last executing test programs: 2.673479184s ago: executing program 1 (id=13432): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) setsockopt(r1, 0xa, 0x3, &(0x7f00000003c0)="2cdb57c5e04eb8e5c3c32f19b6715696fb9ada098271b799f36d0b8d43b5b7554ff23566042fb5914cb1d287db13a7b7a8caae6aab4ed5924c86cd1246b16eca3ba3128f0a478cc21420009a12c6ab133695fc6ff8bc82d2b484833df987981fa17fe26d076abbef97380b8dda5beb10833844ebe29b6b65d33ed74ab508c57c8aff124e1e3814193070f82a71631eb1f9447008c26ea20e969d76079d7fae7269e38ba38cbc9d94a71e392a2539f42df79ddf21de5966e9ec710bb331b951d32c60827fcb5521e33024b2789c179e0d", 0xd0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x148}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) r4 = socket$netlink(0x10, 0x3, 0x12) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=@delqdisc={0x58, 0x25, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0xc, 0xc}, {0x4, 0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x1, 0x0, 0x6, 0x1, 0xd865}, {0xdd, 0x2, 0xf, 0x8000, 0x1, 0x3}, 0x7ff, 0xff800000, 0x3a2}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000001}, 0x94) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "1210d6b3703dcdc3", "2eb3e4e31cc30bc9a3b1749e45796c03", "88af8951", "56377d51018a25e0"}, 0x28) 2.370841318s ago: executing program 1 (id=13438): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="1a0bad581c5e", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x1, @private1={0xfc, 0x1, '\x00', 0xfe}, @mcast2, {[], {0xfffc, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0xf0, 0x100, @void}}}}}}}}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000952805004c0012800c0001006d6163766c616e003c0002800800010010000000280005800a000400aaaaaaaaaa3b00000a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb0000080003000300000008000500", @ANYRES32=r4], 0x74}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x88c4) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r6, &(0x7f0000000180)={@void, @void, @mpls={[{}, {0x2}], @llc={@snap={0x0, 0xaa, "04c1", "8f59e9", 0x8035, "2eb1ae9645c36a895f7c30585062141395151b0d30b8710e66abb96baa4636a012e93605f8c2110f0c49425b1fb934b1647af096dd1572bcec50a3e56f8f866130bb4d703726605f4b8b5852ef2241d9653259ef7312c430"}}}}, 0x69) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) r7 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x200408d4}, 0x8004) socket$packet(0x11, 0x3, 0x300) 1.966711176s ago: executing program 1 (id=13445): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x8994, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FIBMAP(r6, 0x1, &(0x7f00000000c0)=0xffffffdf) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r5) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r8, 0x300, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8f5c}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x44) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r9, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x700, 0x7800}}) bind$can_j1939(r10, &(0x7f0000000140)={0x1d, r11, 0x0, {0x1, 0x1, 0x2}, 0x1}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r10, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x6004004) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x118, r9, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xb9, 0xac, "b78d8b09cf3d6391f49f542f25c87ec580e99abd47d57a017887530fa4075da12ef73de44e7b5e85af334160f9d6b37aa88a9800c94f30e3e2aecb2629389f3aa32d4e6f8647607a03f44e46c2e4a0473730e0c6ab5cd689f7a3ba0fc5def20b402c1236576cbea803deccd7687e01c81f63f166f1a379d3bd6dbc3772baaeb5ae45ec64ebd0e6c949e7e968379ffb239e693633272cb30be6fc710ff31ca589ed73b9b0e7adc3e87b9441422c2ad6fa505349b238"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xb}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x40}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x850) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa0304b2781200183f2500000000000000000100007f0000017f00000100186371ae9b1c0343579e3dd75cc0fd986726f189c67eb04790212e23bdff887678ee3516828dad23d39946f4416fc33a7539c5cb5cce81c82b92aa7d51c35a426ace4f25b5a55dc706673082dfb3dc1e999883c474870f5d60165db078"], 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.892898213s ago: executing program 3 (id=13447): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000580)=0x8, 0x4) (async) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000580)=0x8, 0x4) r2 = socket(0xa, 0x3, 0x4) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400cd7f", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r3, 0x1, 0x2, &(0x7f0000000040), 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f00000000c0)='veth1_virt_wifi\x00') (async) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f00000000c0)='veth1_virt_wifi\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$XFS_IOC_FSGEOMETRY(r2, 0x8100587e, &(0x7f00000005c0)) 1.570567975s ago: executing program 3 (id=13451): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x88, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x122}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) connect$phonet_pipe(r0, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$packet(0x11, 0x2a6ff27746c4144a, 0x300) getsockopt(r7, 0xbc6f, 0x2, &(0x7f0000000040)=""/250, &(0x7f0000000140)=0xfa) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) close(0x4) 1.246626802s ago: executing program 1 (id=13455): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0xc}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x619}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 1.118645192s ago: executing program 3 (id=13456): r0 = socket$inet(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000d3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) setsockopt$inet_opts(r0, 0x0, 0xb, &(0x7f0000000000)="89", 0x1) syz_emit_ethernet(0x92, &(0x7f0000000080)={@local, @random="4489a2bc242d", @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x13, 0xe5, [@broadcast, @rand_addr=0x64010102, @rand_addr=0x64010100, @local]}]}}, @time_exceeded={0x4, 0x1, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @broadcast=0xac1414bb, {[@timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@remote}, {@loopback}, {@local}, {@dev}, {@dev}, {@broadcast}]}, @cipso={0x86, 0xa, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}]}}}}}}}, 0x0) 1.018159509s ago: executing program 1 (id=13457): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000002c0)={{0xffffffffffffffff, &(0x7f0000000000)='//}:\'(\x00', 0xa01, &(0x7f0000000040)={@_ha_fsid={[0x7f, 0x7fffffff]}, {0x8, 0xc, 0x1, 0x3}}, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x3}, 0x2, &(0x7f0000000280)=[{0x3, 0xc, &(0x7f0000000100)='*\x00', &(0x7f0000000140)="a121d49434516ecefedd1d7768dc45fcb8af03f5f33fa9714c6c1185f90ef00853db0b9bef42a9fdc0528cdb9e41874dd4db8834a651e7282d2d936b75594753c2834aa10dbc246f7f9fe219ca3b70c52923cf5a4c7a51e251454aff4974a2f7117980a98143d7a6464e140f21b63a4179151e1e134108996b6d24f9b01b075558217970e93c50e7ef77c13f71321e788496d240b93309c5ffee272463edef05ffee", 0xa2, 0x2}, {0x1, 0x4, &(0x7f0000000200)='\x00', &(0x7f0000000240)="48f3f5231fd5789a5b23b760bb9d66eb884ff6886e64da", 0x17, 0x2}]}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pS \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x0, 0x4c, 0xc2, &(0x7f0000000400)="5387b0557422e65ebc13753f5fd0faa9fd79ef4dcbc6c489f84b75f5a18c772f89852db664c4e6f7e29b08a48bddf8fa9faaa3cfd1579d05ff79f10e57f7574b3a61418017c2bf617fe69c54", &(0x7f0000000480)=""/194, 0x8b2a, 0x0, 0x37, 0xee, &(0x7f0000000580)="90cd704bbfbcab9e96ea5d7c4ab1f4e15247309051c321215e7b47681e8db431592fa587097eda38256e9c9a90eef124427e90b9c6a6a3", &(0x7f00000005c0)="2437e82c96a02b8ab5ee0b519c00e62202c1286f3dcc805968605ed0ddd4b799825166abc621bff37c33cc17e4b29c14b73e4e50e0a3cbfdc3f06ad20f87ee62449c5b195e6f207cc84ebcb8258018a129f2560491a7873f987d8ab323f6ce7440ba45dc846a49908678e33aef5c5d678a8ec5842d00adf5e294d608ed5fb1e11db6e7aebb2f65ef10853dc79a8bc815ed71095806e20263f2487120330ea547e0efe4f30b1a1cf662a6ecf100f29817cde6ae7fc270c4b9be56403554845685a71a3a023d7340165b21f7120ac13189ba4b89774f10305689d90ed0791e8d96cb56d4b3ca73755dafd000f46542", 0x2, 0x0, 0x268}, 0x50) r2 = socket$netlink(0x10, 0x3, 0xc) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file0\x00', r0, 0x4000, r0}, 0x18) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000800)={0x0, @dev, @dev}, &(0x7f0000000840)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x78, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x152}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x9d7}, @ETHTOOL_A_CHANNELS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004040}, 0x4040000) vmsplice(r2, &(0x7f0000001d40)=[{&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="962c6fb218bac507d97e8c1603d1514a75430368f28511d7d38e419351e18c345deb1a461793a0e91522b802577b507910869119cf794c2e6d2f4df4f7be1480336556063cec37496568ea9bd5728b09926f0ab10ba6a8df9bf34aa981f7acab10283c00ba79ec427290e60ac20c4a74fa426690a1c878f337895adeff827109ffe7468facaaff543ffc5c5567e12827b902137b1b4f38d0a05b94a5b90ccb7be35907", 0xa3}, {&(0x7f0000001a40)="6ee9a7a82d55dfc0ec112be6088ef244056688c372b7bb4a429fd53547eae4228757411eba979229510767d6114817ede9a86c936983fecdea5426909f90", 0x3e}, {&(0x7f0000001a80)="4533288a602439995110f35094c21b5e061843d3a2cd0d3d773fcbd2315645ed444a439b13f225f1260f70b7f814b31e7fab209bbcd55d63c4297dc34246c7f42005b74c6609e86eef06cbd7902c4344b9d69221f1", 0x55}, {&(0x7f0000001b00)="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", 0xfe}, {&(0x7f0000001c00)="95f69e6ec21407c1e6d25e010556ce5b5f94f3715c8823ba1fa493441eedd6afaafac517be7ac53b3308cf407bef504b1d3d8d38e5890770f914cefa2ae42f771ccdca818b1b3aba496077db6c81a9263c37009c94fe82775ac1f33136ac552dca98a0bff6a00c14", 0x68}, {&(0x7f0000001c80)="549f6323f5a762ee11000b7dae1c595ed56101760b1d6e229eaed90ea6a1e3e379ecc6840ce042b0a052a9240c9a309f36becb26defa648f199e41e796da9fee1a9307593848c7e62eea49c2ddd547c018167f2648c3c032c6ec116e9d5cd6c2b624e609586fdeafa48082ed9113eaab35543ead2c3641086a7d60a31978c924adc1c30b1cf92de879a491398a33db594d286a63d35b8c4ade7d3980178d8ea99ed78f87e65ce68a6089211a2005b9", 0xaf}], 0x7, 0x8) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001e00), r2) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000001f40)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e40)={0xa8, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x39}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x4004800) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001fc0)=@security={'security\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x0, 0x0, 0x250, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, &(0x7f0000001f80), {[{{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x40, 0x6]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x7a2, 0x7, [0x16, 0x3f, 0x12, 0x8, 0x1e, 0x40, 0x39, 0x1e, 0xe, 0x1e, 0x1e, 0x9, 0x12, 0x29, 0x3, 0x21], 0x0, 0x9, 0x2}}}, {{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x5, 0x2, 0x1, 0x0, 0x3, 0x1], 0x3, 0x1}}}, @common=@set={{0x40}, {{0x1, [0x1, 0x3, 0x7], 0x5, 0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x0, 0x5, 0x3, 0x4, 0x2], 0x0, 0x4}, {0xffffffffffffffff, [0x7, 0x2, 0x9, 0xb, 0x6]}}}}, {{@ip={@multicast1, @local, 0xff, 0xffffffff, 'veth1\x00', 'vlan1\x00', {0xff}, {}, 0x62, 0x3, 0x10}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xff000000, 0xd5d48e17cc3d201e, 0xffffff00, 0xffffff00], 0x4e20, 0x4e24, 0x4e21, 0x4e21, 0x9, 0xff, 0x0, 0x15, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000002400), &(0x7f0000002440)=0x30) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000002480)={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, {0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x34}, 0x6}, 0x1, {[0xc, 0x8, 0x4, 0x800, 0xfffffff9, 0xefab, 0x5, 0x5]}}, 0x5c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002580)={r0, 0x58, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000026c0)={'syztnl1\x00', &(0x7f00000025c0)={'syztnl0\x00', r5, 0x8000, 0x1, 0xf8, 0x62a, {{0x35, 0x4, 0x2, 0x2, 0xd4, 0x68, 0x0, 0x3, 0x29, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x4c, 0x59, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@empty, 0xfffffff7}, {@dev={0xac, 0x14, 0x14, 0x23}, 0xfffffffb}, {@local, 0x1ff}, {@multicast1, 0x8}, {@multicast1, 0x1}, {@private=0xa010102, 0xa37}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x6}, {@private=0xa010102}]}, @generic={0x94, 0xe, "7634414d3fb876600c46c349"}, @noop, @rr={0x7, 0x17, 0x90, [@multicast2, @loopback, @local, @rand_addr=0x64010100, @loopback]}, @ssrr={0x89, 0x27, 0x6d, [@rand_addr=0x64010100, @loopback, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x3}, @loopback, @rand_addr=0x64010100, @broadcast, @loopback]}, @lsrr={0x83, 0xb, 0xa8, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @timestamp={0x44, 0x8, 0x73, 0x0, 0x3, [0x5]}, @rr={0x7, 0x13, 0xd3, [@remote, @loopback, @multicast2, @local]}]}}}}}) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000002700)={0x3, 0x3}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000002780), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000002880)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x68, r6, 0x110, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xf0000000, @link='syz1\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$NILFS_IOCTL_GET_VINFO(0xffffffffffffffff, 0xc0186e86, &(0x7f0000002940)={&(0x7f00000028c0)=[{0x9, 0x8, 0x3, 0xc}, {0x80, 0xff, 0x8000000000000001, 0xffffffffffffffff}, {0x1, 0x8001, 0x6, 0x14}, {0x4, 0x200, 0x6, 0x4}], 0x4, 0x20, 0x401, 0x45157258}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000002980)={0xfffffffffffffffa, {0x5, 0xc413, 0x100, 0x56f7, 0x9}}) ioctl$sock_ifreq(r2, 0x8993, &(0x7f00000029c0)={'veth1_to_bond\x00', @ifru_ivalue=0xb}) ioctl$NILFS_IOCTL_SYNC(r2, 0x80086e8a, &(0x7f0000002a00)) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000002a40)=0x1) bind$alg(r0, &(0x7f0000002a80)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(cast6)\x00'}, 0x58) ioctl$NILFS_IOCTL_GET_BDESCS(r1, 0xc0186e87, &(0x7f0000002c80)={&(0x7f0000002b00)=[{0x7, 0x8, 0x2, 0x6, 0xc}, {0x8, 0xfffffffffffffffb, 0xa466, 0x1, 0x3}, {0x3, 0x100, 0x6, 0x2}, {0x9, 0xf, 0x6, 0xc, 0x1}, {0x100, 0x0, 0x4, 0x3, 0xe}, {0xce37, 0xd, 0x2, 0x2, 0x30000000}, {0x10, 0x2a5b, 0x3, 0x8, 0x600000}, {0xb, 0xc97e, 0x81, 0x81, 0x9}, {0x100000001, 0x0, 0x10, 0xd5, 0x37}], 0x9, 0x28, 0xa, 0x8}) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000002e00)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x88, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x23f96dab}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xb000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x69a}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) ppoll(&(0x7f0000002e40)=[{r7, 0x2}], 0x1, &(0x7f0000002e80)={0x77359400}, &(0x7f0000002ec0)={[0x5]}, 0x8) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000002fc0)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)={0x34, r6, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0xec000000, 0x7f, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4004) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000003000)={{0xa, 0x4e22, 0xffffffff, @mcast1, 0xb}, {0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffd}, 0x0, {[0x6, 0x5, 0xfffffff8, 0x3, 0x1, 0x9, 0xe, 0x5]}}, 0x5c) 906.656362ms ago: executing program 3 (id=13461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_ADT={0xa8, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xa}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth1_to_team\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x401}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x95d}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xf0}}, 0x4000000) 906.145135ms ago: executing program 0 (id=13462): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x80, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e4"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @private1, 0xfffffffe}}]}, 0x80}, 0x1, 0x7}, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$alg(r3, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0xbd, 0x8, 0x0, 0x0}}, 0x10) 800.241761ms ago: executing program 2 (id=13463): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x40, r1, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33957edf8aaae14574df4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0x4}]}]}, 0x40}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r4, 0xd7735000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad", 0x1) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 798.900408ms ago: executing program 3 (id=13464): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x22, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f6164000000020000000000000000000000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 779.614061ms ago: executing program 0 (id=13465): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000100)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x60, 'syz0\x00', "52e140292bc4ac011cf5760b0ac479d265bbbb60494da73e69c8fa63169f6e83", "1b3bc6e5422991791f49e4dd04d6e6cdd7a25ddbfb6786a7fb5e5a79c1005143", [{0x0, 0x0, {0x3}}, {0x0, 0x0, {0x1}}, {}, {0x0, 0x0, {0x0, 0x5784}}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xf585, {0x0, 0x5}}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffe, {0x1}}]}}}]}, 0x268}}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="3638412c0107cc651c69315bb104e4f1", 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="19bc0000000010000000000000000000", 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) accept4$tipc(r3, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x800) 638.749457ms ago: executing program 4 (id=13466): r0 = socket(0x10, 0x3, 0x0) r1 = gettid() r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r3, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000800800", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/uts\x00') socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@ipmr_newroute={0x64, 0x18, 0x4, 0x70bd29, 0x25dfdbfb, {0x80, 0x80, 0x10, 0xef, 0xfe, 0x3, 0xff, 0x3, 0x2000}, [@RTA_GATEWAY={0x8, 0x5, @remote}, @RTA_DST={0x8, 0x1, @multicast1}, @RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_SRC={0x8, 0x2, @empty}, @RTA_TABLE={0x8, 0xf, 0xf4}, @RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_SRC={0x8, 0x2, @local}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_IIF={0x8, 0x3, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 636.662974ms ago: executing program 0 (id=13467): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="942ff2f3ec008b240bf8b82dd058cffc62af99be04eda9a2", @ANYRES64=0x0], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="942ff2f3ec008b240bf8b82dd058cffc62af99be04eda9a2", @ANYRES64=0x0], 0x10) socket(0x1, 0x2, 0x0) (async) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000140), &(0x7f0000000480)=@tcp=r2, 0x2}, 0x20) r3 = socket(0xa, 0x3, 0xfffffffd) r4 = socket(0x2b, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) recvmsg$can_j1939(r4, &(0x7f0000000b40)={&(0x7f0000000700)=@hci, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000780)=""/78, 0x4e}, {&(0x7f0000000800)=""/86, 0x56}, {&(0x7f0000000880)=""/197, 0xc5}, {&(0x7f0000000980)=""/37, 0x25}, {&(0x7f00000009c0)=""/203, 0xcb}], 0x5}, 0x20) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000001}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe0000000000000008000f00fd000000", 0x24) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000180)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) writev(0xffffffffffffffff, &(0x7f00000005c0), 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) (async) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x48801}, 0x0) sendmsg$can_bcm(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4084}, 0x8006) syz_genetlink_get_family_id$ethtool(&(0x7f0000002c40), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002c40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1a0002006d209c3f8411b3a95bc3d4806d885e76cef40e781ef8d479971958885c317f5ced6bf846c83602b9bd897e4decb207148304f7e5f6b73447f9312d7039c3246f7b3e0d174c4d85e7749f90472090c8845e5b7e6d3754629a9ea7ae19e30d2b46009152e22ff9222498c1d75f05", @ANYRES16=r10, @ANYRES16=r2], 0x34}, 0x1, 0x0, 0x0, 0x20048004}, 