VLAN 0 to HW filter on device bond8 [ 466.707622][T15333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.721466][T15333] bond8: (slave bond0): making interface the new active one [ 466.737057][T15333] bond8: (slave bond0): Enslaving as an active interface with an up link [ 466.835524][T15333] netlink: 'syz.4.2248': attribute type 2 has an invalid length. [ 466.835554][T15333] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2248'. [ 466.878589][T15323] bond8 (unregistering): (slave bond0): Releasing active interface [ 466.933285][T15323] bond8 (unregistering): Released all slaves [ 467.055699][T15333] : entered promiscuous mode [ 467.148966][T15353] netlink: 'syz.3.2253': attribute type 4 has an invalid length. [ 467.148997][T15353] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2253'. [ 467.186815][T15344] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.192053][T15357] ip_tables: iptables: counters copy to user failed while replacing table [ 467.259002][T15362] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2255'. [ 467.333247][T15353] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 467.361151][T15364] openvswitch: netlink: Multiple metadata blocks provided [ 467.608959][T15367] Bluetooth: hci0: unsupported parameter 5135 [ 467.608986][T15367] Bluetooth: hci0: unsupported parameter 8192 [ 467.609104][T15367] Bluetooth: hci0: unsupported parameter 5135 [ 467.609120][T15367] Bluetooth: hci0: unsupported parameter 8192 [ 467.771938][T15340] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.795526][T15370] batadv_slave_1: entered promiscuous mode [ 467.880963][T15374] sctp: [Deprecated]: syz.2.2259 (pid 15374) Use of int in max_burst socket option. [ 467.880963][T15374] Use struct sctp_assoc_value instead [ 467.927611][T15340] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.047006][T15340] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.708278][T15369] batadv_slave_1: left promiscuous mode [ 468.724405][ T45] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.774800][ T45] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.792961][ T1404] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.934454][ T278] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.875413][T15434] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20000 [ 470.050495][T15442] openvswitch: netlink: Unexpected mask (mask=100000090, allowed=100010058) [ 470.649114][T15469] tipc: Enabling of bearer rejected, failed to enable media [ 470.687928][T15469] netlink: 'syz.1.2281': attribute type 1 has an invalid length. [ 470.889223][T15475] __nla_validate_parse: 41 callbacks suppressed [ 470.889249][T15475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2282'. [ 470.986014][T15477] netlink: 'syz.0.2283': attribute type 8 has an invalid length. [ 471.057855][T15477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2283'. [ 471.267061][T15477] veth15: entered allmulticast mode [ 471.308481][T15488] ipt_rpfilter: unknown options [ 471.317974][T15488] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 471.778004][T15505] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2287'. [ 471.778212][T15505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2287'. [ 471.881233][T15507] bond14: option mode: unable to set because the bond device is up [ 471.916840][T15507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2288'. [ 471.916868][T15507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2288'. [ 471.917142][T15509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2288'. [ 471.917160][T15509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2288'. [ 472.196365][T15517] syzkaller0: entered promiscuous mode [ 472.196392][T15517] syzkaller0: entered allmulticast mode [ 472.436174][T15523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2293'. [ 472.524696][T15533] SET target dimension over the limit! [ 472.881856][T15551] netlink: 'syz.2.2296': attribute type 1 has an invalid length. [ 473.008403][T15551] 8021q: adding VLAN 0 to HW filter on device bond8 [ 473.062941][T15553] bridge0: port 1(ipvlan2) entered blocking state [ 473.066970][T15553] bridge0: port 1(ipvlan2) entered disabled state [ 473.067324][T15553] ipvlan2: entered allmulticast mode [ 473.067343][T15553] bridge0: entered allmulticast mode [ 473.104083][T15553] ipvlan2: left allmulticast mode [ 473.104108][T15553] bridge0: left allmulticast mode [ 473.444739][T15569] syzkaller1: entered promiscuous mode [ 473.444766][T15569] syzkaller1: entered allmulticast mode [ 474.126609][T15607] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2306'. [ 