last executing test programs: 3.474102s ago: executing program 1 (id=2556): ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x2000000a}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000140), 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000140), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r1}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r1}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000200)={'sit0\x00', r3, 0x7, 0x40, 0x2, 0x7, {{0x19, 0x4, 0x2, 0x37, 0x64, 0x66, 0x0, 0x48, 0x29, 0x0, @multicast1, @broadcast, {[@lsrr={0x83, 0x7, 0x3c, [@multicast2]}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x5, 0xc, "6800eba6a3d514c79d73"}, {0x0, 0xb, "94643b5419a0afd379"}]}, @ssrr={0x89, 0x2b, 0xbc, [@multicast2, @remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @remote, @multicast2]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000200)={'sit0\x00', r3, 0x7, 0x40, 0x2, 0x7, {{0x19, 0x4, 0x2, 0x37, 0x64, 0x66, 0x0, 0x48, 0x29, 0x0, @multicast1, @broadcast, {[@lsrr={0x83, 0x7, 0x3c, [@multicast2]}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x5, 0xc, "6800eba6a3d514c79d73"}, {0x0, 0xb, "94643b5419a0afd379"}]}, @ssrr={0x89, 0x2b, 0xbc, [@multicast2, @remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @remote, @multicast2]}]}}}}}) socket$igmp(0x2, 0x3, 0x2) (async) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev, @in6}}, {{@in6=@mcast2}}}, &(0x7f0000000400)=0xe8) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000400)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000440)={{{@in=@multicast2, @in=@broadcast, 0x4e21, 0x5, 0x4e21, 0x5, 0xa, 0x20, 0x0, 0x5e, 0x0, r7}, {0x2, 0x7fffffffffffffff, 0x8, 0x8, 0x5, 0x0, 0x10, 0x5c3b44c6}, {0x2, 0x4, 0x9, 0x6}, 0x8, 0x0, 0x2, 0x0, 0x2, 0x2}, {{@in6=@private2, 0x4d4, 0xff}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x0, 0xf6, 0x3, 0xffff8000}}, 0xe8) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r2) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000580)={0x9, {{0xa, 0x4e20, 0x5, @private1, 0x1}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000580)={0x9, {{0xa, 0x4e20, 0x5, @private1, 0x1}}}, 0x88) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000640)={0xfe00, 0x8, 0x0, 0x422}, 0x8) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r8, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$kcm(0x29, 0x5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000880)={'gre0\x00', &(0x7f0000000800)={'tunl0\x00', r6, 0x80, 0x8, 0x61, 0x6379, {{0x16, 0x4, 0x2, 0x3d, 0x58, 0x64, 0x0, 0x6, 0x2f, 0x0, @loopback, @rand_addr=0x64010101, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x22, 0x1, [{0x7, 0xb, "c831137eb48c36089a"}, {0x6, 0x11, "306c4d2d0294c9508c51d2bd3f83b0"}]}, @timestamp_addr={0x44, 0x1c, 0x92, 0x1, 0x0, [{@multicast1, 0x10001}, {@loopback, 0x883f}, {@empty, 0x81}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000900)={@empty, @multicast1, 0x0}, &(0x7f0000000940)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_GET(r9, &(0x7f0000000c00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000980)={0x22c, r10, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_GET(r9, &(0x7f0000000c00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000980)={0x22c, r10, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10c, 0x39, 0x100, 0x70bd27, 0x25dfdbfd, {0xf}, [@nested={0xba, 0x106, 0x0, 0x1, [@nested={0x4, 0xa5}, @generic="0035e0c7f34b8ce6cf7cb9910f7c4d2d7397fe436844423a135061e552e7eb57fc7901a72e9fe9d1bf8ea5a6ec09c02e897f7f96", @generic="272d7a5fa1ffb50d2be705ec4a209404d473b8366f910a8c3e1684cf4614dd06f9085ef06d0dd6928f216379e4c957395e852e8265c55de184944ef863333a373e2ae2042681a30174617ef1e6fc34c2b722ac288f18ad9910c0eafeb7dae60d01e6555b71c48bcdd694d5a3b5c9dfe57cea", @nested={0x4, 0x85}, @typed={0x8, 0xa5, 0x0, 0x0, @uid=r7}]}, @typed={0xc, 0x3a, 0x0, 0x0, @u64=0xff}, @generic="2ab7ee853a5b35cd1e91b4ca2ea5331255dbfc7990bbe08b6a2fc39132a4db5bc77f", @typed={0xc, 0x107, 0x0, 0x0, @u64=0x2}]}, 0x10c}}, 0x4004800) (async) sendmsg$nl_generic(r9, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10c, 0x39, 0x100, 0x70bd27, 0x25dfdbfd, {0xf}, [@nested={0xba, 0x106, 0x0, 0x1, [@nested={0x4, 0xa5}, @generic="0035e0c7f34b8ce6cf7cb9910f7c4d2d7397fe436844423a135061e552e7eb57fc7901a72e9fe9d1bf8ea5a6ec09c02e897f7f96", @generic="272d7a5fa1ffb50d2be705ec4a209404d473b8366f910a8c3e1684cf4614dd06f9085ef06d0dd6928f216379e4c957395e852e8265c55de184944ef863333a373e2ae2042681a30174617ef1e6fc34c2b722ac288f18ad9910c0eafeb7dae60d01e6555b71c48bcdd694d5a3b5c9dfe57cea", @nested={0x4, 0x85}, @typed={0x8, 0xa5, 0x0, 0x0, @uid=r7}]}, @typed={0xc, 0x3a, 0x0, 0x0, @u64=0xff}, @generic="2ab7ee853a5b35cd1e91b4ca2ea5331255dbfc7990bbe08b6a2fc39132a4db5bc77f", @typed={0xc, 0x107, 0x0, 0x0, @u64=0x2}]}, 0x10c}}, 0x4004800) sendmsg$tipc(r2, &(0x7f0000000fc0)={&(0x7f0000000e40)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x3}}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000e80)="a5f3e6cd01cdc019ccb36f0e3b5b3de21d01c453c624604c089114cc0d188c040398fd9cd9cb5e7b296f1223302b997ee629bdfab8d3e53ece0aafe92e0fc850365c88393536d4086a9642272dbadab17445fb9db3cc8c7f9dcd4c3e237ca8527286631a1168a4d7aa3b5336c1214e", 0x6f}], 0x1, &(0x7f0000000f40)="82172a7300435bd423b3bbbc41d80b06ae84e9a49a1e0b5e48ee785c092174a5571bf83edb6d72274bae8e9317c7b79039cb6f86e23ce1c46b98019e2c0960d9b215309d1563c405a0380afd830193ee0a143d7a0982", 0x56, 0x4040000}, 0x4000) (async) sendmsg$tipc(r2, &(0x7f0000000fc0)={&(0x7f0000000e40)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x3}}, 0x10, &(0x7f0000000f00)=[{&(0x7f0000000e80)="a5f3e6cd01cdc019ccb36f0e3b5b3de21d01c453c624604c089114cc0d188c040398fd9cd9cb5e7b296f1223302b997ee629bdfab8d3e53ece0aafe92e0fc850365c88393536d4086a9642272dbadab17445fb9db3cc8c7f9dcd4c3e237ca8527286631a1168a4d7aa3b5336c1214e", 0x6f}], 0x1, &(0x7f0000000f40)="82172a7300435bd423b3bbbc41d80b06ae84e9a49a1e0b5e48ee785c092174a5571bf83edb6d72274bae8e9317c7b79039cb6f86e23ce1c46b98019e2c0960d9b215309d1563c405a0380afd830193ee0a143d7a0982", 0x56, 0x4040000}, 0x4000) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000001000)={0x0, "7be1db10ba32dab549bb5fcf9519e1e2"}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000002000)={r14, "3cd7a3280ab333f3e910450fbfbaa3ec"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000031c0)={0xffffffffffffffff, 0x0, 0x35, 0xc1, &(0x7f0000003000)="97ee1a59e9e43b31fbf26ca66513f7d558abfc01ee8f7a3e03fba43a99552f5c6ea29c6071aaabe5e84893cd6a348bc0e884ba8582", &(0x7f0000003040)=""/193, 0x9, 0x0, 0x36, 0x36, &(0x7f0000003140)="a2a4a2b9769ac2285bac79bc47b81c1e32ec3037f02e768bad776902663b48bc2152445df6ad337b02fcc8d8462ee2cb9de19102ed15", &(0x7f0000003180)="a45414940a1c9c6b6023d48802027d2cc2de936049823f98254169998e4531cc859243049125088c81635064a8326d1f90d127ef3f4f", 0x0, 0x0, 0x9}, 0x50) accept4(r1, &(0x7f0000003240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f00000032c0)=0x80, 0x81000) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000003300), 0x2, 0x0) (async) r15 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000003300), 0x2, 0x0) write$cgroup_type(r15, &(0x7f0000003340), 0x9) 3.467232909s ago: executing program 4 (id=2557): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0x1, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000080)=0x401, 0x4) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 3.32460233s ago: executing program 1 (id=2560): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x204002) sendto$inet6(r0, 0x0, 0x0, 0x20040800, &(0x7f0000000180)={0xa, 0x4e24, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50afa, 0x70823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}]}}}]}, 0x5c}}, 0x24000800) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@can_newroute={0x48, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x3}, [@CGW_SRC_IF={0x8, 0x9, r5}, @CGW_DST_IF={0x8, 0xa, r5}, @CGW_FILTER={0xc, 0xb, {{0x3, 0x0, 0x1}, {0x2, 0x0, 0x1}}}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x9, 0x3, 0x0, 0x0, "cdcb47b9a87c9e44"}, 0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x0, 0x0) 3.083294961s ago: executing program 1 (id=2564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x64, r1, 0x1, 0x170bd25, 0x25dfdbfc, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x3}}}, {{@pci, {0x8, 0x3, 0x4000001}}}]}, 0xfde3}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004810) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x3, 'virt_wifi0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe006fe000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) write$tun(r3, &(0x7f0000000500)={@void, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0xe000, 0x6, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x41}}, {0xa001, 0x880b, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x0, @void}}}}}}}}, 0x2e) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x17, &(0x7f0000000340)=0x1, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="d8000000180081064e81f782db4cb904021e0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cf6efbca4158858e796834b25ae5a3048000a007a290457f01a7cee4090000001fb7913fd25a21ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f", 0xa2}, {&(0x7f0000000280)="c6e92830568379be24e7d2cfa14e3179fea6a9af4f780998ebb65a384d5eea865c38871cc1350c7e42fcf530054c203e2273e02faf8c31", 0x37}], 0x2}, 0x22040000) 2.640584043s ago: executing program 1 (id=2566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x400b}, {0x4c, 0x14, {0xffffffee, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="180100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b030000043500000a0002002c0013"], 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r1, 0x100, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000100)={&(0x7f0000000040)=[{0x5, 0x1, 0x1, 0x7f, 0x2}, {0x40, 0x7, 0x3, 0x3, 0x100}, {0x2, 0x2, 0xc33, 0xb, 0x5e}, {0x7, 0x800, 0x3, 0x10001, 0x9}], 0x4, 0x28, 0xc8ff, 0x9}) 2.539298687s ago: executing program 2 (id=2568): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000cd693887000e0001006e657464657673696d0000000f0002006e657464657673696d30000006007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x64}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x5e001, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000340)="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") (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f0000000680)=@ethtool_coalesce={0xe, 0xf9, 0x0, 0x4, 0xf, 0xfffffffd, 0x7, 0x48, 0xfffffffb, 0x1, 0x7ff, 0x0, 0x0, 0x8, 0x401, 0x4, 0x3, 0xc, 0x24, 0x2, 0x4, 0x41, 0x2}}) (async) r5 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="7000aaaabb0800ba6fa0bc3af50e78ac1e0301e0000001000088be00189078040000000000ddffff00"/58], 0x3e) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000d080eace5a918a5a7464657673696d0000000f0002006e657464657673696d300000da32a24c9cd0a6655a6fb3cb00fc160000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$netlink(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r8) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000002c0)={'\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {}, {0xe}}}, 0x24}}, 0x40004) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000ffff14000780080008000000008908000640000001250500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x400c5) 2.468269221s ago: executing program 1 (id=2570): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x50, r2, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001780), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000001840)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x1c, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x1a, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x15b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @alu={0x4, 0x1, 0x137b5d77425d3ce0, 0x5, 0x9, 0x4, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000001740)={0x2, 0x7, 0x9, 0xa}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000003c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000400)=[{0x4, 0x2, 0x0, 0x4}, {0x5, 0x1, 0xd, 0x3}, {0x4, 0x3, 0x9}, {0x2, 0x4, 0x6, 0x8}, {0x1, 0x4, 0x4}, {0x1, 0x5, 0xb, 0x7}, {0x0, 0x3, 0x0, 0x6}, {0x4, 0x5, 0x4, 0x4}], 0x10, 0xa5ac}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000016c0)={r5, 0x0, 0x32, 0xc5, &(0x7f0000000540)="950d62f48ddd7d8757b03a2752d32870112f34c8a55d30335c3bcf6326d90c19a1b448ce285233d03e23899d265a57a4cc3b", &(0x7f0000000580)=""/197, 0x6, 0x0, 0x1f, 0x1000, &(0x7f0000000680)="a750ab10e78f4f5a180c1378a6adadfb330ba2584cdda4cf8fe2b709ce5ed6", &(0x7f00000006c0)="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", 0x4, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x50, r2, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001780), 0xffffffffffffffff) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000001840)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x1c, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x1a, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x15b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @alu={0x4, 0x1, 0x137b5d77425d3ce0, 0x5, 0x9, 0x4, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000001740)={0x2, 0x7, 0x9, 0xa}, 0x10, 0xffffffffffffffff, r0, 0x8, &(0x7f00000003c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000400)=[{0x4, 0x2, 0x0, 0x4}, {0x5, 0x1, 0xd, 0x3}, {0x4, 0x3, 0x9}, {0x2, 0x4, 0x6, 0x8}, {0x1, 0x4, 0x4}, {0x1, 0x5, 0xb, 0x7}, {0x0, 0x3, 0x0, 0x6}, {0x4, 0x5, 0x4, 0x4}], 0x10, 0xa5ac}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000016c0)={r5, 0x0, 0x32, 0xc5, &(0x7f0000000540)="950d62f48ddd7d8757b03a2752d32870112f34c8a55d30335c3bcf6326d90c19a1b448ce285233d03e23899d265a57a4cc3b", &(0x7f0000000580)=""/197, 0x6, 0x0, 0x1f, 0x1000, &(0x7f0000000680)="a750ab10e78f4f5a180c1378a6adadfb330ba2584cdda4cf8fe2b709ce5ed6", &(0x7f00000006c0)="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", 0x4, 0x0, 0x2}, 0x50) (async) 2.387881763s ago: executing program 4 (id=2571): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) unshare(0x6a040000) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x10000008ebc, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) syz_emit_ethernet(0x76, &(0x7f00000006c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @private2, [@dstopts={0x0, 0x0, '\x00', [@generic={0x40}]}]}}}}}}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x17}], 0x400000000000172, 0x4001c00) 2.387414425s ago: executing program 2 (id=2572): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x2, 0xffffffff, 0x0, 0xfea}, 0x43e, 0x0, 0x8, 0x7, 0x200, 0x4, 0x2, 0x0, 0x8, 0x51, {0x8, 0x6, 0x3, 0x6, 0x4, 0xe}}}}]}, 0x78}}, 0x20008001) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x3c}}, 0x4000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtclass={0x21, 0x28, 0x20, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3, 0x3}, {0x1, 0xffe0}, {0x8}}, [@tclass_kind_options=@c_fq_codel, @TCA_RATE={0x6, 0x5, {0x7f, 0x3}}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}]}, 0x3c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000040000100feffffffffdbdf25017c0c00000042800c00018006000600800a00001c00020018001780140001"], 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) 2.306920752s ago: executing program 1 (id=2574): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8fdffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000f8ffffff8500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0xdd7, 0x4) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 2.154808495s ago: executing program 2 (id=2575): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="94010000", @ANYRES16=r5, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000600)={0x0, 0xb15, 0x5}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000a00)={r6, 0x4, 0x800}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000340)={0x4, 0x6, 0x31, 0x5, 0x80, 0x9, 0x42, 0x1, 0x8b, 0x7, 0x8, 0x8, 0xfe, 0x8}, 0xe) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0xfffffff7, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f00000000c0)={r8, 0x1}, &(0x7f00000001c0)=0x8) pwritev(r4, &(0x7f00000025c0)=[{&(0x7f0000001340)="4d913c4af6e528603f0acef509e4b88cd42ddfa8ed6619f4eb061a823811a5ec775b6e05ab6a0b83203ebb6c98c769010e56f7ca6c3f5b0b6857240f95935d0abb58a02962d07aab2376bff04196312e436e789fc7b7402623c76cd689bb16e4c3016376c48bf59cc755126f56e5eead1c6ca5b04ed7107a7b9539480534e2b20ddcbf9f71f173f68c626f8dda03f1b9db4dc26c32e9c437a8a9d57d0b0e44b68960bc265ea2ed4e5e9c9842dc4fdcd7ac2a0b888295b6a4b801644d84965fd44ac286f8e8bf197d85d567478cfc90d22fc9f85aef10fbbc74d799ddc6973cb5c5fa82d1b5274548dca4eb4853edfe8ba81bc56d30d088dd07fa1cfe75d441b80bdbfa5b61c552d7db7c1e78f980f1a24d8d432bc68f067d0a5d54814a24cd64b255fc1943a02cbf84fd09073c09861abe8929404b663c5a676b716997412df4ca81b201014219be9c84524e2ce8d623da850027b006a5e7eaae5093f28228d18732f0d23c87419f4deb664a0061a23ec4da2baa0cdefd82173a757ed4e5699c399a568045ba2eb32b5f9e738d8707393abb4e58cd31f17326986555de1b704e55acf8b77700f64c803b50b566313a17b22a3b8d6af0196cb57692a002e309a0423a7a6dfb6f16526b2f374ce28937c1b01d06d2151ad0b1006212f6a13c1b417a553ccd6752f04f81233ac34f46b214c6cea1e5414a67a11fb0e1de70072b2bfe36f771b05ffdd4c79b550b02727d5bba1e10a2099686dfe020aefa39f81658188f94b93edda4946f36dcdbed57d8726e598d4b506c4c26f336ee358a8640aeb2538e01114fc72e5f6838389876d8180abd075fbd77f51e85978b56beaaac23b517cff70dd967e4f1b8a45a78aa0efcfe66dade39567c2da5686e9e5ba64e199a33e0d71518621dc0d2a70e453de678f33164c3c0a1c6960b506f3306ea91c292dbe4b02847dc14e9e688a7eb104ab4bdce4cbf6eb7261913ec11d9717d16fd1816a100185f8ce0c1c7e6e886f191250de8ebc9450ce992e8a4773d80c43c459d70bd77c489115d1470f0edfa92f5f68f3dc26fb62b8999f956a045d193fd3c7482f5ff872f99c53db7f2be2e4cdfd7550abf79076703b6d52ce9d9a26146c81e4116f96122140cb447683bf6caca462110e984ca3999186b0914a3722a0d9d6df02b427295b428cadf7e41238812e9c978c1bed1992cce287c67ad0cd92ee3f405186924104ed09ba30f85d6b04df9b1f842958614567141453aee7e450fc051fb801e7e6515002baf6faaa8e2c00ca2c3732c3d5272c989323b3e4f7232b0faa5336505d960621b5d9e9b1cdd0e6c48930395b7cd2fc6c33a797b2913e1d2e6aea08847b05674057936113a13bcdbd843c0aede15e2a41b3745bacdf08dcabf6468318373c014f1861804c587fe7700ecc88aa9b5fc37f57ac5cf086ae14ba388f5396fad7709d4490c07770baab066af1060efa09b4e3cd058f5a137ec2112d078bbe81eba6ee50d78cb62d922f7e524142c1432d4146fc73e0a78120b459b5ede50d7bb891a3ba6cd63e9243ed36c0ed66c8dd936d4d9acbdee494fb4101fc0ea711dcf6ef46a7e876a208a35e90105a722ffaaef2ff0499d497ded08658946b281732aa8c6a81e20274656b87d1ade47d18bcb8b09361ae5f931e990736031c5847b0480d132c16ad4b4278a3d6e0104f0dcfbf8e5faa6b35c46c901c383178a116f1eb2207f6794f2263810e038c18cd9dfc3defcdc741892b8882d560eb81ad6c64033a376c2458bf8b46881fc232728d2490acb6460ba1eef574a9052e59df1d185cae61d7e21b1df531e9f19ef4764f195c78bf6e5227d848d09c2c607b028c07c815c1623b8dee7335cfa0afd99bdc7d2b0a2135c4bf9909f1ec067a29cd8b52590e98560b4389d6d099b825dcd947b60558271dceb9ef7e760b355620d5d9b279f748bcc6aeb3a29270a1adf3af1d921864320535729cb6652532b18fe094513b7a4765985941347332a7672cb7dbb0c4314d0bcc1935153f4256e4521b9663ff356e8b45c088143d259eb21ef971da8d3a94d9a6f77aee30b7f43876a28012bcb93880a2b8a0c93c3b2bcc6ad1125c690f466b956133735f862dcb9e00b3ff4c30aac4b1ec0747995d01a82e45828380abcd5b20095fe2b6563262f892d0232ac252902fbd6fcfec39224567a54bf004c8d2197fa4bc5c125054dba788e14470acc042df75d914069e10687b68e3ea2209c945cdd86ce75fe1b5e722e1c3087e7a1282b6111808e161fac302d458eb25d86634a2fbda37eb9ac2377973c41f26a29cb7de362aaa197c76365c2fdfe3676dc44e4c20c22274b39da939a230f938f6b51991eba03ed5d38773f44133c1a28276bb563fda71f8cce8854c3a23945277eba9d1fabb79026613345b2af939d14cc03a5a3a5583654f21ad6930d678b9c3d27d5048f01e3cd0d84eaa969d3f05abcdd2653a87715f84cf96e48203cce8c381287e19c69f0b31341238a6bd6cbfefa24914550aa04edf501e006605da80a3c7e4086b5bd8968d3642b206628fa17a7ccdd5f41a0fdc247aaae67e9737121cbf5b5892083d5a15ec7d9945752f344e6411dbfb0e5bf977899205d7ccf7146975fdae7d53a37f6fa3f859b01663b534b01e24a5068cb1f69044921ffcb59997b0484fb0f10c11dd39b6bdb88d2087d600feefb68f0b3645ecf138e82797f938cfffdc2a9407e225537745062f5c035a2c79d92af5922aec5db1417f938cc03ad871fed006bb0bb0f2c55e83e038ec7985ba63c169318447cc341a34dd63212a0986e90decf7f406ed155c76c2fedcfbd917effcff55437f82582f4ee7d8b94d11562bb67f0ab3f6ebfc5ec032d7fe25cf4d41a33ef5e15225963dcf1abc921e6ae809ac7937c5ed817f1772408305258d7edb73499c808ab5acf532191f48da0b1f8686cd563b07e0e58bf8daf036588854bc9c1557c387d18a7e4d34c15fdf0325fde33297b8fb2fa7e7985b5da2e1b49606fe601a09a1c2ac8b39d3412617d4efdb9464f2c5e43bf7f9ee10017e6ba12fed0c1d036c76a8d14f9f0d0dcd5828e074b8da85a956ae685a2cc259a1c28e8dc83901e3e9a80c8659181eadd615ece29ae133d6f415af50859a6ac965266f8b7dc907e245cde86c3922a316db793163e09e6b82adfa8e1863ea1844d0f56845a7ab3051ab81b026c78d7ffbe582157b03903bd538dae376a963009a5b20086785f62877d7ac8c28267254854fe9dfa1480d2c415bf49670b12708fbf96258b5226f2fde76e79afaaffdeb0a56e792edb7cb91866d58c9604392711ecb06ac705a0e081ceb0aaed5678fb5b3c3b780f67e733b1098f79a0a213bb9e4a0f218178b088381670919201ded62ebf17ac5bd0152c6f6973ff474a2edb984cb92d5bae3f5a44117408f22769115221e3dc709c1f549671948e44216b4be314c316a04eb7314c40d32f8b4301723e6c327c02d0b2bec81439da066467f7bc3d286241187a17de5dd946a4170824ff451157ebf4c6ed529cf7f849614c6433afcec78212a6fa9a1d89aebb7009b82118d90e534604ba32286fef8f52ce6e97346120bfe95f92256b1968c24f64cffc0c52391f7478ca12428ca61eabc16ab310ed5943362a13ea0891828a0a59e9a3a15f2f931c30f5713e5640ce76162ecc8062fff82daa720d4f5ffb0f8af3b6b2a6bec6cd836d918bc13d6f6fd959a67b3e99304d2a9ad691c62ce8dc7d94be84c030bea21c3f430497ef87830a26e6078017ee9a1305aef57715cdce9b6bc0cf25ec6b25c31a14bdf5908260b2b51914b8a96827395d75d0cfefac3628f5b761e104f6767e82e1acdbf2cdad05c9b64d6d887cdc72b6b35e623163a3b9029b0a1dbb7760fa5ec9443ca199c542f8083ce6ff2356bcb596231a07850c43521c4108325ccecd9f4f5430876f335e3c2f523e40c2ebd7d722f9cca8385520d3b84bf8932f4a6efd9d0267c60f711cf610654e734af1fc04f7ef6f21136ab1d5f2d76ba404984d1de33ecab07309c9acdd36b2f8e38a0ecf360f2a5958ac474e15ed24a2b9b0323168c69afe9665a5bafc5c64a6443e2de5f40f058a00f1d6ffa2fa79dc9344cdfc5fec501093f4efee247d1be5bc10c80e3d2b73109e3282e9d68b75fa45c917cc1e15ca04abd108c27cad8090b471c6a39ce36e9f7ed8d9ad10555031b9d00f6c0e7e6048904f49e493027103866e2606baf81d6c85cf8bdbf876641ae44cf29f261dd26179add2959ae7c44b16259f55a3dbb84593c02e544b2a1fc26fbf75104b08b8a94ba6778f3530041fd2ab85ffeb90275f13b335d17b9b84ba43939e969f3732a7ae9cbd1790f6745bd448c485dbfadcad6b277a41f65576a55f3fb7ea5794e6676a74b61509a2a63226163e47b700c7786ce31281cdf610c14c2a8ec9015e7f1ae8ab7ab6e54a4f4561a30fc456d3df03c1e6c974b709af9ec6b8b7f7f8379baca8abb241b3b2e7d21fca6fe1e7677ed39a9e4dd991c6dd4b79d940bd807b81b3df1548b1b557ee75f3737489d96d74c51336c5be74236b465d37de582e5e20dd0e58327f294fef807ee36ae6fdd5aa49250ee40868533330a5a3ad6a0b51e7a5ef8ff572e2798e52b4f752a1949d33a03014189265bfd43071d940b412986c3aa64576476804d488eaa81deae11bf865df749c2ff01735fb96512d66acc682f50c197cec1ee8230097b54a52f40269954a689e5822aeb1ecbccfa78dc9189b7572ae20827ddc5599fb1cf44d0e719b6b73adc6d35711d40300f4b58e9be78837accb2041d40c36d3ac2402b1c2ce06b76f087e3201dedd7f8fd0a0acc7be9aef75dddcdad9067cfa8fc2bdaee66858ae175a81a5191e57ec6a6ce75220b118f1dc634a2b0f44bfc1d588a876ccaad4da6026635e9fdafaa82525a5dc4f746c0b2bb9f1c11bd9cab0858a1dd36734e820cfe557d47aa22b83c44ce0c9d24ee53e3d14fc09868439ef416db1eb957f6286d77278ccfe5873d41ccbc370b65fa2df7238d79540e55088a1377ddc978038ea1380f3879db8358d58f9152c69416388b529582f31621abc69bd58e85fca3308c498f474628203074d8955706fc763e2421cfd3840e6fac8125c244a69825e2f36a1026bac9d9fc559712c4056c61ae712eb3cfc035c31a7ae86f4a01ec3479ceae19c9cdc59c679664abaa1e9f575b5532d200f28763ab2c753557ca7a46b0516ef1ed3304facdc3947ad1442cdcfc223ce708a47bf507d02a9b49f53e82985d5efe4182120050beb6452aad54bc5bc85dadc49a9ee1f5b4b35eafcb02f782df1f42da8caca7790683d82160a03e191cb81270a8762754b4d342ec731502180dd8bed8ecf63cfb3c8822a32661732419c20242d24edcd664790559dde2a25b51537f74bb8ab2caec07f8fab3bb75e474245ff1cd68c39b471c3df1202138b89969931c1836492c05f17276439476f2397ba0bd7edf0d5b7fea02ae90ea36793f75baf62f814166ba2521036e3d5bd0474ace86a7081268a6e775b0d5b4e2cf95bae1a2d143957c8f9dbeda067a1b853b567cebb85005a5e2fb09cafa3528ac01df18542beda62f7816ee11f944319deb336729cb085e9a8f82d95bb85de384370eaa1c79c1cc25172b7374f87db1fd650f630b92458f3b12fee161579db0235c5040dde28876eaf2cebe1b1ba4a1eed0bcecf07af47c4075326eb697e63b1f9eb4d274029de4ee0b834864e784a42fee328b6fdd28e25a53c71f9f7dd3af19368", 