0x4000000) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1a0002006d209c3f8411b3a95bc3d4806d885e76cef40e781ef8d479971958885c317f5ced6bf846c83602b9bd897e4decb207148304f7e5f6b73447f9312d7039c3246f7b3e0d174c4d85e7749f90472090c8845e5b7e6d3754629a9ea7ae19e30d2b46009152e22ff9222498c1d75f05", @ANYRES16=r10, @ANYRES16=r2], 0x34}, 0x1, 0x0, 0x0, 0x20048004}, 0x4000000) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) 636.24869ms ago: executing program 2 (id=13468): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'batadv0\x00', &(0x7f0000000000)=@ethtool_channels={0x1d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c000280", @ANYRES32], 0x4c}}, 0x0) 576.057763ms ago: executing program 3 (id=13469): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000480)=""/151, 0x97}], 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000002c0), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200d1fd14000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000018c0)="580000001500add427323b472545b456a180784de1c8261d62ee231ecf00450a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffc1", 0x59}], 0x1) r6 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r6, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0x0) 558.522731ms ago: executing program 4 (id=13470): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34e5a120", @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25020202000900030073797a32000000000900010073797a32000000000500040002000000"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) (async) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34e5a120", @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25020202000900030073797a32000000000900010073797a32000000000500040002000000"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x2, @empty}]}, &(0x7f0000000180)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000002240)={0x2, 0x9, 0x1000, &(0x7f0000001240)=""/4096}) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000002240)={0x2, 0x9, 0x1000, &(0x7f0000001240)=""/4096}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f00000000c0)='syz1\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r2, 0x40106e80, &(0x7f0000000040)={0x5}) (async) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r2, 0x40106e80, &(0x7f0000000040)={0x5}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@gettaction={0x54, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff44}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x54}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@gettaction={0x54, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff44}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x54}}, 0x0) 490.637632ms ago: executing program 2 (id=13471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007008b617400140004800800014000000000080002"], 0xa4}}, 0x0) 488.432195ms ago: executing program 0 (id=13472): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x2c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x98, r1, 0x10, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x4004801) r2 = socket(0x1b, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10028050}, 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000440)=0x5, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty, 0x7}, 0x1c) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x2c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x2c}}, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x98, r1, 0x10, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x4004801) (async) socket(0x1b, 0x2, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10028050}, 0x1) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000440)=0x5, 0x4) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty, 0x7}, 0x1c) (async) 442.524864ms ago: executing program 4 (id=13473): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x20, 0x4, 0x4, 0x12}, 0x50) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000000280)=@udp=r0}, 0x20) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r3, &(0x7f0000000040), 0x9) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x0, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7fffffff, 0x7c}}}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x840) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 333.153812ms ago: executing program 4 (id=13474): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = accept4$llc(r0, &(0x7f0000000200), &(0x7f0000000040)=0x10, 0x180000) getsockname$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r4, r4, 0x2f}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r4, r6, 0x2f, 0x18, 0x4, @void, @value=r4}, 0x20) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000611060000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) (async) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0xf4e) writev(r8, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) poll(&(0x7f0000002100)=[{r8, 0x400}], 0x1, 0x2) write(r7, &(0x7f0000000340)="0a000300010000", 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0d0000001000010428bd700001000000e2ff0000", @ANYRES32=0x0, @ANYBLOB="0800000000000100"], 0x20}, 0x1, 0x0, 0x0, 0x24004844}, 0x20008004) 258.67441ms ago: executing program 0 (id=13475): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x3, 0x2801e}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x38}}, 0x480d0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000080)={r2, 0x100}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x5}, {0xc, 0x9, {0x4c}}}}]}]}, 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 258.020801ms ago: executing program 2 (id=13476): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xc0000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r5, 0x25, 0x0, @val=@netkit}, 0x1c) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r5, @ANYBLOB="000000002c12070008000400a1"], 0x28}}, 0x4004090) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xfffffffffffffd12) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@empty, @in=@private=0xa010102, 0x4e22, 0x7fff, 0x4e24, 0x5, 0xa, 0xa0, 0x20, 0xc, r5, r6}, {0x1, 0x2, 0x7, 0xc, 0x5, 0x10, 0x0, 0x1}, {0x6d70, 0x2, 0x1, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in=@broadcast, 0x4d3, 0xff}, 0x2, @in=@remote, 0x3507, 0x4, 0x2, 0x80, 0xb3, 0x81, 0x3}}, 0xe8) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0xb, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)="d3f04bb4604aed32226e529c8812223fc4797c733f8176720c3ad91b943b1ad6f8027b3cc582e5502433b313659a57fa991300b16a4529482443b67e8a41483837b5f9f422cb9d69b64f69b4bb9d3fdc2907e8201322498ed0448ce67f43a68a92938a420012241f6712e9dc52e38a6aed925779287435d8441c3f33760552e488dc42bcadd66a5e1643c45095a0aaae13af", 0x92}], 0x1}, 0x7101}], 0x1, 0x4001c00) 174.097291ms ago: executing program 2 (id=13477): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='A', 0x1}], 0x1}}], 0x1, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r4, &(0x7f0000000240), 0x0}, 0x20) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc}]}}}]}, 0x40}}, 0x0) 123.371241ms ago: executing program 4 (id=13478): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000000)=@ethtool_cmd={0x4e, 0x6f8, 0x898c, 0x80, 0x6, 0x4, 0x9c, 0xb, 0x3, 0x1, 0xed, 0xfffffff9, 0x66a, 0x4, 0x8, 0x8, [0x7f, 0x6]}}) (async) r2 = socket$kcm(0x2, 0x3, 0x2) close(r2) (async) r3 = socket$kcm(0x2, 0x3, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000d40)=0x14) (async) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r4, 0x8b) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x200}}], 0x18}, 0x48000) (async) r5 = socket(0x2, 0x3, 0x40) setsockopt(r5, 0xff, 0x1, 0x0, 0x0) (async) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000cc0)) recvmsg$unix(r0, &(0x7f0000005b40)={&(0x7f0000000c40), 0x6e, &(0x7f0000005a40)=[{&(0x7f0000000cc0)}, {&(0x7f0000000d00)=""/6, 0x6}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/4096, 0x1000}, {&(0x7f0000004a40)=""/4096, 0x1000}], 0x5, &(0x7f0000005ac0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}, 0x20) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4870000000000000200000000000e0ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f55ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf3ed410f6accd3641110bec4e90a634199e07f8f6eb9604000e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea13c9a77e1c89c5082a703fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea7042ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850bf895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2200af6c7784a1975fabc0c4dd418c005479ecab19bdfb15a32a4fd67ce446adb431d7e74853b7978639be2463308af07db79240acaf0910300000077d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061622718551c20ec23812770d72c700a44e113d17088fdd00600000f7889b8d7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f740586903500090000000000000000be34b10f9d640dd782ac0cbc0abcf72846903243d0d0f4bc7fb0a0d7c5000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b4bfaf5a6b649dd5f13cd776e6c7c4b5c4b0de20e0c81efb5e392a13cdd2ce219e6733b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e863fef0ad9d1ac32276cffe5f1fc21390797d0244cf1ce269d10525745caaa3f77d1b80116cb385a0242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2424ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd911e0e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f55136628090702f70000d0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c685492a1689ad4218cea744b332ab232a09cf1ec375627074ce2d3d7619936768a84a1465fff4610cf8838b28319e0f79533d87eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507818231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f278ea00cee8a2088359946e726aef83d9ff9281ab79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000010c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481c55e86dcd7816ad8940bd19953603000000adeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016be64dc097982e23462392a0cd05afb2e060fd6424a942ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1af45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5d81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b1495213060000000000000049584655c4fce8c5bb7c54664aef6d780100358aa54bcb49926c4be9ee4659153d9fa95d07cc4efdab2c355efe8e8d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6122f572047ccf3c8edd82660e5d74c52be71d780c30000000000fd00000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f2def52394db3e9d8318bbb9baff3db95bfd69e08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d05b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0a832f5194ddfce51e5aff28f621bb2fd2a5ab719df823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c3348329b0ee77d93596e3f1287552e0c8cdb326c5118d2e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e26aa90c571fa3c07238697b13c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170e42f28cea4105541e11c8605628b9ca935bc252fee8b596a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babb8fa16f3182c5b98493a5aa943aa3a777a751f56e0c7a74f7f63d83ff119561acd5fe560563b051dc29ac586b21148ad5a5498369ac347d19660c132b1df58d65418bc824d8b88b699462c2ce6524eaf0905445413033f041a26b189f2553ef218eba22152a4dc979a0e37396ae1a2883b1e4d44c8af7973d5c1f286c26459209db5a9a51dc69d0ba3fb6c884e50be3598ac53295137c97dabe52d98fed0b352c0b68b7e75ed59931ef57bb5fc28d5b1f914fc8abbb444637a5dfbac5035eb0713efb823360a8da80e4265e599f76952a8082b8c5f7890275a922cd2ccaaf75dcca6849e89e1bab32fe9b598c61d7565dc6ab0a6d43b60f8d08ddf27a286807692d18973edaa6d5401c79b3cafaab4a8d6c946cbe5de350000000022e16a5f72c6d41dc9de8517fdcfa0c0efca880257443cfc3057c353569ffb1588b4bb261a6e99c5936e1b4339d87ec84db99e797f44451fc6b5da1950d24b3d4118f2288804740e605500c1f493c7dc42164cc6c1b01a329ce95272a07a355d4ba705b5e71ce5e1042a0c638e565881e5eedbc62f79407b73ae787c9cdb752eda44aeef962c93ab245f61e8ca5c0d41cc56124840f1b2b30be599fea0afaf905f90dd3e55fef0b94afbfd7144b7"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x18000000000002a0, 0x34, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = socket(0x10, 0x3, 0x0) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r8, 0x402) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) (async) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e40)={0x13, 0x18, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4}]}, 0x18}}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000d80)={&(0x7f0000000300)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000d80)}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0000ffff0000000000008d09f14ae872290cef20a8205e240658504f860000001800058007000100028008000000000000"], 0x2c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a06fef8ffffff71a400fe0000000071106e00000000001d300200000000004704000001ed03040f030000000000001d440000000000006b0a04fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x45}, 0x10}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0xffffffffffffffec, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) 62.86794ms ago: executing program 1 (id=13479): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8, 0xfda2e91184d60b8b}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xf, 0x0, 0x8, 0x3, 0x80000001, 0x2, 0x80, 0xffff}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x60}}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x2c}}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r1}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r7, 0x205, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x63}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) 60.562204ms ago: executing program 0 (id=13480): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x5, 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) 36.271562ms ago: executing program 2 (id=13481): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x3}, 0x48) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000140)="280b92a8d30ff3bc43beb6ef256e464b3fefd631f1a0e65e61b9401d2189fd4d496a54bbbc550400e7b63909cb55bbe0921d"}, 0x20) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0x302}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @loopback}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x7, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004000}, 0x8000) 0s ago: executing program 4 (id=13482): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r5, &(0x7f0000000080)={0x2c, 0x4, r4, 0x16, r2}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000240)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x2, r4, 0x7, r2}, 0x10) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=r4) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001a1401"], 0x20}}, 0x0) kernel console output (not intermixed with test programs): 0835][T17271] netlink: 'syz.3.11680': attribute type 20 has an invalid length. [ 1414.871364][T17271] netlink: 'syz.3.11680': attribute type 20 has an invalid length. [ 1415.057913][T17279] can: request_module (can-proto-0) failed. [ 1415.107279][T17271] team0: Port device team_slave_0 removed [ 1415.175170][T17278] bridge7: entered promiscuous mode [ 1415.193641][T17278] bridge7: entered allmulticast mode [ 1415.206040][T17278] team0: Port device bridge7 added [ 1415.217779][T17285] veth1_to_bond: entered allmulticast mode [ 1415.237523][T17287] bridge0: port 1(team0) entered blocking state [ 1415.262927][T17287] bridge0: port 1(team0) entered disabled state [ 1415.270611][T17287] team0: entered allmulticast mode [ 1415.288775][T17287] team_slave_0: entered allmulticast mode [ 1415.304928][T17287] team_slave_1: entered allmulticast mode [ 1415.320686][T17287] dummy0: entered allmulticast mode [ 1415.346271][T17287] team0: entered promiscuous mode [ 1415.360183][T17287] team_slave_0: entered promiscuous mode [ 1415.379440][T17287] team_slave_1: entered promiscuous mode [ 1415.395461][T17287] dummy0: entered promiscuous mode [ 1415.412820][T17287] bridge0: port 1(team0) entered blocking state [ 1415.419177][T17287] bridge0: port 1(team0) entered forwarding state [ 1415.436740][T17294] veth1_to_bond: entered promiscuous mode [ 1415.449533][T17301] syz_tun: entered allmulticast mode [ 1415.510700][T17303] dvmrp8: entered allmulticast mode [ 1415.537354][T17282] veth1_to_bond: left promiscuous mode [ 1415.555247][T17282] veth1_to_bond: left allmulticast mode [ 1415.672748][ T2702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.800905][T17298] syz_tun: left allmulticast mode [ 1415.963414][T17331] syzkaller0: left promiscuous mode [ 1415.974374][T17331] syzkaller0: left allmulticast mode [ 1415.998577][T17333] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1416.052265][T17335] bridge0: port 1(team0) entered disabled state [ 1416.079269][T17335] team0 (unregistering): left allmulticast mode [ 1416.102021][T17335] team_slave_0: left allmulticast mode [ 1416.122178][T17335] team_slave_1: left allmulticast mode [ 1416.152956][T17335] dummy0: left allmulticast mode [ 1416.169806][T17343] netlink: 'syz.1.11700': attribute type 8 has an invalid length. [ 1416.185918][T17335] team0 (unregistering): left promiscuous mode [ 1416.193848][T17335] team_slave_0: left promiscuous mode [ 1416.199646][T17335] team_slave_1: left promiscuous mode [ 1416.206130][T17335] dummy0: left promiscuous mode [ 1416.211867][T17335] bridge0: port 1(team0) entered disabled state [ 1416.233503][T17335] team0 (unregistering): Port device team_slave_0 removed [ 1416.267015][T17335] team0 (unregistering): Port device team_slave_1 removed [ 1416.309246][T17335] team0 (unregistering): Port device dummy0 removed [ 1416.325370][T17335] team0 (unregistering): Port device bridge7 removed [ 1416.531517][T17355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.759004][T17389] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1416.803653][ T2717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.889471][T17404] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.328885][T17428] xt_nfacct: accounting object `syz0' does not exist [ 1417.500803][ T9315] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1417.515329][ T9315] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1417.524418][ T9315] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1417.539234][ T9315] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1417.550816][ T9315] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1417.932194][ T9032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.254913][T17451] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1418.272875][T17451] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1418.305909][T17451] mac80211_hwsim hwsim79 wlan0: left promiscuous mode [ 1418.370679][ T985] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1418.383530][ T2717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.445424][T17451] bridge0: port 1(batadv1) entered blocking state [ 1418.452076][T17451] bridge0: port 1(batadv1) entered listening state [ 1418.467524][T17451] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1418.531565][T17462] bond0 (unregistering): Released all slaves [ 1418.694667][ T2702] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1418.986496][T17480] netlink: 'syz.2.11732': attribute type 9 has an invalid length. [ 1419.052387][T17480] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1419.072011][ T2717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1419.093495][T17487] ipt_REJECT: ECHOREPLY no longer supported. [ 1419.162983][ T757] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.174925][ T757] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.342441][T26449] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1419.504494][T17488] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1419.656041][T17487] veth0_to_bond: left allmulticast mode [ 1419.662466][ T9315] Bluetooth: hci0: command tx timeout [ 1419.768247][T17487] vlan2: left allmulticast mode [ 1419.775592][T17487] geneve1: left allmulticast mode [ 1419.786095][T17487] bond1: left allmulticast mode [ 1419.802188][T17487] syzkaller0: left allmulticast mode [ 1419.814669][T17487] gretap1: left allmulticast mode [ 1419.822352][T17487] ip6erspan1: left allmulticast mode [ 1419.973832][ T757] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1419.994396][ T757] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.039749][T17497] tipc: Enabling of bearer rejected, failed to enable media [ 1420.086669][ T9032] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1420.203570][ T757] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1420.214444][ T757] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.234323][ T2705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.310880][ T2702] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1420.324199][T17521] __nla_validate_parse: 47 callbacks suppressed [ 1420.324216][T17521] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11739'. [ 1420.345477][T17429] wg1 speed is unknown, defaulting to 1000 [ 1420.446332][ T757] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1420.486379][ T757] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.631642][ T9032] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1420.658900][ T9032] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1420.703104][ T9032] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1420.734057][T17533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11741'. [ 1420.758933][T17533] bridge0: port 2(veth0) entered blocking state [ 1420.806689][T17533] bridge0: port 2(veth0) entered disabled state [ 1420.860908][T17533] veth0: entered allmulticast mode [ 1420.889292][T17533] veth0: entered promiscuous mode [ 1420.913601][T17533] bridge0: port 2(veth0) entered blocking state [ 1420.920037][T17533] bridge0: port 2(veth0) entered listening state [ 1420.975048][T17545] syzkaller0: entered promiscuous mode [ 1420.984773][T17545] syzkaller0: entered allmulticast mode [ 1421.369382][T17557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11745'. [ 1421.423588][ T2703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.723803][ T757] vlan0: left allmulticast mode [ 1421.732253][ T757] geneve0: left allmulticast mode [ 1421.737377][ T757] vlan0: left promiscuous mode [ 1421.743718][ T9315] Bluetooth: hci0: command tx timeout [ 1421.759989][ T757] geneve0: left promiscuous mode [ 1421.769231][ T757] bridge0: port 3(vlan0) entered disabled state [ 1421.793203][ T757] bridge_slave_1: left promiscuous mode [ 1421.810398][ T757] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.823831][ T757] bridge_slave_0: left allmulticast mode [ 1421.831842][ T757] bridge_slave_0: left promiscuous mode [ 1421.837592][ T757] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.863551][ T757] dvmrp8: left allmulticast mode [ 1422.175366][T17405] Set syz1 is full, maxelem 65536 reached [ 1422.235780][ T757] gretap0 (unregistering): left promiscuous mode [ 1422.258964][T17583] netlink: 'syz.4.11751': attribute type 1 has an invalid length. [ 1422.343565][ T757] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1422.408201][ T757] .