474.321337][T15617] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 474.468255][ T5727] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 474.556926][T15617] veth1_vlan: left promiscuous mode [ 474.570879][T15617] veth0_vlan: left promiscuous mode [ 474.586901][T15617] veth0_vlan: entered promiscuous mode [ 474.603840][T15617] veth1_vlan: entered promiscuous mode [ 474.635774][T15617] veth1_macvtap: left promiscuous mode [ 474.641907][T15617] veth0_macvtap: left promiscuous mode [ 474.656685][T15617] veth0_macvtap: entered promiscuous mode [ 474.660083][T15617] veth1_macvtap: entered promiscuous mode [ 474.686126][T15617] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 474.779458][T15623] netlink: 'syz.1.2309': attribute type 25 has an invalid length. [ 474.779486][T15623] netlink: 'syz.1.2309': attribute type 3 has an invalid length. [ 474.857526][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.857582][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.857619][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.857655][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.043236][ T5727] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 476.019761][T15677] gtp0: entered promiscuous mode [ 476.019786][T15677] gtp0: entered allmulticast mode [ 476.130333][T15682] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 476.366893][T15697] __nla_validate_parse: 4 callbacks suppressed [ 476.366921][T15697] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2324'. [ 476.566569][T15699] syzkaller1: entered promiscuous mode [ 476.566596][T15699] syzkaller1: entered allmulticast mode [ 476.866561][T15714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2328'. [ 477.238911][T15718] netlink: 'syz.4.2329': attribute type 21 has an invalid length. [ 477.238939][T15718] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2329'. [ 477.394561][T15714] bond0: ARP target 0.0.0.2 is already present [ 477.394612][T15714] bond0: option arp_ip_target: invalid value (33554432) [ 477.394973][T15718] netlink: 'syz.4.2329': attribute type 4 has an invalid length. [ 477.394987][T15718] netlink: 'syz.4.2329': attribute type 5 has an invalid length. [ 477.394997][T15718] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2329'. [ 477.690201][T15729] netlink: set zone limit has 4 unknown bytes [ 477.718735][T15733] netlink: set zone limit has 4 unknown bytes [ 477.812957][T15738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2330'. [ 477.877501][T15745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2330'. [ 478.621615][T15774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2343'. [ 478.756851][T15778] Bluetooth: MGMT ver 1.23 [ 479.166053][T15788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.211216][T15795] netlink: 'syz.3.2351': attribute type 1 has an invalid length. [ 479.252686][T15795] 8021q: adding VLAN 0 to HW filter on device bond8 [ 479.342146][T15801] bond8: entered allmulticast mode [ 479.343113][T15801] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2351'. [ 479.416657][T15807] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2353'. [ 479.521435][T15801] bond8: (slave ip6gretap2): making interface the new active one [ 479.521463][T15801] ip6gretap2: entered allmulticast mode [ 479.548748][T15801] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 479.643367][T15820] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.027555][T15829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2357'. [ 480.135785][T15829] netlink: 'syz.2.2357': attribute type 10 has an invalid length. [ 480.228342][T15828] bond9: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 480.247881][T15828] bond9 (unregistering): Released all slaves [ 480.412878][T15829] team0 (unregistering): Port device team_slave_0 removed [ 480.461821][T15829] team0 (unregistering): Port device team_slave_1 removed [ 480.487656][T15829] team0 (unregistering): Port device bridge10 removed [ 480.698444][T15857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.923346][T15871] ipvlan2: entered promiscuous mode [ 481.199682][ T8122] infiniband syz1: ib_query_port failed (-19) [ 481.242288][T15880] ipvlan2: entered promiscuous mode [ 481.261850][ T45] smbdirect: ib_dev[syz1] removed [ 481.636739][T15898] lo: entered allmulticast mode [ 481.669892][T15896] lo: left allmulticast mode [ 481.801051][T15906] __nla_validate_parse: 2 callbacks suppressed [ 481.801073][T15906] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2377'. [ 482.618032][T15941] tipc: Enabling of bearer rejected, failed to enable media [ 483.013316][T15959] netlink: 