0x1000}, {&(0x7f0000002340)="071e95f28bed6da5124a36506e07f81225835bb139de53f7e023d72d2d9a1a7abf0210fd01518db161e852c89e93a2b846bd54d42d1102bde39ccd479610870a2f61c4f183c211e149b082d9cccef0ef47489db7a31f2fa8b71bbfd08468338623a60e7e8383a3c44fbed7e123b4de4c902ef6c18551c34c6a9ba97deca9dc303d8807a8e884210c760734cddd1a29c628b8a27453a5b94aa2f3724f80b5a11e394f4a4319256deb829fc54b2eade7a523cec371d766585613ce7709b8ed920d12ebd2", 0xc3}, {&(0x7f0000002440)="8fff0aee905662e51336546239350381678955264f34dd29a1ff575b23fd4e003b2e374e26d5c75bd86e007a5c508a6cd4da36a2cf17edc840d81ed79a110a8e1cce43a2f7766e454927b2277ae02876e91ed58a7728459cb0c2dc9d13c4eebbf55dfac1b5a3ae54a5a2dc344d5e322f18bf0283682f548c21721c16711d56584368d415dd6a67ba3eabf7fcc80c82d95fef0c6e669710c31aa99b74f65e3732cb6a601663021684840a135c5b7f426296a5d8da486e7b557661b023ef55d8acb5fd93dabf4138f780c92113400648136e2fb0dd9b2c288d7c22da3f2345c764dc9c205ff7e6fc6920", 0xe9}, {&(0x7f0000002540)="d9b8ba7532c83aae9921f948dbfbdf7b96bd4cc406c0f7cc222d7186a8180d6c49020b9998335295afae47e827d211b75abaa4e4a1fccc6f05036b4fc6518440031c2be3bcc00d6f9197c06923748ac2cbce08c1bc5bb55578200e1e81653112", 0x60}], 0x4, 0x5, 0x9) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x800002, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x2}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x40}}, 0x0) 2.037907799s ago: executing program 3 (id=2576): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000005000000fdfb0000000000000501000051916f31060cff86830fb0cf7f64511976b10fe020d1c668b3805ae8eeca3363c5c701fab303e74f3f764adc3efbf4a01d249621a6724a95db43fff46a8e2871ac52927b60035e967d1d7cbe63e99f938071c494cff9eeafd1d56dbae5869eb9df290739a4fb98a75aaa18e4dd20168fad26011a176b73a85310c1ec0dd3bf0303000000004402632e0d0e377f68f1dd52264fcd0f15c11ccbf1db63884de87c60f549143db47b5f8d1d95e836ad91768212f6143507468934c749e9378f77f8fdb27285a07f81b8924f61bfd85d60", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000042000000080000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000c166697ea00122081620d8239e8bb86daf381f130941d2581410d033af8039cac3b3b5a013ea776909d9d19ce81917203991ae2257c3d16fae4db3b996d3c5e40768219efe86b7b4e95cefeb6de9feed7fb6ccf3cfc2028d99368d1049c26cdb545e6aaa8147bab617b75ab394f3447e79", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688884787", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000300000000000000fe"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000040)=0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv6_deladdrlabel={0x84, 0x49, 0x1, 0x70bd25, 0x25dfdbfb, {0xa, 0x0, 0x18, 0x0, r5, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x84}}, 0x40800) 1.989118566s ago: executing program 0 (id=2577): r0 = socket$inet6(0xa, 0x5, 0x7) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$netlink(0x10, 0x3, 0x9) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r3, @ANYRESDEC=r1, @ANYRES8=r4, @ANYRESDEC=r0, @ANYRESOCT=r2, @ANYRESOCT=r4], 0x50) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async, rerun: 32) socket$inet_mptcp(0x2, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000340)) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000200)="083972bdb3a605c4c118", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30000000}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x761decc9c50a678c}, 0x10) 1.91203776s ago: executing program 2 (id=2578): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000140)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003}, @exit, @printk={@lu, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0x201}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000140)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000000}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003}, @exit, @printk={@lu, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0x201}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) (async) 1.843639142s ago: executing program 3 (id=2579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080003001400010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2408c080) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1000000}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xf4}}, 0x0) 1.800999812s ago: executing program 4 (id=2580): r0 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x0, 0x208000, 0x7}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x41100, 0xc}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67fffff6b26462f25a4d1c2e446b72af3e29400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbeec6e6ccd4", 0xd8}], 0x1}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000100)={0x43c, 0x21, 0x4, 0x70bd29, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x11f, 0x0, 0x0, @fd=r0}, @generic="f95b85817ed19a91c712a2227d41d576f97aea8641e26905b52af6c0a59293af825d60ff9dad2a01178ed6d60f0dafe41ffd54973062e357e2bfc63e809125", @generic="90f03c971340b921f71a9787e43819338d98b2b668e4efd669116c8ed407c2736131adfba000e5af1e80b441384f1f75de9268f8cfc40944c203d0993a92491f38da132672808bb353e27bf3d11100e1e5e59634024b738e5b072db1d23120a49a51dec61e57244e0043499f4c6842e64c76b301b75b2d34b95414707df2c919ad7d0399ed9247d545fa3c6d5471eca60ac135123148b6e4b542acb3306840e1a1a8ee3d78161da5c2f8b5999751a0c87339dc7745d5dcdd14f52efef2edef9b274846ca66795e024e110bf3afb8c2e578fde8e131df5f222aaabbd252f9ca5381cb5b41f308ad76819f7d640b18", @generic="4b8af874b535feaca6a7406967b6042826d1b3c259233cf728226b87ac3b40d43dc6615c893b12978d6c92be705b970271de8ad86454187fbc09731718e1b72f872bc89080ef59910da7afcedc643cf2bdd4722a6291907e74d8cf003d50b30f157825", @generic="a45336e4e1104517ec231a72194a73260dbc7caaca40e694c66908ba8649b4fdad6b20ed58782bd19755148e27226d9a5df91c40", @generic="ab0f338a47c3275772fcf1fd0af11f9a4facaa250214893eeb09d7d41fc843c9b404450c19f34901aecd77ce7e9c2279c5b0453925f14bde19e8a7f0dfcf03d9dabd2189c23093f11327e8cde877e4fc96df374a9f765eb3f4202445e303d4607e9099fa3f369c80f278b7537adf2945ed72e54e77ecb81e7a168819eee02de78127eb1bf065af0f0aa1ddb97243ab8008c1c2530f61f3249cdd3415cf4209b8ea461e4354478f8e8f4ad8254e9c239a7541b6cc3456caa80fc52fa11b5694eedab8d42220b8ca0d2157cffe06fea5832ce1a44bad8c65fcd72cbfeabdc81a2a78a585d6d0dbfe3a4990", @nested={0xd8, 0xe6, 0x0, 0x1, [@nested={0x4, 0x61}, @nested={0x4, 0x19}, @typed={0xbe, 0x20, 0x0, 0x0, @binary="44b30ac5de6df1db031f7b3492405a045ffccd46110586f2fa636d4e5624d3374b6e50af10c16ecb0565601227f93bdc4d7812d33dbb605cc1cdf2873a2522b0c3dac75821243b3ce8d1a2a1a16d5dd1bf1597a963d0f8136b154120398737b84db926b5716ded1130ca0d61abc2c6bdc195fc8e0cb617e1ce1c82a86f32e657df0d1259b2e8ac22fc6d6580bfaa3441415247c688f0e8213bd30b6b11798547503c0411e9568a5ab50646d98c41c5a90bffa6bb6cd7e285be4a"}, @typed={0x8, 0x125, 0x0, 0x0, @str='*#:\x00'}, @nested={0x4, 0x26}]}, @typed={0x97, 0x131, 0x0, 0x0, @binary="db7688f529d6cf31030bd4926dfe3036bf7dbc30d13999b6b8a2f619f9626cf27079585dfcc24e02211a0c9f4f045aa578860a89c2bbd0c7d98e29d75710aa1ceb481bbbcffe19e6f6d6fcb626b5215d4ae8d50cef7d7a59476cdd261182e94a0735d7b8562c165ad6387d4cc7a382e60faa1e6e7e83993bdc1f1a872c527b81bafb869d83ef0a108bf67a539bd1b4119bda7d"}]}, 0x43c}}, 0x8c4) 1.683482846s ago: executing program 0 (id=2581): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0400000000000000cf7f2e85"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.479170412s ago: executing program 4 (id=2582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="dd51f8f9411094b1a1deee6ec8f1f0b654541418bf2b5ddd4043"], 0x60}}, 0x20000000) 1.448924277s ago: executing program 0 (id=2583): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9c61, 0x27}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000840) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r7, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044001}, 0x50) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r2) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r9, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xd}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000001) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x7800, 0xac11f4c2d83d7dbb, 0x8001, 0x3, {{0x24, 0x4, 0x1, 0x17, 0x90, 0x67, 0x0, 0x3, 0x29, 0x0, @multicast2, @multicast2, {[@timestamp_addr={0x44, 0x24, 0x19, 0x1, 0x8, [{@multicast1, 0x9}, {@rand_addr=0x64010101}, {@remote, 0xac6}, {@multicast1, 0x4}]}, @timestamp={0x44, 0x8, 0x6, 0x0, 0x7, [0x7]}, @rr={0x7, 0x1f, 0x7a, [@loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3c}, @empty, @empty]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x2c, 0x2, 0x0, 0xc, [0x9, 0x3, 0x6, 0x6, 0x7, 0x1000, 0x7, 0x10001, 0x5, 0xfffffffb]}]}}}}}) sendmsg$nl_route(r4, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=@bridge_getvlan={0x48, 0x72, 0x400, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, r10}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000007c0)={'veth0\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r5) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, r12, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xf}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x6}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x1) vmsplice(r1, &(0x7f0000001a40)=[{&(0x7f0000000980)="a93823a0b345176752cd39c8b89315b4f506e4301efc294590d92e1a203659c40daf17df1f9c20e44441f1c5c4b363d2ca74a499055bcc09e7aba73d376dee4c6ca560c41980ef83284b641bfd7de3c98449c052885237a7503dcdecac48ff4f2bbd051aa1436c8a09746d75a4341a993eaf9ef7f5fa8abb9d4b88804451d2d4c00a915c274b12f5fd3248dedf0685cec5578e1013ff5865d150fe5655714e9814d3246cf38ffb6513ee97fc21bbe70f195a32888d", 0xb5}, {&(0x7f0000000a40)="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", 0x1000}], 0x2, 0xc) sendmsg$ETHTOOL_MSG_WOL_SET(r4, &(0x7f00000020c0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002080)={&(0x7f0000001ac0)={0x5c0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_MODES={0x2f0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x19c, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1bd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa7f4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-^\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'PPPPPP'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',}\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ']\x1d%\x83\\\x15.#}\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1265e134}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '802.15.4 MAC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan4\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'TIPC\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff80}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.:\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x80, 0x5, "235f1ac18c11fdaef595edfd016037e51b248405b95732d177bc32c213e4b872b050406e3411b8dacb95ab362618447fb9f7627b48f3e7241ab33c279e09382b8a1db09fa3b276a3583b5d331754561d97ff211d22e5057b8bee29979d6bddddb420a06611149d7ede9ea328d490e5440546a59396f63ba221708372"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xcc, 0x4, "aee2430a3e34ac61792ebac022d767db35b9bbe6ccbb9220e3f2eca2d99ab423cbab0fba20a707f13258ad4c4a50481c658cf2f017aff8cccad780355919b17656ce8f14d35898f4d82790e5216001a30b31bf710d4b18d4552cd9eb6b0f086a83c2933e910a3829a07ce3f9e223141a91202e75d4a4de8ca6399b24bb5afd5d46ed3de6ea26c1ce8dc62603279cb9071a93f929359c20a7fec09432f417150ab402274d8bb25519d33e5a61d1b698c3d98c038466880347491e102f96987c792711861fa50ee84c"}]}, @ETHTOOL_A_WOL_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_SOPASS={0x78, 0x3, "3922ce63b3766f44086e51ec3b758e1eb81f791d4c6347f2587fce45d7aa4e5aaa0572947dfb92ae0ec26cd54efc915919664b2f398a21844bb43e1a1cc229af7aeac7a60f66cb154722cb96efbe5afe4fe38ef6d43884af98990911bebc5487bb24a35d86a5d60034b36b9530b037b4f7dceb40"}, @ETHTOOL_A_WOL_MODES={0x214, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\\)}^\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'veth0\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(,\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x4}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^}*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*+@})\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xa9, 0x5, "6064c54b8c76b87452311fadb641fd9c4b1c17f85969368ff5b0fd32e6d388476b645c34d8b9eaf4dd403dba038360766f0a54fd790fabbdda452711b6056cdaa58585702ddf8af469795f212bf9f179dce123515677358de518d17731b3fea9f4fd8bf1be0e8dd905b23b2f81ed4afcc0464a1258008bda838e7d8627254d878386b7aa2f84ddac57c7dce7cbc52575cdf63e9bc7ed758baf9daaebbf39fc69137bd4ee0d"}, @ETHTOOL_A_BITSET_MASK={0x79, 0x5, "7bbce35f4516b1bdf281c79ad29b274319502dc3462eab501b2320adb4c8108ff12b381385f484f6d1079b028e218dcc9e6dee6010b9b097a8d8513777b46e1a8143274f73fc7cfc3d66f80d2b7482f0ce342f095c85bdf045b951fbee0a00247ec1cbd2253082e91100cb90d5377be199977ee80d"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x19, 0x4, "75ca5d7ff014f5cde1cba8b132c8f9dea6e1e61b45"}]}]}, 0x5c0}, 0x1, 0x0, 0x0, 0x90}, 0x20000902) syz_genetlink_get_family_id$nbd(&(0x7f0000002100), r6) syz_genetlink_get_family_id$nl802154(&(0x7f0000002140), r2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002340)={0x8000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x2, 0x7, &(0x7f0000002180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x0, 0x4, 0x0, 0xb, 0x0, 0xd}, @call={0x85, 0x0, 0x0, 0x2c}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xf}]}, &(0x7f00000021c0)='GPL\x00', 0x4, 0x96, &(0x7f0000002200)=""/150, 0x41100, 0x3e, '\x00', r11, @fallback=0x35, r4, 0x8, &(0x7f00000022c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000002300)={0x1, 0x4, 0x1, 0xffff1946}, 0x10, r13, r4, 0x9, &(0x7f0000002380)=[r5, r5, r4, r4, r4], &(0x7f00000023c0)=[{0x2, 0x3, 0xa, 0x7}, {0x5, 0x5, 0x0, 0x5}, {0x1, 0x5, 0x7}, {0x3, 0x4, 0xf, 0x3}, {0x0, 0x2, 0xd, 0x2}, {0x2, 0x3, 0x3, 0x1}, {0x3, 0x2, 0x0, 0x1}, {0x3, 0x1, 0x3, 0x2}, {0x1, 0x5, 0x9, 0x9}], 0x10, 0x5}, 0x94) getpeername$packet(r5, &(0x7f0000002540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002580)=0x14) r15 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000002640)={'gre0\x00', &(0x7f00000025c0)={'gretap0\x00', r14, 0x10, 0x8000, 0x616, 0xb7, {{0x13, 0x4, 0x3, 0x1, 0x4c, 0x65, 0x0, 0x0, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1a}, {[@rr={0x7, 0x23, 0xcc, [@loopback, @rand_addr=0x64010102, @remote, @multicast2, @broadcast, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010100]}, @lsrr={0x83, 0x13, 0x7a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r15, 0x89f1, &(0x7f0000002740)={'sit0\x00', &(0x7f0000002680)={'sit0\x00', r16, 0x8, 0x40, 0x6, 0x8, {{0x1f, 0x4, 0x0, 0x3, 0x7c, 0x68, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x1, [0x3, 0x5, 0x6ded]}, @timestamp_prespec={0x44, 0x54, 0x6b, 0x3, 0x3, [{@multicast2, 0x9}, {@loopback, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x3631}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x46}, {@broadcast, 0x1000}, {@private=0xa010100}, {@multicast2, 0x80}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x3}, {@remote, 0x5}, {@remote, 0xc8}]}]}}}}}) recvmsg$can_bcm(r4, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002780)}, {&(0x7f00000027c0)=""/193, 0xc1}], 0x2}, 0x2061) sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x64, r7, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xa6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfffffff8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x36}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x20048010}, 0x8000) 1.199492038s ago: executing program 4 (id=2584): r0 = socket(0x2b, 0x1, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x7, [0x9, 0x100400], 0x3}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x2, 0x9, 0x301, 0x70bd27, 0x25dfdbfb, {0x2a9e577a2d182f3f, 0x0, 0x2}, [@generic="657693b378678d"]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e0, 0x0, 0x11, 0x148, 0x340, 0x0, 0x448, 0x2a8, 0x2a8, 0x448, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x0, 0x0, [{0x9, 0x6, 0xce}, {0x3, 0x9, 0xc, 0x8}, {0x4, 0x3, 0xc5, 0x81}, {0x8, 0xf8, 0x38}, {0x6, 0x6, 0x6, 0x4}, {0x7, 0xd6, 0x1, 0x4}, {0x4000, 0x3, 0x8, 0x3617}, {0x6, 0x8, 0x1, 0x9}, {0x8, 0x0, 0x81, 0x4}, {0x6, 0xe, 0x0, 0xd}, {0x2, 0x6, 0x0, 0x1000}, {0x9, 0x10, 0xf, 0x4}, {0x4, 0x9, 0x7, 0x4}, {0x46, 0x9, 0x9, 0x38d0}, {0x7, 0xbb, 0x40, 0x9}, {0x5, 0x8, 0x4, 0x101}, {0x4, 0x4, 0xc0, 0x5}, {0x2, 0x9, 0x7, 0xdc}, {0x2, 0xc, 0xfe, 0x800}, {0xc, 0xb, 0x0, 0x4}, {0x9, 0x1, 0x3f, 0x8000}, {0x3, 0x4, 0x0, 0xfffffff9}, {0x3, 0xe, 0xfa, 0x9}, {0xc00, 0x5, 0x80, 0x7ff}, {0x7f, 0x3, 0x9, 0x1ff}, {0x4, 0x5, 0x8}, {0x7, 0x0, 0x7f, 0x2c000000}, {0xbe4e, 0x3, 0x4, 0x4194}, {0x4, 0x2, 0xd, 0x8}, {0x4, 0x0, 0x80, 0x8}, {0x8, 0x5, 0x6, 0xfff}, {0x9, 0x1, 0x2, 0x7}, {0xf801, 0x2, 0xf, 0x3}, {0x3, 0x9, 0x2b, 0x64f}, {0x8, 0x9, 0x6, 0x9}, {0x4, 0x1, 0x1, 0x9}, {0x0, 0xd0, 0x2, 0x5}, {0x6a03, 0x0, 0xf, 0x80000000}, {0x1, 0xd, 0xb8, 0x1}, {0x800, 0x8, 0x7, 0xa1}, {0x9, 0x0, 0x6, 0x3}, {0x2, 0x60, 0xa, 0x9}, {0xf, 0x2, 0xe, 0xf}, {0xb6, 0x1, 0xf}, {0x3, 0x3, 0x0, 0x7}, {0xe, 0x9, 0x2, 0x7}, {0x101, 0xa1, 0x2}, {0xa50, 0x4, 0x4, 0x7}, {0x7, 0xfa, 0xd, 0xa2}, {0x7f, 0x8, 0x8, 0x64}, {0x8, 0xe, 0x1, 0x10}, {0x913, 0x6, 0x3, 0x1}, {0x2, 0x7f, 0x1}, {0x8, 0xcb, 0x6, 0x5}, {0x1, 0x9, 0x4, 0x1}, {0x6, 0x8, 0x9, 0x800}, {0x0, 0x1, 0x4c, 0x6}, {0x0, 0x9a, 0x6, 0x2}, {0x4, 0x7f}, {0x8, 0x7, 0x6, 0x7}, {0x6, 0x3, 0x8, 0xe7}, {0x0, 0x1, 0x9, 0xfffffff8}, {0xfff, 0x0, 0x6, 0xe6}, {0x5, 0x3, 0xa0, 0x7fffffff}], {0x8c}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x3}, {0x1, 0x6, 0x6}, {0x3, 0x5, 0x7}, 0x3b67, 0x7f}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000000000000a004e1fffffffdaff01000000000000210000000000000172000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000017cdb8d38a1f874d0000000000380000000000000000000040000000"], 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900000000090005"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000010000006d05000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2, 0x0, 0x11000000}, 0x38) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r4, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1.014373792s ago: executing program 3 (id=2585): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0xd8, 0x8, 0xfa04, 0xd8, 0x6c02, 0x1d8, 0x194, 0x194, 0x1d8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x98, 0xd8, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7d, 0x4, "744e0c8559c5a9128a6df634790dc3271e33969086733af137c08495d02d"}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x1a5, 0xc20, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x18, 0x2f, 0x22, 0x8, 0x1d, 0x18, 0x15, 0x2e, 0x29, 0x32, 0xe, 0x2, 0x1a, 0x31, 0x39, 0x3f], 0x0, 0x8e, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001540)={0x60, r2, 0x405, 0x70bd2f, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x293}}, {0x8, 