` (unregistering): left promiscuous mode [ 1422.414834][ T757] j: left promiscuous mode [ 1422.420648][ T757] bond_slave_1: left promiscuous mode [ 1422.426347][ T757] macsec0: left promiscuous mode [ 1422.439549][ T757] .` (unregistering): (slave j): Releasing backup interface [ 1422.455462][ T757] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1422.473012][ T757] .` (unregistering): (slave macsec0): Releasing backup interface [ 1422.481909][ T757] veth1_macvtap: left promiscuous mode [ 1422.489144][ T757] .` (unregistering): Released all slaves [ 1422.504564][ T757] bond1 (unregistering): Released all slaves [ 1422.533015][ T757] bond2 (unregistering): Released all slaves [ 1422.550042][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1422.564067][ T757] bond3 (unregistering): Released all slaves [ 1422.595073][ T757] bond0 (unregistering): Released all slaves [ 1422.619397][ T757] bond4 (unregistering): Released all slaves [ 1422.647513][ T757] bond5 (unregistering): Released all slaves [ 1422.663026][ T757] bond6 (unregistering): Released all slaves [ 1422.758668][T17576] netlink: 'syz.1.11750': attribute type 12 has an invalid length. [ 1422.781256][ T2705] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.794926][ T2705] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.803582][ T2705] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.846687][ T757] : left promiscuous mode [ 1422.912420][T17595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11753'. [ 1422.956150][T17595] netlink: 'syz.2.11753': attribute type 10 has an invalid length. [ 1422.964636][T17595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11753'. [ 1422.992731][T17601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11754'. [ 1423.007988][ T757] tipc: Disabling bearer [ 1423.015014][ T757] tipc: Left network mode [ 1423.020487][ T2705] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.051841][T17595] geneve2: entered promiscuous mode [ 1423.057159][T17595] geneve2: entered allmulticast mode [ 1423.134122][T17603] netlink: 'syz.0.11754': attribute type 9 has an invalid length. [ 1423.328039][ T757] IPVS: stopping master sync thread 8382 ... [ 1423.646381][T17634] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11762'. [ 1423.704776][T17632] netlink: 'syz.4.11761': attribute type 2 has an invalid length. [ 1423.728007][T17633] netlink: 'syz.4.11761': attribute type 2 has an invalid length. [ 1423.752434][T17633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11761'. [ 1423.820413][ T9315] Bluetooth: hci0: command tx timeout [ 1423.980206][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1424.115899][T17659] netlink: 'syz.0.11769': attribute type 64 has an invalid length. [ 1424.127102][T17659] netlink: 5 bytes leftover after parsing attributes in process `syz.0.11769'. [ 1424.172554][T17429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1424.179828][T17429] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.187237][T17429] bridge_slave_0: entered allmulticast mode [ 1424.195049][T17429] bridge_slave_0: entered promiscuous mode [ 1424.284106][T17429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.295757][T17429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.303462][T17429] bridge_slave_1: entered allmulticast mode [ 1424.321671][T17429] bridge_slave_1: entered promiscuous mode [ 1424.338195][T17668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1424.424097][T17674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11770'. [ 1424.577474][T17429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1424.631440][T17429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1424.838040][T17429] team0: Port device team_slave_0 added [ 1424.872648][T17429] team0: Port device team_slave_1 added [ 1424.933618][ T757] hsr_slave_0: left promiscuous mode [ 1424.948259][ T757] hsr_slave_1: left promiscuous mode [ 1424.970768][ T757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1424.983578][ T757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1425.013449][T17703] openvswitch: netlink: IP tunnel dst address not specified [ 1425.017879][ T757] veth0_macvtap: left promiscuous mode [ 1425.028154][T17705] openvswitch: netlink: IP tunnel dst address not specified [ 1425.324001][ T757] team0 (unregistering): Port device team_slave_1 removed [ 1425.467191][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1425.508581][T17706] vlan0: entered allmulticast mode [ 1425.513990][T17706] bond0: entered allmulticast mode [ 1425.519215][T17706] bond_slave_0: entered allmulticast mode [ 1425.526118][T17706] batadv0: entered allmulticast mode [ 1425.533332][T17707] __nla_validate_parse: 1 callbacks suppressed [ 1425.533350][T17707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11775'. [ 1425.567401][T17429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1425.600897][T17429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.636078][T17429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1425.718330][T17722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11783'. [ 1425.727639][T17429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1425.727655][T17429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1425.727680][T17429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1425.807721][T17722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11783'. [ 1425.900795][ T9315] Bluetooth: hci0: command tx timeout [ 1425.947206][T17429] hsr_slave_0: entered promiscuous mode [ 1425.973685][T17429] hsr_slave_1: entered promiscuous mode [ 1426.055818][T17733] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11786'. [ 1426.219661][ T757] IPVS: stop unused estimator thread 0... [ 1426.241024][T17751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11789'. [ 1426.351579][T17756] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11790'. [ 1426.612567][T17429] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.762512][T17777] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1426.774719][T17776] IPVS: stopping master sync thread 17777 ... [ 1426.835322][T17429] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.897692][T17783] veth0_vlan: left promiscuous mode [ 1426.911085][T17785] netlink: 256 bytes leftover after parsing attributes in process `syz.0.11796'. [ 1426.964877][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1427.028040][T17789] bond6 (unregistering): Released all slaves [ 1427.064711][T17796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11799'. [ 1427.108330][T17790] bond6 (unregistering): Released all slaves [ 1427.199618][T17429] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.247974][T17796] ip6gre1: entered promiscuous mode [ 1427.256431][T17796] ip6gre1: entered allmulticast mode [ 1427.297639][T17802] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11800'. [ 1427.355282][T17429] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.553452][T17817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11803'. [ 1427.926611][T17429] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1427.971628][T17429] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1427.998734][T17429] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1428.034021][T17429] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1428.056811][T17429] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1428.099829][T17429] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1428.118153][T17429] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1428.149017][T17429] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1428.339454][T17859] netlink: 'syz.4.11809': attribute type 4 has an invalid length. [ 1428.395854][T17861] netlink: 'syz.4.11809': attribute type 4 has an invalid length. [ 1428.429760][T17429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1428.500793][T17429] 8021q: adding VLAN 0 to HW filter on device team0 [ 1428.526174][ T2703] bridge0: port 1(bridge_slave_0) entered blocking state [ 1428.533395][ T2703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1428.578957][ T2703] bridge0: port 2(bridge_slave_1) entered blocking state [ 1428.586152][ T2703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1428.623982][ T9098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.921532][T17881] bond5: Unable to set up delay as MII monitoring is disabled [ 1428.952630][T17881] bond5 (unregistering): Released all slaves [ 1429.882629][T17945] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1429.889262][T17945] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1430.018858][T17956] IPVS: set_ctl: invalid protocol: 60 172.20.20.39:20004 [ 1430.083571][T17429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1430.316055][T17429] veth0_vlan: entered promiscuous mode [ 1430.357700][T17429] veth1_vlan: entered promiscuous mode [ 1430.393049][T17965] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1430.463529][T17429] veth0_macvtap: entered promiscuous mode [ 1430.506035][T17429] veth1_macvtap: entered promiscuous mode [ 1430.540179][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1430.571848][T17429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1430.628576][T17429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1430.702580][ T2706] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.752890][ T2718] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.855322][ T2710] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.882794][ T2710] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1430.945419][ T2705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1430.972626][ T2705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.046704][ T757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.057411][T17987] __nla_validate_parse: 4 callbacks suppressed [ 1431.057426][T17987] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11837'. [ 1431.081097][ T757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.102936][T17991] netlink: 'syz.1.11838': attribute type 2 has an invalid length. [ 1431.178414][T17991] : entered promiscuous mode [ 1431.190827][ T2718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.200248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.226617][T17987] syzkaller0: entered promiscuous mode [ 1431.240581][T17997] netlink: 'syz.3.11716': attribute type 28 has an invalid length. [ 1431.259099][T17987] syzkaller0: entered allmulticast mode [ 1431.274702][T17997] netlink: 'syz.3.11716': attribute type 3 has an invalid length. [ 1431.305556][T17997] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11716'. [ 1431.404807][T18007] netlink: 'syz.2.11840': attribute type 7 has an invalid length. [ 1431.425758][T18009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11842'. [ 1431.445222][T18007] netlink: 'syz.2.11840': attribute type 7 has an invalid length. [ 1431.464281][T18006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11840'. [ 1431.506102][T18009] netlink: 'syz.3.11842': attribute type 23 has an invalid length. [ 1431.665531][ T6454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.695869][T18021] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11846'. [ 1431.697979][T18025] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11846'. [ 1431.820216][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1432.028373][T18045] netlink: Setting conntrack mark requires 'commit' flag. [ 1432.044528][T18045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1432.104882][T18051] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11854'. [ 1432.201476][T18056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11858'. [ 1432.214410][T18056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11858'. [ 1432.357554][T18069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11863'. [ 1432.571922][T18084] netlink: 'syz.0.11866': attribute type 1 has an invalid length. [ 1432.580067][T18084] netlink: 'syz.0.11866': attribute type 1 has an invalid length. [ 1432.754097][T18093] netlink: 'syz.4.11868': attribute type 1 has an invalid length. [ 1432.836880][T18093] bond6: entered promiscuous mode [ 1432.869580][T18093] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1433.253988][T18124] Bluetooth: MGMT ver 1.23 [ 1433.375469][T18128] gretap2: entered promiscuous mode [ 1433.394393][T18128] gretap2: entered allmulticast mode [ 1433.707580][T18148] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1434.018144][T18164] xt_hashlimit: size too large, truncated to 1048576 [ 1434.335952][T18177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.506617][T18196] netlink: 'syz.0.11895': attribute type 30 has an invalid length. [ 1434.703033][T12872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.069260][T18218] bond0: option arp_all_targets: invalid value (18446744073709551613) [ 1435.086497][T18218] bond0 (unregistering): Released all slaves [ 1435.259616][T18233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1436.302971][ T9032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.312971][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.448042][T18249] netlink: 'syz.1.11909': attribute type 9 has an invalid length. [ 1437.490598][T18249] __nla_validate_parse: 12 callbacks suppressed [ 1437.490614][T18249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11909'. [ 1437.540564][T18249] netlink: 'syz.1.11909': attribute type 9 has an invalid length. [ 1437.574015][T18249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11909'. [ 1437.585277][T12872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.595692][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.629195][T18257] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11911'. [ 1437.727782][T18268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11914'. [ 1437.742375][ T6454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.763942][T18266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11914'. [ 1437.874847][T18270] netlink: 256 bytes leftover after parsing attributes in process `syz.1.11915'. [ 1437.906110][T18272] netlink: 232 bytes leftover after parsing attributes in process `syz.3.11918'. [ 1438.206708][T18300] xt_hl: Unknown TTL match mode: 255 [ 1438.447026][T18314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11929'. [ 1438.509701][T18320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11930'. [ 1438.934571][T18345] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1438.992857][T18345] openvswitch: netlink: Missing valid actions attribute. [ 1439.007222][T18345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1439.139290][T18360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11941'. [ 1439.157778][T18361] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1439.486015][T18384] sctp: [Deprecated]: syz.2.11947 (pid 18384) Use of int in maxseg socket option. [ 1439.486015][T18384] Use struct sctp_assoc_value instead [ 1439.493901][T18387] Cannot find set identified by id 65535 to match [ 1439.725873][T18408] dvmrp8: entered allmulticast mode [ 1439.873545][T18414] syzkaller0: entered promiscuous mode [ 1439.890571][T18414] syzkaller0: entered allmulticast mode [ 1440.090987][T18429] sctp: [Deprecated]: syz.0.11960 (pid 18429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1440.090987][T18429] Use struct sctp_sack_info instead [ 1440.790378][ T6454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1440.937728][T18460] bond12: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1440.955910][T18460] bond12: (slave lo): Enslaving as an active interface with an up link [ 1440.973040][T18460] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1440.999688][T18469] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 1441.157169][T18473] netlink: 'syz.2.11975': attribute type 2 has an invalid length. [ 1441.338182][T18486] ip6gre1: entered allmulticast mode [ 1441.346689][ T2718] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1441.423714][ T2718] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.432349][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.677878][T18507] netlink: 'syz.2.11985': attribute type 4 has an invalid length. [ 1442.084547][T18526] tipc: New replicast peer: 255.255.255.255 [ 1442.101303][T18526] tipc: Enabled bearer , priority 10 [ 1442.175004][T18526] bond7: Unable to set up delay as MII monitoring is disabled [ 1442.217793][T18526] bond7 (unregistering): Released all slaves [ 1442.497380][T18554] netlink: 'syz.2.11996': attribute type 21 has an invalid length. [ 1442.509413][T18553] netlink: 'syz.2.11996': attribute type 21 has an invalid length. [ 1442.534012][T18554] __nla_validate_parse: 20 callbacks suppressed [ 1442.534028][T18554] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11996'. [ 1442.561807][T18553] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11996'. [ 1442.578330][T18562] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11999'. [ 1442.604324][T18562] netlink: 'syz.3.11999': attribute type 39 has an invalid length. [ 1442.793122][T18574] netlink: Invalid conntrack helper [ 1442.808667][T18574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1442.969460][T18588] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12005'. [ 1443.527301][T18627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12012'. [ 1443.752449][T18639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12016'. [ 1443.859256][ T6454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.036499][T18653] netlink: 68 bytes leftover after parsing attributes in process `syz.1.12019'. [ 1444.227425][T18670] team0: No ports can be present during mode change [ 1444.245755][T18670] netlink: 