'syz.0.2393': attribute type 1 has an invalid length. [ 483.069580][T15961] netlink: 'syz.4.2394': attribute type 1 has an invalid length. [ 483.124760][T15959] 8021q: adding VLAN 0 to HW filter on device bond6 [ 483.160809][T15964] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 483.258516][T15964] bond6: (slave wlan1): Enslaving as an active interface with a down link [ 483.447144][T15961] 8021q: adding VLAN 0 to HW filter on device bond8 [ 483.566771][T15963] bond6: (slave veth17): Enslaving as an active interface with a down link [ 483.631985][T15966] bond8: (slave geneve3): making interface the new active one [ 483.656256][T15966] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 483.715723][ T1404] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.716259][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.716584][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.716632][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.185284][T15992] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.285489][T15992] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.749609][T15992] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.962995][T16017] 8021q: adding VLAN 0 to HW filter on device bond7 [ 485.009310][T16024] netlink: 'syz.3.2408': attribute type 10 has an invalid length. [ 485.013146][T16017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2405'. [ 485.013172][T16017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2405'. [ 485.013605][T15992] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.073704][T16025] netlink: 'syz.3.2408': attribute type 10 has an invalid length. [ 485.092130][T16024] team0: Port device dummy0 added [ 485.123204][T16022] bond7 (unregistering): Released all slaves [ 485.164469][T16028] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2405'. [ 485.265761][T16025] team0: Port device dummy0 removed [ 485.266768][T16027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2408'. [ 485.556015][ T152] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.812675][ T45] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.822827][ T45] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.954304][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.074918][T16047] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2413'. [ 486.229240][T16049] netlink: 'syz.0.2414': attribute type 1 has an invalid length. [ 486.229268][T16049] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 486.706604][T16062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2419'. [ 486.735145][T16062] netlink: Conntrack attr has 8 unknown bytes [ 486.735186][T16062] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.768427][T16062] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2419'. [ 486.772576][T16062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.818785][T16064] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2420'. [ 487.092106][T16071] netlink: 'syz.2.2422': attribute type 12 has an invalid length. [ 487.189690][T16076] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2423'. [ 487.190784][T16076] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2423'. [ 487.300546][T16090] wg1: renamed from bridge0 [ 488.001188][T16077] workqueue: Failed to create a rescuer kthread for wq "nfc20_nci_rx_wq": -EINTR [ 488.356642][T16110] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 488.512618][T16165] x_tables: unsorted entry at hook 3 [ 488.513363][T16165] tipc: New replicast peer: 172.20.20.187 [ 488.552559][T16165] tipc: Enabled bearer , priority 10 [ 488.718021][T16169] x_tables: duplicate underflow at hook 1 [ 488.758069][T16169] vlan2: entered promiscuous mode [ 488.758095][T16169] bond0: entered promiscuous mode [ 488.758111][T16169] bond_slave_0: entered promiscuous mode [ 488.758332][T16169] bond_slave_1: entered promiscuous mode [ 489.198024][T16176] pimreg: entered allmulticast mode [ 489.237081][T16184] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2436'. [ 489.239534][T16184] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2436'. [ 489.280510][T16183] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2436'. [ 489.280816][T16184] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2436'. [ 489.281027][T16184] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2436'. [ 489.281242][T16184] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2436'. [ 489.281501][T16184] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2436'. [ 489.903260][T16191] bond9: option arp_validate: invalid value (1048579) [ 489.912154][T16191] bond9 (unregistering): Released all slaves [ 491.643771][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 491.876076][T16283] tipc: Enabled bearer , priority 0 [ 491.964798][T16271] tipc: Resetting bearer [ 492.139911][T16287] __nla_validate_parse: 30 callbacks suppressed [ 492.139935][T16287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2457'. [ 492.139965][T16287] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2457'. [ 492.193000][T16281] syzkaller0: entered promiscuous mode [ 492.193031][T16281] syzkaller0: entered allmulticast mode [ 492.240361][T16290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2456'. [ 492.267651][T16287] geneve5: entered promiscuous mode [ 492.267705][T16287] geneve5: entered allmulticast mode [ 492.319837][T16270] tipc: Resetting bearer [ 492.971126][T16310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2464'. [ 493.035119][T16310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2464'. [ 493.103051][T16320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2463'. [ 493.161466][T16322] netlink: 'syz.1.2465': attribute type 58 has an invalid length. [ 493.161492][T16322] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2465'. [ 493.249948][T16325] netlink: 'syz.1.2465': attribute type 58 has an invalid length. [ 493.249977][T16325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2465'. [ 498.532354][T16270] tipc: Disabling bearer [ 498.727943][T16352] syzkaller1: entered allmulticast mode [ 498.966447][T16369] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2473'. [ 498.969877][T16369] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2473'. [ 499.038239][T16373] IPVS: Error connecting to the multicast addr [ 499.048801][T16372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2471'. [ 499.569697][T16388] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 499.570778][T16388] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2479'. [ 499.819480][T16392] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2481'. [ 499.819525][T16392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2481'. [ 500.424693][T16414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2489'. [ 500.458312][T16414] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2489'. [ 500.912020][T16433] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2493'. [ 500.912238][T16433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2493'. [ 501.128289][T16444] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 501.695721][T16474] Bluetooth: hci0: unsupported parameter 5135 [ 501.695749][T16474] Bluetooth: hci0: unsupported parameter 8192 [ 501.695764][T16474] Bluetooth: hci0: unsupported parameter 5135 [ 501.695778][T16474] Bluetooth: hci0: unsupported parameter 8192 [ 501.886525][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.886586][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.240478][T16523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 503.486714][T16534] netlink: 'syz.1.2519': attribute type 1 has an invalid length. [ 503.672584][T16537] x_tables: duplicate underflow at hook 3 [ 503.706555][T16537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.035539][T16554] __nla_validate_parse: 8 callbacks suppressed [ 504.035563][T16554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2522'. [ 504.803879][T16572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2529'. [ 504.964535][T16574] syzkaller0: entered promiscuous mode [ 504.964560][T16574] syzkaller0: entered allmulticast mode [ 505.232806][T16577] netlink: 'syz.0.2524': attribute type 11 has an invalid length. [ 505.232833][T16577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2524'. [ 505.295518][T16577] netlink: 'syz.0.2524': attribute type 11 has an invalid length. [ 505.295543][T16577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2524'. [ 505.537556][T16595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 506.601972][T16626] openvswitch: netlink: EtherType 50a is less than min 600 [ 507.027292][T16639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2540'. [ 507.329035][ T45] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x30 [ 507.369368][T16648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.371953][T16648] xt_CONNSECMARK: invalid mode: 254 [ 508.100206][T16662] netlink: 2108 bytes leftover after parsing attributes in process `syz.0.2547'. [ 508.556941][T16669] ip6erspan0: entered allmulticast mode [ 508.570901][T16669] ip_tables: iptables: counters copy to user failed while replacing table [ 508.613531][ T5629] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 509.925444][T16642] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 