0x6, r3}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x400e8c0) 995.160296ms ago: executing program 2 (id=2586): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket(0x15, 0x5, 0x0) connect$unix(r0, &(0x7f00000003c0)=@abs={0xa}, 0x6e) getsockname$llc(r0, 0x0, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0x403, 0x58bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x23}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd26, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0x1}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f0000000340)={'ip_vti0\x00', 0x5}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000180)=0x4) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, r3, 0x0, 0x4408}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x9}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x100}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x14, 0x1, 0xa, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x8014}, 0x20004040) r11 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r11, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x77c, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="001000"], 0x10}}], 0x1, 0x4000000) 831.978091ms ago: executing program 0 (id=2587): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x10000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x6}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x9, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=[@dstopts={{0x18, 0x29, 0x37, {0x33}}}, @dstopts={{0x18, 0x29, 0x37, {0x6}}}], 0x30}}], 0x2, 0x20000040) 831.594243ms ago: executing program 3 (id=2588): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket(0x10, 0x80003, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000420000000800000002"], 0x48) socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4df4c64809998196, 0x70, 0x2, 0x800, 0x5a, @mcast1, @mcast1, 0x7800, 0x20, 0x67ca, 0x5}}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=@ipv6_delroute={0x44, 0x19, 0x20, 0x70bd2b, 0x25dfdbff, {0xa, 0x10, 0x80, 0x1, 0xff, 0x2, 0xfe, 0x5, 0x2400}, [@RTA_MULTIPATH={0xc, 0x9, {0x1, 0x1, 0x7, r3}}, @RTA_UID={0x8, 0x19, r4}, @RTA_GATEWAY={0x14, 0x5, @mcast2}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8000) socket$inet6_udp(0xa, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r6, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688884787", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 635.349048ms ago: executing program 0 (id=2589): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000040)="03", 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x54, 0x18, 0x1, 0x70bd29, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000120035062dbd"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x20000014) setsockopt$sock_linger(r0, 0x1, 0x3e, &(0x7f0000000000), 0x8) 431.461965ms ago: executing program 4 (id=2590): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c004010) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) r5 = socket(0x10, 0x3, 0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r8, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) socket(0x11, 0x3, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) connect$netlink(r5, &(0x7f0000000240)=@unspec, 0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4451279c26000000", @ANYRES16=r11, @ANYBLOB="01002cbd700000800000340000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300000000000800030005000000"], 0x44}}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/19, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32], 0x38}}, 0x0) 295.119417ms ago: executing program 0 (id=2591): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 223.597308ms ago: executing program 2 (id=2592): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x15}, 0x4000000) getsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000003b0009002bbd7000fddbff2502000000080001800409"], 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x4000014) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[], 0x48) unshare(0x8040480) close(0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x18000000}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000}, 0x94) 192.81329ms ago: executing program 3 (id=2593): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x24004804) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) (async) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e"], 0xfdef) (async) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000180)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x30, r2, 0x6773a000) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="183000000100000000000000030700000000000000000000a418233ebc40ff65efa4aeb4ba2783125880ccb71282894429370b8db220fb164b2d2931935695ff1198cb5f01e757bdf12ffbc40ebb50f5579fe6a5238b738a96a261738e3a1ecf99df68cb54b95f5230bf0965a119509d7493a0474f82f7169b9982e87889a1c681d42ae1e7bbb498c1d770a41ba079ee34d7846242341ac575f859c48aaeaac2888fe10bfcd37b"], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200030000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) (async) shutdown(r1, 0x1) 0s ago: executing program 3 (id=2594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x1}, [@NHA_GROUP={0xc, 0x2, [{0xffffffff, 0x4}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x4, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4850) kernel console output (not intermixed with test programs): tdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.380683][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.392063][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.524595][ T8974] 8021q: adding VLAN 0 to HW filter on device bond3 [ 194.598635][ T8945] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 194.727282][ T8967] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.752739][ T8967] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.796136][ T3330] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 194.892172][ T9006] tipc: Failed to remove unknown binding: 66,1,1/0:1662898615/1662898617 [ 194.944765][ T9006] tipc: Failed to remove unknown binding: 66,1,1/0:1662898615/1662898617 [ 194.956898][ T8967] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.968494][ T8944] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 194.977455][ T8967] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.989777][ T9011] netlink: Unknown conntrack attr (0) [ 195.127567][ T8967] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.138426][ T8967] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.162898][ T9016] netlink: 'syz.1.756': attribute type 3 has an invalid length. [ 195.195636][ T9013] tc_dump_action: action bad kind [ 195.210273][ T9018] netlink: 'syz.0.757': attribute type 1 has an invalid length. [ 195.257910][ T9018] __nla_validate_parse: 193 callbacks suppressed [ 195.257928][ T9018] netlink: 228 bytes leftover after parsing attributes in process `syz.0.757'. [ 195.453253][ T9022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.759'. [ 195.483201][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.498956][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.592028][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.622298][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.706071][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.722223][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.829798][ T399] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.864046][ T399] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.892133][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 195.916949][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 195.968717][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.769'. [ 195.990571][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.769'. [ 196.027617][ T9056] netlink: 'syz.3.769': attribute type 1 has an invalid length. [ 196.263327][ T9065] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.271175][ T9065] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.408442][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 196.576944][ T9065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.593021][ T9065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.721946][ T9065] erspan0: left allmulticast mode [ 196.736516][ T9126] netlink: 'syz.1.775': attribute type 2 has an invalid length. [ 196.771968][ T9126] netlink: 'syz.1.775': attribute type 2 has an invalid length. [ 196.963317][ T399] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.990929][ T399] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.011632][ T399] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.030269][ T399] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.039476][ T9128] ip6tnl1: entered promiscuous mode [ 197.049948][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.776'. [ 197.078376][ T399] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.107493][ T399] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.135605][ T399] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.156204][ T399] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.253182][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.778'. [ 197.285098][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.778'. [ 197.324043][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.778'. [ 197.354274][ T9142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.778'. [ 197.583596][ T9151] macsec2: entered promiscuous mode [ 197.602753][ T9151] virt_wifi0: entered promiscuous mode [ 197.769117][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.784'. [ 198.196733][ T9186] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 198.233353][ T9186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.318777][ T9193] openvswitch: netlink: Unknown nsh attribute 0 [ 199.068133][ T9218] netlink: 'syz.4.798': attribute type 1 has an invalid length. [ 199.276019][ T9229] netlink: 'syz.4.801': attribute type 89 has an invalid length. [ 199.534607][ T9239] netlink: 'syz.0.802': attribute type 1 has an invalid length. [ 199.977902][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 200.160873][ T9272] bond8: option xmit_hash_policy: invalid value (10) [ 200.170590][ T9272] bond8 (unregistering): Released all slaves [ 200.258983][ T9276] bond8: option xmit_hash_policy: invalid value (10) [ 200.269142][ T9276] bond8 (unregistering): Released all slaves [ 200.597464][ T9286] tipc: Failed to obtain node identity [ 200.606185][ T9286] tipc: Enabling of bearer rejected, failed to enable media [ 200.787345][ T9304] vlan0: entered promiscuous mode [ 201.121319][ T9318] pim6reg1: entered promiscuous mode [ 201.163040][ T9318] pim6reg1: entered allmulticast mode [ 201.225337][ T29] audit: type=1800 audit(1777878095.806:3): pid=9302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.823" name="memory.events" dev="tmpfs" ino=938 res=0 errno=0 [ 206.697925][ T5631] Bluetooth: hci2: command 0x0406 tx timeout [ 206.707709][ T5642] Bluetooth: hci0: command 0x0406 tx timeout [ 206.713818][ T5646] Bluetooth: hci1: command 0x0406 tx timeout [ 206.719995][ T50] Bluetooth: hci3: command 0x0401 tx timeout [ 208.457946][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 223.662538][ T9342] __nla_validate_parse: 72 callbacks suppressed [ 223.662557][ T9342] netlink: 32 bytes leftover after parsing attributes in process `syz.3.830'. [ 223.688748][ T9345] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 223.817921][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 223.941006][ T9359] netlink: 'syz.4.833': attribute type 1 has an invalid length. [ 223.962067][ T9359] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.833'. [ 224.025968][ T9361] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20002 [ 224.188506][ T9371] netlink: 'syz.2.838': attribute type 2 has an invalid length. [ 224.198928][ T9371] netlink: 'syz.2.838': attribute type 1 has an invalid length. [ 224.206947][ T9371] netlink: 'syz.2.838': attribute type 2 has an invalid length. [ 224.215515][ T9371] netlink: 'syz.2.838': attribute type 2 has an invalid length. [ 224.224104][ T9371] netlink: 'syz.2.838': attribute type 1 has an invalid length. [ 224.242577][ T9371] netlink: 'syz.2.838': attribute type 2 has an invalid length. [ 224.266935][ T9370] netlink: 'syz.2.838': attribute type 2 has an invalid length. [ 224.287883][ T9370] netlink: 'syz.2.838': attribute type 1 has an invalid length. [ 224.315867][ T9370] netlink: 'syz.2.838': attribute type 2 has an invalid length. [ 224.692103][ T8950] hsr0: entered promiscuous mode [ 224.710681][ T9387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.842'. [ 224.741737][ T9389] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 224.819780][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.843'. [ 224.879841][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'. [ 224.929713][ T9399] netlink: 32 bytes leftover after parsing attributes in process `syz.1.843'. [ 225.182456][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.845'. [ 226.376867][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.855'. [ 226.559462][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.857'. [ 226.594503][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.857'. [ 226.948004][ T9468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.233031][ T9478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.569185][ T9504] trusted_key: syz.1.871 sent an empty control message without MSG_MORE. [ 228.695088][ T9544] syzkaller0: entered promiscuous mode [ 228.707841][ T9544] syzkaller0: entered allmulticast mode [ 228.999981][ T9564] IPv6: Can't replace route, no match found [ 229.015439][ T9564] IPv6: Can't replace route, no match found [ 229.181332][ T9571] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20001 [ 229.200520][ T9571] openvswitch: netlink: Flow actions attr not present in new flow. [ 229.302503][ T9579] validate_nla: 6 callbacks suppressed [ 229.302522][ T9579] netlink: 'syz.3.892': attribute type 7 has an invalid length. [ 229.342575][ T9579] netlink: 'syz.3.892': attribute type 8 has an invalid length. [ 229.497738][ T9586] veth0_virt_wifi: entered allmulticast mode [ 229.534942][ T9589] : renamed from bond0 (while UP) [ 229.684026][ T9592] __nla_validate_parse: 7 callbacks suppressed [ 229.684047][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'. [ 229.717180][ T9594] Bluetooth: MGMT ver 1.23 [ 229.881439][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.897'. [ 229.952468][ T9605] ip6t_REJECT: ECHOREPLY is not supported [ 230.110930][ T9610] bond4: entered allmulticast mode [ 230.285814][ T9609] bond5: entered allmulticast mode [ 230.389974][ T9622] bridge_slave_0: left allmulticast mode [ 230.410864][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'. [ 230.429885][ T9622] bridge_slave_0: left promiscuous mode [ 230.442975][ T9622] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.562692][ T9622] bridge_slave_1: left allmulticast mode [ 230.592445][ T9622] bridge_slave_1: left promiscuous mode [ 230.611041][ T9622] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.627208][ T9622] veth0_to_bond: left allmulticast mode [ 230.638850][ T9622] veth0_to_bond: left promiscuous mode [ 230.644717][ T9622] bridge3: port 2(veth0_to_bond) entered disabled state [ 230.664652][ T9622] bond0: (slave bond_slave_0): Releasing backup interface [ 230.701570][ T9622] bond0: (slave bond_slave_1): Releasing backup interface [ 230.734484][ T9622] team0: Port device team_slave_0 removed [ 230.774615][ T9622] team0: Port device team_slave_1 removed [ 230.798375][ T9622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.807769][ T9622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.817931][ T9622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.825824][ T9622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.836514][ T9622] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 230.898920][ T9638] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.965551][ T9649] geneve3: entered promiscuous mode [ 230.991420][ T9649] geneve3: entered allmulticast mode [ 231.032072][ T13] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 231.092544][ T13] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 231.123532][ T13] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 231.215007][ T13] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 231.566023][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.911'. [ 232.086613][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'. [ 232.613347][ T9737] netlink: 'syz.1.928': attribute type 3 has an invalid length. [ 233.072355][ T9749] netlink: 6048 bytes leftover after parsing attributes in process `syz.1.931'. [ 233.171253][ T9751] x_tables: unsorted underflow at hook 3 [ 233.415604][ T9762] lo speed is unknown, defaulting to 1000 [ 233.461884][ T9762] lo speed is unknown, defaulting to 1000 [ 233.521429][ T9762] lo speed is unknown, defaulting to 1000 [ 233.583629][ T9762] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 233.649557][ T9762] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 233.692649][ T9762] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 233.755262][ T9762] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 233.837587][ T9762] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 233.875235][ T9777] xt_CT: You must specify a L4 protocol and not use inversions on it [ 233.882891][ T9777] netlink: 548 bytes leftover after parsing attributes in process `syz.3.936'. [ 234.051470][ T9762] lo speed is unknown, defaulting to 1000 [ 234.074351][ T9762] lo speed is unknown, defaulting to 1000 [ 234.083777][ T9762] lo speed is unknown, defaulting to 1000 [ 234.100539][ T9762] lo speed is unknown, defaulting to 1000 [ 234.125716][ T9762] lo speed is unknown, defaulting to 1000 [ 234.360438][ T9793] netlink: 32 bytes leftover after parsing attributes in process `syz.0.938'. [ 234.602373][ T9807] netlink: 'syz.4.941': attribute type 1 has an invalid length. [ 234.619057][ T9808] netlink: 36 bytes leftover after parsing attributes in process `syz.1.940'. [ 235.025609][ T9830] netlink: 44 bytes leftover after parsing attributes in process `syz.1.943'. [ 235.041146][ T9829] netlink: 'syz.0.945': attribute type 10 has an invalid length. [ 235.127078][ T9829] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 235.366047][ T9846] netlink: 'syz.0.950': attribute type 1 has an invalid length. [ 235.397816][ T9846] netlink: 276 bytes leftover after parsing attributes in process `syz.0.950'. [ 235.576986][ T9853] syzkaller0: entered promiscuous mode [ 235.594102][ T9853] syzkaller0: entered allmulticast mode [ 235.673515][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.954'. [ 235.817843][ T9876] netlink: 16 bytes leftover after parsing attributes in process `syz.0.957'. [ 235.857229][ T29] audit: type=1804 audit(1777878130.426:4): pid=9872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.958" name="/newroot/205/cgroup.controllers" dev="tmpfs" ino=1065 res=1 errno=0 [ 235.886830][ T29] audit: type=1800 audit(1777878130.466:5): pid=9872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.958" name="cgroup.controllers" dev="tmpfs" ino=1065 res=0 errno=0 [ 235.950126][ T3330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.959821][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.991924][ T3330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.000322][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.012860][ T3330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.021380][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.034374][ T8794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.042828][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.068968][ T8794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.077302][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.595014][ T9905] netlink: 'syz.1.969': attribute type 1 has an invalid length. [ 236.613853][ T5645] Bluetooth: hci4: link tx timeout [ 236.623824][ T9905] netlink: 'syz.1.969': attribute type 1 has an invalid length. [ 236.634420][ T5645] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 236.672169][ T9905] netlink: 'syz.1.969': attribute type 1 has an invalid length. [ 236.805597][ T9919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.971'. [ 236.826446][ T9905] netlink: 'syz.1.969': attribute type 1 has an invalid length. [ 236.884143][ T9905] netlink: 'syz.1.969': attribute type 1 has an invalid length. [ 236.893175][ T9905] netlink: 'syz.1.969': attribute type 1 has an invalid length. [ 236.950556][ T9905] netlink: 'syz.1.969': attribute type 1 has an invalid length. [ 236.969067][ T9919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.971'. [ 237.035690][ T9926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.972'. [ 237.055228][ T9926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.972'. [ 237.070491][ T9926] netlink: 32 bytes leftover after parsing attributes in process `syz.0.972'. [ 237.086664][ T9927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.972'. [ 237.309691][ T9927] bond2: (slave gretap1): making interface the new active one [ 237.319835][ T9927] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 238.470435][ T9987] lo speed is unknown, defaulting to 1000 [ 238.697840][ T5638] Bluetooth: hci4: command 0x0406 tx timeout [ 239.442344][T10034] ip6tnl2: entered promiscuous mode [ 239.728843][T10053] bond8: option fail_over_mac: invalid value (127) [ 239.740705][T10053] bond8 (unregistering): Released all slaves [ 240.454823][T10093] __nla_validate_parse: 8 callbacks suppressed [ 240.454844][T10093] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1012'. [ 241.164849][T10126] nr0: tun_chr_ioctl cmd 1074025677 [ 241.184762][T10128] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1020'. [ 241.189296][T10126] nr0: linktype set to 774 [ 241.491400][T10134] validate_nla: 60 callbacks suppressed [ 241.491423][T10134] netlink: 'syz.1.1023': attribute type 10 has an invalid length. [ 241.672113][T10137] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 241.865986][T10144] netlink: 'syz.2.1026': attribute type 1 has an invalid length. [ 242.083968][T10144] bond8: entered promiscuous mode [ 242.092911][T10144] bond8: entered allmulticast mode [ 242.099290][T10144] 8021q: adding VLAN 0 to HW filter on device bond8 [ 242.134097][T10148] macvlan0: entered promiscuous mode [ 242.141318][T10148] macvlan0: entered allmulticast mode [ 242.203182][T10158] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 242.235126][T10160] netlink: 'syz.1.1032': attribute type 2 has an invalid length. [ 242.253121][T10160] netlink: 'syz.1.1032': attribute type 1 has an invalid length. [ 242.664112][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1035'. [ 242.711305][T10183] macsec3: entered promiscuous mode [ 243.012518][T10190] netlink: 'syz.1.1039': attribute type 1 has an invalid length. [ 243.077304][T10194] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1039'. [ 243.267062][T10200] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1039'. [ 243.394295][T10190] 8021q: adding VLAN 0 to HW filter on device bond2 [ 243.453118][T10194] bond2: (slave veth5): Enslaving as an active interface with a down link [ 243.706867][T10217] tipc: Failed to remove unknown binding: 66,0,0/10005162:3796937589/3796937591 [ 243.754798][T10217] tipc: Failed to remove unknown binding: 66,0,0/10005162:3796937589/3796937590 [ 243.808302][T10217] tipc: Failed to remove unknown binding: 66,0,0/10005162:3796937589/3796937591 [ 243.851695][T10217] tipc: Failed to remove unknown binding: 66,0,0/10005162:3796937589/3796937590 [ 243.983761][T10235] netlink: 'syz.1.1048': attribute type 1 has an invalid length. [ 244.003210][T10237] dvmrp0: entered allmulticast mode [ 244.036484][T10242] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1048'. [ 244.180065][T10235] 8021q: adding VLAN 0 to HW filter on device bond3 [ 244.629209][T10270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1057'. [ 244.977589][T10287] bond0: (slave macvlan0): Opening slave failed [ 245.234996][T10306] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1066'. [ 245.498496][T10321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1071'. [ 245.526391][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1071'. [ 245.537239][T10321] netlink: 'syz.4.1071': attribute type 25 has an invalid length. [ 245.552505][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1071'. [ 245.572209][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1071'. [ 245.612153][T10321] ip6tnl3: entered allmulticast mode [ 245.697304][T10325] netlink: 'syz.0.1073': attribute type 12 has an invalid length. [ 245.853263][T10331] netlink: 'syz.3.1076': attribute type 34 has an invalid length. [ 245.942849][T10337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1078'. [ 246.012749][T10343] netlink: 'syz.3.1079': attribute type 1 has an invalid length. [ 246.061219][T10343] bond6: entered promiscuous mode [ 246.066822][T10343] 8021q: adding VLAN 0 to HW filter on device bond6 [ 246.172399][T10343] team0: Device ip6tnl1 is of different type [ 246.226314][T10346] 8021q: adding VLAN 0 to HW filter on device bond6 [ 246.237099][T10346] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 246.249412][T10346] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 246.266372][T10346] bond6: (slave wireguard0): making interface the new active one [ 246.274372][T10346] wireguard0: entered promiscuous mode [ 246.282913][T10346] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 246.419390][T10352] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.445612][T10352] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 246.482782][T10352] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 246.506032][T10352] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 246.732041][T10352] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.756242][T10352] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 246.791633][T10352] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 246.821881][T10352] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 246.967330][T10352] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.977440][T10352] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 246.990432][T10352] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 247.000818][T10352] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 247.025585][T10385] lo speed is unknown, defaulting to 1000 [ 247.140215][T10352] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.172866][T10352] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 247.192790][T10352] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 247.214581][T10352] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 247.304854][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 247.372490][T10406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1096'. [ 247.482466][T10411] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1097'. [ 247.520603][ T1006] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.529042][ T1006] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 247.537427][ T1006] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 247.556850][ T1006] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 247.608918][ T86] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.622809][ T86] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 247.633756][ T86] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 247.642618][ T86] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 247.678810][T10420] validate_nla: 1 callbacks suppressed [ 247.678829][T10420] netlink: 'syz.4.1099': attribute type 1 has an invalid length. [ 247.722784][T10420] bond6: entered promiscuous mode [ 247.729883][T10420] 8021q: adding VLAN 0 to HW filter on device bond6 [ 247.732572][T10422] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1099'. [ 247.746508][ T3330] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.759905][ T3330] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 247.768527][ T3330] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 247.776883][ T3330] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 247.801414][ T3330] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.811512][ T3330] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 247.820049][ T3330] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 247.828649][ T3330] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 247.903341][T10426] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1100'. [ 247.931671][T10426] gretap0: entered promiscuous mode [ 247.953542][T10426] 0ªî{X¹¦: renamed from gretap0 [ 247.979562][T10426] 0ªî{X¹¦: left promiscuous mode [ 247.984799][T10426] 0ªî{X¹¦: entered allmulticast mode [ 248.016281][T10426] net_ratelimit: 4 callbacks suppressed [ 248.016300][T10426] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 248.416725][T10448] netlink: 'syz.0.1106': attribute type 1 has an invalid length. [ 248.573488][T10448] bond3: entered promiscuous mode [ 248.590417][T10448] 8021q: adding VLAN 0 to HW filter on device bond3 [ 248.823552][T10477] bridge1: entered promiscuous mode [ 248.833206][T10477] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20004 [ 249.068835][T10488] netlink: 'syz.1.1116': attribute type 10 has an invalid length. [ 249.132305][T10488] team0: Device wg2 is of different type [ 249.269831][T10494] lo speed is unknown, defaulting to 1000 [ 249.342626][ T9118] IPVS: starting estimator thread 0... [ 249.489715][T10499] IPVS: using max 24 ests per chain, 57600 per kthread [ 249.524821][T10507] bridge_slave_0: left allmulticast mode [ 249.541132][T10507] bridge_slave_0: left promiscuous mode [ 249.559749][T10507] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.579960][T10507] bridge_slave_1: left allmulticast mode [ 249.585919][T10507] bridge_slave_1: left promiscuous mode [ 249.592525][T10507] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.607286][T10507] bond0: (slave 45ÿ): Releasing backup interface [ 249.619561][T10507] bond0: (slave bond_slave_1): Releasing backup interface [ 249.630442][T10507] team0: Port device team_slave_0 removed [ 249.640904][T10507] team0: Port device team_slave_1 removed [ 249.647360][T10507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.655994][T10507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.665745][T10507] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 250.248858][T10545] netlink: 'syz.1.1130': attribute type 11 has an invalid length. [ 250.453021][T10541] 8021q: adding VLAN 0 to HW filter on device eth0 [ 250.489262][T10541] 8021q: adding VLAN 0 to HW filter on device eth1 [ 250.519860][T10541] 8021q: adding VLAN 0 to HW filter on device eth2 [ 250.554879][T10541] 8021q: adding VLAN 0 to HW filter on device eth3 [ 250.591782][T10541] bond1: left promiscuous mode [ 250.631852][T10541] ip6tnl2: left promiscuous mode [ 250.906182][T10552] lo speed is unknown, defaulting to 1000 [ 250.919092][ T1006] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 250.949951][ T1006] bond2: (slave veth5): making interface the new active one [ 250.998102][ T1006] bond2: active interface up! [ 251.596971][T10583] __nla_validate_parse: 11 callbacks suppressed [ 251.596993][T10583] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1139'. [ 251.747410][T10593] openvswitch: netlink: IP tunnel dst address not specified [ 251.771105][T10586] netlink: 'syz.3.1140': attribute type 1 has an invalid length. [ 251.779684][T10591] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1141'. [ 251.803670][T10591] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1141'. [ 251.813190][T10595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1142'. [ 251.905981][T10586] 8021q: adding VLAN 0 to HW filter on device bond7 [ 251.912952][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1140'. [ 251.929618][T10598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1143'. [ 251.978901][T10604] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1145'. [ 251.993912][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1145'. [ 252.011551][T10588] bond7: (slave gretap2): making interface the new active one [ 252.021601][T10588] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 252.049128][T10590] bond7 (unregistering): (slave gretap2): Releasing active interface [ 252.074373][T10590] bond7 (unregistering): Released all slaves [ 252.151187][T10598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1143'. [ 252.609835][T10629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.861331][T10634] gre2: entered promiscuous mode [ 253.205471][T10651] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 253.224162][T10651] syzkaller1: linktype set to 768 [ 253.722762][T10667] xt_bpf: check failed: parse error [ 253.772544][T10670] ip6erspan1: entered allmulticast mode [ 253.907852][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 254.183926][T10688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1166'. [ 254.317420][T10689] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 254.375727][T10692] bond4: (slave bridge8): Enslaving as an active interface with an up link [ 255.076368][T10726] netlink: 'syz.2.1173': attribute type 7 has an invalid length. [ 255.151556][T10726] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.170179][T10726] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 255.181697][T10726] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 255.192702][T10726] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 255.267205][T10730] ip6erspan0: entered promiscuous mode [ 255.290267][T10730] ip6erspan0: entered allmulticast mode [ 255.325999][T10726] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.354035][T10726] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 255.408264][T10726] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 255.448579][T10726] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 255.564400][T10726] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.589521][T10726] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 255.611045][T10726] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 255.637874][T10726] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 255.725529][T10726] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.747784][T10726] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 255.789773][T10726] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 255.820007][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.829248][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.836647][T10726] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 256.244421][T10769] bond5: option arp_interval: invalid value (18446744073709551615) [ 256.254139][T10769] bond5: option arp_interval: allowed values 0 - 2147483647 [ 256.271426][T10769] bond5 (unregistering): Released all slaves [ 256.335898][ T64] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.359519][ T64] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.390011][ T64] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 256.413224][ T64] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 256.481947][ T64] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.502529][ T64] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.520196][ T64] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 256.547777][ T64] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 256.606212][T10783] lo speed is unknown, defaulting to 1000 [ 256.606234][ T1006] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.628565][ T1006] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.654343][ T1006] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 256.675099][ T1006] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 256.760934][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.773405][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 256.783117][ T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 256.792328][ T12] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 256.825919][T10791] __nla_validate_parse: 9 callbacks suppressed [ 256.825940][T10791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1195'. [ 257.374234][T10810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1200'. [ 257.395580][T10810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1200'. [ 257.737309][T10821] lo speed is unknown, defaulting to 1000 [ 257.841440][T10805] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1199'. [ 257.884352][T10830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1202'. [ 258.407241][T10857] netlink: 'syz.0.1208': attribute type 25 has an invalid length. [ 258.582992][T10864] netlink: 'syz.1.1211': attribute type 1 has an invalid length. [ 259.160858][T10899] lo speed is unknown, defaulting to 1000 [ 259.194902][T10897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.204923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.601116][T10926] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20001 [ 259.884684][T10937] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1230'. [ 260.119125][T10936] raw_sendmsg: syz.4.1230 forgot to set AF_INET. Fix it! [ 260.529922][T10972] bridge_slave_1: left allmulticast mode [ 260.551830][T10972] bridge_slave_1: left promiscuous mode [ 260.572328][T10972] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.958636][T10976] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1241'. [ 260.968376][T10972] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 261.077579][T10979] netlink: 'syz.3.1242': attribute type 1 has an invalid length. [ 261.100051][T10978] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 261.694762][T11016] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1251'. [ 261.726045][T11016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1251'. [ 261.767556][T11018] netlink: 'syz.0.1252': attribute type 9 has an invalid length. [ 261.803532][T11010] virt_wifi0: left promiscuous mode [ 261.859733][T11016] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1251'. [ 262.249027][T11028] openvswitch: netlink: Missing valid actions attribute. [ 262.275879][T11028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.790188][T11048] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 262.808130][ T29] audit: type=1107 audit(1777878157.256:6): pid=11042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 262.841299][T11048] bond5 (unregistering): Released all slaves [ 262.993157][T11054] netlink: 'syz.1.1263': attribute type 1 has an invalid length. [ 263.346954][T11054] bond4: entered promiscuous mode [ 263.367486][T11054] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.680677][T11070] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1265'. [ 263.833172][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 264.266768][T11098] ip6erspan0: left promiscuous mode [ 264.507252][T11098] bond4: left promiscuous mode [ 264.820191][T11125] veth0: entered promiscuous mode [ 264.894442][T11125] bond0: entered promiscuous mode [ 264.915037][T11125] bond_slave_0: entered promiscuous mode [ 264.939647][T11125] bond_slave_1: entered promiscuous mode [ 265.119537][T11122] bond0: left promiscuous mode [ 265.139839][T11122] bond_slave_0: left promiscuous mode [ 265.161318][T11122] bond_slave_1: left promiscuous mode [ 265.194040][T11122] veth0: left promiscuous mode [ 265.223319][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1284'. [ 265.265505][T11141] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1285'. [ 265.280592][T11142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1284'. [ 265.453959][T11151] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1288'. [ 265.477343][T11151] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1288'. [ 265.815938][T11155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1290'. [ 266.011947][T11166] netlink: 'syz.1.1292': attribute type 1 has an invalid length. [ 266.095572][T11166] netlink: 'syz.1.1292': attribute type 2 has an invalid length. [ 266.238456][T11176] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1295'. [ 266.534968][T11203] netlink: 'syz.0.1302': attribute type 1 has an invalid length. [ 266.720503][T11203] 8021q: adding VLAN 0 to HW filter on device bond5 [ 266.819140][T11211] bond5: (slave veth5): Enslaving as an active interface with a down link [ 266.874286][T11214] bond5: (slave veth7): Enslaving as an active interface with a down link [ 266.949779][T11224] openvswitch: netlink: Message has 8 unknown bytes. [ 266.976528][T11224] __nla_validate_parse: 1 callbacks suppressed [ 266.976546][T11224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1306'. [ 266.997225][T11203] bond5: (slave bridge9): Enslaving as an active interface with a down link [ 267.072151][T11224] 8021q: adding VLAN 0 to HW filter on device bond5 [ 267.086078][T11230] bond5: option mode: unable to set because the bond device is up [ 267.353189][T11242] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1310'. [ 267.756905][T11260] netlink: 'syz.4.1315': attribute type 7 has an invalid length. [ 267.931759][T11270] netlink: 'syz.4.1317': attribute type 4 has an invalid length. [ 267.956301][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1317'. [ 268.064297][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1317'. [ 268.116031][T11277] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1317'. [ 268.147054][T11288] openvswitch: netlink: Key type 310 is out of range max 32 [ 268.362021][T11295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1322'. [ 268.378414][T11295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1322'. [ 268.507035][T11302] xt_hashlimit: size too large, truncated to 1048576 [ 268.534880][T11306] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1324'. [ 269.327170][T11311] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1328'. [ 269.653213][T11332] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1333'. [ 269.682130][T11330] tipc: Started in network mode [ 269.691308][T11330] tipc: Node identity dacdbf568d91, cluster identity 4711 [ 269.710500][T11330] tipc: Enabled bearer , priority 0 [ 269.727380][T11330] syzkaller0: entered promiscuous mode [ 269.743306][T11330] syzkaller0: entered allmulticast mode [ 269.854990][T11330] tipc: Resetting bearer [ 270.036531][T11351] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 270.390454][T11368] team0: No ports can be present during mode change [ 270.448822][T11326] tipc: Resetting bearer [ 270.529373][T11326] tipc: Disabling bearer [ 270.548169][T11373] syzkaller1: entered promiscuous mode [ 270.556151][T11373] syzkaller1: entered allmulticast mode [ 270.566465][T11379] netlink: 'syz.1.1345': attribute type 4 has an invalid length. [ 270.688125][T11372] lo speed is unknown, defaulting to 1000 [ 270.746806][T11380] lo speed is unknown, defaulting to 1000 [ 270.772128][T11376] RDS: rds_bind could not find a transport for ::a00:0:0:0, load