'syz.0.12023': attribute type 2 has an invalid length. [ 1444.297975][T18681] netlink: 104 bytes leftover after parsing attributes in process `syz.2.12028'. [ 1444.511259][T18697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12033'. [ 1444.733480][T18711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12036'. [ 1444.817944][T18705] syzkaller1: entered promiscuous mode [ 1444.833535][T18705] syzkaller1: entered allmulticast mode [ 1445.350266][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1445.910286][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1445.964583][T18784] bridge0: port 3(veth0) entered blocking state [ 1445.993898][T18784] bridge0: port 3(veth0) entered disabled state [ 1446.011644][T18784] veth0: entered allmulticast mode [ 1446.028706][T18784] veth0: entered promiscuous mode [ 1446.058539][T18784] bridge0: port 3(veth0) entered blocking state [ 1446.064978][T18784] bridge0: port 3(veth0) entered listening state [ 1446.566724][T18810] syzkaller0: entered promiscuous mode [ 1446.584718][T18810] syzkaller0: entered allmulticast mode [ 1446.861228][T12872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.128554][T18829] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1447.181023][T18615] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.189393][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1447.198049][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1447.287123][T18844] bridge0: port 3(veth0) entered disabled state [ 1447.293674][T18844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.639720][T18864] __nla_validate_parse: 9 callbacks suppressed [ 1447.639737][T18864] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12081'. [ 1447.657986][T18867] netlink: 'syz.1.12083': attribute type 1 has an invalid length. [ 1447.774069][T18876] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12085'. [ 1448.005120][T18891] netlink: 'syz.4.12088': attribute type 23 has an invalid length. [ 1448.027034][T18891] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.12088'. [ 1448.049940][T18891] veth0_to_bond: default FDB implementation only supports local addresses [ 1448.206990][T18896] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12091'. [ 1448.269202][T18904] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12093'. [ 1448.427265][T18911] netlink: 'syz.3.12094': attribute type 11 has an invalid length. [ 1448.459981][ C1] bridge0: port 1(batadv1) entered learning state [ 1448.555301][T18918] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1448.603578][T18922] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12100'. [ 1448.604101][T18920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12099'. [ 1448.637075][T18920] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1448.656368][T18922] team0: Port device vlan0 added [ 1448.692888][T18920] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12099'. [ 1449.294234][T18962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12110'. [ 1449.332316][T18962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12110'. [ 1449.523312][T18976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1449.608930][T18976] team0: Port device vlan0 added [ 1449.915386][T12875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.238329][T19025] netlink: 'syz.0.12128': attribute type 1 has an invalid length. [ 1450.458320][T19033] netlink: 'syz.0.12130': attribute type 64 has an invalid length. [ 1450.709527][ T2705] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xf [ 1451.019954][ C1] bridge0: port 2(veth0) entered learning state [ 1451.320880][T19125] pim6reg1: entered promiscuous mode [ 1451.336435][T19125] pim6reg1: entered allmulticast mode [ 1451.563155][T19141] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1451.686983][T19157] tun1: tun_chr_ioctl cmd 1074025675 [ 1451.694947][T19157] tun1: persist enabled [ 1451.735377][T19162] tipc: Started in network mode [ 1451.751156][T19162] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 1451.766549][T19162] tipc: Enabled bearer , priority 10 [ 1451.947176][T19173] syzkaller0: entered promiscuous mode [ 1451.962878][T19173] syzkaller0: entered allmulticast mode [ 1452.366444][T19196] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1452.373916][T19198] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1452.569327][T19209] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 1452.687357][T19216] __nla_validate_parse: 8 callbacks suppressed [ 1452.687374][T19216] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12172'. [ 1452.848380][T19221] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12173'. [ 1452.891682][T19101] tipc: Node number set to 10136234 [ 1452.954364][T19102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.963504][ T2705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.971897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.590169][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1454.863684][T19168] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1455.021924][T19230] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12179'. [ 1455.212708][T19246] batman_adv: batadv0: Adding interface: veth0 [ 1455.228950][T19246] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1455.260694][T19246] batman_adv: batadv0: Interface activated: veth0 [ 1455.268111][T19250] netlink: 'syz.3.12184': attribute type 26 has an invalid length. [ 1455.518898][T19269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12188'. [ 1455.537654][T19264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1455.577029][T19272] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12190'. [ 1455.593484][T19274] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12190'. [ 1455.613588][T19275] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1455.646009][T19272] tc_dump_action: action bad kind [ 1455.724258][T19275] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1455.843330][T19286] pimreg: entered allmulticast mode [ 1455.991220][T19100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.004474][T19302] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12199'. [ 1456.126111][T19311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1456.786628][T19347] netlink: 'syz.4.12208': attribute type 2 has an invalid length. [ 1456.801640][T19100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.810045][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.830393][T19347] netlink: 244 bytes leftover after parsing attributes in process `syz.4.12208'. [ 1456.853073][T19345] netlink: 'syz.4.12208': attribute type 2 has an invalid length. [ 1456.877901][T19345] netlink: 244 bytes leftover after parsing attributes in process `syz.4.12208'. [ 1456.920867][T19349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12209'. [ 1457.014632][T19316] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1457.029929][T19316] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1457.074988][T19316] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1457.089064][T19316] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1457.201210][T19362] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1457.224204][T19362] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1457.233785][T19362] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1457.246391][T19362] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1457.266735][T19362] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1457.342592][ T9315] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1457.367094][ T9315] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1457.382482][ T9315] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1457.398819][ T9315] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1457.413534][ T9315] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1457.695285][T19378] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1457.709766][T19378] bond4 (unregistering): Released all slaves [ 1457.826607][T19387] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1457.856271][T19387] bond4 (unregistering): Released all slaves [ 1457.865365][T19399] __nla_validate_parse: 4 callbacks suppressed [ 1457.865380][T19399] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12220'. [ 1457.916766][T19392] IPVS: Unknown mcast interface: vcan0 [ 1457.968574][T19392] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12220'. [ 1458.150790][T19409] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1458.232126][T19416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12226'. [ 1458.260548][T19417] netlink: 'syz.1.12225': attribute type 1 has an invalid length. [ 1458.295874][T19426] netlink: 'syz.4.12227': attribute type 24 has an invalid length. [ 1458.353566][T19417] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1458.394065][T19428] bond1: (slave veth0_to_bond): Releasing active interface [ 1458.448603][T19428] bond6: (slave veth0_to_bond): making interface the new active one [ 1458.462742][T19428] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1458.524376][T19436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12229'. [ 1458.537932][T19439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12228'. [ 1458.555992][T19436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1458.565787][T19440] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12225'. [ 1458.618455][T19417] bond6: entered promiscuous mode [ 1458.638906][T19417] veth0_to_bond: entered promiscuous mode [ 1458.663605][T19417] bond6: entered allmulticast mode [ 1458.676558][T19417] veth0_to_bond: entered allmulticast mode [ 1458.715683][ T2719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.724653][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.747444][T19428] macvlan3: entered promiscuous mode [ 1458.759702][T19428] macvlan3: entered allmulticast mode [ 1458.767866][T19428] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1458.856435][T19428] bond6: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 1459.008440][T19452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12232'. [ 1459.016411][T19346] wg1 speed is unknown, defaulting to 1000 [ 1459.024384][T19100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1459.500427][T19362] Bluetooth: hci4: command tx timeout [ 1459.688213][T19485] : renamed from vxcan1 [ 1460.002820][T19501] netlink: 'syz.1.12244': attribute type 2 has an invalid length. [ 1460.079816][T19498] bond1: option mode: invalid value (10) [ 1460.096456][T19498] bond1 (unregistering): Released all slaves [ 1460.419941][T19532] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 1460.429158][T19523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1460.512098][T19346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1460.519378][T19346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.526931][T19346] bridge_slave_0: entered allmulticast mode [ 1460.535206][T19346] bridge_slave_0: entered promiscuous mode [ 1460.554843][T19346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.570080][T19346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.592119][T19346] bridge_slave_1: entered allmulticast mode [ 1460.600264][T19346] bridge_slave_1: entered promiscuous mode [ 1460.644468][T19346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1460.666844][T19346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1460.790881][T19346] team0: Port device team_slave_0 added [ 1460.822269][T19346] team0: Port device team_slave_1 added [ 1460.826024][T19555] IPVS: length: 242 != 24 [ 1460.950306][T19346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1460.957520][T19346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1460.988779][T19346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1461.008018][T19346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1461.017006][T19346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1461.049073][T19346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1461.158208][T19346] hsr_slave_0: entered promiscuous mode [ 1461.174960][T19346] hsr_slave_1: entered promiscuous mode [ 1461.201231][T19346] debugfs: 'hsr0' already exists in 'hsr' [ 1461.215101][T19346] Cannot create hsr debugfs directory [ 1461.298423][T19568] sch_tbf: peakrate 9 is lower than or equals to rate 4294967289 ! [ 1461.325102][T19568] netlink: 256 bytes leftover after parsing attributes in process `syz.3.12260'. [ 1461.362413][T19568] syzkaller0: entered promiscuous mode [ 1461.370789][T19568] syzkaller0: entered allmulticast mode [ 1461.385485][T19570] netlink: 'syz.4.12261': attribute type 2 has an invalid length. [ 1461.404342][T19570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12261'. [ 1461.590344][T19362] Bluetooth: hci4: command tx timeout [ 1461.732667][T19581] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12264'. [ 1461.779122][T19346] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1461.798664][T19346] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.937058][T19593] netlink: 'syz.4.12268': attribute type 1 has an invalid length. [ 1461.989214][T19346] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1462.000955][T19346] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.026124][T19596] netlink: 'syz.4.12268': attribute type 8 has an invalid length. [ 1462.094187][T19593] bond8: entered promiscuous mode [ 1462.099794][T19593] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1462.143574][T19602] macvtap2: entered allmulticast mode [ 1462.181380][T19346] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1462.192131][T19346] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.226608][T19593] macvtap3: entered allmulticast mode [ 1462.251651][T19596] bond8: (slave bridge10): making interface the new active one [ 1462.259424][T19596] bridge10: entered promiscuous mode [ 1462.272140][T19596] bond8: (slave bridge10): Enslaving as an active interface with an up link [ 1462.329590][T19346] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1462.371435][T19346] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.756199][T19346] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1462.781256][T19346] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1462.807782][T19346] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1462.851911][T19346] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1462.860715][T19346] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1462.872034][T19346] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1462.886081][T19346] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1462.897043][T19635] __nla_validate_parse: 2 callbacks suppressed [ 1462.897053][T19635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12284'. [ 1462.907267][T19346] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1463.018730][T19646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12286'. [ 1463.045546][T19646] nbd: must specify a device to reconfigure [ 1463.068230][T19648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12287'. [ 1463.112989][T19346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1463.157876][T19346] 8021q: adding VLAN 0 to HW filter on device team0 [ 1463.198418][ T2710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.205660][ T2710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1463.268315][ T2705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.275541][ T2705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1463.382491][T19661] netlink: 'syz.4.12290': attribute type 4 has an invalid length. [ 1463.438198][T19666] netlink: 108 bytes leftover after parsing attributes in process `syz.0.12291'. [ 1463.481354][T19666] netlink: 108 bytes leftover after parsing attributes in process `syz.0.12291'. [ 1463.621344][T19679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12294'. [ 1463.661846][T19362] Bluetooth: hci4: command tx timeout [ 1463.761785][T19689] netlink: 140 bytes leftover after parsing attributes in process `syz.4.12296'. [ 1463.857928][T19691] netlink: 'syz.1.12297': attribute type 4 has an invalid length. [ 1464.047890][T19704] netlink: 'syz.4.12298': attribute type 1 has an invalid length. [ 1464.132604][T19708] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12298'. [ 1464.197242][T19700] bond9: (slave veth0_to_bond): making interface the new active one [ 1464.214053][T19700] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1464.234034][T19704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12298'. [ 1464.246612][T19704] bond9: entered promiscuous mode [ 1464.259217][T19704] veth0_to_bond: entered promiscuous mode [ 1464.265693][T19704] bond9: entered allmulticast mode [ 1464.274088][T19704] veth0_to_bond: entered allmulticast mode [ 1464.306076][T19346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1464.370776][T19346] veth0_vlan: entered promiscuous mode [ 1464.387573][T19346] veth1_vlan: entered promiscuous mode [ 1464.435587][T19346] veth0_macvtap: entered promiscuous mode [ 1464.446720][T19346] veth1_macvtap: entered promiscuous mode [ 1464.476392][T19346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1464.493791][T19346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1464.520621][T18616] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.529585][T18616] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.561131][ T2702] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.626575][ T757] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1464.678129][T19718] netlink: 'syz.3.12302': attribute type 10 has an invalid length. [ 1464.695190][T19718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1464.704763][T19718] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1464.846544][T19727] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12304'. [ 1465.741325][T19362] Bluetooth: hci4: command tx timeout [ 1466.599794][T19679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1466.708255][T18616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.735077][T18616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1466.794922][T19730] netlink: 'syz.0.12305': attribute type 1 has an invalid length. [ 1466.809702][ T757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.828785][ T757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1466.873260][T19730] bond4: entered promiscuous mode [ 1466.886288][T19730] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1466.962225][T19730] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1466.997818][T19730] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1467.044565][T19730] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1467.079029][T19730] bond4: (slave wireguard0): making interface the new active one [ 1467.088537][T19730] wireguard0: entered promiscuous mode [ 1467.097532][T19730] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 1467.319677][T19752] xt_socket: unknown flags 0xe4 [ 1467.385628][ T29] audit: type=1800 audit(1786807663.268:26): pid=19752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12312" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=24 res=0 errno=0 [ 1467.456335][ T9315] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1467.473278][ T9315] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1467.484262][ T9315] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1467.495984][ T9315] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1467.506220][ T9315] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1468.226711][T19794] sctp: [Deprecated]: syz.1.12322 (pid 19794) Use of int in max_burst socket option deprecated. [ 1468.226711][T19794] Use struct sctp_assoc_value instead [ 1468.274512][T19798] __nla_validate_parse: 5 callbacks suppressed [ 1468.274528][T19798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12323'. [ 1468.332948][T19802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12323'. [ 1468.350891][T19802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12323'. [ 1468.484181][T19809] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12325'. [ 1468.524473][T19809] netlink: 'syz.3.12325': attribute type 1 has an invalid length. [ 1468.567896][T19811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12326'. [ 1468.611967][T19809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1468.633428][T19759] wg1 speed is unknown, defaulting to 1000 [ 1468.949905][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1469.057039][T19837] netlink: 'syz.3.12332': attribute type 2 has an invalid length. [ 1469.266434][T19847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12334'. [ 1469.276167][T19849] netlink: 'syz.3.12336': attribute type 83 has an invalid length. [ 1469.295795][T19849] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12336'. [ 1469.386330][T19853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12337'. [ 1469.444918][T19759] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.452864][T19759] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.460487][T19759] bridge_slave_0: entered allmulticast mode [ 1469.468774][T19759] bridge_slave_0: entered promiscuous mode [ 1469.479259][T19759] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.486548][T19759] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.494489][T19759] bridge_slave_1: entered allmulticast mode [ 1469.503701][T19759] bridge_slave_1: entered promiscuous mode [ 1469.542217][T19759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1469.556225][T19759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1469.584975][ T9315] Bluetooth: hci1: command tx timeout [ 1469.615045][T19759] team0: Port device team_slave_0 added [ 1469.623619][T19759] team0: Port device team_slave_1 added [ 1469.678149][T19759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1469.697959][T19759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1469.728881][T19864] nbd: couldn't find a device at index 0 [ 1469.739310][T19863] nbd: couldn't find a device at index 0 [ 1469.746297][T19864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12340'. [ 1469.768636][T19759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1469.793332][T19759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1469.800389][T19759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1469.854320][T19759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1469.954000][T19868] batadv0: entered promiscuous mode [ 1469.959532][T19868] macsec1: entered promiscuous mode [ 1469.966942][T19868] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1469.976153][T19868] batadv0: left promiscuous mode [ 1470.003979][T19874] netlink: 'syz.3.12343': attribute type 23 has an invalid length. [ 1470.004003][T19759] hsr_slave_0: entered promiscuous mode [ 1470.019686][T19759] hsr_slave_1: entered promiscuous mode [ 1470.026706][T19759] debugfs: 'hsr0' already exists in 'hsr' [ 1470.033340][T19759] Cannot create hsr debugfs directory [ 1470.241861][T19876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12345'. [ 1470.676676][T19759] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.999036][T19759] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1471.023486][T19759] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.109607][T19943] syzkaller0: entered allmulticast mode [ 1471.283086][T19759] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1471.294209][T19759] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.341753][T19956] netlink: 'syz.1.12362': attribute type 1 has an invalid length. [ 1471.381553][T19956] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1471.497881][T19759] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1471.552911][T19759] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.660099][ T9315] Bluetooth: hci1: command tx timeout [ 1471.871616][T19759] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1471.899298][T19759] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1471.912070][T19759] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1471.932845][T19759] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1471.955383][T19759] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1471.973901][T19759] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1471.983124][T19759] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1472.003448][T19759] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1472.182640][T19759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1472.281648][T19759] 8021q: adding VLAN 0 to HW filter on device team0 [ 1472.336975][ T2715] bridge0: port 1(bridge_slave_0) entered blocking state [ 1472.344211][ T2715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1472.405586][T19987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1472.412786][T19987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1472.444789][T20026] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1472.473173][T20026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1472.487475][T20030] netlink: 'syz.0.12375': attribute type 28 has an invalid length. [ 1472.519063][T20030] netlink: 'syz.0.12375': attribute type 3 has an invalid length. [ 1472.632265][T20037] bridge0: port 4(ipvlan2) entered blocking state [ 1472.639021][T20037] bridge0: port 4(ipvlan2) entered disabled state [ 1472.646154][T20037] ipvlan2: entered allmulticast mode [ 1472.658240][T20037] ipvlan2: left allmulticast mode [ 1472.778327][T20042] veth0_to_bond: default FDB implementation only supports local addresses [ 1472.816372][T20044] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1473.251011][T20071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1473.339118][T20064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.346971][T20064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.487888][T20064] bridge_slave_0: left allmulticast mode [ 1473.495364][T20064] bridge_slave_0: left promiscuous mode [ 1473.507349][T20064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.529541][T20085] netdevsim netdevsim2: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 1473.539563][T20064] bridge_slave_1: left allmulticast mode [ 1473.548207][T20064] bridge_slave_1: left promiscuous mode [ 1473.554983][T20064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.585088][T20064] bond0: (slave bond_slave_0): Releasing backup interface [ 1473.604948][T20064] bond0: (slave bond_slave_1): Releasing backup interface [ 1473.625766][T20064] team0: Port device team_slave_0 removed [ 1473.643160][T20064] team0: Port device team_slave_1 removed [ 1473.654741][T20064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1473.667287][T20064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1473.687629][T20064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1473.703603][T20064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1473.724102][T20064] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1473.741713][ T9315] Bluetooth: hci1: command tx timeout [ 1473.867293][T19759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1474.019342][T20106] __nla_validate_parse: 15 callbacks suppressed [ 1474.019361][T20106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12396'. [ 1474.094525][T20110] netlink: 'syz.1.12398': attribute type 2 has an invalid length. [ 1474.172734][T20113] tun0: tun_chr_ioctl cmd 1074025675 [ 1474.178311][T20113] tun0: persist disabled [ 1474.193426][T20113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12399'. [ 1474.447781][T19759] veth0_vlan: entered promiscuous mode [ 1474.481523][T19759] veth1_vlan: entered promiscuous mode [ 1474.549072][T19759] veth0_macvtap: entered promiscuous mode [ 1474.578413][T19759] veth1_macvtap: entered promiscuous mode [ 1474.645879][T20136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12405'. [ 1474.665319][T19759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1474.764399][T20136] bond1: entered promiscuous mode [ 1474.781047][T20136] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1474.807423][T19759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1474.827089][T20146] netlink: 'syz.3.12408': attribute type 9 has an invalid length. [ 1474.841225][T20146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12408'. [ 1474.851889][T19988] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.884983][T20146] netlink: 'syz.3.12408': attribute type 9 has an invalid length. [ 1474.895535][T20149] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12407'. [ 1474.906732][T19984] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1474.921978][T20146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12408'. [ 1474.948065][T20150] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12407'. [ 1474.992149][T19987] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1475.032000][T20149] netlink: 'syz.0.12407': attribute type 32 has an invalid length. [ 1475.124023][T18614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1475.137757][T19983] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1475.152789][T18614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1475.165639][T19983] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1475.237087][T19984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1475.262848][T19987] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.273663][T19984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1475.290974][T19987] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.320370][T19992] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.357622][T20162] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12411'. [ 1475.476482][T20169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12413'. [ 1475.488943][T26449] IPVS: starting estimator thread 0... [ 1475.512524][T20175] netlink: 'syz.2.12415': attribute type 1 has an invalid length. [ 1475.539530][T20171] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20003 [ 1475.565623][T20171] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20003 [ 1475.589341][T20174] IPVS: using max 32 ests per chain, 76800 per kthread [ 1475.822620][ T9315] Bluetooth: hci1: command tx timeout [ 1476.001405][T20202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12424'. [ 1476.011683][T19362] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1476.023141][T19362] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1476.032257][T19362] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1476.054772][T19362] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1476.065882][T19362] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1476.204717][T20204] syzkaller0: entered promiscuous mode [ 1476.222193][T20204] syzkaller0: entered allmulticast mode [ 1476.237140][T20217] netlink: 'syz.1.12426': attribute type 83 has an invalid length. [ 1476.774843][T20246] netlink: 'syz.2.12433': attribute type 34 has an invalid length. [ 1477.266856][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1477.274684][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1478.141108][ T9315] Bluetooth: hci2: command tx timeout [ 1478.541188][ C1] bridge0: port 1(batadv1) entered forwarding state [ 1478.547922][ C1] bridge0: topology change detected, propagating [ 1479.134050][T20246] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1479.188834][T20203] wg1 speed is unknown, defaulting to 1000 [ 1479.408126][T20262] __nla_validate_parse: 2 callbacks suppressed [ 1479.408142][T20262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12438'. [ 1479.512320][T20273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12441'. [ 1479.555406][T20275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12442'. [ 1479.657693][T20277] tipc: Started in network mode [ 1479.671624][T20277] tipc: Node identity 0242a60955c9, cluster identity 4711 [ 1479.687606][T20277] tipc: Enabled bearer , priority 11 [ 1479.714073][T20285] netlink: 'syz.4.12445': attribute type 4 has an invalid length. [ 1479.725034][T20285] netlink: 17 bytes leftover after parsing attributes in process `syz.4.12445'. [ 1479.734770][T20279] netlink: 9 bytes leftover after parsing attributes in process `syz.2.12444'. [ 1479.770970][T20279] gretap0: entered promiscuous mode [ 1479.826327][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1479.919721][T20295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12447'. [ 1479.934530][T20288] netlink: 5 bytes leftover after parsing attributes in process `syz.2.12444'. [ 1479.975298][T20288] 0{X: renamed from gretap0 [ 1480.003197][T20288] 0{X: left promiscuous mode [ 1480.018789][T20288] 0{X: entered allmulticast mode [ 1480.028137][T20288] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 1480.204598][T20304] ip6gre1: entered allmulticast mode [ 1480.220114][ T9315] Bluetooth: hci2: command tx timeout [ 1480.311432][T20203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.318802][T20203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.327005][T20203] bridge_slave_0: entered allmulticast mode [ 1480.335036][T20203] bridge_slave_0: entered promiscuous mode [ 1480.345277][T20203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1480.353501][T20203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.362069][T20203] bridge_slave_1: entered allmulticast mode [ 1480.370966][T20203] bridge_slave_1: entered promiscuous mode [ 1480.415633][T20203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1480.432577][T20203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1480.473933][T20203] team0: Port device team_slave_0 added [ 1480.483905][T20203] team0: Port device team_slave_1 added [ 1480.513750][T20203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1480.520794][T20203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1480.549512][T20203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1480.563750][T20203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1480.571391][T20203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1480.598022][T20203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1480.647393][T20203] hsr_slave_0: entered promiscuous mode [ 1480.654446][T20203] hsr_slave_1: entered promiscuous mode [ 1480.662631][T20203] debugfs: 'hsr0' already exists in 'hsr' [ 1480.668412][T20203] Cannot create hsr debugfs directory [ 1480.693619][T19100] tipc: Node number set to 1468769801 [ 1480.853480][T20203] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1480.865370][T20203] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.968482][T20203] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1480.979510][T20203] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.063206][T20203] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1481.074646][T20203] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.099934][ C1] bridge0: port 2(veth0) entered forwarding state [ 1481.106422][ C1] bridge0: topology change detected, propagating [ 1481.184192][T20203] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1481.194634][T20203] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.302377][ T9315] Bluetooth: hci2: command tx timeout [ 1482.654015][T20279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1482.702417][T20203] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1482.751116][T20203] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1482.773774][T20203] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1482.809678][T20203] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1482.821433][T20325] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12455'. [ 1482.836549][T20203] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1482.853581][T20203] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1482.868803][T20203] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1482.896557][T20203] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1483.043414][T20346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12459'. [ 1483.078871][T20346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1483.081103][T20349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12459'. [ 1483.126739][T20203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1483.147261][T20203] 8021q: adding VLAN 0 to HW filter on device team0 [ 1483.155448][T20349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1483.201877][T19988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.209086][T19988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1483.242426][T19988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.249656][T19988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1483.646997][T20371] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1483.658080][T20370] netlink: 'syz.4.12466': attribute type 1 has an invalid length. [ 1483.711986][T20369] bond2: (slave veth3): Enslaving as an active interface with an up link [ 1483.812620][T19100] IPVS: starting estimator thread 0... [ 1483.821980][T20386] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 1483.910502][T20387] IPVS: using max 32 ests per chain, 76800 per kthread [ 1484.049214][T20398] wg1 speed is unknown, defaulting to 1000 [ 1484.269607][T20410] ip_tables: iptables: counters copy to user failed while replacing table [ 1484.292496][T20203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1484.299763][T20411] ip_tables: iptables: counters copy to user failed while replacing table [ 1484.380988][ T9315] Bluetooth: hci2: command tx timeout [ 1484.387829][T20203] veth0_vlan: entered promiscuous mode [ 1484.458051][T20203] veth1_vlan: entered promiscuous mode [ 1484.482799][T20413] __nla_validate_parse: 3 callbacks suppressed [ 1484.482861][T20413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12476'. [ 1484.524660][T20413] netlink: 2 bytes leftover after parsing attributes in process `syz.3.12476'. [ 1484.585930][T20421] syzkaller0: entered promiscuous mode [ 1484.599979][T20421] syzkaller0: entered allmulticast mode [ 1484.619306][T20421] tipc: Started in network mode [ 1484.634096][T20421] tipc: Node identity caff1bbd8c71, cluster identity 4711 [ 1484.653507][T20421] tipc: Enabled bearer , priority 0 [ 1484.678192][T20421] tipc: Resetting bearer [ 1484.723377][T20420] tipc: Resetting bearer [ 1484.796451][T20420] tipc: Disabling bearer [ 1484.845295][T20203] veth0_macvtap: entered promiscuous mode [ 1484.885739][T20203] veth1_macvtap: entered promiscuous mode [ 1484.954293][T20203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1484.988663][T20203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1485.046757][T18614] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.101308][ T2719] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.375026][T20454] veth1_to_bond: entered allmulticast mode [ 1485.386859][T20454] veth1_to_bond: entered promiscuous mode [ 1485.387290][T19984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.427590][T20454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12489'. [ 1485.432766][T19984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.488841][T20454] veth1_to_bond (unregistering): left allmulticast mode [ 1485.519249][T20454] veth1_to_bond (unregistering): left promiscuous mode [ 1485.560781][T20454] bond0: (slave bond_slave_1): Releasing backup interface [ 1485.696318][T19987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.700913][T18614] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.725516][T19987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.759416][T18614] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.304422][T20481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12493'. [ 1486.580239][T20494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12498'. [ 1486.640458][T20494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12498'. [ 1486.752980][T20503] tipc: Enabling of bearer rejected, media not registered [ 1486.835046][T20509] IPv6: sit1: Disabled Multicast RS [ 1486.851924][T20509] sit1: entered allmulticast mode [ 1487.051869][T20518] --map-set only usable from mangle table [ 1487.176413][T20527] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12506'. [ 1487.395756][T20537] netlink: 'syz.4.12511': attribute type 75 has an invalid length. [ 1487.543697][T20544] nbd: socks must be embedded in a SOCK_ITEM attr [ 1487.602030][T20547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12514'. [ 1487.857421][T20563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12518'. [ 1487.963141][T20563] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1488.009011][T20563] bond1 (unregistering): Released all slaves [ 1488.036617][T20579] netlink: 'syz.4.12519': attribute type 1 has an invalid length. [ 1488.100810][T20579] bond1: entered promiscuous mode [ 1488.112201][T20579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1488.132898][T20577] pimreg: left allmulticast mode [ 1488.197145][T20585] netlink: 88 bytes leftover after parsing attributes in process `syz.0.12522'. [ 1488.259797][T20573] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1488.269144][T20573] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1488.286569][T20573] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1488.308105][T20573] bond1: (slave ip6gre2): making interface the new active one [ 1488.323350][T20573] ip6gre2: entered promiscuous mode [ 1488.336254][T20573] bond1: (slave ip6gre2): Enslaving as an active interface with an up link [ 1488.568065][T20602] xt_policy: too many policy elements [ 1488.819926][T20615] macvtap1: entered promiscuous mode [ 1488.834539][T20615] dummy0: entered promiscuous mode [ 1488.998983][T19098] dummy0: left promiscuous mode [ 1489.039446][T20627] bond2: entered promiscuous mode [ 1489.052960][T20627] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1489.107178][T20627] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1489.122874][T20634] netlink: 'syz.4.12537': attribute type 1 has an invalid length. [ 1489.132679][T20634] netlink: 'syz.4.12537': attribute type 1 has an invalid length. [ 1489.133886][T20627] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 1489.199650][T20627] bond2: (slave sit1): Error -95 calling set_mac_address [ 1489.628693][T20660] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 1489.658082][T20660] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 1489.684302][T20666] netlink: 'syz.4.12545': attribute type 7 has an invalid length. [ 1489.708148][T20658] netlink: 'syz.1.12544': attribute type 5 has an invalid length. [ 1489.933030][T20679] netlink: 'syz.1.12549': attribute type 8 has an invalid length. [ 1490.238517][T20694] __nla_validate_parse: 7 callbacks suppressed [ 1490.238534][T20694] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12556'. [ 1490.258654][T20694] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12556'. [ 1490.283876][T20694] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12556'. [ 1490.313914][T20696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12557'. [ 1490.384494][T20702] syzkaller0: left promiscuous mode [ 1490.393177][T20702] syzkaller0: left allmulticast mode [ 1490.424039][T20702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12559'. [ 1490.736905][T20726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12565'. [ 1490.905711][T20741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12569'. [ 1490.934932][T20741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12569'. [ 1491.080421][T20755] netlink: 104 bytes leftover after parsing attributes in process `syz.3.12575'. [ 1491.257245][T20768] netlink: 244 bytes leftover after parsing attributes in process `syz.2.12578'. [ 1491.597421][T20794] x_tables: duplicate underflow at hook 2 [ 1491.832000][T20815] netlink: 'syz.0.12591': attribute type 32 has an invalid length. [ 1491.833094][T20809] netlink: 'syz.3.12589': attribute type 1 has an invalid length. [ 1491.922170][T20815] bond1: Setting coupled_control to off (0) [ 1492.074773][T20809] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1492.115876][T20834] netlink: 'syz.1.12597': attribute type 1 has an invalid length. [ 1492.225342][T20834] bond7: entered promiscuous mode [ 1492.240386][T20834] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1492.274051][T20838] vlan4: entered allmulticast mode [ 1492.280117][T20838] bond7: entered allmulticast mode [ 1492.310402][T20834] bond7: (slave bridge5): making interface the new active one [ 1492.318274][T20834] bridge5: entered promiscuous mode [ 1492.326601][T20834] bridge5: entered allmulticast mode [ 1492.334267][T20834] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 1492.521948][ T29] audit: type=1804 audit(1786807688.408:27): pid=20856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.12604" name="/newroot/43/cgroup.controllers" dev="tmpfs" ino=238 res=1 errno=0 [ 1492.553619][T20858] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 1492.574488][ T29] audit: type=1800 audit(1786807688.408:28): pid=20856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12604" name="cgroup.controllers" dev="tmpfs" ino=238 res=0 errno=0 [ 1492.675019][T20863] netlink: 'syz.3.12605': attribute type 21 has an invalid length. [ 1492.719962][T20863] IPv6: NLM_F_CREATE should be specified when creating new route [ 1492.746956][T20863] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1492.754235][T20863] IPv6: NLM_F_CREATE should be set when creating new route [ 1492.761505][T20863] IPv6: NLM_F_CREATE should be set when creating new route [ 1492.768733][T20863] IPv6: NLM_F_CREATE should be set when creating new route [ 1492.827004][T20863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1493.028528][T20889] x_tables: unsorted underflow at hook 2 [ 1493.513324][T19988] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1493.570522][T19992] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1493.598600][T19992] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1493.616613][T19992] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1493.813226][T20961] vlan2: entered promiscuous mode [ 1493.838084][T20961] hsr0: entered promiscuous mode [ 1493.854072][T20961] vlan2: entered allmulticast mode [ 1493.871940][T20961] hsr0: entered allmulticast mode [ 1493.895176][T20961] hsr_slave_0: entered allmulticast mode [ 1493.914838][T20961] hsr_slave_1: entered allmulticast mode [ 1493.956168][T20969] hsr_slave_0: left promiscuous mode [ 1493.971312][T20969] hsr_slave_1: left promiscuous mode [ 1493.993426][T20974] netlink: 'syz.0.12631': attribute type 12 has an invalid length. [ 1494.037172][T20974] bond2: option primary_reselect: invalid value (255) [ 1494.059594][T20974] bond2 (unregistering): Released all slaves [ 1494.274919][T20984] bridge0: port 1(gretap0) entered blocking state [ 1494.285613][T20984] bridge0: port 1(gretap0) entered disabled state [ 1494.295786][T20984] gretap0: entered allmulticast mode [ 1494.305883][T20984] gretap0: entered promiscuous mode [ 1494.315162][T20987] macvtap0: entered allmulticast mode [ 1494.321693][T20987] veth0_macvtap: entered allmulticast mode [ 1494.805799][T21034] netlink: set zone limit has 4 unknown bytes [ 1494.838889][T21035] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1495.257271][T21060] __nla_validate_parse: 19 callbacks suppressed [ 1495.257285][T21060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12656'. [ 1495.305691][T21060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12656'. [ 1495.415052][T21065] netdevsim netdevsim3: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 1497.294017][T20992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1497.475842][T21082] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1497.487169][T21080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12660'. [ 1497.555118][T21089] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1497.931266][T21111] syzkaller1: entered promiscuous mode [ 1497.937166][T21111] syzkaller1: entered allmulticast mode [ 1498.042096][T21115] bridge_slave_1: left allmulticast mode [ 1498.048835][T21115] bridge_slave_1: left promiscuous mode [ 1498.057537][T21115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.072835][T21118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12671'. [ 1498.089347][T21115] bridge_slave_0: left allmulticast mode [ 1498.095732][T21115] bridge_slave_0: left promiscuous mode [ 1498.104060][T21115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.151516][T21118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1498.177871][T21124] ip_tables: iptables: counters copy to user failed while replacing table [ 1498.215111][T21118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.310420][T21132] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 1498.345679][T21132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1498.378040][T21133] sit1: entered promiscuous mode [ 1498.394010][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1498.398267][T21133] sit1: entered allmulticast mode [ 1498.537393][T21122] syzkaller0: entered promiscuous mode [ 1498.568923][T21122] syzkaller0: entered allmulticast mode [ 1498.582990][T21147] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12677'. [ 1498.625022][T21147] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 1498.721247][T21150] openvswitch: netlink: Message has 1 unknown bytes. [ 1498.760865][T21152] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 1499.744223][T21183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12686'. [ 1499.754614][T21184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12686'. [ 1501.495632][T12858] IPVS: starting estimator thread 0... [ 1501.591911][T21197] IPVS: using max 31 ests per chain, 74400 per kthread [ 1501.858144][T19362] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1501.875306][T19362] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1501.884760][T19362] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1501.893854][T19362] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1501.909535][T19362] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1502.028626][T21220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12696'. [ 1502.692396][T21209] wg1 speed is unknown, defaulting to 1000 [ 1503.184329][T21255] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12702'. [ 1503.197670][T21255] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12702'. [ 1503.348787][T21255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12702'. [ 1503.597015][T21249] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1503.612961][T21209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.646966][T21209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.674729][T21209] bridge_slave_0: entered allmulticast mode [ 1503.725794][T21209] bridge_slave_0: entered promiscuous mode [ 1503.773030][T21209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.807648][T21209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.828105][T21209] bridge_slave_1: entered allmulticast mode [ 1503.838469][T21209] bridge_slave_1: entered promiscuous mode [ 1503.840628][T21288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12707'. [ 1503.884291][T21209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1503.901231][T21209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1503.939551][T21209] team0: Port device team_slave_0 added [ 1503.948464][T21209] team0: Port device team_slave_1 added [ 1503.985977][ T9315] Bluetooth: hci3: command tx timeout [ 1503.996403][T21209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1504.003865][T21209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1504.031427][T21209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1504.045912][T21209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1504.053556][T21209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1504.096524][T21209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1504.184495][T21303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12713'. [ 1504.291283][T21209] hsr_slave_0: entered promiscuous mode [ 1504.303432][T21209] hsr_slave_1: entered promiscuous mode [ 1504.433145][T21312] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12715'. [ 1504.462618][T21312] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1504.484728][T21319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12715'. [ 1504.560899][T21320] nbd: couldn't find a device at index 0 [ 1504.588838][T21318] mac80211_hwsim hwsim125 syzkaller0: entered promiscuous mode [ 1504.611308][T21318] mac80211_hwsim hwsim125 syzkaller0: entered allmulticast mode [ 1504.627152][T21319] netlink: 'syz.2.12715': attribute type 4 has an invalid length. [ 1504.687854][T21332] netlink: 'syz.2.12715': attribute type 4 has an invalid length. [ 1504.950964][T21209] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1504.978934][T21209] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.133100][T21209] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1505.160313][T21209] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.297763][T21209] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1505.310573][T21209] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.399210][T21209] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1505.409706][T21209] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.435221][T21359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12726'. [ 1506.062472][ T9315] Bluetooth: hci3: command tx timeout [ 1507.376964][T21312] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1507.386235][T21345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12723'. [ 1507.493775][T21364] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12727'. [ 1507.524198][T21358] netlink: 'syz.3.12726': attribute type 1 has an invalid length. [ 1507.538008][T21366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12728'. [ 1507.549310][T21209] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1507.561968][T21209] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1507.569520][T21366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12728'. [ 1507.581096][T21209] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1507.604765][T21209] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1507.619364][T21209] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1507.638610][T21209] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1507.652711][T21209] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1507.674691][T21209] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1507.699211][T21372] netlink: 312 bytes leftover after parsing attributes in process `syz.4.12729'. [ 1507.893972][T21209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1507.948056][T21209] 8021q: adding VLAN 0 to HW filter on device team0 [ 1507.975120][ T2703] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.982334][ T2703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1508.009006][T19984] bridge0: port 2(bridge_slave_1) entered blocking state [ 1508.016280][T19984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1508.037274][T21397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12735'. [ 1508.089094][T21397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12735'. [ 1508.141912][ T9315] Bluetooth: hci3: command tx timeout [ 1508.170060][T21405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12736'. [ 1508.262130][T21398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1508.405260][T21418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12740'. [ 1508.677257][T21440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12743'. [ 1508.967998][T21209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1509.112844][T21209] veth0_vlan: entered promiscuous mode [ 1509.157177][T21209] veth1_vlan: entered promiscuous mode [ 1509.261818][T21209] veth0_macvtap: entered promiscuous mode [ 1509.312394][T21209] veth1_macvtap: entered promiscuous mode [ 1509.359178][T21209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1509.387605][T21209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1509.445599][T21473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1509.476732][T21473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1509.495871][T21473] bond0 (unregistering): Released all slaves [ 1509.520326][T19988] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.557233][ T2703] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.712267][T19987] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.746127][T19987] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.814642][T19987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1509.841414][T19987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1509.991923][T21489] bond3: entered promiscuous mode [ 1510.013634][T21489] bond3: entered allmulticast mode [ 1510.087364][ T2703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1510.115489][ T2703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1510.230294][ T9315] Bluetooth: hci3: command tx timeout [ 1510.236610][T21514] xt_l2tp: v2 tid > 0xffff: 1114244 [ 1510.356350][T21520] bond0: entered allmulticast mode [ 1510.363410][T21520] bond_slave_0: entered allmulticast mode [ 1510.369750][T21520] bond_slave_1: entered allmulticast mode [ 1511.135762][T21560] xt_hashlimit: size too large, truncated to 1048576 [ 1511.322993][T21532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1511.579476][T21577] netlink: 'syz.0.12778': attribute type 18 has an invalid length. [ 1511.613063][T21579] bond1: Unable to set down delay as MII monitoring is disabled [ 1511.626575][T21579] bond1 (unregistering): Released all slaves [ 1511.698055][T21577] netlink: 'syz.0.12778': attribute type 18 has an invalid length. [ 1511.757138][T19987] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1511.794693][T19987] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1511.915617][T19102] IPVS: starting estimator thread 0... [ 1512.010892][T21601] IPVS: using max 30 ests per chain, 72000 per kthread [ 1512.051539][T19988] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1512.080475][ T2715] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1512.414351][T21624] gretap0: entered promiscuous mode [ 1512.421520][T21624] vlan0: entered promiscuous mode [ 1512.617522][T21639] x_tables: unsorted entry at hook 2 [ 1512.653303][T21648] __nla_validate_parse: 8 callbacks suppressed [ 1512.653319][T21648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12796'. [ 1512.671989][T21647] openvswitch: netlink: VXLAN extension message has 5413 unknown bytes. [ 1512.821654][T21653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12799'. [ 1512.862251][T21653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12799'. [ 1512.902539][T21662] netlink: 'syz.4.12802': attribute type 11 has an invalid length. [ 1513.332687][T21693] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12811'. [ 1513.352845][ T29] audit: type=1107 audit(1786807709.228:29): pid=21692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 1513.447674][T21695] sctp: [Deprecated]: syz.4.12812 (pid 21695) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1513.447674][T21695] Use struct sctp_sack_info instead [ 1513.560375][T21695] dvmrp8: entered allmulticast mode [ 1513.683778][T21710] bridge1: entered promiscuous mode [ 1513.696576][T21710] bridge1: entered allmulticast mode [ 1513.773438][ T29] audit: type=1804 audit(1786807709.658:30): pid=21716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.12818" name="/newroot/94/cgroup.controllers" dev="tmpfs" ino=503 res=1 errno=0 [ 1513.828537][ T29] audit: type=1800 audit(1786807709.658:31): pid=21716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.12818" name="cgroup.controllers" dev="tmpfs" ino=503 res=0 errno=0 [ 1513.868638][T21720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12819'. [ 1514.069467][T21737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12823'. [ 1514.079626][T21736] xt_socket: unknown flags 0x50 [ 1514.105035][T21738] syzkaller0: entered promiscuous mode [ 1514.116250][T21738] syzkaller0: entered allmulticast mode [ 1514.582001][T21768] xt_hl: Unknown TTL match mode: 255 [ 1514.786490][T21725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1514.902153][T21775] openvswitch: netlink: Multiple metadata blocks provided [ 1514.979651][T21777] netlink: 'syz.4.12834': attribute type 13 has an invalid length. [ 1514.997665][T21777] gretap0: refused to change device tx_queue_len [ 1515.007710][T21777] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1515.052168][T21779] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12835'. [ 1515.062610][T21779] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12835'. [ 1515.189136][T21792] x_tables: unsorted underflow at hook 1 [ 1515.292373][T21801] ip_tables: iptables: counters copy to user failed while replacing table [ 1515.329437][T21804] gretap0: entered promiscuous mode [ 1515.364752][T21804] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1515.382305][T21804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12841'. [ 1515.429046][T21804] gretap0: left promiscuous mode [ 