510.258279][T16690] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2554'. [ 510.393092][T16700] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2552'. [ 510.430479][T16687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2553'. [ 510.493732][T16692] vlan4: entered allmulticast mode [ 510.506092][T16692] bridge_slave_0: entered allmulticast mode [ 510.568350][T16706] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 510.876523][T16692] vlan4: entered allmulticast mode [ 511.028729][T16714] geneve4: entered allmulticast mode [ 511.084412][T16716] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 511.084791][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2557'. [ 511.085016][T16716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2557'. [ 511.208864][T16716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2557'. [ 511.569237][T16727] openvswitch: netlink: Key type 2047 is out of range max 32 [ 511.859094][T16743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2564'. [ 511.891727][T16743] ip6tnl3: entered allmulticast mode [ 511.915855][T16743] ip6tnl3: left allmulticast mode [ 512.055923][T16747] ip6tnl0: left promiscuous mode [ 512.174361][T16751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2566'. [ 512.212697][T16755] netlink: 'syz.4.2569': attribute type 1 has an invalid length. [ 512.269838][T16754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2567'. [ 512.637309][T16766] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 512.877363][T16782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2576'. [ 512.940660][T16782] 8021q: adding VLAN 0 to HW filter on device bond16 [ 512.982359][T16791] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 513.010347][T16791] bond16: (slave batadv1): Enslaving as an active interface with an up link [ 513.108306][T16802] netlink: 'syz.4.2580': attribute type 2 has an invalid length. [ 513.245231][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 513.272911][T16806] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 513.520876][T16821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.521380][T16821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.521833][T16821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.559630][T16821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.560118][T16821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.560572][T16821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.594869][T16821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.595342][T16821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.595873][T16821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.631550][T16821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.632080][T16821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.632630][T16821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.633089][T16821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.661024][T16821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.670283][T16821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.690155][T16821] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.872125][T16828] netlink: 'syz.0.2588': attribute type 16 has an invalid length. [ 513.872151][T16828] netlink: 'syz.0.2588': attribute type 17 has an invalid length. [ 513.898806][T16828] gre0: left promiscuous mode [ 513.909839][T16828] 0ªX¹¦Dö»: left promiscuous mode [ 513.951637][T16826] nbd2: detected capacity change from 0 to 63 [ 513.976906][ T2023] [ 513.979334][ T2023] ====================================================== [ 513.986396][ T2023] WARNING: possible circular locking dependency detected [ 513.993505][ T2023] syzkaller #0 Not tainted [ 513.997964][ T2023] ------------------------------------------------------ [ 514.005017][ T2023] kworker/0:1H/2023 is trying to acquire lock: [ 514.011209][ T2023] ffff888079ecca68 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0xff0 [ 514.020448][ T2023] [ 514.020448][ T2023] but task is already holding lock: [ 514.027853][ T2023] ffff888027ac7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 514.036366][ T2023] [ 514.036366][ T2023] which lock already depends on the new lock. [ 514.036366][ T2023] [ 514.046816][ T2023] [ 514.046816][ T2023] the existing dependency chain (in reverse order) is: [ 514.055865][ T2023] [ 514.055865][ T2023] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 514.063136][ T2023] __mutex_lock+0x19d/0x1550 [ 514.068303][ T2023] nbd_queue_rq+0xc1/0xff0 [ 514.073293][ T2023] blk_mq_dispatch_rq_list+0x499/0x1990 [ 514.079521][ T2023] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 514.086489][ T2023] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 514.093050][ T2023] blk_mq_run_work_fn+0x16c/0x300 [ 514.098646][ T2023] process_scheduled_works+0xc3d/0x1630 [ 514.104776][ T2023] worker_thread+0xa47/0xfb0 [ 514.109947][ T2023] kthread+0x38b/0x480 [ 514.114586][ T2023] ret_from_fork+0x514/0xb70 [ 514.119755][ T2023] ret_from_fork_asm+0x1a/0x30 [ 514.125094][ T2023] [ 514.125094][ T2023] -> #5 (set->srcu){.