rds_tcp or rds_rdma? [ 270.845568][T11385] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 272.385314][T11443] __nla_validate_parse: 8 callbacks suppressed [ 272.385336][T11443] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.1359'. [ 272.662428][T11450] tipc: Enabling of bearer rejected, failed to enable media [ 272.911180][T11459] lo speed is unknown, defaulting to 1000 [ 273.036733][T11463] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1365'. [ 273.804749][T11487] sctp: [Deprecated]: syz.2.1369 (pid 11487) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.804749][T11487] Use struct sctp_sack_info instead [ 273.868006][T11487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1369'. [ 273.909337][T11498] x_tables: duplicate underflow at hook 1 [ 274.025243][T11500] syzkaller0: entered promiscuous mode [ 274.049185][T11500] syzkaller0: entered allmulticast mode [ 274.433094][T11522] dvmrp0: entered allmulticast mode [ 274.877504][T11546] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1387'. [ 274.901600][T11548] xt_socket: unknown flags 0x8 [ 275.315720][T11566] syzkaller0: entered promiscuous mode [ 275.323989][T11566] syzkaller0: entered allmulticast mode [ 275.337132][T11566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1394'. [ 275.526948][T11585] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1397'. [ 276.835421][T11653] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1413'. [ 276.870724][T11653] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1413'. [ 276.903937][T11653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1413'. [ 276.954260][T11650] lo speed is unknown, defaulting to 1000 [ 277.175797][T11675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1417'. [ 277.787514][T11698] __nla_validate_parse: 1 callbacks suppressed [ 277.787538][T11698] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1424'. [ 277.873564][T11703] SET target dimension over the limit! [ 278.020766][T11707] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 278.176879][T11720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1431'. [ 278.514524][T11740] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1436'. [ 278.535707][T11736] lo speed is unknown, defaulting to 1000 [ 278.566172][T11740] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1436'. [ 278.762226][T11746] erspan0: entered promiscuous mode [ 278.783616][T11746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1437'. [ 278.804985][T11746] erspan0: left promiscuous mode [ 279.001593][T11749] Bluetooth: MGMT ver 1.23 [ 279.166556][T11759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1439'. [ 279.654802][T11779] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1439'. [ 279.782815][T11783] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1445'. [ 279.801623][T11785] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1446'. [ 279.834054][T11785] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1446'. [ 280.331544][T11803] bond0: (slave vlan3): Opening slave failed [ 280.832554][T11822] syzkaller1: entered promiscuous mode [ 280.838670][T11822] syzkaller1: entered allmulticast mode [ 281.844158][T11849] netlink: 'syz.4.1465': attribute type 22 has an invalid length. [ 281.853589][T11849] netlink: 'syz.4.1465': attribute type 1 has an invalid length. [ 282.289331][T11877] xt_TCPMSS: Only works on TCP SYN packets [ 282.441764][T11877] lo speed is unknown, defaulting to 1000 [ 282.609896][T11889] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4 [ 282.859412][T11897] netlink: 'syz.0.1474': attribute type 2 has an invalid length. [ 282.882196][T11897] syzkaller1: entered promiscuous mode [ 282.889488][T11897] syzkaller1: entered allmulticast mode [ 282.945425][T11905] lo speed is unknown, defaulting to 1000 [ 283.205432][T11910] syzkaller0: entered promiscuous mode [ 283.211147][T11910] syzkaller0: entered allmulticast mode [ 284.793537][T11849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 285.009111][T11916] netlink: 'syz.3.1479': attribute type 8 has an invalid length. [ 285.082937][T11927] __nla_validate_parse: 9 callbacks suppressed [ 285.082955][T11927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1481'. [ 285.152077][T11927] block nbd2: Unsupported socket: should be TCP or UNIX. [ 285.200532][T11926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1481'. [ 285.223066][T11926] block nbd2: Unsupported socket: should be TCP or UNIX. [ 285.512618][T11948] siw: device registration error -23 [ 285.575140][T11951] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1486'. [ 285.774195][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1489'. [ 285.787866][T11959] IPVS: sync thread started: state = MASTER, mcast_ifn = ipvlan0, syncid = 4, id = 0 [ 286.051184][T11971] sctp: [Deprecated]: syz.0.1492 (pid 11971) Use of struct sctp_assoc_value in delayed_ack socket option. [ 286.051184][T11971] Use struct sctp_sack_info instead [ 286.074595][T11973] mac80211_hwsim hwsim5 ªªªªª;: renamed from wlan0 (while UP) [ 286.122401][T11971] veth8: entered allmulticast mode [ 286.343383][T11986] openvswitch: netlink: IP tunnel dst address not specified [ 286.353322][T11986] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1491'. [ 286.513323][T11998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1491'. [ 286.580202][T12001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1491'. [ 286.627145][T11984] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1495'. [ 286.887452][T11992] ipvlan3: entered promiscuous mode [ 287.364319][T12015] lo speed is unknown, defaulting to 1000 [ 287.626463][T12030] netlink: 'syz.0.1502': attribute type 13 has an invalid length. [ 287.806191][T12043] netlink: 'syz.4.1508': attribute type 30 has an invalid length. [ 288.078657][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1510'. [ 288.498178][T12059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1512'. [ 288.577376][T12060] bond7: entered promiscuous mode [ 288.595636][T12060] 8021q: adding VLAN 0 to HW filter on device bond7 [ 288.607035][T12066] dummy0: mtu less than device minimum [ 288.841090][T12073] netlink: 'syz.1.1515': attribute type 1 has an invalid length. [ 288.874365][T12075] netlink: 'syz.2.1514': attribute type 1 has an invalid length. [ 288.889083][T12075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.940577][T12073] bond7: entered promiscuous mode [ 288.960313][T12073] bond7: entered allmulticast mode [ 288.966117][T12073] 8021q: adding VLAN 0 to HW filter on device bond7 [ 289.036198][T12078] erspan1: entered allmulticast mode [ 289.049528][T12078] bond7: (slave erspan1): making interface the new active one [ 289.057489][T12078] erspan1: entered promiscuous mode [ 289.084104][T12078] bond7: (slave erspan1): Enslaving as an active interface with an up link [ 289.372035][T12098] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 289.568118][T12106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.126305][T12124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1527'. [ 290.173160][T12124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1527'. [ 290.257854][T12130] tipc: Failed to remove unknown binding: 66,1,1/0:3345991083/3345991085 [ 290.385680][T12135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1529'. [ 290.898059][ T5638] block nbd2: Receive control failed (result -32) [ 291.143299][T12164] syzkaller0: entered promiscuous mode [ 291.155689][T12164] syzkaller0: entered allmulticast mode [ 291.342811][T12170] netlink: 'syz.3.1540': attribute type 30 has an invalid length. [ 291.365082][T12170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1540'. [ 292.190828][T12170] bond8: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 292.225512][T12170] bond8 (unregistering): Released all slaves [ 292.384632][T12176] lo speed is unknown, defaulting to 1000 [ 292.605222][T12201] netlink: 'syz.0.1551': attribute type 13 has an invalid length. [ 292.620337][T12201] netlink: 'syz.0.1551': attribute type 17 has an invalid length. [ 292.628752][ T5638] Bluetooth: hci4: command 0x0406 tx timeout [ 292.832008][T12200] tipc: Resetting bearer [ 292.837693][T12200] tipc: Resetting bearer [ 292.965972][T12201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.976523][T12201] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.988852][T12201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.045072][T12201] veth1_macvtap: left promiscuous mode [ 293.052260][T12201] veth0_macvtap: left promiscuous mode [ 293.066454][T12201] veth0_macvtap: entered promiscuous mode [ 293.084109][T12201] veth1_macvtap: entered promiscuous mode [ 293.100002][T12201] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 293.113777][T12201] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 293.128920][T12201] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 293.142624][T12201] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 293.159464][T12201] ipvlan2: left promiscuous mode [ 293.170834][T12201] rose0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 293.193333][T12201] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 293.201784][T12201] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 293.284810][ T86] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.301891][ T86] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 293.318450][ T86] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.329653][ T86] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 293.360246][ T5754] lo speed is unknown, defaulting to 1000 [ 293.382646][ T5754] syz2: Port: 1 Link ACTIVE [ 293.462955][ T86] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.500215][ T86] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 293.529112][ T86] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.554065][ T86] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 293.679789][T12221] x_tables: duplicate underflow at hook 1 [ 294.085892][T12240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1562'. [ 295.252486][T12251] netlink: 1084 bytes leftover after parsing attributes in process `syz.1.1564'. [ 295.297816][T12258] x_tables: duplicate underflow at hook 2 [ 295.625696][T12279] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1568'. [ 295.944968][T12274] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.166707][T12274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.187494][T12274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.543170][T12308] netlink: 'syz.2.1572': attribute type 1 has an invalid length. [ 296.551363][T12308] netlink: 212400 bytes leftover after parsing attributes in process `syz.2.1572'. [ 296.626727][T12308] netlink: 'syz.2.1572': attribute type 1 has an invalid length. [ 296.635429][T12308] netlink: 212400 bytes leftover after parsing attributes in process `syz.2.1572'. [ 296.695504][T12308] netlink: 'syz.2.1572': attribute type 1 has an invalid length. [ 296.706648][T12308] netlink: 212400 bytes leftover after parsing attributes in process `syz.2.1572'. [ 296.738929][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.740189][ T86] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.768084][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.801279][ T86] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.829747][ T86] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.854075][ T86] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.896486][T12308] netlink: 'syz.2.1572': attribute type 1 has an invalid length. [ 296.911973][ T86] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.916969][T12308] netlink: 212400 bytes leftover after parsing attributes in process `syz.2.1572'. [ 296.931049][ T86] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.947043][ T86] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.981488][ T86] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.065047][T12323] batadv_slave_0: entered promiscuous mode [ 297.083825][T12323] batadv_slave_0: entered allmulticast mode [ 297.110787][T12308] netlink: 'syz.2.1572': attribute type 1 has an invalid length. [ 297.129432][T12308] netlink: 212400 bytes leftover after parsing attributes in process `syz.2.1572'. [ 297.297147][T12331] IPVS: Scheduler module ip_vs_ not found [ 297.318738][T12308] netlink: 'syz.2.1572': attribute type 1 has an invalid length. [ 297.329450][T12308] netlink: 212400 bytes leftover after parsing attributes in process `syz.2.1572'. [ 297.816305][T12364] netlink: 'syz.1.1583': attribute type 46 has an invalid length. [ 297.874346][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1583'. [ 297.919522][T12364] netlink: 'syz.1.1583': attribute type 1 has an invalid length. [ 297.937225][T12367] siw: device registration error -23 [ 298.034691][T12376] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1584'. [ 298.087501][T12360] bond8: (slave geneve2): making interface the new active one [ 298.135414][T12360] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 298.180248][ T399] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 298.199519][ T399] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 298.218559][ T399] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 298.234794][ T399] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 298.473374][T12386] netlink: 'syz.2.1587': attribute type 10 has an invalid length. [ 298.763707][T12369] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.044794][T12417] netlink: 'syz.4.1595': attribute type 12 has an invalid length. [ 299.185313][T12430] x_tables: unsorted underflow at hook 2 [ 299.373224][T12431] openvswitch: netlink: Flow actions attr not present in new flow. [ 299.403112][T12438] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 299.445973][T12431] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.479361][T12431] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.506969][T12431] bond0 (unregistering): Released all slaves [ 300.003630][T12457] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 300.182627][T12440] bond8: option arp_all_targets: invalid value (129) [ 300.254701][T12440] bond8 (unregistering): Released all slaves [ 300.315832][T12445] __nla_validate_parse: 5 callbacks suppressed [ 300.315854][T12445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1601'. [ 300.337227][ T48] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.370220][ T48] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 300.379371][ T48] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 300.388936][ T48] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 6081 - 0 [ 300.397448][ T48] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.406240][ T48] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 300.416040][ T48] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 300.425725][ T48] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 6081 - 0 [ 300.435969][ T48] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.453640][ T48] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 300.462438][ T48] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 300.471016][ T48] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 6081 - 0 [ 300.479641][ T48] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.488330][ T48] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 300.496936][ T48] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 300.519087][ T48] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 6081 - 0 [ 300.667060][T12483] tipc: Enabling of bearer rejected, failed to enable media [ 300.767239][T12490] netlink: 211856 bytes leftover after parsing attributes in process `syz.3.1613'. [ 300.998636][T12492] bridge0: left promiscuous mode [ 301.004186][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1619'. [ 301.028388][T12492] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.057536][T12502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1619'. [ 301.096658][T12492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.315340][T12492] batadv_slave_0: left promiscuous mode [ 301.321260][T12492] batadv_slave_0: left allmulticast mode [ 301.328424][T12492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.338704][T12492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.351832][T12492] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 301.362537][T12492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.378304][T12492] veth1_vlan: left promiscuous mode [ 301.384656][T12492] veth0_vlan: left promiscuous mode [ 301.391109][T12492] veth0_vlan: entered promiscuous mode [ 301.400223][T12492] veth1_vlan: entered promiscuous mode [ 301.410014][T12492] veth1_macvtap: left promiscuous mode [ 301.416570][T12492] veth0_macvtap: left promiscuous mode [ 301.423701][T12492] veth0_macvtap: entered promiscuous mode [ 301.430767][T12492] veth1_macvtap: entered promiscuous mode [ 301.451456][T12492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.488208][T12492] bond2: left allmulticast mode [ 301.493134][T12492] bridge3: left allmulticast mode [ 301.499587][T12492] 8021q: adding VLAN 0 to HW filter on device bond2 [ 301.509842][T12492] 8021q: adding VLAN 0 to HW filter on device bond3 [ 301.526054][T12492] 8021q: adding VLAN 0 to HW filter on device bond4 [ 301.569574][T12492] virt_wifi0: entered promiscuous mode [ 301.575659][T12492] macsec2: left promiscuous mode [ 301.582998][T12492] 8021q: adding VLAN 0 to HW filter on device bond5 [ 301.591339][T12492] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 301.627043][T12492] macsec3: left promiscuous mode [ 301.634722][T12492] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 301.655119][ T8951] bridge0: entered promiscuous mode [ 301.699671][T12504] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 301.706778][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.722364][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.861693][ T13] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.888429][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.938843][T12525] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1622'. [ 301.967411][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1622'. [ 302.003315][ T13] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.012137][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.069542][T12527] tipc: Enabled bearer , priority 0 [ 302.083355][ T13] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.102075][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.120359][ T13] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.139613][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.165967][T12527] syzkaller0: entered promiscuous mode [ 302.178653][T12527] syzkaller0: entered allmulticast mode [ 302.193054][T12534] tun0: tun_chr_ioctl cmd 1074025672 [ 302.201446][T12530] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1625'. [ 302.208686][T12534] tun0: ignored: set checksum disabled [ 302.228660][T12528] netem: change failed [ 302.243805][T12527] tipc: Resetting bearer [ 302.257015][T12527] validate_nla: 3 callbacks suppressed [ 302.257032][T12527] netlink: 'syz.3.1624': attribute type 13 has an invalid length. [ 302.287200][T12527] netlink: 'syz.3.1624': attribute type 12 has an invalid length. [ 302.399357][T12541] tipc: Resetting bearer [ 302.465230][T12541] tipc: Disabling bearer [ 302.570423][ T86] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 302.614435][T12551] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1630'. [ 302.615312][ T807] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 302.642185][ T86] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 302.661821][T12554] x_tables: duplicate underflow at hook 1 [ 302.736164][T12560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1633'. [ 303.076570][T12570] lo speed is unknown, defaulting to 1000 [ 303.091322][ T807] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 303.579230][ T807] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 303.661615][T12595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1640'. [ 303.683932][T12586] syzkaller1: entered promiscuous mode [ 303.700057][T12595] openvswitch: netlink: Invalid VLAN frame [ 303.707547][T12586] syzkaller1: entered allmulticast mode [ 304.129817][T12609] erspan0: left promiscuous mode [ 304.534747][T12639] xt_bpf: check failed: parse error [ 304.785379][ T5638] block nbd3: Receive control failed (result -111) [ 304.968754][T12654] netlink: 'syz.2.1654': attribute type 1 has an invalid length. [ 306.224258][T12710] __nla_validate_parse: 4 callbacks suppressed [ 306.224279][T12710] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1672'. [ 306.317963][T12714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1667'. [ 306.354426][T12716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1674'. [ 306.372027][T12714] netlink: 'syz.3.1667': attribute type 1 has an invalid length. [ 306.434758][T12721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1675'. [ 306.617876][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 306.932437][T12738] netlink: 'syz.0.1678': attribute type 13 has an invalid length. [ 306.965339][T12738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'. [ 307.636698][T12765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1688'. [ 307.889088][T12777] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1691'. [ 308.303479][T12797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1697'. [ 308.313029][T12797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1697'. [ 308.324673][T12797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1697'. [ 