1515.518227][T21813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12844'. [ 1515.527637][T21813] netlink: 'syz.1.12844': attribute type 7 has an invalid length. [ 1515.536312][T21813] netlink: 'syz.1.12844': attribute type 8 has an invalid length. [ 1515.565916][T21813] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 1515.579538][T21818] netlink: 'syz.4.12846': attribute type 1 has an invalid length. [ 1515.850768][T21836] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1515.958621][T21847] Cannot find set identified by id 4 to match [ 1515.983686][T21847] Cannot find set identified by id 4 to match [ 1515.993075][T21847] Cannot find set identified by id 4 to match [ 1516.008915][T21847] Cannot find set identified by id 4 to match [ 1516.022574][T21847] Cannot find set identified by id 4 to match [ 1516.035018][T21847] Cannot find set identified by id 4 to match [ 1516.049792][T21847] Cannot find set identified by id 4 to match [ 1516.057328][T21847] Cannot find set identified by id 4 to match [ 1516.066441][T21847] Cannot find set identified by id 4 to match [ 1516.083149][T21847] Cannot find set identified by id 4 to match [ 1516.179693][T21856] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1516.824773][T21910] tc_dump_action: action bad kind [ 1517.109261][T21923] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1517.257538][T21929] xt_hashlimit: size too large, truncated to 1048576 [ 1517.448089][T21939] mac80211_hwsim hwsim131 : renamed from wlan1 (while UP) [ 1517.669150][T21949] __nla_validate_parse: 8 callbacks suppressed [ 1517.669168][T21949] netlink: 240 bytes leftover after parsing attributes in process `syz.3.12884'. [ 1517.733579][T21950] netlink: 144 bytes leftover after parsing attributes in process `syz.1.12887'. [ 1517.764707][T21954] netlink: 'syz.2.12888': attribute type 7 has an invalid length. [ 1518.158073][T21984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12896'. [ 1518.239055][T21988] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1518.249411][T21990] netlink: 'syz.3.12899': attribute type 1 has an invalid length. [ 1518.288276][T21990] bond4: option mode: invalid value (48) [ 1518.299286][T21990] bond4 (unregistering): Released all slaves [ 1518.335638][T21993] : renamed from dummy0 [ 1518.577503][T22006] pim6reg1: entered promiscuous mode [ 1518.591133][T22006] pim6reg1: entered allmulticast mode [ 1518.910484][T22028] netlink: 666 bytes leftover after parsing attributes in process `syz.0.12911'. [ 1519.107796][T22034] netlink: 'syz.3.12913': attribute type 1 has an invalid length. [ 1519.142016][T22034] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1519.226156][T22041] netlink: 220 bytes leftover after parsing attributes in process `syz.0.12915'. [ 1519.372044][T22046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12916'. [ 1519.486784][T22051] 0{X: entered promiscuous mode [ 1519.538975][T22051] vlan2: entered promiscuous mode [ 1519.597349][T22054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12919'. [ 1519.822757][T22062] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12922'. [ 1519.838650][T22064] IPVS: set_ctl: invalid protocol: 8073 127.0.0.1:20000 [ 1519.873232][T22064] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 1519.994918][T22075] netlink: 'syz.2.12926': attribute type 1 has an invalid length. [ 1520.042409][T22081] Cannot find add_set index 46338 as target [ 1520.079580][T22075] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1520.089111][T22082] IPVS: Error connecting to the multicast addr [ 1520.182920][T22083] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12929'. [ 1520.255030][T22075] bond4: (slave geneve2): making interface the new active one [ 1520.295941][T22075] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1520.587713][T22116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12938'. [ 1520.835594][T22129] netlink: 'syz.1.12940': attribute type 9 has an invalid length. [ 1520.855008][T22130] macvtap0: entered allmulticast mode [ 1520.880015][T22130] veth0_macvtap: entered allmulticast mode [ 1520.889932][T22136] xt_hashlimit: size too large, truncated to 1048576 [ 1520.911892][T22134] xt_hashlimit: size too large, truncated to 1048576 [ 1521.035539][T22144] netlink: 'syz.2.12945': attribute type 1 has an invalid length. [ 1521.213813][T22155] netlink: 'syz.0.12947': attribute type 4 has an invalid length. [ 1521.289148][T22164] netlink: 'syz.3.12948': attribute type 1 has an invalid length. [ 1521.348843][T22164] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1522.017998][T22153] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1522.762691][T22251] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1522.796698][T22254] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1522.806629][T22254] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1522.816297][T22254] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1523.259789][T22291] __nla_validate_parse: 68 callbacks suppressed [ 1523.274897][T22291] netlink: 27 bytes leftover after parsing attributes in process `syz.0.12989'. [ 1523.355725][T22299] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 1523.381979][T22293] ip_tables: iptables: counters copy to user failed while replacing table [ 1523.431301][ C1] ip_tunnel: non-ECT from 172.20.20.10 with TOS=0x1 [ 1523.786287][T22321] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1523.941089][T22324] bond0: option packets_per_slave: invalid value (18446744073709551615) [ 1523.966133][T22324] bond0: option packets_per_slave: allowed values 0 - 65535 [ 1524.009695][T22324] bond0 (unregistering): Released all slaves [ 1524.044118][T22338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13003'. [ 1524.076604][T22330] ipt_ECN: cannot use operation on non-tcp rule [ 1524.225717][T22344] bond5: (slave vlan3): making interface the new active one [ 1524.237062][T22344] bond5: (slave vlan3): Enslaving as an active interface with an up link [ 1524.458908][T22368] netlink: 512 bytes leftover after parsing attributes in process `syz.3.13011'. [ 1524.746810][T22389] syzkaller0: entered promiscuous mode [ 1524.754311][T22389] syzkaller0: entered allmulticast mode [ 1524.847421][T22394] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1524.885784][T22392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13015'. [ 1525.368003][T22431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13027'. [ 1525.394945][T22436] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1525.973038][T22467] netlink: 'syz.2.13039': attribute type 1 has an invalid length. [ 1525.998222][T22473] netlink: 'syz.4.13041': attribute type 3 has an invalid length. [ 1526.011177][T22474] netlink: 'syz.4.13041': attribute type 3 has an invalid length. [ 1526.017504][T22467] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13039'. [ 1526.153646][T22481] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13042'. [ 1526.176926][T22481] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13042'. [ 1526.573406][T22492] 8021q: VLANs not supported on syzkaller1 [ 1526.598728][T22470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1526.657081][T22495] netlink: 'syz.2.13047': attribute type 3 has an invalid length. [ 1527.203216][T22530] netlink: 'syz.2.13060': attribute type 5 has an invalid length. [ 1527.279740][T22538] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13060'. [ 1527.367154][T22545] netlink: 244 bytes leftover after parsing attributes in process `syz.3.13062'. [ 1527.518198][T22537] syzkaller0: entered promiscuous mode [ 1527.541400][T22537] syzkaller0: entered allmulticast mode [ 1527.999909][T22584] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1528.027046][T22584] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1528.237917][T22603] xt_policy: neither incoming nor outgoing policy selected [ 1528.264927][T22590] tunl0: entered promiscuous mode [ 1528.275366][T22590] netlink: 'syz.4.13077': attribute type 4 has an invalid length. [ 1528.283883][T22590] __nla_validate_parse: 4 callbacks suppressed [ 1528.283897][T22590] netlink: 9 bytes leftover after parsing attributes in process `syz.4.13077'. [ 1528.294548][T22603] netlink: 1 bytes leftover after parsing attributes in process `syz.2.13080'. [ 1528.322370][T22603] xt_policy: neither incoming nor outgoing policy selected [ 1528.333093][T22590] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1528.366383][T22603] netlink: 1 bytes leftover after parsing attributes in process `syz.2.13080'. [ 1528.388172][T22603] xt_policy: neither incoming nor outgoing policy selected [ 1528.427238][T22603] netlink: 1 bytes leftover after parsing attributes in process `syz.2.13080'. [ 1528.464509][T22603] xt_policy: neither incoming nor outgoing policy selected [ 1528.487364][T22603] netlink: 1 bytes leftover after parsing attributes in process `syz.2.13080'. [ 1528.517592][T22603] xt_policy: neither incoming nor outgoing policy selected [ 1528.569328][T22603] netlink: 1 bytes leftover after parsing attributes in process `syz.2.13080'. [ 1528.591989][T22603] xt_policy: neither incoming nor outgoing policy selected [ 1528.628234][T22603] netlink: 1 bytes leftover after parsing attributes in process `syz.2.13080'. [ 1528.656189][T22603] xt_policy: neither incoming nor outgoing policy selected [ 1528.674721][T22619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1528.684186][T22603] netlink: 1 bytes leftover after parsing attributes in process `syz.2.13080'. [ 1528.708561][T22603] xt_policy: neither incoming nor outgoing policy selected [ 1528.726700][T22622] netlink: 'syz.3.13087': attribute type 1 has an invalid length. [ 1528.753462][T22622] netlink: 224 bytes leftover after parsing attributes in process `syz.3.13087'. [ 1528.766087][T22603] netlink: 1 bytes leftover after parsing attributes in process `syz.2.13080'. [ 1528.791098][T22603] xt_policy: neither incoming nor outgoing policy selected [ 1528.802983][T22603] xt_policy: neither incoming nor outgoing policy selected [ 1528.937951][T22631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1528.984681][T22631] openvswitch: netlink: Flow key attribute not present in set flow. [ 1528.998881][T22633] netlink: 'syz.3.13089': attribute type 33 has an invalid length. [ 1529.245701][T22650] bridge0: port 1(syz_tun) entered blocking state [ 1529.259717][T22650] bridge0: port 1(syz_tun) entered disabled state [ 1529.269445][T22650] syz_tun: entered allmulticast mode [ 1529.293263][T22650] syz_tun: entered promiscuous mode [ 1529.314487][T22654] xt_hashlimit: size too large, truncated to 1048576 [ 1529.734107][T22676] syzkaller0: entered promiscuous mode [ 1529.757181][T22676] syzkaller0: entered allmulticast mode [ 1530.215081][T22708] netlink: 'syz.3.13106': attribute type 1 has an invalid length. [ 1530.263770][T22711] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1530.303688][T22716] netlink: 'syz.3.13107': attribute type 10 has an invalid length. [ 1530.322343][T22716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1530.335135][T22716] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1530.382253][T22666] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1530.731970][T22738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1530.778547][T22736] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1530.792067][T22736] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.867651][T22738] : renamed from virt_wifi0 [ 1530.890592][T18614] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.086195][T22756] hsr0: entered allmulticast mode [ 1531.093449][T22756] hsr_slave_0: entered allmulticast mode [ 1531.123418][T22756] hsr_slave_1: entered allmulticast mode [ 1531.137542][T22761] validate_nla: 1 callbacks suppressed [ 1531.137554][T22761] netlink: 'syz.0.13123': attribute type 4 has an invalid length. [ 1531.511283][T22789] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 1531.543374][T22780] nbd0: detected capacity change from 0 to 63 [ 1531.553597][ T9315] block nbd0: Receive control failed (result -32) [ 1531.565661][ T11] block nbd0: Send control failed (result -32) [ 1531.575646][ T11] block nbd0: Request send failed, requeueing [ 1531.602069][ T1950] block nbd0: Dead connection, failed to find a fallback [ 1531.613228][ T1950] block nbd0: shutting down sockets [ 1531.619247][ T1950] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1531.631978][ T1950] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1531.640026][ T1950] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1531.647849][ T1950] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1531.656177][ T1950] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1531.667688][ T1950] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1531.677878][ T1950] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1531.689643][ T1950] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1531.698436][ T1950] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1531.706561][ T1950] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1531.716358][ T1950] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1531.726133][ T1950] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1531.734025][ T1950] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1531.742757][ T1950] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1531.754620][ T1950] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1531.764940][ T1950] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1531.775220][ T1950] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1531.785179][ T1950] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1531.795485][T22638] ldm_validate_partition_table(): Disk read failed. [ 1531.803410][ T1950] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1531.813373][ T1950] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1531.825168][T22638] Dev nbd0: unable to read RDB block 0 [ 1531.832972][T22638] nbd0: unable to read partition table [ 1531.932489][T22638] ldm_validate_partition_table(): Disk read failed. [ 1531.986929][T22638] Dev nbd0: unable to read RDB block 0 [ 1532.012163][T22638] nbd0: unable to read partition table [ 1532.194905][T22812] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1532.276844][T22812] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1532.325180][T22812] bond0 (unregistering): Released all slaves [ 1532.380489][ T9315] Bluetooth: hci3: command tx timeout [ 1532.684894][ T5273] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1532.853133][T22855] batadv0: entered promiscuous mode [ 1532.858730][T22855] macsec1: entered promiscuous mode [ 1532.872785][T22855] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1532.884336][T22855] batadv0: left promiscuous mode [ 1533.515217][T22900] netlink: 'syz.3.13162': attribute type 26 has an invalid length. [ 1533.559022][T22904] __nla_validate_parse: 36 callbacks suppressed [ 1533.559038][T22904] netlink: 27 bytes leftover after parsing attributes in process `syz.4.13163'. [ 1533.718442][T22919] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 1533.853547][T22923] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13170'. [ 1534.067640][T22943] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13174'. [ 1534.078397][T22944] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13174'. [ 1534.291652][T22952] netlink: 'syz.0.13177': attribute type 4 has an invalid length. [ 1534.326118][T22952] netlink: 17 bytes leftover after parsing attributes in process `syz.0.13177'. [ 1534.407080][T22960] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13178'. [ 1534.455470][T22960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13178'. [ 1534.968242][T22989] netlink: 'syz.3.13189': attribute type 21 has an invalid length. [ 1534.987889][T22989] netlink: 156 bytes leftover after parsing attributes in process `syz.3.13189'. [ 1535.042704][T22999] netlink: 'syz.0.13190': attribute type 1 has an invalid length. [ 1535.283937][T23013] team_slave_1: entered allmulticast mode [ 1535.528879][T23025] netlink: 'syz.2.13198': attribute type 1 has an invalid length. [ 1535.549235][T23025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13198'. [ 1535.623775][T22991] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.13191:22991 [ 1535.683979][T23032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13200'. [ 1535.727557][T23033] netlink: 'syz.1.13200': attribute type 1 has an invalid length. [ 1536.204445][T23071] syzkaller0: entered promiscuous mode [ 1536.223275][T23071] syzkaller0: entered allmulticast mode [ 1536.401320][T23081] macvtap0: entered allmulticast mode [ 1536.420409][T23081] veth0_macvtap: entered allmulticast mode [ 1536.640698][T23095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1536.990020][T23113] bridge_slave_1: left allmulticast mode [ 1537.013466][T23113] bridge_slave_1: left promiscuous mode [ 1537.036355][T23113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.077750][T23113] bridge_slave_0: left allmulticast mode [ 1537.099080][T23113] bridge_slave_0: left promiscuous mode [ 1537.119039][T23113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.200817][T23124] syzkaller1: entered promiscuous mode [ 1537.213248][T23124] syzkaller1: entered allmulticast mode [ 1537.233662][T23128] mac80211_hwsim hwsim125 syzkaller0: left promiscuous mode [ 1537.252434][T23128] mac80211_hwsim hwsim125 syzkaller0: left allmulticast mode [ 1537.279766][T23128] tipc: Enabled bearer , priority 1 [ 1537.536741][T23154] netlink: 'syz.1.13231': attribute type 12 has an invalid length. [ 1537.567674][T23154] netlink: 'syz.1.13231': attribute type 29 has an invalid length. [ 1537.604921][T23154] netlink: 'syz.1.13231': attribute type 2 has an invalid length. [ 1538.117442][T23189] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 1538.390437][T26449] tipc: Node number set to 1183718333 [ 1538.531886][T23216] netlink: 'syz.0.13248': attribute type 2 has an invalid length. [ 1538.576234][T23216] __nla_validate_parse: 8 callbacks suppressed [ 1538.576253][T23216] netlink: 100 bytes leftover after parsing attributes in process `syz.0.13248'. [ 1538.705450][T23220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13250'. [ 1538.919148][T23239] No such timeout policy "s" [ 1538.930397][T23239] netlink: Failed to associated timeout policy 's' [ 1539.231768][T23261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13261'. [ 1539.258653][T23267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13264'. [ 1539.273222][T23267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13264'. [ 1539.295099][T23267] netlink: 'syz.2.13264': attribute type 14 has an invalid length. [ 1539.313885][T23267] netlink: 'syz.2.13264': attribute type 13 has an invalid length. [ 1539.457316][T23277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13265'. [ 1539.574577][T23279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13267'. [ 1539.649198][T23287] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20000 [ 1539.854157][T19992] syzkaller0: tun_net_xmit 76 [ 1539.863955][T19992] syzkaller0: tun_net_xmit 48 [ 1539.880501][T26449] syzkaller0: tun_net_xmit 76 [ 1539.977562][T23307] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13280'. [ 1540.106931][T23313] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 1540.115351][T12858] syzkaller0: tun_net_xmit 76 [ 1540.444008][T23318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13282'. [ 1540.506202][T23319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1541.270511][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1541.278417][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1541.851317][T23322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13283'. [ 1542.737719][T23329] netlink: 'syz.3.13286': attribute type 1 has an invalid length. [ 1542.801774][T23337] netlink: 'syz.0.13288': attribute type 2 has an invalid length. [ 1542.817301][T23337] netlink: 'syz.0.13288': attribute type 11 has an invalid length. [ 1542.828503][T23333] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1542.836644][T23333] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1542.863287][T23336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1543.407919][T23369] openvswitch: netlink: IP tunnel dst address not specified [ 