+.+}-{0:0}: [ 514.132275][ T2023] __synchronize_srcu+0xc9/0x2f0 [ 514.137790][ T2023] elevator_switch+0x1e8/0x7b0 [ 514.143249][ T2023] elevator_change+0x2fa/0x480 [ 514.148644][ T2023] elevator_set_default+0x375/0x440 [ 514.154424][ T2023] blk_register_queue+0x3f3/0x4e0 [ 514.160107][ T2023] __add_disk+0x6b8/0xdb0 [ 514.165001][ T2023] add_disk_fwnode+0x100/0x3a0 [ 514.170345][ T2023] nbd_dev_add+0x733/0xb60 [ 514.175330][ T2023] nbd_init+0x168/0x1f0 [ 514.180055][ T2023] do_one_initcall+0x250/0x870 [ 514.185441][ T2023] do_initcall_level+0x10a/0x1a0 [ 514.190963][ T2023] do_initcalls+0x59/0xa0 [ 514.195870][ T2023] kernel_init_freeable+0x29d/0x3e0 [ 514.201653][ T2023] kernel_init+0x22/0x1d0 [ 514.206600][ T2023] ret_from_fork+0x514/0xb70 [ 514.211766][ T2023] ret_from_fork_asm+0x1a/0x30 [ 514.217110][ T2023] [ 514.217110][ T2023] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 514.224987][ T2023] __mutex_lock+0x19d/0x1550 [ 514.230156][ T2023] elevator_change+0x1af/0x480 [ 514.235496][ T2023] elevator_set_none+0xb5/0x140 [ 514.240926][ T2023] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 514.247314][ T2023] nbd_start_device+0x189/0xb30 [ 514.252739][ T2023] nbd_genl_connect+0x167d/0x1cd0 [ 514.258338][ T2023] genl_family_rcv_msg_doit+0x233/0x340 [ 514.264462][ T2023] genl_rcv_msg+0x614/0x7a0 [ 514.269541][ T2023] netlink_rcv_skb+0x226/0x4a0 [ 514.274876][ T2023] genl_rcv+0x28/0x40 [ 514.279439][ T2023] netlink_unicast+0x8ef/0xa80 [ 514.284831][ T2023] netlink_sendmsg+0x813/0xb40 [ 514.290199][ T2023] sock_sendmsg_nosec+0x14e/0x190 [ 514.295799][ T2023] ____sys_sendmsg+0x54e/0x850 [ 514.301138][ T2023] ___sys_sendmsg+0x2a5/0x360 [ 514.306395][ T2023] __x64_sys_sendmsg+0x1b1/0x290 [ 514.311927][ T2023] do_syscall_64+0x166/0x520 [ 514.317097][ T2023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.323559][ T2023] [ 514.323559][ T2023] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 514.332239][ T2023] blk_alloc_queue+0x544/0x690 [ 514.337601][ T2023] __blk_mq_alloc_disk+0x194/0x390 [ 514.343292][ T2023] nbd_dev_add+0x494/0xb60 [ 514.348283][ T2023] nbd_init+0x168/0x1f0 [ 514.353011][ T2023] do_one_initcall+0x250/0x870 [ 514.358353][ T2023] do_initcall_level+0x10a/0x1a0 [ 514.363866][ T2023] do_initcalls+0x59/0xa0 [ 514.368778][ T2023] kernel_init_freeable+0x29d/0x3e0 [ 514.374550][ T2023] kernel_init+0x22/0x1d0 [ 514.379449][ T2023] ret_from_fork+0x514/0xb70 [ 514.384620][ T2023] ret_from_fork_asm+0x1a/0x30 [ 514.389965][ T2023] [ 514.389965][ T2023] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 514.397230][ T2023] fs_reclaim_acquire+0x71/0x100 [ 514.402738][ T2023] __kmalloc_cache_noprof+0x61/0x600 [ 514.408593][ T2023] __request_module+0x2d0/0x630 [ 514.414022][ T2023] tcp_set_ulp+0x263/0x610 [ 514.419010][ T2023] do_tcp_setsockopt+0x35c/0x1f80 [ 514.424611][ T2023] do_sock_setsockopt+0x17c/0x1b0 [ 514.430260][ T2023] __x64_sys_setsockopt+0x13d/0x1b0 [ 514.436039][ T2023] do_syscall_64+0x166/0x520 [ 514.441210][ T2023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.447675][ T2023] [ 514.447675][ T2023] -> #1 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 514.455811][ T2023] lock_sock_nested+0x41/0x100 [ 514.457203][T16828] 8021q: adding VLAN 0 to HW filter on device  [ 514.467505][ T2023] inet_shutdown+0x6a/0x390 [ 514.472600][ T2023] nbd_mark_nsock_dead+0x2cb/0x550 [ 514.478344][ T2023] sock_shutdown+0x15e/0x260 [ 514.483512][ T2023] nbd_clear_sock+0x24/0x170 [ 514.488791][ T2023] nbd_config_put+0x477/0x7e0 [ 514.494114][ T2023] nbd_genl_connect+0x19b8/0x1cd0 [ 514.499714][ T2023] genl_family_rcv_msg_doit+0x233/0x340 [ 514.505848][ T2023] genl_rcv_msg+0x614/0x7a0 [ 514.510937][ T2023] netlink_rcv_skb+0x226/0x4a0 [ 514.516271][ T2023] genl_rcv+0x28/0x40 [ 514.520828][ T2023] netlink_unicast+0x8ef/0xa80 [ 514.526166][ T2023] netlink_sendmsg+0x813/0xb40 [ 514.531499][ T2023] sock_sendmsg_nosec+0x14e/0x190 [ 514.537096][ T2023] ____sys_sendmsg+0x54e/0x850 [ 514.542438][ T2023] ___sys_sendmsg+0x2a5/0x360 [ 514.547696][ T2023] __x64_sys_sendmsg+0x1b1/0x290 [ 514.547836][ T5629] block nbd2: Receive control failed (result -32) [ 