308.349076][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 308.380118][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 308.411319][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 308.490465][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 308.822215][T12811] siw: device registration error -23 [ 308.834704][T12812] siw: device registration error -23 [ 309.573129][T12848] No such timeout policy "syz0" [ 309.657227][T12853] syzkaller0: entered promiscuous mode [ 309.667856][T12853] syzkaller0: entered allmulticast mode [ 310.254592][T12864] syzkaller0: entered promiscuous mode [ 310.275362][T12864] syzkaller0: entered allmulticast mode [ 310.962958][T12900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.316925][T12929] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 313.534899][T12939] lo speed is unknown, defaulting to 1000 [ 313.639883][T12938] lo speed is unknown, defaulting to 1000 [ 313.649047][T12948] __nla_validate_parse: 212 callbacks suppressed [ 313.649071][T12948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1739'. [ 313.748006][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1739'. [ 313.805653][T12956] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1741'. [ 313.821633][T12958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1740'. [ 313.833615][T12956] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1741'. [ 313.846997][T12958] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 313.927953][T12961] xt_TCPMSS: Only works on TCP SYN packets [ 314.184395][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1744'. [ 314.697819][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 314.921565][T12994] netlink: 'syz.1.1748': attribute type 1 has an invalid length. [ 314.953121][T12994] netlink: 'syz.1.1748': attribute type 2 has an invalid length. [ 314.985235][T12994] netlink: 'syz.1.1748': attribute type 1 has an invalid length. [ 315.021810][T12994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1748'. [ 315.079182][T13008] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:24098 [ 315.499540][T13033] netlink: 'syz.3.1755': attribute type 3 has an invalid length. [ 315.622807][T13045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1756'. [ 315.808932][T13050] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 315.812662][T13045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1756'. [ 316.109235][T13063] syzkaller0: entered promiscuous mode [ 316.135948][T13063] syzkaller0: entered allmulticast mode [ 316.440277][T13085] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 316.765571][T13070] syzkaller0: entered promiscuous mode [ 316.802507][T13070] syzkaller0: entered allmulticast mode [ 317.263760][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.272716][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.892925][T13114] bridge_slave_0: left allmulticast mode [ 319.899383][T13114] bridge_slave_0: left promiscuous mode [ 319.905349][T13114] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.955321][T13114] team0: Port device team_slave_0 removed [ 319.994209][T13114] team0: Port device team_slave_1 removed [ 320.008943][T13114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.017492][T13114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.033320][T13114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.047589][T13114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.060834][T13114] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 320.334754][T13128] netlink: 'syz.1.1775': attribute type 2 has an invalid length. [ 320.431747][T13140] netlink: 'syz.0.1777': attribute type 4 has an invalid length. [ 320.648525][T13145] lo speed is unknown, defaulting to 1000 [ 320.814896][T13152] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1781'. [ 321.089187][T13158] netlink: 'syz.1.1782': attribute type 7 has an invalid length. [ 321.654847][T13184] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 321.662160][T13169] dummy0: entered promiscuous mode [ 321.674889][T13169] dummy0: entered allmulticast mode [ 321.774256][T13184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1786'. [ 321.945824][T13188] netlink: 'syz.0.1788': attribute type 8 has an invalid length. [ 321.959266][T13189] xt_hashlimit: size too large, truncated to 1048576 [ 321.960971][T13188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1788'. [ 322.026140][T13188] veth1_to_team: entered promiscuous mode [ 322.054470][T13188] gretap0: entered promiscuous mode [ 322.081062][T13188] hsr1: entered promiscuous mode [ 322.302254][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1789'. [ 322.495554][T13206] xt_hl: Unknown Hop Limit match mode: 206 [ 322.767826][T13220] netlink: 'syz.1.1795': attribute type 1 has an invalid length. [ 322.866515][T13220] netlink: 'syz.1.1795': attribute type 1 has an invalid length. [ 323.394153][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1802'. [ 323.880454][T13262] netlink: 'syz.3.1806': attribute type 12 has an invalid length. [ 324.002984][T13266] netlink: 'syz.0.1808': attribute type 13 has an invalid length. [ 324.027576][T13266] netlink: 'syz.0.1808': attribute type 17 has an invalid length. [ 324.092304][T13266] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 324.154312][T13266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1808'. [ 324.364491][T13285] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1812'. [ 324.422821][T13288] netlink: 'syz.2.1813': attribute type 1 has an invalid length. [ 324.444133][T13289] bond6: entered allmulticast mode [ 324.448432][T13288] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1813'. [ 324.477745][T13289] wireguard0: entered allmulticast mode [ 324.514748][T13289] dvmrp8: entered allmulticast mode [ 324.592926][T13289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1811'. [ 324.987374][T13303] netlink: 964 bytes leftover after parsing attributes in process `syz.0.1816'. [ 325.019423][T13303] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 325.141071][T13282] bond6: left allmulticast mode [ 325.159367][T13282] wireguard0: left allmulticast mode [ 325.171368][T13282] dvmrp8: left allmulticast mode [ 325.595199][T13323] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 325.791038][T13329] mac80211_hwsim hwsim2 ªªªªª;: renamed from wlan0 [ 326.159511][T13341] netlink: 'syz.1.1826': attribute type 1 has an invalid length. [ 326.174608][T13342] netlink: 'syz.1.1826': attribute type 11 has an invalid length. [ 326.203244][T13342] __nla_validate_parse: 1 callbacks suppressed [ 326.203273][T13342] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1826'. [ 326.231523][T13341] 8021q: adding VLAN 0 to HW filter on device bond10 [ 326.271405][T13349] 8021q: adding VLAN 0 to HW filter on device bond10 [ 326.305306][T13349] bond10: (slave vcan1): The slave device specified does not support setting the MAC address [ 326.321783][T13349] bond10: (slave vcan1): Error -95 calling set_mac_address [ 326.651436][T13365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1831'. [ 326.869132][T13368] netlink: 'syz.0.1831': attribute type 64 has an invalid length. [ 327.385639][T13378] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1834'. [ 327.396769][T13378] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1834'. [ 329.574106][T13422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1844'. [ 330.067981][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 330.554609][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1848'. [ 330.593363][T13442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.605913][T13442] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.615824][ T8951] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 330.641180][T13442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.758509][T13442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.779052][T13442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.793960][T13442] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.805270][T13442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.821678][T13442] veth1_macvtap: left promiscuous mode [ 330.830662][T13442] veth0_macvtap: left promiscuous mode [ 330.839773][T13442] veth0_macvtap: entered promiscuous mode [ 330.847117][T13442] veth1_macvtap: entered promiscuous mode [ 330.861290][T13442] A link change request failed with some changes committed already. Interface ªªªªª; may have been left with an inconsistent configuration, please check. [ 330.895061][ T8794] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.902330][ T8794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.030428][ T399] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.068053][ T399] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.105230][ T399] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.166291][ T399] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.214756][T13471] tipc: Started in network mode [ 331.244510][T13471] tipc: Node identity , cluster identity 4711 [ 331.268367][T13471] tipc: Failed to obtain node identity [ 331.287506][T13471] tipc: Enabling of bearer rejected, failed to enable media [ 331.432534][T13473] syzkaller0: entered promiscuous mode [ 331.449601][T13473] syzkaller0: entered allmulticast mode [ 331.497361][ T1163] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 331.578797][ T8951] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 331.907376][T13492] xt_hashlimit: size too large, truncated to 1048576 [ 331.941897][T13493] xt_CT: You must specify a L4 protocol and not use inversions on it [ 332.487416][T13501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1862'. [ 332.533790][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1861'. [ 332.547753][T13502] netlink: 'syz.0.1862': attribute type 13 has an invalid length. [ 332.567809][T13502] netlink: 'syz.0.1862': attribute type 17 has an invalid length. [ 332.591891][T13506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1861'. [ 334.516848][T13502] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 334.550277][T13509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1863'. [ 334.602980][ T1163] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 334.630351][ T1163] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 335.005718][T13529] sctp: [Deprecated]: syz.2.1868 (pid 13529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.005718][T13529] Use struct sctp_sack_info instead [ 335.164071][T13535] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 335.330453][T13546] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1873'. [ 335.339926][ T9118] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 335.456844][T13546] syzkaller0: entered promiscuous mode [ 335.464387][T13546] syzkaller0: entered allmulticast mode [ 335.478166][T13547] TC_ACT_REPEAT abuse ? [ 335.485469][T13546] TC_ACT_REPEAT abuse ? [ 335.724250][T13552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1874'. [ 335.809844][T13554] bridge6: entered promiscuous mode [ 336.007836][T13561] syzkaller1: entered promiscuous mode [ 336.017161][T13561] syzkaller1: entered allmulticast mode [ 336.037072][T13562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1879'. [ 336.049927][T13562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1879'. [ 336.371251][T13584] syzkaller0: entered promiscuous mode [ 336.391229][T13584] syzkaller0: entered allmulticast mode [ 336.611555][T13596] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1888'. [ 337.091109][T13615] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1893'. [ 337.580850][T13634] netlink: 'syz.4.1902': attribute type 4 has an invalid length. [ 337.622040][T13634] netlink: 'syz.4.1902': attribute type 4 has an invalid length. [ 337.914113][T13652] bond9: (slave bond_slave_1): Device is not bonding slave [ 337.922558][T13652] bond9: option active_slave: invalid value (bond_slave_1) [ 337.935715][T13652] bond9 (unregistering): Released all slaves [ 337.962990][T13661] __nla_validate_parse: 5 callbacks suppressed [ 337.963011][T13661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1909'. [ 338.008707][T13661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1909'. [ 338.102879][T13677] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 338.121799][T13677] netlink: 'syz.0.1914': attribute type 2 has an invalid length. [ 338.206041][T13678] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 338.239187][T13678] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1914'. [ 338.315907][T13688] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1918'. [ 338.409970][T13682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1916'. [ 338.721691][T13704] Cannot find add_set index 1 as target [ 338.749816][T13705] vlan2: entered promiscuous mode [ 338.857916][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 339.615009][T13749] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1935'. [ 339.914309][T13746] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1934'. [ 340.130814][T13759] netlink: 'syz.2.1936': attribute type 27 has an invalid length. [ 340.153753][T13759] 0ªî{X¹¦: left allmulticast mode [ 340.221219][T13759] bond2: left promiscuous mode [ 340.246857][T13759] bond2: left allmulticast mode [ 340.272084][T13759] macsec1: left promiscuous mode [ 340.294957][T13759] ip6erspan0: left promiscuous mode [ 340.341465][T13759] geneve3: left promiscuous mode [ 340.384217][T13759] geneve3: left allmulticast mode [ 340.427449][T13759] bond8: left promiscuous mode [ 340.448463][T13759] bond8: left allmulticast mode [ 340.474391][T13759] bridge1: left promiscuous mode [ 340.504178][T13759] ip6erspan1: left allmulticast mode [ 340.644593][T13766] 8021q: adding VLAN 0 to HW filter on device  [ 340.660957][T13766] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.672918][T13766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.703124][T13774] netlink: 'syz.1.1940': attribute type 39 has an invalid length. [ 340.754831][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1940'. [ 340.811527][T13766] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 340.832004][T13778] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 340.841973][T13778] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 341.133049][T13779] lo speed is unknown, defaulting to 1000 [ 341.602830][T13799] syzkaller0: entered promiscuous mode [ 341.612938][T13812] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 341.618751][T13799] syzkaller0: entered allmulticast mode [ 341.880562][T13826] hsr0: entered promiscuous mode [ 341.915256][T13825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1951'. [ 342.158291][T13836] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1955'. [ 342.209838][T13836] netlink: 'syz.2.1955': attribute type 4 has an invalid length. [ 342.510445][T13852] netlink: 'syz.4.1959': attribute type 2 has an invalid length. [ 342.765216][T13862] lo speed is unknown, defaulting to 1000 [ 342.843349][T13868] IPVS: length: 4096 != 24 [ 343.171512][T13875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1964'. [ 343.221603][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1964'. [ 343.335961][T13884] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1966'. [ 343.385508][T13875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1964'. [ 343.431502][T13890] tc_dump_action: action bad kind [ 343.470847][T13893] netlink: 'syz.2.1969': attribute type 3 has an invalid length. [ 343.516707][T13893] netlink: 'syz.2.1969': attribute type 3 has an invalid length. [ 343.850542][T13912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.006791][T13917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1974'. [ 344.074422][T13907] syzkaller1: entered promiscuous mode [ 344.089107][T13907] syzkaller1: entered allmulticast mode [ 344.274749][T13927] netlink: 'syz.2.1976': attribute type 10 has an invalid length. [ 344.367399][T13927] batadv_slave_0: entered promiscuous mode [ 344.375591][T13927] batadv_slave_0: entered allmulticast mode [ 344.501554][T13932] netlink: 'syz.2.1976': attribute type 10 has an invalid length. [ 344.502570][T13930] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 344.566357][T13935] syzkaller0: entered promiscuous mode [ 344.578516][T13935] syzkaller0: entered allmulticast mode [ 344.743697][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1981'. [ 344.812933][T13949] netlink: 'syz.4.1983': attribute type 1 has an invalid length. [ 345.193117][T13973] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1990'. [ 345.409092][T13987] syzkaller0: entered promiscuous mode [ 345.424906][T13987] syzkaller0: entered allmulticast mode [ 345.927469][T14017] netlink: 'syz.0.2000': attribute type 3 has an invalid length. [ 345.960190][T14022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2002'. [ 346.676944][T14048] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2009'. [ 347.148928][T14068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2014'. [ 347.338711][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 348.235342][T14116] __nla_validate_parse: 3 callbacks suppressed [ 348.235361][T14116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2023'. [ 348.827323][T14148] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 348.887854][T14156] netlink: 'syz.2.2034': attribute type 1 has an invalid length. [ 348.949733][T14157] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2034'. [ 348.982188][ T29] audit: type=1804 audit(1777878243.566:7): pid=14161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2035" name="/newroot/426/memory.events" dev="tmpfs" ino=2194 res=1 errno=0 [ 349.024462][ T29] audit: type=1800 audit(1777878243.566:8): pid=14161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2035" name="memory.events" dev="tmpfs" ino=2194 res=0 errno=0 [ 349.080633][ T29] audit: type=1800 audit(1777878243.566:9): pid=14161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2035" name="memory.events" dev="tmpfs" ino=2194 res=0 errno=0 [ 349.102997][ T29] audit: type=1800 audit(1777878243.606:10): pid=14161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2035" name="memory.events" dev="tmpfs" ino=2194 res=0 errno=0 [ 349.125877][ T29] audit: type=1800 audit(1777878243.606:11): pid=14161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2035" name="memory.events" dev="tmpfs" ino=2194 res=0 errno=0 [ 349.149322][ T29] audit: type=1800 audit(1777878243.636:12): pid=14161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2035" name="memory.events" dev="tmpfs" ino=2194 res=0 errno=0 [ 349.183295][ T29] audit: type=1800 audit(1777878243.636:13): pid=14161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2035" name="memory.events" dev="tmpfs" ino=2194 res=0 errno=0 [ 349.192838][T14156] 8021q: adding VLAN 0 to HW filter on device bond9 [ 349.206867][ T29] audit: type=1800 audit(1777878243.636:14): pid=14161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2035" name="memory.events" dev="tmpfs" ino=2194 res=0 errno=0 [ 349.268606][ T29] audit: type=1800 audit(1777878243.636:15): pid=14161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2035" name="memory.events" dev="tmpfs" ino=2194 res=0 errno=0 [ 349.299672][ T29] audit: type=1800 audit(1777878243.636:16): pid=14161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2035" name="memory.events" dev="tmpfs" ino=2194 res=0 errno=0 [ 350.927557][T14196] syzkaller0: entered promiscuous mode [ 350.949568][T14196] syzkaller0: entered allmulticast mode [ 351.437054][T14219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2043'. [ 351.450733][T14219] netlink: 580 bytes leftover after parsing attributes in process `syz.0.2043'. [ 351.702493][T14206] netlink: 'syz.4.2041': attribute type 3 has an invalid length. [ 352.494360][T14274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2058'. [ 352.521158][T14276] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2059'. [ 352.564893][T14274] netlink: 'syz.0.2058': attribute type 1 has an invalid length. [ 352.893481][T14286] IPv6: sit3: Disabled Multicast RS [ 352.932937][T14286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2062'. [ 353.123622][T14290] netlink: 'syz.0.2063': attribute type 1 has an invalid length. [ 353.180887][T14290] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2063'. [ 353.694195][T14312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2067'. [ 353.731624][T14312] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2067'. [ 353.836799][T14318] netlink: 'syz.1.2070': attribute type 3 has an invalid length. [ 355.067251][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2081'. [ 355.277444][T14374] IPv6: NLM_F_CREATE should be specified when creating new route [ 355.321517][T14374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2083'. [ 355.554429][T14376] geneve2: entered promiscuous mode [ 355.605907][T14380] Unknown options in mask 6 [ 355.763241][T14384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2087'. [ 356.015638][T14395] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 356.270627][T14400] netlink: 'syz.2.2090': attribute type 1 has an invalid length. [ 356.514079][T14400] bond10: entered promiscuous mode [ 356.542774][T14400] 8021q: adding VLAN 0 to HW filter on device bond10 [ 356.604562][T14407] netlink: 'syz.1.2091': attribute type 163 has an invalid length. [ 356.887413][T14419] : renamed from bond0 (while UP) [ 357.343151][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2095'. [ 