1543.435761][T23369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1543.677386][T23387] 8021q: VLANs not supported on xfrm0 [ 1543.778814][T23393] ip_tables: iptables: counters copy to user failed while replacing table [ 1544.357266][T23433] veth1_to_bond: entered allmulticast mode [ 1544.376031][T23433] veth1_to_bond: entered promiscuous mode [ 1544.389415][T23433] __nla_validate_parse: 10 callbacks suppressed [ 1544.389433][T23433] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13314'. [ 1544.409037][T23433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13314'. [ 1544.439728][T23433] veth1_to_bond (unregistering): left allmulticast mode [ 1544.469263][T23435] netlink: 'syz.0.13315': attribute type 2 has an invalid length. [ 1544.476086][T23433] veth1_to_bond (unregistering): left promiscuous mode [ 1544.502052][T23435] netlink: 188 bytes leftover after parsing attributes in process `syz.0.13315'. [ 1544.521212][T23433] bond0: (slave bond_slave_1): Releasing backup interface [ 1544.636225][T23445] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13318'. [ 1544.666238][T23445] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13318'. [ 1544.881661][T23456] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 1544.910554][T23456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13324'. [ 1544.972628][T23458] netlink: 108 bytes leftover after parsing attributes in process `syz.2.13325'. [ 1545.055162][ T29] audit: type=1804 audit(1786807740.938:32): pid=23466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.13328" name="/newroot/194/cgroup.controllers" dev="tmpfs" ino=1017 res=1 errno=0 [ 1545.082481][ T29] audit: type=1800 audit(1786807740.938:33): pid=23466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13328" name="cgroup.controllers" dev="tmpfs" ino=1017 res=0 errno=0 [ 1545.279721][T23477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13332'. [ 1546.004962][T23515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13344'. [ 1546.229175][T23526] netlink: 'syz.4.13347': attribute type 1 has an invalid length. [ 1546.326509][T23533] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13348'. [ 1547.263153][T23582] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1547.669057][T23606] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1547.712283][T23606] bond6 (unregistering): Released all slaves [ 1548.089372][T23629] netlink: 'syz.4.13376': attribute type 29 has an invalid length. [ 1548.274026][T23643] netlink: 'syz.0.13382': attribute type 8 has an invalid length. [ 1548.530253][T23657] netlink: 'syz.4.13389': attribute type 13 has an invalid length. [ 1548.553870][T23658] netlink: 'syz.4.13389': attribute type 13 has an invalid length. [ 1548.870350][T23679] syzkaller0: entered promiscuous mode [ 1548.882533][T23679] syzkaller0: entered allmulticast mode [ 1548.899238][T23685] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 1549.094319][T23700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1549.137586][T23699] netlink: 'syz.4.13399': attribute type 1 has an invalid length. [ 1549.156896][T23699] netlink: 'syz.4.13399': attribute type 1 has an invalid length. [ 1549.311510][T23718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1549.337845][T23718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1549.453032][T23725] __nla_validate_parse: 19 callbacks suppressed [ 1549.453056][T23725] netlink: 76 bytes leftover after parsing attributes in process `syz.0.13408'. [ 1549.479685][T23722] netlink: 244 bytes leftover after parsing attributes in process `syz.1.13406'. [ 1550.041254][T23761] vlan0: entered allmulticast mode [ 1550.046622][T23761] veth1_virt_wifi: entered allmulticast mode [ 1550.054705][T23771] netlink: 'syz.1.13421': attribute type 2 has an invalid length. [ 1550.071508][T23767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1550.098848][T23771] : entered promiscuous mode [ 1550.133363][T23765] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1550.327466][T23783] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1550.386113][T23786] nbd: nbd1 already in use [ 1550.403504][T23786] block nbd1: NBD_DISCONNECT [ 1550.412931][T23786] block nbd1: Send disconnect failed -32 [ 1550.424909][T23786] block nbd1: Send disconnect failed -32 [ 1550.441173][T23786] block nbd1: shutting down sockets [ 1550.473348][T23793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13428'. [ 1550.572499][T23798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13430'. [ 1550.632481][T23803] netlink: 160 bytes leftover after parsing attributes in process `syz.1.13432'. [ 1550.659681][T23803] netlink: 199784 bytes leftover after parsing attributes in process `syz.1.13432'. [ 1550.681294][T23803] netlink: 'syz.1.13432': attribute type 1 has an invalid length. [ 1550.811512][T23811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13435'. [ 1550.851890][T23813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13436'. [ 1550.889505][T23813] veth0_macvtap: left promiscuous mode [ 1551.041277][T23830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1551.093043][T23822] bond2 (unregistering): Released all slaves [ 1551.113223][T23835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13440'. [ 1551.150882][T23839] netlink: 'syz.4.13442': attribute type 1 has an invalid length. [ 1551.175745][T23835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1551.198439][T23835] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13440'. [ 1551.393125][T23839] bond3: entered promiscuous mode [ 1551.433732][T23839] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1551.479719][ C0] Unknown status report in ack skb [ 1551.692523][T23872] netlink: 'syz.0.13450': attribute type 29 has an invalid length. [ 1551.749568][T23853] bridge1: left promiscuous mode [ 1551.799115][T23853] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1551.843483][T23853] A link change request failed with some changes committed already. Interface dvmrp1 may have been left with an inconsistent configuration, please check. [ 1552.661747][T23926] Cannot find set identified by id 65534 to match [ 1553.094314][T23959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1553.284232][T23972] [ 1553.286611][T23972] ====================================================== [ 1553.293650][T23972] WARNING: possible circular locking dependency detected [ 1553.300709][T23972] syzkaller #0 Not tainted [ 1553.305141][T23972] ------------------------------------------------------ [ 1553.312203][T23972] syz.1.13479/23972 is trying to acquire lock: [ 1553.318373][T23972] ffffffff9001e080 (xps_map_mutex){+.+.}-{4:4}, at: netif_reset_xps_queues_gt+0x6f/0xc0 [ 1553.328234][T23972] [ 1553.328234][T23972] but task is already holding lock: [ 1553.335618][T23972] ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: netif_reset_xps_queues_gt+0x61/0xc0 [ 1553.345683][T23972] [ 1553.345683][T23972] which lock already depends on the new lock. [ 1553.345683][T23972] [ 1553.356097][T23972] [ 1553.356097][T23972] the existing dependency chain (in reverse order) is: [ 1553.365113][T23972] [ 1553.365113][T23972] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1553.372860][T23972] cpus_read_lock+0x42/0x160 [ 1553.378041][T23972] static_key_slow_inc+0x12/0x30 [ 1553.383520][T23972] nbd_genl_reconfigure+0x1301/0x1e80 [ 1553.389477][T23972] genl_family_rcv_msg_doit+0x233/0x340 [ 1553.395597][T23972] genl_rcv_msg+0x614/0x7a0 [ 1553.400637][T23972] netlink_rcv_skb+0x226/0x4a0 [ 1553.405934][T23972] genl_rcv+0x28/0x40 [ 1553.410453][T23972] netlink_unicast+0x7bb/0x940 [ 1553.415746][T23972] netlink_sendmsg+0x813/0xb40 [ 1553.421070][T23972] sock_sendmsg_nosec+0x13a/0x180 [ 1553.426639][T23972] ____sys_sendmsg+0x54e/0x850 [ 1553.431936][T23972] ___sys_sendmsg+0x2a5/0x360 [ 1553.437141][T23972] __x64_sys_sendmsg+0x1b1/0x290 [ 1553.442624][T23972] do_syscall_64+0x174/0x580 [ 1553.447753][T23972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.454189][T23972] [ 1553.454189][T23972] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1553.461842][T23972] __mutex_lock+0x19d/0x1550 [ 1553.466958][T23972] nbd_queue_rq+0x373/0x1150 [ 1553.472070][T23972] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1553.478240][T23972] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1553.485118][T23972] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1553.491636][T23972] blk_mq_run_work_fn+0x16c/0x300 [ 1553.497207][T23972] process_scheduled_works+0xa8e/0x14e0 [ 1553.503288][T23972] worker_thread+0xa47/0xfb0 [ 1553.508414][T23972] kthread+0x388/0x470 [ 1553.513030][T23972] ret_from_fork+0x514/0xb70 [ 1553.518173][T23972] ret_from_fork_asm+0x1a/0x30 [ 1553.523470][T23972] [ 1553.523470][T23972] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1553.530679][T23972] __mutex_lock+0x19d/0x1550 [ 1553.535837][T23972] nbd_queue_rq+0xc1/0x1150 [ 1553.540955][T23972] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1553.547042][T23972] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1553.553903][T23972] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1553.560410][T23972] blk_mq_run_work_fn+0x16c/0x300 [ 1553.565956][T23972] process_scheduled_works+0xa8e/0x14e0 [ 1553.572029][T23972] worker_thread+0xa47/0xfb0 [ 1553.577147][T23972] kthread+0x388/0x470 [ 1553.581746][T23972] ret_from_fork+0x514/0xb70 [ 1553.586887][T23972] ret_from_fork_asm+0x1a/0x30 [ 1553.592198][T23972] [ 1553.592198][T23972] -> #4 (set->srcu){.+.+}-{0:0}: [ 1553.599320][T23972] __synchronize_srcu+0xc9/0x2f0 [ 1553.604810][T23972] elevator_switch+0x1e8/0x7b0 [ 1553.610167][T23972] elevator_change+0x2fa/0x480 [ 1553.615471][T23972] elevator_set_default+0x375/0x440 [ 1553.621196][T23972] blk_register_queue+0x3f3/0x4e0 [ 1553.626780][T23972] __add_disk+0x6cb/0xe30 [ 1553.631657][T23972] add_disk_fwnode+0x100/0x3a0 [ 1553.636946][T23972] nbd_dev_add+0x733/0xb60 [ 1553.641896][T23972] nbd_init+0x15f/0x1e0 [ 1553.646672][T23972] do_one_initcall+0x250/0x870 [ 1553.651963][T23972] do_initcall_level+0x10a/0x1a0 [ 1553.657436][T23972] do_initcalls+0x59/0xa0 [ 1553.662282][T23972] kernel_init_freeable+0x29d/0x3e0 [ 1553.668017][T23972] kernel_init+0x1d/0x1d0 [ 1553.672916][T23972] ret_from_fork+0x514/0xb70 [ 1553.678043][T23972] ret_from_fork_asm+0x1a/0x30 [ 1553.683341][T23972] [ 1553.683341][T23972] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1553.691171][T23972] __mutex_lock+0x19d/0x1550 [ 1553.696299][T23972] elevator_change+0x1af/0x480 [ 1553.701598][T23972] elevator_set_none+0xb5/0x140 [ 1553.706987][T23972] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1553.713336][T23972] nbd_start_device+0x189/0xb30 [ 1553.718709][T23972] nbd_genl_connect+0x1597/0x1c10 [ 1553.724260][T23972] genl_family_rcv_msg_doit+0x233/0x340 [ 1553.730335][T23972] genl_rcv_msg+0x614/0x7a0 [ 1553.735365][T23972] netlink_rcv_skb+0x226/0x4a0 [ 1553.740658][T23972] genl_rcv+0x28/0x40 [ 1553.745181][T23972] netlink_unicast+0x7bb/0x940 [ 1553.750468][T23972] netlink_sendmsg+0x813/0xb40 [ 1553.755761][T23972] sock_sendmsg_nosec+0x13a/0x180 [ 1553.761327][T23972] ____sys_sendmsg+0x54e/0x850 [ 1553.766619][T23972] ___sys_sendmsg+0x2a5/0x360 [ 1553.771837][T23972] __x64_sys_sendmsg+0x1b1/0x290 [ 1553.777312][T23972] do_syscall_64+0x174/0x580 [ 1553.782437][T23972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.788854][T23972] [ 1553.788854][T23972] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1553.797473][T23972] blk_alloc_queue+0x544/0x690 [ 1553.802776][T23972] __blk_mq_alloc_disk+0x194/0x390 [ 1553.808420][T23972] nbd_dev_add+0x494/0xb60 [ 1553.813361][T23972] nbd_init+0x15f/0x1e0 [ 1553.818051][T23972] do_one_initcall+0x250/0x870 [ 1553.823345][T23972] do_initcall_level+0x10a/0x1a0 [ 1553.828806][T23972] do_initcalls+0x59/0xa0 [ 1553.833669][T23972] kernel_init_freeable+0x29d/0x3e0 [ 1553.839389][T23972] kernel_init+0x1d/0x1d0 [ 1553.844252][T23972] ret_from_fork+0x514/0xb70 [ 1553.849376][T23972] ret_from_fork_asm+0x1a/0x30 [ 1553.854670][T23972] [ 1553.854670][T23972] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1553.861890][T23972] fs_reclaim_acquire+0x71/0x100 [ 1553.867361][T23972] __kmalloc_noprof+0xbc/0x720 [ 1553.872656][T23972] __netif_set_xps_queue+0x4d8/0x1e30 [ 1553.878574][T23972] virtnet_set_affinity+0x586/0x6c0 [ 1553.884401][T23972] init_vqs+0x1085/0x11c0 [ 1553.889267][T23972] virtnet_probe+0x21f1/0x48d0 [ 1553.894564][T23972] virtio_dev_probe+0xdf6/0x10c0 [ 1553.900092][T23972] really_probe+0x254/0xae0 [ 1553.905177][T23972] __driver_probe_device+0x1e8/0x360 [ 1553.910995][T23972] driver_probe_device+0x4f/0x240 [ 1553.916550][T23972] __driver_attach+0x339/0x600 [ 1553.921841][T23972] bus_for_each_dev+0x23b/0x2c0 [ 1553.927225][T23972] bus_add_driver+0x345/0x670 [ 1553.932445][T23972] driver_register+0x23a/0x320 [ 1553.937734][T23972] virtio_net_driver_init+0x71/0xa0 [ 1553.943465][T23972] do_one_initcall+0x250/0x870 [ 1553.948762][T23972] do_initcall_level+0x10a/0x1a0 [ 1553.954227][T23972] do_initcalls+0x59/0xa0 [ 1553.959076][T23972] kernel_init_freeable+0x29d/0x3e0 [ 1553.964805][T23972] kernel_init+0x1d/0x1d0 [ 1553.969695][T23972] ret_from_fork+0x514/0xb70 [ 1553.974814][T23972] ret_from_fork_asm+0x1a/0x30 [ 1553.980110][T23972] [ 1553.980110][T23972] -> #0 (xps_map_mutex){+.+.}-{4:4}: [ 1553.987612][T23972] __lock_acquire+0x1520/0x2cf0 [ 1553.992998][T23972] lock_acquire+0x106/0x350 [ 1553.998033][T23972] __mutex_lock+0x19d/0x1550 [ 1554.003151][T23972] netif_reset_xps_queues_gt+0x6f/0xc0 [ 1554.009140][T23972] netif_set_real_num_tx_queues+0x8d8/0xae0 [ 1554.015555][T23972] veth_set_channels+0x46f/0xad0 [ 1554.021042][T23972] ethnl_set_channels+0x8d6/0x970 [ 1554.026691][T23972] ethnl_default_set_doit+0xa37/0x1080 [ 1554.032688][T23972] genl_family_rcv_msg_doit+0x233/0x340 [ 1554.038765][T23972] genl_rcv_msg+0x614/0x7a0 [ 1554.043803][T23972] netlink_rcv_skb+0x226/0x4a0 [ 1554.049099][T23972] genl_rcv+0x28/0x40 [ 1554.053619][T23972] netlink_unicast+0x7bb/0x940 [ 1554.058910][T23972] netlink_sendmsg+0x813/0xb40 [ 1554.064200][T23972] sock_sendmsg_nosec+0x13a/0x180 [ 1554.069752][T23972] ____sys_sendmsg+0x54e/0x850 [ 1554.075038][T23972] ___sys_sendmsg+0x2a5/0x360 [ 1554.080242][T23972] __x64_sys_sendmsg+0x1b1/0x290 [ 1554.085720][T23972] do_syscall_64+0x174/0x580 [ 1554.090843][T23972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.097272][T23972] [ 1554.097272][T23972] other info that might help us debug this: [ 1554.097272][T23972] [ 1554.107504][T23972] Chain exists of: [ 1554.107504][T23972] xps_map_mutex --> &nsock->tx_lock --> cpu_hotplug_lock [ 1554.107504][T23972] [ 1554.120463][T23972] Possible unsafe locking scenario: [ 1554.120463][T23972] [ 1554.127924][T23972] CPU0 CPU1 [ 1554.133302][T23972] ---- ---- [ 1554.138670][T23972] rlock(cpu_hotplug_lock); [ 1554.143275][T23972] lock(&nsock->tx_lock); [ 1554.150213][T23972] lock(cpu_hotplug_lock); [ 1554.157276][T23972] lock(xps_map_mutex); [ 1554.161540][T23972] [ 1554.161540][T23972] *** DEADLOCK *** [ 1554.161540][T23972] [ 1554.169683][T23972] 3 locks held by syz.1.13479/23972: [ 1554.174961][T23972] #0: ffffffff90098e68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1554.183156][T23972] #1: ffffffff90028440 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_default_set_doit+0x854/0x1080 [ 1554.193093][T23972] #2: ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: netif_reset_xps_queues_gt+0x61/0xc0 [ 1554.203541][T23972] [ 1554.203541][T23972] stack backtrace: [ 1554.209432][T23972] CPU: 1 UID: 0 PID: 23972 Comm: syz.1.13479 Not tainted syzkaller #0 PREEMPT(full) [ 1554.209450][T23972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1554.209459][T23972] Call Trace: [ 1554.209466][T23972] [ 1554.209472][T23972] dump_stack_lvl+0xe8/0x150 [ 1554.209495][T23972] print_circular_bug+0x2e1/0x300 [ 1554.209520][T23972] check_noncircular+0x12e/0x150 [ 1554.209545][T23972] __lock_acquire+0x1520/0x2cf0 [ 1554.209569][T23972] ? __bfs+0x153/0x290 [ 1554.209589][T23972] ? __pfx_hlock_conflict+0x10/0x10 [ 1554.209613][T23972] ? netif_reset_xps_queues_gt+0x6f/0xc0 [ 1554.209627][T23972] lock_acquire+0x106/0x350 [ 1554.209645][T23972] ? netif_reset_xps_queues_gt+0x6f/0xc0 [ 1554.209665][T23972] __mutex_lock+0x19d/0x1550 [ 1554.209682][T23972] ? netif_reset_xps_queues_gt+0x6f/0xc0 [ 1554.209718][T23972] ? netif_reset_xps_queues_gt+0x6f/0xc0 [ 1554.209734][T23972] ? __pfx___mutex_lock+0x10/0x10 [ 1554.209752][T23972] ? netif_reset_xps_queues_gt+0x61/0xc0 [ 1554.209774][T23972] netif_reset_xps_queues_gt+0x6f/0xc0 [ 1554.209790][T23972] netif_set_real_num_tx_queues+0x8d8/0xae0 [ 1554.209814][T23972] ? netif_set_real_num_rx_queues+0x224/0x330 [ 1554.209834][T23972] veth_set_channels+0x46f/0xad0 [ 1554.209860][T23972] ethnl_set_channels+0x8d6/0x970 [ 1554.209881][T23972] ? __pfx_ethnl_set_channels+0x10/0x10 [ 1554.209897][T23972] ? __kmalloc_node_track_caller_noprof+0x4e1/0x730 [ 1554.209919][T23972] ? ethnl_default_set_doit+0x9a4/0x1080 [ 1554.209942][T23972] ? ethnl_ops_begin+0x30f/0x3c0 [ 1554.209962][T23972] ethnl_default_set_doit+0xa37/0x1080 [ 1554.209987][T23972] genl_family_rcv_msg_doit+0x233/0x340 [ 1554.210013][T23972] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1554.210041][T23972] ? bpf_lsm_capable+0x9/0x20 [ 1554.210060][T23972] ? security_capable+0x7e/0x2c0 [ 1554.210168][T23972] genl_rcv_msg+0x614/0x7a0 [ 1554.210193][T23972] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1554.210214][T23972] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1554.210235][T23972] ? __pfx_ref_tracker_free+0x10/0x10 [ 1554.210260][T23972] netlink_rcv_skb+0x226/0x4a0 [ 1554.210277][T23972] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1554.210300][T23972] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1554.210322][T23972] ? down_read+0x2be/0x330 [ 1554.210342][T23972] genl_rcv+0x28/0x40 [ 1554.210362][T23972] netlink_unicast+0x7bb/0x940 [ 1554.210381][T23972] netlink_sendmsg+0x813/0xb40 [ 1554.210403][T23972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1554.210423][T23972] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1554.210439][T23972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1554.210456][T23972] sock_sendmsg_nosec+0x13a/0x180 [ 1554.210479][T23972] ____sys_sendmsg+0x54e/0x850 [ 1554.210498][T23972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1554.210518][T23972] ? import_iovec+0x73/0xa0 [ 1554.210542][T23972] ___sys_sendmsg+0x2a5/0x360 [ 1554.210558][T23972] ? __lock_acquire+0x683/0x2cf0 [ 1554.210580][T23972] ? __pfx____sys_sendmsg+0x10/0x10 [ 1554.210598][T23972] ? futex_wake+0x51b/0x5f0 [ 1554.210626][T23972] ? __fget_files+0x2a/0x420 [ 1554.210656][T23972] ? __fget_files+0x3a2/0x420 [ 1554.210678][T23972] __x64_sys_sendmsg+0x1b1/0x290 [ 1554.210695][T23972] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1554.210717][T23972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.210732][T23972] do_syscall_64+0x174/0x580 [ 1554.210749][T23972] ? trace_irq_disable+0x3b/0x140 [ 1554.210766][T23972] ? clear_bhb_loop+0x70/0xc0 [ 1554.210782][T23972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.210799][T23972] RIP: 0033:0x7f6f0b79e0d9 [ 1554.210814][T23972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1554.210828][T23972] RSP: 002b:00007f6f099f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1554.210844][T23972] RAX: ffffffffffffffda RBX: 00007f6f0ba25fa0 RCX: 00007f6f0b79e0d9 [ 1554.210855][T23972] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 1554.210864][T23972] RBP: 00007f6f0b835024 R08: 0000000000000000 R09: 0000000000000000 [ 1554.210873][T23972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1554.210882][T23972] R13: 00007f6f0ba26038 R14: 00007f6f0ba25fa0 R15: 00007ffc94391798 [ 1554.210899][T23972] [ 1554.341234][T23982] validate_nla: 1 callbacks suppressed [ 1554.341278][T23982] netlink: 'syz.0.13483': attribute type 1 has an invalid length. [ 1554.579439][T23979] __nla_validate_parse: 6 callbacks suppressed [ 1554.579456][T23979] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13482'. [ 1554.653409][T23982] netlink: 200 bytes leftover after parsing attributes in process `syz.0.13483'. [ 1554.682727][T23982] netlink: 41 bytes leftover after parsing attributes in process `syz.0.13483'. [ 1556.630036][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!