514.559637][ T2023] do_syscall_64+0x166/0x520 [ 514.564801][ T2023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.571278][ T2023] [ 514.571278][ T2023] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 514.579020][ T2023] __lock_acquire+0x164c/0x2de0 [ 514.584453][ T2023] lock_acquire+0x115/0x350 [ 514.589523][ T2023] __mutex_lock+0x19d/0x1550 [ 514.594692][ T2023] nbd_queue_rq+0x373/0xff0 [ 514.599775][ T2023] blk_mq_dispatch_rq_list+0x499/0x1990 [ 514.605929][ T2023] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 514.612836][ T2023] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 514.619399][ T2023] blk_mq_run_work_fn+0x16c/0x300 [ 514.624999][ T2023] process_scheduled_works+0xc3d/0x1630 [ 514.631132][ T2023] worker_thread+0xa47/0xfb0 [ 514.636298][ T2023] kthread+0x38b/0x480 [ 514.640939][ T2023] ret_from_fork+0x514/0xb70 [ 514.646114][ T2023] ret_from_fork_asm+0x1a/0x30 [ 514.651461][ T2023] [ 514.651461][ T2023] other info that might help us debug this: [ 514.651461][ T2023] [ 514.661729][ T2023] Chain exists of: [ 514.661729][ T2023] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 514.661729][ T2023] [ 514.673892][ T2023] Possible unsafe locking scenario: [ 514.673892][ T2023] [ 514.681384][ T2023] CPU0 CPU1 [ 514.686789][ T2023] ---- ---- [ 514.692206][ T2023] lock(&cmd->lock); [ 514.696233][ T2023] lock(set->srcu); [ 514.702698][ T2023] lock(&cmd->lock); [ 514.709254][ T2023] lock(&nsock->tx_lock); [ 514.713728][ T2023] [ 514.713728][ T2023] *** DEADLOCK *** [ 514.713728][ T2023] [ 514.721907][ T2023] locks held by kworker/0:1H/2023: 4, last CPU#0: [ 514.728406][ T2023] #0: ffff888020ea0940 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 514.739535][ T2023] #1: ffffc900069dfc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 514.752491][ T2023] #2: ffff8880270f9c98 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x144/0x300 [ 514.761952][ T2023] #3: ffff888027ac7178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 514.770899][ T2023] [ 514.770899][ T2023] stack backtrace: [ 514.776868][ T2023] CPU: 0 UID: 0 PID: 2023 Comm: kworker/0:1H Not tainted syzkaller #0 PREEMPT(full) [ 514.786389][ T2023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 514.796490][ T2023] Workqueue: kblockd blk_mq_run_work_fn [ 514.802106][ T2023] Call Trace: [ 514.805424][ T2023] [ 514.808401][ T2023] dump_stack_lvl+0xe8/0x150 [ 514.813047][ T2023] print_circular_bug+0x2e2/0x300 [ 514.818125][ T2023] check_noncircular+0x12f/0x150 [ 514.823119][ T2023] __lock_acquire+0x164c/0x2de0 [ 514.828023][ T2023] ? irqentry_exit+0x218/0x920 [ 514.832832][ T2023] ? __pfx___schedule+0x10/0x10 [ 514.837747][ T2023] ? irqentry_exit+0x218/0x920 [ 514.842568][ T2023] lock_acquire+0x115/0x350 [ 514.847137][ T2023] ? nbd_queue_rq+0x373/0xff0 [ 514.851897][ T2023] __mutex_lock+0x19d/0x1550 [ 514.856557][ T2023] ? nbd_queue_rq+0x373/0xff0 [ 514.861295][ T2023] ? ret_from_fork_asm+0x1a/0x30 [ 514.866285][ T2023] ? unwind_next_frame+0x8f/0x2550 [ 514.871452][ T2023] ? nbd_queue_rq+0x373/0xff0 [ 514.876184][ T2023] ? __pfx___mutex_lock+0x10/0x10 [ 514.881264][ T2023] ? ret_from_fork_asm+0x1a/0x30 [ 514.886257][ T2023] ? stack_trace_save+0xa9/0x100 [ 514.891245][ T2023] ? __pfx_stack_trace_save+0x10/0x10 [ 514.896669][ T2023] nbd_queue_rq+0x373/0xff0 [ 514.901229][ T2023] ? __lock_acquire+0x1511/0x2de0 [ 514.906303][ T2023] ? __pfx_nbd_queue_rq+0x10/0x10 [ 514.911390][ T2023] blk_mq_dispatch_rq_list+0x499/0x1990 [ 514.916994][ T2023] ? sbitmap_get+0x229/0x390 [ 514.921731][ T2023] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 514.927771][ T2023] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 514.933685][ T2023] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 514.940089][ T2023] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 514.946911][ T2023] ? lock_acquire+0x115/0x350 [ 514.951648][ T2023] ? process_scheduled_works+0x97a/0x1630 [ 514.957419][ T2023] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 514.963513][ T2023] ? blk_mq_run_work_fn+0x144/0x300 [ 514.968762][ T2023] blk_mq_run_work_fn+0x16c/0x300 [ 514.973837][ T2023] ? process_scheduled_works+0x97a/0x1630 [ 514.979606][ T2023] process_scheduled_works+0xc3d/0x1630 [ 514.985211][ T2023] ? __pfx_process_scheduled_works+0x10/0x10 [ 514.991250][ T2023] ? assign_work+0x3cf/0x5d0 [ 514.995901][ T2023] worker_thread+0xa47/0xfb0 [ 515.000572][ T2023] ? __kthread_parkme+0x71/0x1f0 [ 515.005574][ T2023] kthread+0x38b/0x480 [ 515.009720][ T2023] ? __pfx_worker_thread+0x10/0x10 [ 515.014881][ T2023] ? __pfx_kthread+0x10/0x10 [ 515.019523][ T2023] ret_from_fork+0x514/0xb70 [ 515.024180][ T2023] ? __pfx_ret_from_fork+0x10/0x10 [ 515.029369][ T2023] ? __switch_to+0xc89/0x1420 [ 515.034116][ T2023] ? __pfx_kthread+0x10/0x10 [ 515.038758][ T2023] ret_from_fork_asm+0x1a/0x30 [ 515.043598][ T2023] [ 515.053246][ T2023] block nbd2: Dead connection, failed to find a fallback [ 515.053270][ T2023] block nbd2: shutting down sockets [ 515.053286][ T2023] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 515.053317][ T2023] Buffer I/O error on dev nbd2, logical block 0, async page read [ 515.053379][ T2023] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 515.053495][ T2023] Buffer I/O error on dev nbd2, logical block 1, async page read [ 515.053513][ T2023] Buffer I/O error on dev nbd2, logical block 2, async page read [ 515.053528][ T2023] Buffer I/O error on dev nbd2, logical block 3, async page read [ 515.094670][ T2023] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 515.094802][ T2023] Buffer I/O error on dev nbd2, logical block 0, async page read [ 515.094848][ T2023] Buffer I/O error on dev nbd2, logical block 1, async page read [ 515.094889][ T2023] Buffer I/O error on dev nbd2, logical block 2, async page read [ 515.094916][ T2023] Buffer I/O error on dev nbd2, logical block 3, async page read [ 515.095352][ T2023] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 515.095430][ T2023] Buffer I/O error on dev nbd2, logical block 0, async page read [ 515.095473][ T2023] Buffer I/O error on dev nbd2, logical block 1, async page read [ 515.095865][ T2023] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 515.096300][ T2023] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 515.096494][ T2023] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 515.096736][ T2023] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 515.096818][ T2023] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 515.096937][ T2023] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 515.098870][T16831] ldm_validate_partition_table(): Disk read failed. [ 515.101958][T16831] Dev nbd2: unable to read RDB block 0 [ 515.105686][T16831] nbd2: unable to read partition table [ 515.227868][T16831] ldm_validate_partition_table(): Disk read failed. [ 515.228594][T16831] Dev nbd2: unable to read RDB block 0 [ 515.229786][T16831] nbd2: unable to read partition table [ 515.336944][T16828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 515.339733][T16828] veth1_vlan: left promiscuous mode [ 515.340744][T16828] veth0_vlan: left promiscuous mode [ 515.342434][T16828] veth0_vlan: entered promiscuous mode [ 515.347525][T16828] veth1_vlan: entered promiscuous mode [ 515.361706][T16828] veth1_macvtap: left promiscuous mode [ 515.372012][T16828] veth0_macvtap: left promiscuous mode [ 515.380695][T16828] veth0_macvtap: entered promiscuous mode [ 515.385314][T16828] veth1_macvtap: entered promiscuous mode [ 515.404021][T16828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 515.405120][T16828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 515.406223][T16828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 515.407251][T16828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 515.407946][T16828] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 515.409739][T16828] veth3: left allmulticast mode [ 515.473235][T16828] geneve2: left promiscuous mode [ 515.473261][T16828] geneve2: left allmulticast mode [ 515.490416][T16828] vlan2: left allmulticast mode [ 515.490442][T16828] dummy0: left allmulticast mode [ 515.492693][T16828] ip6gre1: left promiscuous mode [ 515.492722][T16828] ip6gre1: left allmulticast mode [ 515.534249][T16828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.654132][ T278] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.654172][ T278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.654199][ T278] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 49009 - 0 [ 515.654341][ T278] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.654370][ T278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.654396][ T278] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 49009 - 0 [ 515.654521][ T278] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.654548][ T278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.654574][ T278] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 49009 - 0 [ 515.654607][ T278] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.654634][ T278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.654660][ T278] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 49009 - 0 [ 522.363822][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!