357.403000][T14440] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.2096'. [ 357.418033][T14438] xfrm0: entered promiscuous mode [ 357.428266][T14438] xfrm0: entered allmulticast mode [ 357.435367][T14440] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 357.457434][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2095'. [ 357.687282][T14450] netlink: 'syz.1.2098': attribute type 62 has an invalid length. [ 358.036907][T14462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2101'. [ 358.122137][T14462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2101'. [ 358.196365][T14462] syz_tun: entered promiscuous mode [ 358.254786][T14469] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 358.276653][T14469] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 358.298958][T14469] veth0_virt_wifi: entered allmulticast mode [ 358.358369][T14469] veth0_virt_wifi: entered promiscuous mode [ 358.380419][T14469] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 358.387782][T14469] bridge0: port 1(veth0_virt_wifi) entered forwarding state [ 358.567291][T14484] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 358.617400][T14484] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 358.808674][T14495] netlink: 'syz.2.2112': attribute type 6 has an invalid length. [ 359.067532][T14499] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2113'. [ 359.316469][T14503] "syz.1.2115" (14503) uses obsolete ecb(arc4) skcipher [ 360.465968][T14521] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2120'. [ 360.778051][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 360.900110][T14543] netlink: 'syz.2.2125': attribute type 13 has an invalid length. [ 361.316283][T14562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2129'. [ 361.711649][T14598] syzkaller0: entered promiscuous mode [ 361.725283][T14598] syzkaller0: entered allmulticast mode [ 362.005287][T14618] netlink: 'syz.2.2138': attribute type 1 has an invalid length. [ 362.043971][T14618] netlink: 'syz.2.2138': attribute type 2 has an invalid length. [ 362.045695][T14619] netlink: 'syz.2.2138': attribute type 1 has an invalid length. [ 362.070490][T14618] netlink: 'syz.2.2138': attribute type 1 has an invalid length. [ 362.118975][T14619] netlink: 'syz.2.2138': attribute type 2 has an invalid length. [ 362.152511][T14618] netlink: 'syz.2.2138': attribute type 3 has an invalid length. [ 362.205814][T14619] netlink: 'syz.2.2138': attribute type 1 has an invalid length. [ 362.226289][T14618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2138'. [ 362.247151][T14619] netlink: 'syz.2.2138': attribute type 3 has an invalid length. [ 362.281952][T14619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2138'. [ 362.796078][T14658] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2146'. [ 363.271214][T14673] lo speed is unknown, defaulting to 1000 [ 363.277013][T14671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.299505][T14671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.326652][T14671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.359713][T14671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.377131][T14671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.399437][T14671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.545166][T14660] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 363.648484][T14680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2150'. [ 363.668448][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.679272][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.683335][T14680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2150'. [ 363.886198][T14688] IPv6: addrconf: prefix option has invalid lifetime [ 363.977792][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 363.992645][T14671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.235047][T14737] IPVS: length: 100 != 8 [ 365.534545][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2167'. [ 365.712025][T14743] lo speed is unknown, defaulting to 1000 [ 366.463318][T14786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2174'. [ 366.490410][T14786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2174'. [ 366.559288][T14786] gretap0: entered promiscuous mode [ 366.616608][T14786] gretap0: left promiscuous mode [ 366.730416][T14788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2175'. [ 367.033040][T14800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2179'. [ 367.098218][T14802] sctp: [Deprecated]: syz.2.2180 (pid 14802) Use of struct sctp_assoc_value in delayed_ack socket option. [ 367.098218][T14802] Use struct sctp_sack_info instead [ 367.241660][T14809] ip6t_srh: unknown srh match flags 4000 [ 367.554783][T14817] lo speed is unknown, defaulting to 1000 [ 368.071078][T14853] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2184'. [ 368.767303][T14868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2188'. [ 368.843564][T14868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2188'. [ 368.853540][T14579] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.876205][T14579] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.906618][T14579] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.934442][T14579] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.287417][T14886] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 369.315714][T14886] bond7 (unregistering): Released all slaves [ 369.538796][T14888] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2192'. [ 369.598386][T14888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2192'. [ 369.602544][T14894] syzkaller1: entered promiscuous mode [ 369.634579][T14894] syzkaller1: entered allmulticast mode [ 369.802428][T14903] openvswitch: netlink: IP tunnel dst address not specified [ 371.180926][T14921] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.515204][T14940] __nla_validate_parse: 2 callbacks suppressed [ 371.515225][T14940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2205'. [ 372.414648][T14961] xt_hashlimit: overflow, rate too high: 0 [ 373.021659][T14972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2214'. [ 373.460441][T14991] netlink: 'syz.3.2218': attribute type 13 has an invalid length. [ 374.068865][T15012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2220'. [ 374.325826][T15021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2223'. [ 374.884735][T15048] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2228'. [ 375.412611][T15065] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2231'. [ 375.431283][T15067] netlink: 'syz.0.2232': attribute type 1 has an invalid length. [ 375.586219][T15076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2232'. [ 375.623695][T15067] bond7: entered promiscuous mode [ 375.629461][T15067] bond7: entered allmulticast mode [ 375.635144][T15067] 8021q: adding VLAN 0 to HW filter on device bond7 [ 375.659572][T15073] erspan1: entered allmulticast mode [ 375.673544][T15073] bond7: (slave erspan1): making interface the new active one [ 375.681446][T15073] erspan1: entered promiscuous mode [ 375.692570][T15073] bond7: (slave erspan1): Enslaving as an active interface with an up link [ 375.901739][T15079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2233'. [ 375.948758][T15079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2233'. [ 375.981575][T15079] netlink: 'syz.4.2233': attribute type 11 has an invalid length. [ 376.086403][T15079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2233'. [ 376.108710][T15079] netlink: 'syz.4.2233': attribute type 11 has an invalid length. [ 376.178848][T15080] lo speed is unknown, defaulting to 1000 [ 376.231792][T15073] syz.0.2232 (15073) used greatest stack depth: 17664 bytes left [ 377.582167][T15109] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 377.912781][T15136] bond9 (unregistering): Released all slaves [ 378.027354][T15116] lo speed is unknown, defaulting to 1000 [ 378.215385][T15150] smc: net device wlan0 applied user defined pnetid SYZ0 [ 378.699071][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.710124][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.754040][T15162] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:981 [ 379.003661][T15171] __nla_validate_parse: 1 callbacks suppressed [ 379.003682][T15171] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2253'. [ 379.387308][T15188] netlink: 'syz.0.2254': attribute type 15 has an invalid length. [ 379.409903][T15165] bond9: option miimon: invalid value (18446744073709551607) [ 379.479914][T15165] bond9: option miimon: allowed values 0 - 2147483647 [ 379.516311][T15165] bond9 (unregistering): Released all slaves [ 379.611731][T15158] lo speed is unknown, defaulting to 1000 [ 379.611924][T15178] tipc: Started in network mode [ 379.631812][T15178] tipc: Node identity 9273952d83ac, cluster identity 4711 [ 379.655068][T15178] tipc: Enabled bearer , priority 0 [ 379.697189][T15200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2256'. [ 379.770716][T15188] IPVS: Scheduler module ip_vs_sip not found [ 379.845694][T15182] syzkaller0: entered promiscuous mode [ 379.855397][T15182] syzkaller0: entered allmulticast mode [ 379.862553][T15182] tipc: Resetting bearer [ 379.904980][T15184] tipc: Resetting bearer [ 380.419463][T15210] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2258'. [ 382.898430][T15184] tipc: Disabling bearer [ 382.923254][ T9109] tipc: Node number set to 299865389 [ 383.149682][T15227] netlink: 'syz.1.2260': attribute type 11 has an invalid length. [ 383.579791][T15243] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2263'. [ 383.608804][T15244] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2263'. [ 383.721422][T15251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2265'. [ 383.821422][T15257] netlink: 'syz.1.2267': attribute type 1 has an invalid length. [ 383.929623][T15263] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2268'. [ 384.109853][T15273] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2272'. [ 384.133596][T15276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2271'. [ 384.166117][T15276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2271'. [ 384.200925][T15276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2271'. [ 384.252321][T15276] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2271'. [ 384.373139][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2274'. [ 384.415250][T15286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2274'. [ 384.519475][T15293] sctp: [Deprecated]: syz.3.2277 (pid 15293) Use of int in max_burst socket option. [ 384.519475][T15293] Use struct sctp_assoc_value instead [ 384.729279][T15308] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 384.930604][T15308] tipc: Enabling of bearer rejected, failed to enable media [ 385.008495][T15326] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2286'. [ 385.029718][T15325] lo: Caught tx_queue_len zero misconfig [ 385.043551][T15325] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2287'. [ 385.103245][T15326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2286'. [ 385.118404][ T9117] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 385.548578][ T8794] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 385.719323][ T9109] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 385.877369][T15377] netlink: 'syz.1.2297': attribute type 3 has an invalid length. [ 385.926113][T15379] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 386.021509][T15388] netlink: 'syz.0.2299': attribute type 83 has an invalid length. [ 386.077480][T15390] netlink: 'syz.4.2302': attribute type 4 has an invalid length. [ 386.149004][T15393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.273466][T15395] bond9 (unregistering): Released all slaves [ 386.453152][T15412] netlink: 'syz.3.2308': attribute type 1 has an invalid length. [ 386.619049][ T8794] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 386.641939][ T8794] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 386.745511][T15425] netlink: 'syz.1.2311': attribute type 8 has an invalid length. [ 386.903868][T15437] syzkaller0: entered promiscuous mode [ 386.911360][T15437] syzkaller0: entered allmulticast mode [ 386.922287][T15438] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 387.133699][T15446] bond0: option packets_per_slave: invalid value (1048582) [ 387.158121][T15446] bond0: option packets_per_slave: allowed values 0 - 65535 [ 387.198018][T15446] bond0 (unregistering): Released all slaves [ 387.253970][T15455] netlink: 'syz.4.2321': attribute type 1 has an invalid length. [ 387.338517][ T807] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 387.581309][T15456] tipc: Resetting bearer [ 387.587134][T15456] tipc: Resetting bearer [ 387.684258][ T9117] lo speed is unknown, defaulting to 1000 [ 387.715568][ T9117] syz2: Port: 1 Link DOWN [ 387.746619][T14579] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.791621][T14579] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.815561][T14579] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.961860][T15476] netlink: 'syz.0.2325': attribute type 1 has an invalid length. [ 387.974504][T15461] syzkaller0: entered promiscuous mode [ 387.980500][T15476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.990497][T15461] syzkaller0: entered allmulticast mode [ 388.002078][T14579] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.383492][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 390.935828][T15483] bridge14: entered promiscuous mode [ 390.946632][T15507] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 391.233603][T15520] tunl0: Caught tx_queue_len zero misconfig [ 391.244930][T15520] __nla_validate_parse: 12 callbacks suppressed [ 391.244946][T15520] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2332'. [ 391.664052][T15542] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 391.664052][T15542] Please contact the netfilter-devel mailing list or update your nftables rules. [ 391.717761][T15540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2338'. [ 391.743354][T15540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2338'. [ 391.794515][T11431] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.811309][T15540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2338'. [ 391.825573][T11431] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.860100][T11431] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.895586][T15551] netem: invalid attributes len -1 [ 391.918899][T15551] netem: change failed [ 391.946567][T11431] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.212979][T14579] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.226816][T14579] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.257127][T14579] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.282381][T14579] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.443410][T15577] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 392.472784][T15574] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2347'. [ 392.625274][T15583] SET target dimension over the limit! [ 393.156732][T15610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2354'. [ 393.344297][T15616] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2356'. [ 393.354201][T15616] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2356'. [ 395.698494][T15588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.916508][T15630] netlink: 'syz.4.2362': attribute type 13 has an invalid length. [ 395.944209][T15630] gretap0: refused to change device tx_queue_len [ 395.960391][T15630] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 395.977872][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 396.019990][T15644] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 396.041657][T15645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2363'. [ 396.231825][T15652] netlink: 'syz.2.2367': attribute type 1 has an invalid length. [ 396.266682][T15654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2368'. [ 396.367493][T15663] netlink: 'syz.4.2370': attribute type 1 has an invalid length. [ 396.383876][T15663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.438715][T15652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2367'. [ 396.688650][T15670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2371'. [ 396.743999][T15674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2373'. [ 396.925353][T15684] tipc: Enabled bearer , priority 0 [ 396.964016][T15672] syzkaller0: entered promiscuous mode [ 396.976347][T15672] syzkaller0: entered allmulticast mode [ 397.041506][T15672] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2372'. [ 397.075995][T15672] tipc: Resetting bearer [ 397.095950][T15671] tipc: Resetting bearer [ 397.169099][T15671] tipc: Disabling bearer [ 397.315726][T15700] lo speed is unknown, defaulting to 1000 [ 397.540475][T15708] vlan0: entered promiscuous mode [ 397.550541][T15708] bridge0: entered promiscuous mode [ 397.561530][T15708] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2383'. [ 397.632472][T15723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2385'. [ 397.811210][T15727] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.2387'. [ 397.877337][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 397.877357][ T29] audit: type=1804 audit(1777878292.456:43): pid=15727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2387" name="/newroot/442/memory.events" dev="tmpfs" ino=2282 res=1 errno=0 [ 397.915201][ T29] audit: type=1800 audit(1777878292.456:44): pid=15727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2387" name="memory.events" dev="tmpfs" ino=2282 res=0 errno=0 [ 398.201202][T15743] netlink: 'syz.2.2393': attribute type 4 has an invalid length. [ 398.261374][T15743] netlink: 'syz.2.2393': attribute type 4 has an invalid length. [ 398.382610][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2393'. [ 398.537822][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 398.843076][T15766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2398'. [ 398.876752][T15766] gtp1: entered promiscuous mode [ 398.888388][T15766] gtp1: entered allmulticast mode [ 398.985261][T15769] lo speed is unknown, defaulting to 1000 [ 399.891429][T14577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.900395][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.920301][T14577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.929294][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.947329][T14577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.956034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.990600][T14576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.999652][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.033956][T14576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.042368][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.053374][T15792] team0: entered promiscuous mode [ 400.498631][T15802] "syz.0.2405" (15802) uses obsolete ecb(arc4) skcipher [ 400.669977][T15815] unsupported nlmsg_type 40 [ 400.717007][T14579] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.734019][T14579] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.768796][T14579] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.813076][T14579] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.956250][T15830] sctp: [Deprecated]: syz.1.2414 (pid 15830) Use of int in max_burst socket option. [ 400.956250][T15830] Use struct sctp_assoc_value instead [ 402.208302][T15879] veth1_to_bond: entered allmulticast mode [ 402.273800][T15882] __nla_validate_parse: 11 callbacks suppressed [ 402.273822][T15882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2431'. [ 402.399731][T15879] veth1_to_bond: left allmulticast mode [ 402.714526][T15900] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2437'. [ 402.929194][T15908] syzkaller0: entered promiscuous mode [ 402.953326][T15908] syzkaller0: entered allmulticast mode [ 403.150146][T15917] bond0: entered promiscuous mode [ 403.161674][T15917] dummy0: entered promiscuous mode [ 403.185285][T15917] batadv0: entered promiscuous mode [ 403.200500][T15917] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 403.242533][T15917] hsr2: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 403.288811][T15917] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 403.313886][T15927] netlink: 'syz.4.2447': attribute type 1 has an invalid length. [ 403.328874][T15917] bond0: left promiscuous mode [ 403.341169][T15917] dummy0: left promiscuous mode [ 403.356335][T15917] batadv0: left promiscuous mode [ 403.492110][T15933] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2448'. [ 403.536841][T15933] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2448'. [ 403.675996][T15941] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2451'. [ 403.712249][T15942] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2451'. [ 403.754014][T15941] gretap0: entered promiscuous mode [ 403.819710][T15940] lo speed is unknown, defaulting to 1000 [ 403.927721][T15952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2453'. [ 404.346250][T15956] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2455'. [ 404.373459][T15956] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2455'. [ 404.599353][T15974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2460'. [ 405.223388][T15995] netlink: 'syz.4.2463': attribute type 4 has an invalid length. [ 405.479795][T16002] ip6tnl0: Caught tx_queue_len zero misconfig [ 405.536302][T16002] netlink: 'syz.3.2466': attribute type 27 has an invalid length. [ 405.550043][T16002] netlink: 'syz.3.2466': attribute type 28 has an invalid length. [ 405.570375][T16002] netlink: 'syz.3.2466': attribute type 29 has an invalid length. [ 405.588628][T16002] netlink: 'syz.3.2466': attribute type 30 has an invalid length. [ 405.598759][T16002] netlink: 'syz.3.2466': attribute type 31 has an invalid length. [ 405.616121][T16002] netlink: 'syz.3.2466': attribute type 32 has an invalid length. [ 405.631594][T16009] net_ratelimit: 5 callbacks suppressed [ 405.631613][T16009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.657752][T16002] netlink: 'syz.3.2466': attribute type 33 has an invalid length. [ 405.666772][T16002] netlink: 'syz.3.2466': attribute type 35 has an invalid length. [ 406.537922][ T5638] Bluetooth: hci4: command 0x0406 tx timeout [ 406.610008][T16043] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 406.623310][T16043] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 406.762213][T16039] bond11: (slave bridge5): Enslaving as an active interface with a down link [ 406.832786][T16048] ip6gretap1: entered promiscuous mode [ 406.858479][T16048] ip6gretap1: entered allmulticast mode [ 406.880496][T16048] bond11: (slave ip6gretap1): making interface the new active one [ 406.912577][T16048] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link [ 407.366541][T16070] __nla_validate_parse: 5 callbacks suppressed [ 407.366563][T16070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2487'. [ 409.835461][T16105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2496'. [ 409.872183][T16105] veth1_to_team: entered promiscuous mode [ 409.894112][T16105] debugfs: 'hsr1' already exists in 'hsr' [ 409.903637][T16105] Cannot create hsr debugfs directory [ 409.929367][T16105] hsr1: entered promiscuous mode [ 410.075103][T16109] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2499'. [ 410.172014][T16113] syzkaller0: entered promiscuous mode [ 410.188635][T16113] syzkaller0: entered allmulticast mode [ 410.203187][T16113] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 410.402944][T16120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2502'. [ 410.437916][T16120] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2502'. [ 410.565320][T16124] netlink: 1484 bytes leftover after parsing attributes in process `syz.3.2503'. [ 410.587818][T16124] netlink: 1484 bytes leftover after parsing attributes in process `syz.3.2503'. [ 410.684747][T16125] lo speed is unknown, defaulting to 1000 [ 411.458383][T16140] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2507'. [ 411.598476][T16142] ieee802154 phy1 wpan1: encryption failed: -22 [ 411.621562][T16146] ieee802154 phy1 wpan1: encryption failed: -22 [ 412.181760][T16167] syzkaller0: entered promiscuous mode [ 412.228364][T16167] syzkaller0: entered allmulticast mode [ 412.529908][T16178] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 412.645605][T16184] validate_nla: 13 callbacks suppressed [ 412.645627][T16184] netlink: 'syz.0.2518': attribute type 1 has an invalid length. [ 412.662142][T16184] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2518'. [ 412.689351][T16180] : entered promiscuous mode [ 412.806375][T16191] syzkaller0: entered promiscuous mode [ 412.813392][T16191] syzkaller0: entered allmulticast mode [ 412.950860][T16194] batadv0: Caught tx_queue_len zero misconfig [ 413.134833][T16206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2524'. [ 413.226023][T16209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2526'. [ 413.245695][T16210] pimreg: entered allmulticast mode [ 413.325243][T16217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2527'. [ 413.370160][T16219] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2528'. [ 413.381147][T16219] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2528'. [ 413.520732][T16222] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2529'. [ 413.695234][T16225] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2530'. [ 413.897878][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 413.932352][T16235] syzkaller0: entered promiscuous mode [ 413.940627][T16235] syzkaller0: entered allmulticast mode [ 414.137234][T16241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2536'. [ 414.212199][T16241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2536'. [ 414.281047][T16241] netlink: 'syz.1.2536': attribute type 1 has an invalid length. [ 414.541198][T16261] syzkaller1: entered promiscuous mode [ 414.546897][T16261] syzkaller1: entered allmulticast mode [ 415.040670][T16277] bond0: entered promiscuous mode [ 415.206470][T16282] netlink: 'syz.1.2545': attribute type 14 has an invalid length. [ 415.215383][T16282] netlink: 'syz.1.2545': attribute type 13 has an invalid length. [ 416.231964][T16210] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.280518][T16208] pimreg: left allmulticast mode [ 416.534101][T16293] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 416.689706][T16307] ipt_REJECT: TCP_RESET invalid for non-tcp [ 417.125982][T16332] netlink: 'syz.2.2562': attribute type 1 has an invalid length. [ 417.363571][T16332] 8021q: adding VLAN 0 to HW filter on device bond12 [ 417.387414][T16338] netlink: 'syz.1.2564': attribute type 11 has an invalid length. [ 417.828643][T16351] netlink: 'syz.0.2567': attribute type 1 has an invalid length. [ 417.861759][T16351] netlink: 'syz.0.2567': attribute type 13 has an invalid length. [ 417.943434][T16366] netlink: 'syz.0.2567': attribute type 1 has an invalid length. [ 418.013638][T16373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.194552][T16369] lo speed is unknown, defaulting to 1000 [ 419.203027][T16419] xt_hashlimit: max too large, truncated to 1048576 [ 419.224656][T16419] xt_bpf: check failed: parse error [ 419.384043][T16427] netlink: 'syz.2.2586': attribute type 1 has an invalid length. [ 419.526596][T16427] 8021q: adding VLAN 0 to HW filter on device bond13 [ 419.775847][T16436] netlink: 'syz.0.2589': attribute type 6 has an invalid length. [ 419.817777][T16436] IPv6: NLM_F_CREATE should be specified when creating new route [ 420.141835][T16442] nbd4: detected capacity change from 0 to 63 [ 420.176416][T16447] block nbd4: NBD_DISCONNECT [ 420.225201][T16447] block nbd4: Disconnected due to user request. [ 420.275488][T16447] block nbd4: shutting down sockets [ 420.323573][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.333003][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 420.346160][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.355448][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 420.370029][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.379624][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 420.387465][ C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.396595][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 420.404919][T10181] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.417190][T10181] Buffer I/O error on dev nbd4, logical block 0, async page read [ 420.425823][T10181] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.435695][T10181] Buffer I/O error on dev nbd4, logical block 1, async page read [ 420.461366][T10181] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.474589][T10181] Buffer I/O error on dev nbd4, logical block 2, async page read [ 420.489733][T10181] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.509537][T10181] Buffer I/O error on dev nbd4, logical block 3, async page read [ 420.527067][T10181] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.547519][T10181] Buffer I/O error on dev nbd4, logical block 0, async page read [ 420.565013][T10181] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 420.584680][T10181] Buffer I/O error on dev nbd4, logical block 1, async page read [ 420.634349][T10181] ldm_validate_partition_table(): Disk read failed. [ 420.655550][T10181] Dev nbd4: unable to read RDB block 0 [ 420.679392][T10181] nbd4: unable to read partition table [ 420.760207][T10181] ldm_validate_partition_table(): Disk read failed. [ 420.783100][T10181] Dev nbd4: unable to read RDB block 0 [ 420.804786][T10181] nbd4: unable to read partition table [ 420.936121][T10181] [ 420.938524][T10181] ====================================================== [ 420.945570][T10181] WARNING: possible circular locking dependency detected [ 420.952652][T10181] syzkaller #0 Not tainted [ 420.957186][T10181] ------------------------------------------------------ [ 420.964236][T10181] udevd/10181 is trying to acquire lock: [ 420.969896][T10181] ffffffff8ea854e0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 420.979789][T10181] [ 420.979789][T10181] but task is already holding lock: [ 420.987198][T10181] ffffffff901727e0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 420.997783][T10181] [ 420.997783][T10181] which lock already depends on the new lock. [ 420.997783][T10181] [ 421.008219][T10181] [ 421.008219][T10181] the existing dependency chain (in reverse order) is: [ 421.017351][T10181] [ 421.017351][T10181] -> #9 (uevent_sock_mutex){+.+.}-{4:4}: [ 421.025282][T10181] __mutex_lock+0x1a3/0x1550 [ 421.030436][T10181] kobject_uevent_net_broadcast+0x27e/0x560 [ 421.036978][T10181] kobject_uevent_env+0x55c/0x9e0 [ 421.042643][T10181] device_add+0x557/0xbb0 [ 421.047530][T10181] device_create+0x269/0x300 [ 421.052661][T10181] msr_device_create+0x33/0x50 [ 421.058148][T10181] cpuhp_invoke_callback+0x445/0x860 [ 421.064161][T10181] cpuhp_thread_fun+0x36b/0x780 [ 421.069653][T10181] smpboot_thread_fn+0x541/0xa50 [ 421.075137][T10181] kthread+0x388/0x470 [ 421.079748][T10181] ret_from_fork+0x514/0xb70 [ 421.084875][T10181] ret_from_fork_asm+0x1a/0x30 [ 421.090182][T10181] [ 421.090182][T10181] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 421.097815][T10181] cpuhp_thread_fun+0x127/0x780 [ 421.103470][T10181] smpboot_thread_fn+0x541/0xa50 [ 421.109042][T10181] kthread+0x388/0x470 [ 421.113659][T10181] ret_from_fork+0x514/0xb70 [ 421.118790][T10181] ret_from_fork_asm+0x1a/0x30 [ 421.124123][T10181] [ 421.124123][T10181] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 421.131880][T10181] cpus_read_lock+0x42/0x160 [ 421.137014][T10181] static_key_slow_inc+0x12/0x30 [ 421.142508][T10181] setup_udp_tunnel_sock+0x2fd/0x510 [ 421.148359][T10181] l2tp_tunnel_register+0xde2/0x1490 [ 421.154208][T10181] pppol2tp_connect+0x8b7/0x17c0 [ 421.159696][T10181] __sys_connect+0x312/0x450 [ 421.164827][T10181] __x64_sys_connect+0x7a/0x90 [ 421.170137][T10181] do_syscall_64+0x15f/0xf80 [ 421.175272][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.182056][T10181] [ 421.182056][T10181] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 421.189834][T10181] lock_sock_nested+0x41/0x100 [ 421.195149][T10181] inet_shutdown+0x6a/0x390 [ 421.200208][T10181] nbd_mark_nsock_dead+0x2e9/0x560 [ 421.205869][T10181] recv_work+0x1c2e/0x1d40 [ 421.210839][T10181] process_scheduled_works+0xb5d/0x1860 [ 421.217036][T10181] worker_thread+0xa53/0xfc0 [ 421.222170][T10181] kthread+0x388/0x470 [ 421.226872][T10181] ret_from_fork+0x514/0xb70 [ 421.231999][T10181] ret_from_fork_asm+0x1a/0x30 [ 421.237306][T10181] [ 421.237306][T10181] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 421.245078][T10181] __mutex_lock+0x1a3/0x1550 [ 421.250222][T10181] nbd_queue_rq+0x37b/0x1100 [ 421.255351][T10181] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 421.261458][T10181] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 421.268340][T10181] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 421.274977][T10181] blk_mq_run_hw_queue+0x348/0x4f0 [ 421.280633][T10181] blk_mq_dispatch_list+0xd16/0xe10 [ 421.286380][T10181] blk_mq_flush_plug_list+0x48d/0x570 [ 421.292302][T10181] __blk_flush_plug+0x3ed/0x4d0 [ 421.297713][T10181] __submit_bio+0x28d/0x580 [ 421.302776][T10181] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 421.308956][T10181] block_read_full_folio+0x599/0x830 [ 421.314788][T10181] filemap_read_folio+0x137/0x3b0 [ 421.320356][T10181] do_read_cache_folio+0x358/0x590 [ 421.326031][T10181] read_part_sector+0xb6/0x2b0 [ 421.331344][T10181] adfspart_check_ICS+0xb1/0x960 [ 421.336868][T10181] bdev_disk_changed+0x817/0x1770 [ 421.342457][T10181] blkdev_get_whole+0x380/0x510 [ 421.347857][T10181] bdev_open+0x31e/0xd30 [ 421.352658][T10181] blkdev_open+0x470/0x610 [ 421.357617][T10181] do_dentry_open+0x785/0x14e0 [ 421.362927][T10181] vfs_open+0x3b/0x340 [ 421.367533][T10181] path_openat+0x2e08/0x3860 [ 421.372669][T10181] do_file_open+0x23e/0x4a0 [ 421.377716][T10181] do_sys_openat2+0x113/0x200 [ 421.382937][T10181] __x64_sys_openat+0x138/0x170 [ 421.388330][T10181] do_syscall_64+0x15f/0xf80 [ 421.393480][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.400002][T10181] [ 421.400002][T10181] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 421.407458][T10181] __mutex_lock+0x1a3/0x1550 [ 421.412598][T10181] nbd_queue_rq+0xc6/0x1100 [ 421.417645][T10181] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 421.423743][T10181] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 421.430621][T10181] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 421.437152][T10181] blk_mq_run_hw_queue+0x348/0x4f0 [ 421.442812][T10181] blk_mq_dispatch_list+0xd16/0xe10 [ 421.448559][T10181] blk_mq_flush_plug_list+0x48d/0x570 [ 421.454489][T10181] __blk_flush_plug+0x3ed/0x4d0 [ 421.459886][T10181] __submit_bio+0x28d/0x580 [ 421.464949][T10181] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 421.471132][T10181] block_read_full_folio+0x599/0x830 [ 421.476975][T10181] filemap_read_folio+0x137/0x3b0 [ 421.482550][T10181] do_read_cache_folio+0x358/0x590 [ 421.488219][T10181] read_part_sector+0xb6/0x2b0 [ 421.493534][T10181] adfspart_check_ICS+0xb1/0x960 [ 421.499021][T10181] bdev_disk_changed+0x817/0x1770 [ 421.504601][T10181] blkdev_get_whole+0x380/0x510 [ 421.510014][T10181] bdev_open+0x31e/0xd30 [ 421.514817][T10181] blkdev_open+0x470/0x610 [ 421.519779][T10181] do_dentry_open+0x785/0x14e0 [ 421.525088][T10181] vfs_open+0x3b/0x340 [ 421.529700][T10181] path_openat+0x2e08/0x3860 [ 421.534866][T10181] do_file_open+0x23e/0x4a0 [ 421.539922][T10181] do_sys_openat2+0x113/0x200 [ 421.545325][T10181] __x64_sys_openat+0x138/0x170 [ 421.550726][T10181] do_syscall_64+0x15f/0xf80 [ 421.555929][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.562366][T10181] [ 421.562366][T10181] -> #3 (set->srcu){.+.+}-{0:0}: [ 421.569529][T10181] __synchronize_srcu+0xca/0x300 [ 421.575023][T10181] elevator_switch+0x1e8/0x7a0 [ 421.580340][T10181] elevator_change+0x2cc/0x450 [ 421.585655][T10181] elevator_set_default+0x36c/0x430 [ 421.591494][T10181] blk_register_queue+0x3e9/0x4e0 [ 421.597094][T10181] __add_disk+0x677/0xd50 [ 421.601963][T10181] add_disk_fwnode+0xfb/0x480 [ 421.607189][T10181] nbd_dev_add+0x72c/0xb50 [ 421.612141][T10181] nbd_init+0x168/0x1f0 [ 421.616849][T10181] do_one_initcall+0x250/0x870 [ 421.622147][T10181] do_initcall_level+0x104/0x190 [ 421.627628][T10181] do_initcalls+0x59/0xa0 [ 421.632516][T10181] kernel_init_freeable+0x2a6/0x3e0 [ 421.638266][T10181] kernel_init+0x1d/0x1d0 [ 421.643151][T10181] ret_from_fork+0x514/0xb70 [ 421.648281][T10181] ret_from_fork_asm+0x1a/0x30 [ 421.653611][T10181] [ 421.653611][T10181] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 421.661456][T10181] __mutex_lock+0x1a3/0x1550 [ 421.666598][T10181] elevator_change+0x1b3/0x450 [ 421.671906][T10181] elevator_set_none+0xb5/0x140 [ 421.677306][T10181] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 421.683653][T10181] nbd_start_device+0x17f/0xb10 [ 421.689065][T10181] nbd_genl_connect+0x165b/0x1cf0 [ 421.694641][T10181] genl_family_rcv_msg_doit+0x22a/0x330 [ 421.700743][T10181] genl_rcv_msg+0x61c/0x7a0 [ 421.705798][T10181] netlink_rcv_skb+0x232/0x4b0 [ 421.711119][T10181] genl_rcv+0x28/0x40 [ 421.715668][T10181] netlink_unicast+0x75c/0x8e0 [ 421.720996][T10181] netlink_sendmsg+0x813/0xb40 [ 421.726312][T10181] ____sys_sendmsg+0x972/0x9f0 [ 421.731874][T10181] ___sys_sendmsg+0x2a5/0x360 [ 421.737103][T10181] __x64_sys_sendmsg+0x1bd/0x2a0 [ 421.742680][T10181] do_syscall_64+0x15f/0xf80 [ 421.747824][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.754270][T10181] [ 421.754270][T10181] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 421.762916][T10181] blk_alloc_queue+0x546/0x680 [ 421.768243][T10181] __blk_mq_alloc_disk+0x197/0x390 [ 421.774014][T10181] nbd_dev_add+0x499/0xb50 [ 421.778985][T10181] nbd_init+0x168/0x1f0 [ 421.783706][T10181] do_one_initcall+0x250/0x870 [ 421.789046][T10181] do_initcall_level+0x104/0x190 [ 421.794556][T10181] do_initcalls+0x59/0xa0 [ 421.799438][T10181] kernel_init_freeable+0x2a6/0x3e0 [ 421.805179][T10181] kernel_init+0x1d/0x1d0 [ 421.810066][T10181] ret_from_fork+0x514/0xb70 [ 421.815205][T10181] ret_from_fork_asm+0x1a/0x30 [ 421.820514][T10181] [ 421.820514][T10181] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 421.827760][T10181] __lock_acquire+0x15a5/0x2cf0 [ 421.833343][T10181] lock_acquire+0x106/0x350 [ 421.838578][T10181] fs_reclaim_acquire+0x71/0x100 [ 421.844083][T10181] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 421.850437][T10181] __alloc_skb+0x1d0/0x7d0 [ 421.855396][T10181] alloc_uevent_skb+0x7d/0x230 [ 421.860716][T10181] kobject_uevent_net_broadcast+0x2fa/0x560 [ 421.867157][T10181] kobject_uevent_env+0x55c/0x9e0 [ 421.872731][T10181] nbd_config_put+0x14c/0x580 [ 421.877951][T10181] nbd_release+0xfe/0x140 [ 421.882831][T10181] bdev_release+0x536/0x650 [ 421.887898][T10181] blkdev_release+0x15/0x20 [ 421.892945][T10181] __fput+0x44f/0xa60 [ 421.897474][T10181] fput_close_sync+0x11f/0x240 [ 421.902777][T10181] __x64_sys_close+0x7e/0x110 [ 421.907995][T10181] do_syscall_64+0x15f/0xf80 [ 421.913142][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.919581][T10181] [ 421.919581][T10181] other info that might help us debug this: [ 421.919581][T10181] [ 421.929821][T10181] Chain exists of: [ 421.929821][T10181] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 421.929821][T10181] [ 421.942549][T10181] Possible unsafe locking scenario: [ 421.942549][T10181] [ 421.950013][T10181] CPU0 CPU1 [ 421.955398][T10181] ---- ---- [ 421.960779][T10181] lock(uevent_sock_mutex); [ 421.965432][T10181] lock(cpuhp_state-up); [ 421.972299][T10181] lock(uevent_sock_mutex); [ 421.979431][T10181] lock(fs_reclaim); [ 421.983433][T10181] [ 421.983433][T10181] *** DEADLOCK *** [ 421.983433][T10181] [ 421.991593][T10181] 3 locks held by udevd/10181: [ 421.996473][T10181] #0: ffff8880276f4350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 422.006174][T10181] #1: ffff888027773260 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0 [ 422.016922][T10181] #2: ffffffff901727e0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 422.027951][T10181] [ 422.027951][T10181] stack backtrace: [ 422.033877][T10181] CPU: 1 UID: 0 PID: 10181 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 422.033898][T10181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 422.033917][T10181] Call Trace: [ 422.033929][T10181] [ 422.033938][T10181] dump_stack_lvl+0xe8/0x150 [ 422.033961][T10181] print_circular_bug+0x2e1/0x300 [ 422.033986][T10181] check_noncircular+0x12e/0x150 [ 422.034011][T10181] __lock_acquire+0x15a5/0x2cf0 [ 422.034029][T10181] ? lockdep_unlock+0x5d/0xd0 [ 422.034044][T10181] ? __lock_acquire+0x146e/0x2cf0 [ 422.034068][T10181] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 422.034090][T10181] lock_acquire+0x106/0x350 [ 422.034107][T10181] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 422.034130][T10181] ? lock_acquire+0x106/0x350 [ 422.034150][T10181] fs_reclaim_acquire+0x71/0x100 [ 422.034174][T10181] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 422.034196][T10181] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 422.034219][T10181] ? __alloc_skb+0x1d0/0x7d0 [ 422.034237][T10181] ? __local_bh_enable_ip+0xd0/0x130 [ 422.034256][T10181] __alloc_skb+0x1d0/0x7d0 [ 422.034277][T10181] alloc_uevent_skb+0x7d/0x230 [ 422.034305][T10181] kobject_uevent_net_broadcast+0x2fa/0x560 [ 422.034333][T10181] kobject_uevent_env+0x55c/0x9e0 [ 422.034361][T10181] nbd_config_put+0x14c/0x580 [ 422.034382][T10181] nbd_release+0xfe/0x140 [ 422.034400][T10181] ? __pfx_nbd_release+0x10/0x10 [ 422.034416][T10181] bdev_release+0x536/0x650 [ 422.034444][T10181] ? __pfx_blkdev_release+0x10/0x10 [ 422.034460][T10181] blkdev_release+0x15/0x20 [ 422.034474][T10181] __fput+0x44f/0xa60 [ 422.034499][T10181] fput_close_sync+0x11f/0x240 [ 422.034518][T10181] ? __pfx_fput_close_sync+0x10/0x10 [ 422.034540][T10181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.034558][T10181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.034575][T10181] __x64_sys_close+0x7e/0x110 [ 422.034595][T10181] do_syscall_64+0x15f/0xf80 [ 422.034616][T10181] ? clear_bhb_loop+0x40/0x90 [ 422.034640][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.034657][T10181] RIP: 0033:0x7f123eea7407 [ 422.034673][T10181] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 422.034687][T10181] RSP: 002b:00007ffebec8c950 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 422.034706][T10181] RAX: ffffffffffffffda RBX: 00007f123f686880 RCX: 00007f123eea7407 [ 422.034718][T10181] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 422.034728][T10181] RBP: 00007f123f6866e8 R08: 0000000000000000 R09: 0000000000000000 [ 422.034739][T10181] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 422.034749][T10181] R13: 000056284294c190 R14: 0000000000000008 R15: 00005628429656d0 [ 422.034768][T10181]